academe / SagePay-Integration

HTTP Messages for the Sage Pay REST (Pi) gateway.
GNU General Public License v3.0
9 stars 5 forks source link

Support security-code action #46

Open judgej opened 7 years ago

judgej commented 7 years ago

This action links a saved cardIdentifier to a new merchantSessionKey with a freshly entered securityCode (CVV) to perform a 3D Secure check when re-using a saved card token, for extra security.

What strikes me as odd if that the examples given show how it would be used from the server side only, which you would want to avoid for PCI reasons. With the right PCI accreditation it can be done, so this library should support it, but in most cases it would be a client-side call only.