mrnebbi
commented
1 year ago @peteralewis We're also having this issue. Did you find a solution?
Additional info
Craft version: 3.7.46 Craft Commerce version: 3.4.15 PHP version: 7.4.33 Plugins & versions: Sage Pay for Craft Commerce: 4.0.0
thisiscap
Description
In basic use and testing, the transactions work fine, but when the 3DSv2 challenge kicks in, it fails. Customers gets sent to a 404 page on the website from the payment page. The error on the transaction (in Craft CMS) is:
Gateway Message: "2021 : Please redirect your customer to the ACSURL, passing CReq."The ACSURL is passed with the response from SagePay, e.g.
"ACSURL": "https://www.rsa3dsauth.co.uk/3ds2/LbgRedirectChallenge?issuer=hbos",The CReq is also passed, so all the relevant data is sent from SagePay, but the plugin (or the omnipay library) is completely ignoring this and not doing anything. A search in both this source code and the omnipay library shows no reference to
ACSURL.Steps to reproduce
Unknown! We can't replicate in tests as the test triggers provided by Opayo don't trigger 3DSv2 and the real cards we've tested on the production site don't fire 3DSv2 either. We're seeing about 15% of customers hitting the problem (as in getting requested by their bank with the 2-factor authentication method).
Additional info