How to handle authentication such as OTP in 2C2P

E

2

7

     public function process_payment( $order_id ) {
        
        
        $result = $this->request->result( $order );
        
        error_log( print_r( $result, true ) );
    
        if ( in_array( $result->response->ApiResponse->ResponseCode, array( 'PC-B050000', 'PC-B050001', 'PC-B050002' ) ) ) {
    
            // Success but pending, requires account verification like OTP.
            if ( isset( $result->response->Data->paymentIncompleteResult->aresACSChallenge->transStatus ) && 'C' === $result->response->Data->paymentIncompleteResult->aresACSChallenge->transStatus ) {
    
              // Handle OTP verification etc.
             }
     
            return;
        }
    }

How do I handle OTP Verification? It gives the response like:

Elenoraelenore answered 5/4 at 10:29 Comment(0)

S

2

2C2P expects your application to handle the user interface part so that user can enter the OTP for verification. This script takes the OTP provided by the user, checks it with the 2C2P payment gateway to confirm it's correct, and then either finalizes the transaction if the OTP is verified or cancels it if not.

require 'vendor/autoload.php';

use GuzzleHttp\Client;

$endpoint = 'https://demo2.2c2p.com/2C2PFrontEnd/RedirectV3/payment'; // Change this to the actual API endpoint
$apiKey = 'YOUR_API_KEY'; // Your 2C2P API key
$merchantId = 'YOUR_MERCHANT_ID'; // Your 2C2P merchant ID
$transactionId = $_SESSION['transactionId']; 

// User provided OTP from the form
$otp = filter_input(INPUT_POST, 'otp', FILTER_SANITIZE_STRING);

// Prepare the data for submission
$data = [
    'merchant_id' => $merchantId,
    'transaction_id' => $transactionId,
    'otp' => $otp,
    'api_key' => $apiKey, 
];

// Initialize Guzzle HTTP client
$client = new Client();

try {
    // Make the HTTP request to 2C2P API for OTP submission
    $response = $client->request('POST', $endpoint, [
        'form_params' => $data,
        'verify' => false // Only use this in development, SSL verification should be enabled in production
    ]);


 // Check the status of the response
    if ($response->getStatusCode() == 200) {
        $responseBody = json_decode($response->getBody(), true);
        if ($responseBody['response_code'] == '0000') {
            echo "OTP verified successfully, transaction completed.";
        } else {
            echo "Failed to verify OTP: " . $responseBody['response_description'];
        }
    } else {
        echo "HTTP error occurred: " . $response->getStatusCode();
    }
} catch (Exception $e) {
    // Handle any errors that may have occurred
    echo "An error occurred: " . $e->getMessage();
}

Sennar answered 30/4 at 8:28 Comment(0)

S

-1

You are receving the verification URL $result->response->Data->paymentIncompleteResult->aresACSChallenge->acsURL To handle OTP verification, you need to redirect the user to the provided acsURL

<?php
if (isset($result->response->Data->paymentIncompleteResult->aresACSChallenge->acsURL)) {
    $acsUrl = $result->response->Data->paymentIncompleteResult->aresACSChallenge->acsURL;
    
    // Redirect the user to the ACS URL for OTP verification
    header("Location: $acsUrl");
    exit;
} else {
    // Handle case where ACS URL is not provided
}

Selfsufficient answered 29/4 at 23:46 Comment(0)

Recommended topics

Hot tags