Card Present using REST API

[rmalhotra]

Hi,

We are using the CyberSource Rest API to perform Card Present Transaction, while making the call using fields described in
https://developer.visa.com/products/cybersource/reference#cybersource__cybs__v1__authorize found the security error. The response code is 400 and message returned is "Please contact Security Services Team"

https://developer.visa.com/products/cybersource/guides#creating_a_card_emv_authorization_request


Should we get anything enabled to perform card present transactions

Thanks
Sharad

[ricardo_visa · Accepted solution]

Hi Sharad,

I'm looking into this for you. I will get back to you shortly. 

Thank you!

Ricardo

[ricardo_visa · Accepted solution]

Hi Sharad,

Can you please share Request Payload and the Correlation ID so we can look into this for you?

Thank you,
Ricardo

[rmalhotra · Accepted solution]

Hi Ricardo,

Attached is the payload in JSON format. Also find response.html for this request.

Let me know if you need anything else

Thanks

Sharad

[ricardo_visa · Accepted solution]

Hi Sharad, 

“trackData”  field has SQL injection characters which will be rejected by the VDP gateway (ARM) Security filter, we tried the call removing the invalid chars and could get the response from CYBS.

Hope this helps.

-Ricardo 

[rmalhotra · Accepted solution]

Hi Ricardo,

Thanks for the update!

But trackData as standard would require ; (semicolon), =(equals), ?(question mark). How could i send them? Is there any escaping approaching that is followed.

Removing those characters returns a json response but with error: invalid trackData

Here is a quick reference of characters used

https://en.wikipedia.org/wiki/Magnetic_stripe_card look at the Track 2 section

Help me out in resolving this

Thanks

Sharad