Decline an authentication

POST 
/v1/authentications/:authentication_id/decline

Tells the Access Control Server the cardholder refused, or that your step-up failed. The purchase fails at the merchant.

Declining is worth doing rather than letting the challenge expire: the cardholder who taps "this wasn't me" gets an immediate answer, and you get a record of a refusal instead of a timeout.

Requires the authentications:write scope.

Request

Responses

200

The authentication, now declined.

403

Credentials are valid but not permitted. Do not retry.

404

The resource does not exist, or belongs to another organization. The two are deliberately indistinguishable.

422

Well-formed but fails a business rule.