/*
 * this sample code is not specific to the Global Payments SDK and is intended as a simple example and
 * should not be treated as Production-ready code. You'll need to add your own message parsing and 
 * security in line with your application or website
 */
@RequestMapping("/methodUrlResponse")
public void consumeMethodUrlResponse(String threeDSMethodData) throws UnsupportedEncodingException {

   // sample ACS response for Method URL Response Notification
   // String threeDSMethodData = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSJ9";

   try {
      byte[] decodedBytes = Base64.getDecoder().decode(threeDSMethodData);
      String methodUrlResponseString = new String(decodedBytes);
      Gson gson = new Gson();

      // map to a custom class MethodUrlResponse
      MethodUrlResponse response = gson.fromJson(methodUrlResponseString, MethodUrlResponse.class);

      String threeDSServerTransID = response.getThreeDSServerTransID(); // // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5

      // TODO: notify client-side that the Method URL step is complete
      // optional to return decoded JSON string, see below
   }

   catch(Exception e) {
      // TODO: add your exception handling here
   }
}

<?php
/*
 * this sample code is not specific to the Global Payments SDK and is intended as a simple example and
 * should not be treated as Production-ready code. You'll need to add your own message parsing and 
 * security in line with your application or website
 */
$threeDSMethodData = $_REQUEST["threeDSMethodData"];

// sample ACS response for Method URL Response Notification
// $threeDSMethodData = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSJ9";

try {
   $decodedThreeDSMethodData = base64_decode($threeDSMethodData);
   $convertedThreeDSMethodData = json_decode($decodedThreeDSMethodData, true);
   $serverTransID = $convertedThreeDSMethodData['threeDSServerTransID']; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5  

   // TODO: notify client-side that the Method URL step is complete
   // optional to return decoded JSON string, see below
} catch (Exception $exce) {
   // TODO: Add your exception handling here
}

/*
 * this sample code is not specific to the Global Payments SDK and is intended as a simple example and
 * should not be treated as Production-ready code. You'll need to add your own message parsing and 
 * security in line with your application or website
 */
var threeDSMethodData = Request.Form["threeDSMethodData"];

// sample ACS response for Method URL Response Notification
// threeDSMethodData = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSJ9";

try
{
   byte[] data = Convert.FromBase64String(threeDSMethodData);
   string methodUrlResponseString = Encoding.UTF8.GetString(data);

   // map to a custom class MethodUrlResponse
   MethodUrlResponse methodUrlResponse = JsonConvert.DeserializeObject<MethodUrlResponse>(methodUrlResponseString);

   string threeDSServerTransID = methodUrlResponse.ThreeDSServerTransID; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5

   // TODO: notify client-side that the Method URL step is complete (optional - return decoded JSON string), see below
}

catch (Exception exce)
{
   // TODO: add your exception handling here
}

<script src="globalpayments-3dsecure.js"></script>
<script>
GlobalPayments.ThreeDSecure.handleMethodNotification("threeDSServerTransID");
</script>

/*
 * this sample code is not specific to the Global Payments SDK and is intended as a simple example and
 * should not be treated as Production-ready code. You'll need to add your own message parsing and 
 * security in line with your application or website
 */
@RequestMapping("/challengeUrlResponse")
public void consumeChallengeUrlResponse(@RequestParam("cres") String cres) throws UnsupportedEncodingException {

   // example CRes (Challenge Result) sent by the ACS
   /* String cres = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSIsImF"
     + "jc1RyYW5zSUQiOiIxM2M3MDFhMy01YTg4LTRjNDUtODllOS1lZjY1ZTUwYThiZjkiLCJjaGFsbGVuZ2VDb21wbGV0a"
     + "W9uSW5kIjoiWSIsIm1lc3NhZ2VUeXBlIjoiQ3JlcyIsIm1lc3NhZ2VWZXJzaW9uIjoiMi4xLjAiLCJ0cmFuc"
     + "1N0YXR1cyI6IlkifQ==";
     */

   try {

      byte[] decodedBytes = Base64.getDecoder().decode(cres);
      String challengeUrlResponseString = new String(decodedBytes);
      Gson gson = new Gson();

      // map to a custom class ChallengeUrlResponse which has String variables for each response element
      ChallengeUrlResponse challengeUrlResponse = gson.fromJson(challengeUrlResponseString, ChallengeUrlResponse.class);

      String threeDSServerTransID = challengeUrlResponse.getThreeDSServerTransID(); // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
      String acsTransId = challengeUrlResponse.getAcsTransID(); // 13c701a3-5a88-4c45-89e9-ef65e50a8bf9
      String messageType = challengeUrlResponse.getMessageType(); // Cres
      String messageVersion = challengeUrlResponse.getMessageVersion(); // 2.1.0
      String transStatus = challengeUrlResponse.getTransStatus(); // Y

      // TODO: simple example of how to prepare the JSON string for JavaScript Library (optional)
      Hashtable<String, String> responseObject = new Hashtable<String, String>();
      responseObject.put("threeDSServerTransID", threeDSServerTransID);
      responseObject.put("transStatus", transStatus);

      String responseString = gson.toJson(responseObject);

      // TODO: notify client-side that the Challenge step is complete, see below
   }

   catch(Exception e) {
      // TODO: Add your exception handling here
   }
}

<?php
/*
 * this sample code is not specific to the Global Payments SDK and is intended as a simple example and
 * should not be treated as Production-ready code. You'll need to add your own message parsing and 
 * security in line with your application or website
 */
$cres = $_REQUEST['cres'];

/* $cres = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSIsImF"
 * . "jc1RyYW5zSUQiOiIxM2M3MDFhMy01YTg4LTRjNDUtODllOS1lZjY1ZTUwYThiZjkiLCJjaGFsbGVuZ2VDb21wbGV0a"
 * . "W9uSW5kIjoiWSIsIm1lc3NhZ2VUeXBlIjoiQ3JlcyIsIm1lc3NhZ2VWZXJzaW9uIjoiMi4xLjAiLCJ0cmFuc"
 * . "1N0YXR1cyI6IlkifQ==";
 */

try {
   $decodedString = base64_decode($cres);
   $convertedObject = json_decode($decodedString, true);

   $serverTransID = $convertedObject['threeDSServerTransID']; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
   $acsTransID = $convertedObject['acsTransID']; // 13c701a3-5a88-4c45-89e9-ef65e50a8bf9
   $messageType = $convertedObject['messageType']; // Cres
   $messageVersion = $convertedObject['messageVersion']; // 2.1.0
   $transStatus = $convertedObject['transStatus']; // Y

   // TODO: notify client-side that the Challenge step is complete, see below
} catch (Exception $exce) {
   // TODO: Add your exception handling here
}

/*
 * this sample code is not specific to the Global Payments SDK it is provided as
 * a simple example of how to handle the Challenge Response
 */
 var cres = Request.Form["cres"];

// Example CRes (Challenge Result) sent by the ACS
// var cRes = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSIsImF"
// + "jc1RyYW5zSUQiOiIxM2M3MDFhMy01YTg4LTRjNDUtODllOS1lZjY1ZTUwYThiZjkiLCJjaGFsbGVuZ2VDb21wbGV0a"
// + "W9uSW5kIjoiWSIsIm1lc3NhZ2VUeXBlIjoiQ3JlcyIsIm1lc3NhZ2VWZXJzaW9uIjoiMi4xLjAiLCJ0cmFuc"
// + "1N0YXR1cyI6IlkifQ==";

try
{
   byte[] data = Convert.FromBase64String(cres);
   string challengeUrlResponseString = Encoding.UTF8.GetString(data);
   // map to a custom class ChallengeUrlResponse which has String variables for each response element
   ChallengeUrlResponse challengeUrlResponse = JsonConvert.DeserializeObject<ChallengeUrlResponse>(challengeUrlResponseString);

   var threeDSServerTransID = challengeUrlResponse.ThreeDSServerTransID; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
   var acsTransId = challengeUrlResponse.AcsTransID; // 13c701a3-5a88-4c45-89e9-ef65e50a8bf9
   var messageType = challengeUrlResponse.MessageType; // Cres
   var messageVersion = challengeUrlResponse.MessageVersion; // 2.1.0
   var transStatus = challengeUrlResponse.TransStatus; // Y

   // TODO: prepare the JSON string for JavaScript Library (optional)
   challengeUrlResponseString = JsonConvert.SerializeObject(new
   {
      threeDSServerTransID = threeDSServerTransID,
      transStatus = transStatus
   });

   // TODO: notify client-side that the Challenge URL step is complete, see below
}

catch (Exception exce)
{
   // TODO: add your exception handling here
}

<script src="globalpayments-3dsecure.js"></script>
<script>
GlobalPayments.ThreeDSecure.handleChallengeNotification('"threeDSServerTransID":"threeDSServerTransID","transStatus":"transStatus"');
</script>

<script src="globalpayments-3dsecure.js"></script>
<script>
const {
   checkVersion,
   getBrowserData,
   initiateAuthentication,
} = GlobalPayments.ThreeDSecure;

// assign the button that will trigger authentication
document.addEventListener('DOMContentLoaded', () => {
   const checkVersionButton = document.getElementById('startButton');
   if (!checkVersionButton) {
      return;
   }

   checkVersionButton.addEventListener('click', async (e) => {
      e.preventDefault();
      // check if the card is enrolled for 3D Secure 2

      try {
         versionCheckData = await checkVersion('/ThreeDSecure2/CheckVersion', {
            card: {
               number: document.getElementById('card-number').value
            },
         });

         if (versionCheckData.error) {
            // TODO: handle the scenario where the card is not enrolled for 3D Secure 2
            return;
         }
      }

      catch (e) {
         // TODO: add your error handling here
      }
      // continued in next step

// TODO: consume card data sent from the JS Library (requestJson)

// configure client & request settings
GatewayConfig config = new GatewayConfig();
config.setMerchantId("MerchantId");
config.setAccountId("internet");
config.setSharedSecret("secret");
config.setMethodNotificationUrl("https://www.example.com/methodNotificationUrl");
config.setChallengeNotificationUrl("https://www.example.com/challengeNotificationUrl");
config.setMerchantContactUrl("https://www.example.com/about");
config.setSecure3dVersion(Secure3dVersion.TWO);
ServicesContainer.configureService(config);

// add cardholder data
// Frictionless Example: 4263970000005262
// Challenge Example: 4012001038488884
CreditCardData card = new CreditCardData();
card.setNumber(requestJson.card.number);

ThreeDSecure threeDSecureData = new ThreeDSecure();

try {
   threeDSecureData = Secure3dService.checkEnrollment(card).execute();
}

catch(ApiException exce)
{
   // TODO: add your error handling here
}

Boolean enrolled = threeDSecureData.isEnrolled(); // true
// if enrolled, the available response data
String serverTransactionId = threeDSecureData.getServerTransactionId(); // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
String dsStartProtocolVersion = threeDSecureData.getDirectoryServerStartVersion(); // 2.1.0
String dsEndProtocolVersion = threeDSecureData.getDirectoryServerEndVersion(); // 2.1.0
String acsStartProtocolVersion = threeDSecureData.getAcsStartVersion(); // 2.1.0
String acsEndProtocolVersion = threeDSecureData.getAcsEndVersion(); // 2.1.0
String methodUrl = threeDSecureData.getIssuerAcsUrl(); // https://www.acsurl.com/method
String encodedMethodData = threeDSecureData.getPayerAuthenticationRequest(); // Base64 encoded string

// simple example of how to prepare the JSON string for JavaScript Library
Hashtable<String, String> responseObject = new Hashtable<String, String>();
responseObject.put("enrolled", enrolled.toString());

if (enrolled == true) {
   responseObject.put("serverTransactionId", serverTransactionId);
   responseObject.put("methodUrl", methodUrl);
   responseObject.put("methodData", encodedMethodData);
}

Gson gson = new Gson();
String responseString = gson.toJson(responseObject);

/*
/ TODO: pass the Enrolled status, Method URL and Encoded Method Data (if supported) to the client-side
/ Sample string: {"enrolled":"True","serverTransactionId":"6da7ecab-666d-4a3b-b952-cc1d583085b6","methodUrl":"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs","methodData":"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiNmRhN2VjYWItNjY2ZC00YTNiLWI5NTItY2MxZDU4MzA4NWI2IiwKICAidGhyZWVEU01ldGhvZE5vdGlmaWNhdGlvblVSTCIgOiAiaHR0cDovL2xvY2FsaG9zdDo2MDUxNy9UaHJlZURTZWN1cmUyL01ldGhvZFVybFJlc3BvbnNlIgp9"}
*/

<?php
require_once('vendor/autoload.php');

use GlobalPayments\Api\ServiceConfigs\Gateways\GpEcomConfig;
use GlobalPayments\Api\ServicesContainer;
use GlobalPayments\Api\Services\Secure3dService;
use GlobalPayments\Api\PaymentMethods\CreditCardData;
use GlobalPayments\Api\Entities\ThreeDSecure;
use GlobalPayments\Api\Entities\Address;
use GlobalPayments\Api\Entities\BrowserData;
use GlobalPayments\Api\Entities\Enums\Secure3dVersion;
use GlobalPayments\Api\Entities\Enums\AddressType;
use GlobalPayments\Api\Entities\Enums\MethodUrlCompletion;
use GlobalPayments\Api\Entities\Transaction;
use GlobalPayments\Api\Entities\Exceptions\ApiException;

// TODO: consume card data sent from the JS Library ($requestData)

// configure client & request settings
$config = new GpEcomConfig();
$config->merchantId = "MerchantId";
$config->accountId = "internet";
$config->sharedSecret = "secret";
$config->methodNotificationUrl = "https://www.example.com/methodNotificationUrl";
$config->challengeNotificationUrl = "https://www.example.com/challengeNotificationUrl";
$config->merchantContactUrl = "https://www.example.com/about";
$config->secure3dVersion = Secure3dVersion::TWO;
ServicesContainer::configureService($config);

// add cardholder data
// Frictionless Example: 4263970000005262
// Challenge Example: 4012001038488884
$card = new CreditCardData();
$card->number = $requestData['number'];

try {
   $threeDSecureData = Secure3dService::checkEnrollment($card)->execute(Secure3dVersion::TWO);
} catch (ApiException $e) {
   // TODO: add your error handling here
}

$enrolled = $threeDSecureData->enrolled; // TRUE
// if enrolled, the available response data
$serverTransactionId = $threeDSecureData->serverTransactionId; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
$dsStartProtocolVersion = $threeDSecureData->directoryServerStartVersion; // 2.1.0
$dsEndProtocolVersion = $threeDSecureData->directoryServerEndVersion; // 2.1.0
$acsStartProtocolVersion = $threeDSecureData->acsStartVersion; // 2.1.0
$acsEndProtocolVersion = $threeDSecureData->acsEndVersion; // 2.1.0
$methodUrl = $threeDSecureData->issuerAcsUrl; // https://www.acsurl.com/method
$encodedMethodData = $threeDSecureData->payerAuthenticationRequest; // Base64 encoded string

// simple example of how to prepare the JSON string for JavaScript Library
$responseJson = array(
   "enrolled" => $enrolled
);

if ($enrolled === true) {
   $responseJson["serverTransactionId"] = $serverTransactionId;
   $responseJson["methodUrl"] = $methodUrl;
   $responseJson["methodData"] = $encodedMethodData;
}

$responseJson = json_encode($responseJson);

/*
 * TODO: pass the Enrolled status, Method URL and Encoded Method Data (if supported) to the client-side
 * Sample string: {"enrolled":"True","serverTransactionId":"6da7ecab-666d-4a3b-b952-cc1d583085b6","methodUrl":"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs","methodData":"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiNmRhN2VjYWItNjY2ZC00YTNiLWI5NTItY2MxZDU4MzA4NWI2IiwKICAidGhyZWVEU01ldGhvZE5vdGlmaWNhdGlvblVSTCIgOiAiaHR0cDovL2xvY2FsaG9zdDo2MDUxNy9UaHJlZURTZWN1cmUyL01ldGhvZFVybFJlc3BvbnNlIgp9"}
 */

// TODO: consume card data sent from the JS Library (requestJson)

// configure client & request settings
ServicesContainer.ConfigureService(new GpEcomConfig
{
   MerchantId = "MerchantId",
   AccountId = "internet",
   SharedSecret = "secret",
   MethodNotificationUrl = "https://www.example.com/methodNotificationUrl",
   ChallengeNotificationUrl = "https://www.example.com/challengeNotificationUrl",
   MerchantContactUrl = "https://www.example.com/about",
   Secure3dVersion = Secure3dVersion.Two
});

// add cardholder data
CreditCardData card = new CreditCardData
{
   Number = requestJson.card.number
};

ThreeDSecure threeDSecureData = new ThreeDSecure();

try
{
   threeDSecureData = Secure3dService.CheckEnrollment(card)
      .Execute();
}

catch (ApiException exce)
{
   // TODO: add your error handling here
}

var enrolled = threeDSecureData.Enrolled; // True
// if enrolled, the available response data
var serverTransactionId = threeDSecureData.ServerTransactionId; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
var dsStartProtocolVersion = threeDSecureData.DirectoryServerStartVersion; // 2.1.0
var dsEndProtocolVersion = threeDSecureData.DirectoryServerEndVersion; // 2.1.0
var acsStartProtocolVersion = threeDSecureData.AcsStartVersion; // 2.1.0
var acsEndProtocolVersion = threeDSecureData.AcsEndVersion; // 2.1.0
var methodUrl = threeDSecureData.IssuerAcsUrl; // https://www.acsurl.com/method
var encodedMethodData = threeDSecureData.PayerAuthenticationRequest; // Base64 encoded string

// TODO: simple example of how to prepare the JSON string for JavaScript Library
string versionCheckResponse;

if (enrolled == "True")
{
   versionCheckResponse = JsonConvert.SerializeObject(new
   {
      enrolled = enrolled,
      serverTransactionId = serverTransactionId,
      methodUrl = methodUrl,
      methodData = encodedMethodData
   });
}

else
{
   versionCheckResponse = JsonConvert.SerializeObject(new
   {
      enrolled = enrolled
   });

}
/*
/ TODO: pass the Enrolled status, Method URL and Encoded Method Data (if supported) to the client-side
/ Sample string: {"enrolled":"True","serverTransactionId":"6da7ecab-666d-4a3b-b952-cc1d583085b6","methodUrl":"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs","methodData":"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiNmRhN2VjYWItNjY2ZC00YTNiLWI5NTItY2MxZDU4MzA4NWI2IiwKICAidGhyZWVEU01ldGhvZE5vdGlmaWNhdGlvblVSTCIgOiAiaHR0cDovL2xvY2FsaG9zdDo2MDUxNy9UaHJlZURTZWN1cmUyL01ldGhvZFVybFJlc3BvbnNlIgp9"}
*/

// continued from previous step
      try {
         authenticationData = await initiateAuthentication('/ThreeDSecure2/InitiateAuthentication', {
            serverTransactionId: checkVersionData.serverTransactionId,
            methodUrlComplete: true,
            card: {
               expiryMonth: document.getElementById('expiry-date-mm').value,
               expiryYear: document.getElementById('expiry-date-yy').value,
               securityCode: document.getElementById('cvn').value,
               cardHolderName: document.getElementById('card-holder-name').value
            },
            challengeWindow: {
               windowSize: ChallengeWindowSize.FullScreen,
               displayMode: 'lightbox',
            }
            // order: {}, // optional if data available on client-side
            // payer: {}, // optional if data available on client-side
         });

         // frictionless authentication success and authorization success
         if (authenticationData.result == "AUTHORIZATION_SUCCESS") {
            // TODO: proceed to success page or display success information
         }

         // frictionless authentication success and authorization failure
         else if (authenticationData.result == "AUTHORIZATION_FAILURE") {
            // TODO: proceed to failure page or display decline information
         }

         // frictionless authentication failure
         else if (authenticationData.result == "AUTHENTICATION_FAILURE") {
            // TODO: proceed to failure page or display failed authentication information
         }
         // continued in next step

// TODO: consume data sent from the JS Library (requestJson)

// add to existing card object or create a new one
// CreditCardData card = new CreditCardData();
// card.setNumber(requestJson.card.number);
card.setExpMonth(requestJson.card.expiryMonth);
card.setExpYear(requestJson.card.expiryYear);
card.setCvn(requestJson.card.securityCode);
card.setCardHolderName(requestJson.card.cardHolderName);

// add the customer's billing address
Address billingAddress = new Address();
billingAddress.setStreetAddress1("Apartment 852");
billingAddress.setStreetAddress2("Complex 741");
billingAddress.setStreetAddress3("Unit 4");
billingAddress.setCity("Chicago");
billingAddress.setPostalCode("50001");
billingAddress.setState("IL");
billingAddress.setCountryCode("840");

// Add the customer's shipping address
Address shippingAddress = new Address();
shippingAddress.setStreetAddress1("Flat 456");
shippingAddress.setStreetAddress2("House 789");
shippingAddress.setStreetAddress3("Basement Flat");
shippingAddress.setCity("Halifax");
shippingAddress.setPostalCode("W5 9HR");
shippingAddress.setCountryCode("826");

// Add captured browser data from the client-side and server-side
BrowserData browserData = new BrowserData();
browserData.setAcceptHeader("text/html,application/xhtml+xml,application/xml;q=9,image/webp,img/apng,/;q=0.8");
browserData.setColorDepth(requestJson.browserData.colorDepth);
browserData.setIpAddress("123.123.123.123");
browserData.setJavaEnabled(requestJson.browserData.javaEnabled);
browserData.setLanguage(requestJson.browserData.language);
browserData.setScreenHeight(requestJson.browserData.screenHeight);
browserData.setScreenWidth(requestJson.browserData.screenWidth);
browserData.setChallengeWindowSize(requestJson.challengeWindow.windowSize);
browserData.setTimezone(requestJson.browserData.timezoneOffset);
browserData.setUserAgent(requestJson.browserData.userAgent);

ThreeDSecure threeDSecureData = new ThreeDSecure();
threeDSecureData.setServerTransactionId(requestJson.serverTransactionId);

try {
   // initiate the 3D Secure 2 authentication request
   threeDSecureData = Secure3dService.initiateAuthentication(card, threeDSecureData)
      .withAmount(new BigDecimal("10.01"))
      .withCurrency("USD")
      .withOrderCreateDate(DateTime.parse("2019-09-09T11:19:12"))
      .withCustomerEmail("james.mason@example.com")
      .withAddress(shippingAddress, AddressType.Billing)
      .withAddress(billingAddress, AddressType.Shipping)
      .withBrowserData(browserData)
      .withMethodUrlCompletion(MethodUrlCompletion.Yes)
      .withMobileNumber("44", "7123456789")
      .execute();
}

catch(ApiException exce) {
   // TODO: add your error handling here
}

String status = threeDSecureData.getStatus();

<?php
// TODO: consume data sent from the JS Library ($requestData)

// add to existing card object or create a new one
// $card = new CreditCardData();
// $card->number = $requestData['number'];
$card->expMonth = $requestData['expiryMonth'];
$card->expYear = $requestData['expiryYear'];
$card->cvn = $requestData['securityCode'];
$card->cardHolderName = $requestData['cardHolderName'];

// Add the customer's billing address
$billingAddress = new Address();
$billingAddress->streetAddress1 = "Apartment 852";
$billingAddress->streetAddress2 = "Complex 741";
$billingAddress->streetAddress3 = "Unit 4";
$billingAddress->city = "Chicago";
$billingAddress->state = "IL";
$billingAddress->postalCode = "50001";
$billingAddress->countryCode = "840";

// Add the customer's shipping address
$shippingAddress = new Address();
$shippingAddress->streetAddress1 = "Flat 456";
$shippingAddress->streetAddress2 = "House 789";
$shippingAddress->streetAddress3 = "Basement Flat";
$shippingAddress->city = "Halifax";
$shippingAddress->postalCode = "W5 9HR";
$shippingAddress->countryCode = "826";

// Add captured browser data from the client-side and server-side 
// $browserValues = $requestData['browserData'];
$browserData = new BrowserData();
$browserData->acceptHeader = "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8";
$browserData->colorDepth = $browserValues["colorDepth"];
$browserData->ipAddress = "123.123.123.123";
$browserData->javaEnabled = $browserValues["javaEnabled"];
$browserData->language = $browserValues["language"];
$browserData->screenHeight = $browserValues["screenHeight"];
$browserData->screenWidth = $browserValues["screenWidth"];
$browserData->challengWindowSize = $browserValues["challengWindowSize"];
$browserData->timeZone = $browserValues["timeZone"];
$browserData->userAgent = $browserValues["userAgent"];

$threeDSecureData = new ThreeDSecure();
$threeDSecureData->serverTransactionId = $requestData["serverTransactionId"];

try {
   $threeDSecureData = Secure3dService::initiateAuthentication($card, $threeDSecureData)
      ->withAmount(10.01)
      ->withCurrency("USD")
      ->withOrderCreateDate(date("Y-m-d H:i:s"))
      ->withCustomerEmail("james.mason@example.com")
      ->withAddress($billingAddress, AddressType::BILLING)
      ->withAddress($shippingAddress, AddressType::SHIPPING)
      ->withBrowserData($browserData)
      ->withMethodUrlCompletion(MethodUrlCompletion::YES)
      ->withMobileNumber("44", "7123456789")
      ->execute(Secure3dVersion::TWO);
} catch (ApiException $e) {
   // TODO: add your error handling here
}

$status = $threeDSecureData->status;

// TODO: consume data sent from the JS Library (requestJson)

// add to existing card object or create a new one
// CreditCardData card = new CreditCardData();
// card.Number = requestJson.card.number;
card.ExpMonth = requestJson.card.expiryMonth;
card.ExpYear = requestJson.card.expiryYear;
card.Cvn = requestJson.card.securityCode;
card.CardHolderName = requestJson.card.cardHolderName;

// Add the customer's billing address
Address billingAddress = new Address
{
   StreetAddress1 = "Apartment 852",
   StreetAddress2 = "Complex 741",
   StreetAddress3 = "Unit 4",
   City = "Chicago",
   PostalCode = "50001",
   State = "IL",
   CountryCode = "840"
};

// Add the customer's shipping address
Address shippingAddress = new Address
{
   StreetAddress1 = "Flat 456",
   StreetAddress2 = "House 789",
   StreetAddress3 = "Basement Flat",
   City = "Halifax",
   PostalCode = "W5 9HR",
   CountryCode = "826"
};

// Add captured browser data from the client-side and server-side
BrowserData browserData = new BrowserData
{
   AcceptHeader = Request.ServerVariables["HTTP_ACCEPT"],
   ColorDepth = requestJson.browserData.colorDepth,
   IpAddress = Request.ServerVariables["REMOTE_ADDR"],
   JavaEnabled = requestJson.browserData.javaEnabled,
   Language = requestJson.browserData.language,
   ScreenHeight = requestJson.browserData.screenHeight,
   Timezone = requestJson.browserData.timezoneOffset,
   UserAgent = requestJson.browserData.userAgent,
   ScreenWidth = requestJson.browserData.screenWidth,
   ChallengeWindowSize = requestJson.challengeWindow.windowSize
};

ThreeDSecure threeDSecureData = new ThreeDSecure
{
   ServerTransactionId = requestJson.serverTransactionId
};

try
{
   threeDSecureData = Secure3dService.InitiateAuthentication(card, threeDSecureData)
      .WithAmount(10.01m)
      .WithCurrency("USD")
      .WithOrderCreateDate(DateTime.Parse("2019-09-09T11:19:12"))
      .WithCustomerEmail("james.mason@example.com")
      .WithAddress(billingAddress, AddressType.Billing)
      .WithAddress(shippingAddress, AddressType.Shipping)
      .WithBrowserData(browserData)
      .WithMethodUrlCompletion(requestJson.methodUrlComplete)
      .WithMobileNumber("44", "7123456789")
      .Execute();
}

catch (ApiException exce)
{
   // TODO: add your error handling here
}

var status = threeDSecureData.Status;

// frictionless flow
if (!status.equals("CHALLENGE_REQUIRED")) {

   // data required for authorization or database record
   String authenticationValue = threeDSecureData.getAuthenticationValue(); // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
   String dsTransId = threeDSecureData.getDirectoryServerTransactionId(); // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
   String messageVersion = threeDSecureData.getMessageVersion(); // 2.1.0
   String eci = threeDSecureData.getEci(); // 05

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   Hashtable<String, String> responseObject = new Hashtable<String, String>();

   // TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
   if (eci.equals("05") || eci.equals("06") || eci.equals("01") || eci.equals("02")) {

      Transaction response = new Transaction();
      // proceed to authorization with liability shift
      try {
         response = card.charge(new BigDecimal("10.01"))
            .withCurrency("USD")
            .execute();

         // authorization successful
         responseObject.put("result", "AUTHORIZATION_SUCCESS"); 
      }

      catch (ApiException exce) {
         // TODO: add your error handling here
         // authorization failed
         responseObject.put("result", "AUTHORIZATION_FAILURE"); 
      }
   }

   else {
      // authentication failed, no liability shift
      responseObject.put("result", "AUTHENTICATION_FAILURE");
   }

   Gson gson = new Gson();
   String responseString = gson.toJson(responseObject);

   /*
    * TODO: pass to the client-side the relevant outcome
    * Authentication Success & Authorization Success or
    * Authentication Success & Authorization Failure or
    * Authentication Failure
    */
}

<?php
// frictionless flow
if ($status !== "CHALLENGE_REQUIRED") {

   // data required for authorization or database record
   $authenticationValue = $threeDSecureData->authenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=s
   $dsTransId = $threeDSecureData->directoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
   $messageVersion = $threeDSecureData->messageVersion; // 2.1.0
   $eci = $threeDSecureData->eci; // 05

   // simple example of how to prepare the JSON string for JavaScript Library
   $responseJson = array();

   // TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
   if ($eci === "05" || $eci === "06" || $eci === "01" || $eci === "02") {

      // proceed to authorization with liability shift
      try {
         $response = $card->charge(10.01)
            ->withCurrency("USD")
            ->execute();

         // authorization successful
         $responseJson["result"] = "AUTHORIZATION_SUCCESS";
      } catch (ApiException $e) {
         // TODO: Add your error handling here 
         // authorization failed
         $responseJson["result"] = "AUTHORIZATION_FAILURE";
      }
   } else {
      // authentication failed, no liability shift
      $responseJson["result"] = "AUTHENTICATION_FAILURE";
   }

   $responseJson = json_encode($responseJson);

   /*
    * TODO: pass to the client-side the relevant outcome
    * Authentication Success & Authorization Success or
    * Authentication Success & Authorization Failure or
    * Authentication Failure
    */
}

// frictionless flow
if (status != "CHALLENGE_REQUIRED")
{
   // data required for authorization or database record
   var authenticationValue = threeDSecureData.AuthenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
   var dsTransId = threeDSecureData.DirectoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
   var messageVersion = threeDSecureData.MessageVersion; // 2.1.0
   var eci = threeDSecureData.Eci; // 5

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   string initiateAuthenticationResponse;

   // TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
   if (eci == 5 || eci == 6 || eci == 1 || eci == 2)
   {
      Transaction response = new Transaction();
      // proceed to authorization with liability shift
      try
      {
         response = card.Charge(10.01m)
            .WithCurrency("USD")
            .Execute();

         // authorization successful
         initiateAuthenticationResponse = JsonConvert.SerializeObject(new
         {
            result = "AUTHORIZATION_SUCCESS"
         });
         // TODO: pass the authorization success to the client-side
      }

      catch (ApiException exce)
      {
         // TODO: add your error handling here
         // authorization failure
         initiateAuthenticationResponse = JsonConvert.SerializeObject(new
         {
            result = "AUTHORIZATION_FAILURE"
         });
         // TODO: pass the authorization failure to the client-side
      }
   }

   else
   {
      // authentication failure, no liability shift
      initiateAuthenticationResponse = JsonConvert.SerializeObject(new
      {
         result = "AUTHENTICATION_FAILURE"
      });
      // TODO: pass the authentication failure to the client-side
   }

   /*
    * TODO: pass to the client-side the relevant outcome
    * Authentication Success & Authorization Success or
    * Authentication Success & Authorization Failure or
    * Authentication Failure
    */
}

// challenge flow
else {

   String challengeRequestUrl = threeDSecureData.getIssuerAcsUrl(); // https://www.acs.com/challenge
   String encodedCreq = threeDSecureData.getPayerAuthenticationRequest(); // Very long base64 encoded string
   Boolean challengeMandated = threeDSecureData.isChallengeMandated(); // true

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   Gson gson = new Gson();
   Hashtable<String, String> challenge = new Hashtable<String, String>();
   challenge.put("requestUrl", challengeRequestUrl);
   challenge.put("encodedChallengeRequest", encodedCreq);
   String challengeString = gson.toJson(challenge);

   Hashtable<String, String> responseObject = new Hashtable<String, String>();
   responseObject.put("status", status);
   responseObject.put("challenge", challengeString);
   responseObject.put("challengeMandated", challengeMandated.toString());

   String responseString = gson.toJson(responseObject);

   /*
   / TODO: pass the Challenge URL and Encoded Challenge Request to the client-side
   / sample string: {"status":"CHALLENGE_REQUIRED","challenge":{\"requestUrl\":\"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs\",\"encodedChallengeRequest\":\"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiODA1NjYzNTgtMjA4Ny00MWUyLTliMTctM2VhOTVkMTNiNDM4IiwKICAiYWNzVHJhbnNJRCIgOiAiNTk5NzkxMmUtMDk0Ny00MmFkLWExYmYtY2ViN2QzZWZlNTM5IiwKICAiY2hhbGxlbmdlV2luZG93U2l6ZSIgOiAiMDUiLAogICJtZXNzYWdlVHlwZSIgOiAiQ1JlcSIsCiAgIm1lc3NhZ2VWZXJzaW9uIiA6ICIyLjEuMCIsCiAgImV4cGVjdGVkUmVzcG9uc2VUeXBlIiA6ICJDUkVTIgp9\"},"challengeMandated":true}
   */
}

<?php
// challenge flow
else {
   // data required for challenge
   $challengeRequestUrl = $threeDSecureData->issuerAcsUrl; // https://www.acs.com/challenge
   $encodedCreq = $threeDSecureData->payerAuthenticationRequest; // Very long base64 encoded string
   $challengeMandated = $threeDSecureData->challengeMandated; // true

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   $responseJson = array(
      "status" => $status,
      "challengeMandated" => $challengeMandated,
      "challenge" => array(
         "requestUrl" => $challengeRequestUrl,
         "encodedChallengeRequest" => $encodedCreq
      )
   );

   $responseJson = json_encode($responseJson);

   /*
    * TODO: pass the Challenge URL and Encoded Challenge Request to the client-side
    * sample string: {"status":"CHALLENGE_REQUIRED","challenge":{\"requestUrl\":\"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs\",\"encodedChallengeRequest\":\"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiODA1NjYzNTgtMjA4Ny00MWUyLTliMTctM2VhOTVkMTNiNDM4IiwKICAiYWNzVHJhbnNJRCIgOiAiNTk5NzkxMmUtMDk0Ny00MmFkLWExYmYtY2ViN2QzZWZlNTM5IiwKICAiY2hhbGxlbmdlV2luZG93U2l6ZSIgOiAiMDUiLAogICJtZXNzYWdlVHlwZSIgOiAiQ1JlcSIsCiAgIm1lc3NhZ2VWZXJzaW9uIiA6ICIyLjEuMCIsCiAgImV4cGVjdGVkUmVzcG9uc2VUeXBlIiA6ICJDUkVTIgp9\"},"challengeMandated":true}
    */
}

// frictionless flow
if (status != "CHALLENGE_REQUIRED")
{
   // data required for authorization or database record
   var authenticationValue = threeDSecureData.AuthenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
   var dsTransId = threeDSecureData.DirectoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
   var messageVersion = threeDSecureData.MessageVersion; // 2.1.0
   var eci = threeDSecureData.Eci; // 5

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   string initiateAuthenticationResponse;

   // TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
   if (eci == 5 || eci == 6 || eci == 1 || eci == 2)
   {
      Transaction response = new Transaction();
      // proceed to authorization with liability shift
      try
      {
         response = card.Charge(10.01m)
            .WithCurrency("USD")
            .Execute();

         // authorization successful
         initiateAuthenticationResponse = JsonConvert.SerializeObject(new
         {
            result = "AUTHORIZATION_SUCCESS"
         });
         // TODO: pass the authorization success to the client-side
      }

      catch (ApiException exce)
      {
         // TODO: add your error handling here
         // authorization failure
         initiateAuthenticationResponse = JsonConvert.SerializeObject(new
         {
            result = "AUTHORIZATION_FAILURE"
         });
         // TODO: pass the authorization failure to the client-side
      }
   }

   else
   {
      // authentication failure, no liability shift
      initiateAuthenticationResponse = JsonConvert.SerializeObject(new
      {
         result = "AUTHENTICATION_FAILURE"
      });
      // TODO: pass the authentication failure to the client-side
   }

   /*
    * TODO: pass to the client-side the relevant outcome
    * Authentication Success & Authorization Success or
    * Authentication Success & Authorization Failure or
    * Authentication Failure
    */
}

// continued from previous step
         // challenge success
         else if (authenticationData.challenge.response.data.transStatus == "Y") {
            var serverTransactionId = authenticationData.challenge.response.data.threeDSServerTransID;

            var form = document.getElementById("myForm");
            form.setAttribute("action", "/ThreeDSecure2/Authorization");

            var formServerTransId = document.createElement("input");
            formServerTransId.setAttribute("type", "hidden");
            formServerTransId.setAttribute("name", "serverTransId");
            formServerTransId.setAttribute("value", serverTransactionId);
            form.appendChild(formServerTransId);
            form.submit();
         }

         // challenge failure
         else {
            // TODO: proceed to failure page or display failed authentication information
            return false;
         }
      }

      catch (e) {
         // TODO: add your error handling here
      }
   });
});
</script>

// TODO: consume data from client-side (form)

/*
 * if required, create card object with form data or use existing
 * CreditCardData card = new CreditCardData();
 * card.setNumber(form.card.number);
 * card.setExpMonth(form.card.expiryMonth);
 * card.setExpYear(form.card.expiryYear);
 * card.setCvn(form.card.securityCode);
 * card.setCardHolderName(form.card.cardHolderName);
 */

ThreeDSecure threeDSecureData = new ThreeDSecure();

String serverTransactionId = form.serverTransId;

try {
   threeDSecureData = Secure3dService.getAuthenticationData()
      .withServerTransactionId(serverTransactionId)
      .execute();
}

catch (ApiException exec) {
   // TODO: add your error handling here
}

String authenticationValue = threeDSecureData.getAuthenticationValue(); // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
String dsTransId = threeDSecureData.getDirectoryServerTransactionId(); // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
String messageVersion = threeDSecureData.getMessageVersion(); // 2.1.0
String eci = threeDSecureData.getEci(); // 05

<?php
// TODO: consume data from client-side ($_REQUEST)

/*
 * if required, create card object with form data or use existing
 * $card = new CreditCardData();
 * $card->number = $_REQUEST["card-number"];
 * $card->expMonth = $_REQUEST['expiryMonth'];
 * $card->expYear = $_REQUEST['expiryYear'];
 * $card->cvn = $_REQUEST['securityCode'];
 * $card->cardHolderName = $_REQUEST['cardHolderName'];
 */

$threeDSecureData = new ThreeDSecure();

$serverTransactionId = $_REQUEST["serverTransId"];

try {
   $threeDSecureData = Secure3dService::getAuthenticationData()
      ->withServerTransactionId($serverTransactionId)
      ->execute(Secure3dVersion::TWO);
} catch (ApiException $e) { 
   // TODO: add your error handling here 
}

$authenticationValue = $threeDSecureData->authenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=s
$dsTransId = $threeDSecureData->directoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
$messageVersion = $threeDSecureData->messageVersion; // 2.1.0
$eci = $threeDSecureData->eci; // 05

// TODO: consume data from client-side (form)

/*
 * if required, create card object with form data or use existing
 * var cardNumber = Request.Form["card-number"];
 * var expiryMonth = Request.Form["expiry-date-mm"];
 * var expiryYear = Request.Form["expiry-date-yy"];
 * var securityCode = Request.Form["cvn"];
 * var cardHolderName = Request.Form["card-holder-name"];
 */

var serverTransId = Request.Form["serverTransId"];

ThreeDSecure threeDSecureData = new ThreeDSecure();

try
{
   threeDSecureData = Secure3dService.GetAuthenticationData()
      .WithServerTransactionId(serverTransId)
      .Execute();
}

catch (ApiException exce)
{
   // TODO: add your error handling here
}

var authenticationValue = threeDSecureData.AuthenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
var dsTransId = threeDSecureData.DirectoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
var messageVersion = threeDSecureData.MessageVersion; // 2.1.0
var eci = threeDSecureData.Eci; // 5

Transaction response = null;

// TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
if (eci.equals("05") || eci.equals("06") || eci.equals("01") || eci.equals("02")) {

   card.setThreeDSecure(threeDSecureData);

   // proceed to authorization with liability shift
   try {
      response = card.charge(new BigDecimal("10.01"))
         .withCurrency("USD")
         .execute();
   }

   catch(ApiException exce) {
      // TODO: add your error handling here
   }
}

else {
   // TODO: if liability shift required - halt transaction
}

if (response != null) {
   String result = response.getResponseCode(); // 00 == Success
   String message = response.getResponseMessage(); // [ test system ] AUTHORISED

   // get the details to save to the DB for future requests
   String orderId = response.getOrderId(); // ezJDQjhENTZBLTdCNzNDQw
   String authCode = response.getAuthorizationCode(); // 12345
   String paymentsReference = response.getTransactionId(); // pasref
   String schemeReferenceData = response.getSchemeId(); // MMC0F00YE4000000715  
}

<?php

$response = new Transaction();

// TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
if ($eci === "05" || $eci === "06" || $eci === "01" || $eci === "02") {

   $card->threeDSecure = $threeDSecureData;

   // proceed to authorization with liability shift
   try {
      $response = $card->charge(10.01)
         ->withCurrency("USD")
         ->execute();
   } catch (ApiException $e) {
      // TODO: Add your error handling here
   }
} else {
   // TODO: if liability shift required - halt transaction
}

if (isset($response)) {
   $result = $response->responseCode; // 00 == Success
   $message = $response->responseMessage; // [ test system ] AUTHORISED

   // get the details to save to the DB for future requests
   $orderId = $response->orderId; // N6qsk4kYRZihmPrTXWYS6g
   $authCode = $response->authorizationCode; // 12345
   $paymentsReference = $response->transactionId; // 14610544313177922
   $schemeReferenceData = $response->schemeId; // MMC0F00YE4000000715
}

Transaction response = null;

// TODO: depending on the ECI value proceed to Authorization or halt transaction
if (eci == 5 || eci == 6 || eci == 1 || eci == 2)
{
   card.ThreeDSecure = threeDSecureData;

   try
   {
      response = card.Charge(10.01m)
         .WithCurrency("USD")
         .Execute();
   }

   catch (ApiException exce)
   {
      // TODO: add your error handling here
   }
}

else
{
   // if liability shift required - halt transaction
}

if (response != null)
{
   var result = response.ResponseCode; // 00 == Success
   var message = response.ResponseMessage; // [ test system ] AUTHORISED

   // get the response details to save to the DB for future requests
   var orderId = response.OrderId; // ezJDQjhENTZBLTdCNzNDQw
   var authCode = response.AuthorizationCode; // 12345
   var paymentsReference = response.TransactionId; // pasref
   var schemeReferenceData = response.SchemeId; // MMC0F00YE4000000715
}

<script src="globalpayments-3dsecure.js"></script>
<script>
const {
   checkVersion,
   getBrowserData,
   initiateAuthentication,
} = GlobalPayments.ThreeDSecure;

// assign the button that will trigger authentication
document.addEventListener('DOMContentLoaded', () => {
   const checkVersionButton = document.getElementById('startButton');
   if (!checkVersionButton) {
      return;
   }

   checkVersionButton.addEventListener('click', async (e) => {
      e.preventDefault();
      // check if the card is enrolled for 3D Secure 2

      try {
         versionCheckData = await checkVersion('/ThreeDSecure2/CheckVersion', {
            card: {
               number: document.getElementById('card-number').value
            },
         });

         if (versionCheckData.error) {
            // TODO: handle the scenario where the card is not enrolled for 3D Secure 2
            return;
         }
      }

      catch (e) {
         // TODO: add your error handling here
      }

      try {
         authenticationData = await initiateAuthentication('/ThreeDSecure2/InitiateAuthentication', {
            serverTransactionId: checkVersionData.serverTransactionId,
            methodUrlComplete: true,
            card: {
               expiryMonth: document.getElementById('expiry-date-mm').value,
               expiryYear: document.getElementById('expiry-date-yy').value,
               securityCode: document.getElementById('cvn').value,
               cardHolderName: document.getElementById('card-holder-name').value
            },
            challengeWindow: {
               windowSize: ChallengeWindowSize.FullScreen,
               displayMode: 'lightbox',
            }
            // order: {}, // optional if data available on client-side
            // payer: {}, // optional if data available on client-side
         });

         // frictionless authentication success and authorization success
         if (authenticationData.result == "AUTHORIZATION_SUCCESS") {
            // TODO: proceed to success page or display success information
         }

         // frictionless authentication success and authorization failure
         else if (authenticationData.result == "AUTHORIZATION_FAILURE") {
            // TODO: proceed to failure page or display decline information
         }

         // frictionless authentication failure
         else if (authenticationData.result == "AUTHENTICATION_FAILURE") {
            // TODO: proceed to failure page or display failed authentication information
         }

         // challenge success
         else if (authenticationData.challenge.response.data.transStatus == "Y") {
            var serverTransactionId = authenticationData.challenge.response.data.threeDSServerTransID;

            var form = document.getElementById("myForm");
            form.setAttribute("action", "/ThreeDSecure2/Authorization");

            var formServerTransId = document.createElement("input");
            formServerTransId.setAttribute("type", "hidden");
            formServerTransId.setAttribute("name", "serverTransId");
            formServerTransId.setAttribute("value", serverTransactionId);
            form.appendChild(formServerTransId);
            form.submit();
         }

         // challenge failure
         else {
            // TODO: proceed to failure page or display failed authentication information
            return false;
         }
      }

      catch (e) {
         // TODO: add your error handling here
      }
   });
});
</script>

// TODO: consume card data sent from the JS Library (requestJson)

// configure client & request settings
GatewayConfig config = new GatewayConfig();
config.setMerchantId("MerchantId");
config.setAccountId("internet");
config.setSharedSecret("secret");
config.setMethodNotificationUrl("https://www.example.com/methodNotificationUrl");
config.setChallengeNotificationUrl("https://www.example.com/challengeNotificationUrl");
config.setMerchantContactUrl("https://www.example.com/about");
config.setSecure3dVersion(Secure3dVersion.TWO);
ServicesContainer.configureService(config);

// add cardholder data
// Frictionless Example: 4263970000005262
// Challenge Example: 4012001038488884
CreditCardData card = new CreditCardData();
card.setNumber(requestJson.card.number);

ThreeDSecure threeDSecureData = new ThreeDSecure();

try {
   threeDSecureData = Secure3dService.checkEnrollment(card).execute();
}

catch(ApiException exce)
{
   // TODO: add your error handling here
}

Boolean enrolled = threeDSecureData.isEnrolled(); // true
// if enrolled, the available response data
String serverTransactionId = threeDSecureData.getServerTransactionId(); // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
String dsStartProtocolVersion = threeDSecureData.getDirectoryServerStartVersion(); // 2.1.0
String dsEndProtocolVersion = threeDSecureData.getDirectoryServerEndVersion(); // 2.1.0
String acsStartProtocolVersion = threeDSecureData.getAcsStartVersion(); // 2.1.0
String acsEndProtocolVersion = threeDSecureData.getAcsEndVersion(); // 2.1.0
String methodUrl = threeDSecureData.getIssuerAcsUrl(); // https://www.acsurl.com/method
String encodedMethodData = threeDSecureData.getPayerAuthenticationRequest(); // Base64 encoded string

// simple example of how to prepare the JSON string for JavaScript Library
Hashtable<String, String> responseObject = new Hashtable<String, String>();
responseObject.put("enrolled", enrolled.toString());

if (enrolled == true) {
   responseObject.put("serverTransactionId", serverTransactionId);
   responseObject.put("methodUrl", methodUrl);
   responseObject.put("methodData", encodedMethodData);
}

Gson gson = new Gson();
String responseString = gson.toJson(responseObject);

/*
/ TODO: pass the Enrolled status, Method URL and Encoded Method Data (if supported) to the client-side
/ Sample string: {"enrolled":"True","serverTransactionId":"6da7ecab-666d-4a3b-b952-cc1d583085b6","methodUrl":"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs","methodData":"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiNmRhN2VjYWItNjY2ZC00YTNiLWI5NTItY2MxZDU4MzA4NWI2IiwKICAidGhyZWVEU01ldGhvZE5vdGlmaWNhdGlvblVSTCIgOiAiaHR0cDovL2xvY2FsaG9zdDo2MDUxNy9UaHJlZURTZWN1cmUyL01ldGhvZFVybFJlc3BvbnNlIgp9"}
*/

<?php
require_once('vendor/autoload.php');

use GlobalPayments\Api\ServiceConfigs\Gateways\GpEcomConfig;
use GlobalPayments\Api\ServicesContainer;
use GlobalPayments\Api\Services\Secure3dService;
use GlobalPayments\Api\PaymentMethods\CreditCardData;
use GlobalPayments\Api\Entities\ThreeDSecure;
use GlobalPayments\Api\Entities\Address;
use GlobalPayments\Api\Entities\BrowserData;
use GlobalPayments\Api\Entities\Enums\Secure3dVersion;
use GlobalPayments\Api\Entities\Enums\AddressType;
use GlobalPayments\Api\Entities\Enums\MethodUrlCompletion;
use GlobalPayments\Api\Entities\Transaction;
use GlobalPayments\Api\Entities\Exceptions\ApiException;

// TODO: consume card data sent from the JS Library ($requestData)

// configure client & request settings
$config = new GpEcomConfig();
$config->merchantId = "MerchantId";
$config->accountId = "internet";
$config->sharedSecret = "secret";
$config->methodNotificationUrl = "https://www.example.com/methodNotificationUrl";
$config->challengeNotificationUrl = "https://www.example.com/challengeNotificationUrl";
$config->merchantContactUrl = "https://www.example.com/about";
$config->secure3dVersion = Secure3dVersion::TWO;
ServicesContainer::configureService($config);

// add cardholder data
// Frictionless Example: 4263970000005262
// Challenge Example: 4012001038488884
$card = new CreditCardData();
$card->number = $requestData['number'];

try {
   $threeDSecureData = Secure3dService::checkEnrollment($card)->execute(Secure3dVersion::TWO);
} catch (ApiException $e) {
   // TODO: add your error handling here
}

$enrolled = $threeDSecureData->enrolled; // TRUE
// if enrolled, the available response data
$serverTransactionId = $threeDSecureData->serverTransactionId; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
$dsStartProtocolVersion = $threeDSecureData->directoryServerStartVersion; // 2.1.0
$dsEndProtocolVersion = $threeDSecureData->directoryServerEndVersion; // 2.1.0
$acsStartProtocolVersion = $threeDSecureData->acsStartVersion; // 2.1.0
$acsEndProtocolVersion = $threeDSecureData->acsEndVersion; // 2.1.0
$methodUrl = $threeDSecureData->issuerAcsUrl; // https://www.acsurl.com/method
$encodedMethodData = $threeDSecureData->payerAuthenticationRequest; // Base64 encoded string

// simple example of how to prepare the JSON string for JavaScript Library
$responseJson = array(
   "enrolled" => $enrolled
);

if ($enrolled === true) {
   $responseJson["serverTransactionId"] = $serverTransactionId;
   $responseJson["methodUrl"] = $methodUrl;
   $responseJson["methodData"] = $encodedMethodData;
}

$responseJson = json_encode($responseJson);

/*
 * TODO: pass the Enrolled status, Method URL and Encoded Method Data (if supported) to the client-side
 * Sample string: {"enrolled":"True","serverTransactionId":"6da7ecab-666d-4a3b-b952-cc1d583085b6","methodUrl":"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs","methodData":"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiNmRhN2VjYWItNjY2ZC00YTNiLWI5NTItY2MxZDU4MzA4NWI2IiwKICAidGhyZWVEU01ldGhvZE5vdGlmaWNhdGlvblVSTCIgOiAiaHR0cDovL2xvY2FsaG9zdDo2MDUxNy9UaHJlZURTZWN1cmUyL01ldGhvZFVybFJlc3BvbnNlIgp9"}
 */

// TODO: consume card data sent from the JS Library (requestJson)

// configure client & request settings
ServicesContainer.ConfigureService(new GpEcomConfig
{
   MerchantId = "MerchantId",
   AccountId = "internet",
   SharedSecret = "secret",
   MethodNotificationUrl = "https://www.example.com/methodNotificationUrl",
   ChallengeNotificationUrl = "https://www.example.com/challengeNotificationUrl",
   MerchantContactUrl = "https://www.example.com/about",
   Secure3dVersion = Secure3dVersion.Two
});

// add cardholder data
CreditCardData card = new CreditCardData
{
   Number = requestJson.card.number
};

ThreeDSecure threeDSecureData = new ThreeDSecure();

try
{
   threeDSecureData = Secure3dService.CheckEnrollment(card)
      .Execute();
}

catch (ApiException exce)
{
   // TODO: add your error handling here
}

var enrolled = threeDSecureData.Enrolled; // True
// if enrolled, the available response data
var serverTransactionId = threeDSecureData.ServerTransactionId; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
var dsStartProtocolVersion = threeDSecureData.DirectoryServerStartVersion; // 2.1.0
var dsEndProtocolVersion = threeDSecureData.DirectoryServerEndVersion; // 2.1.0
var acsStartProtocolVersion = threeDSecureData.AcsStartVersion; // 2.1.0
var acsEndProtocolVersion = threeDSecureData.AcsEndVersion; // 2.1.0
var methodUrl = threeDSecureData.IssuerAcsUrl; // https://www.acsurl.com/method
var encodedMethodData = threeDSecureData.PayerAuthenticationRequest; // Base64 encoded string

// TODO: simple example of how to prepare the JSON string for JavaScript Library
string versionCheckResponse;

if (enrolled == "True")
{
   versionCheckResponse = JsonConvert.SerializeObject(new
   {
      enrolled = enrolled,
      serverTransactionId = serverTransactionId,
      methodUrl = methodUrl,
      methodData = encodedMethodData
   });
}

else
{
   versionCheckResponse = JsonConvert.SerializeObject(new
   {
      enrolled = enrolled
   });

}
/*
/ TODO: pass the Enrolled status, Method URL and Encoded Method Data (if supported) to the client-side
/ Sample string: {"enrolled":"True","serverTransactionId":"6da7ecab-666d-4a3b-b952-cc1d583085b6","methodUrl":"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs","methodData":"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiNmRhN2VjYWItNjY2ZC00YTNiLWI5NTItY2MxZDU4MzA4NWI2IiwKICAidGhyZWVEU01ldGhvZE5vdGlmaWNhdGlvblVSTCIgOiAiaHR0cDovL2xvY2FsaG9zdDo2MDUxNy9UaHJlZURTZWN1cmUyL01ldGhvZFVybFJlc3BvbnNlIgp9"}
*/

// TODO: consume data sent from the JS Library (requestJson)

// add to existing variable or create a new one
// CreditCardData card = new CreditCardData();
// card.setNumber(requestJson.card.number);
card.setExpMonth(requestJson.card.expiryMonth);
card.setExpYear(requestJson.card.expiryYear);
card.setCvn(requestJson.card.securityCode);
card.setCardHolderName(requestJson.card.cardHolderName);

// add the customer's billing address
Address billingAddress = new Address();
billingAddress.setStreetAddress1("Apartment 852");
billingAddress.setStreetAddress2("Complex 741");
billingAddress.setStreetAddress3("Unit 4");
billingAddress.setCity("Chicago");
billingAddress.setPostalCode("50001");
billingAddress.setState("IL");
billingAddress.setCountryCode("840");

// add the customer's shipping address
Address shippingAddress = new Address();
shippingAddress.setStreetAddress1("Flat 456");
shippingAddress.setStreetAddress2("House 789");
shippingAddress.setStreetAddress3("Basement Flat");
shippingAddress.setCity("Halifax");
shippingAddress.setPostalCode("W5 9HR");
shippingAddress.setCountryCode("826");

// add captured browser data from the client-side and server-side
BrowserData browserData = new BrowserData();
browserData.setAcceptHeader("text/html,application/xhtml+xml,application/xml;q=9,image/webp,img/apng,/;q=0.8");
browserData.setColorDepth(requestJson.browserData.colorDepth);
browserData.setIpAddress("123.123.123.123");
browserData.setJavaEnabled(requestJson.browserData.javaEnabled);
browserData.setLanguage(requestJson.browserData.language);
browserData.setScreenHeight(requestJson.browserData.screenHeight);
browserData.setScreenWidth(requestJson.browserData.screenWidth);
browserData.setChallengeWindowSize(requestJson.challengeWindow.windowSize);
browserData.setTimezone(requestJson.browserData.timezoneOffset);
browserData.setUserAgent(requestJson.browserData.userAgent);

ThreeDSecure threeDSecureData = new ThreeDSecure();
threeDSecureData.setServerTransactionId(requestJson.serverTransactionId);

try {
   // initiate the 3D Secure 2 authentication request
   threeDSecureData = Secure3dService.initiateAuthentication(card, threeDSecureData)
      .withAmount(new BigDecimal("10.01"))
      .withCurrency("USD")
      .withOrderCreateDate(DateTime.parse("2019-09-09T11:19:12"))
      .withCustomerEmail("james.mason@example.com")
      .withAddress(shippingAddress, AddressType.Billing)
      .withAddress(billingAddress, AddressType.Shipping)
      .withBrowserData(browserData)
      .withMethodUrlCompletion(MethodUrlCompletion.No)
      .withMobileNumber("44", "7123456789")
      .execute();
}

catch(ApiException exce) {
   // TODO: add your error handling here
}

String status = threeDSecureData.getStatus();

// frictionless flow
if (!status.equals("CHALLENGE_REQUIRED")) {

   // data required for authorization or database record
   String authenticationValue = threeDSecureData.getAuthenticationValue(); // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
   String dsTransId = threeDSecureData.getDirectoryServerTransactionId(); // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
   String messageVersion = threeDSecureData.getMessageVersion(); // 2.1.0
   String eci = threeDSecureData.getEci(); // 5

   // TODO simple example of how to prepare the JSON string for JavaScript Library
   Hashtable<String, String> responseObject = new Hashtable<String, String>();

   // TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
   if (eci.equals("05") || eci.equals("06") || eci.equals("01") || eci.equals("02")) {

      Transaction response = new Transaction();
      // proceed to authorization with liability shift
      try {
         response = card.charge(new BigDecimal("10.01"))
            .withCurrency("USD")
            .execute();

         // authorization successful
         responseObject.put("result", "AUTHORIZATION_SUCCESS"); 
      }

      catch (ApiException exce) {
         // TODO: add your error handling here
         // authorization failed
         responseObject.put("result", "AUTHORIZATION_FAILURE"); 
      }
   }

   else {
      // authentication failed, no liability shift
      responseObject.put("result", "AUTHENTICATION_FAILURE");
   }

   Gson gson = new Gson();
   String responseString = gson.toJson(responseObject);

   /*
    * TODO: pass to the client-side the relevant outcome
    * Authentication Success & Authorization Success or
    * Authentication Success & Authorization Failure or
    * Authentication Failure
    */
}

// challenge flow
else {

   String challengeRequestUrl = threeDSecureData.getIssuerAcsUrl(); // https://www.acs.com/challenge
   String encodedCreq = threeDSecureData.getPayerAuthenticationRequest(); // Very long base64 encoded string
   Boolean challengeMandated = threeDSecureData.isChallengeMandated(); // true

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   Gson gson = new Gson();
   Hashtable<String, String> challenge = new Hashtable<String, String>();
   challenge.put("requestUrl", challengeRequestUrl);
   challenge.put("encodedChallengeRequest", encodedCreq);
   String challengeString = gson.toJson(challenge);

   Hashtable<String, String> responseObject = new Hashtable<String, String>();
   responseObject.put("status", status);
   responseObject.put("challenge", challengeString);
   responseObject.put("challengeMandated", challengeMandated.toString());

   String responseString = gson.toJson(responseObject);

   /*
   / TODO: pass the Challenge URL and Encoded Challenge Request to the client-side
   / sample string: {"status":"CHALLENGE_REQUIRED","challenge":{\"requestUrl\":\"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs\",\"encodedChallengeRequest\":\"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiODA1NjYzNTgtMjA4Ny00MWUyLTliMTctM2VhOTVkMTNiNDM4IiwKICAiYWNzVHJhbnNJRCIgOiAiNTk5NzkxMmUtMDk0Ny00MmFkLWExYmYtY2ViN2QzZWZlNTM5IiwKICAiY2hhbGxlbmdlV2luZG93U2l6ZSIgOiAiMDUiLAogICJtZXNzYWdlVHlwZSIgOiAiQ1JlcSIsCiAgIm1lc3NhZ2VWZXJzaW9uIiA6ICIyLjEuMCIsCiAgImV4cGVjdGVkUmVzcG9uc2VUeXBlIiA6ICJDUkVTIgp9\"},"challengeMandated":true}
   */
}

<?php
// TODO: consume data sent from the JS Library ($requestData)

// add to existing card object or create a new one
// $card = new CreditCardData();
// $card->number = $requestData['number'];
$card->expMonth = $requestData['expiryMonth'];
$card->expYear = $requestData['expiryYear'];
$card->cvn = $requestData['securityCode'];
$card->cardHolderName = $requestData['cardHolderName'];

// Add the customer's billing address
$billingAddress = new Address();
$billingAddress->streetAddress1 = "Apartment 852";
$billingAddress->streetAddress2 = "Complex 741";
$billingAddress->streetAddress3 = "Unit 4";
$billingAddress->city = "Chicago";
$billingAddress->state = "IL";
$billingAddress->postalCode = "50001";
$billingAddress->countryCode = "840";

// Add the customer's shipping address
$shippingAddress = new Address();
$shippingAddress->streetAddress1 = "Flat 456";
$shippingAddress->streetAddress2 = "House 789";
$shippingAddress->streetAddress3 = "Basement Flat";
$shippingAddress->city = "Halifax";
$shippingAddress->postalCode = "W5 9HR";
$shippingAddress->countryCode = "826";

// Add captured browser data from the client-side and server-side 
// $browserValues = $requestData['browserData'];
$browserData = new BrowserData();
$browserData->acceptHeader = "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8";
$browserData->colorDepth = $browserValues["colorDepth"];
$browserData->ipAddress = "123.123.123.123";
$browserData->javaEnabled = $browserValues["javaEnabled"];
$browserData->language = $browserValues["language"];
$browserData->screenHeight = $browserValues["screenHeight"];
$browserData->screenWidth = $browserValues["screenWidth"];
$browserData->challengWindowSize = $browserValues["challengWindowSize"];
$browserData->timeZone = $browserValues["timeZone"];
$browserData->userAgent = $browserValues["userAgent"];

$threeDSecureData = new ThreeDSecure();
$threeDSecureData->serverTransactionId = $requestData["serverTransactionId"];

try {
   $threeDSecureData = Secure3dService::initiateAuthentication($card, $threeDSecureData)
      ->withAmount(10.01)
      ->withCurrency("USD")
      ->withOrderCreateDate(date("Y-m-d H:i:s"))
      ->withCustomerEmail("james.mason@example.com")
      ->withAddress($billingAddress, AddressType::BILLING)
      ->withAddress($shippingAddress, AddressType::SHIPPING)
      ->withBrowserData($browserData)
      ->withMethodUrlCompletion(MethodUrlCompletion::YES)
      ->withMobileNumber("44", "7123456789")
      ->execute(Secure3dVersion::TWO);
} catch (ApiException $e) {
   // TODO: add your error handling here
}

$status = $threeDSecureData->status;

// Frictionless Flow
if ($status !== "CHALLENGE_REQUIRED") {

   // data required for authorization or database record
   $authenticationValue = $threeDSecureData->authenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=s
   $dsTransId = $threeDSecureData->directoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
   $messageVersion = $threeDSecureData->messageVersion; // 2.1.0
   $eci = $threeDSecureData->eci; // 05

   // simple example of how to prepare the JSON string for JavaScript Library
   $responseJson = array();

   // TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
   if ($eci === "05" || $eci === "06" || $eci === "01" || $eci === "02") {
      $response = new Transaction();

      // proceed to authorization with liability shift
      try {
         $response = $card->charge(10.01)
            ->withCurrency("USD")
            ->execute();

         // authorization successful
         $responseJson["result"] = "AUTHORIZATION_SUCCESS";
      } catch (ApiException $e) {
         // TODO: Add your error handling here 
         // authorization failed
         $responseJson["result"] = "AUTHORIZATION_FAILURE";
      }
   } else {
      // authentication failed, no liability shift
      $responseJson["result"] = "AUTHENTICATION_FAILURE";
   }

   $responseJson = json_encode($responseJson);

   /*
     * TODO: pass to the client-side the relevant outcome
     * Authentication Success & Authorization Success or
     * Authentication Success & Authorization Failure or
     * Authentication Failure
     */
}

// Challenge Flow
else {
   // data required for challenge
   $challengeRequestUrl = $threeDSecureData->issuerAcsUrl; // https://www.acs.com/challenge
   $encodedCreq = $threeDSecureData->payerAuthenticationRequest; // Very long base64 encoded string
   $challengeMandated = $threeDSecureData->challengeMandated; // true

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   $responseJson = array(
      "status" => $status,
      "challengeMandated" => $challengeMandated,
      "challenge" => array(
         "requestUrl" => $challengeRequestUrl,
         "encodedChallengeRequest" => $encodedCreq
      )
   );

   $responseJson = json_encode($responseJson);

   /*
    * TODO: pass the Challenge URL and Encoded Challenge Request to the client-side
    * sample string: {"status":"CHALLENGE_REQUIRED","challenge":{\"requestUrl\":\"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs\",\"encodedChallengeRequest\":\"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiODA1NjYzNTgtMjA4Ny00MWUyLTliMTctM2VhOTVkMTNiNDM4IiwKICAiYWNzVHJhbnNJRCIgOiAiNTk5NzkxMmUtMDk0Ny00MmFkLWExYmYtY2ViN2QzZWZlNTM5IiwKICAiY2hhbGxlbmdlV2luZG93U2l6ZSIgOiAiMDUiLAogICJtZXNzYWdlVHlwZSIgOiAiQ1JlcSIsCiAgIm1lc3NhZ2VWZXJzaW9uIiA6ICIyLjEuMCIsCiAgImV4cGVjdGVkUmVzcG9uc2VUeXBlIiA6ICJDUkVTIgp9\"},"challengeMandated":true}
    */
}

// TODO: consume data sent from the JS Library (requestJson)

// add to existing card object or create a new one
// CreditCardData card = new CreditCardData();
// card.Number = requestJson.card.number;
card.ExpMonth = requestJson.card.expiryMonth;
card.ExpYear = requestJson.card.expiryYear;
card.Cvn = requestJson.card.securityCode;
card.CardHolderName = requestJson.card.cardHolderName;

// Add the customer's billing address
Address billingAddress = new Address
{
   StreetAddress1 = "Apartment 852",
   StreetAddress2 = "Complex 741",
   StreetAddress3 = "Unit 4",
   City = "Chicago",
   PostalCode = "50001",
   State = "IL",
   CountryCode = "840"
};

// Add the customer's shipping address
Address shippingAddress = new Address
{
   StreetAddress1 = "Flat 456",
   StreetAddress2 = "House 789",
   StreetAddress3 = "Basement Flat",
   City = "Halifax",
   PostalCode = "W5 9HR",
   CountryCode = "826"
};

// Add captured browser data from the client-side and server-side
BrowserData browserData = new BrowserData
{
   AcceptHeader = Request.ServerVariables["HTTP_ACCEPT"],
   ColorDepth = requestJson.browserData.colorDepth,
   IpAddress = Request.ServerVariables["REMOTE_ADDR"],
   JavaEnabled = requestJson.browserData.javaEnabled,
   Language = requestJson.browserData.language,
   ScreenHeight = requestJson.browserData.screenHeight,
   Timezone = requestJson.browserData.timezoneOffset,
   UserAgent = requestJson.browserData.userAgent,
   ScreenWidth = requestJson.browserData.screenWidth,
   ChallengeWindowSize = requestJson.challengeWindow.windowSize
};

ThreeDSecure threeDSecureData = new ThreeDSecure
{
   ServerTransactionId = requestJson.serverTransactionId
};

try
{
   threeDSecureData = Secure3dService.InitiateAuthentication(card, threeDSecureData)
      .WithAmount(10.01m)
      .WithCurrency("USD")
      .WithOrderCreateDate(DateTime.Parse("2019-09-09T11:19:12"))
      .WithCustomerEmail("james.mason@example.com")
      .WithAddress(billingAddress, AddressType.Billing)
      .WithAddress(shippingAddress, AddressType.Shipping)
      .WithBrowserData(browserData)
      .WithMethodUrlCompletion(requestJson.methodUrlComplete)
      .WithMobileNumber("44", "7123456789")
      .Execute();
}

catch(ApiException exce)
{
   // TODO: add your error handling here
}

var status = threeDSecureData.Status;

// frictionless flow
if (status != "CHALLENGE_REQUIRED")
{
   // data required for authorization or database record
   var authenticationValue = threeDSecureData.AuthenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
   var dsTransId = threeDSecureData.DirectoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
   var messageVersion = threeDSecureData.MessageVersion; // 2.1.0
   var eci = threeDSecureData.Eci; // 5

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   string initiateAuthenticationResponse;

   // TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
   if (eci == 5 || eci == 6 || eci == 1 || eci == 2)
   {
      Transaction response = new Transaction();
      // proceed to authorization with liability shift
      try
      {
         response = card.Charge(10.01m)
            .WithCurrency("USD")
            .Execute();

         // authorization successful
         initiateAuthenticationResponse = JsonConvert.SerializeObject(new
         {
            result = "AUTHORIZATION_SUCCESS"
         });
         // TODO: pass the authorization success to the client-side
      }

      catch (ApiException exce)
      {
         // TODO: add your error handling here
         // authorization failure
         initiateAuthenticationResponse = JsonConvert.SerializeObject(new
         {
            result = "AUTHORIZATION_FAILURE"
         });
         // TODO: pass the authorization failure to the client-side
      }
   }

   else
   {
      // authentication failure, no liability shift
      initiateAuthenticationResponse = JsonConvert.SerializeObject(new
      {
         result = "AUTHENTICATION_FAILURE"
      });
      // TODO: pass the authentication failure to the client-side
   }

   /*
    * TODO: pass to the client-side the relevant outcome
    * Authentication Success & Authorization Success or
    * Authentication Success & Authorization Failure or
    * Authentication Failure
    */
}

// challenge flow
else
{
   var challengeRequestUrl = threeDSecureData.IssuerAcsUrl; // https://www.acs.com/challenge
   var encodedCReq = threeDSecureData.PayerAuthenticationRequest; // Very long base64 encoded string
   var challengeMandated = threeDSecureData.ChallengeMandated; // true

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   string initiateAuthenticationResponse;

   initiateAuthenticationResponse = JsonConvert.SerializeObject(new
   {
      status = status,
      challenge = new Dictionary<string, string>
      {
         { "requestUrl", challengeRequestUrl },
         { "encodedChallengeRequest", encodedCReq }
      },
      challengeMandated = challengeMandated,
   });
   /*
   / TODO: pass the Challenge URL and Encoded Challenge Request to the client-side
   / sample string: {"status":"CHALLENGE_REQUIRED","challenge":{"requestUrl":"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs","encodedChallengeRequest":"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiODA1NjYzNTgtMjA4Ny00MWUyLTliMTctM2VhOTVkMTNiNDM4IiwKICAiYWNzVHJhbnNJRCIgOiAiNTk5NzkxMmUtMDk0Ny00MmFkLWExYmYtY2ViN2QzZWZlNTM5IiwKICAiY2hhbGxlbmdlV2luZG93U2l6ZSIgOiAiMDUiLAogICJtZXNzYWdlVHlwZSIgOiAiQ1JlcSIsCiAgIm1lc3NhZ2VWZXJzaW9uIiA6ICIyLjEuMCIsCiAgImV4cGVjdGVkUmVzcG9uc2VUeXBlIiA6ICJDUkVTIgp9"},"challengeMandated":true}
   */
}

// TODO: consume data from client-side (form)

/*
 * if required, create card variable with form data
 * CreditCardData card = new CreditCardData();
 * card.setNumber(form.card.number);
 * card.setExpMonth(form.card.expiryMonth);
 * card.setExpYear(form.card.expiryYear);
 * card.setCvn(form.card.securityCode);
 * card.setCardHolderName(form.card.cardHolderName);
 */

ThreeDSecure threeDSecureData = new ThreeDSecure();

String serverTransactionId = form.serverTransId;

try {
   threeDSecureData = Secure3dService.getAuthenticationData()
      .withServerTransactionId(serverTransactionId)
      .execute();
}

catch (ApiException exec) {
   // TODO: add your error handling here
}

String authenticationValue = threeDSecureData.getAuthenticationValue(); // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
String dsTransId = threeDSecureData.getDirectoryServerTransactionId(); // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
String messageVersion = threeDSecureData.getMessageVersion(); // 2.1.0
String eci = threeDSecureData.getEci(); // 5

Transaction response = null;

// TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
if (eci.equals("05") || eci.equals("06") || eci.equals("01") || eci.equals("02")) {

   card.setThreeDSecure(threeDSecureData);

   // proceed to authorization with liability shift
   try {
      response = card.charge(new BigDecimal("10.01"))
            .withCurrency("USD")
            .execute();
   }

   catch (ApiException exce) {
      // TODO: add your error handling here
   }
}

else {
   // TODO: if liability shift required - halt transaction
}

if (response != null) {
   String result = response.getResponseCode(); // 00 == Success
   String message = response.getResponseMessage(); // [ test system ] AUTHORISED

   // get the details to save to the DB for future requests
   String orderId = response.getOrderId(); // ezJDQjhENTZBLTdCNzNDQw
   String authCode = response.getAuthorizationCode(); // 12345
   String paymentsReference = response.getTransactionId(); // pasref
   String schemeReferenceData = response.getSchemeId(); // MMC0F00YE4000000715  
}

<?php
// Optional TODO: consume data from client-side ($_REQUEST)

/*
 * if required, create card variable with form data
 * CreditCardData card = new CreditCardData();
 * card.setNumber(form.card.number);
 * card.setExpMonth(form.card.expiryMonth);
 * card.setExpYear(form.card.expiryYear);
 * card.setCvn(form.card.securityCode);
 * card.setCardHolderName(form.card.cardHolderName);
 */

$threeDSecureData = new ThreeDSecure();

$serverTransactionId = $_REQUEST["serverTransId"];

try {
   $threeDSecureData = Secure3dService::getAuthenticationData()
      ->withServerTransactionId($serverTransactionId)
      ->execute(Secure3dVersion::TWO);
} catch (ApiException $e) { 
   // TODO: add your error handling here 
}

$authenticationValue = $threeDSecureData->authenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=s
$dsTransId = $threeDSecureData->directoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
$messageVersion = $threeDSecureData->messageVersion; // 2.1.0
$eci = $threeDSecureData->eci; // 05

$response = new Transaction();

// TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
if ($eci === "05" || $eci === "06" || $eci === "01" || $eci === "02") {

   $card->threeDSecure = $threeDSecureData;

   // proceed to authorization with liability shift
   try {
      $response = $card->charge(10.01)
         ->withCurrency("USD")
         ->execute();
   } catch (ApiException $e) {
      // TODO: Add your error handling here
   }
} else {
   // TODO: if liability shift required - halt transaction
}

if ($response != null) {
   $result = $response->responseCode; // 00 == Success
   $message = $response->responseMessage; // [ test system ] AUTHORISED

   // get the details to save to the DB for future requests
   $orderId = $response->orderId; // N6qsk4kYRZihmPrTXWYS6g
   $authCode = $response->authorizationCode; // 12345
   $paymentsReference = $response->transactionId; // 14610544313177922
   $schemeReferenceData = $response->schemeId; // MMC0F00YE4000000715
}

// TODO: consume data sent from the JS Library (requestJson)

// add to existing card object or create a new one
// CreditCardData card = new CreditCardData();
// card.Number = requestJson.card.number;
card.ExpMonth = requestJson.card.expiryMonth;
card.ExpYear = requestJson.card.expiryYear;
card.Cvn = requestJson.card.securityCode;
card.CardHolderName = requestJson.card.cardHolderName;

// Add the customer's billing address
Address billingAddress = new Address
{
   StreetAddress1 = "Apartment 852",
   StreetAddress2 = "Complex 741",
   StreetAddress3 = "Unit 4",
   City = "Chicago",
   PostalCode = "50001",
   State = "IL",
   CountryCode = "840"
};

// Add the customer's shipping address
Address shippingAddress = new Address
{
   StreetAddress1 = "Flat 456",
   StreetAddress2 = "House 789",
   StreetAddress3 = "Basement Flat",
   City = "Halifax",
   PostalCode = "W5 9HR",
   CountryCode = "826"
};

// Add captured browser data from the client-side and server-side
BrowserData browserData = new BrowserData
{
   AcceptHeader = Request.ServerVariables["HTTP_ACCEPT"],
   ColorDepth = requestJson.browserData.colorDepth,
   IpAddress = Request.ServerVariables["REMOTE_ADDR"],
   JavaEnabled = requestJson.browserData.javaEnabled,
   Language = requestJson.browserData.language,
   ScreenHeight = requestJson.browserData.screenHeight,
   Timezone = requestJson.browserData.timezoneOffset,
   UserAgent = requestJson.browserData.userAgent,
   ScreenWidth = requestJson.browserData.screenWidth,
   ChallengeWindowSize = requestJson.challengeWindow.windowSize
};

ThreeDSecure threeDSecureData = new ThreeDSecure
{
   ServerTransactionId = requestJson.serverTransactionId
};

try
{
   threeDSecureData = Secure3dService.InitiateAuthentication(card, threeDSecureData)
      .WithAmount(10.01m)
      .WithCurrency("USD")
      .WithOrderCreateDate(DateTime.Parse("2019-09-09T11:19:12"))
      .WithCustomerEmail("james.mason@example.com")
      .WithAddress(billingAddress, AddressType.Billing)
      .WithAddress(shippingAddress, AddressType.Shipping)
      .WithBrowserData(browserData)
      .WithMethodUrlCompletion(requestJson.methodUrlComplete)
      .WithMobileNumber("44", "7123456789")
      .Execute();
}

catch(ApiException exce)
{
   // TODO: add your error handling here
}

var status = threeDSecureData.Status;

// frictionless flow
if (status != "CHALLENGE_REQUIRED")
{
   // data required for authorization or database record
   var authenticationValue = threeDSecureData.AuthenticationValue; // ODQzNjgwNjU0ZjM3N2JmYTg0NTM=
   var dsTransId = threeDSecureData.DirectoryServerTransactionId; // c272b04f-6e7b-43a2-bb78-90f4fb94aa25
   var messageVersion = threeDSecureData.MessageVersion; // 2.1.0
   var eci = threeDSecureData.Eci; // 5

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   string initiateAuthenticationResponse;

   // TODO: depending on the ECI value proceed to authorization or return authentication failed to the client-side
   if (eci == 5 || eci == 6 || eci == 1 || eci == 2)
   {
      Transaction response = new Transaction();
      // proceed to authorization with liability shift
      try
      {
         response = card.Charge(10.01m)
            .WithCurrency("USD")
            .Execute();

         // authorization successful
         initiateAuthenticationResponse = JsonConvert.SerializeObject(new
         {
            result = "AUTHORIZATION_SUCCESS"
         });
         // TODO: pass the authorization success to the client-side
      }

      catch (ApiException exce)
      {
         // TODO: add your error handling here
         // authorization failure
         initiateAuthenticationResponse = JsonConvert.SerializeObject(new
         {
            result = "AUTHORIZATION_FAILURE"
         });
         // TODO: pass the authorization failure to the client-side
      }
   }

   else
   {
      // authentication failure, no liability shift
      initiateAuthenticationResponse = JsonConvert.SerializeObject(new
      {
         result = "AUTHENTICATION_FAILURE"
      });
      // TODO: pass the authentication failure to the client-side
   }

   /*
    * TODO: pass to the client-side the relevant outcome
    * Authentication Success & Authorization Success or
    * Authentication Success & Authorization Failure or
    * Authentication Failure
    */
}

// challenge flow
else
{
   var challengeRequestUrl = threeDSecureData.IssuerAcsUrl; // https://www.acs.com/challenge
   var encodedCReq = threeDSecureData.PayerAuthenticationRequest; // Very long base64 encoded string
   var challengeMandated = threeDSecureData.ChallengeMandated; // true

   // TODO: simple example of how to prepare the JSON string for JavaScript Library
   string initiateAuthenticationResponse;

   initiateAuthenticationResponse = JsonConvert.SerializeObject(new
   {
      status = status,
      challenge = new Dictionary<string, string>
      {
         { "requestUrl", challengeRequestUrl },
         { "encodedChallengeRequest", encodedCReq }
      },
      challengeMandated = challengeMandated,
   });
   /*
   / TODO: pass the Challenge URL and Encoded Challenge Request to the client-side
   / sample string: {"status":"CHALLENGE_REQUIRED","challenge":{"requestUrl":"https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs","encodedChallengeRequest":"ewogICJ0aHJlZURTU2VydmVyVHJhbnNJRCIgOiAiODA1NjYzNTgtMjA4Ny00MWUyLTliMTctM2VhOTVkMTNiNDM4IiwKICAiYWNzVHJhbnNJRCIgOiAiNTk5NzkxMmUtMDk0Ny00MmFkLWExYmYtY2ViN2QzZWZlNTM5IiwKICAiY2hhbGxlbmdlV2luZG93U2l6ZSIgOiAiMDUiLAogICJtZXNzYWdlVHlwZSIgOiAiQ1JlcSIsCiAgIm1lc3NhZ2VWZXJzaW9uIiA6ICIyLjEuMCIsCiAgImV4cGVjdGVkUmVzcG9uc2VUeXBlIiA6ICJDUkVTIgp9"},"challengeMandated":true}
   */
}

/*
 * this sample code is intended as a simple example and should not be treated as Production-ready code 
 * you'll need to add your own message parsing and security in line with your application or website
 */
@RequestMapping("/methodUrlResponse")
public void consumeMethodUrlResponse(String threeDSMethodData) throws UnsupportedEncodingException {

   // sample ACS response for Method URL Response Notification
   // String threeDSMethodData = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSJ9";

   try {
      byte[] decodedBytes = Base64.getDecoder().decode(threeDSMethodData);
      String methodUrlResponseString = new String(decodedBytes);
      Gson gson = new Gson();

      // map to a custom class MethodUrlResponse
      MethodUrlResponse response = gson.fromJson(methodUrlResponseString, MethodUrlResponse.class);

      String threeDSServerTransID = response.getThreeDSServerTransID(); // // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5

      // TODO: notify client-side that the Method URL step is complete
   }

   catch(Exception e) {
      // TODO: add your exception handling here
   }
}

<?php
/*
 * this sample code is intended as a simple example and should not be treated as Production-ready code 
 * you'll need to add your own message parsing and security in line with your application or website
 */
$threeDSMethodData = $_REQUEST["threeDSMethodData"];

// sample ACS response for Method URL Response Notification
// $threeDSMethodData = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSJ9";

try {
   $decodedThreeDSMethodData = base64_decode($threeDSMethodData);
   $convertedThreeDSMethodData = json_decode($decodedThreeDSMethodData, true);
   $serverTransID = $convertedThreeDSMethodData['threeDSServerTransID']; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5  

   // TODO: notify client-side that the Method URL step is complete
   
} catch (Exception $exce) {
   // TODO: Add your exception handling here
}

/*
 * this sample code is intended as a simple example and should not be treated as Production-ready code 
 * you'll need to add your own message parsing and security in line with your application or website
 */
var threeDSMethodData = Request.Form["threeDSMethodData"];

// sample ACS response for Method URL Response Notification
// threeDSMethodData = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSJ9";

try
{
   byte[] data = Convert.FromBase64String(threeDSMethodData);
   string methodUrlResponseString = Encoding.UTF8.GetString(data);

   // map to a custom class MethodUrlResponse
   MethodUrlResponse methodUrlResponse = JsonConvert.DeserializeObject<MethodUrlResponse>(methodUrlResponseString);

   string threeDSServerTransID = methodUrlResponse.ThreeDSServerTransID; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5

   // TODO: notify client-side that the Method URL step is complete
}

catch (Exception exce)
{
   // TODO: add your exception handling here
}

/*
 * this sample code is intended as a simple example and should not be treated as Production-ready code 
 * you'll need to add your own message parsing and security in line with your application or website
 */
@RequestMapping("/challengeUrlResponse")
public void consumeChallengeUrlResponse(@RequestParam("cres") String cres) throws UnsupportedEncodingException {

   // example CRes (Challenge Result) sent by the ACS
   /* String cres = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSIsImF"
     + "jc1RyYW5zSUQiOiIxM2M3MDFhMy01YTg4LTRjNDUtODllOS1lZjY1ZTUwYThiZjkiLCJjaGFsbGVuZ2VDb21wbGV0a"
     + "W9uSW5kIjoiWSIsIm1lc3NhZ2VUeXBlIjoiQ3JlcyIsIm1lc3NhZ2VWZXJzaW9uIjoiMi4xLjAiLCJ0cmFuc"
     + "1N0YXR1cyI6IlkifQ==";
     */

   try {

      byte[] decodedBytes = Base64.getDecoder().decode(cres);
      String challengeUrlResponseString = new String(decodedBytes);
      Gson gson = new Gson();

      // map to a custom class ChallengeUrlResponse which has String variables for each response element
      ChallengeUrlResponse challengeUrlResponse = gson.fromJson(challengeUrlResponseString, ChallengeUrlResponse.class);

      String threeDSServerTransID = challengeUrlResponse.getThreeDSServerTransID(); // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
      String acsTransId = challengeUrlResponse.getAcsTransID(); // 13c701a3-5a88-4c45-89e9-ef65e50a8bf9
      String messageType = challengeUrlResponse.getMessageType(); // Cres
      String messageVersion = challengeUrlResponse.getMessageVersion(); // 2.1.0
      String transStatus = challengeUrlResponse.getTransStatus(); // Y

      // TODO: notify client-side that the Challenge step is complete and pass any required data
   }

   catch(Exception e) {
      // TODO: Add your exception handling here
   }
}

<?php
/*
 * this sample code is intended as a simple example and should not be treated as Production-ready code 
 * you'll need to add your own message parsing and security in line with your application or website
 */
$cres = $_REQUEST['cres'];

/* $cres = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSIsImF"
 * . "jc1RyYW5zSUQiOiIxM2M3MDFhMy01YTg4LTRjNDUtODllOS1lZjY1ZTUwYThiZjkiLCJjaGFsbGVuZ2VDb21wbGV0a"
 * . "W9uSW5kIjoiWSIsIm1lc3NhZ2VUeXBlIjoiQ3JlcyIsIm1lc3NhZ2VWZXJzaW9uIjoiMi4xLjAiLCJ0cmFuc"
 * . "1N0YXR1cyI6IlkifQ==";
 */

try {
   $decodedString = base64_decode($cres);
   $convertedObject = json_decode($decodedString, true);

   $serverTransID = $convertedObject['threeDSServerTransID']; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
   $acsTransID = $convertedObject['acsTransID']; // 13c701a3-5a88-4c45-89e9-ef65e50a8bf9
   $messageType = $convertedObject['messageType']; // Cres
   $messageVersion = $convertedObject['messageVersion']; // 2.1.0
   $transStatus = $convertedObject['transStatus']; // Y

   // TODO: notify client-side that the Challenge step is complete and pass any required data
} catch (Exception $exce) {
   // TODO: Add your exception handling here
}

/*
 * this sample code is intended as a simple example and should not be treated as Production-ready code 
 * you'll need to add your own message parsing and security in line with your application or website
 */
 var cres = Request.Form["cres"];

// Example CRes (Challenge Result) sent by the ACS
// var cRes = "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSIsImF"
// + "jc1RyYW5zSUQiOiIxM2M3MDFhMy01YTg4LTRjNDUtODllOS1lZjY1ZTUwYThiZjkiLCJjaGFsbGVuZ2VDb21wbGV0a"
// + "W9uSW5kIjoiWSIsIm1lc3NhZ2VUeXBlIjoiQ3JlcyIsIm1lc3NhZ2VWZXJzaW9uIjoiMi4xLjAiLCJ0cmFuc"
// + "1N0YXR1cyI6IlkifQ==";

try
{
   byte[] data = Convert.FromBase64String(cres);
   string challengeUrlResponseString = Encoding.UTF8.GetString(data);
   // map to a custom class ChallengeUrlResponse which has String variables for each response element
   ChallengeUrlResponse challengeUrlResponse = JsonConvert.DeserializeObject<ChallengeUrlResponse>(challengeUrlResponseString);

   var threeDSServerTransID = challengeUrlResponse.ThreeDSServerTransID; // af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5
   var acsTransId = challengeUrlResponse.AcsTransID; // 13c701a3-5a88-4c45-89e9-ef65e50a8bf9
   var messageType = challengeUrlResponse.MessageType; // Cres
   var messageVersion = challengeUrlResponse.MessageVersion; // 2.1.0
   var transStatus = challengeUrlResponse.TransStatus; // Y

   // TODO: notify client-side that the Challenge step is complete and pass any required data
}

catch (Exception exce)
{
   // TODO: add your exception handling here
}

function gatherBrowserData() {
  var colorDepth = screen.colorDepth; // 24
  var javaEnabled = navigator.javaEnabled(); // true
  var browserLanguage = navigator.language; // en_US
  var screenHeight = screen.height; // 1080
  var screenWidth = screen.width; // 1920
  var userAgent = navigator.userAgent;
  // Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36
  
  var browserTime = new Date();
  var browserTimezoneZoneOffset = browserTime.getTimezoneOffset(); // 0 
}

// import javax.servlet.http.HttpServletRequest;
String customerIp = request.getRemoteAddr(); // 123.123.123.123
String acceptHeader = request.getHeader("accept"); // text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8

<?php
$customerIp = $_SERVER['REMOTE_ADDR']; // 123.123.123.123
$acceptHeader = $_SERVER['HTTP_ACCEPT']; // text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8

String customerIp = Request.ServerVariables["REMOTE_ADDR"];
String acceptHeader = Request.ServerVariables["HTTP_ACCEPT"];

curl https://api.sandbox.globalpay-ecommerce.com/3ds2/protocol-versions
-H "Content-type: application/json"
-H "X-GP-VERSION: 2.2.0"
-H "Authorization: securehash 0204a841510d67a46fbd305a60253d7bade32c6e"
-X POST
-d '{
   "request_timestamp": "2019-07-30T08:41:07.590604",
   "merchant_id": "MerchantId",
   "account_id": "internet",
   "number": "4263970000005262",
   "scheme": "VISA",
   "method_notification_url": "https://www.example.com/dsNotificationUrl"
}'

<!DOCTYPE html>
<html>
   <meta charset="ISO-8859-1">
   <head>
      <title>Sample Open Method URL Page</title>
      <script>
         var form = document.createElement("form");
         form.setAttribute("method", "POST");
         form.setAttribute("action", "https://www.acsurl.com/method");
         form.setAttribute("target", "hidden_iframe");
         
         var threeDSMethodData = document.createElement("input");
         threeDSMethodData.setAttribute("type", "hidden");
         threeDSMethodData.setAttribute("name", "threeDSMethodData");
         // add the JSON object returned by Global Payments	    
         threeDSMethodData.setAttribute("value", threeDSmethodDataObject);;
         form.appendChild(threeDSMethodData);
         document.body.appendChild(form);
         
         form.submit();
      </script>
   </head>
   <body>
      <iframe id="hidden_iframe" name="hidden_iframe" style="display: none;"></iframe>
   </body>
</html>

curl https://api.sandbox.globalpay-ecommerce.com/3ds2/authentications
-H "Content-type: application/json"
-H "X-GP-VERSION: 2.2.0"
-H "Authorization: securehash abafc599cfa60c94b8f41d0668dac5ed6b0a21f7"
-X POST
-d '{
   "request_timestamp": "2019-07-30T08:52:44.991911",
   "authentication_source": "BROWSER",
   "authentication_request_type": "PAYMENT_TRANSACTION",
   "message_category": "PAYMENT_AUTHENTICATION",
   "message_version": "2.2.0",
   "challenge_request_indicator":"NO_PREFERENCE",
   "server_trans_id": "ad0fffeb-bfff-44d0-881f-b857fe77c5a2",
   "merchant_id": "MerchantId",
   "account_id": "internet",
   "card_detail": {
      "number": "4263970000005262",
      "scheme": "VISA",
      "expiry_month": "10",
      "expiry_year": "25",
      "full_name": "James Mason"
   },
   "order": {
      "date_time_created": "2019-04-26T10:19:32.552327Z",
      "amount": "1001",
      "currency": "EUR",
      "id": "3400dd37-101d-4940-be15-3c963b6109b3",
      "address_match_indicator": "false",
      "shipping_address": {
         "line1": "Apartment 852",
         "line2": "Complex 741",
         "line3": "House 963",
         "city": "Chicago",
         "postal_code": "50001",
         "state": "IL",
         "country": "840"
      }
   },
   "payer": {
      "email": "james.mason@example.com",
      "billing_address": {
         "line1": "Flat 123",
         "line2": "House 456",
         "line3": "Unit 4",
         "city": "Halifax",
         "postal_code": "W5 9HR",
         "country": "826"
      },
      "mobile_phone": {
         "country_code": "44",
         "subscriber_number": "7123456789"
      }
   },
   "challenge_notification_url": "https://www.example.com/challengeNotificationUrl",
   "method_url_completion": "YES",
   "browser_data": {
      "accept_header": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8",
      "color_depth": "TWENTY_FOUR_BITS",
      "ip": "123.123.123.123",
      "java_enabled": "true",
      "javascript_enabled": "true",
      "language": "en-US",
      "screen_height": "1080",
      "screen_width": "1920",
      "challenge_window_size": "FULL_SCREEN",
      "timezone": "0",
      "user_agent": "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
   },
   "merchant_contact_url": "https://www.example.com/about"
}'

{
    "server_trans_id": "ad0fffeb-bfff-44d0-881f-b857fe77c5a2",
    "acs_trans_id": "13c701a3-5a88-4c45-89e9-ef65e50a8bf9",
    "ds_trans_id": "c272b04f-6e7b-43a2-bb78-90f4fb94aa25",
    "authentication_value": "ODQzNjgwNjU0ZjM3N2JmYTg0NTM=",
    "eci": "05",
    "acs_rendering_type": {},
    "status": "AUTHENTICATION_SUCCESSFUL",
    "status_reason": "LOW_CONFIDENCE",
    "authentication_source": "BROWSER",
    "message_category": "PAYMENT_AUTHENTICATION",
    "message_version": "2.2.0",
    "message_extension": [
        {
            "name": "Sample Extension",
            "id": "B000000009-sampleExtension",
            "criticality_indicator": "false",
            "data": {
                "B000000009-sampleExtension": {
                    "sampleData": "sampleValue"
                }
            }
        }
    ],
    "acs_reference_number": "3DS_LOA_ACS_201_13579",
    "whitelist_status": "PENDING_CARDHOLDER_CONFIRMATION"
}

{
    "server_trans_id": "ad0fffeb-bfff-44d0-881f-b857fe77c5a2",
    "acs_trans_id": "13c701a3-5a88-4c45-89e9-ef65e50a8bf9",
    "ds_trans_id": "c272b04f-6e7b-43a2-bb78-90f4fb94aa25",
    "authentication_type": "DYNAMIC_CHALLENGE",
    "acs_rendering_type": {},
    "challenge_mandated": true,
    "status": "CHALLENGE_REQUIRED",
    "status_reason": "LOW_CONFIDENCE",
    "challenge_request_url": "https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs",
    "authentication_source": "BROWSER",
    "message_category": "PAYMENT_AUTHENTICATION",
    "message_version": "2.2.0",
    "message_extension": [
        {
            "name": "Sample Extension",
            "id": "B000000009-sampleExtension",
            "criticality_indicator": "false",
            "data": {
                "B000000009-sampleExtension": {
                    "sampleData": "sampleValue"
                }
            }
        }
    ],
    "encoded_creq": "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSIsImFjc1RyYW5zSUQiOiIxM2M3MDFhMy01YTg4LTRjNDUtODllOS1lZjY1ZTUwYThiZjkiLCJjaGFsbGVuZ2VXaW5kb3dTaXplIjoiNjAweDQwMCIsIm1lc3NhZ2VUeXBlIjoiQ3JlcSIsIm1lc3NhZ2VWZXJzaW9uIjoiMi4xLjAifQ",
    "acs_reference_number": "3DS_LOA_ACS_201_13579",
    "decoupled_response_indicator": "DECOUPLED_AUTHENTICATION_NOT_UTILISED",
    "whitelist_status": "PENDING_CARDHOLDER_CONFIRMATION",
}

var form = document.createElement("form");
form.setAttribute("method", "POST");
form.setAttribute("action", "https://www.acs.com/challenge");
form.setAttribute("target", "iframe");

var creqData = document.createElement("input");
creqData.setAttribute("type", "hidden");
creqData.setAttribute("name", "creq");
//add creq object obtained from the server
creqData.setAttribute("value", creqObject);
form.appendChild(creqData);

/* optional parameter to include Session Data
var sessionData = document.createElement("input");
sessionData.setAttribute("type", "hidden");
sessionData.setAttribute("name", "threeDSSessionData");
creqDatasetAttribute("value", sessionDataObject);
form.appendChild(sessionData);
*/

document.body.appendChild(form);

form.submit();

curl "https://api.sandbox.globalpay-ecommerce.com/3ds2/authentications/ad0fffeb-bfff-44d0-881f-b857fe77c5a2?merchant_id=MerchantId&request_timestamp=2019-07-30T08:52:44.991911"
-H "Content-type: application/json"
-H "X-GP-VERSION: 2.2.0"
-H "Authorization: securehash 3acf61a9f49ee7a57fb57d710b97dd00399342a4"
-X GET

{
    "server_trans_id": "af65c369-59b9-4f8d-b2f6-7d7d5f5c69d5",
    "acs_trans_id": "13c701a3-5a88-4c45-89e9-ef65e50a8bf9",
    "ds_trans_id": "c272b04f-6e7b-43a2-bb78-90f4fb94aa25",
    "authentication_type": "DYNAMIC_CHALLENGE",
    "authentication_value": "ODQzNjgwNjU0ZjM3N2JmYTg0NTM=",
    "eci": "05",
    "challenge_mandated": true,
    "status": "AUTHENTICATION_SUCCESSFUL",
    "status_reason": "HIGH_CONFIDENCE",
    "challenge_request_url": "https://test.portal.gpwebpay.com/pay-sim-gpi/sim/acs",
    "authentication_source": "BROWSER",
    "message_category": "PAYMENT_AUTHENTICATION",
    "message_version": "2.2.0",
    "message_extension": [
        {
            "name": "Sample Extension",
            "id": "B000000009-sampleExtension",
            "criticality_indicator": "false",
            "data": {
                "B000000009-sampleExtension": {
                    "sampleData": "sampleValue"
                }
            }
        }
    ],
    "encoded_creq": "eyJ0aHJlZURTU2VydmVyVHJhbnNJRCI6ImFmNjVjMzY5LTU5YjktNGY4ZC1iMmY2LTdkN2Q1ZjVjNjlkNSIsImFjc1RyYW5zSUQiOiIxM2M3MDFhMy01YTg4LTRjNDUtODllOS1lZjY1ZTUwYThiZjkiLCJjaGFsbGVuZ2VXaW5kb3dTaXplIjoiNjAweDQwMCIsIm1lc3NhZ2VUeXBlIjoiQ3JlcSIsIm1lc3NhZ2VWZXJzaW9uIjoiMi4xLjAifQ",
    "decoupled_response_indicator": "DECOUPLED_AUTHENTICATION_NOT_UTILISED",
    "whitelist_status": "PENDING_CARDHOLDER_CONFIRMATION"
}

// if you're using the Global Payments JS Library and SDK solution for 3D Secure 2
// you can skip below to Transaction response = null;

// Configure client & request settings
GatewayConfig config = new GatewayConfig();
config.setMerchantId("MerchantId");
config.setAccountId("internet");
config.setSharedSecret("secret");
config.setServiceUrl("https://api.sandbox.realexpayments.com/epage-remote.cgi");
ServicesContainer.configureService(config);

// Create the card object
CreditCardData card = new CreditCardData();
card.setNumber("4012001038488884");
card.setExpMonth(12);
card.setExpYear(2025);
card.setCvn("123");
card.setCardHolderName("James Mason");

// Add obtained 3D Secure 2 authentication data
ThreeDSecure threeDSecureData = new ThreeDSecure();
threeDSecureData.setAuthenticationValue("ODQzNjgwNjU0ZjM3N2JmYTg0NTM=");
threeDSecureData.setDirectoryServerTransactionId("c272b04f-6e7b-43a2-bb78-90f4fb94aa25");
threeDSecureData.setEci("05");
threeDSecureData.setMessageVersion("2.1.0");

// Add the 3D Secure 2 data to the card object
card.setThreeDSecure(threeDSecureData);

Transaction response = null;

try {
   response = card.charge(new BigDecimal("10.01"))
         .withCurrency("USD")
         .execute();
}

catch (ApiException exec) {
   // TODO: add your error handling here
}

if (response != null) {
   String result = response.getResponseCode(); // 00 == Success
   String message = response.getResponseMessage(); // [ test system ] AUTHORISED

   // get the details to save to the DB for future requests
   String orderId = response.getOrderId(); // ezJDQjhENTZBLTdCNzNDQw
   String authCode = response.getAuthorizationCode(); // 12345
   String paymentsReference = response.getTransactionId(); // pasref
   String schemeReferenceData = response.getSchemeId(); // MMC0F00YE4000000715  
}

<?php
require_once ('vendor/autoload.php');

// if you're using the Global Payments JS Library and SDK solution for 3D Secure 2
// you can skip below to $response = new Transaction();

use GlobalPayments\Api\ServiceConfigs\Gateways\GpEcomConfig;
use GlobalPayments\Api\ServicesContainer;
use GlobalPayments\Api\Entities\Exceptions\ApiException;
use GlobalPayments\Api\PaymentMethods\CreditCardData;
use GlobalPayments\Api\Entities\Enums\CvnPresenceIndicator;
use GlobalPayments\Api\Entities\ThreeDSecure;
use GlobalPayments\Api\Entities\Transaction;

$config = new GpEcomConfig();
$config->merchantId = "myMerchantId";
$config->accountId = "ecom3ds";
$config->sharedSecret = "secret";
$config->serviceUrl = "https://api.sandbox.realexpayments.com/epage-remote.cgi";
ServicesContainer::configureService($config);

// create the card object
$card = new CreditCardData();
$card->number = "4263970000005262";
$card->expMonth = 12;
$card->expYear = 2025;
$card->cvn = "131";
$card->cvnPresenceIndicator = CvnPresenceIndicator::PRESENT;
$card->cardHolderName = "James Mason";

// add obtained 3D Secure 2 authentication data
$threeDSecureData = new ThreeDSecure();
$threeDSecureData->authenticationValue = "ODQzNjgwNjU0ZjM3N2JmYTg0NTM=";
$threeDSecureData->directoryServerTransactionId = "c272b04f-6e7b-43a2-bb78-90f4fb94aa25";
$threeDSecureData->eci = "5";
$threeDSecureData->messageVersion = "2.1.0";

// add the 3D Secure 2 data to the card object
$card->threeDSecure = $threeDSecureData;

$response = new Transaction();

try {
    // process an auto-settle authorization
    $response = $card->charge(10.01)
        ->withCurrency("EUR")
        ->execute();
} catch (ApiException $e) {
    // TODO: Add your error handling here
}

if ($response != null) {
   $result = $response->responseCode; // 00 == Success
   $message = $response->responseMessage; // [ test system ] AUTHORISED

   // get the details to save to the DB for future requests
   $orderId = $response->orderId; // N6qsk4kYRZihmPrTXWYS6g
   $authCode = $response->authorizationCode; // 12345
   $paymentsReference = $response->transactionId; // 14610544313177922
   $schemeReferenceData = $response->schemeId; // MMC0F00YE4000000715
}

// if you're using the Global Payments JS Library and SDK solution for 3D Secure 2
// you can skip below to Transaction response = null;

// configure client and request settings
ServicesContainer.ConfigureService(new GpEcomConfig
{
   MerchantId = "myMerchantId",
   AccountId = "ecom3ds",
   SharedSecret = "secret",
   ServiceUrl = "https://api.sandbox.realexpayments.com/epage-remote.cgi"
});

var card = new CreditCardData
{
   Number = "4012001038488884",
   ExpMonth = 12,
   ExpYear = 2025,
   Cvn = "131",
   CardHolderName = "James Mason"
};

// add obtained 3D Secure 2 authentication data
var threeDSecureData = new ThreeDSecure()
{
   AuthenticationValue = "ODQzNjgwNjU0ZjM3N2JmYTg0NTM=",
   DirectoryServerTransactionId = "c272b04f-6e7b-43a2-bb78-90f4fb94aa25",
   Eci = 5,
   MessageVersion = "2.1.0"
};

// add the 3D Secure 2 data to the card object
card.ThreeDSecure = threeDSecureData;

Transaction response = null;

try
{
   response = card.Charge(10.01m)
      .WithCurrency("USD")
      .Execute();
}

catch (ApiException exce)
{
   // TODO: add your error handling here
}

if (response != null)
{
   var result = response.ResponseCode; // 00 == Success
   var message = response.ResponseMessage; // [ test system ] AUTHORISED

   // get the response details to save to the DB for future requests
   var orderId = response.OrderId; // ezJDQjhENTZBLTdCNzNDQw
   var authCode = response.AuthorizationCode; // 12345
   var paymentsReference = response.TransactionId; // pasref
   var schemeReferenceData = response.SchemeId; // MMC0F00YE4000000715
}

<?xml version="1.0" encoding="UTF-8"?>
<request type="auth" timestamp="20180613104233">
  <merchantid>MerchantId</merchantid>
  <account>internet</account>
  <orderid>AWfoT2k9TzuA0wn8Ze_IIQ</orderid>
  <amount currency="EUR">1000</amount>
  <card>
    <number>4263970000005262</number>
    <expdate>0525</expdate>
    <chname>Philip Marlowe</chname>
    <type>VISA</type>
    <cvn>
      <number>123</number>
      <presind>1</presind>
    </cvn>
  </card>
  <autosettle flag="1"/>
  <mpi>
    <eci>5</eci>
    <ds_trans_id>c272b04f-6e7b-43a2-bb78-90f4fb94aa25</ds_trans_id>
    <authentication_value>ODQzNjgwNjU0ZjM3N2JmYTg0NTM=</authentication_value>
    <message_version>2.2.0</message_version>
    <exempt_status>TRANSACTION_RISK_ANALYSIS</exempt_status>
  </mpi>
  <sha1hash>c87e5fa0858671510a02477d146ef744233e4ba8</sha1hash>
</request>