Object: AuthenticationResponse

    • The AuthenticationResponse object, sent during authentication, contains associationId , requestId , and authenticationResult .

    • This object is encrypted, signed (using PGP or JWE+JWS), and encoded with web-safe base64.

    • authenticationResult indicates the outcome: success , cancelled , or fatalError .

    • associationId and requestId are used for validation and preventing replay attacks, respectively.

    Response body

    Object sent during authentication response.

    Here's an example of a clear text JSON response:

     {
    "associationId": "88ydEE-ioiwe==",
    "requestId": "375dhjf9-Uydd="
  }

    The AuthenticationResponse is encrypted and signed using PGP or JWE+JWS. Further, this value is web-safe base64 encoded. This encoding is referred to below as Base64UrlEncode . In other words, the clear text JSON version of the AuthenticationRequest must be passed through the following functions:

     Base64UrlEncode(
  PGPSignAndEncrypt(
    '{"associationId": "88ydEE-ioiwe==", "requestId": "375dhjf9-Uydd="}'
  )
)

    or

     Base64UrlEncode(
  JWSignAndEncrypt(
    '{"associationId": "88ydEE-ioiwe==", "requestId": "375dhjf9-Uydd="}'
  )
)
    JSON representation 
     { 
 "associationId" : 
 string 
 , 
 "requestId" : 
 string 
 , 
 "authenticationResult" 
 : 
 { 
 object (  AuthenticationResult 
 
) 
 } 
 }
    Fields
    associationId

    string

    Reflected back by the payment integrator to Google. This allows Google to check that the associationId passed back is the same gspAssociationId passed in. This is required if it is present on the request.
    requestId

    string

    REQUIRED: Reflected back by the payment integrator to Google. This allows Google to prevent replay attacks.
    authenticationResult

    object ( AuthenticationResult )

    The result of the authentication. For flows where there is no subsequent call to the Payment Integrator after the authentication has taken place, the result must be included in the response to ensure the integrity of the result.

    AuthenticationResult

    JSON representation 
     { 
 // Union field result 
can be only one of the following: 
 "success" 
 : 
 { 
 object (  Empty 
 
) 
 } 
 , 
 "cancelled" 
 : 
 { 
 object (  Empty 
 
) 
 } 
 , 
 "fatalError" 
 : 
 { 
 object (  Empty 
 
) 
 } 
 // End of list of possible types for union field result 
. 
 }
    Fields

    Union field result .

    result can be only one of the following:

    success

    object ( Empty )

    Authentication was successful.

    cancelled

    object ( Empty )

    User canceled the flow manually and the flow should be aborted.

    fatalError

    object ( Empty )

    Authentication failed for a fatal reason and the flow should be aborted.
    Create a Mobile Website
    View Site in Mobile | Classic
    Share by: