✅ 3D Secure payments involve an additional level of authentication to protect both merchants and customers
       from the threat of payment fraud.

• Payment Flows

  • 1️⃣ Setting Up required Information for payment requests in Input Tag.
    • Customer enters payment information on webpage configured by merchant.
      
  • 2️⃣ Authentication request and response
    • Merchant processes the payment information and merchant information received from customer and sends authentication request to Paystory's server.
    • After selecting the card they wish to use for payment, customer proceeds through authentication process provided by card issuer.
    • Once the customer's card authentication is successful, Paystory sends encrypted datas for authorization request to the merchant.
  • 3️⃣ Authorization request and response
    • Merchant uses authentication result value to send payment authorization request to Paystory's server.
    • Upon receiving Paystory's authorization response, merchant processes payment result as either successful or failed.
    
    

• HashData configuration

  🔒 When requesting authentication, payment, integrity of the request data is verified using
       encrypted data(Hashdata).

• Requirement

  • Merchant Key Setting

    • The Merchant Key is a value that functions as a password for payment purposes and is allocated to each MID (Merchant ID).
    • "How to find the merchant key" : After accessing Paystory merchant admin site (https://mms.minglepay.co.kr),
      merchant key information is found on the menu “[Account Management]▶[Payment Configuration]▶[KEY Information]”
    • ❗ $\textcolor{red}{\textsf{Please be careful not to disclose the key information to the outside.}}$

  • Form Data setting for Payment request

    • Please set the name attribute in the input tag (used when executing payment request script).
    • Please set field names with accurate case sensitivity.
    • Please set all fields to "hidden" except for cases where the user needs to change them.
    • Set the action attribute of the form tag to redirect to the Authorization request page after authentication is completed.

  • Include JavaScript for calling payment window

    • Include the JS File(https://pg.minglepay.co.kr/js/pgAsistant.js) provided by Pay-Story.
      ❌ $\textcolor{red}{\textsf{If you download and use the JS file, payment may not be processed.}}$
    • To call the payment window and submit after authentication, you must use two functions(SendPay() & pay_result_submit()) defined in the JS file.

<script type="text/javascript">
// function for calling payment window 
	function doPaySubmit(){
		SendPay(document.formID);  
	}
//  Function for payment Result (❌Do not modify function name )
	function pay_result_submit(){
		payResultSubmit()
	}
</script> 

• 📌 Payment Windows in Authentication Step

• 📌 Use the sendPay() function defined in the Pay-Story JS file (https://pg.minglepay.co.kr/js/pgAsistant.js) to send
        the payment request data (FormData) and call the payment window.

• 💡 Only the special characters (_()@#*+= $ ~%^&?/-[] are allowed for use in parameters.

• 📌 When authentication is complete, pay_result_submit() is called by the included JS file.
  • 👉 pay_result_submit() send the authentication result data to the URL set in action of <Form>.
• 📌 In the mobile environment, authentication result data is delivered to the URL set in the returnUrl parameter.

📌 The merchant sends a payment request to Pay-Story's approval server by transmitting the data received
      during authentication process.

StringBuffer requestData = new StringBuffer();
requestData.append("tid=").append(tid).append("&");
requestData.append("mid=").append(mid).append("&");
requestData.append("goodsAmt=").append(goodsAmt).append("&");
requestData.append("ediDate=").append(ediDate).append("&");
requestData.append("charSet=").append("utf-8").append("&");
requestData.append("encData=").append(encData).append("&");
requestData.append("signData=").append(signData);
String receiveData = connectToServer(requestData.toString(), "https://pg.minglepay.co.kr/payment");
Map<String, Object> resultData = jsonStringToHashMap(receiveData);

💡 By setting the action attribute value of a <form> to the same URL as the returnUrl,
    you can make a single payment request page that works seamlessly on both PC and mobile devices.

URL :https://pg.minglepay.co.kr/payment
Content-Type : application/x-www-form-urlencoded; charset=utf-8
Data Type : String

Content-Type: application/json
Data Type : String

💡 Only special characters (_()@#*+= $ ~%^&?/-[] are allowed for use in parameters.