3D Secure (3DS)

const authResult = await caktoSdk.authenticate3DS({
  card,
  customer: {
    amount: 10000,
    currency: "BRL",
    email: "joao@exemplo.com",
    name: "João da Silva",
    phone: "11999999999",
    paymentMethod: "credit",
    address: {
      street: "Rua Exemplo",
      number: "123",
      complement: "Apto 1",
      city: "São Paulo",
      state: "SP",
      zipcode: "01234-567",
    },
  },
});

if (!authResult.success) {
  throw new Error(authResult.error || "Falha na autenticação 3DS");
}

await caktoSdk.completeAntifraudProfile();

await fetch("https://seu-backend.com/pagamentos", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    cardToken,
    threeDSecure: {
      cavv: authResult.cavv,
      eci: authResult.eci,
      xid: authResult.xid,
      referenceId: authResult.referenceId,
      version: authResult.version,
    },
    antifraud_profiling_attempt_reference: caktoSdk.getAntifraudReference(),
  }),
});

const tokenRes = await fetch("https://api.cakto.com.br/public_api/token", {
  method: "POST",
  headers: { "Content-Type": "application/x-www-form-urlencoded" },
  body: new URLSearchParams({
    client_id: process.env.CAKTO_API_CLIENT_ID,
    client_secret: process.env.CAKTO_API_CLIENT_SECRET,
  }),
});

const { access_token } = await tokenRes.json();

await fetch("https://api.cakto.com.br/public_api/payments", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${access_token}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    offerId,
    paymentMethod: "threeDs",
    customer,
    cardToken,
    threeDSecure,
    antifraud_profiling_attempt_reference,
  }),
});