Quote Originally Posted by simon1066 View Post
As I've yet to be asked for any form of 2FA for credit card purchases online I'm not sure how this works. Is the flow something like:

- customer enters credit card info as usual, click Make Payment (I forget what the button's called).
- if the issuer requires SCA then a message is displayed saying that a code has been sent to their mobile.
- the popup shown in post #583 is displayed, asking for the customer to enter their passcode.
- click 'verfiy now' and the transaction is accepted.
Thats about the size of it. You enter card details on checkout_payment, and if your bank requires active verification, the popup modal will appear and guide you through the code generation (be that code sent via sms, email or soon within online banking apps via notificactions). If you enter the code correctly it will then proceed from checkout payment to checkout_confirmation.

Like contactless payments in shops, many payments go through frictionless and don't actively require user intervention, but this fix allows the modal to appear and the verifictation token to be applied. Square takes care of all of that on their API & with the card issuer, so long as you have these extra code changes to include the token requirements.