<script src="https://mpisandbox.braspag.com.br/Scripts/V3/mpi.js"></script>
<script src="https://mpisandbox.braspag.com.br/Scripts/V3/mpiHelpers.js"></script>

<script src="https://mpi.braspag.com.br/Scripts/V3/mpi.js"></script>
<script src="https://mpi.braspag.com.br/Scripts/V3/mpiHelpers.js"></script>

const MPI = (function () {
    "use strict";

    const DEFAULT_CONFIG = {
        "Debug": true,
        "Environment": "PRD"
    };
    const _logPrefixes = ["[MPI.V3]"];
    const _lastError = {
        "Number": null,
        "Description": null,
        "HasError": function () {
            return this.Number !== null;
        }
    };
    let _configuration = null;
    let _referenceId = null;
    let _loaded = false;

    function loadConfiguration(config) {
        // TODO: Validar configuração.
        if (config) {
            _configuration = config;
            return;
        }
        
        _configuration = DEFAULT_CONFIG;

        log("Default configuration loaded", DEFAULT_CONFIG);
    }

    function _loadResources(config) {
        loadConfiguration(config);

        log("Debug =", getIsDebug());
        log("Enviroment =", getEnvironment());
        log("Config =", _configuration);

        if (_loaded) {
            log("Resources already loaded...");
            return;
        }

        log("Loading resources...");

        loadScript(getCardinalScriptUri(), getCardinalScriptIntegrity(), function () {
            _loaded = true;
            log("Cardinal script loaded.");
            notify("onLoadComplete");
        });
    }

    function _initialize(token, referenceId) {
        if (!_loaded) {
            log("Resources not loaded...");
            return;
        }

        _referenceId = referenceId;

        log("Initializing...");
        log("Telemetry Token =", token);
        log("ReferenceId =", _referenceId);

        Cardinal.configure({
            timeout: "8000",
            maxRequestRetries: "10",
            logging: {
                level: getCardinalLogLevel()
            }
        });

        Cardinal.setup('init', {
            jwt: token
        });

        Cardinal.on('payments.setupComplete', function (data) {
            log("Setup complete.");
            log("SetupCompleteData =", data);
            notify("onReady");
        });

        // Eventos da Cardinal
        Cardinal.on('payments.validated', function (data) {
            log("[MPI]", "Payment validated.");
            log("[MPI]", "ActionCode =", data.ActionCode);
            log("[MPI]", "Data =", data);

            switch (data.ActionCode) {
                case 'SUCCESS':
                case 'NOACTION':
                case 'FAILURE':
                    notify("onValidationRequired", {
                        "TransactionId": data.Payment.ProcessorTransactionId
                    });
                    break;
                case 'ERROR':
                    _lastError.Number = data.ErrorNumber;
                    _lastError.Description = data.ErrorDescription;

                    if (data.Payment && data.Payment.ProcessorTransactionId) {
                        notify("onValidationRequired", {
                            "TransactionId": data.Payment.ProcessorTransactionId
                        }); 
                    }
                    else {
                        notify("onError", {
                            "Xid": null,
                            "Eci": null,
                            "ReturnCode": _lastError.HasError() ? _lastError.Number : "MPI901",
                            "ReturnMessage": _lastError.HasError() ? _lastError.Description : "Unexpected error",
                            "ReferenceId": null
                        });
                    }
                    break;
                default:
                    _lastError.Number = data.ErrorNumber;
                    _lastError.Description = data.ErrorDescription;

                    if (data.ErrorDescription === "Success" &&
                        data.Payment &&
                        data.Payment.ProcessorTransactionId) {
                        notify("onValidationRequired", {
                            "TransactionId": data.Payment.ProcessorTransactionId
                        }); 
                    }
                    else {
                        notify("onError", {
                            "Xid": null,
                            "Eci": null,
                            "ReturnCode": _lastError.HasError() ? _lastError.Number : "MPI902",
                            "ReturnMessage": _lastError.HasError() ? _lastError.Description : "Unexpected authentication response",
                            "ReferenceId": null
                        });
                    }
            }
        });
    }

    function canReadCardNumber() {
        return typeof _configuration["cardNumberReader"] === "function";
    }

    function readCardNumber() {
        if (canReadCardNumber()) {
            return _configuration.cardNumberReader();
        }

        return "";
    }

    function _updateCard() {
        let cardNumber = readCardNumber();

        if (typeof cardNumber !== "string" || cardNumber.trim().length === 0) {
            log("Card number is empty. Skipping update.");
            return;
        }

        log("Updating card... ");

        Cardinal.trigger("accountNumber.update", cardNumber);
    }

    function _challenge(challengeData, order) {
        log("Showing challenge...");
        log("Challenge object =", challengeData);
        log("Order object =", order);

        Cardinal.continue("cca",
            challengeData,
            order);
    }

    function getEnvironment() {
        return _configuration.Environment || "PRD";
    }

    function getCardinalScriptUri() {
        const environment = getEnvironment();
        const enviroments = {
            "TST": "https://cas.static.client.cardinaltrusted.com/songbird/v2.0.0/songbird.js",
            "SDB": "https://cas.static.client.cardinaltrusted.com/songbird/v2.0.0/songbird.js",
            "PRD": "https://static.client.cardinaltrusted.com/songbird/v2.0.0/songbird.js"
        };

        return enviroments[environment];
    }

    function getCardinalScriptIntegrity() {
        const environment = getEnvironment();
        const integrities = {
            "TST": "sha384-6nfn2JGFT+s1LF9R3jP+Nn6HFGdlBXNlv4PaMKXNCSec9+hsazo8euFU8te9H5cZ",
            "SDB": "sha384-6nfn2JGFT+s1LF9R3jP+Nn6HFGdlBXNlv4PaMKXNCSec9+hsazo8euFU8te9H5cZ",
            "PRD": "sha384-LF1l2lmxu53ZO8yd0LMbIzyAosonuf0vOOz/SVegG9xfS0QtUxW53vB2U0JoWJem"
        };

        return integrities[environment];
    }

    function loadScript(url, integrity, callback) {
        const head = document.getElementsByTagName('head')[0];
        const script = document.createElement('script');
        script.type = 'text/javascript';
        script.src = url;
        script.integrity = integrity;
        script.crossOrigin = "anonymous";
        script.onload = callback;
        head.appendChild(script);
    }

    function getIsDebug() {
        if (_configuration.Debug !== "undefined") {
            return _configuration.Debug;
        }

        return false;
    }

    function log(...args) {
        if (getIsDebug())
            console.log(..._logPrefixes, ...args);
    }

    function getCardinalLogLevel() {
        return getIsDebug() ? "verbose" : "off";
    }

    function isSubscribed(eventType) {
        return typeof _configuration[eventType] === "function";
    }

    function notify(eventType, eventData) {
        log("Notifying...");
        log("Event type =", eventType);
        log("Event data =", eventData || "None");
        if (isSubscribed(eventType)) {
            _configuration[eventType](eventData);
        }
        else {
            log("Not subscribed")
        }
    }

    return {
        load: function (config) {
            _loadResources(config);
        },
        init: function (referenceId, initToken) {
            _initialize(initToken, referenceId);
        },
        updateCard: function () {
            _updateCard();
        },
        challenge: function (challengeData, order) {
            _challenge(challengeData, order);
        }
    };
})();

const MPIHelpers = (function () {
    "use strict";

    const _currencyIsoCodes = {
        BRL: "986",
        USD: "840",
        MXN: "484",
        COP: "170",
        CLP: "152",
        ARS: "032",
        PEN: "604",
        EUR: "978",
        PYN: "600",
        UYU: "858",
        VEB: "862",
        VEF: "937",
        GBP: "826"
    };

    const _orderChannels = {
        ECOMMERCE: "S",
        MOTO: "M",
        RETAIL: "R",
        MOBILE_DEVICE: "P",
        TABLET: "T"
    };

    const _orderBuilder = {
        _order: {
            "OrderDetails": {
                "OrderChannel": "S"
            },
            "Consumer": {
                "Account": {},
                "ShippingAddress": {},
                "BillingAddress": {}
            },
            "Cart": []
        },

        withTransaction: function (transactionId) {
            this._order.OrderDetails.TransactionId = transactionId;
            return this;
        },
        withOrderNumber: function (orderNumber) {
            this._order.OrderDetails.OrderNumber = orderNumber;
            return this;
        },
        withCurrency: function (currencyCode) {
            this._order.OrderDetails.CurrencyCode = currencyCode;
            return this;
        },
        withChannel: function (orderChannel) {
            this._order.OrderDetails.OrderChannel = orderChannel;
            return this;
        },
        withOrderDetails: function (orderNumber, currencyCode, orderChannel) {
            this.withOrderNumber(orderNumber);
            this.withCurrency(currencyCode);
            this.withChannel(orderChannel);
            return this;
        },
        withCard: function (cardNumber, expirationMonth, expirationYear) {
            this._order.Consumer.Account.AccountNumber = cardNumber;
            this._order.Consumer.Account.ExpirationMonth = expirationMonth;
            this._order.Consumer.Account.ExpirationYear = expirationYear;
            return this;
        },
        withEmail1: function (email1) {
            this._order.Consumer.Email1 = email1;
            return this;
        },
        withEmail2: function (email2) {
            this._order.Consumer.Email2 = email2;
            return this;
        },
        withBillingAddress: function (fullname, addressLine1, addressLine2, city, state, postalCode, countryCode, phone) {
            this._order.Consumer.BillingAddress.FullName = fullname;
            this._order.Consumer.BillingAddress.Address1 = addressLine1;
            this._order.Consumer.BillingAddress.Address2 = addressLine2;
            this._order.Consumer.BillingAddress.City = city;
            this._order.Consumer.BillingAddress.State = state;
            this._order.Consumer.BillingAddress.PostalCode = postalCode;
            this._order.Consumer.BillingAddress.CountryCode = countryCode;
            this._order.Consumer.BillingAddress.Phone1 = phone;
            return this;
        },
        withShippingAddress: function (fullname, addressLine1, addressLine2, city, state, postalCode, countryCode, phone) {
            this._order.Consumer.ShippingAddress.FullName = fullname;
            this._order.Consumer.ShippingAddress.Address1 = addressLine1;
            this._order.Consumer.ShippingAddress.Address2 = addressLine2;
            this._order.Consumer.ShippingAddress.City = city;
            this._order.Consumer.ShippingAddress.State = state;
            this._order.Consumer.ShippingAddress.PostalCode = postalCode;
            this._order.Consumer.ShippingAddress.CountryCode = countryCode;
            this._order.Consumer.ShippingAddress.Phone1 = phone;
            return this;
        },
        withShippingAddressAsBillingAddress() {
            this.withShippingAddress(
                this._order.Consumer.BillingAddress.FullName,
                this._order.Consumer.BillingAddress.Address1,
                this._order.Consumer.BillingAddress.Address2,
                this._order.Consumer.BillingAddress.City,
                this._order.Consumer.BillingAddress.State,
                this._order.Consumer.BillingAddress.PostalCode,
                this._order.Consumer.BillingAddress.CountryCode,
                this._order.Consumer.BillingAddress.Phone1
            );
            return this;
        },
        withCartItem: function (name, description, sku, quantity, price) {
            const cartItem = this.buildCartItem(name, description, sku, quantity, price);
            this._order.Cart.push(cartItem);
            return this;
        },
        withCartItems: function (...cartItens) {
            this._order.Cart.push(...cartItens);
            return this;
        },
        buildCartItem: function (name, description, sku, quantity, price) {
            return {
                "Name": name,
                "Description": description,
                "SKU": sku,
                "Quantity": quantity,
                "Price": price
            };
        },
        build: function () {
            return this._order;
        }
    };

    function _getBrowserInfo() {
        const screenWidth = window && window.screen ? window.screen.width : '';
        const screenHeight = window && window.screen ? window.screen.height : '';
        const colorDepth = window && window.screen ? window.screen.colorDepth : '';
        const userAgent = window && window.navigator ? window.navigator.userAgent : '';
        const javaEnabled = window && window.navigator && window.navigator.javaEnabled() ? 'Y' : 'N';

        let language = '';
        if (window && window.navigator) {
            language = window.navigator.language ? window.navigator.language : window.navigator.browserLanguage;
        }

        const timeZoneOffset = new Date().getTimezoneOffset();

        return {
            userAgent: userAgent,
            screenWidth: screenWidth,
            screenHeight: screenHeight,
            colorDepth: colorDepth,
            timeZoneOffset: timeZoneOffset,
            language: language,
            javaEnabled: javaEnabled,
            javascriptEnabled: 'Y'
        };
    }

    return {
        getBrowserInfo: function () {
            return _getBrowserInfo();
        },
        getOrderBuilder: function () {
            return _orderBuilder;
        },
        Constants: {
            getCurrencyISO: function () {
                return _currencyIsoCodes;
            },
            getOrderChannels: function () {
                return _orderChannels;
            }
        }
    };
})();

MPI.load({
    Environment: "SDB",   // "SDB" for sandbox | "PRD" for production
    Debug: true,          // true enables logs in the browser console

    // Triggered when external dependencies (Cardinal) are loaded.
    // Use to enable the buy button or indicate that checkout is ready.
    onLoadComplete: function () {
        document.getElementById("btnPagar").disabled = false;
    },

    // Triggered when Cardinal.setup is complete and the script is ready for use.
    // Only call MPI.updateCard() after this event.
    onReady: function () {
        console.log("MPI ready.");
    },

    // Triggered when an error occurs during the authentication process.
    // The error object contains: { Xid, Eci, ReturnCode, ReturnMessage, ReferenceId }
    onError: function (error) {
        console.error("Code:", error.ReturnCode);
        console.error("Message:", error.ReturnMessage);
    },

    // Triggered after the cardholder completes the challenge.
    // The validationEvent object contains: { TransactionId }
    // Use TransactionId to call the VALIDATE operation in the back-end.
    onValidationRequired: function (validationEvent) {
        const transactionId = validationEvent.TransactionId;
        sendToBackend({ transactionId: transactionId });
    },

    // Called immediately before executing MPI.updateCard().
    // Must return the card number as a string (digits only).
    cardNumberReader: function () {
        return document.getElementById("cardNumber").value.replace(/\D/g, "");
    }
});

Authorization: Basic ZGJhM2E4ZGItZmE1NC00MGUwLThiYWItN2JmYjliNmYyZTJlOkQvaWxSc2ZvcUhsU1VDaHdBTW5seUtkRE5kN0ZNc003Y1Uvdm8wMlJFYWc9

{
    "EstablishmentCode": "1111111111",
    "MerchantName": "MERCHANT NAME",
    "MCC": "0000"
}

{
    "access_token": "<access_token>",
    "token_type": "bearer",
    "expires_in": "1200"
}

[
    {
        "Code": 605,
        "Message": "Establishment code is a mandatory parameter"
    }
]

[
    {
        "Code": 606,
        "Message": "Merchant name is a mandatory parameter"
    }
]

[
    {
        "Code": 607,
        "Message": "MCC is a mandatory parameter"
    }
]

[
    {
        "Code": 608,
        "Message": "MCC must have 4 digits"
    }
]

[
    {
        "Code": 609,
        "Message": "All merchant data must be informed"
    }
]

{
    "orderNumber": "ORD-0000123",
    "currency": "986",
    "amount": "1000"
}

{
    "referenceId": "f49f78fc-4427-439b-888c-dfa78a207bca",
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiIwZWJlYjA1My1mZTYxLTRhYWQtYWIyYi0yOGE3MzQxOTQyNzMiLCJpYXQiOjE3ODIxNTg2ODcsImlzcyI6IjYwOTk1OGJiZjc0MzQ0NmUwMWNkYzAzMiIsIk9yZ1VuaXRJZCI6IjYwOTk1OGJiMGQ2MTkzN2NlMjM4ODlmYiIsIlBheWxvYWQiOiJ7XCJPcmRlckRldGFpbHNcIjp7XCJPcmRlck51bWJlclwiOlwiMTIzNDU2XCIsXCJBbW91bnRcIjpcIjEwMDBcIixcIkN1cnJlbmN5Q29kZVwiOlwiOTg2XCJ9fSIsIk9iamVjdGlmeVBheWxvYWQiOmZhbHNlLCJleHAiOjE3ODIxNTk1ODcsIlJlZmVyZW5jZUlkIjoiZjQ5Zjc4ZmMtNDQyNy00MzliLTg4OGMtZGZhNzhhMjA3YmNhIn0.rVvMS5r3rkOKNiDTOOLuz23amwkDbQ84Af3Agw1zCd4"
}

[
    {
        "Code": "OrderNumber",
        "Message": "'Order Number' must not be empty."
    }
]

[
    {
        "Code": "609",
        "Message": "Invalid Access Token"
    }
]

// Call your back-end endpoint that runs INIT and returns referenceId and token
fetch("/api/YOUR_ENDPOINT", { method: "POST" })
    .then(response => response.json())
    .then(data => {
        // data.referenceId and data.token are returned by the INIT operation
        MPI.init(data.referenceId, data.token);
        // Wait for the onReady callback before proceeding.
    });

document.getElementById("btnPagar").addEventListener("click", function () {
    // 1. Update card data in the script
    MPI.updateCard();

    // 2. Collect browser data
    const browserInfo = MPIHelpers.getBrowserInfo();

    // 3. Send to your back-end endpoint to run ENROLL
    fetch("/api/YOUR_ENDPOINT", {
        method: "POST",
        headers: { "Content-Type": "application/json" },
        body: JSON.stringify({
            orderNumber: "ORD-0000123",
            // ... other order fields
            browserInfo: browserInfo
        })
    })
    .then(response => response.json())
    .then(data => {
        if (data.status === 2) {
            // Challenge required
            const order = buildOrderObject();
            MPI.challenge(
                {
                    acsUrl:        data.challenge.acsUrl,
                    payload:       data.challenge.pareq,
                    transactionId: data.challenge.transactionId
                },
                order
            );
        }
        // Status 0 or 1: handle in the back-end
    });
});

const browserInfo = MPIHelpers.getBrowserInfo();
// Returns:
// {
//     userAgent:         "Mozilla/5.0 ...",
//     screenWidth:       1280,
//     screenHeight:      720,
//     colorDepth:        24,
//     timeZoneOffset:    180,
//     language:          "pt-BR",
//     javaEnabled:       "N",
//     javascriptEnabled: "Y"
// }

// Returns the currency map: { BRL: "986", USD: "840", EUR: "978", ... }
const currencies = MPIHelpers.Constants.getCurrencyISO();

// Returns accepted channels: { ECOMMERCE: "S", MOTO: "M", RETAIL: "R", MOBILE_DEVICE: "P", TABLET: "T" }
const channels = MPIHelpers.Constants.getOrderChannels();

{
    "TransactionMode": "S",
    "MerchantUrl": "https://www.yourmerchantname.com",
    "OrderNumber": "ORD-0000123",
    "Currency": "BRL",
    "TotalAmount": 1000,
    "Installments": 1,
    "ShipToSameAsBillTo": true,
    "Card": {
        "PaymentMethod": "credit",
        "CardNumber": "4000000000002701",
        "ExpirationMonth": 3,
        "ExpirationYear": 2029
    },
    "BillTo": {
        "CustomerId": "123.456.789-09",
        "Name": "João da Silva",
        "PhoneNumber": "11999990001",
        "Email": "[email protected]",
        "Street1": "Av. Paulista, 1000",
        "Street2": "Apto 42",
        "City": "São Paulo",
        "State": "SP",
        "ZipCode": "01310-100",
        "Country": "BR"
    },
    "CartItems": [
        {
            "Name": "Product A",
            "Description": "Product A description",
            "Sku": "SKU-001",
            "Quantity": 1,
            "UnitPrice": 1000
        }
    ],
    "DeviceInfo": {
        "IpAddress": "200.200.200.1",
        "Channel": "Browser",
        "Devices": [
            {
                "FingerPrint": "<fingerprint_id>",
                "Provider": "cardinal"
            }
        ]
    },
    "Order": {
        "ProductCode": "PHY"
    },
    "AuthNotifyOnly": false,
    "ChallengeWindowSize": "390x400",
    "BrowserInfo": {
        "UserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
        "ScreenWidth": "1280",
        "ScreenHeight": "720",
        "ColorDepth": "32",
        "TimeZoneOffset": "180",
        "Language": "pt-BR",
        "JavaEnabled": "N",
        "JavaScriptEnabled": "Y"
    }
}

{
    "Challenge": null,
    "Authentication": {
        "Version": "2.2.0",
        "DirectoryServerTransactionId": "c00a2117-0da5-454b-8bcb-63774b46cd4f",
        "Xid": "AJkBBkhgQQAAAE4gSEJydQAAAAA=",
        "Eci": "05",
        "Cavv": "AJkBBkhgQQAAAE4gSEJydQAAAAA="
    },
    "Status": 1,
    "Reason": {
        "Code": "100",
        "Message": "Success"
    }
}

{
    "TransactionMode": "S",
    "MerchantUrl": "https://samplemerchant.org",
    "MerchantNewCustomer": "true",
    "OrderNumber": "ORD-0000123",
    "Currency": "BRL",
    "TotalAmount": 1000,
    "Installments": 1,
    "ShipToSameAsBillTo": false,
    "Card": {
        "PaymentMethod": "credit",
        "CardNumber": "4000000000002701",
        "ExpirationMonth": 3,
        "ExpirationYear": 2029
    },
    "BillTo": {
        "CustomerId": "999888777-94",
        "Name": "John Doe",
        "PhoneNumber": "555-0001",
        "Email": "[email protected]",
        "Street1": "Av. Batatinha Quando Nasce",
        "Street2": "Batata",
        "City": "Rio de Janeiro",
        "State": "RJ",
        "ZipCode": "222222-22",
        "Country": "BR"
    },
    "ShipTo": {
        "Name": "John Doe Jr.",
        "PhoneNumber": "555-0002",
        "Email": "[email protected]",
        "Street1": "Rua Bem Longe",
        "Street2": "Casa 3",
        "City": "Rio de Janeiro",
        "State": "RJ",
        "ZipCode": "222223-23",
        "Country": "BR"
    },
    "CartItems": [
        {
            "Name": "Product A",
            "Description": "Product A description",
            "Sku": "SKU-001",
            "Quantity": 1,
            "UnitPrice": 1000
        }
    ],
    "DeviceInfo": {
        "IpAddress": "127.0.0.1",
        "Channel": "Browser",
        "Devices": [
            {
                "FingerPrint": "<fingerprint_id>",
                "Provider": "cardinal"
            }
        ]
    },
    "Order": {
        "ProductCode": "PHY",
        "CountLast24Hours": 2,
        "CountLast6Months": 15,
        "CountLast1Year": 38,
        "CardAttemptsLast24Hours": 1
    },
    "UserAccount": {
        "Guest": false,
        "CreatedDate": "2020-01-10",
        "ChangedDate": "2025-06-01",
        "PasswordChangedDate": "2025-06-01",
        "AuthenticationMethod": "02"
    },
    "MerchantDefinedData": {
        "1": "custom_value_1",
        "2": "custom_value_2"
    },
    "AuthNotifyOnly": false,
    "ChallengeWindowSize": "390x400",
    "BrowserInfo": {
        "UserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
        "ScreenWidth": "1280",
        "ScreenHeight": "720",
        "ColorDepth": "32",
        "TimeZoneOffset": "180",
        "Language": "pt-BR",
        "JavaEnabled": "N",
        "JavaScriptEnabled": "Y"
    }
}

{
    "Challenge": null,
    "Authentication": {
        "Version": "2.2.0",
        "DirectoryServerTransactionId": "e4198bcd-5024-4909-8885-5c924149237f",
        "Xid": "AJkBBkhgQQAAAE4gSEJydQAAAAA=",
        "Eci": "05",
        "Cavv": "AJkBBkhgQQAAAE4gSEJydQAAAAA="
    },
    "Status": 1,
    "Reason": {
        "Code": "100",
        "Message": "Success"
    }
}

{
    "TransactionMode": "S",
    "MerchantUrl": "https://samplemerchant.org",
    "OrderNumber": "ORD-0000123",
    "Currency": "BRL",
    "TotalAmount": 700000,
    "Installments": 1,
    "ShipToSameAsBillTo": false,
    "Card": {
        "PaymentMethod": "credit",
        "CardNumber": "4000000000002701",
        "ExpirationMonth": 3,
        "ExpirationYear": 2029
    },
    "BillTo": {
        "CustomerId": "999888777-94",
        "Name": "John Doe",
        "PhoneNumber": "555-0001",
        "Email": "[email protected]",
        "Street1": "Av. Batatinha Quando Nasce",
        "Street2": "Batata",
        "City": "Rio de Janeiro",
        "State": "RJ",
        "ZipCode": "222222-22",
        "Country": "BR"
    },
    "DeviceInfo": {
        "IpAddress": "127.0.0.1",
        "Channel": "Browser",
        "Devices": [
            {
                "FingerPrint": "<fingerprint_id>",
                "Provider": "cardinal"
            }
        ]
    },
    "Order": {
        "ProductCode": "PHY"
    },
    "Airline": {
        "NumberOfPassengers": 2,
        "PassportCountry": "BR",
        "PassportNumber": "AA123456",
        "TravelLegs": [
            {
                "Carrier": "LA",
                "DepartureDate": "2026-09-01",
                "Origin": "GRU",
                "Destination": "JFK"
            }
        ],
        "Passengers": [
            {
                "Name": "João da Silva",
                "TicketPrice": 350000
            },
            {
                "Name": "Maria da Silva",
                "TicketPrice": 350000
            }
        ]
    },
    "AuthNotifyOnly": false,
    "ChallengeWindowSize": "390x400",
    "BrowserInfo": {
        "UserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
        "ScreenWidth": "1280",
        "ScreenHeight": "720",
        "ColorDepth": "32",
        "TimeZoneOffset": "180",
        "Language": "pt-BR",
        "JavaEnabled": "N",
        "JavaScriptEnabled": "Y"
    }
}

{
    "Challenge": null,
    "Authentication": {
        "Version": "2.2.0",
        "DirectoryServerTransactionId": "b1d0c4ff-0720-437d-8125-0c8b50c067a1",
        "Xid": "AJkBBkhgQQAAAE4gSEJydQAAAAA=",
        "Eci": "05",
        "Cavv": "AJkBBkhgQQAAAE4gSEJydQAAAAA="
    },
    "Status": 1,
    "Reason": {
        "Code": "100",
        "Message": "Success"
    }
}

{
    "TransactionMode": "S",
    "MerchantUrl": "https://samplemerchant.org",
    "OrderNumber": "ORD-0000123",
    "Currency": "BRL",
    "TotalAmount": 1000,
    "Installments": 1,
    "ShipToSameAsBillTo": true,
    "Card": {
        "PaymentMethod": "credit",
        "CardNumber": "4000000000002701",
        "ExpirationMonth": 3,
        "ExpirationYear": 2029
    },
    "BillTo": {
        "CustomerId": "999888777-94",
        "Name": "John Doe",
        "PhoneNumber": "555-0001",
        "Email": "[email protected]",
        "Street1": "Av. Batatinha Quando Nasce",
        "Street2": "Batata",
        "City": "Rio de Janeiro",
        "State": "RJ",
        "ZipCode": "222222-22",
        "Country": "BR"
    },
    "CartItems": [
        {
            "Name": "Name412f7da6-a1d5-45f8-ab8a-7011b9522c4e",
            "Description": "Descriptionbde9d2f3-2e05-4183-a06b-44d4ece3ae08",
            "Sku": "Sku54685c5a-2c7e-44a4-9a0e-ef1bdfe324b1",
            "Quantity": 241,
            "UnitPrice": 46
        },
        {
            "Name": "Nameef810b54-de83-4f5a-9390-6402715d877d",
            "Description": "Descriptiond1b4947f-14f6-4a32-a076-a2d1c8f46aa9",
            "Sku": "Sku8cee605b-b222-4936-9ad7-cd5188925015",
            "Quantity": 160,
            "UnitPrice": 24
        },
        {
            "Name": "Name40b447e9-2a22-4ce8-b90b-f803b07bc6b5",
            "Description": "Description584b5011-e969-41ff-94d4-5b68f073b3a5",
            "Sku": "Sku8ad6c9e3-1676-4476-9208-ed61f650aadb",
            "Quantity": 155,
            "UnitPrice": 42
        }
    ],
    "DeviceInfo": {
        "IpAddress": "127.0.0.1",
        "Channel": "Browser",
        "Devices": [
            {
                "FingerPrint": "FingerPrinte659bbd0-f2d6-491d-8fd0-f2d179ab42e6",
                "Provider": "Provider01c89ed4-4956-468c-9eea-2e7dd8a0409a"
            },
            {
                "FingerPrint": "FingerPrint89d86f03-a064-4bae-b1fb-cb46984088d1",
                "Provider": "Provider76640b49-b702-43f2-b78d-90796002d2f9"
            },
            {
                "FingerPrint": "FingerPrintd7bde495-6a28-4feb-a515-afacaf608b31",
                "Provider": "Providerdcbaa001-980b-4bcd-b84e-86ced8a71067"
            }
        ]
    },
    "Order": {
        "ProductCode": "PHY"
    },
    "MerchantDefinedData": {
        "1": "valuec0b65672-17c3-4e9b-a1fa-9b725f9c95dc",
        "2": "valuee7e1b70f-01ea-4742-9738-99e99eac1863",
        "3": "value9c78f1f9-1728-426c-9ac7-52e330461511"
    },
    "AuthNotifyOnly": false,
    "ChallengeWindowSize": "250x400",
    "Recurring": {
        "EndDate": "2026-12-31",
        "Frequency": 1,
        "OriginalPurchaseDate": "2026-01-01",
        "RecurringInfos": {
            "Type": 1,
            "ValidationIndicator": 1,
            "MaximumAmount": "10.00",
            "ReferenceNumber": "ORD-0000123-001",
            "Occurrence": "06",
            "NumberOfPayments": "12",
            "AmountType": "1"
        }
    },
    "BrowserInfo": {
        "UserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "ScreenWidth": "1280",
        "ScreenHeight": "720",
        "ColorDepth": "32",
        "TimeZoneOffset": "180",
        "Language": "pt-BR",
        "JavaEnabled": "N",
        "JavaScriptEnabled": "Y"
    }
}

{
    "Challenge": null,
    "Authentication": {
        "Version": "2.2.0",
        "DirectoryServerTransactionId": "2b86c48d-b0a4-43a1-a1ca-86539ecdd394",
        "Xid": "AJkBBkhgQQAAAE4gSEJydQAAAAA=",
        "Eci": "05",
        "Cavv": "AJkBBkhgQQAAAE4gSEJydQAAAAA="
    },
    "Status": 1,
    "Reason": {
        "Code": "100",
        "Message": "Success"
    }
}

{
    "TransactionMode": "S",
    "MerchantUrl": "https://samplemerchant.org",
    "OrderNumber": "ORD-0000123",
    "Currency": "BRL",
    "TotalAmount": 1000,
    "Installments": 1,
    "ShipToSameAsBillTo": true,
    "Card": {
        "PaymentMethod": "credit",
        "CardNumber": "4000000000002503",
        "ExpirationMonth": 3,
        "ExpirationYear": 2029
    },
    "BillTo": {
        "CustomerId": "999888777-94",
        "Name": "John Doe",
        "PhoneNumber": "555-0001",
        "Email": "[email protected]",
        "Street1": "Av. Batatinha Quando Nasce",
        "Street2": "Batata",
        "City": "Rio de Janeiro",
        "State": "RJ",
        "ZipCode": "222222-22",
        "Country": "BR"
    },
    "CartItems": [
        {
            "Name": "Product A",
            "Description": "Product A description",
            "Sku": "SKU-001",
            "Quantity": 1,
            "UnitPrice": 1000
        }
    ],
    "DeviceInfo": {
        "IpAddress": "127.0.0.1",
        "Channel": "Browser",
        "Devices": [
            {
                "FingerPrint": "<fingerprint_id>",
                "Provider": "cardinal"
            }
        ]
    },
    "Order": {
        "ProductCode": "PHY"
    },
    "AuthNotifyOnly": false,
    "ChallengeWindowSize": "390x400",
    "BrowserInfo": {
        "UserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
        "ScreenWidth": "1280",
        "ScreenHeight": "720",
        "ColorDepth": "32",
        "TimeZoneOffset": "180",
        "Language": "pt-BR",
        "JavaEnabled": "N",
        "JavaScriptEnabled": "Y"
    }
}

{
    "Challenge": {
        "AcsUrl": "https://1merchantacsstag.cardinalcommerce.com/MerchantACSWeb/creq.jsp",
        "Pareq": "eyJtZXNzYWdlVHlwZSI6IkNSZXEiLCJtZXNzYWdlVmVyc2lvbiI6IjIuMi4wIiwidGhyZWVEU1NlcnZlclRyYW5zSUQiOiJlOTljM2IwNS1mZGZiLTRkNGMtOTdjNS1lMTY5Mjg1OWM1Y2YiLCJhY3NUcmFuc0lEIjoiMjdiYTk3ZmMtMDk4MS00YTZkLWFhYTEtZTIwMjNjNWQzNjk5IiwiY2hhbGxlbmdlV2luZG93U2l6ZSI6IjAyIn0",
        "TransactionId": "2MfUuV2lgIgspJ1gMBV1"
    },
    "Authentication": {
        "Version": "2.2.0",
        "DirectoryServerTransactionId": "1dacc363-f9bb-4dc6-bb49-bc613c7e1d17",
        "Xid": null,
        "Eci": null,
        "Cavv": null
    },
    "Status": 2,
    "Reason": {
        "Code": "475",
        "Message": "Enrolled"
    }
}

{
    "TransactionMode": "S",
    "MerchantUrl": "https://samplemerchant.org",
    "OrderNumber": "ORD-0000123",
    "Currency": "BRL",
    "TotalAmount": 1000,
    "Installments": 1,
    "ShipToSameAsBillTo": true,
    "Card": {
        "PaymentMethod": "credit",
        "CardNumber": "4000000000002925",
        "ExpirationMonth": 3,
        "ExpirationYear": 2029
    },
    "BillTo": {
        "CustomerId": "999888777-94",
        "Name": "John Doe",
        "PhoneNumber": "555-0001",
        "Email": "[email protected]",
        "Street1": "Av. Batatinha Quando Nasce",
        "Street2": "Batata",
        "City": "Rio de Janeiro",
        "State": "RJ",
        "ZipCode": "222222-22",
        "Country": "BR"
    },
    "CartItems": [
        {
            "Name": "Product A",
            "Description": "Product A description",
            "Sku": "SKU-001",
            "Quantity": 1,
            "UnitPrice": 1000
        }
    ],
    "DeviceInfo": {
        "IpAddress": "127.0.0.1",
        "Channel": "Browser",
        "Devices": [
            {
                "FingerPrint": "<fingerprint_id>",
                "Provider": "cardinal"
            }
        ]
    },
    "Order": {
        "ProductCode": "PHY"
    },
    "AuthNotifyOnly": false,
    "ChallengeWindowSize": "390x400",
    "BrowserInfo": {
        "UserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
        "ScreenWidth": "1280",
        "ScreenHeight": "720",
        "ColorDepth": "32",
        "TimeZoneOffset": "180",
        "Language": "pt-BR",
        "JavaEnabled": "N",
        "JavaScriptEnabled": "Y"
    }
}

{
    "Challenge": null,
    "Authentication": {
        "Version": "2.2.0",
        "DirectoryServerTransactionId": "feb7d684-b8ad-4107-a402-b2816dd51b22",
        "Xid": null,
        "Eci": "07",
        "Cavv": null
    },
    "Status": 0,
    "Reason": {
        "Code": "476",
        "Message": "Customer cannot be authenticated"
    }
}

{
    "TransactionMode": "S",
    "MerchantUrl": "https://samplemerchant.org",
    "OrderNumber": "ORD-0000123",
    "Currency": "BRL",
    "TotalAmount": 1000,
    "Installments": 1,
    "ShipToSameAsBillTo": true,
    "Card": {
        "PaymentMethod": "credit",
        "CardNumber": "4000000000002701",
        "ExpirationMonth": 3,
        "ExpirationYear": 2029
    },
    "BillTo": {
        "CustomerId": "999888777-94",
        "Name": "John Doe",
        "PhoneNumber": "555-0001",
        "Email": "[email protected]",
        "Street1": "Av. Batatinha Quando Nasce",
        "Street2": "Batata",
        "City": "Rio de Janeiro",
        "State": "RJ",
        "ZipCode": "222222-22",
        "Country": "BR"
    },
    "DeviceInfo": {
        "IpAddress": "127.0.0.1",
        "Channel": "Browser",
        "Devices": [
            {
                "FingerPrint": "<fingerprint_id>",
                "Provider": "cardinal"
            }
        ]
    },
    "Order": {
        "ProductCode": "PHY"
    },
    "AuthNotifyOnly": true,
    "ChallengeWindowSize": "390x400",
    "BrowserInfo": {
        "UserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
        "ScreenWidth": "1280",
        "ScreenHeight": "720",
        "ColorDepth": "32",
        "TimeZoneOffset": "180",
        "Language": "pt-BR",
        "JavaEnabled": "N",
        "JavaScriptEnabled": "Y"
    }
}

{
    "Challenge": null,
    "Authentication": {
        "Version": "2.2.0",
        "DirectoryServerTransactionId": "7d6cb131-d09c-4b00-bb69-122225082529",
        "Xid": "AJkBBkhgQQAAAE4gSEJydQAAAAA=",
        "Eci": "05",
        "Cavv": "AJkBBkhgQQAAAE4gSEJydQAAAAA="
    },
    "Status": 1,
    "Reason": {
        "Code": "100",
        "Message": "Success"
    }
}

const order = MPIHelpers.getOrderBuilder()

    // Order data: number, currency (ISO code), and channel
    .withOrderDetails("ORD-0000123", "986", "S")

    // Transaction ID returned by ENROLL (field challenge.transactionId)
    .withTransaction("<transactionId returned by ENROLL>")

    // Card data: number, expiration month, and year
    .withCard("4000000000002503", 3, 2029)

    // Shopper email
    .withEmail1("[email protected]")
    .withEmail2("[email protected]")   // optional

    // Billing address
    .withBillingAddress(
        "João da Silva",
        "Av. Paulista, 1000",
        "Apto 42",
        "São Paulo",
        "SP",
        "01310-100",
        "BR",
        "11999990001"
    )

    // Shipping address (if different from billing address)
    .withShippingAddress(
        "Maria da Silva",
        "Rua das Flores, 500",
        "Casa 3",
        "Campinas",
        "SP",
        "13010-050",
        "BR",
        "11999990002"
    )

    // Or use the billing address as the shipping address:
    // .withShippingAddressAsBillingAddress()

    // Cart items: name, description, SKU, quantity, unit price (in cents)
    .withCartItem("Product A", "Product A description", "SKU-001", 1, 1000)

    .build();

// Data returned by the ENROLL operation when status = 2
const challengeData = {
    acsUrl:        enrollResponse.challenge.acsUrl,
    payload:       enrollResponse.challenge.pareq,
    transactionId: enrollResponse.challenge.transactionId
};

MPI.challenge(challengeData, order);

{
    "ordernumber": "ORD-0000123",
    "currency": "BRL",
    "totalamount": "1000",
    "card": {
        "cardnumber": "4000000000002503",
        "expirationmonth": 3,
        "expirationyear": 2029
    },
    "transactionId": "BR8llUtqlmzu40pzN9m1"
}

{
    "Authentication": {
        "Version": "2.2.0",
        "DirectoryServerTransactionId": "9a7c2937-148a-446a-9da8-3fffbe84f390",
        "Xid": null,
        "Eci": "07",
        "Cavv": null
    },
    "Status": 0,
    "Reason": {
        "Code": "100",
        "Message": "Success"
    }
}