3.45. PaRes Redirect

PaRes Redirect Parameters

PaRes redirect to connecting party’s website is performed when a payer ends 1.0.2 authentication flow. Final redirect is initiated from within payers browser using HTTP POST method. HTTP payload contains PaRes parameters which in turn contains base64 encoded json (see example below).

Redirect parameter name	Description
serial-number	Unique number assigned by SBC server to particular request from the Merchant
merchant-order-id	Merchant order id
paynet-order-id	Order id assigned to the order by gate.sbctech.ru

Redirect Request Example

Connecting party receives HTTP POST request deflate archived base64 encoded PaRes parameter similar to below:

paRes=eJydlluTokgThu/nVxhOxN4YPZwV5rPdKI6CgHIQxTsaEDnIWUB//aL09Ngdc7HfcgFFkvnwZmVWRc3/7s7JqPHLKszS1zHyAx6P/NTNvDANXsdbk38hx6OqdlLPSbLUfx2n2fjvxdw8lb7PGr57Kf3Ft9FoNFf8qnICfxR6r2P4/Xr5dUM+Rv01JY6edxw/wu6RG6D71f8fdw99173oZf9A59Cv1ycPxS/dk5PWT7a72XELWlQXOIJMCXIOvb9+9jn7pcguEBTDiemMpOA5NFie6NAf8PPN5W6r/C+4LvQWamTjKstdVZhRuPwk8vvOkKPDbt2A1zl09/gc4zm1v0BhFEFgdDaC0Z8I/BPvE33YP7v2lSj7wl0XUxybQx9vn538Lu+L2MvtGR/jzy75XT04Z5f+C3Kf9jn0bHpO/g+JznMnXcxQjIBRlJgRBIGi6Gw6JQmSmvU2pJ/ru8dTgLn/IqAOz59zxqmfBDGHHvbPrn1f1pdqYc+h99GXbN1wAfeR9+ez7t+/7HO4N9/QwUYYpD2l9Ef9kkir1/GprvOfENS27Y8W+5GVAYT28wHBFNQ7eFUYfB8vHlG+J6bHbDFnnDRLQ9dJwptT942o+PUp80YgCbIyrE/nPyFN/U5FIJ1jXnrsi4vg6cvdAmMIMYYWv2X9G9pXgWXlvFQnB7mDdP/o35vCH2118XX8/d+ttjkbBn5V/5ef//rxQLCc5OIvVLFd0tZGl5PaWkMNtmqIDYDqdQnh/Qp49pxDH4L78fM0f8zI4ChXgtEZhyIt0K6WdJy5vhUC2dnwKScKue1cfDNt8ZlKzFaheInrfQNtd44xWZaSiTh2q+mWZ6gTqN0I7F/fEex/31QZhlr2sgOIutoh2tlvOKiBsCyuaDTx1ifdz72tLNgXrcJ8xvBpouWza+G0+DJwILpyCkrN+Qll5idnIIoYvK3WmLDCzukJmxWQkjmkncm0S7jN7AbsSA9xDGwm1ZbxogMeHwywYgpR32FwNUHla0rGF5ZChN2qGIjsmfYPqJQIlGKqWcLoYMXVuupPJrk+ESZhh+5YCIrVYi1NCDoPpWXrOuky80TBzLRbmsxcoKAcRs6C/UAs5KVhozuIn/oB7iH224yPfBviFW7Ke911RebqRQleX4diPBVgvvKvQ2X2BEyxTu0MI8Yv6/DYr4d+s1JEkd2yDAOigGE05mY62yk6YW+HG1DpIC5OcShQLUwDreIBSxeKVrWMZrOWpglcK9k7lpMVEAsA2XKDXAa0zI4POs4EGzpQLRq4CsPriYvpkbPXCUXXWi54EFYsqLeHvQprKFW7An/xTU5XAPmgMW0rDkRLsG4eb12cvdZxEdAGqqIw1oNK25jSKibw+Ra+9k9CYeNOMblbXwDnYYt+2wbi/YsiZB1zA9JAs02QnOyn7EQWPLL70EP3eh5KBDX3lnHHs8C4xw5EGmQKgzz0sG8o0to7os+Ua9n2QZNZcHpkau2I3GM5Q6HBgwraVnpQOT5yb6Dr60G/t2b0tQIcD8CaARoJ7l5MsOrHHECQws5DYVJaBy5MOjzbe3GL+JjH0NaK4Fy53xoGorGKpfqYi2wDgSu8v8UJFC831Zt8pRhCQmK3K0wYz3QxMLeacHEsam0Gld1SwnIWQKR6EN84ZT2N6F2yG4gJqabAXreFaDh2pcrbyJZo/GAdaCWIeaXgSpFgGdN0Qbd+Q69YZbilJEWWVfjTc3EKOXrvULeio4woHojt4TpDqBPxpsrTmshXpLnd8Yl7zWaYpdRtgFsk1pDAMugusQBIrJp3G9DYcllPrh2JGLGVLtE9pl4kZiCetLXfyDY8WW4beD/btHbphr2inYQRgqhY0Cw/LI03wfCCIxxCFdvcWKEHZJ2A7+ibdlsXtIGtnOzW5QMRa/vm0ACtAFhgjEIwxDeM1TiaabcA4GJfKZpIG87BcaqY6da6ZByDu1x1WyHI2yTh4BsxwQz5LYowfiBGhcupZ4/zk9UVeGQLKzB3nZS7xGFX2rrOupaLkq00QSZr0loiql4yjeBsjpJtxlvnyGIrfyn1fYutdu8dnjNxkqCqvAq3pmDlR+QApwpWoUZsg6iaIC61OU6yvTpLwgt0FVW2wVXytJajOF+SmL3ZSxRqvWktdbm+d3hE+RtJ2/gGdswlzoeJGK0tqk21NaVFbkfthLUCkfLyIBy8oyi1K2epL/GqPbrttVQamLLcDWSk28Su39d1UyRkgxZ2sybgTC+9DK4PRiNLOyKZGmZ18qMqv+jQ8lozEKVHDELWuJpSvHWeuSzC9eekmaqJq3oOfd3VBsuw40Efu+Dv/XFxPyE+zsWLb/254/nQ/A8pzm2f

After decoding paRes one will find a xml similar to below:

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<ThreeDSecure>
   <Message id="00000000-0000-0001-0000-00000065fddf">
      <PARes id="00000000-0000-0001-0000-00000065fddf">
         <version>1.0.2</version>
         <Merchant>
            <acqBIN>411658</acqBIN>
            <merID>1234567890</merID>
         </Merchant>
         <Purchase>
            <xid>NjY4NDEyN0CMEphIFXxSLjZWOvA=</xid>
            <date>20211027 02:10:42</date>
            <currency>643</currency>
            <exponent>2</exponent>
            <purchAmount>10000</purchAmount>
         </Purchase>
         <pan>7235022575552227668589750218</pan>
         <TX>
            <time>20211027 02:49:55</time>
            <status>Y</status>
            <eci>05</eci>
         </TX>
      </PARes>
   <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
            <SignedInfo>
                <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
                <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
                <Reference URI="#00000000-0000-0001-0000-00000065fddf">
                    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                    <DigestValue>NIwHBVPRLltVO/v3Kv5PA/tOr/4=</DigestValue>
                </Reference>
            </SignedInfo>
            <SignatureValue>LsGSxSZqnq2xtJR4CybqG8xY0hp5qLwxc4P6w47N57KiIuktXv/UWaS+HrJT1aYwQRVdSN+/wPGD&#13;
NL0/wDuWA1NKW1QmevE/v/3oksB2ldOhRepdULGYuQs3eCSeB5wFoyqaw4Hga/Bsaq9NpF+9Tpha&#13;
I30UsO3GK3mnh37q/Moa8YoLBc5cv7zAYjRi43AP+sUCdjZ4kZSAKCqIRW30s+2Lyn8kuD91GWKq&#13;
DmBeZ2JlG9MTNolCRAKEtRNe++pR+G+ix2WD//kNqOJ+5BpiJHwcanHodIGToQznl7cAM2E387gX&#13;
qLHSY2W/F6eg4d1Yb7FjeY/FME6FdxyK8pNuMg==</SignatureValue>
            <KeyInfo>
                <X509Data>
                    <X509Certificate>MIIDUDCCAjgCCQCzTaU62+DzZzANBgkqhkiG9w0BAQsFADBqMQswCQYDVQQGEwJYWDELMAkGA1UE&#13;
CAwCWFgxETAPBgNVBAcMCFRlc3RjaXR5MRQwEgYDVQQKDAtUZXN0Q29tcGFueTERMA8GA1UECwwI&#13;
VGVzdFVuaXQxEjAQBgNVBAMMCVRlc3RBY3MwMTAeFw0yMTA5MDkxMTEzMTNaFw0yMjA5MDkxMTEz&#13;
MTNaMGoxCzAJBgNVBAYTAlhYMQswCQYDVQQIDAJYWDERMA8GA1UEBwwIVGVzdGNpdHkxFDASBgNV&#13;
BAoMC1Rlc3RDb21wYW55MREwDwYDVQQLDAhUZXN0VW5pdDESMBAGA1UEAwwJVGVzdEFjczAxMIIB&#13;
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11qYpiG+rVZEilx4oXdkw1e3dCBVK5EcLlgo&#13;
SKkJtfpIDv/Ay0Xzkl/kHPsbLy9C5J1kcxqT04oRIgTUQGuaV9OTgsYw9GH7g/8NZIbEMO6jBWlW&#13;
l8NnAYOwqISaYsNLUjYJB4ZVZBMgkFMqErI5DCTTcAxOb2y3sScrJJjVVqe6mqhiEBXa9zqx9Sjk&#13;
wZy719h5bNL6t5pK8TUWFlcyo73VMtwg4V83v8AVSBxlVAAlVtFcvAvYLrt+yx81SkVnH2X3NuJC&#13;
hQOevLY0+HUv0X7PwYrciTcAWJ35GIMV/7pZHSbGSdgf0i/sDvzDGX3NoxG4WBzQzOqBS3Kaozxp&#13;
3wIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQB5nvEa449q7RVOrCaSEuyRYM58z+lE0z5+3SLbjj3F&#13;
jqcENmdEelKyAd8w0M0Ey+rWlaDKQOtoxwEjlUJ+1+O8VH1NRrCvGaPfJYTkUafD3KeHJQYD3KWz&#13;
pCkll2NLKiUTGVpf1Z0nM3s2SkYAjs+1c9Pf+oXN7liu/yINDv4N8hOLjkpH83YPXJ92VbQw9uyV&#13;
j9ePJQPeS3fpJEe05k2tV9wnQO9Qjcx9WGOM/8LHZGZdfIJwKaHRH4swfcwyrMv09VcP/SnUlYtI&#13;
vql8v2qYvO50oRrdo0tZSvLJW5l6STshejspuR/HytC/9RjC18t4Nn9FVm7cD1Expo7NQIKt</X509Certificate>
                </X509Data>
            </KeyInfo>
        </Signature>
    </Message>
</ThreeDSecure>