Visa Payment Passkey

Step-by-step integration guide for secure payment authentication

Step 4: FIDO Enrollment

The /FIDO/Challenge endpoint uses JWTs like other Cruise endpoints, but with extra ReferenceId and ReturnURL claims, to let users enroll in Visa Payment Passkey.

JWT Payload

The following payload contains the transaction details:

JSON 
{
    "jti": "4ef46418-cf74-462e-a61b-c5a64f30609c",
    "iat": 1792076143,
    "iss": "5f6c3fbe5ad3d7567e4f1dd1",
    "OrgUnitId": "5b9c4bb3ff626b1344810a01",
    "ObjectifyPayload": true,
    "ReturnUrl": "http:\/\/coldslither.com\/visa\/passkey\/return.php",
    "ReferenceId": "7f134392-2960-4e08-835e-c8fbd3851d1a"
}

JWT Token

This is the complete JWT token posted to the iframe:

JWT Token 
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiI0ZWY0NjQxOC1jZjc0LTQ2MmUtYTYxYi1jNWE2NGYzMDYwOWMiLCJpYXQiOjE3OTIwNzYxNDMsImlzcyI6IjVmNmMzZmJlNWFkM2Q3NTY3ZTRmMWRkMSIsIk9yZ1VuaXRJZCI6IjViOWM0YmIzZmY2MjZiMTM0NDgxMGEwMSIsIk9iamVjdGlmeVBheWxvYWQiOnRydWUsIlJldHVyblVybCI6Imh0dHA6XC9cL2NvbGRzbGl0aGVyLmNvbVwvdmlzYVwvcGFzc2tleVwvcmV0dXJuLnBocCIsIlJlZmVyZW5jZUlkIjoiN2YxMzQzOTItMjk2MC00ZTA4LTgzNWUtYzhmYmQzODUxZDFhIn0.oTZvxR7HMLmy4KfVWooxWkZE-dw8CgSvRnx2y8pnyIg