Object: AuthenticationAuthorizationResponse

Response body

Object sent during authentication-authorization response.

Here's an example of a clear text JSON response:

  {
    "requestId": "375dhjf9-Uydd="
    "authorizations": ["LIST_ACCOUNTS", "ASSOCIATE_ACCOUNT"]
  }

The AuthenticationAuthorizationResponse is encrypted and signed using PGP or JWS+JWE. Further, this value is web-safe base64 encoded. This encoding is referred to below as Base64UrlEncode. In other words, the clear text JSON version of the AuthenticationAuthorizationRequest must be passed through the following functions:

Base64UrlEncode(
  PGPSignAndEncrypt(
    '{"requestId": "375dhjf9-Uydd=",
      "authorizations": ["LIST_ACCOUNTS", "ASSOCIATE_ACCOUNT"]}'
  )
)

or

Base64UrlEncode(
  JWSignAndEncrypt(
    '{"requestId": "375dhjf9-Uydd=",
      "authorizations": ["LIST_ACCOUNTS", "ASSOCIATE_ACCOUNT"]}'
  )
)
JSON representation
{
  
  "requestId": string,
  "authorizations":  repeated string,
}
Fields
requestId

string

REQUIRED: Reflected back by the payment integrator to Google. This allows Google to prevent replay attacks.

authorizations

repeated string

REQUIRED: Reflected back by the payment integrator to Google. This allows Google to check that the authorizations passed back are the same authorizations passed in.