Dear Poynt support team,
We received on the 13th of January information from Nexi regarding fresh development on your side for providing the Card Hashing through the Poynt API.
Our team tested the retrieval of the Card Hash from the Poynt API (card object) as specified, however the result of a test payment transaction is not what was expected. I guess it may come from either the fact that we performed a payment with a test card or because the terminal we use is not a production terminal… We would need some technical help from your side for understanding why we could not retrieve the card hash as specified.
For the sake of information next are the two different results we received in the object transaction->fundingSource->card when performing two payments with the same card in both modes (contact / contactless):
ContactLess:
“card”: {
“type”: “VISA”,
“status”: “ACTIVE”,
“expirationMonth”: 5,
“expirationYear”: 2019,
“id”: 19077,
“numberFirst6”: “453997”,
“numberLast4”: “6547”,
“numberMasked”: “453997******6547”,
“numberHashed”: “4539976547”,
“cardId”: “6a101c5c-e87b-4119-b0c0-4fb96a2b77d6”
},
Contact:
“card”: {
“type”: “VISA”,
“status”: “ACTIVE”,
“expirationDate”: 31,
“expirationMonth”: 5,
“expirationYear”: 2019,
“id”: 5494,
“numberFirst6”: “453997”,
“numberLast4”: “6547”,
“numberMasked”: “453997******6547”,
“numberHashed”: “4539976547PORETTI PLACIDO”,
“cardHolderFirstName”: “”,
“cardHolderLastName”: “PORETTI PLACIDO”,
“cardHolderFullName”: “PORETTI PLACIDO”,
“cardId”: “d92d8073-5c13-4862-99c7-e46b29b863ef”
},
3 questions:
- Will the expiration (Date/Month/Year) be present and the same in contact / contactless modes? Notice that in ContactLess the Date was not sent by the API…
- Why do we receive multiple “numberHashed” values?
- Why do not receive the “numberHashed” calculated as defined, that is, Card Hash = SHA256 ( PAN + SALT)?
Thanks a lot in advance for your attention regarding this matter.
Kind regards,
Sergio Rodrigues de Morais