This API is used to retrieve the Card verification value (CVV) data. The Credit+ Issuing system receives, validates and processes the request. If the request is successful, the cardholder will receive the CVV data in response. If the request fails, the system returns the corresponding error code.
NOTE:
Customization1. The API, if sent with cardNumberAlias (CNA), will internally fetch the corresponding associated device for further processing only if DEVICE _STATUS_CODE = NORMAL (0) OR (DEVICE_STATUS_CODE = UPGRADE (9) AND UPGRADE_STATUS = 1).
2. Either deviceNumber or cardNumberAlias parameter’s value must be provided to process the request. However, if both are received in request then the system will not validate if the cardNumberAliasislinked to that particular device. The system processesthe request based on the device number itself.
HTTP Status and Response Status Matrix
- HTTP Code: This is the response status code issued by a server in response to a client's request made to the server.
- Error Code: This is the error code returned by Credit+ Issuing application in the ‘code’ field of the response message indicating if the request was processed successfully or failed.
- Reason: This is the description of the error code returned by Credit+ Issuing application.
| HTTP Code | Error Code | Reason |
|---|---|---|
| 201 | 0 | Success |
| 400 | CNA001 | Bank Does Not Exists |
| 400 | CNA002 | Card Number Alias Functionality is not applicable forthisInstitution. |
| 400 | CNA003 | Record does not exist for the given details |
| 400 | CNA005 | Multiple device numbers are active for given details |
| 400 | CNA006 | Error while fetching device details |
| 400 | 991 | Card status is not normal |
| 400 | 991 | Network code not found |
| 400 | 803 | Error validating CVV |
| 400 | 994 | Exception occurred during Card value fetch |
| 400 | -1 | Device details invalid |
| 400 | -1 | Error occurred during CVV fetch |
| 400 | -1 | Device configuration invalid |
| 400 | 997 | Device Number and Card Number Alias fields are empty. At least one of the two values must be provided. |
| 400 | 997 | Product Type field is invalid. |
| 400 | 997 | Program Code field should only contain [A-Z 0-9] and underscore and must start and end with alphanumeric character. |
| 400 | 997 | Program Code field value must have max length 10. |
| 400 | 997 | Device Plan Code field should only contain [A-Z 0-9] and underscore and must start and end with alphanumeric character. |
| 400 | 997 | Device Plan Code field value must have max length 10. |
| 400 | 997 | Only alphanumeric characters and special characters [_!'()*+,-.] are allowed. |
| 400 | 997 | Card Number Alias field value must have max length 24. |
| 400 | 997 | Device Number is invalid. Expected field length = 24 |
| 400 | 997 | Card Expiry Date field is mandatory. |
| 400 | 997 | Card Expiry Date is invalid. Expected field length = 4 |
| 400 | 997 | Card Expiry Date format is invalid |
| 400 | 998 | Invalid Device Number |
| 400 | -1 | Device details are not valid |
| 400 | 997 | Device Number is of invalid format |
| 500 | 913 | Backward offset time limit violated. |
| 400 | 994 | Invalid Request - Unrecognized field. |
| 400 | 988 | Encryption type Not Supported. |
| 400 | 913 | Forward offset time limit violated. |
| 400 | 994 | Invalid Encryption-Algorithm header value |
| 400 | 994 | Invalid Encryption Request Parameters |
| 400 | 994 | Cryptography error |