Skip to main content
Cortina SQR uses the Authorization command to notify the integrator about the result of a card tap in order to initiate the authorization process with the Cortina payment provider. This command is essential for proceeding to transaction confirmation or rejection handling.

​
Request

Nayax’s servers send a POST request to your configured Authoirzation endpoint, which would be of the following format: (customer's URL)/Cortina/StaticQR/Authorization The payload includes the full result of the card scan operation: 
{
  "BasicInfo": {
    "TransactionId": "236584335969834429321847829253667359,",
    "Amount": 0.1,
    "CurrencyCode": "USD",
    "CurrencyNumeric": 376,
    "SiteId": 12
  },
  "MachineInfo": {
    "Id": 869761713,
    "Name": "TestPayStaticQR V2",
    "TerminalId": 987654321,
    "DecimalPlace": 2,
    "Offset": 2,
    "GroupId": "Beverages",
    "OperatorId": 12345,
    "ZipCode": 10001,
    "Country": {
      "Name": "United States of America",
      "NumericCode": 840,
      "Alpha2Code": "US",
      "Alpha3Code": "USA"
    }
  },
  "ActorInfo": {
    "Id": 2001102296,
    "Name": "Far East Dev Zone",
    "OperatorId": 2000305191,
    "OperatorName": "TanyaT_OP",
    "MerchantId": 10011
  },
  "CustomData": {
    "DirectActor": 12312312,
    "Operator": 123121434134,
    "Distributor": "superDistributor",
    "Actor": 12312312,
    "Machine": 131231348
  }
}

​
Request Parameters

The following table describes the parameters included in the request body:
FieldTypeDescription
Transaction Identifiers & Financial Details
TransactionIdString(36)The unique identifier for this transaction.
  • Echoes the encrypted ID from /StartSession if used.
  • Otherwise, the Nayax Engine generates this value.
NayaxTransactionIdInt(64)The Nayax internal unique ID for the transaction, echoed in further requests.
AmountDoubleThe payment amount (Decimal with max 3 digits for cents).
  • Example: 1 cent = 0.01.
  • Note: Currencies with no decimal places are still represented as a double (e.g., 234 JYN = 234.0).
CurrencyCodeString(3)Currency code in ISO 4217 Alpha-3 format.
CurrencyNumericString(3)Currency code in ISO 4217 Numeric-3 format.
Machine & Device Information
SiteIdInt(16)Region of the Nayax server.
HwSerialStringNayax Device Hardware serial number.
TypeStringNayax Device Type.
IdInt(64)Machine entity unique ID allocated in Nayax’s back office.
NameString(255)Machine Name.
TerminalIdString(255)Terminal identifier. Contact Nayax TPOC to define.
DecimalPlaceInt(64)Decimal point location for amounts.
  • Example: 2 means amounts like 123.45.
OffsetString(255)UTC timezone offset.
GroupIdStringFor Nayax internal use only.
ZipCodeString(255)Machine Zip Code.
Country & Actor Details
NameStringCountry Full Name (for machine location).
NumericCodeString(3)ISO-3166-1 Numeric-3 code.
Alpha2CodeString(2)ISO-3166-1 Alpha-2 code.
Alpha3CodeString(3)ISO-3166-1 Alpha-3 code.
IdInt(64)Actor ID.
NameString(255)Direct Merchant name.
OperatorIdInt(64)Merchant operator ID (Integer format).
OperatorNameStringMerchant operator name.
MerchantIdInt(64)Merchant ID. Contact Nayax TPOC to define.
OperatorIdString(255)Merchant ID (String format).
Custom Data (JSON Strings)
DirectActorStringDirect actor custom data (String in JSON format).
OperatorStringOperator custom data (String in JSON format).
DistributorStringDistributor custom data (String in JSON format).
ActorStringActor custom data (String in JSON format).
MachineStringMachine custom data (String in JSON format).

​
Response

The Authorization Response that the customer’s payment method would send to Nayax’s servers.
The payload should look as follows: 
{
  "Status": {
    "Verdict": "Approved",
    "StatusMessage": "Cortina V2 Stub Tester"
  },
  "PaymentInfo": {
    "SrvTranId": "string",
    "AuthCode": "string",
    "AuthAmount": 0,
    "SettAmount": 0,
    "RRN": "string",
    "Token": "string",
    "AuthDateTime": "string",
    "SettDateTime": "string",
    "TraceNumber": "string",
    "AuthSource": "string",
    "AdditionalData": "string",
    "IsGatewayTimeout": true
  }
}

​
Response Parameters

The following table describes the fields returned in the API response:
FieldTypeDescription
Transaction Status & Error Codes
VerdictStringThe final status of the request. Must be one of the constant string values:
  • Approved
  • Declined
CodeInt(32)The Decline Code. Conditional—only present if Verdict is ‘Declined’. Valid codes include:
  • 1: Insufficient funds
  • 5: Suspected Fraud
  • 6: General system failure
  • 7: Invalid amount
  • 8 / 998: Format/parsing error or Validation error
  • 992: Timeout exception
  • 997: Missing mandatory parameters
  • 999: General exception
  • See full list for other status and internal errors (e.g., 40, 990, 1011).
StatusMessageString(255)A free text field containing the transaction status message or additional varying data regarding the outcome.
CustomDeclineCodeStringUsed for specifying a custom decline code (e.g., related to Soft Decline or Switch Interface). May reflect the acquirer’s response code.
Financial & Time Details
AuthAmountDoubleThe original amount requested in the /Authorization Request.
SettAmountDoubleThe original amount requested in the /Settlement or /Sale process. Irrelevant for Authorization.
AuthDateTimeStringThe date and time the /Authorization took place. Format:ddMMyyHHmmss.
SettDateTimeDoubleThe Settlement Date/Time. Irrelevant for the Authorization command.
Transaction Identifiers & References
SrvTranIdStringThe Integrator’s internal transaction ID.
  • Conditional: Required if /StartSession was not used.
  • If used, it should be empty or echo the Transaction ID.
AuthCodeString(40)External Authorization Code (usually from the Card Issuer’s bank).
RRNStringReference Retrieval Number (RRN). Highly recommended to be visible to the consumer/card holder for support.
TokenString(256)A unique token for the transaction. For Nayax internal use only.
TraceNumberStringTrace number. For Nayax internal use only.
AuthSourceString(5)For Nayax internal use only.
InitiateTranReferenceInt(64)Conditional: Reflects the original Nayax Transaction ID for prepaid loyalty card re-attempts.
System & External Data
IsGatewayTimeoutBoolIndicates if a gateway timeout occurred (valid in the response).
ProviderExternalDataStringExternal data from the provider in JSON format string.
IsRevalueCardBoolIndication if card is allowed revalue.