{"title":"Decrypt Apple Pay tokens","category":"default","creationDate":1732628520,"content":"

An Apple Pay token contains encrypted data of a transaction performed with Apple Pay. Apple Pay tokens enable you to securely pass the data of your shoppers to a payment service provider, like Adyen.<\/p>\n

Choose a decryption method<\/h2>\n

If you are PCI-compliant<\/a> you have a choice of letting Adyen handle the token decryption, or handling it on your own.<\/p>\n

Only handle the token decryption on your own in advanced setup scenarios, like when you have to submit Merchant Plug-In (MPI) data in an Apple Pay request.<\/p>\n

A benefit of handling the decryption on your own is that the auditing of transactions becomes easier with the availability of transaction data like shopper names.<\/p>\n

If you are not PCI-compliant you must let Adyen handle the decryption.<\/p>\n

Let Adyen handle the decryption<\/h2>\n

In-app<\/h3>\n

After initiating the Apple Pay payment on your mobile application, you receive a callback that includes a PKPayment<\/code>. This includes paymentData<\/code>, a stringified version of the payment token. You need to submit this data in your payment request to Adyen<\/a>.<\/p>\n

    \n
  1. \n

    Stringify the paymentData from the token <\/span><\/p>\n

    When the request is completed, you receive a PKPayment<\/a> which contains paymentData<\/code>. Apple Pay returns more data than we need for authorization, for example a shipping address, but only the paymentData<\/code> is necessary for authorization.<\/p>\n

    Convert the paymentData<\/code> to a String:<\/p>\n

    func paymentAuthorizationViewController(_ controller: PKPaymentAuthorizationViewController, didAuthorizePayment payment: PKPayment, completion: @escaping (PKPaymentAuthorizationStatus) -> Void) {\nlet token = payment.token.paymentData.base64EncodedString()\n}<\/code><\/pre>\n<\/li>\n
  2. \n
    Submit the API request  <\/span><\/p>\n
    Include the encoded token from step 1 as the value of applePayToken<\/code> in the paymentMethod<\/code> object of your  \/payments<\/a> request:<\/p>\n
    \n<\/code-sample>\n<\/div>\n<\/li>\n<\/ol>\n
    Web<\/h3>\n
    After initiating the Apple Pay payment on your website you receive a token in the onPaymentAuthorized<\/a> event.<\/p>\n
    Retrieve the paymentData<\/code> from the token and convert it to a string. Pass this to your server, and then submit it in a \/payments<\/code> request to Adyen.<\/p>\n
      \n
    1. \n
      Stringify the paymentData from the token<\/p>\n
      Apple Pay returns more data than we need for authorization, for example a shipping address, but only the PaymentData<\/code> is necessary for authorization. Take this data from the token and convert the JSON to a String and base64-encoded:<\/p>\n
      session.onpaymentauthorized = function(event) {\nvar token = btoa(JSON.stringify(event.payment.token.paymentData));\n};<\/code><\/pre>\n<\/li>\n
    2. \n
      Submit the API request<\/p>\n
      Include the encoded token from step 1 as the value of applePayToken<\/code> in the paymentMethod<\/code> object of your  \/payments<\/a> request:<\/p>\n
      \n<\/code-sample>\n<\/div>\n<\/li>\n<\/ol>\n
      Handle the decryption on your own<\/h2>\n
      Requirements<\/h3>\n
      To decrypt Apple Pay tokens on your own, you must:<\/p>\n