{
    "card":{
        "id": 134142,
        "type": "PLASTIC",
        "program_id": 1234,
        "bin": "5122"
    },
    "combo_card": { },
    "token_id": 432,
    "network_brand": "vts",
    "custom_codes": ["FRB"],
    "original_network_data": {

    }
}

{
    "step_up_methods": [
        {
            "method": "OTPCALL",
            "value": "+551130039500"
        },
        {
            "method": "OTPSMS",
            "value": "5327"
        },
        {
            "method": "OTPAPP",
            "value": "app",
            "source": "com.issuer.banking://wallet",
            "platform": "ANDROID"
        }
    ],
    "approve": true,
    "action_code": "85"
}

package main

// Anti-fraud code sample in Go

//curl --location --request POST 'http://antifraudhost' \
//--header 'x-pismo-sign: eyJhbGciOiJSUzI1NiIsImtpZCI6IjEzY2VlZWViMWEwNjU1Nzg4Y2UyMDg0ZmZmY2FkMDJmNTFmYzMxNDAiLCJ0eXAiOiJKV1QifQ.eyJhY2NvdW50LWlkIjo5ODY2NTM4NiwiYm9keS1oYXNoIjoiUm0yNWNpTy9RRjNMdmIwL1JZbmVWMFZRUkMzd3pNbzZjemdlR1NHUE1KWT0iLCJleHAiOjE2NTI1MzY2MzAsImlhdCI6MTY1MTY3MjYzMCwiaXNzIjoiYXBpLnBpc21vLmlvIiwia2lkIjoiMTNjZWVlZWIxYTA2NTU3ODhjZTIwODRmZmZjYWQwMmY1MWZjMzE0MCIsInN1YiI6ImFwaS1jYXJkcy10b2tlbml6YXRpb24ifQ.bE7l7KQHRj_0J7zcXtLXgefQuGVQjdUr2BtetTQzTf25_tbHf6iUXHIsGB8iCVujo2e5aUrglxTQScduo3sUuJgzLNUHEyBOgMUc9b6v9K_-reFLpJa9Co0Ct8PmU_os-AZr6jqrYgzGk343I_FYDDw48BmqSMRgwtaJPzHQesaSdd8pjAw_CdSttobstplJjQiwUetufmSvZkOCQHeU-JHTwgdcTwgmtJwVMnFFERIdWQMzoz1UYtP0oMJivw3Zt-MjutqvodkaymOIx9IjJTywp0Oq61rmPtWlKW0pIsI6HCYDR8pASgantt7sXGpNb8cdynUIyvxlixpy77kdfg' \
//--header 'Content-Type: application/json' \
//--data-raw '{
//    "card":{
//        "id": 134142,
//        "type": "PLASTIC"
//    },
//    "combo_card": null,
//    "token_id": 432,
//    "network_brand": "vts",
//    "custom_codes": ["FRB", "BNB"],
//    "original_network_data": {}
//}'

import (
	"context"
	"crypto/x509"
	"encoding/json"
	"encoding/pem"
	"fmt"
	"github.com/labstack/echo/v4"
	"github.com/square/go-jose"
	"io/ioutil"
	"net/http"
)

type clientTokenDecision struct {
	Approve       bool                 `json:"approve"`
	ActionCode    string               `json:"action_code"`
	StepUpMethods []clientStepUpMethod `json:"step_up_methods"`
}

type clientStepUpMethod struct {
	Method   string `json:"method"`
	Value    string `json:"value,omitempty"`
	Source   string `json:"source"`
	Platform string `json:"platform"`
}

func main() {
	getPismoCertificates()
	e := echo.New()
	e.POST("/", handler)
	e.Logger.Fatal(e.Start(":1323"))
}

var mapCertificates map[string]*x509.Certificate

func getPismoCertificates() {
	url := "https://sandbox.pismolabs.io/robot/v1/metadata/x509/[email protected]"
	httpReq, err := http.NewRequestWithContext(context.Background(), http.MethodGet, url, nil)
	if err != nil {
		panic(err)
	}

	client := http.Client{}
	httpRes, err := client.Do(httpReq)
	if err != nil {
		panic(err)
	}

	if httpRes.StatusCode != http.StatusOK {
		panic(err)
	}

	bRes, err := ioutil.ReadAll(httpRes.Body)
	if err != nil {
		panic(err)
	}

	tmpMap := make(map[string]string)
	err = json.Unmarshal(bRes, &tmpMap)
	if err != nil {
		panic(err)
	}

	mapCertificates = make(map[string]*x509.Certificate)

	for key, val := range tmpMap {
		block, _ := pem.Decode([]byte(val))
		if block == nil {
			panic("cannot decode block")
		}

		cer, err := x509.ParseCertificate(block.Bytes)
		if err != nil {
			panic(err)
		}
		mapCertificates[key] = cer
	}
}

func handler(c echo.Context) error {
	tokenString := c.Request().Header.Get("X-Pismo-Sign")
	valid := isTokenValid(tokenString)
	if !valid {
		return fmt.Errorf("certificate not valid")
	}

	k := clientTokenDecision{

		Approve:    true,
		ActionCode: "85",
		StepUpMethods: []clientStepUpMethod{
			{

				Method: "OTPAPP",
				Value:  "app.to.app",
			},
			{
				Method: "OTPSMS",
			},
		},
	}
	return c.JSON(http.StatusOK, k)
}

func isTokenValid(tokenString string) bool {
	jwsSignature, err := jose.ParseSigned(tokenString)
	if err != nil {
		return false

	}

	for _, sign := range jwsSignature.Signatures {
		kid := sign.Header.KeyID
		cert := mapCertificates[kid]
		_, err := jwsSignature.Verify(cert.PublicKey)

		if err != nil {
			return false
		}
		break
	}
	return true
}

{
  "decision": "approve",
  "id": "id",
  "datetime": "2022-07-28T12:45:12.566Z",
  "account_id": 102334690,
  "currency_code": "986",
  "amount": 20,
  "origin": "banking",
  "operation_type": "cashin",
  "processing_code": "003100",
  "entities": {
    "account": {
      "name": "Anne Arbor",
      "document_number": "8675309",
      "creation_date": "2023-01-01T05:00:00.000Z",
      "limits": {
        "total": 1000
      },
      "address": {
        "zipcode": 8675309
      },
      "phone": {
        "area": "415",
        "country": "55",
        "number": "8675309"
      }
    }
  },
  "metadata": {
    "a": false,
    "b": 1,
    "c": "test",
    "d": {
      "d1": "4683bf0c-20d2-4a7f-8877-5f3e9b46252c",
      "d2": false,
      "d3": 15
    }
  }
}

{
    “decision”: “approve”,
    “metadata”: {}
 }

{
  "id": "1111",
  "entity": "transaction",
  "fields": {
    "mti": "0100",
    "card_id": 1234,
    "account_id": 1234,
    "amount_transaction": 10,
    "amount_local": 10,
    "amount_settlement": 10,
    "transaction_timestamp": "2019-05-09 15:52:00",
    "processing_code": "00",
    "payment_card_brand": "Mastercard",
    "currency": "986",
    "merchant_id_code": "687555537877464",
    "merchant_name": "PISMO",
    "merchant_city": "SAO PAULO",
    "merchant_state_or_country_code": "BRA",
    "merchant_terminal_id": "12300004",
    "atc_chip": "43",
    "atc_database": [
      748,
      652,
      998
    ],
    "cvv_data": "CVV_PRESENT",
    "entry_mode": "string",
    "mcc": "string",
    "card_type": "PLASTIC",
    "country_code": "076",
    "chip_validation": true,
    "postal_code": "31404",
    "chip_cryptogram_information_data": "80",
    "chip_transaction_date": "190425",
    "chip_transaction_type": "string",
    "chip_amount_authorized": "000000000010",
    "chip_transaction_currency_code": "0076",
    "chip_application_interchange_profile": "0076",
    "chip_terminal_country_code": "076",
    "chip_cardholder_verification_method": "420300",
    "chip_terminal_capabilities": "E0F0C8",
    "chip_amount_other": "string",
    "chip_application_transaction_counter": "3900",
    "cardholder_postal_code": "22222222",
    "transaction_type": "00",
    "nsu": "15469",
    "retrieval_reference_number": "5600001085571",
    "authorization_code": "ABCD12",
    "incoming_authorization_code": "ABCD12",
    "response_code": "00",
    "terminal_capability": "string",
    "tvr": "0000248000",
    "cvr": "0110A040002A00000000000000000000FF",
    "number_of_installments": 3,
    "network_score": 0,
    "pos_postal_code": "22222222",
    "acquirer_code": "string",
    "denial_code": "CED",
    "financial_network_code": "ABC",
    "banknet_reference_number": "123456",
    "cvv_presence": true,
    "password_present": true,
    "original_network_data": "...",
    "account_type": "30",
    "validation_results": [
      {
        "name": "ARQC",
        "status": "APPROVED",
        "reason": "NO_CRYPTOGRAM",
        "description": "No cryptogram present"
      }
    ],
    "program_id": 0,
    "token_id": 1234,
    "wallet_id": "1234"
  }
}

{
  "is_approved": true,
  "response_code": "00",
  "limit_amount": 12.34
}

{
  "id": "1111",
  "entity": "transaction",
  "fields": {
    "mti": "0100",
    "card_id": 1234,
    "card_status": "NORMAL",
    "card_expiration_date": "2026-10-15T00:00:00.000Z",
    "card_type": "PLASTIC",
    "token_id": 1234,
    "wallet_id": "1234",
    "device_id_wallet": 1234,
    "account_id": 1234,
    "authorization_code": "ABCD12",
    "nsu": "15469",
    "advice_reason_code": "string",
    "advice_detail_code": "0110",
    "amount_transaction": 10,
    "amount_local": 10,
    "amount_settlement": 10,
    "transaction_timestamp": "2019-05-09 15:52:00",
    "payment_card_brand": "Mastercard",
    "currency": "986",
    "merchant_id_code": "687555537877464",
    "merchant_name": "PISMO",
    "merchant_city": "SAO PAULO",
    "merchant_state_or_country_code": "BRA",
    "merchant_terminal_id": "12300004",
    "security_cnp_transaction": "123",
    "atc_chip": "43",
    "atc_database": [
      748,
      652,
      998
    ],
    "entry_mode": "string",
    "mcc": "string",
    "country_code": "076",
    "postal_code": "31404",
    "chip_cryptogram_information_data": "80",
    "chip_transaction_date": "190425",
    "chip_transaction_type": "string",
    "chip_amount_authorized": "000000000010",
    "chip_transaction_currency_code": "0076",
    "chip_application_interchange_profile": "0076",
    "chip_terminal_country_code": "076",
    "chip_cardholder_verification_method": "420300",
    "chip_terminal_capabilities": "E0F0C8",
    "chip_amount_other": "string",
    "chip_application_transaction_counter": "3900",
    "cardholder_postal_code": "22222222",
    "transaction_type": "00",
    "terminal_capability": "string",
    "tvr": "0000248000",
    "cvr": "0110A040002A00000000000000000000FF",
    "number_of_installments": 3,
    "available_limit": 200.55,
    "network_score": 0,
    "pos_postal_code": "22222222",
    "acquirer_code": "string",
    "cpf": "string",
    "total_limit": 5000,
    "max_credit_limit": 5000,
    "denial_code": "CED",
    "response_code": "00",
    "last_referral_reason": "",
    "id_last_referral_reason": "",
    "last_referral_unlock_date": "2019-05-09 15:52:00",
    "cvv_data": true,
    "cvv_response": true,
    "unlock_date": "string",
    "password_present": true,
    "last_four_digits": "string",
    "bin": "string",
    "program_id": 0,
    "pin_validated_offline": true,
    "validation_results": [
      {
        "name": "ARQC",
        "status": "APPROVED",
        "reason": "NO_CRYPTOGRAM",
        "description": "No cryptogram present"
      }
    ],
    "transaction_mode": "CREDIT",
    "three_domain_security": {
      "service_indicator": "S",
      "electronic_commerce_indicator": "05",
      "cardholder_authentication": "00",
      "authentication_data": "0201020590000000000000000000"
    }
  }
}

{
  "approve": true,
  "force_approve": true,
  "referral": true,
  "response_code": "00",
  "metadata": {}
}