The card needs a 3-D Secure challenge the buyer has to answer.
Only the server-authorized card path (processorCheckoutSessionId with no
processorTransactionId) can produce this. The payment is neither completed
nor declined, so there is deliberately no orderId and no paymentId: put
the challenge in front of the buyer, then call completeSession again with
the same input.
The card needs a 3-D Secure challenge the buyer has to answer.
Only the server-authorized card path (
processorCheckoutSessionIdwith noprocessorTransactionId) can produce this. The payment is neither completed nor declined, so there is deliberately noorderIdand nopaymentId: put the challenge in front of the buyer, then callcompleteSessionagain with the same input.