Validate Apple Pay session
Complete Apple Pay’s onvalidatemerchant exchange. When the customer opens the Apple Pay sheet in a browser, Apple fires onvalidatemerchant; your backend forwards the request here. Guardian performs the mTLS handshake with Apple using your merchant identity certificate and returns Apple’s merchant session object verbatim, which you pass to session.completeMerchantValidation(...) in the browser.
The domain_name must be a verified Apple Pay domain. Guardian reads your merchant identifier and display name from the Apple Pay settings; until those are uploaded the request returns 400 with the classifier APPLE_PAY_NOT_CONFIGURED. A request for an unregistered or unverified domain returns 422 with the classifier APPLE_PAY_DOMAIN_NOT_VERIFIED. If Apple rejects the validation, Guardian returns 502 with APPLE_PAY_SESSION_ERROR; if no active merchant identity certificate exists, the request returns 500 with APPLE_PAY_NO_ACTIVE_CERTIFICATE.
Authorizations
Body
The fully-qualified merchant domain to validate. Must be verified.
"pay.example.com"
Response
Apple Pay merchant session, returned verbatim from Apple.
Apple Pay merchant session JSON, returned verbatim from Apple.