Concept
Authorization flow
Purpose and operating rule
The acquirer sends an authorization request to the issuer. The issuer validates account state and available funds, then returns an approval code or a decline reason within the selected latency budget.
Canonical terminology
- Acquirer
- The financial institution that processes card payments for a merchant.
- Issuer
- The institution that issued the customer account and authorizes the transaction.
- Approval code
- The issuer-provided identifier confirming that authorization succeeded.
Connected concepts
Authorization latency budget
Card networks time out at 300 ms. A 200 ms application budget reserves 100 ms for transit variance and retries.
Authorization handler mapping
src/auth/handler.tsLines 42–128 · TypeScriptModel drifted
export async function authorize(request) {
const account = await issuer.lookup(request.pan);
const result = await risk.evaluate(account, request);
return network.respond(result, { timeout: 220 });
}
Model mapping
sha256:9d4c2a71
Current codesha256:b17e6f09
Revision lineage
- v2.0Initial fraud checks
- v2.1Latency budget clarified