Record the result of a 3-D Secure challenge. Only the Zenoz challenge frame calls this.

Requests from any origin other than the Zenoz fields origin get a 403.

Outcomes:

• authenticated: the paused payment continues, and the liability shift is stored on the payment.
• failed or abandoned: the payment is declined with authentication_failed or authentication_abandoned.
• A challenge older than 10 minutes becomes authentication_timeout, whatever the result sent.

A challenge can be completed once. A second call gets 409 CHALLENGE_ALREADY_COMPLETED.

Available on test deployments only, where the card issuer is simulated. On production this returns 404.