---
# System prepended metadata

title: 'GoBiz e-commerce  Issue #0002'

---

# GoBiz e-commerce  Issue #0002

UPP Method 0280 returns "Invalid Secure Hash Value, failed validate secure hash"

---

### 0280 Request


https://dev.finexusgroup.com:4445/upp/faces/upp/payment.xhtml?h001_MTI=0280&h002_VNO=05&h003_TDT=20201216&h004_TTM=11212359&f001_MID=000000000010999&f007_TxnAmt=000000010000&f010_CurrCode=458&f019_ExpTxnAmt=2&f247_OrgTxnAmt=&f248_OrgCurrCode=&f249_TxnCh=WEB&f250_CCProcFeeAmt=&f251_DDProcFeeAmt=&f252_PromoCode=&f253_CntyCode=MY&f255_IssCode=&f256_FICode=&f260_ServID=UM&f261_HostID=&f262_SessID=&f263_MRN=TR-2012-00000021608088883601&f264_Locale=en&f270_ORN=4324234&f271_ODesc=Hello&f278_EMailAddr=ijaas%40dex-labs.com&f279_HP=0176285758&f280_RURL_UPPPS=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f281_RURL_UPPPU=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f282_RURL_UPPPC=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f285_IPAddr=&f287_ExpOrgTxnAmt=&f350_CrdTyp=&f354_TID=&f325_ECommMercInd=&f339_TokenFlg=&f344_MercCustId=&f347_TokenShrtNm=&f362_PreAuthFlg=&f363_InvNum=&f364_Fee=&t001_SHT=SH2&t002_SHV=ECD8C5DAF683C3D8521BDC74E4753905C7C88E02BE90706F423044113FB79B7D


**Full Data Object**

```
{ h001_MTI: '0280',
  h002_VNO: '05',
  h003_TDT: '20201216',
  h004_TTM: '11212359',
  f001_MID: '000000000010999',
  f007_TxnAmt: '000000010000',
  f010_CurrCode: '458',
  f019_ExpTxnAmt: '2',
  f247_OrgTxnAmt: '',
  f248_OrgCurrCode: '',
  f249_TxnCh: 'WEB',
  f250_CCProcFeeAmt: '',
  f251_DDProcFeeAmt: '',
  f252_PromoCode: '',
  f253_CntyCode: 'MY',
  f255_IssCode: '',
  f256_FICode: '',
  f260_ServID: 'UM',
  f261_HostID: '',
  f262_SessID: '',
  f263_MRN: 'TR-2012-00000021608088883601',
  f264_Locale: 'en',
  f270_ORN: '4324234',
  f271_ODesc: 'Hello',
  f278_EMailAddr: 'ijaas@dex-labs.com',
  f279_HP: '0176285758',
  f280_RURL_UPPPS:
   'http://localhost:3000/api/Transactions/public/process/TA-201216-000001',
  f281_RURL_UPPPU:
   'http://localhost:3000/api/Transactions/public/process/TA-201216-000001',
  f282_RURL_UPPPC:
   'http://localhost:3000/api/Transactions/public/process/TA-201216-000001',
  f285_IPAddr: '',
  f287_ExpOrgTxnAmt: '',
  f350_CrdTyp: '',
  f354_TID: '',
  f325_ECommMercInd: '',
  f339_TokenFlg: '',
  f344_MercCustId: '',
  f347_TokenShrtNm: '',
  f362_PreAuthFlg: '',
  f363_InvNum: '',
  f364_Fee: '',
  t001_SHT: 'SH2',
  t002_SHV:
   'ECD8C5DAF683C3D8521BDC74E4753905C7C88E02BE90706F423044113FB79B7D' }
```

**Hashed String**

```
h001_MTI=0280&h002_VNO=05&h003_TDT=20201216&h004_TTM=11361971&f001_MID=000000000010999&f007_TxnAmt=000000010000&f010_CurrCode=458&f019_ExpTxnAmt=2&f247_OrgTxnAmt=&f248_OrgCurrCode=&f249_TxnCh=WEB&f250_CCProcFeeAmt=&f251_DDProcFeeAmt=&f252_PromoCode=&f253_CntyCode=MY&f255_IssCode=&f256_FICode=&f260_ServID=UM&f261_HostID=&f262_SessID=&f263_MRN=TR-2012-00000021608089779721&f264_Locale=en&f270_ORN=4324234&f271_ODesc=Hello&f278_EMailAddr=ijaas%40dex-labs.com&f279_HP=0176285758&f280_RURL_UPPPS=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f281_RURL_UPPPU=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f282_RURL_UPPPC=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f285_IPAddr=&f287_ExpOrgTxnAmt=&f350_CrdTyp=&f354_TID=&f325_ECommMercInd=0&f339_TokenFlg=N&f344_MercCustId=&f347_TokenShrtNm=&f362_PreAuthFlg=N&f363_InvNum=&f364_Fee=B96856FA91749A259F71340E3C6BC3478524320F218587D22071A35DD4E7B4FF
```

**Hash Key**
```
B96856FA91749A259F71340E3C6BC3478524320F218587D22071A35DD4E7B4FF
```

**SH256 HMAC Hash Result**

```
ECD8C5DAF683C3D8521BDC74E4753905C7C88E02BE90706F423044113FB79B7D
```

---

### 0290 Response

http://localhost:3000/api/Transactions/public/process/TA-201216-000001?h001_MTI=0290&h002_VNO=05&h003_TDT=20201216&h004_TTM=11212359&f001_MID=000000000010999&f004_PAN=&f005_ExpDate=&f006_TxnDtTm=20201216112123&f007_TxnAmt=000000010000&f009_RespCode=12&f010_CurrCode=458&f011_AuthIDResp=&f019_ExpTxnAmt=2&f023_RRN=201216614467&f024_OrgRespCode=&f254_DDRespCode=22&f256_FICode=&f257_PGRN=201216112214AC0860UM&f258_TxnStatDetCde=5015&f259_TxnStatMsg=Invalid+Secure+Hash+Value%2C+failed+validate+secure+hash&f260_ServID=UM&f261_HostID=&f262_SessID=&f263_MRN=TR-2012-00000021608088883601&f270_ORN=4324234&f277_DDRN=&f283_UPP_PM=&f286_OrgDDRespCode=&f350_CrdTyp=&f352_AcqBank=&f353_IPPTenure=&f325_ECommMercInd=&f339_TokenFlg=&f344_MercCustId=&f346_Token=&f347_TokenShrtNm=&f348_MaskPAN=&t001_SHT=SH2&t002_SHV=F8E2AAE8AD042FEAC7D2E8837D4D5B3231D5559478E50C48CFB54B194EE6B380

**Response Data**

```
{ h001_MTI: '0290',
  h002_VNO: '05',
  h003_TDT: '20201216',
  h004_TTM: '11212359',
  f001_MID: '000000000010999',
  f004_PAN: '',
  f005_ExpDate: '',
  f006_TxnDtTm: '20201216112123',
  f007_TxnAmt: '000000010000',
  f009_RespCode: '12',
  f010_CurrCode: '458',
  f011_AuthIDResp: '',
  f019_ExpTxnAmt: '2',
  f023_RRN: '201216614467',
  f024_OrgRespCode: '',
  f254_DDRespCode: '22',
  f256_FICode: '',
  f257_PGRN: '201216112214AC0860UM',
  f258_TxnStatDetCde: '5015',
  f259_TxnStatMsg: 'Invalid Secure Hash Value, failed validate secure hash',
  f260_ServID: 'UM',
  f261_HostID: '',
  f262_SessID: '',
  f263_MRN: 'TR-2012-00000021608088883601',
  f270_ORN: '4324234',
  f277_DDRN: '',
  f283_UPP_PM: '',
  f286_OrgDDRespCode: '',
  f350_CrdTyp: '',
  f352_AcqBank: '',
  f353_IPPTenure: '',
  f325_ECommMercInd: '',
  f339_TokenFlg: '',
  f344_MercCustId: '',
  f346_Token: '',
  f347_TokenShrtNm: '',
  f348_MaskPAN: '',
  t001_SHT: 'SH2',
  t002_SHV:
   'F8E2AAE8AD042FEAC7D2E8837D4D5B3231D5559478E50C48CFB54B194EE6B380' }
```