Error 400 with saved cards

[rsosag]

I know the Ruby SDK doesn't support Subscriptions yet, but maybe you can help me with this issue 👇🏼

I have the following error when generating a subscription to a customer with a saved card. This happens to me with production credentials, any solution to this?

Any information or idea to solve this issue would be helpful.
Thanks

[romerosilva-meli]

Hi @rsosag, how are you?

thank you for reaching out to us. Can you give us more information about how you are going about creating that subscription? For example, can you share with us a code snippet with more information about the api call and parameters that you used that generated this error? Any other information you find important can also help.

[rsosag]

Hi @romerosilva-meli, all good, thanks.

Example with CURL

Request

curl -X POST \
      'https://api.mercadopago.com/preapproval' \
      -H 'Authorization: Bearer APP_USR-........' \
      -H 'Content-Type: application/json' \
      -d '{
  "reason": "Mensual",
  "external_reference": "64654c13ef8a564236915922",
  "payer_email": "[email protected]",
  "card_token_id": "25f1ebe82620f1096c15231b0337f938",
  "auto_recurring": {
    "frequency": 1,
    "frequency_type": "months",
    "transaction_amount": 15.0,
    "currency_id": "ARS"
  },
  "back_url": "https://crosshero.ngrok.io/athletes/11111/memberships",
  "status": "authorized"
}'

Response

 {"message":"User cards bad request","code":"bad_request","status":400,"cause_error":[{"description":"The parameter 'cardNumberId' is a required field (not null or empty)","code":156}]}

Example with RUBY

I have extended your SDK for subscriptions

sdk = Mercadopago::SDK.new('APP_USR-........')

subscription_object = {
  card_token_id: "25f1ebe82620f1096c15231b0337f938",
  external_reference: "64654c13ef8a564236915922",
  payer_email: test_user_1069976165@testuser.com,
  back_url: "https://crosshero.ngrok.io/athletes/11111/memberships",
  reason: "Mensual",
  auto_recurring: {
    frequency: 1,
    frequency_type: "months",
    transaction_amount: 15.0,
    currency_id: "ARS"
  },
  status: 'authorized'
}

response = sdk.subscription.create(subscription_object)
=> {
:status=>400,
:response=>{
  "message"=>"User cards bad request",
  "code"=>"bad_request",
  "status"=>400,
  "cause_error"=>[{"description"=>"The parameter 'cardNumberId' is a required field (not null or empty)", "code"=>156}]
}
}

@romerosilva-meli, in both examples it returns the same error.

IMPORTANT:

1. I am integrating subscriptions without an associated plan.
2. This only happens when I use a previously saved card from the customer. If I use a new card then it works.
3. I am using the productive credentials of a test user, in the examples I have removed them.

[romerosilva-meli]

Hi @rsosag ,

thanks for sharing this information with me. The error is happening because you are trying to re-use the card token. You should not save it on your side because card tokens are ephemeral, they are only good for a short period of time. Plus, for security reasons and compliance with PCI rules, you should not save any card information on your side and let Mercado Pago handle that for you.

The correct way to create a subscription is to get the card id using the Cards API , ask for the user's cvv and use them to create a card token at the moment of creating a subscription with the Javascript SDK (frontend). You can follow the documentation for creating a payment with a saved card as example and just adapt it to create a subscription.

[rsosag]

Hi @romerosilva-meli, thanks for your answer but this is not my issue, I am not re-using the card token.

1. I never store the card token and every time the form is opened I generate a new card token.
2. If I create a payment instead of a subscription with the generated token for a saved card it works perfectly. So it's not a problem with the token because it works for payments and not for subscriptions
3. I have even debugged to confirm that the card token with which the new card was saved is not the same one that arrives at the back when I go to create another subscription and pay with that customer card saved.
4. There is a topic related to this in the Google group, I have been told that it is not yet possible to create subscriptions with saved payment methods https://groups.google.com/g/mercadopago-developers/c/2DAXvOzbkJw
   

I would appreciate any help you can give me with this issue. But it shouldn't be that I'm reusing the token, because I can create a payment with that token.

[rsosag]

Hi @romerosilva-meli, Mercado Pago support has confirmed to me that it is not possible to create a subscription with a saved card

[romerosilva-meli]

Hi @rsosag,

I'm sorry to hear that. I'll share this thread with the team responsible for this API.

Best regards.

[rsosag]

HI @romerosilva-meli, thank you very much!!.