Oney by Thunes Authorization-Reversal Workflow {#thunes-intro-flow-reversal}
============================================================================

This workflow describes the sequence of events that comprises a successful Oney authorization-reversal.

#### Figure:

Oney by Thunes Authorization-Reversal Workflow ![](/content/dam/documentation/cybs/en-us/topics/payments-processing/altpay/thunes/graphics/thunes-flow-oney-reversal.svg/jcr:content/renditions/original)

1. The customer chooses the Oney payment method from among the available payment methods shown on the merchant's checkout page.
2. The merchant sends the create a session API request to `Cybersource`. The session service creates a unique customer session. See [Create a Session](/docs/cybs/en-us/thunes/developer/all/rest/thunes/thunes-oney-intro/thunes-session-intro.md "").
3. `Cybersource` responds with `PENDING` status, a URL to redirect the customer, and a pre-approval token.
4. The merchant sends the customer to the redirect URL page.
5. The customer completes the checkout on the redirection page within 20 minutes.
6. The merchant sends an authorization API request to `Cybersource` with the pre-approval token and any optional details. See [Authorize a Payment](/docs/cybs/en-us/thunes/developer/all/rest/thunes/thunes-auth-intro.md "").
7. `Cybersource` responds to the merchant with one of these statuses:
   * `AUTHORIZED`: The payment is successfully authorized.
   * `PENDING`: Either the authorization is being audited by Oney or the customer has not completed the checkout using the redirection URL. The merchant should send a check status request to retrieve status updates. See [Check a Transaction Status](/docs/cybs/en-us/thunes/developer/all/rest/thunes/thunes-status-intro.md "").
8. The customer and merchant decide to cancel the payment, and the merchant sends an authorization-reversal API request to `Cybersource`. See [Reverse an Authorized Payment](/docs/cybs/en-us/thunes/developer/all/rest/thunes/thunes-oney-intro/thunes-reversal-intro.md "").
9. `Cybersource` responds with a successful `AUTH-REVERSED` status to the merchant.

