Skip to main content
POST
Apple Pay push provisioning

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

x-audit-user
string

Optional audit user header

Path Parameters

cardId
string<uuid>
required

CardId for the card that should be provisioned (returned from card operation)

Body

application/json

Provisioning data

certificates
string[]
required

List of base64 encoded X.509 certificates in the certificate chain.

Example:
nonce
string
required

Lowercase hex string of the nonce given to the application via delegate callback.

Example:

"0ad2e283"

nonceSignature
string
required

Lowercase hex string of the nonce signature given to the application via delegate callback.

Example:

"40fa4a01fa4d5db088888e549376cc8710f30241879ef7ed56c24a951a650f85c87d37a07009551bdc07fe50fdb64bc08871a264032cf8d8f911c4c62c348f9ada34a2b80699cc79050503ecab5ac83b02"

Response

OK

activationData
string
required

The activationData is a Base64 encoded crypto OTP value which is sent to the payment scheme which they will validate by using keys shared with Enfuce.

  • Visa: WSD key
  • MC: TAV key
Example:

"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"

encryptedPassData
string
required

The encryptedPassData is base64 encoded for Visa and hex string for Mastercard. Mastercard encrypted payload contains these fields:

  • primaryAccountNumber - The full primary account number (PAN), digits only
  • expiration - The expiration date as a string. For example, 11/24
  • name - Name of the card holder
  • nonce - The hex string for the nonce value, provided in the delegate callback
  • nonceSignature - The hex string for the nonce signature, provided in the delegate callback Visa encrypted payload (EFPan structure) contains these fields:
  • version ("1"), productType ("DEFAULT_VISA"), networkName ("Visa")
  • encryptedPrimaryAccountNumber - base64 of the WSD-key-encrypted PAN envelope (not the clear PAN)
  • primaryAccountNumberPrefix - first 6 digits of the PAN
  • name - Name of the card holder
  • nonce / nonceSignature - echoed from the request
Example:

"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"

ephemeralPublicKey
string
required

The ephemeralPublicKey is base64 encoded for Visa and hex string for Mastercard.

Example:

"043ba03c46be727c045c2a8360310291332f1d43143967256c7c962b583a094346ae1f88933619d42caf5ec2bef044efd6eff7257e94969995f7aec60431044a7b"