This is a web service designed to lookup an card based on the card number. The payload in the request is encrypted with JWE (JSON Web Encryption), to enable end-to-end encryption from source system to Enfuce.
Processing payment information (PAN, expiry, CVC2/CVV2) is controlled with strict compliance regulations by the card schemes. There are multiple ways to access the card payment information in Enfuce’s APIs depending on the client solution, and whether the client is a card schema member themselves and therefore responsible for compliance.
The alternative shown here (Get card using card number) relies on that the client is responsible for PCI DSS compliance themselves to the card schema.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
The audit user to log the request
JWE encrypted card number, see details above
Successful lookup of the card