PIN Control handling - Enfuce

Endpoints

Request PIN Control access token by plasticId.

POST /v2/plastic/{plasticId}

Request PIN Control access token by plasticId

POST /v1/card/{cardId}/plastic/{plasticId}
Deprecated

Request PIN Control access token by cardId.

POST /v1/card/{cardId}
Deprecated

Request PIN Control access token by plasticId.This operation is used to create the PIN control access token. The successful response from this call returns an _id_, a _pinURL_ for mobile device webview and _pinFrameURL_ for an iframe in desktop browser flow. _Id_ is valid for 30 seconds. For mobile webview, device should be instructed to do a POST call to the _pinURL_ with the content of the _id_ in a form field named _controlId_. For desktop browser flow, iframe should be opened to _pinFrameURL_ with query parameter _key_, which needs to be agreed with Enfuce beforehand. After iframe has been loaded, browser should make a _window.postMessage()_ call to the iframe. The message object should contain fields _operation_ (with value _view-pin_ or _set-pin_) and _controlId_.