Request PIN Control access token by plasticId.
This operation is used to create the PIN control access token.
The successful response from this call returns an id, a pinURL for mobile device webview and pinFrameURL for an iframe in desktop browser flow. Id is valid for 30 seconds.
For mobile webview, device should be instructed to do a POST call to the pinURL with the content of the id in a form field named controlId.
For desktop browser flow, iframe should be opened to pinFrameURL with query parameter key, which needs to be agreed with Enfuce beforehand. After iframe has been loaded, browser should make a window.postMessage() call to the iframe. The message object should contain fields operation (with value view-pin or set-pin) and controlId.
Path Parameters
The id of the plastic for which the PIN should be accessed
Query Parameters
The audit user to log the request
Body
Describes the scope of the operation that is authorized by the user.
VIEW_PIN
, SET_PIN
Response
The ID of this PIN Control access token.
The URL that the cardholder's mobile device webview should browse to for accessing the PIN.
The URL of the iframe for desktop browser based flows for accessing PIN.