Sign in

v5

latestOpenAPI 3.1.02026-07-262421791.5 MB
digital-wallet

Push Provisioning for Apple Pay

Returns encrypted cardholder information and other metadata needed for Apple Pay push provisioning.

{% admonition type="warning" %} This API is not available for sandbox testing. {% /admonition %}

post/twcard-data/v1/push-provisioning/encrypted-payload/apple-pay

Headers

x-tw-twcard-card-tokenstring uuid required

The card token identifying which card to retrieve push provisioning data for.

X-External-Correlation-Idstring uuid

Optional UUID for correlating requests across systems. If provided, Wise echoes it back in the response. Maximum 36 characters. Learn more.

Request body

certificatesstring[] required

DER encoded X.509 ECC leaf and sub CA certificates, each encoded in Base64.

noncestring required

One time use nonce generated by Apple Servers and HEX encoded on iOS app.

nonceSignaturestring required

The device and account specific signature of the nonce generated by Apple and HEX encoded on iOS app.

Example request

{
  "certificates": [
    "MIICpTCCAkqgAwIBAgIIB...",
    "MIICpTCCAYmgAwIBAgIIX..."
  ],
  "nonce": "a1b2c3d4e5f6",
  "nonceSignature": "f6e5d4c3b2a1"
}

Response

Encrypted cardholder information for Apple Pay.

encryptedPassDatastring

Encrypted authentication data following card scheme and wallet provider specifications. The response is encoded in Base64.

activationDatastring

Encrypted activation data following card scheme and wallet provider specifications. The response is encoded in Base64.

ephemeralKeystring

Ephemeral key used to encrypt authentication data. The response is encoded in Base64.

Example response

{
  "encryptedPassData": "443232323637393045DDE321469537FE461E824AA55BA67BF645454330A32433610DE1D1461475BEB6D815F31764DDC20298BD779FBE37EE5AB3CBDA9F9825E1",
  "activationData": "KDlTthhZTGufMY…….xPSUrfmqCHXaI9wOGY=",
  "ephemeralKey": "A1B2C3D4E5F6112233445566"
}