Skip to main content
POST
Get a Link for the User to Verify a Saved Card

Authorizations

Authorization
string
header
required

The access token received from the authorization server in the OAuth 2.0 flow.

Path Parameters

payment_method_id
string<uuid>
required

The unique ID of the saved card to verify.

Example:

"e5f6a7b8-c9d0-1234-5678-9abcdef01234"

Body

application/json

Request body for POST /v1/platform/card/verify-token/{payment_method_id}.

Mints a short-lived verify_card embed token so a user can complete cardholder-present verification (CVV/AVS + 3DS) of a saved card inside a Finogate-hosted iframe.

parent_origin
string | null

Optional origin of the embedding page (e.g. https://app.example.com), used as the postMessage targetOrigin. Must be a bare origin: scheme + host + optional port, no path.

Maximum string length: 255

Response

Successful Response

Standard response wrapper for single-object responses and errors.

Generic over the payload type. A route that declares CommonResponse[SomeModel] gets the real data schema rendered in OpenAPI/Swagger; a bare CommonResponse leaves data untyped.

status_code
integer
required

HTTP status code for the response.

data
any
required

Payload or error details.

query_generated_time
integer
required

UTC timestamp (milliseconds since epoch) when response was generated.