Device Binding

Delete Device Binding

delete

Delete the binding between a device and a token.

パスパラメータ

tokenIdstring · 最大: 128必須

The token identifier.

deviceIdstring · 最大: 36必須

The unique device identifier. Visa deviceId must have 24 characters at maximum.

ヘッダーパラメータ

authorizationstring · 最小: 1 · 最大: 512必須

Technical identifier pre-defined at on-boarding that identifies the API consumer. Format shall be the string 'APIKEY' followed by a space and the api key value.
Example: APIKEY c03f88fe-01ba-11e8-ba89-0ed5f89f718b

x-correlation-idstring · 最小: 1 · 最大: 36必須

Technical identifier used for troubleshooting.
It helps on customer support when needed.
Each API request must be identified with a unique correlation Id.
It correlates the response and the request and eventually a notification if any.

mcCertifiedSolutionIdstring · 最小: 1 · 最大: 128オプション

Unique identifier of the Mastercard TAF certified MFA method. Must be provided for Mastercard TAF when the binding was created using the Merchant API.

credentialIdstring · 最小: 1 · 最大: 128オプション

The identifier used during Mastercard TAF binding, must be provided for Mastercard TAF when the binding was created using the Merchant API.

レスポンス

204

No Content

コンテンツなし

400

Bad request - Not Retryable

401

Unauthorized - Not Retryable

404

Not Found - Not Retryable

429

Too Many Requests - Retryable

500

Internal Server Error - Not Retryable

503

Service Unavailable - Retryable

delete/device-bindings/{tokenId}/{deviceId}

DELETE /tsh-cof/device-bindings/{tokenId}/{deviceId} HTTP/1.1
Host: thales.api.com
authorization: text
x-correlation-id: text
Accept: */*

コンテンツなし

Create Binding

post

Binds a token with a FIDO authenticator as per Mastercard TAF.

ヘッダーパラメータ

authorizationstring · 最小: 1 · 最大: 512必須

Technical identifier pre-defined at on-boarding that identifies the API consumer. Format shall be the string 'APIKEY' followed by a space and the api key value.
Example: APIKEY c03f88fe-01ba-11e8-ba89-0ed5f89f718b

x-correlation-idstring · 最小: 1 · 最大: 36必須

Technical identifier used for troubleshooting.
It helps on customer support when needed.
Each API request must be identified with a unique correlation Id.
It correlates the response and the request and eventually a notification if any.

本文

tokenIdstring · 最小: 1 · 最大: 128必須

The token identifier.

Pattern: ^[a-zA-Z0-9_-]+$

bindingTypestring · enum · 最大: 64必須

The request content depends on the binding type.

Example: MASTERCARD_TAF_FIDO_IAAV可能な値:

レスポンス

204

No Content

コンテンツなし

400

Bad request - Not Retryable

application/json

401

Unauthorized - Not Retryable

404

Not Found - Not Retryable

429

Too Many Requests - Retryable

500

Internal Server Error - Not Retryable

503

Service Unavailable - Retryable

post/device-bindings

POST /tsh-cof/device-bindings HTTP/1.1
Host: thales.api.com
authorization: text
x-correlation-id: text
Content-Type: application/json
Accept: */*
Content-Length: 863

{
  "tokenId": "COFTG-M-ce464906-cf39-4990-b4a8-c160e67c603a",
  "bindingType": "MASTERCARD_TAF_FIDO_IAAV",
  "MASTERCARD_TAF_FIDO_IAAV": {
    "mcCertifiedSolutionId": "43SA5",
    "credentialId": "bf8c5b2b-28ce-48d8-acbc-cc82f51478c6",
    "deviceId": "1234567890",
    "fidoRelyingParty": "relyingparty.com",
    "fidoUserId": "ca7ac6fe-1eec-11ed-861d-0242ac120002",
    "isSpcEnabled": false,
    "fidoRegistrationResponse": {
      "type": "public-key",
      "id": "h0mC9xtLjggpcvxq4YXepkemUt2oNL5F_-NPpCCcHNE",
      "rawId": "h0mC9xtLjggpcvxq4YXepkemUt2oNL5F_-NPpCCcHNE",
      "authenticatorAttachment": "platform",
      "response": {
        "clientDataJSON": "Base64 encoded string",
        "authenticatorData": "Base64 encoded string",
        "signature": "Base64 encoded string",
        "userHandle": "ca7ac6fe-1eec-11ed-861d-0242ac120002"
      }
    },
    "mcIaav": "Base64 Encoded IAAV",
    "verificationTimestamp": "'2025-07-01T10:25:11.142Z",
    "mcBindingAssertion": "Mastercard bindingAssertionJWT"
  }
}

コンテンツなし