A POST to the /tokens resource returns a token representing the supplied card details. The token can be used as the Subscription ID in the CyberSource payment tokenization or recurring billing services. This is an unauthenticated POST initiated from your customer’s device or browser to the /tokens resource:
|
Dummy address information is created: customerFirstname, customerLastname, customerEmail, billAddress1, billCity, billCountry, billState, and billZip. To replace this information, request an update or a combined authorization and update.
|
|
Table 4
|
Unique identifier for the generated token which is obtained from the Generate Key request. See the Java Script example on how to import the key and encrypt using the imported key.
If the encryption type of None was used in the Generate Key request, this value can be set to the plaintext card number/Personal Account Number (PAN).
If the encryption type of RsaOaep256 was used in the Generate Key request, this value needs to be the RSA OAEP 256 encrypted card number. The card number should be encrypted on the cardholders’ device.
For web based implementations on modern browsers, the WebCrypto API can be used with the JWK obtained in the Generate Key request.
|
Table 5
|
Indicates which fields from the response make up the data that is used when verifying the response signature. See the sample code on how to verify the signature.
|
Example 4
|
|
Example 5
|