Card 360 Login

This API Issues an access token for a registered OAuth client. Card 360 forwards the client id and client secret to Passport using the client-credentials grant, then returns the Passport token in camel case.

Item	Value
Method	POST
URL	/card-management/login
Header	Content-Type: application/json
Authentication	None. /login is permitted without a bearer token.

Request Parameters description

Field #	Field name	Data type	Required	Description
1	clientId	string	true	Must not be blank. Sent to Passport as the basic-auth username.
2	clientSecret	string	true	Must not be blank. Sent to Passport as the basic-auth password.
3	scope	string	true	Must not be blank. Sent to Passport as the scope form field

POST /card-management/login HTTP/1.1
Host: {host} 
Content-Type: application/json
{ 
  "clientId": "your-client-id",
  "clientSecret": "your-client-secret",
  "scope": "profile" 
}

Response Message field description

Field #	Field name	Type	Description
1	accessToken	string	Passport access_token. Use this value on Get Card Production Status.
2	tokenType	string	Passport token_type. bearer when Passport omits the field.
3	expiresIn	number	Passport expires_in, in seconds. 3600 when Passport omits the field.
4	scope	string	Passport scope

Sample Response (Success)

{ 
   "accessToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.example.signature",
   "tokenType": "bearer", 
   "expiresIn": 3600, 
   "scope": "profile" 
}

Sample Response (Error)

HTTP 400, blank or missing field. code is 400. description is the list of validator messages. Each entry in errors has message and fieldName. The default message for a blank field is must not be blank.

{ 
  "code": "400",
  "description": "[must not be blank]",
  "correlationId": "",
  "errors": [ 
    {
      "message": "must not be blank",
      "fieldName": "clientId" 
    } 
  ]
}

The same body shape is returned when clientSecret or scope is missing. fieldName names the missing field.

HTTP 400, body is not JSON. code is 400 BAD_REQUEST. description describes the parse or type error.

Passport rejection. Card 360 returns the HTTP status it received from Passport. code is that status text, for example 401 UNAUTHORIZED, and description is the Passport error text.