Authorize cardholder

POST 
/api/partner/cards/:id/holder/authorize

Authorizes a cardholder action (PIN-less). Requires the holder's pin (RSA-OAEP encrypted, base64).

Request

Responses

200

Holder authorized

401

Unauthorized — missing or invalid JWT

403

Forbidden — resource not owned by the calling partner