Skip to content

docs: add changelog entry for PIN management APIs #1083

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
claude wants to merge 1 commit into
base: main
Choose a base branch
from
+20 −0
Open

docs: add changelog entry for PIN management APIs #1083

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 20 additions & 0 deletions mintlify/changelog.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,26 @@ card data never crosses your servers. `Card.cardCapabilities` gains
to work for every card with no integration. See
[Digital wallet tokenization](/cards/card-management/digital-wallet-tokenization).

## Let cardholders set, change, and unblock PINs

Three new endpoints manage online PINs on cards:

- `GET /cards/{id}/set-pin-url` returns a temporary URL for a secure PIN-entry iframe. The
cardholder enters their PIN inside the iframe, so the plaintext PIN never reaches your
servers or Grid's. Configure `cardConfigs.pinTargetOrigin` through `PATCH /platform/config`
before requesting a URL.
- `POST /cards/{id}/set-pin` accepts an encrypted PIN block when you operate your own
PIN-entry UI. Build the block in the client with the published
[PIN encryption public key](/keys/pin-encryption-public-key.pem.txt), so the PIN never
reaches your servers either.
- `POST /cards/{id}/pin/unblock` clears a blocked PIN without changing it.

`Card` gains `pinStatus`: `NOT_SET`, `OK`, or `BLOCKED`. Three consecutive incorrect entries
block a PIN until you clear it with `POST /cards/{id}/pin/unblock` or replace it with either
PIN-entry flow. A new `CARD.PIN_STATUS_CHANGE` webhook fires when Grid's saved status changes.

See [Card PINs](/cards/card-management/pins).

## Card refunds, declines, and voids report distinct outcomes

Three card-statement corrections to `CardTransaction`:
Expand Down
Loading