# Fetch activation payload for Apple Pay in-app verification

Call this endpoint to initiate an in-app verification for activating a token on Apple Pay.  This endpoint follows the  process according to the Apple Pay developer documentation.  It will also trigger the change request process. The customer will receive a 2FA challenge to confirm the request. The successfully completed Change Request will return an  payload in the API response. You must then submit this payload in a separate request to the Apple Wallet. Please check the Apple Pay developer documentation for more details.

Endpoint: POST /v1/cards/{card_id}/tokens/apple/verify
Version: 1.0

## Path parameters:

  - `card_id` (string, required)
    ID of the card for which to fetch the activation payload.

## Response 200 fields (application/json):

  - `id` (string)
    ID of the change request.
    Example: "d6c778822b2d7bd3b778935bcfd0d1d3csc"

  - `status` (string)
    The current status of the change request.
    Enum: "ACCEPTED", "AUTHORIZATION_REQUIRED", "CONFIRMATION_REQUIRED", "COMPLETED", "FAILED"

  - `updated_at` (string)
    UTC timestamp from the last time the change request was updated.
    Example: "2022-04-21T13:59:52+00:00"

  - `url` (string)
    URL to use to authorize the change request.
    Example: "https://example.com/authorize"

## Response 201 fields (application/json):

  - `activation_payload` (object)
    Object containing the activation data for Apple Pay in-app verification.

  - `activation_payload.activation_data` (string)
    The request's activation data.
    Example: "TUJQQUMtMS1GSy0xMjM0NTYuMS0tVERFQS1DQUY2MDEzRTdCM0ExQzRDQ0UyRTI1RTEzMzhCMkFBMjE4REY3ODZERDUyOEQ5MDkxRDQ0NUNFQUU1ODI3QzlCMTY4QzQ5OTYzQUU0MjNDQThBRTI0OEEyNzY4NjlDN0M"

## Response 403 fields (application/json):

  - `id` (string)
    Example: "a95f2aaf-4e0c-4d49-8021-8a16a884ed86"

  - `status` (string)
    Example: "403"

  - `code` (string)
    Example: "unauthorized_action"

  - `title` (string)
    Example: "Unauthorized Action"

  - `detail` (string)
    Example: "Unauthorized action is not allowed."

## Response 404 fields (application/json):

  - `id` (string)
    Example: "a95f2aaf-4e0c-4d49-8021-8a16a884ed86"

  - `status` (string)
    Example: "404"

  - `code` (string)
    Example: "model_not_found"

  - `title` (string)
    Example: "Model Not Found"

  - `detail` (string)
    Example: "Couldn't find 'Solaris::Identification' for id 'bbbcccfff388923eb899a5852df6cidt'."

## Response 500 fields (application/json):

  - `id` (string)
    Example: "e8915041-9d8c-4d96-9dd1-04e8522ecdbf"

  - `status` (string)
    Example: "500"

  - `code` (string)
    Example: "generic_error"

  - `title` (string)
    Example: "Generic Error"

  - `detail` (string)
    Example: "There was an error."