post https://example.com/cards//pan
A POST request sent to generate a token to view a card's PAN.
WARNING: The card's PAN is a PCI sensitive field that should only be viewed on the client
device and never logged or stored in any form.
The response includes a callback URL and a token ID. The token is good for one use only.
Using the response object, the user should perform a POST request to the callback URL with a body of
{
tokenId: tokenId
}
to view the card's PAN.