post https://example.com/cards//pincode
A POST request sent to generate a token to view a card's PIN code.
WARNING: The card's PIN code is a PCI sensitive field that should only be viewed on the client
device and never logged or stored in any form.
The response includes a callback URL and a token. The token is good for one use only.
Using the response object, the user should perform a POST request to the callback URL with a body of
{
tokenId: tokenId
}
to view the card's PIN.