Alert EnterpriseWiki

Wavelynx — Apple Wallet issuance

apple walletios17 steps5 actorsVerified
17
Verifiedoverall flow status
17/ 17 verified
0%
steps cited
0 of 17 · plus flow-level
Triggers
  • Partner submits provisioning request via Wavelynx Wallet API
  • End-user taps 'Add to Apple Wallet' on the AE-supplied surface
TLSmTLSKMS-wrapx-api-keyPartnerpartnerWavelynxWavelynxserviceGoogle Cloud KMSkmsApple WalletApple WalletwalletEnd-user devicedevice1POST /provisioning (display, role, photo, group_id)Crosses trust boundary2Persist credential record (status PENDING)3201 Created (vuid)4User initiates Add to Apple Wallet5Server-to-server fetch — provisioning bundle / pass credential dataCrosses trust boundary6Decrypt master keyset for partner site7Master keyset (memory only, not persisted)8Diversify per-credential key, wrap per Apple key-wrapping s…9Assemble bundle — DESFire profile, wrapped keys, pass displ…10Provisioning bundle (JWS signed)Crosses trust boundary11Deliver and provision pass on device12Provisioning confirmation13POST eventNotification (PROVISIONED)Crosses trust boundary14Update credential status → ACTIVE15Webhook (status ACTIVE)Crosses trust boundary16200 OK (synchronous response to Apple)17200 OK (webhook acknowledged)
Hover steps or envelopes to inspect.
Trust boundary
Source
  • src/wallet-api-data-flow-architecture-v1.0.12.pdf — §5.2 Issuance flow
Verifying access
Desktop only

The AE Mobile Wiki needs a bigger screen.

The diagrams, comparisons, and animated flows aren't built for phones. Open this link on your laptop or desktop browser and you'll see the full reference.

wiki.alertenterprise.app

Same Google sign-in as the AE App Hub — you'll be in once you open it on a larger screen.