AE Mobile Wiki

Wavelynx — Apple end-user-initiated lifecycle

apple walletios6 steps4 actors
Triggers
  • User wipes device
  • User removes pass from Wallet
  • Device is unenrolled from MDM
  • User suspends pass via iCloud Lost Mode / Find My
00 / 06
mTLSx-api-keyPartnerpartnerWavelynxserviceApple WalletwalletEnd-user devicedevice1Trigger — wipe / pass removal / unenroll / user suspend2POST eventNotification (status change)Crosses trust boundary3Update credential status (SUSPENDED / DELETED / etc.)4Webhook (status change)Crosses trust boundary5200 OK (synchronous response to Apple)6200 OK (webhook acknowledged)
mTLS· mTLS · JWS (synchronous)x-api-key· HTTPS · x-api-key (optional TLS cert pinning)
Crosses a trust boundary
Source
Verifying access