AE Mobile Wiki

Wavelynx — Apple partner-initiated lifecycle

apple walletios9 steps4 actors
Triggers
  • Partner decides to suspend, resume, or revoke a credential
  • Cardholder leaves the organization
  • Partner's access-control system flags the credential for revocation
00 / 09
TLSmTLSx-api-keyPartnerpartnerWavelynxserviceApple WalletwalletEnd-user devicedevice1Trigger — partner decides to suspend / resume / revoke2POST partner status-change endpoint (suspend / resume / unlink)Crosses trust boundary3Synchronous client call to Apple's UAP APICrosses trust boundary4Acknowledged5Update credential status6200 OK to original request7Apple deactivates / reactivates pass on device (asynchronous, Apple-m…8Webhook (status change confirmed)Crosses trust boundary9200 OK (webhook acknowledged)
TLS· TLS 1.2+ · Bearer JWT (ECC P-256)mTLS· mTLS · JWS (synchronous)x-api-key· HTTPS · x-api-key
Crosses a trust boundary
Source
Verifying access