AE Mobile Wiki

Wavelynx — Google end-user-initiated lifecycle

google walletandroid7 steps5 actors
Triggers
  • User wipes device
  • User removes card from Google Wallet
  • Device is unenrolled
  • User suspends card via Find My Device
00 / 07
mTLSx-api-keyPartnerpartnerWavelynxserviceNXP MIFARE2GOmediatorGoogle WalletwalletEnd-user devicedevice1Trigger — wipe / pass removal / unenroll / user suspend2Status change (Google → NXP)3POST cardStatusChanged or cardDeleted (by correlationId)Crosses trust boundary4Update credential status (SUSPENDED / DELETED / etc.)5Webhook (status change)Crosses trust boundary6200 OK (synchronous response to NXP)7200 OK (webhook acknowledged)
mTLS· mTLS · JWEx-api-key· HTTPS · x-api-key (optional TLS cert pinning)
Crosses a trust boundary
Source
Verifying access