Get PCI EIP-712 Challenge

Issues a one-time EIP-712 challenge. The response is a complete typed-data object that can be passed directly to signTypedData (convert message.nonce to BigInt first). After signing, forward the hex signature as x-eip712-signature and the nonce as x-eip712-nonce on the subsequent PCI data request. The challenge expires after 5 minutes and can only be used once.

GET /pci/cards/{cardId}/challenge

Get PCI EIP-712 Challenge

JavaScript

const options = {method: 'GET'};

fetch('https://gp-auth-module.prod.gnosispay.com/pci/cards/{cardId}/challenge', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

200

{
  "domain": {
    "name": "<string>",
    "version": "<string>",
    "chainId": 123
  },
  "types": {
    "Message": [
      {
        "name": "<string>",
        "type": "<string>"
      }
    ]
  },
  "message": {
    "authorization": "<string>",
    "nonce": "<string>"
  }
}

Path Parameters

cardId · string<uuid> · required

Query Parameters

action · enum<string> · required

The operation being authorized: 'view-details' (card PAN/CVV), 'view-pin' (read PIN), 'change-pin' (set new PIN).

Available options: view-details, view-pin, change-pin

Response

200

application/json

Challenge created successfully

Complete EIP-712 typed data. Pass this object directly to signTypedData — convert message.nonce to BigInt before signing.

domain · object · required

EIP-712 domain separator.

Show child attributes

primaryType · enum<string> · required

EIP-712 primary type.

Available options: Message

types · object · required

EIP-712 type definitions.

Show child attributes

message · object · required

EIP-712 message payload.

Show child attributes