Support card hash/signature about balanced-api

[mjallday]

How would this be used? It sounds like, as a developer, I would tokenize a new card which would generate a signature.

• Once I have this signature how do I use it to detect a duplicate card?
• Can I detect duplicate cards if I do not have the card number to tokenize?

[matin]

Once I have this signature how do I use it to detect a duplicate card?

Query against the cards resource on the signature field

Can I detect duplicate cards if I do not have the card number to tokenize?

What information do you have? Two tokens?

[mjallday]

What information do you have? Two tokens?

No, I took the below quote to mean that I have to tokenize the card in order to get a hash. Are you telling me that I can GET a card and then inspect the hash field and then use that to filter for all matching cards? Use case solved if so.

PCI DSS doesn't allow for an externally computed hash, so the signature will be just that. It can only be checked by actually creating a new card token.

[matin]

Are you telling me that I can GET a card and then inspect the hash field and then use that to filter for all matching cards? Use case solved if so.

Yup. It would also be useful if the admin dashboard made the hash/signature a link for easy filtering, but one step at a time.

[matin]

Thinking about this more ... hash is much more readable than signature

[roncito]

+1

[skeet70]

This would be very useful, +1

[mahmoudimus]

wouldn't this be a spec change as well?

[matin]

deployed: 134d3ae