CardResult

interface CardResult {
cvv: string;
expiry: string;
keyId: string;
pan: string;
}

Source: types.ts:141

Full card issuance result.

⚠️ PCI-DSS Req 3.3.1: The cvv field is Sensitive Authentication Data (SAD) and MUST NOT be stored after authorization. Use redactCardResult() to obtain a storable representation that excludes the CVV.

Store keyId alongside the card record — it is required for CVV validation after a key rotation (NIST SP 800-57 / ISO 11568-1).

Properties

`cvv: string`

types.ts:152

4-digit Card Verification Value. SAD — do not persist this field after card issuance / authorization.

`expiry: string`

types.ts:146

Card expiry in MM/YY format

`keyId: string`

types.ts:159

Key identifier used to generate this CVV. Persist this alongside the card record for future CVV validation. Per NIST SP 800-57 / ISO 11568-1.

`pan: string`

types.ts:143

16-digit Primary Account Number