# Cards

Fetch debit card information for the authenticated session.

---

## Endpoint

```
POST https://faisamobilex-wv.mib.com.mv/ajaxDebitCard/fetchCardInfos
```

---

## Authentication

See [README](README.md) for cookie and AJAX header format.

```
Referer: https://faisamobilex-wv.mib.com.mv//debitCards?dashurl=1
```

---

## Request Body (form-urlencoded)

| Field | Value | Description |
|---|---|---|
| `name` | `` | Card name filter (empty = all) |
| `start` | `1` | Start index (1-based) |
| `end` | `50` | End index |
| `includeCount` | `1` | Include total count |

---

## Response

```json
{
  "success": true,
  "data": [
    {
      "cardId": "CARD001",
      "maskedCardNumber": "4111 **** **** 1234",
      "cardStatus": "A",
      "cardType": "D",
      "cardTypeDesc": "Debit Card",
      "customerId": "C000001",
      "phoneNumber": "9600000001",
      "cardHolderName": "MOHAMED ALI"
    }
  ]
}
```

| Field | Type | Description |
|---|---|---|
| `success` | `bool` | `true` on success |
| `data` | `array` | List of card objects |

### Card Object

| Field | Type | Description |
|---|---|---|
| `cardId` | `string` | Internal card identifier |
| `maskedCardNumber` | `string` | Partially masked card number for display |
| `cardStatus` | `string` | Card status (`A` = Active) |
| `cardType` | `string` | Card type code (e.g. `D` = Debit) |
| `cardTypeDesc` | `string` | Human-readable card type (e.g. `"Debit Card"`) |
| `customerId` | `string` | Customer ID |
| `phoneNumber` | `string` | Registered phone number |
| `cardHolderName` | `string` | Name on card |

> The app's `MibCard` model adds two **app-internal** fields not present on the server payload: `loginTag` (e.g. `"mib_<username>"`) and `profileId` (the active profile that fetched the card). They are populated by the client (`MibCardsClient.kt:66-67`) and used by the UI to map a card back to its owning login.

### Failure

```json
{ "success": false }
```

---

## Freeze / Unfreeze Card

```
POST https://faisamobilex-wv.mib.com.mv/ajaxDebitCard/freeze
POST https://faisamobilex-wv.mib.com.mv/ajaxDebitCard/unfreeze
```

Two endpoints — same shape. Pick by intent. Source: `MibCardsClient.kt:74-103`.

```
Referer: https://faisamobilex-wv.mib.com.mv//debitCards/manage?cardId=<cardId>&dashurl=1
```

### Request Body (form-urlencoded)

| Field | Description |
|---|---|
| `cardId` | Card identifier from `fetchCardInfos` |
| `comments` | User-supplied reason (free text; may be empty) |

### Response

```json
{
  "success": true,
  "reasonText": "Card frozen successfully",
  "currentStatusCode": "F"
}
```

| Field | Description |
|---|---|
| `success` | `true` on success |
| `reasonText` | Human-readable message (also returned on failure — show to user) |
| `currentStatusCode` | New card status code after the action (e.g. `"F"` = frozen, `"A"` = active) |

---

&nbsp;

---

[← Transaction History](04-history.md) &nbsp;&nbsp;&nbsp; **Next →** [Financing](06-financing.md)