# card.assigned

A card was assigned — both for a queued request (`requestId` set; the
card closes the company's oldest queued request) and for an immediate
assignment (`requestId: null`). Not sent in `cardsTestMode`.

Endpoint: POST card.assigned
Version: 1.0.0

## Header parameters:

  - `X-Lumo-Signature` (string, required)
    HMAC-SHA256 of the raw request body with the company webhook secret, hex.

  - `X-Lumo-Delivery-Id` (string, required)
    Delivery id. The same for all retries of one delivery — use it to drop duplicates.

## Request fields (application/json):

  - `event` (string, required)
    Enum: "card.assigned"

  - `cardId` (string, required)

  - `requestId` (string | null, required)
    Request from `POST /cards/request`; `null` for an immediate assignment

  - `externalId` (string | null, required)

  - `maskedPan` (string | null, required)
    Example: 4466********1234

  - `expiry` (string | null, required)
    Example: 03/29

  - `assignedAt` (string | null, required)

  - `createdAt` (string, required)
    When the event was sent

## Response 200:

  - `200` (unknown)
    Any `2xx` acknowledges the delivery.