return_url and callback_url will receive a request.
When you get this request, the payment token will be stored on the transaction.
Use get transaction details to retrieve the transaction, with the query-param includes
to include the cards tokens
example:
?includes=card.payment_token?includes=card.recurrence_token
card.payment_token.
The card data contains expiry_date (format MM/YYYY). When tokenization is used, card.expiry_date will be the expiration date of the card itself if available.
If the card’s expiration date is unavailable, card.expiry_date will fall back to the token’s expiration date.
Store the token internally in a secure manner.