{"type":"doc","content":[{"type":"paragraph","content":[{"text":"This document explains the flow of events related to the Confirmation of Funds","type":"text"},{"text":" API v3.1.5.","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"0c26d2f2-ac7f-4ca6-b1e5-3ebf69c38aa2"}}]},{"text":" ","type":"text"}]},{"type":"panel","attrs":{"panelType":"success"},"content":[{"type":"paragraph","content":[{"text":"Before you begin:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"You need to deploy the Confirmation of Funds API v3.1.5. ","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"cxhtml":" Click here to see how to deploy the API...

You can configure APIs through the API Publisher by signing in as a user whose role includes Internal/publisher.

If you have already deployed v3.1 APIs:

According to OBIE, the v3.1 and v3.1.x APIs have the same context values. Therefore, if you have already deployed v3.1 APIs, the v3.1.x APIs cannot be deployed as new versions of existing APIs. You have to update the Swagger file by replacing the current content with the latest content of the API you wish to deploy. For more information, refer to .

ConfiguringAPIsINLINE

Sign in to the API Publisher Portal (https://<WSO2_OB_APIM_HOST>:9443/publisher).
In the APIs tab, select CREATE NEW API > I Have an Existing REST API.
Set the Input Type to OpenAPI File.
Click BROWSE FILE TO UPLOAD and select the <WSO2_OB_APIM_HOME>/repository/resources/finance/apis/openbanking.org.uk/FundsConfirmation/3.1.5/funds-confirmation-swagger.yaml Swagger definition.
Click Next.
Set the Context value as follows:
If you are using WSO2 Open Banking API Manager Level 2.0.0.114 or above:
If you are configuring an API of v3.1.8 or above, set the following context value manually.
Leave the Endpoint field empty as it is.
Set the business plan to Unlimited : Allows unlimited requests unless you want to limit the requests.
Click Create to create the API.
Once you get the message that the API is successfully updated, go to Runtime Configurations using the left menu panel.
Click the edit button under Request > Message Mediation.
Now, select the Custom Policy option.
Upload the <WSO2_OB_APIM_HOME>/repository/resources/finance/apis/openbanking.org.uk/FundsConfirmation/3.1.5/funds-confirmation-dynamic-endpoint-insequence-3.1.5.xml in-sequence file and click SELECT.
Scroll down and click SAVE.
Go to Endpoints using the left menu panel.
Select Dynamic Endpoint.
Select the endpoint types; Production Endpoint/Sandbox Endpoint.
Click Save.
Now, go to Properties using the left menu panel.
Click Add New Property.
Add the API Properties according to your API and click the Add button.

API property name API property value
ob-spec uk
ob-api-type cof
ob-api-version 3.1.5
For example:
Click SAVE.
Go back to Overview using the left menu panel.
Click PUBLISH.
The published API is available in the Developer Portal at \n https://<WSO2_OB_APIM_HOST>:9443/devportal.\n

API property name	API property value
ob-spec	uk
ob-api-type	cof
ob-api-version	3.1.5

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":" Click here to see how to deploy the API..."},"content":[{"type":"paragraph","content":[{"text":"You can configure APIs through the API Publisher by signing in as a user whose role includes ","type":"text"},{"text":"Internal/publisher","type":"text","marks":[{"type":"code"}]},{"text":". ","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"If you have already deployed v3.1 APIs:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"According to ","type":"text"},{"text":"OBIE","type":"text","marks":[{"type":"link","attrs":{"href":"https://openbanking.atlassian.net/wiki/spaces/DZ/pages/1000702294/Read+Write+Data+API+Specification+-+v3.1.1#Read/WriteDataAPISpecification-v3.1.1-ResourceURIPathStructure"}}]},{"text":", the v3.1 and v3.1.x APIs have the same context values. Therefore, if you have already deployed v3.1 APIs, the v3.1.x APIs cannot be deployed as new versions of existing APIs. You have to update the Swagger file by replacing the current content with the latest content of the API you wish to deploy. For more information, refer to ","type":"text"},{"text":"Deploying APIs for UK","type":"text","marks":[{"type":"link","attrs":{"href":"https://wso2docs.atlassian.net/wiki/spaces/OB200/pages/48629951/Deploying+APIs+for+UK#DeployingAPIsforUK-DeployingAPIsforUK-CreateandpublishanAPI"}}]},{"text":".","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"multiexcerpt","parameters":{"macroParams":{"MultiExcerptName":{"value":"ConfiguringAPIs"},"atlassian-macro-output-type":{"value":"INLINE"}},"macroMetadata":{"macroId":{"value":"0586a0cc-b6e6-48f3-a9d7-cbffb9956fec"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://raw.githubusercontent.com/fuegokit/appfire-design-systems-brand-svg/main/single-color-brand-icons/af-logo-multi-excerpt-24.svg"}}],"title":"MultiExcerpt (legacy)"}}},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Sign in to the API Publisher Portal (","type":"text"},{"text":"https://:9443/publisher","type":"text","marks":[{"type":"code"}]},{"text":").","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"400","id":"1fa380d0-7ff8-4ec5-873f-a5ae11e65ab7","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the ","type":"text"},{"text":"APIs","type":"text","marks":[{"type":"strong"}]},{"text":" tab, select ","type":"text"},{"text":"CREATE NEW API > I Have an Existing REST API","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":300,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":555,"id":"db6dcf34-e86e-4193-87cd-243e885b709c","collection":"contentId-48630748","type":"file","height":612}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Set the","type":"text"},{"text":" Input Type ","type":"text","marks":[{"type":"strong"}]},{"text":"to ","type":"text"},{"text":"OpenAPI File","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"500","id":"632b139a-eef8-49ce-b0d8-7dcda931d697","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"BROWSE FILE TO UPLOAD","type":"text","marks":[{"type":"strong"}]},{"text":" and select the ","type":"text"},{"text":"/repository/resources/finance/apis/openbanking.org.uk/FundsConfirmation/3.1.5/funds-confirmation-swagger.yaml","type":"text","marks":[{"type":"code"}]},{"text":" Swagger definition.","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"500","id":"6195741e-1129-4ac6-b81f-efd83831b6c8","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Next","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Set the ","type":"text"},{"text":"Context","type":"text","marks":[{"type":"strong"}]},{"text":" value as follows: ","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"If you are using WSO2 Open Banking API Manager Level 2.0.0.114 or above: ","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"If you are configuring an API of v3.1.8 or above, set the following context value manually. ","type":"text"}]}]},{"type":"codeBlock","content":[{"text":"/open-banking/{version}/cbpii","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Leave the ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":"Endpoint","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":" field empty as it is.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Set the business plan to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":"Unlimited : Allows unlimited","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":"requests","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":" unless you want to limit the requests. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"type":"hardBreak"},{"text":" ","type":"text"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"500","id":"57a2297d-bf3d-46c3-9133-1e7f3e2a9bbe","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Create ","type":"text","marks":[{"type":"strong"}]},{"text":"to create the API.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Once you get the message that the API is successfully updated, go to ","type":"text"},{"text":"Runtime Configurations ","type":"text","marks":[{"type":"strong"}]},{"text":"using the left menu panel. ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"200","id":"e8942027-7411-4af5-a577-1e1049d6dc1c","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click the edit button under ","type":"text"},{"text":"Request > Message Mediation","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"500","id":"d84fda69-1ced-49c3-815b-3452dd10429e","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Now, select the ","type":"text"},{"text":"Custom Policy ","type":"text","marks":[{"type":"strong"}]},{"text":"option.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Upload the ","type":"text"},{"text":"/repository/resources/finance/apis/openbanking.org.uk/FundsConfirmation/3.1.5/funds-confirmation-dynamic-endpoint-insequence-3.1.5.xml","type":"text","marks":[{"type":"code"}]},{"text":" in-sequence file and click ","type":"text"},{"text":"SELECT","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"","id":"88781a14-337f-4f58-9710-92300e9fe8ee","collection":"contentId-48630748","height":"250"}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Scroll down and click ","type":"text"},{"text":"SAVE","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Go to ","type":"text"},{"text":"Endpoints","type":"text","marks":[{"type":"strong"}]},{"text":" using the left menu panel.","type":"text"},{"type":"hardBreak"},{"text":" ","type":"text"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"","id":"f06e3d80-997d-48d1-ad03-0a669e87f57c","collection":"contentId-48630748","height":"250"}}},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select ","type":"text"},{"text":"Dynamic Endpoint","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"},{"type":"hardBreak"},{"text":" ","type":"text"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"600","id":"94d1cd61-cea8-4874-866d-4f8e1412af4c","collection":"contentId-48630748","height":""}}},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the endpoint types; Production Endpoint/Sandbox Endpoint.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click","type":"text"},{"text":" ","type":"text"},{"text":" ","type":"text"},{"text":"Save","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Now, go to ","type":"text"},{"text":"Properties ","type":"text","marks":[{"type":"strong"}]},{"text":"using the left menu panel. ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"200","id":"69dc4dea-8c1f-4bab-ac0a-ac5f5a7e65ba","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Add New Property","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"400","id":"535d120e-c951-486c-a59d-c1cc7448b7a4","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add the API Properties according to your API and click ","type":"text"},{"text":" ","type":"text"},{"text":"the","type":"text"},{"text":" ","type":"text"},{"text":"Add","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"button. ","type":"text"}]},{"type":"table","attrs":{"layout":"align-start"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"API property name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"API property value","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"ob-spec","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"uk","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"ob-api-type","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"cof","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"ob-api-version","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"3.1.5","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"For example: ","type":"text"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"900","id":"cdc9d952-bfc3-4c96-9b83-d2d02fae475e","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"SAVE","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Go back to ","type":"text"},{"text":"Overview ","type":"text","marks":[{"type":"strong"}]},{"text":"using the left menu panel. ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"200","id":"486c7167-b553-41cd-8b1c-e50d4635a8e5","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"PUBLISH","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"800","id":"96c0393f-7008-46b3-ba5e-29fb4ba5bc90","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The published API is available in the Developer Portal at ","type":"text"},{"text":"\n ","type":"text","marks":[{"type":"code"}]},{"text":"https://:9443/devportal.","type":"text","marks":[{"type":"code"}]},{"text":"\n ","type":"text","marks":[{"type":"code"}]}]}]}]}]}]}],"version":1},"reason":"An expand macro in a panel macro can't be created or edited in the new editor."}}}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"If yo","type":"text"},{"text":"u have","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"718a911e-ab66-4ea6-a833-4209e5a24742"}}]},{"text":" integrated with OBIE you can use the ","type":"text"},{"text":"Dynamic Client Registration v3.2 API","type":"text","marks":[{"type":"link","attrs":{"href":"https://wso2docs.atlassian.net/wiki/spaces/OB200/pages/48629830"}}]},{"text":". Once you deploy the API you can continue from the ","type":"text"},{"text":"Generate application access token","type":"text","marks":[{"type":"link","attrs":{"href":"#ConfirmationofFundsAPIv3.1.5-Step9-Generateapplicationaccesstoken"}}]},{"text":" step.","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc-zone","parameters":{"macroParams":{"maxLevel":{"value":"3"},"location":{"value":"top"}},"macroMetadata":{"macroId":{"value":"63d80214-00f4-43ef-aa4c-5b3118a5c73b"},"schemaVersion":{"value":"1"},"title":"Table of Content Zone"}}},"content":[{"type":"rule"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 1 - Sign up as a TPP ","type":"text"}]},{"type":"paragraph","content":[{"text":"In this step, the TPP registers its TPP application in the WSO2 Open Banking Developer portal. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"cxhtml":"Click here to see how it is done...

Navigate to the WSO2 Open Banking Developer portal at https://<WSO2_OB_APIM_HOST>:9443/devportal.
Select Applications in the menu.
In the Sign-in form, click Create Account.
Provide a username and click Proceed Self Register.
Fill the Create New Account form to complete registration.
Read terms and conditions. Click the checkbox to agree to the terms and conditions.
Click Register.

Sign in to the Developer portal as the TPP at https://<WSO2_OB_APIM_HOST>:9443/devportal.
Enter the username and the password you entered when signing up as a TPP.
Click Continue.

The homepage of the Developer Portal is now displayed along with the published APIs.

Go to the Applications tab in the Developer Portal.
Click ADD NEW APPLICATION.
Enter application details.
WSO2 Open Banking currently authenticates the TPP applications using the Reference (Opaque) method.
Click SAVE.

An application can be used to subscribe to multiple APIs. See for the instructions.

Go to the APIs tab in the Developer portal.
Select the Confirmation Of Funds API.
Go to Subscriptions at the bottom of the API and select SUBSCRIBE.
Select an Application from the drop-down list, set the Throttling Policy and click SUBSCRIBE.
Once you subscribe, you can find the list of subscriptions in the bottom.

Now that you have subscribed to the API, generate access tokens and invoke the API.

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":"Click here to see how it is done..."},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Go to the","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text"},{"text":"APIs ","type":"text","marks":[{"type":"strong"}]},{"text":"tab in the Developer portal.","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"800","id":"e85283e3-71c8-4ac2-97a3-f9f783e6fb7f","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the Confirmation Of Funds API. ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"","id":"bd9941df-2d54-40a7-b798-dbe7e2d54bd8","collection":"contentId-48630748","height":"250"}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Go to ","type":"text"},{"text":"Subscriptions","type":"text","marks":[{"type":"strong"}]},{"text":" at the bottom of the API and select ","type":"text"},{"text":"SUBSCRIBE","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"800","id":"357f3567-41d8-4755-a4ea-61c22c6dfbb3","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select an ","type":"text"},{"text":"Application","type":"text","marks":[{"type":"strong"}]},{"text":" from the drop-down list, set the ","type":"text"},{"text":"Throttling Policy","type":"text","marks":[{"type":"strong"}]},{"text":" and click ","type":"text"},{"text":"SUBSCRIBE","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"","id":"fe4b404e-a97c-44ac-ba26-b4c5ebc13839","collection":"contentId-48630748","height":"250"}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Once you subscribe, you can find the list of subscriptions in the bottom.","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"800","id":"156f84fb-5a70-4ebd-a002-9c1cffcd96e3","collection":"contentId-48630748","height":""}}}]}]}]},{"type":"paragraph","content":[{"text":"Now that you have subscribed to the API, generate access tokens and invoke the API.","type":"text"}]}]}],"version":1},"reason":"An expand macro in a rich body macro can't be created or edited in the new editor."}}},{"type":"paragraph"},{"type":"rule"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 5 - Create and upload certificates","type":"text"}]},{"type":"paragraph","content":[{"text":"The TPP user needs to create certificates to validate whether the TPP is registered in a governing entity. It is verified in the TPP Onboarding process. There are two types of certifications that can be added to the client trust stores of the WSO2 Open Banking Identity and Access Management and WSO2 Open Banking API Management modules.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Root and issuer certificates obtained from Open Banking Implementation Entity.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"eIDAS issuer certificates obtained from the Qualified Trust Service Providers.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"See ","type":"text"},{"text":"eIDAS Implementation for PSD2 Compliance","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.wso2.com/display/OB200/eIDAS+Implementation+for+PSD2+Compliance"}}]},{"text":" to find out more information on the two approaches.","type":"text"}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"multiexcerpt-include","parameters":{"macroParams":{"SpaceWithExcerpt":{"value":"OB200"},"MultiExcerptName":{"value":"instructions_to_add_certs_to_the_client_trust_stores"},"PageWithExcerpt":{"value":"eIDAS Implementation for UK"}},"macroMetadata":{"macroId":{"value":"96d78dac-a59b-41ba-8aaf-62bdf0f9b7a9"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://raw.githubusercontent.com/fuegokit/appfire-design-systems-brand-svg/main/single-color-brand-icons/af-logo-multi-excerpt-24.svg"}}],"title":"MultiExcerpt Include (legacy)"}}}}]},{"type":"rule"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 6 - Generate keys","type":"text"}]},{"type":"paragraph","content":[{"text":"The TPP user requires a Client ID(Consumer Key) to access the subscribed APIs.","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"cxhtml":"Click here to see how it is done...

Sign in to WSO2 Open Banking Developer portal as a TPP user.
Go to the Applications tab and select the application you used to subscribe to the Confirmation of Funds API.
Scroll down and select either of the following types of keys:
1. Production Keys: Generates access tokens in the production environment.
2. Sandbox Keys: Generates access tokens in the sandbox environment.
Click Manage at the bottom of the page.

Provide the requested information as defined below:

Field	Description
Grant Types	These determine the credentials that are used to generate the access token. Code: This relates to the authorisation code grant type and is applicable when consuming the API as a user. Implicit: This is similar to the code grant type, but instead of generating code, this directly provides the access token. Refresh Token: This is to renew an expired access token. Client Credential: This relates to the client credentials grant type and is applicable when consuming the API as an application.
Callback URL	This is the URL used by the TPP to receive the authorisation code sent from the Account Servicing Payment Service Provider (ASPSP), e.g: bank. The authorisation code can be used later to generate an OAuth2 access token.
Application Certificate	This is the content between the BEGIN CERTIFICATE and END CERTIFICATE strings of the application certificate (.PEM). If you have configured the , for testing purposes, you can use the sample application certificate available here.

Field

Description

Grant Types

These determine the credentials that are used to generate the access token.

Code: This relates to the authorisation code grant type and is applicable when consuming the API as a user.
Implicit: This is similar to the code grant type, but instead of generating code, this directly provides the access token.
Refresh Token: This is to renew an expired access token.
Client Credential: This relates to the client credentials grant type and is applicable when consuming the API as an application.

Callback URL

This is the URL used by the TPP to receive the authorisation code sent from the Account Servicing Payment Service Provider (ASPSP), e.g: bank. The authorisation code can be used later to generate an OAuth2 access token.

Application Certificate

This is the content between the BEGIN CERTIFICATE and END CERTIFICATE strings of the application certificate (.PEM).

If you have configured the , for testing purposes, you can use the sample application certificate available here.

Click GENERATE KEYS to generate production or sandbox keys. It generates consumer key and consumer secret.

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":"Click here to see how it is done..."},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Sign in to WSO2 Open Banking Developer portal as a TPP user.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Go to the ","type":"text"},{"text":"Applications","type":"text","marks":[{"type":"strong"}]},{"text":" tab and select the application you used to subscribe to the Confirmation of Funds API. ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"800","id":"356dd1ac-57c1-4a09-9591-ef8755718899","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Scroll down and select either of the following types of keys:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Production Keys","type":"text","marks":[{"type":"strong"}]},{"text":": Generates access tokens in the production environment.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Sandbox Keys","type":"text","marks":[{"type":"strong"}]},{"text":": Generates access tokens in the sandbox environment.","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Manage","type":"text","marks":[{"type":"strong"}]},{"text":" at the bottom of the page.","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"800","id":"57c3c23f-f5fc-435c-ab40-aa3768715ba6","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Provide the requested information as defined below: ","type":"text"}]},{"type":"table","attrs":{"layout":"align-start"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Field","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Grant Types","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"These determine the credentials that are used to generate the access token.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Code: This relates to the authorisation code grant type and is applicable when consuming the API as a user.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Implicit: ","type":"text"},{"text":"This is similar to the code grant type, but instead of generating code, this directly provides the access token.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Refresh Token: This is to renew an expired access token.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Client Credential: This relates to the client credentials grant type and is applicable when consuming the API as an application.","type":"text"}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Callback URL","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"This is the URL used by the TPP to receive the authorisation code sent from the Account Servicing Payment Service Provider (ASPSP), e.g: bank. The authorisation code can be used later to generate an OAuth2 access token.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Application Certificate","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"This is the content between the BEGIN CERTIFICATE and END CERTIFICATE strings of the application certificate (.PEM). ","type":"text"}]},{"type":"panel","attrs":{"panelType":"success"},"content":[{"type":"paragraph","content":[{"text":"If you have configured the ","type":"text"},{"text":"OB certificates","type":"text","marks":[{"type":"link","attrs":{"href":"#ConfirmationofFundsAPIv3.1.5-Step5-Createanduploadcertificates"}}]},{"text":", for testing purposes, you can use the sample application certificate available ","type":"text"},{"text":"here","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.wso2.com/download/attachments/150017632/sample_application_cert.pem?api=v2"}}]},{"text":".","type":"text"}]}]}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":700,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":961,"id":"f2227b91-3f05-44f3-b129-3b1b7ba32050","collection":"contentId-48630748","type":"file","height":766}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"GENERATE KEYS","type":"text","marks":[{"type":"strong"}]},{"text":" to generate production or sandbox keys. It generates consumer key and consumer secret.","type":"text"}]}]}]}]}],"version":1},"reason":"An expand macro in a rich body macro can't be created or edited in the new editor."}}},{"type":"paragraph"},{"type":"rule"},{"type":"paragraph"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 7 - Generate application access token","type":"text"}]},{"type":"paragraph","content":[{"text":"When invoking APIs in the Confirmation of Funds flow, application access tokens must be generated using the client credential grant type. The generated application access token is used to invoke the API.","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"cxhtml":"Click here to see how it is done...

You can skip the above steps and use to dynamically register the clients.

Once the client is successfully registered, sign in to WSO2 Open Banking Developer Portal and go to the Applications tab.
Select your client application from the Application List.
You can view the keys you generated at the bottom of this page:
The Consumer Key shown above is the client ID of your application.
Now, generate the client assertion by signing the following JSON payload using the supported algorithms.
If you have configured the , you may use the attached certificate and keys for signing and transports layer security testing purposes.
client_assertion formattext>\", \n\"kid\": \"<>\", \n\"typ\": \"JWT\" \n} \n\n{ \n\"iss\": \"<>\", \n\"sub\": \"<>\", \n\"exp\": <>, \n\"iat\": <>, \n\"jti\": \"<>\", \n\"aud\": \"<>:8243/token>>\" \n} \n\n]]>sample client_assertion
The value of the aud claim should contain the same value as the Identity Provider Entity ID.
Click here to view the Identity Provider Entity ID:
Sign in to the Identity and Access Management console at \n \n https://<WSO2_OB_IAM_HOST>t:9446/carbon\n \n .
In the Main menu, go to Home > Identity > Identity Providers > Resident.
View the value in Resident Identity Provider > Inbound Authentication Configuration > OAuth2/OpenID Connect Configuration > Identity Provider Entity ID. By default this value is set to \n \n \n https://<WSO2_OB_APIM>:8243/token\n \n \n .
Run the following cURL command in a command prompt to generate the access token. Update the placeholders with the relevant values.
:8243/token \\\n -H 'Cache-Control: no-cache' \\\n -H 'Content-Type: application/x-www-form-urlencoded' \\\n --cert --key \\\n -d 'client_id=&grant_type=client_credentials&scope=fundsconfirmations%20openid%20&client_assertion=&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&redirect_uri=']]>
The access token is now generated.
You can use the same cURL command to regenerate the access token.

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":"Click here to see how it is done..."},"content":[{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"You can skip the above steps and use ","type":"text"},{"text":"DCR v3.2 API ","type":"text","marks":[{"type":"link","attrs":{"href":"https://wso2docs.atlassian.net/wiki/spaces/OB200/pages/48629830"}}]},{"text":" to dynamically register the clients.","type":"text"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Once the client is successfully registered, sign in to WSO2 Open Banking Developer Portal and go to the ","type":"text"},{"text":"Applications","type":"text","marks":[{"type":"strong"}]},{"text":" tab.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select your client application from the Application List. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You can view the keys you generated at the bottom of this page: ","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"500","id":"8a97e44a-82f7-4247-9c21-f0c81722046f","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"Consumer Key","type":"text","marks":[{"type":"strong"}]},{"text":" shown above is the client ID of your application.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Now, generate the client assertion by signing the following JSON payload using the supported algorithms. ","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"If you have configured the ","type":"text"},{"text":"OB certificates","type":"text","marks":[{"type":"link","attrs":{"href":"https://wso2docs.atlassian.net/wiki/spaces/OB200/pages/48630748"}}]},{"text":", you may use the ","type":"text"},{"text":"attached","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.wso2.com/download/attachments/150017632/certificates.zip?api=v2"}}]},{"text":" certificate and keys for signing and transports layer security testing purposes.","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtabgroup","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"dffb8a22-081f-4e24-bb3d-bf566f1c2d14"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab Group"}}},"content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"client_assertion format"}},"macroMetadata":{"macroId":{"value":"2f82acbc-b67c-488e-a4d0-c8df2a236f3a"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","attrs":{"language":"plaintext"},"content":[{"text":"{ \n\"alg\": \"<>\", \n\"kid\": \"<>\", \n\"typ\": \"JWT\" \n} \n\n{ \n\"iss\": \"<>\", \n\"sub\": \"<>\", \n\"exp\": <>, \n\"iat\": <>, \n\"jti\": \"<>\", \n\"aud\": \"<>:8243/token>>\" \n} \n\n","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"sample client_assertion"}},"macroMetadata":{"macroId":{"value":"c8060a9e-5ff2-4e32-a786-5c0a96fbcfc3"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"eyJraWQiOiJfTG03VFVWNF8yS3dydWhJQzZUWTdtel82WTQxMlhabG54dHl5QXB6eEw4IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiI0RWJRZmpSZFV2UVJxZThmNlJrMDlWb1Q5bFVhIiwiYXVkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6ODI0My90b2tlbiIsImlzcyI6IjRFYlFmalJkVXZRUnFlOGY2UmswOVZvVDlsVWEiLCJleHAiOjE2Mzg3ODg0NDIsImlhdCI6MTYwMjI0NjAwOCwianRpIjoiMTYwMjI0NjAwOCJ9.lwPCemtdRZFgIBR65oxJkYP2AeyHC40gl_JjQO0sPK8QQo-PeL2PA6Bi7ULS9Ir05MHwmz9Lam4mDpzN3evBYXzkwYC-eHmeJw5gw-h-l7gq7tFT0x0ZX4Grh_tI2PZHJA6KMyBFksgKN4-cCjjPJJjZEqzyWTrtmzgV4rYGhnUDhjKdxIqzqqm1NDzWwCGK0e42cbp5NxGWTlk2vYM3dC6bGA2uJLaTYxU3r7iUIj6a0DEX21kpHJ7h4cNzbWRDhZCui661H-83zJ-Ijkg47tkdJp-BTrAeyEdyMGL3WiUfP9z0Zqpk4vUsXOZWMEBn719iekOWG4MInFiaSNlhhw","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"The value of the ","type":"text"},{"text":"aud","type":"text","marks":[{"type":"code"}]},{"text":" claim should contain the same value as the ","type":"text"},{"text":"Identity Provider Entity ID.","type":"text","marks":[{"type":"code"}]}]},{"type":"expand","attrs":{"title":"Click here to view the Identity Provider Entity ID:"},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Sign in to the Identity and Access Management console at ","type":"text"},{"text":"\n ","type":"text","marks":[{"type":"code"}]},{"text":"\n https://t:9446/carbon\n ","type":"text","marks":[{"type":"code"}]},{"text":"\n ","type":"text","marks":[{"type":"code"}]},{"text":". ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the ","type":"text"},{"text":"Main","type":"text","marks":[{"type":"strong"}]},{"text":" menu, go to ","type":"text"},{"text":"Home > Identity > Identity Providers > Resident","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"View the value in ","type":"text"},{"text":"Resident Identity Provider > Inbound Authentication Configuration >","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"OAuth2/OpenID Connect Configuration > Identity Provider Entity ID","type":"text","marks":[{"type":"strong"}]},{"text":". By default this value is set to ","type":"text"},{"text":"\n ","type":"text","marks":[{"type":"code"}]},{"text":"\n \n https://:8243/token\n \n ","type":"text","marks":[{"type":"code"}]},{"text":"\n ","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Run the following cURL command in a command prompt to generate the access token. Update the placeholders with the relevant values.","type":"text"}]},{"type":"codeBlock","content":[{"text":"curl -X POST \\\n https://:8243/token \\\n -H 'Cache-Control: no-cache' \\\n -H 'Content-Type: application/x-www-form-urlencoded' \\\n --cert --key \\\n -d 'client_id=&grant_type=client_credentials&scope=fundsconfirmations%20openid%20&client_assertion=&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&redirect_uri='","type":"text"}]},{"type":"paragraph","content":[{"text":"The access token is now generated.","type":"text"}]},{"type":"panel","attrs":{"panelType":"success"},"content":[{"type":"paragraph","content":[{"text":"You can use the same cURL command to regenerate the access token.","type":"text"}]}]}]}]}]}],"version":1},"reason":"An expand macro in a rich body macro can't be created or edited in the new editor."}}},{"type":"paragraph"},{"type":"rule"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 8 - Initiate funds confirmation consents","type":"text"}]},{"type":"paragraph","content":[{"text":"In this step, the TPP creates a request to get the consent of the PSU to confirm the funds available in the bank account. The Bank sends the request to the PSU stating the accounts and information that the TPP wants to access. Upon the user approving or denying the account consent, the TPP is now eligible to access to confirm funds are available.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"cxhtml":"Click here to see how it is done

POST /funds-confirmation-consents

This resource creates a consent to access the accounts to confirm that the funds are available. Use the following format in the request body.
Add all mandatory header fields.
- x-fapi-financial-id - The unique id of the ASPSP to which the request is issued. This id will be issued by OBIE.
- Authorization - An Authorisation Token as per https://tools.ietf.org/html/rfc6750. Enter the application access token, you generated from the .
A sample request follows the format given below.
' \\\n -H 'Content-Type: application/json' \\\n -H 'accept: application/json' \\\n -H 'x-fapi-financial-id: open-bank' \\\n --cert --key \\\n -d '{\n \"Data\":{\n \"ExpirationDateTime\":\"2021-05-02T00:00:00+00:00\",\n \"DebtorAccount\":{\n \"SchemeName\":\"UK.OBIE.SortCodeAccountNumber\",\n \"Identification\":\"12334\",\n \"Name\":\"Account1\",\n \"SecondaryIdentification\":\"Account1\"\n }\n }\n}']]>
The response will bear the ConsentId.

GET /funds-confirmation-consents/{ConsentId}

A CBPII may retrieve a funds-confirmation-consent resource that they have created to check its status. In order to make this request, the CBPII must have an access token issued by the ASPSP using client credentials grant.
Add all mandatory header fields.
ConsentId - The unique id of the consent which you want to retrieve.
x-fapi-financial-id - The unique id of the ASPSP to which the request is issued. This id will be issued by the OBIE.
Authorization - An Authorisation Token as per https://tools.ietf.org/html/rfc6750. Enter the application access token, you generated from the .

Request

\\\n -H 'Authorization: Bearer ' \\\n -H 'Content-Type: application/json' \\\n -H 'accept: application/json' \\\n -H 'x-fapi-financial-id: open-bank' \\\n --cert --key ]]>

Response

DELETE /funds-confirmation-consents/{ConsentId}

If the PSU revokes the consent to data access with the CBPII, the CBPII must delete the funds-confirmation-consent resource. In order to make this request, the CBPII must have an access token issued by the ASPSP using client credentials grant.
Add all mandatory header fields.
- ConsentId - The unique id of the consent which you want to delete.
- x-fapi-financial-id - The unique id of the ASPSP to which the request is issued. This id will be issued by OBIE.
- Authorization - An Authorisation Token as per https://tools.ietf.org/html/rfc6750. Enter the application access token, you generated from the . Use the following format and replace the placeholders.

Given below is a sample request.

Request

:8243/open-banking/v3.1/cbpii/funds-confirmation-consents/ \\\n -H 'Authorization: Bearer ' \\\n -H 'Cache-Control: no-cache' -k \\\n -H 'x-fapi-financial-id: open-bank' \\\n --cert --key ]]>

Response

If the deletion is successful you will get a 204 No Content response.

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":"Click here to see how it is done"},"content":[{"type":"heading","attrs":{"level":4},"content":[{"text":"POST /funds-confirmation-consents","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"This resource creates a consent to access the accounts to confirm that the funds are available. Use the following format in the request body.","type":"text"}]},{"type":"codeBlock","content":[{"text":"{\n \"Data\":{\n \"ExpirationDateTime\":\"2021-05-02T00:00:00+00:00\",\n \"DebtorAccount\":{\n \"SchemeName\":\"UK.OBIE.SortCodeAccountNumber\",\n \"Identification\":\"12334\",\n \"Name\":\"Account1\",\n \"SecondaryIdentification\":\"Account1\"\n }\n }\n}","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add all mandatory header fields.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"x-fapi-financial-id ","type":"text","marks":[{"type":"strong"}]},{"text":"- The unique id of the ASPSP to which the request is issued. This id will be issued by OBIE.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Authorization","type":"text","marks":[{"type":"strong"}]},{"text":" - An Authorisation Token as per ","type":"text"},{"text":"https://tools.ietf.org/html/rfc6750","type":"text","marks":[{"type":"link","attrs":{"href":"https://tools.ietf.org/html/rfc6750"}}]},{"text":". Enter the application access token, you generated from the ","type":"text"},{"text":"above step","type":"text","marks":[{"type":"link","attrs":{"href":"#ConfirmationofFundsAPIv3.1.5-Step9-Generateapplicationaccesstoken"}}]},{"text":".","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A sample request follows the format given below.","type":"text"}]},{"type":"codeBlock","content":[{"text":"curl -X POST \\\n https://localhost:8243/open-banking/v3.1/cbpii/funds-confirmation-consents \\\n -H 'Authorization: Bearer ' \\\n -H 'Content-Type: application/json' \\\n -H 'accept: application/json' \\\n -H 'x-fapi-financial-id: open-bank' \\\n --cert --key \\\n -d '{\n \"Data\":{\n \"ExpirationDateTime\":\"2021-05-02T00:00:00+00:00\",\n \"DebtorAccount\":{\n \"SchemeName\":\"UK.OBIE.SortCodeAccountNumber\",\n \"Identification\":\"12334\",\n \"Name\":\"Account1\",\n \"SecondaryIdentification\":\"Account1\"\n }\n }\n}'","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The response will bear the ","type":"text"},{"text":"ConsentId","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"codeBlock","content":[{"text":"{\n \"Data\":{\n \"Status\":\"AwaitingAuthorisation\",\n \"StatusUpdateDateTime\":\"2020-10-09T12:32:33Z\",\n \"DebtorAccount\":{\n \"SecondaryIdentification\":\"Account1\",\n \"SchemeName\":\"UK.OBIE.SortCodeAccountNumber\",\n \"Identification\":\"12334\",\n \"Name\":\"Account1\"\n },\n \"CreationDateTime\":\"2020-10-09T12:32:33Z\",\n \"ExpirationDateTime\":\"2021-05-02T00:00:00+00:00\",\n \"ConsentId\":\"139a17c5-4145-4308-ad1e-6a2c63745235\"\n },\n \"Links\":{\n \"Self\":\"https://localhost:8243/open-banking/v3.1/cbpii/funds-confirmation-consents/139a17c5-4145-4308-ad1e-6a2c63745235\"\n },\n \"Meta\":{\n \"TotalPages\":1\n }\n}","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"GET /funds-confirmation-consents/{ConsentId}","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A CBPII may retrieve a funds-confirmation-consent resource that they have created to check its status. In order to make this request, the CBPII must have an access token issued by the ASPSP using client credentials grant.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add all mandatory header fields.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ConsentId ","type":"text","marks":[{"type":"strong"}]},{"text":"- The unique id of the consent which you want to retrieve.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"x-fapi-financial-id ","type":"text","marks":[{"type":"strong"}]},{"text":"- The unique id of the ASPSP to which the request is issued. This id will be issued by the OBIE.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Authorization","type":"text","marks":[{"type":"strong"}]},{"text":" - An Authorisation Token as per ","type":"text"},{"text":"https://tools.ietf.org/html/rfc6750","type":"text","marks":[{"type":"link","attrs":{"href":"https://tools.ietf.org/html/rfc6750"}}]},{"text":". Enter the application access token, you generated from the ","type":"text"},{"text":"above step","type":"text","marks":[{"type":"link","attrs":{"href":"#ConfirmationofFundsAPIv3.1.5-Generateapplicationaccesstoken"}}]},{"text":".","type":"text"}]}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtabgroup","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"9fd30181-7b94-4cbb-8cd9-4fd10e0d9a97"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab Group"}}},"content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Request"}},"macroMetadata":{"macroId":{"value":"67e902ec-f13f-4673-b699-ef5a68fb2c3e"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"curl -X GET \\\n https://localhost:8243/open-banking/v3.1/cbpii/funds-confirmation-consents/ \\\n -H 'Authorization: Bearer ' \\\n -H 'Content-Type: application/json' \\\n -H 'accept: application/json' \\\n -H 'x-fapi-financial-id: open-bank' \\\n --cert --key ","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Response"}},"macroMetadata":{"macroId":{"value":"f7f58373-6e36-401c-b890-e2a132d73b25"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"{\n \"Data\":{\n \"Status\":\"AwaitingAuthorisation\",\n \"StatusUpdateDateTime\":\"2020-10-09T12:32:33Z\",\n \"DebtorAccount\":{\n \"SecondaryIdentification\":\"Account1\",\n \"SchemeName\":\"UK.OBIE.SortCodeAccountNumber\",\n \"Identification\":\"12334\",\n \"Name\":\"Account1\"\n },\n \"CreationDateTime\":\"2020-10-09T12:32:33Z\",\n \"ExpirationDateTime\":\"2021-05-02T00:00:00+00:00\",\n \"ConsentId\":\"139a17c5-4145-4308-ad1e-6a2c63745235\"\n },\n \"Links\":{\n \"Self\":\"https://localhost:8243/open-banking/v3.1/cbpii/funds-confirmation-consents/139a17c5-4145-4308-ad1e-6a2c63745235\"\n },\n \"Meta\":{\n \"TotalPages\":1\n }\n}","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"DELETE /funds-confirmation-consents/{ConsentId}","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If the PSU revokes the consent to data access with the CBPII, the CBPII must delete the funds-confirmation-consent resource. In order to make this request, the CBPII must have an access token issued by the ASPSP using client credentials grant.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add all mandatory header fields.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ConsentId ","type":"text","marks":[{"type":"strong"}]},{"text":"- The unique id of the consent which you want to delete.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"x-fapi-financial-id ","type":"text","marks":[{"type":"strong"}]},{"text":"- The unique id of the ASPSP to which the request is issued. This id will be issued by OBIE.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Authorization","type":"text","marks":[{"type":"strong"}]},{"text":" - An Authorisation Token as per ","type":"text"},{"text":"https://tools.ietf.org/html/rfc6750","type":"text","marks":[{"type":"link","attrs":{"href":"https://tools.ietf.org/html/rfc6750"}}]},{"text":". Enter the application access token, you generated from the ","type":"text"},{"text":"above step","type":"text","marks":[{"type":"link","attrs":{"href":"#ConfirmationofFundsAPIv3.1.5-Generateapplicationaccesstoken"}}]},{"text":". Use the following format and replace the placeholders.","type":"text"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Given below is a sample request. ","type":"text"}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtabgroup","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"913c6363-3fea-49ec-884c-728103b99a52"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab Group"}}},"content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Request"}},"macroMetadata":{"macroId":{"value":"a943dc08-c1d5-4958-bc07-ae180681129f"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"curl -X DELETE \\\n https://:8243/open-banking/v3.1/cbpii/funds-confirmation-consents/ \\\n -H 'Authorization: Bearer ' \\\n -H 'Cache-Control: no-cache' -k \\\n -H 'x-fapi-financial-id: open-bank' \\\n --cert --key ","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Response"}},"macroMetadata":{"macroId":{"value":"04935926-6552-4890-be61-ace5b70d45d8"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"204 No Content","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"If the deletion is successful you will get a","type":"text"},{"text":" 204 No Content","type":"text","marks":[{"type":"code"}]},{"text":" response.","type":"text"}]}]}],"version":1},"reason":"An expand macro in a rich body macro can't be created or edited in the new editor."}}},{"type":"rule"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 9 - Authorizing funds-confirmation-consents","type":"text"}]},{"type":"paragraph","content":[{"text":"The CBPII redirects the bank customer to authenticate and approve/deny application-provided consents.","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"cxhtml":"Click here to see how it is doneINLINE

Generate the request object by signing the following JSON payload using the supported algorithms.

Request object format

\",\n \"alg\": \"\",\n \"typ\": \"JWT\"\n}\n{\n \"max_age\": 86400,\n \"aud\": \":8243/token>\",\n \"scope\": \"fundsconfirmation openid\",\n \"iss\": \"\",\n \"claims\": {\n \"id_token\": {\n \"acr\": {\n \"values\": [\n \"urn:openbanking:psd2:sca\",\n \"urn:openbanking:psd2:ca\"\n ],\n \"essential\": true\n },\n \"openbanking_intent_id\": {\n \"value\": \"\",\n \"essential\": true\n }\n },\n \"userinfo\": {\n \"openbanking_intent_id\": {\n \"value\": \"\",\n \"essential\": true\n }\n }\n },\n \"response_type\": \"\", \n \"redirect_uri\": \"\",\n \"state\": \"YWlzcDozMTQ2\",\n \"exp\": ,\n \"nonce\": \"\",\n \"client_id\": \"\"\n}]]>

Sample request object

Run the following in a browser to prompt the invocation of the authorize API. Make sure you update the placeholders with the relevant values:

Format

:8243/authorize/?response_type=code%20id_token&client_id=&scope=fundsconfirmation%20openid&redirect_uri=&state=YWlzcDozMTQ2&prompt=login&nonce=&request=]]>

Sample

You are directed to a login page.

Log in with the credentials of a user that has a Subscriber role.
If a secondary factor is required. For example, SMS OTP, provide the relevant values.
Upon successful authentication, the user is redirected to a page where the user needs to select the accounts that need to be authorised.
Upon providing consent, the consumer is redirected to the callback URL of the TPP with the authorization code. For example:
The authorization code from the above URL is in the code parameter (code=e61579c3-fe9c-3dfe-9af2-0d2f03b95775).

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":"Click here to see how it is done"},"content":[{"type":"paragraph","content":[{"text":"Generate the request object by signing the following JSON payload using the supported algorithms. ","type":"text"}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtabgroup","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"d5c7a71f-d02a-44e0-9192-ccb2e3585b56"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab Group"}}},"content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Request object format"}},"macroMetadata":{"macroId":{"value":"66e2e2f9-9798-4708-a5bb-584be279fe19"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"{\n \"kid\": \"\",\n \"alg\": \"\",\n \"typ\": \"JWT\"\n}\n{\n \"max_age\": 86400,\n \"aud\": \":8243/token>\",\n \"scope\": \"fundsconfirmation openid\",\n \"iss\": \"\",\n \"claims\": {\n \"id_token\": {\n \"acr\": {\n \"values\": [\n \"urn:openbanking:psd2:sca\",\n \"urn:openbanking:psd2:ca\"\n ],\n \"essential\": true\n },\n \"openbanking_intent_id\": {\n \"value\": \"\",\n \"essential\": true\n }\n },\n \"userinfo\": {\n \"openbanking_intent_id\": {\n \"value\": \"\",\n \"essential\": true\n }\n }\n },\n \"response_type\": \"\", \n \"redirect_uri\": \"\",\n \"state\": \"YWlzcDozMTQ2\",\n \"exp\": ,\n \"nonce\": \"\",\n \"client_id\": \"\"\n}","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Sample request object"}},"macroMetadata":{"macroId":{"value":"bff41e93-3421-4917-ab92-f441459ca299"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"eyJraWQiOiJfTG03VFVWNF8yS3dydWhJQzZUWTdtel82WTQxMlhabG54dHl5QXB6eEw4IiwiYWxnIjoiUFMyNTYiLCJ0eXAiOiJKV1QifQ.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.AIBLVgIjaOeZHZ_qFyzPC_8fDv5pIUGtiArfYAyNzYEV4m57iaDx2rw6L1ekI1dukmb_b3FDL5I8FudqzQRzvNf26tSVhhKfwgZZKE52BlR6gCuH_bbFKpbM1BT4iBqY-uAZZZKDY7CD8Uo5KQov7lG0dp9fHVYbTWHq9ugn5dsj7fiklgsr41lj9Ay_rXT1mWDlJs6q-bVLo982Yg1UHWeq0c5O_HYonyj6MPNzd0YCeAXiDSsKL_vWPhRPwk2L6NTCfzk_lEvAcXftbekGVKg8tIQm7ITPTn8SbbmJwwsGu7PHAXb2ypYn8iyOzBeArTnFouP8xvXUr9BGvHsoZg","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Run the following in a browser to prompt the invocation of the authorize API. Make sure you update the placeholders with the relevant values: ","type":"text"}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtabgroup","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"c62bb81b-e532-483e-a99d-a5af44484650"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab Group"}}},"content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Format"}},"macroMetadata":{"macroId":{"value":"d2e05efd-a8f7-4d57-a298-2fa4a3cae3d8"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"https://:8243/authorize/?response_type=code%20id_token&client_id=&scope=fundsconfirmation%20openid&redirect_uri=&state=YWlzcDozMTQ2&prompt=login&nonce=&request=","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Sample"}},"macroMetadata":{"macroId":{"value":"18c6df8b-0d67-4bf9-bcfa-fc4353e23764"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"https://localhost:8243/authorize/?response_type=code%20id_token&client_id=4EbQfjRdUvQRqe8f6Rk09VoT9lUa&scope=fundsconfirmation%20openid&redirect_uri=https://wso2.com/&state=YWlzcDozMTQ2&prompt=login&nonce=n-0S6_WzA2Mj&request=eyJraWQiOiJfTG03VFVWNF8yS3dydWhJQzZUWTdtel82WTQxMlhabG54dHl5QXB6eEw4IiwiYWxnIjoiUFMyNTYiLCJ0eXAiOiJKV1QifQ.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.o8tV2zc7wt1jhD_Xow8pkvn7p2zgXV6ShqZo0UmsKv8huCLlouR13EiB2CgnjsqfUzAOIEuaOKQNFo32ZZxbaT1Mqr3oDFurczLSBlM_SXynu2K_lKE4p1zncV955Ag8D1euLL6wxlLOQ0PaEHzrMuq3kDWuodUzoXrQ2ZXFxy8GZfUNtTEwHFqE06CcMoZ-Ca04szn_wnYgWgO0Y_NDED5VK7zJfytB6d39AMmMZK7uybA8B6NQpyMXySsf_fqUYnxn12F_lqyHvaNmW0dUODBVfMRFL43mkRiZENBCGmMGyYCAyiGJL1hCKGoBAaO5mQYtOVCm36nMuXj7A5M5gw","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"You are directed to a login page.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Log in with the credentials of a user that has a","type":"text"},{"text":" ","type":"text"},{"text":" ","type":"text"},{"text":"Subscriber","type":"text","marks":[{"type":"code"}]},{"text":" ","type":"text"},{"text":" ","type":"text"},{"text":"role.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If a secondary factor is required. For example, SMS OTP, provide the relevant values.","type":"text"},{"type":"hardBreak"},{"text":" ","type":"text"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"","id":"4b215f41-4f62-4b34-8d94-412dbaecc6c5","collection":"contentId-48630748","height":"250"}}},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Upon successful authentication, the user is redirected to a page where the user needs to select the accounts that need to be authorised.","type":"text"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"650","id":"4d231688-741c-48b1-b9a3-183f4286228e","collection":"contentId-48630748","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Upon providing consent, the consumer is redirected to the callback URL of the TPP with the authorization code. For example: ","type":"text"}]},{"type":"codeBlock","content":[{"text":"https://wso2.com/#code=e61579c3-fe9c-3dfe-9af2-0d2f03b95775&id_token=eyJ4NXQiOiJNell4TW1Ga09HWXdNV0kwWldObU5EY3hOR1l3WW1NNFpUQTNNV0kyTkRBelpHUXpOR00wWkdSbE5qSmtPREZrWkRSaU9URmtNV0ZoTXpVMlpHVmxOZyIsImtpZCI6Ik16WXhNbUZrT0dZd01XSTBaV05tTkRjeE5HWXdZbU00WlRBM01XSTJOREF6WkdRek5HTTBaR1JsTmpKa09ERmtaRFJpT1RGa01XRmhNelUyWkdWbE5nX1JTMjU2IiwiYWxnIjoiUlMyNTYifQ.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.Ros0CEkX7hzfft0rq7ek1Ia-lLoSRT55DRy3nUri35IiQjHYOeY34y6HSHbdnDlW4Yw6mCkB6gZlw7O49zulKcyNUoZn7DdrnldKMhPC2z-mtGhr00x7s0dMNyfH05ZOCIr3cWU2LqhKqyCyhCVP6ZbNDNultPeYQ62NxlTPRnuOi-j7jTsmqQfeiGEuHDpFm431A_6a2XnO5Wt9Awg0nQRpDzEDFD1VL7Ec1ogT3myowbg8YNjm0lQ9f_MV5P7rocG0RQB83hgijbjFYr9CNBuqPU0P_Oi42tWndbSbHqKgdgevuAH2A6_zk-gufJ3cvcFjoy6jFTov1VqIGpTUbA&state=YWlzcDozMTQ2&session_state=9ea1eb6454c3b34a3d1708affde1c25e00f931a4f936c74e2ca7f4250208aa42.sk_04ejciXBj6DnpALyYaw","type":"text"}]},{"type":"paragraph","content":[{"text":"The authorization code from the above URL is in the code parameter ","type":"text"},{"text":"(code=e61579c3-fe9c-3dfe-9af2-0d2f03b95775)","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]}]}]}]}],"version":1},"reason":"An expand macro in a rich body macro can't be created or edited in the new editor."}}},{"type":"rule"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 10 - Generate user access token","type":"text"}]},{"type":"paragraph","content":[{"text":"In this section, you will be generating an access token using the authorization code generated in the above section.","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"cxhtml":"Click here to see how it is done

The client_assertion is a JSON Web Token (JWT). Generate the client_assertion by signing the following JSON payload using the supported algorithms:

client_assertion format

\",\n\"kid\": \"\",\n\"typ\": \"JWT\"\n}\n \n{\n\"iss\": \"\",\n\"sub\": \"\",\n\"exp\": \"\",\n\"iat\": \"\",\n\"jti\": \"\",\n\"aud\": \":8243/token>\"\n}\n]]>

sample client_assertion

Run the following cURL command in a command prompt to generate the access token as a TPP user.

:8243/token \\\n -H 'Content-Type: application/x-www-form-urlencoded' \\\n --cert --key \\\n -d 'client_id=&grant_type=authorization_code&code=&redirect_uri=&client_assertion=&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer']]>

The response contains an access token and a refresh token.

refresh_tokenINLINE

The access tokens have an expiration period, once an access token expires, you need to regenerate it. Run the following cURL command to generate a new access token as a CBPII:

:8243/token \\\n -H 'Authorization: Basic ' \\\n -H 'Content-Type: application/x-www-form-urlencoded' \\\n -k --cert --key \\\n -d 'grant_type=refresh_token&refresh_token=']]>

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":"Click here to see how it is done"},"content":[{"type":"paragraph","content":[{"text":"The client_assertion is a JSON Web Token (JWT). Generate the client_assertion by signing the following JSON payload using the supported algorithms:","type":"text"}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtabgroup","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"ac8a8c44-cac2-4f39-abdb-5ae0fadd8c74"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab Group"}}},"content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"client_assertion format"}},"macroMetadata":{"macroId":{"value":"f89c24a7-9cf1-4d87-9bb4-56773d0611ce"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"{\n\"alg\": \"\",\n\"kid\": \"\",\n\"typ\": \"JWT\"\n}\n \n{\n\"iss\": \"\",\n\"sub\": \"\",\n\"exp\": \"\",\n\"iat\": \"\",\n\"jti\": \"\",\n\"aud\": \":8243/token>\"\n}\n","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"sample client_assertion "}},"macroMetadata":{"macroId":{"value":"2016ba7f-2c4f-40ce-b703-0b05bec8b07e"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"eyJraWQiOiJfTG03VFVWNF8yS3dydWhJQzZUWTdtel82WTQxMlhabG54dHl5QXB6eEw4IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiI0RWJRZmpSZFV2UVJxZThmNlJrMDlWb1Q5bFVhIiwiYXVkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6ODI0My90b2tlbiIsImlzcyI6IjRFYlFmalJkVXZRUnFlOGY2UmswOVZvVDlsVWEiLCJleHAiOjE2Mzg3ODg0NDIsImlhdCI6MTYwMjIyNDAyNCwianRpIjoiMTExNjAyMjI0MDI0In0.duVCAG55hHb8af1aOVzzzYngb20QNp6j6cwAlodW5XsXKGN2JtmP4oiU4OCVeXs9Q6j1Vc7mtcdRekfk4HPui_4Ygw808dH7VH4EdX_nF_vAHgKHB3Qc-9QEYh2bAUf1t9aMxxz2E3prS4gsM0_kO4Y5dyLu97SptgOFmdaqhDcFi-8djOYLPG4FtKlXjxSa_oAIUkBFcnIaVa1OCL5Pc3lw4nEeOo32jZHUbQUNaJ4-9IqPay2SMTitFUdIINwrdjPm7X0bhQdAB56d23OkVYsCBdvMrm4q4c2VSx5x6w9ULq3eypjb4I44bav2STwWFIABPSOcKDReB4M2wtKaiA","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Run the following cURL command in a command prompt to generate the access token as a TPP user. ","type":"text"}]},{"type":"codeBlock","content":[{"text":"curl -X POST \\\n https://:8243/token \\\n -H 'Content-Type: application/x-www-form-urlencoded' \\\n --cert --key \\\n -d 'client_id=&grant_type=authorization_code&code=&redirect_uri=&client_assertion=&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer'","type":"text"}]},{"type":"paragraph","content":[{"text":"The response contains an access token and a refresh token.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"multiexcerpt","parameters":{"macroParams":{"MultiExcerptName":{"value":"refresh_token"},"atlassian-macro-output-type":{"value":"INLINE"}},"macroMetadata":{"macroId":{"value":"a14fa4a1-cf29-4e7a-811e-cc432ccc3bcb"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://raw.githubusercontent.com/fuegokit/appfire-design-systems-brand-svg/main/single-color-brand-icons/af-logo-multi-excerpt-24.svg"}}],"title":"MultiExcerpt (legacy)"}}},"content":[{"type":"paragraph","content":[{"text":"The access tokens have an expiration period, once an access token expires, you need to regenerate it. Run the following cURL command to generate a new access token as a CBPII:","type":"text"}]},{"type":"codeBlock","content":[{"text":"curl -X POST \\\n https://:8243/token \\\n -H 'Authorization: Basic ' \\\n -H 'Content-Type: application/x-www-form-urlencoded' \\\n -k --cert --key \\\n -d 'grant_type=refresh_token&refresh_token='","type":"text"}]}]}]}]}],"version":1},"reason":"An expand macro in a rich body macro can't be created or edited in the new editor."}}},{"type":"rule"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 11 - Invoke Confirmation of Funds API","type":"text"}]},{"type":"paragraph","content":[{"text":"Following API functionality is available in the Confirmation of Funds API. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"These requests use the access token generated in the step ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"above","type":"text","marks":[{"type":"link","attrs":{"href":"#ConfirmationofFundsAPIv3.1.5-Step12-Generateuseraccesstoken"}},{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":".","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"POST /funds-confirmations","type":"text"}]},{"type":"paragraph","content":[{"text":"If the CBPII would like to confirm funds with the ASPSP, it should create a new funds-confirmation resource, and check the ","type":"text"},{"text":"FundsAvailable","type":"text","marks":[{"type":"code"}]},{"text":" flag in the response.","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"nestedContent":{"type":"doc","content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtabgroup","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"c998cf43-33d5-41cb-8e48-50cfe049a7b7"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab Group"}}},"content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Request"}},"macroMetadata":{"macroId":{"value":"18b0000b-417d-4e57-87d4-facfa7ecd0ac"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"curl -X POST \\\n https://:8243/open-banking/v3.1/cbpii/funds-confirmations \\\n -H 'Accept: application/json; charset=utf-8' -k \\\n -H 'Authorization: Bearer ' \\\n -H 'Content-Type: application/json; charset=UTF-8' \\\n -H 'x-fapi-financial-id: open-bank' \\\n --cert --key \\\n -d '{\n \"Data\":{\n \"ConsentId\":\"\",\n \"Reference\":\"Purchase01\",\n \"InstructedAmount\":{\n \"Amount\":\"10.00\",\n \"Currency\":\"USD\"\n }\n }\n}'\n","type":"text"}]}]},{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"localtab","parameters":{"macroParams":{"title":{"value":"Response"}},"macroMetadata":{"macroId":{"value":"1f8a7b8b-e08a-4067-a5a6-2b8ad220273f"},"schemaVersion":{"value":"1"},"placeholder":[{"type":"icon","data":{"url":"https://us.navitabs-static-assets.aws.bitvoodoo.cloud/static/4.0.7/images/macro-icon.png"}}],"title":"Tab (Deprecated)"}}},"content":[{"type":"codeBlock","content":[{"text":"{\n \"Data\":{\n \"FundsConfirmationId\":\"836403\",\n \"CreationDateTime\":\"2017-06-02T00:00:00+00:00\",\n \"Reference\":\"Purchase02\",\n \"FundsAvailable\":true,\n \"ConsentId\":\"139a17c5-4145-4308-ad1e-6a2c63745235\",\n \"InstructedAmount\":{\n \"Amount\":\"20.00\",\n \"Currency\":\"USD\"\n }\n },\n \"Links\":{\n \"Self\":\"https://api.alphabank.com/open-banking/v3.0/funds-confirmations/836403\"\n },\n \"Meta\":{\n \n }\n}","type":"text"}]}]}]}],"version":1},"cxhtml":"

Request

:8243/open-banking/v3.1/cbpii/funds-confirmations \\\n -H 'Accept: application/json; charset=utf-8' -k \\\n -H 'Authorization: Bearer ' \\\n -H 'Content-Type: application/json; charset=UTF-8' \\\n -H 'x-fapi-financial-id: open-bank' \\\n --cert --key \\\n -d '{\n \"Data\":{\n \"ConsentId\":\"\",\n \"Reference\":\"Purchase01\",\n \"InstructedAmount\":{\n \"Amount\":\"10.00\",\n \"Currency\":\"USD\"\n }\n }\n}'\n]]>

Response

"}}}]},{"type":"paragraph"},{"type":"paragraph"},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"paragraph"}],"version":1}