Configuring Open Banking API Management for Australia

[[custom_message_formatters]]
class = "org.apache.axis2.format.PlainTextFormatter"
content_type = "application/jwt"

[[custom_message_builders]]
class = "org.apache.axis2.format.PlainTextBuilder"
content_type = "application/jwt"

[transport.passthru_https.sender.parameters]
HostnameVerifier = "AllowAll"

[transport.passthru_https.listener.parameters]
"SSLVerifyClient" = "optional"

[super_admin]
username = "<username>"
password = "<password>"
create_admin_account = true

[realm_manager]
data_source= "WSO2UM_DB"

[user_store]
type = "database_unique_id"
class = "org.wso2.carbon.user.core.jdbc.UniqueIDJDBCUserStoreManager"

[user_store.properties]
UsernameJavaRegEx = "a-zA-Z0-9@._-{3,30}$"
UsernameJavaScriptRegEx = "^[a-zA-Z0-9._-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,4}$"
SCIMEnabled = false
IsBulkImportSupported = false
LeadingOrTrailingSpaceAllowedInUserName = false
UsernameWithEmailJavaScriptRegEx = "^[\\S]{3,30}$"

[authorization_manager]
class = "org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager"

[authorization_manager.properties]
AdminRoleManagementPermissions = "/permission"
AuthorizationCacheEnabled = true
GetAllRolesOfUserEnabled = false

[[apim.gateway.environment]]
http_endpoint = "http://<WSO2_OB_APIM_HOST>:${http.nio.port}"
https_endpoint = "https://<WSO2_OB_APIM_HOST>:${https.nio.port}"

[apim.analytics]
enable = false

receiver_username = "$ref{super_admin.username}@carbon.super"
store_api_username = "$ref{super_admin.username}@carbon.super"

[apim.key_manager]
service_url = "https://<WSO2_OB_IAM_HOST>:9446${carbon.context}services/"
key_manager_client_impl = "com.wso2.finance.open.banking.sca.keymanager.SCABasedKeyManagerClient"

[apim.oauth_config]
enable_outbound_auth_header = true

[apim.oauth_config]
white_listed_scopes = ["^device_.*", "openid", "^OB_.*", "^TIME_.*"]

[apim.devportal]
enable_comments = false
enable_ratings = false

[apim.throttling]
enable_data_publishing = true
jms.topic_connection_factory = "amqp://admin!wso2.com!carbon.super:$ref{super_admin.password}@clientid/carbon?brokerlist='tcp://${carbon.local.ip}:${jms.port}'"
receiver_username = "$ref{super_admin.username}@carbon.super"

[server]
hostname = "<WSO2_OB_APIM_HOST>"
node_ip = "IP_ADDRESS"
mode = "single" #single or ha
base_path = "${carbon.protocol}://${carbon.host}:${carbon.management.port}"
#discard_empty_caches = false
server_role = "default"

[open_banking]
deployed_spec = "AU"

[open_banking]
sharable_accounts_retrieve_endpoint ="http://<WSO2_OB_APIM_HOST>:9763/api/openbanking/backenduk/services/bankaccounts/bankaccountservice/sharable-accounts"

[open_banking.au.metadata_cache]
default_timeout = 1
dcr_internal_url = "https://<WSO2_OB_APIM_HOST>:9443/api/openbanking/dynamic-client-registration/common/register/"

[open_banking.au.metadata_cache]
metadata_mgt_endpoint = "https://<WSO2_OB_IAM_HOST>:9446/api/openbanking/au-metadata-mgt/au100/register/metadata"

[open_banking.au]
holder_identifier = "<!--configure bank specific identifier-->"

[open_banking.au]
holder_identifier = "ABC-Bank"

[open_banking.au.admin.api]
self_url = "_self-url_"

[open_banking.api_security]
mtls_token_binding.enable = false

[open_banking.cert_mgt]
client_auth_header = "x-wso2-mutual-auth-cert"

[open_banking.bi_server.data_publishing]
enable = false
server_url = "{tcp://<WSO2_OB_BI_HOST>:7612}"

[open_banking.api_security.global]
username = "$ref{super_admin.username}"
password = "$ref{super_admin.password}"

[open_banking.dcr]
uri_validation.enable = false
hostname_validation.enable = false
software_id_as_application_name.enable = true

[open_banking.dcr]
sector_identifier_uri_validation.enable = true

[open_banking.dcr]
request_jti_validation.enable = true
ssa_jti_validation.enable = true
jti_cache_expiry_time = 60

[open_banking.jwt_authentication_handler]
enable = true
issuer = "<CDR_REGISTER_ID>"
subject = "<CDR_REGISTER_ID>"
audience = "<TOKEN_ENDPOINT_URL>"
jwks_url = "<JWKS_URL>"
cache_expiry_time = "1440"

[open_banking.jwt_authentication_handler]
enable = true
issuer = "cdr-register" [default value]
subject = "cdr-register" [default value]
audience = "https://wso2ob.com"
jwks_url = "https://keystore.openbankingtest.org.uk/0015800001HQQrZAAX/9b5usDpbNtmxDcTzs7GzKp.jwks"
cache_expiry_time = "1440"

[open_banking.sca]
primary_authenticator.name="OBIdentifierExecutor"
primary_authenticator.display_name="ob-identifier-first"

[open_banking.account_id_validation_on_retrieval]
enable = true

[open_banking.uk.inbound_signature]
algo = "PS256"

[open_banking.au.id_permanence]
secret_key = <SECRET_KEY>

[[apim.devportal.application_attributes]]
required = false
hidden = false
name ="recipient_base_uri_sandbox"
description = "Recipient Base URI of the sandbox"

[[apim.devportal.application_attributes]]
required = false
hidden = false
name ="recipient_base_uri_production"
description = "Recipient Base URI of the production"