Funds Confirmation Routes - SecureApiGateway/SecureApiGateway GitHub Wiki

Funds Confirmation routes include the following:

66 - Open Banking RS Funds confirmation Consent

  • Protect system: Resource Server
  • Resources protected by te route: /cbpii/funds-confirmation-consents
  • Filters chain:
Filter name Type Applies on Description
ObResponseCheck Scriptable Response Ensures the response is compliant with the Open Banking specifications
CertificateThumbprintFilter OOTB Request Extracts the client certificate thumbprint for use in certificate bound access tokens
OAuth2ResourceServerFilter OOTB Request Checks the access token
ApiClientRoleCheck Scriptable Request Ensures the client certificate includes the PISP role
Grant Type Verifier Scriptable Request Checks the access token grant type is allowed according to the configured value
AuditConsent Scriptable Request Prepares the consent audit trail in JSON format
HeaderFilter OOTB Request Adds host header for downstream resource server

67 - Open Banking Funds Confirmation Availability

  • Protect system: Resource Server
  • Resources protected by te route: /cbpii/funds-confirmations
  • Filters chain:
Filter name Type Applies on Description
ObResponseCheck Scriptable Response Ensures the response is compliant with the Open Banking specifications
UriPathRewriteFilter OOTB Request Adjusts URL for downstream resource server
CertificateThumbprintFilter OOTB Request Extracts the client certificate thumbprint for use in certificate bound access tokens
OAuth2ResourceServerFilter OOTB Request Checks the access token
ApiClientRoleCheck Scriptable Request Ensures the client certificate includes the PISP role
Grant Type Verifier Scriptable Request Checks the access token grant type is allowed according to the configured value
SaveIntentIdOnAttributesContext Scriptable Request Gets the intent id from the access token claims and saves it on the attributes context
RequestEntityConsentIdValidator Scriptable Request checks the consent submitted matches the consent from the access token
AuditConsent Scriptable Request Prepares the consent audit trail in JSON format
HeaderFilter OOTB Request Adds host header for downstream resource server