---
swagger: "2.0"
info:
version: "1.0"
title: PSD2 API-AccountsC
description: Implements AIS functions
contact:
name: CEC Bank -PSD2 developers team
x-ibm-name: psd2-accountc
name: ""
basePath: /psd29c
schemes:
- https
consumes:
- application/json
produces:
- application/json
paths:
/v1/accounts:
get:
description: "Read the identifiers of the available payment account together
with \nbooking balance information, depending on the consent granted.\n\nIt
is assumed that a consent of the PSU to this access is already given and stored
on the ASPSP system. \nThe addressed list of accounts depends then on the
PSU ID and the stored consent addressed by consentId, \nrespectively the OAuth2
access token. \n\nReturns all identifiers of the accounts, to which an account
access has been granted to through \nthe /consents endpoint by the PSU. \nIn
addition, relevant information about the accounts and hyperlinks to corresponding
account \ninformation resources are provided if a related consent has been
already granted.\n\nRemark: Note that the /consents endpoint optionally offers
to grant an access on all available \npayment accounts of a PSU. \nIn this
case, this endpoint will deliver the information about all available payment
accounts \nof the PSU at this ASPSP.\n"
summary: getAccountList
tags:
- Account Information Service (AIS)
operationId: V1AccountsGet
deprecated: false
produces:
- application/json
parameters:
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: withBalance
in: query
required: false
type: boolean
description: "If contained, this function reads the list of accessible payment
accounts including the booking balance, \nif granted by the PSU in the related
consent and available by the ASPSP. \nThis parameter might be ignored by
the ASPSP."
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/accountList'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
/v1/d/accounts:
get:
description: "Read the identifiers of the available payment account together
with \nbooking balance information, depending on the consent granted.\n\nIt
is assumed that a consent of the PSU to this access is already given and stored
on the ASPSP system. \nThe addressed list of accounts depends then on the
PSU ID and the stored consent addressed by consentId, \nrespectively the OAuth2
access token. \n\nReturns all identifiers of the accounts, to which an account
access has been granted to through \nthe /consents endpoint by the PSU. \nIn
addition, relevant information about the accounts and hyperlinks to corresponding
account \ninformation resources are provided if a related consent has been
already granted.\n\nRemark: Note that the /consents endpoint optionally offers
to grant an access on all available \npayment accounts of a PSU. \nIn this
case, this endpoint will deliver the information about all available payment
accounts \nof the PSU at this ASPSP.\n"
summary: getAccountList
tags:
- Account Information Service (AIS)
operationId: V1AccountsdGet
deprecated: false
produces:
- application/json
parameters:
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: withBalance
in: query
required: false
type: boolean
description: "If contained, this function reads the list of accessible payment
accounts including the booking balance, \nif granted by the PSU in the related
consent and available by the ASPSP. \nThis parameter might be ignored by
the ASPSP."
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-ID
in: header
required: false
type: string
description: Client ID of the PSU in the ASPSP client interface. Might be
mandated in the ASPSP's documentation.
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/accountList'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
security:
- api-key-1: []
/v1/accounts/{account-id}:
get:
description: "Reads details about an account, with balances where required.
\nIt is assumed that a consent of the PSU to \nthis access is already given
and stored on the ASPSP system. \nThe addressed details of this account depends
then on the stored consent addressed by consentId, \nrespectively the OAuth2
access token.\n\n**NOTE:** The account-id can represent a multicurrency account.
\nIn this case the currency code is set to \"XXX\".\n\nGive detailed information
about the addressed account.\n\nGive detailed information about the addressed
account together with balance information\n"
summary: readAccountDetails
tags:
- Account Information Service (AIS)
operationId: V1AccountsByAccountIdGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: withBalance
in: query
required: false
type: boolean
description: "If contained, this function reads the list of accessible payment
accounts including the booking balance, \nif granted by the PSU in the related
consent and available by the ASPSP. \nThis parameter might be ignored by
the ASPSP."
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/accountDetails'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
/v1/d/accounts/{account-id}:
get:
description: "Reads details about an account, with balances where required.
\nIt is assumed that a consent of the PSU to \nthis access is already given
and stored on the ASPSP system. \nThe addressed details of this account depends
then on the stored consent addressed by consentId, \nrespectively the OAuth2
access token.\n\n**NOTE:** The account-id can represent a multicurrency account.
\nIn this case the currency code is set to \"XXX\".\n\nGive detailed information
about the addressed account.\n\nGive detailed information about the addressed
account together with balance information\n"
summary: readAccountDetails
tags:
- Account Information Service (AIS)
operationId: V1AccountsByAccountIddGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: withBalance
in: query
required: false
type: boolean
description: "If contained, this function reads the list of accessible payment
accounts including the booking balance, \nif granted by the PSU in the related
consent and available by the ASPSP. \nThis parameter might be ignored by
the ASPSP."
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-ID
in: header
required: false
type: string
description: Client ID of the PSU in the ASPSP client interface. Might be
mandated in the ASPSP's documentation.
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/accountDetails'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
security:
- api-key-1: []
/v1/accounts/{account-id}/balances:
get:
description: "Reads account data from a given account addressed by \"account-id\".
\n\n**Remark:** This account-id can be a tokenised identification due to data
protection reason since the path \ninformation might be logged on intermediary
servers within the ASPSP sphere. \nThis account-id then can be retrieved by
the \"GET Account List\" call.\n\nThe account-id is constant at least throughout
the lifecycle of a given consent.\n"
summary: getBalances
tags:
- Account Information Service (AIS)
operationId: V1AccountsBalancesByAccountIdGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/readAccountBalanceResponse-200'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
/v1/d/accounts/{account-id}/balances:
get:
description: "Reads account data from a given account addressed by \"account-id\".
\n\n**Remark:** This account-id can be a tokenised identification due to data
protection reason since the path \ninformation might be logged on intermediary
servers within the ASPSP sphere. \nThis account-id then can be retrieved by
the \"GET Account List\" call.\n\nThe account-id is constant at least throughout
the lifecycle of a given consent.\n"
summary: getBalances
tags:
- Account Information Service (AIS)
operationId: V1AccountsBalancesByAccountIddGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-ID
in: header
required: false
type: string
description: Client ID of the PSU in the ASPSP client interface. Might be
mandated in the ASPSP's documentation.
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/readAccountBalanceResponse-200'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
security:
- api-key-1: []
/v1/accounts/{account-id}/transactions:
get:
description: "Read transaction reports or transaction lists of a given account
ddressed by \"account-id\", depending on the steering parameter \n\"bookingStatus\"
together with balances.\n\nFor a given account, additional parameters are
e.g. the attributes \"dateFrom\" and \"dateTo\". \nThe ASPSP might add balance
information, if transaction lists without balances are not supported.\n"
summary: getTransactionList
tags:
- Account Information Service (AIS)
operationId: V1AccountsTransactionsByAccountIdGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: bookingStatus
in: query
required: true
enum:
- booked
- pending
- both
type: string
description: "Permitted codes are \n * \"booked\",\n * \"pending\" and \n
\ * \"both\"\n\"booked\" shall be supported by the ASPSP.\nTo support the
\"pending\" and \"both\" feature is optional for the ASPSP, \nError code
if not supported in the online banking frontend"
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: dateFrom
in: query
required: false
type: string
format: date
description: "Conditional: Starting date (inclusive the date dateFrom) of
the transaction list, mandated if no delta access is required.\n\nFor booked
transactions, the relevant date is the booking date. \n\nFor pending transactions,
the relevant date is the entry date, which may not be transparent \nneither
in this API nor other channels of the ASPSP."
- name: dateTo
in: query
required: false
type: string
format: date
description: "End date (inclusive the data dateTo) of the transaction list,
default is \"now\" if not given. \n\nMight be ignored if a delta function
is used.\n\nFor booked transactions, the relevant date is the booking date.
\n\nFor pending transactions, the relevant date is the entry date, which
may not be transparent \nneither in this API nor other channels of the ASPSP."
- name: entryReferenceFrom
in: query
required: false
type: string
description: "This data attribute is indicating that the AISP is in favour
to get all transactions after \nthe transaction with identification entryReferenceFrom
alternatively to the above defined period. \nThis is a implementation of
a delta access. \nIf this data element is contained, the entries \"dateFrom\"
and \"dateTo\" might be ignored by the ASPSP \nif a delta report is supported.\n\nOptional
if supported by API provider."
- name: deltaList
in: query
required: false
type: boolean
description: |-
This data attribute is indicating that the AISP is in favour to get all transactions after the last report access for this PSU on the addressed account. This is another implementation of a delta access-report.
This delta indicator might be rejected by the ASPSP if this function is not supported.
Optional if supported by API provider
- name: withBalance
in: query
required: false
type: boolean
description: "If contained, this function reads the list of accessible payment
accounts including the booking balance, \nif granted by the PSU in the related
consent and available by the ASPSP. \nThis parameter might be ignored by
the ASPSP."
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/transactionsResponse-200_json'
examples:
application/json:
description: Response in JSON format for an access on a regular account
value:
account:
iban: DE2310010010123456788
transactions:
booked:
- transactionId: "1234567"
creditorName: John Miles
creditorAccount:
iban: DE67100100101306118605
transactionAmount:
currency: EUR
amount: "256.67"
bookingDate: "2017-10-25"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 1
- transactionId: "1234568"
debtorName: Paul Simpson
debtorAccount:
iban: NL76RABO0359400371
transactionAmount:
currency: EUR
amount: "343.01"
bookingDate: "2017-10-25"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 2
pending:
- transactionId: "1234569"
creditorName: Claude Renault
creditorAccount:
iban: FR7612345987650123456789014
transactionAmount:
currency: EUR
amount: "-100.03"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 3
_links:
account:
href: /v1/accounts/3dc3d5b3-7023-4848-9853-f5400a64e80f
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
/v1/d/accounts/{account-id}/transactions:
get:
description: "Read transaction reports or transaction lists of a given account
ddressed by \"account-id\", depending on the steering parameter \n\"bookingStatus\"
together with balances.\n\nFor a given account, additional parameters are
e.g. the attributes \"dateFrom\" and \"dateTo\". \nThe ASPSP might add balance
information, if transaction lists without balances are not supported.\n"
summary: getTransactionList
tags:
- Account Information Service (AIS)
operationId: V1AccountsTransactionsByAccountIddGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: bookingStatus
in: query
required: true
enum:
- booked
- pending
- both
type: string
description: "Permitted codes are \n * \"booked\",\n * \"pending\" and \n
\ * \"both\"\n\"booked\" shall be supported by the ASPSP.\nTo support the
\"pending\" and \"both\" feature is optional for the ASPSP, \nError code
if not supported in the online banking frontend"
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: dateFrom
in: query
required: false
type: string
format: date
description: "Conditional: Starting date (inclusive the date dateFrom) of
the transaction list, mandated if no delta access is required.\n\nFor booked
transactions, the relevant date is the booking date. \n\nFor pending transactions,
the relevant date is the entry date, which may not be transparent \nneither
in this API nor other channels of the ASPSP."
- name: dateTo
in: query
required: false
type: string
format: date
description: "End date (inclusive the data dateTo) of the transaction list,
default is \"now\" if not given. \n\nMight be ignored if a delta function
is used.\n\nFor booked transactions, the relevant date is the booking date.
\n\nFor pending transactions, the relevant date is the entry date, which
may not be transparent \nneither in this API nor other channels of the ASPSP."
- name: entryReferenceFrom
in: query
required: false
type: string
description: "This data attribute is indicating that the AISP is in favour
to get all transactions after \nthe transaction with identification entryReferenceFrom
alternatively to the above defined period. \nThis is a implementation of
a delta access. \nIf this data element is contained, the entries \"dateFrom\"
and \"dateTo\" might be ignored by the ASPSP \nif a delta report is supported.\n\nOptional
if supported by API provider."
- name: deltaList
in: query
required: false
type: boolean
description: |-
This data attribute is indicating that the AISP is in favour to get all transactions after the last report access for this PSU on the addressed account. This is another implementation of a delta access-report.
This delta indicator might be rejected by the ASPSP if this function is not supported.
Optional if supported by API provider
- name: withBalance
in: query
required: false
type: boolean
description: "If contained, this function reads the list of accessible payment
accounts including the booking balance, \nif granted by the PSU in the related
consent and available by the ASPSP. \nThis parameter might be ignored by
the ASPSP."
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-ID
in: header
required: false
type: string
description: Client ID of the PSU in the ASPSP client interface. Might be
mandated in the ASPSP's documentation.
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/transactionsResponse-200_json'
examples:
application/json:
description: Response in JSON format for an access on a regular account
value:
account:
iban: DE2310010010123456788
transactions:
booked:
- transactionId: "1234567"
creditorName: John Miles
creditorAccount:
iban: DE67100100101306118605
transactionAmount:
currency: EUR
amount: "256.67"
bookingDate: "2017-10-25"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 1
- transactionId: "1234568"
debtorName: Paul Simpson
debtorAccount:
iban: NL76RABO0359400371
transactionAmount:
currency: EUR
amount: "343.01"
bookingDate: "2017-10-25"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 2
pending:
- transactionId: "1234569"
creditorName: Claude Renault
creditorAccount:
iban: FR7612345987650123456789014
transactionAmount:
currency: EUR
amount: "-100.03"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 3
_links:
account:
href: /v1/accounts/3dc3d5b3-7023-4848-9853-f5400a64e80f
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
security:
- api-key-1: []
/v1/accounts/{account-id}/transactions/{resourceId}:
get:
description: "Reads transaction details from a given transaction addressed by
\"resourceId\" on a given account addressed by \"account-id\". \nThis call
is only available on transactions as reported in a JSON format.\n\n**Remark:**
Please note that the PATH might be already given in detail by the corresponding
entry of the response of the \n\"Read Transaction List\" call within the _links
subfield.\n"
summary: getTransactionDetails
tags:
- Account Information Service (AIS)
operationId: V1AccountsTransactionsByAccountIdAndResourceIdGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: resourceId
in: path
required: true
type: string
description: This identification is given by the attribute resourceId of the
corresponding entry of a transaction list.
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/transactionDetails'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
/v1/d/accounts/{account-id}/transactions/{resourceId}:
get:
description: "Reads transaction details from a given transaction addressed by
\"resourceId\" on a given account addressed by \"account-id\". \nThis call
is only available on transactions as reported in a JSON format.\n\n**Remark:**
Please note that the PATH might be already given in detail by the corresponding
entry of the response of the \n\"Read Transaction List\" call within the _links
subfield.\n"
summary: getTransactionDetails
tags:
- Account Information Service (AIS)
operationId: V1AccountsTransactionsByAccountIdAndResourceIddGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: resourceId
in: path
required: true
type: string
description: This identification is given by the attribute resourceId of the
corresponding entry of a transaction list.
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-ID
in: header
required: false
type: string
description: Client ID of the PSU in the ASPSP client interface. Might be
mandated in the ASPSP's documentation.
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/transactionDetails'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
security:
- api-key-1: []
/v1/card-accounts:
get:
description: "Reads a list of card accounts with additional information, e.g.
balance information. \nIt is assumed that a consent of the PSU to this access
is already given and stored on the ASPSP system. \nThe addressed list of card
accounts depends then on the PSU ID and the stored consent addressed by consentId,
\nrespectively the OAuth2 access token. \n"
summary: getCardAccount
tags:
- Account Information Service (AIS)
operationId: V1CardAccountsGet
deprecated: false
produces:
- application/json
parameters:
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/cardAccountList'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
/v1/card-accounts/{account-id}:
get:
description: "Reads details about a card account. \nIt is assumed that a consent
of the PSU to this access is already given \nand stored on the ASPSP system.
The addressed details of this account depends \nthen on the stored consent
addressed by consentId, respectively the OAuth2 \naccess token.\n"
summary: ReadCardAccount
tags:
- Account Information Service (AIS)
operationId: V1CardAccountsByAccountIdGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/cardAccountDetails'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
/v1/card-accounts/{account-id}/balances:
get:
description: "Reads balance data from a given card account addressed by \n\"account-id\".
\n\nRemark: This account-id can be a tokenised identification due \nto data
protection reason since the path information might be \nlogged on intermediary
servers within the ASPSP sphere. \nThis account-id then can be retrieved by
the \n\"GET Card Account List\" call\n"
summary: getCardAccountBalances
tags:
- Account Information Service (AIS)
operationId: V1CardAccountsBalancesByAccountIdGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/readCardAccountBalanceResponse-200'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
/v1/card-accounts/{account-id}/transactions:
get:
description: |
Reads account data from a given card account addressed by "account-id".
summary: getCardAccountTransactionList
tags:
- Account Information Service (AIS)
operationId: V1CardAccountsTransactionsByAccountIdGet
deprecated: false
produces:
- application/json
parameters:
- name: account-id
in: path
required: true
type: string
description: "This identification is denoting the addressed account. \nThe
account-id is retrieved by using a \"Read Account List\" call. \nThe account-id
is the \"id\" attribute of the account structure. \nIts value is constant
at least throughout the lifecycle of a given consent."
- name: bookingStatus
in: query
required: true
enum:
- booked
- pending
- both
type: string
description: "Permitted codes are \n * \"booked\",\n * \"pending\" and \n
\ * \"both\"\n\"booked\" shall be supported by the ASPSP.\nTo support the
\"pending\" and \"both\" feature is optional for the ASPSP, \nError code
if not supported in the online banking frontend"
- name: X-Request-ID
in: header
required: true
type: string
format: uuid
description: ID of the request, unique to the call, as determined by the initiating
party.
- name: Consent-ID
in: header
required: true
type: string
description: This then contains the consentId of the related AIS consent,
which was performed prior to this payment initiation.
- name: dateFrom
in: query
required: false
type: string
format: date
description: "Conditional: Starting date (inclusive the date dateFrom) of
the transaction list, mandated if no delta access is required.\n\nFor booked
transactions, the relevant date is the booking date. \n\nFor pending transactions,
the relevant date is the entry date, which may not be transparent \nneither
in this API nor other channels of the ASPSP."
- name: dateTo
in: query
required: false
type: string
format: date
description: "End date (inclusive the data dateTo) of the transaction list,
default is \"now\" if not given. \n\nMight be ignored if a delta function
is used.\n\nFor booked transactions, the relevant date is the booking date.
\n\nFor pending transactions, the relevant date is the entry date, which
may not be transparent \nneither in this API nor other channels of the ASPSP."
- name: entryReferenceFrom
in: query
required: false
type: string
description: "This data attribute is indicating that the AISP is in favour
to get all transactions after \nthe transaction with identification entryReferenceFrom
alternatively to the above defined period. \nThis is a implementation of
a delta access. \nIf this data element is contained, the entries \"dateFrom\"
and \"dateTo\" might be ignored by the ASPSP \nif a delta report is supported.\n\nOptional
if supported by API provider."
- name: deltaList
in: query
required: false
type: boolean
description: |-
This data attribute is indicating that the AISP is in favour to get all transactions after the last report access for this PSU on the addressed account. This is another implementation of a delta access-report.
This delta indicator might be rejected by the ASPSP if this function is not supported.
Optional if supported by API provider
- name: withBalance
in: query
required: false
type: boolean
description: "If contained, this function reads the list of accessible payment
accounts including the booking balance, \nif granted by the PSU in the related
consent and available by the ASPSP. \nThis parameter might be ignored by
the ASPSP."
- name: Digest
in: header
required: false
type: string
description: Is contained if and only if the "Signature" element is contained
in the header of the request.
- name: Signature
in: header
required: false
type: string
description: A signature of the request by the TPP on application level. This
might be mandated by ASPSP.
- name: TPP-Signature-Certificate
in: header
required: false
type: string
description: "The certificate used for signing the request, in base64 encoding.
\nMust be contained if a signature is contained."
- name: PSU-IP-Address
in: header
required: false
type: string
description: "The forwarded IP Address header field consists of the corresponding
HTTP request \nIP Address field between PSU and TPP. \nIt shall be contained
if and only if this request was actively initiated by the PSU."
- name: PSU-IP-Port
in: header
required: false
type: string
description: The forwarded IP Port header field consists of the corresponding
HTTP request IP Port field between PSU and TPP, if available.
- name: PSU-Accept
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Charset
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Encoding
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-Accept-Language
in: header
required: false
type: string
description: The forwarded IP Accept header fields consist of the corresponding
HTTP request Accept header fields between PSU and TPP, if available.
- name: PSU-User-Agent
in: header
required: false
type: string
description: The forwarded Agent header field of the HTTP request between
PSU and TPP, if available.
- name: PSU-Http-Method
in: header
required: false
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
type: string
description: |-
HTTP method used at the PSU ? TPP interface, if available.
Valid values are:
* GET
* POST
* PUT
* PATCH
* DELETE
- name: PSU-Device-ID
in: header
required: false
type: string
format: uuid
description: |-
UUID (Universally Unique Identifier) for a device, which is used by the PSU, if available.
UUID identifies either a device or a device dependant application installation.
In case of an installation identification this ID need to be unaltered until removal from device.
- name: PSU-Geo-Location
in: header
required: false
type: string
pattern: GEO:-?[0-9]{1,2}\.[0-9]{6};-?[0-9]{1,3}\.[0-9]{6}
description: The forwarded Geo Location of the corresponding http request
between PSU and TPP if available.
responses:
200:
description: OK
schema:
$ref: '#/definitions/cardAccountsTransactionsResponse200'
headers:
X-Request-ID:
type: string
default: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721
400:
description: Bad Request
schema:
$ref: '#/definitions/Error400_NG_AIS'
401:
description: Unauthorized
schema:
$ref: '#/definitions/Error401_NG_AIS'
403:
description: Forbidden
schema:
$ref: '#/definitions/Error403_NG_AIS'
404:
description: Not found
schema:
$ref: '#/definitions/Error404_NG_AIS'
405:
description: Method Not Allowed
schema:
$ref: '#/definitions/Error405_NG_AIS'
406:
description: Not Acceptable
schema:
$ref: '#/definitions/Error406_NG_AIS'
408:
description: Request Timeout
409:
description: Conflict
schema:
$ref: '#/definitions/Error409_NG_AIS'
415:
description: Unsupported Media Type
429:
description: Too Many Requests
schema:
$ref: '#/definitions/Error429_NG_AIS'
503:
description: Service Unavailable
default:
description: Internal Server Error
definitions:
transactionStatus:
title: transactionStatus
description: "The transaction status is filled with codes of the ISO 20022 data
table:\n- 'ACCC': 'AcceptedSettlementCompleted' -\n Settlement on the creditor's
account has been completed.\n- 'ACCP': 'AcceptedCustomerProfile' - \n Preceding
check of technical validation was successful. \n Customer profile check was
also successful.\n- 'ACSC': 'AcceptedSettlementCompleted' - \n Settlement on
the debtor�s account has been completed.\n \n **Usage:** this can be used
by the first agent to report to the debtor that the transaction has been completed.
\n \n **Warning:** this status is provided for transaction status reasons,
not for financial information. \n It can only be used after bilateral agreement.\n-
'ACSP': 'AcceptedSettlementInProcess' - \n All preceding checks such as technical
validation and customer profile were successful and therefore the payment initiation
has been accepted for execution.\n- 'ACTC': 'AcceptedTechnicalValidation' -
\n Authentication and syntactical and semantical validation are successful.\n-
'ACWC': 'AcceptedWithChange' - \n Instruction is accepted but a change will
be made, such as date or remittance not sent.\n- 'ACWP': 'AcceptedWithoutPosting'
- \n Payment instruction included in the credit transfer is accepted without
being posted to the creditor customer�s account.\n- 'RCVD': 'Received' - \n
\ Payment initiation has been received by the receiving agent.\n- 'PDNG': 'Pending'
- \n Payment initiation or individual transaction included in the payment initiation
is pending. \n Further checks and status update will be performed.\n- 'RJCT':
'Rejected' - \n Payment initiation or individual transaction included in the
payment initiation has been rejected.\n- 'CANC': 'Cancelled'\n Payment initiation
has been cancelled before execution\n Remark: This codeis accepted as new code
by ISO20022.\n- 'ACFC': 'AcceptedFundsChecked' -\n Preceding check of technical
validation and customer profile was successful and an automatic funds check
was positive .\n Remark: This code is accepted as new code by ISO20022.\n-
'PATC': 'PartiallyAcceptedTechnical'\n Correct The payment initiation needs
multiple authentications, where some but not yet all have been performed. Syntactical
and semantical validations are successful.\n Remark: This code is accepted
as new code by ISO20022.\n- 'PART': 'PartiallyAccepted' -\n A number of transactions
have been accepted, whereas another number of transactions have not yet achieved
'accepted' status.\n Remark: This code may be used only in case of bulk payments.
It is only used in a situation where all mandated authorisations have been applied,
but some payments have been rejected."
example: ACCC
type: string
enum:
- ACCC
- ACCP
- ACSC
- ACSP
- ACTC
- ACWC
- ACWP
- RCVD
- PDNG
- RJCT
- CANC
- ACFC
- PATC
- PART
transactionStatus_SBS:
title: transactionStatus_SBS
description: "The transaction status is filled with codes of the ISO 20022 data
table.\nOnly the codes RCVD, PATC, ACTC, ACWC and RJCT are used:\n- 'ACSP':
'AcceptedSettlementInProcess' - \n All preceding checks such as technical validation
and customer profile were successful and therefore the payment initiation has
been accepted for execution.\n- 'ACTC': 'AcceptedTechnicalValidation' - \n Authentication
and syntactical and semantical validation are successful.\n- 'ACWC': 'AcceptedWithChange'
- \n Instruction is accepted but a change will be made, such as date or remittance
not sent.\n- 'RCVD': 'Received' - \n Payment initiation has been received by
the receiving agent.\n- 'RJCT': 'Rejected' - \n Payment initiation or individual
transaction included in the payment initiation has been rejected."
example: ACSC
type: string
enum:
- ACSC
- ACTC
- ACWC
- RCVD
- RJCT
scaStatus:
title: scaStatus
description: "This data element is containing information about the status of
the SCA method applied. \n\nThe following codes are defined for this data type.\n\n
\ * 'received':\n An authorisation or cancellation-authorisation resource
has been created successfully.\n * 'psuIdentified':\n The PSU related to
the authorisation or cancellation-authorisation resource has been identified.\n
\ * 'psuAuthenticated':\n The PSU related to the authorisation or cancellation-authorisation
resource has been identified and authenticated e.g. by a password or by an access
token.\n * 'scaMethodSelected':\n The PSU/TPP has selected the related SCA
routine. \n If the SCA method is chosen implicitly since only one SCA method
is available, \n then this is the first status to be reported instead of
'received'.\n * 'started':\n The addressed SCA routine has been started.\n
\ * 'finalised':\n The SCA routine has been finalised successfully.\n *
'failed':\n The SCA routine failed\n * 'exempted':\n SCA was exempted
for the related transaction, the related authorisation is successful."
example: received
type: string
enum:
- received
- psuIdentified
- psuAuthenticated
- scaMethodSelected
- started
- finalised
- failed
- exempted
consentStatus:
title: consentStatus
description: "This is the overall lifecycle status of the consent.\n\nValid values
are:\n - 'received': The consent data have been received and are technically
correct. \n The data is not authorised yet.\n - 'rejected': The consent
data have been rejected e.g. since no successful authorisation has taken place.\n
\ - 'valid': The consent is accepted and valid for GET account data calls and
others as specified in the consent object.\n - 'revokedByPsu': The consent
has been revoked by the PSU towards the ASPSP.\n - 'expired': The consent expired.\n
\ - 'terminatedByTpp': The corresponding TPP has terminated the consent by applying
the DELETE method to the consent resource.\n\nThe ASPSP might add further codes.
These codes then shall be contained in the ASPSP's documentation of the XS2A
interface \nand has to be added to this API definition as well."
example: received
type: string
enum:
- received
- rejected
- valid
- revokedByPsu
- expired
- terminatedByTpp
authenticationObject:
title: authenticationObject
description: Authentication Object
type: object
properties:
authenticationType:
$ref: '#/definitions/authenticationType'
authenticationVersion:
description: |-
Depending on the "authenticationType".
This version can be used by differentiating authentication tools used within performing OTP generation in the same authentication type.
This version can be referred to in the ASPSP?s documentation.
type: string
authenticationMethodId:
description: An identification provided by the ASPSP for the later identification
of the authentication method selection.
example: myAuthenticationID
type: string
maxLength: 35
name:
description: |-
This is the name of the authentication method defined by the PSU in the Online Banking frontend of the ASPSP.
Alternatively this could be a description provided by the ASPSP like "SMS OTP on phone +49160 xxxxx 28".
This name shall be used by the TPP when presenting a list of authentication methods to the PSU, if available.
example: SMS OTP on phone +49160 xxxxx 28
type: string
explanation:
description: Detailed information about the SCA method for the PSU.
example: Detailed information about the SCA method for the PSU.
type: string
required:
- authenticationType
- authenticationMethodId
authenticationType:
title: authenticationType
description: "Type of the authentication method.\n\nMore authentication types
might be added during implementation projects and documented in the ASPSP documentation.\n\n
\ - 'SMS_OTP': An SCA method, where an OTP linked to the transaction to be authorised
is sent to the PSU through a SMS channel.\n - 'CHIP_OTP': An SCA method, where
an OTP is generated by a chip card, e.g. an TOP derived from an EMV cryptogram.
\n To contact the card, the PSU normally needs a (handheld) device. \n With
this device, the PSU either reads the challenging data through a visual interface
like flickering or \n the PSU types in the challenge through the device key
pad. \n The device then derives an OTP from the challenge data and displays
the OTP to the PSU.\n - 'PHOTO_OTP': An SCA method, where the challenge is
a QR code or similar encoded visual data \n which can be read in by a consumer
device or specific mobile app. \n The device resp. the specific app than
derives an OTP from the visual challenge data and displays \n the OTP to
the PSU.\n - 'PUSH_OTP': An OTP is pushed to a dedicated authentication APP
and displayed to the PSU."
example: SMS_OTP
type: string
enum:
- SMS_OTP
- CHIP_OTP
- PHOTO_OTP
- PUSH_OTP
signingBasket:
title: signingBasket
description: |-
JSON Body of a establish signing basket request.
The body shall contain at least one entry.
example:
description: JSON Body of a signing basket request
value:
paymentIds:
- 123qwert456789
- 12345qwert7899
type: object
properties:
paymentIds:
description: A list of paymentIds
type: array
items:
type: string
minItems: 1
consentIds:
description: A list of consentIds
type: array
items:
type: string
minItems: 1
challengeData:
title: challengeData
description: |-
It is contained in addition to the data element 'chosenScaMethod' if challenge data is needed for SCA.
In rare cases this attribute is also used in the context of the 'startAuthorisationWithPsuAuthentication' link.
type: object
properties:
image:
description: |-
PNG data (max. 512 kilobyte) to be displayed to the PSU,
Base64 encoding, cp. [RFC4648].
This attribute is used only, when PHOTO_OTP or CHIP_OTP
is the selected SCA method.
type: string
data:
description: String challenge data
type: string
imageLink:
description: A link where the ASPSP will provides the challenge image for
the TPP.
type: string
otpMaxLength:
description: The maximal length for the OTP to be typed in by the PSU.
type: integer
format: int32
otpFormat:
$ref: '#/definitions/OtpFormat'
additionalInformation:
description: |-
Additional explanation for the PSU to explain
e.g. fallback mechanism for the chosen SCA method.
The TPP is obliged to show this to the PSU.
type: string
hrefType:
title: hrefType
description: Link to a resource
type: object
properties:
href:
description: Link to a resource
example: /v1/payments/sepa-credit-transfers/1234-wertiq-983
type: string
authorisations:
title: authorisations
description: An array of all authorisationIds
type: object
properties:
authorisationIds:
description: An array of all authorisationIds
type: array
items:
type: string
required:
- authorisationIds
accountReference:
title: accountReference
description: "Reference to an account by either\n * IBAN, of a payment accounts,
or\n * BBAN, for payment accounts if there is no IBAN, or \n * the Primary
Account Number (PAN) of a card, can be tokenised by the ASPSP due to PCI DSS
requirements, or\n * the Primary Account Number (PAN) of a card in a masked
form, or\n * an alias to access a payment account via a registered mobile phone
number (MSISDN)."
type: object
properties:
iban:
description: IBAN of an account
example: FR7612345987650123456789014
type: string
pattern: '[A-Z]{2,2}[0-9]{2,2}[a-zA-Z0-9]{1,30}'
bban:
description: "Basic Bank Account Number (BBAN) Identifier\n\nThis data element
can be used in the body of the Consent Request\n Message for retrieving
Account access Consent from this Account. This\n data elements is used
for payment Accounts which have no IBAN.\n ISO20022: Basic Bank Account
Number (BBAN). \n \n Identifier used nationally by financial institutions,
i.e., in individual countries, \n generally as part of a National Account
Numbering Scheme(s), \n which uniquely identifies the account of a customer."
example: BARC12345612345678
type: string
pattern: '[a-zA-Z0-9]{1,30}'
pan:
description: Primary Account Number according to ISO/IEC 7812.
example: "5409050000000000"
type: string
maxLength: 35
maskedPan:
description: Masked Primary Account Number
example: 123456xxxxxx1234
type: string
maxLength: 35
msisdn:
description: Mobile phone number.
example: +49 170 1234567
type: string
maxLength: 35
currency:
description: ISO 4217 Alpha 3 currency code
example: EUR
type: string
pattern: '[A-Z]{3}'
balanceType:
title: balanceType
description: "The following balance types are defined:\n - \"closingBooked\":
\n Balance of the account at the end of the pre-agreed account reporting
period. \n It is the sum of the opening booked balance at the beginning of
the period and all entries booked \n to the account during the pre-agreed
account reporting period.\n \n For card-accounts, this is composed of\n
\ \n - invoiced, but not yet paid entries\n \n - \"expected\":\n
\ Balance composed of booked entries and pending items known at the time of
calculation, \n which projects the end of day balance if everything is booked
on the account and no other entry is posted.\n \n For card accounts, this
is composed of \n - invoiced, but not yet paid entries, \n - not yet
invoiced but already booked entries and\n - pending items (not yet booked)\n
\ \n - \"authorised\":\n The expected balance together with the value
of a pre-approved credit line the ASPSP makes permanently available to the user.\n
\ \n For card-accounts:\n \n \"money to spend with the value of a
pre-approved credit limit on the card account\"\n \n - \"openingBooked\":\n
\ Book balance of the account at the beginning of the account reporting period.
\n It always equals the closing book balance from the previous report.\n
\ - \"interimAvailable\":\n Available balance calculated in the course of
the account ?servicer?s business day, \n at the time specified, and subject
to further changes during the business day. \n The interim balance is calculated
on the basis of booked credit and debit items during the calculation \n time/period
specified.\n \n For card-accounts, this is composed of\n - invoiced,
but not yet paid entries, \n - not yet invoiced but already booked entries\n
\ - \"forwardAvailable\":\n Forward available balance of money that is at
the disposal of the account owner on the date specified.\n - \"nonInvoiced\":
\n Only for card accounts, to be checked yet."
example: closingBooked
type: string
enum:
- closingBooked
- expected
- authorised
- openingBooked
- interimAvailable
- interimBooked
- forwardAvailable
- nonInvoiced
accountAccess:
title: accountAccess
description: Requested access services for a consent.
type: object
properties:
accounts:
description: "Is asking for detailed account information. \n\nIf the array
is empty, the TPP is asking for an accessible account list. \nThis may be
restricted in a PSU/ASPSP authorization dialogue.\nIf the array is empty,
also the arrays for balances or transactions shall be empty, if used."
type: array
items:
$ref: '#/definitions/accountReference'
balances:
description: "Is asking for balances of the addressed accounts.\n\nIf the
array is empty, the TPP is asking for the balances of all accessible account
lists. \nThis may be restricted in a PSU/ASPSP authorization dialogue.\nIf
the array is empty, also the arrays for accounts or transactions shall be
empty, if used."
type: array
items:
$ref: '#/definitions/accountReference'
transactions:
description: "Is asking for transactions of the addressed accounts. \n\nIf
the array is empty, the TPP is asking for the transactions of all accessible
account lists. \nThis may be restricted in a PSU/ASPSP authorization dialogue.\nIf
the array is empty, also the arrays for accounts or balances shall be empty,
if used."
type: array
items:
$ref: '#/definitions/accountReference'
availableAccounts:
$ref: '#/definitions/AvailableAccounts'
allPsd2:
$ref: '#/definitions/AllPsd2'
accountStatus:
title: accountStatus
description: |-
Account status. The value is one of the following:
- "enabled": account is available
- "deleted": account is terminated
- "blocked": account is blocked e.g. for legal reasons
If this field is not used, than the account is available in the sense of this specification.
example: enabled
type: string
enum:
- enabled
- deleted
- blocked
accountDetails:
title: accountDetails
description: |-
The ASPSP shall give at least one of the account reference identifiers:
- iban
- bban
- pan
- maskedPan
- msisdn
If the account is a multicurrency account currency code in "currency" is set to "XXX".
type: object
properties:
resourceId:
description: This shall be filled, if addressable resource are created by
the ASPSP on the /accounts or /card-accounts endpoint.
type: string
iban:
description: IBAN of an account
example: FR7612345987650123456789014
type: string
pattern: '[A-Z]{2,2}[0-9]{2,2}[a-zA-Z0-9]{1,30}'
bban:
description: "Basic Bank Account Number (BBAN) Identifier\n\nThis data element
can be used in the body of the Consent Request\n Message for retrieving
Account access Consent from this Account. This\n data elements is used
for payment Accounts which have no IBAN.\n ISO20022: Basic Bank Account
Number (BBAN). \n \n Identifier used nationally by financial institutions,
i.e., in individual countries, \n generally as part of a National Account
Numbering Scheme(s), \n which uniquely identifies the account of a customer."
example: BARC12345612345678
type: string
pattern: '[a-zA-Z0-9]{1,30}'
msisdn:
description: Mobile phone number.
example: +49 170 1234567
type: string
maxLength: 35
currency:
description: ISO 4217 Alpha 3 currency code
example: EUR
type: string
pattern: '[A-Z]{3}'
name:
description: Name of the account given by the bank or the PSU in online-banking.
type: string
maxLength: 35
product:
description: Product name of the bank for this account, proprietary definition.
type: string
maxLength: 35
cashAccountType:
description: ExternalCashAccountType1Code from ISO 20022.
type: string
status:
$ref: '#/definitions/accountStatus'
bic:
description: BICFI
example: AAAADEBBXXX
type: string
pattern: '[A-Z]{6,6}[A-Z2-9][A-NP-Z0-9]([A-Z0-9]{3,3}){0,1}'
linkedAccounts:
description: Case of a set of pending card transactions, the APSP will provide
the relevant cash account the card is set up on.
type: string
maxLength: 70
usage:
$ref: '#/definitions/Usage'
details:
description: |-
Specifications that might be provided by the ASPSP
- characteristics of the account
- characteristics of the relevant card
type: string
maxLength: 140
balances:
description: |-
A list of balances regarding this account, e.g. the current balance, the last booked balance.
The list migght be restricted to the current ballance.
type: array
items:
$ref: '#/definitions/balance'
_links:
$ref: '#/definitions/_linksAccountDetails'
required:
- currency
cardAccountDetails:
title: cardAccountDetails
description: Card account details
type: object
properties:
resourceId:
description: |-
This is the data element to be used in the path when retrieving data from a dedicated account.
This shall be filled, if addressable resource are created by the ASPSP on the /card-accounts endpoint.
type: string
maskedPan:
description: Masked Primary Account Number
example: 123456xxxxxx1234
type: string
maxLength: 35
currency:
description: ISO 4217 Alpha 3 currency code
example: EUR
type: string
pattern: '[A-Z]{3}'
name:
description: Name of the account given by the bank or the PSU in online-banking.
type: string
maxLength: 35
product:
description: Product name of the bank for this account, proprietary definition.
type: string
maxLength: 35
status:
$ref: '#/definitions/accountStatus'
usage:
$ref: '#/definitions/Usage'
details:
description: |-
Specifications that might be provided by the ASPSP
- characteristics of the account
- characteristics of the relevant card
type: string
maxLength: 140
creditLimit:
$ref: '#/definitions/amount'
balances:
description: |-
A list of balances regarding this account, e.g. the current balance, the last booked balance.
The list migght be restricted to the current ballance.
type: array
items:
$ref: '#/definitions/balance'
_links:
$ref: '#/definitions/_linksAccountDetails'
required:
- maskedPan
- currency
accountList:
title: accountList
description: List of accounts with details.
type: object
properties:
accounts:
type: array
items:
$ref: '#/definitions/accountDetails'
required:
- accounts
cardAccountList:
title: cardAccountList
description: List of card accounts with details.
type: object
properties:
cardAccounts:
type: array
items:
$ref: '#/definitions/cardAccountDetails'
required:
- cardAccounts
accountReport:
title: accountReport
description: |-
JSON based account report.
This account report contains transactions resulting from the query parameters.
'booked' shall be contained if bookingStatus parameter is set to "booked" or "both".
'pending' is not contained if the bookingStatus parameter is set to "booked".
type: object
properties:
booked:
description: Array of transaction details
type: array
items:
$ref: '#/definitions/transactionDetails'
pending:
description: Array of transaction details
type: array
items:
$ref: '#/definitions/transactionDetails'
_links:
$ref: '#/definitions/_linksAccountReport'
required:
- _links
cardAccountReport:
title: cardAccountReport
description: |-
JSON based card account report.
This card account report contains transactions resulting from the query parameters.
type: object
properties:
booked:
description: Array of transaction details
type: array
items:
$ref: '#/definitions/cardTransaction'
pending:
description: Array of transaction details
type: array
items:
$ref: '#/definitions/cardTransaction'
_links:
$ref: '#/definitions/_linksCardAccountReport'
required:
- booked
- _links
transactionDetails:
title: transactionDetails
description: Transaction details
type: object
properties:
transactionId:
description: "the Transaction Id can be used as access-ID in the API, where
more details on an transaction is offered. \nIf this data attribute is provided
this shows that the AIS can get access on more details about this \ntransaction
using the GET Transaction Details Request"
type: string
entryReference:
description: "Is the identification of the transaction as used e.g. for reference
for deltafunction on application level. \nThe same identification as for
example used within camt.05x messages."
type: string
maxLength: 35
endToEndId:
description: Unique end to end identity.
type: string
maxLength: 35
mandateId:
description: Identification of Mandates, e.g. a SEPA Mandate ID.
type: string
maxLength: 35
checkId:
description: Identification of a Cheque.
type: string
maxLength: 35
creditorId:
description: Identification of Creditors, e.g. a SEPA Creditor ID.
type: string
maxLength: 35
bookingDate:
description: The Date when an entry is posted to an account on the ASPSPs
books.
type: string
format: date
valueDate:
description: The Date at which assets become available to the account owner
in case of a credit.
type: string
format: date
transactionAmount:
$ref: '#/definitions/amount'
currencyExchange:
description: Array of exchange rates
type: array
items:
$ref: '#/definitions/reportExchangeRate'
creditorName:
description: Creditor Name
example: Creditor Name
type: string
maxLength: 70
creditorAccount:
$ref: '#/definitions/accountReference'
ultimateCreditor:
description: Ultimate Creditor
example: Ultimate Creditor
type: string
maxLength: 70
debtorName:
description: Debtor Name
example: Debtor Name
type: string
maxLength: 70
debtorAccount:
$ref: '#/definitions/accountReference'
ultimateDebtor:
description: Ultimate Debtor
example: Ultimate Debtor
type: string
maxLength: 70
remittanceInformationUnstructured:
description: Unstructured remittance information
example: Ref Number Merchant
type: string
maxLength: 140
remittanceInformationStructured:
description: |-
Reference as contained in the structured remittance reference structure (without the surrounding XML structure).
Different from other places the content is containt in plain form not in form of a structered field.
type: string
maxLength: 140
additionalInformation:
description: Might be used by the ASPSP to transport additional transaction
related information to the PSU.
type: string
maxLength: 512
purposeCode:
$ref: '#/definitions/purposeCode'
bankTransactionCode:
description: "Bank transaction code as used by the ASPSP and using the sub
elements of this structured code defined by ISO 20022. \n\nThis code type
is concatenating the three ISO20022 Codes \n * Domain Code, \n * Family
Code, and \n * SubFamiliy Code \nby hyphens, resulting in �DomainCode�-�FamilyCode�-�SubFamilyCode�."
example: PMNT-RCDT-ESCT
type: string
proprietaryBankTransactionCode:
description: "Proprietary bank transaction code as used within a community
or within an ASPSP e.g. \nfor MT94x based transaction reports."
type: string
maxLength: 35
_links:
$ref: '#/definitions/_linksTransactionDetails'
required:
- transactionAmount
cardTransaction:
title: cardTransaction
description: Card transaction information
type: object
properties:
cardTransactionId:
description: Unique end to end identity.
type: string
maxLength: 35
terminalId:
description: Identification of the Terminal, where the card has been used.
type: string
maxLength: 35
transactionDate:
description: Date of the actual card transaction
type: string
format: date
bookingDate:
description: The Date when an entry is posted to an account on the ASPSPs
books.
type: string
format: date
transactionAmount:
$ref: '#/definitions/amount'
currencyExchange:
description: Array of exchange rates
type: array
items:
$ref: '#/definitions/reportExchangeRate'
originalAmount:
$ref: '#/definitions/amount'
markupFee:
$ref: '#/definitions/amount'
markupFeePercentage:
example: "0.3"
type: string
cardAcceptorId:
type: string
maxLength: 35
cardAcceptorAddress:
$ref: '#/definitions/address'
merchantCategoryCode:
description: Merchant category code
type: string
minLength: 4
maxLength: 4
maskedPAN:
description: Masked Primary Account Number
example: 123456xxxxxx1234
type: string
maxLength: 35
transactionDetails:
type: string
maxLength: 140
invoiced:
type: boolean
proprietaryBankTransactionCode:
description: "Proprietary bank transaction code as used within a community
or within an ASPSP e.g. \nfor MT94x based transaction reports."
type: string
maxLength: 35
required:
- transactionAmount
reportExchangeRate:
title: reportExchangeRate
description: Exchange Rate
type: object
properties:
sourceCurrency:
description: ISO 4217 Alpha 3 currency code
example: EUR
type: string
pattern: '[A-Z]{3}'
exchangeRate:
type: string
unitCurrency:
type: string
targetCurrency:
description: ISO 4217 Alpha 3 currency code
example: EUR
type: string
pattern: '[A-Z]{3}'
quotationDate:
type: string
format: date
contractIdentification:
type: string
required:
- sourceCurrency
- exchangeRate
- unitCurrency
- targetCurrency
- quotationDate
paymentExchangeRate:
title: paymentExchangeRate
description: Exchange Rate
type: object
properties:
unitCurrency:
type: string
exchangeRate:
type: string
contractIdentification:
type: string
rateType:
$ref: '#/definitions/RateType'
balance:
title: balance
description: A single balance element
type: object
properties:
balanceAmount:
$ref: '#/definitions/amount'
balanceType:
$ref: '#/definitions/balanceType'
lastChangeDateTime:
description: "This data element might be used to indicate e.g. with the expected
or booked balance that no action is known \non the account, which is not
yet booked."
type: string
format: date-time
referenceDate:
description: Reference date of the balance
type: string
format: date
lastCommittedTransaction:
description: "\"entryReference\" of the last commited transaction to support
the TPP in identifying whether all \nPSU transactions are already known."
type: string
maxLength: 35
required:
- balanceAmount
- balanceType
address:
title: address
example:
street: rue blue
buildingnNumber: "89"
city: Paris
postalCode: "75000"
country: FR
type: object
properties:
street:
type: string
maxLength: 70
buildingNumber:
type: string
city:
type: string
postalCode:
type: string
country:
description: ISO 3166 ALPHA2 country code
example: SE
type: string
pattern: '[A-Z]{2}'
required:
- country
amount:
title: amount
example:
currency: EUR
amount: "123"
type: object
properties:
currency:
description: ISO 4217 Alpha 3 currency code
example: EUR
type: string
pattern: '[A-Z]{3}'
amount:
description: |-
The amount given with fractional digits, where fractions must be compliant to the currency definition.
Up to 14 significant figures. Negative amounts are signed by minus.
The decimal separator is a dot.
**Example:**
Valid representations for EUR with up to two decimals are:
* 1056
* 5768.2
* -1.50
* 5877.78
example: "5877.78"
type: string
pattern: -?[0-9]{1,14}(\.[0-9]{1,3})?
required:
- currency
- amount
chargeBearer:
title: chargeBearer
description: Charge Bearer. ChargeBearerType1Code from ISO20022
example: DEBT
type: string
enum:
- DEBT
- CRED
- SHAR
- SLEV
remittanceInformationStructured:
title: remittanceInformationStructured
description: Structured remittance information
type: object
properties:
reference:
type: string
maxLength: 35
referenceType:
type: string
maxLength: 35
referenceIssuer:
type: string
maxLength: 35
required:
- reference
purposeCode:
title: purposeCode
description: |-
ExternalPurpose1Code from ISO 20022.
Values from ISO 20022 External Code List ExternalCodeSets_1Q2018 June 2018.
example: BKDF
type: string
enum:
- BKDF
- BKFE
- BKFM
- BKIP
- BKPP
- CBLK
- CDCB
- CDCD
- CDCS
- CDDP
- CDOC
- CDQC
- ETUP
- FCOL
- MTUP
- ACCT
- CASH
- COLL
- CSDB
- DEPT
- INTC
- LIMA
- NETT
- BFWD
- CCIR
- CCPC
- CCPM
- CCSM
- CRDS
- CRPR
- CRSP
- CRTL
- EQPT
- EQUS
- EXPT
- EXTD
- FIXI
- FWBC
- FWCC
- FWSB
- FWSC
- MARG
- MBSB
- MBSC
- MGCC
- MGSC
- OCCC
- OPBC
- OPCC
- OPSB
- OPSC
- OPTN
- OTCD
- REPO
- RPBC
- RPCC
- RPSB
- RPSC
- RVPO
- SBSC
- SCIE
- SCIR
- SCRP
- SHBC
- SHCC
- SHSL
- SLEB
- SLOA
- SWBC
- SWCC
- SWPT
- SWSB
- SWSC
- TBAS
- TBBC
- TBCC
- TRCP
- AGRT
- AREN
- BEXP
- BOCE
- COMC
- CPYR
- GDDS
- GDSV
- GSCB
- LICF
- MP2B
- POPE
- ROYA
- SCVE
- SERV
- SUBS
- SUPP
- TRAD
- CHAR
- COMT
- MP2P
- ECPG
- ECPR
- ECPU
- EPAY
- CLPR
- COMP
- DBTC
- GOVI
- HLRP
- HLST
- INPC
- INPR
- INSC
- INSU
- INTE
- LBRI
- LIFI
- LOAN
- LOAR
- PENO
- PPTI
- RELG
- RINP
- TRFD
- FORW
- FXNT
- ADMG
- ADVA
- BCDM
- BCFG
- BLDM
- BNET
- CBFF
- CBFR
- CCRD
- CDBL
- CFEE
- CGDD
- CORT
- COST
- CPKC
- DCRD
- DSMT
- DVPM
- EDUC
- FACT
- FAND
- FCPM
- FEES
- GOVT
- ICCP
- IDCP
- IHRP
- INSM
- IVPT
- MCDM
- MCFG
- MSVC
- NOWS
- OCDM
- OCFG
- OFEE
- OTHR
- PADD
- PTSP
- RCKE
- RCPT
- REBT
- REFU
- RENT
- REOD
- RIMB
- RPNT
- RRBN
- RVPM
- SLPI
- SPLT
- STDY
- TBAN
- TBIL
- TCSC
- TELI
- TMPG
- TPRI
- TPRP
- TRNC
- TRVC
- WEBI
- ANNI
- CAFI
- CFDI
- CMDT
- DERI
- DIVD
- FREX
- HEDG
- INVS
- PRME
- SAVG
- SECU
- SEPI
- TREA
- UNIT
- FNET
- FUTR
- ANTS
- CVCF
- DMEQ
- DNTS
- HLTC
- HLTI
- HSPC
- ICRF
- LTCF
- MAFC
- MARF
- MDCS
- VIEW
- CDEP
- SWFP
- SWPP
- SWRS
- SWUF
- ADCS
- AEMP
- ALLW
- ALMY
- BBSC
- BECH
- BENE
- BONU
- CCHD
- COMM
- CSLP
- GFRP
- GVEA
- GVEB
- GVEC
- GVED
- GWLT
- HREC
- PAYR
- PEFC
- PENS
- PRCP
- RHBS
- SALA
- SSBE
- LBIN
- LCOL
- LFEE
- LMEQ
- LMFI
- LMRK
- LREB
- LREV
- LSFL
- ESTX
- FWLV
- GSTX
- HSTX
- INTX
- NITX
- PTXP
- RDTX
- TAXS
- VATX
- WHLD
- TAXR
- B112
- BR12
- TLRF
- TLRR
- AIRB
- BUSB
- FERB
- RLWY
- TRPT
- CBTV
- ELEC
- ENRG
- GASB
- NWCH
- NWCM
- OTLC
- PHON
- UBIL
- WTER
frequencyCode:
title: frequencyCode
description: |-
The following codes from the "EventFrequency7Code" of ISO 20022 are supported.
- "Daily"
- "Weekly"
- "EveryTwoWeeks"
- "Monthly"
- "EveryTwoMonths"
- "Quarterly"
- "SemiAnnual"
- "Annual"
example: Daily
type: string
enum:
- Daily
- Weekly
- EveryTwoWeeks
- Monthly
- EveryTwoMonths
- Quarterly
- SemiAnnual
- Annual
dayOfExecution:
title: dayOfExecution
description: |-
Day of execution as string.
This string consists of up two characters.
Leading zeroes are not allowed.
31 is ultimo of the month.
example: 1
type: integer
format: int32
enum:
- "1"
- "2"
- "3"
- "4"
- "5"
- "6"
- "7"
- "8"
- "9"
- "10"
- "11"
- "12"
- "13"
- "14"
- "15"
- "16"
- "17"
- "18"
- "19"
- "20"
- "21"
- "22"
- "23"
- "24"
- "25"
- "26"
- "27"
- "28"
- "29"
- "30"
- "31"
executionRule:
title: executionRule
description: "\"following\" or \"preceding\" supported as values. \nThis data
attribute defines the behaviour when recurring payment dates falls on a weekend
or bank holiday. \nThe payment is then executed either the \"preceding\" or
\"following\" working day.\nASPSP might reject the request due to the communicated
value, if rules in Online-Banking are not supporting \nthis execution rule."
example: following
type: string
enum:
- following
- preceding
psuData:
title: psuData
description: PSU Data for Update PSU Authentication.
type: object
properties:
password:
description: Password
type: string
required:
- password
paymentInitiation_json:
title: paymentInitiation_json
description: "Generic Body for a payment initation via JSON.\n\nThis generic JSON
body can be used to represent valid payment initiations for the following JSON
based payment product, \nwhich where defined in the Implementation Guidelines:\n\n
\ * sepa-credit-transfers\n * instant-sepa-credit-transfers\n * target-2-payments\n
\ * cross-border-credit-transfers\n\nFor the convenience of the implementer
additional which are already predefinded in the Implementation Guidelines \nare
included (but commented in source code), such that an ASPSP may add them easily.\n\nTake
care: Since the format is intended to fit for all payment products \nthere are
additional conditions which are NOT covered by this specification.\nPlease check
the Implementation Guidelines for detailes.\n\n\nThe following data element
are depending on the actual payment product available (in source code):\n \n
\n Data Element | SCT EU Core | SCT
INST EU Core | Target2 Paym. Core | Cross Border CT Core |
\n
endToEndIdentification | optional | optional | optional |
n.a. |
\n debtorAccount | mandatory | mandatory |
mandatory | mandatory |
\n debtorId | n.a. |
n.a. | n.a. | n.a. |
\n ultimateDebtor |
n.a. | n.a. | n.a. | n.a. |
\n instructedAmount |
mandatory | mandatory | mandatory | mandatory |
\n transactionCurrency | n.a. | n.a. | n.a. |
n.a. |
\n exchangeRateInformation | n.a. | n.a. | n.a. |
n.a. |
\n creditorAccount | mandatory | mandatory |
mandatory | mandatory |
\n creditorAgent | optional |
optional | optional | conditional |
\n creditorAgentName |
n.a. | n.a. | n.a. | n.a. |
\n creditorName |
mandatory | mandatory | mandatory | mandatory |
\n creditorId | n.a. | n.a. | n.a. | n.a. |
\n creditorAddress | optional optional | optional |
conditional |
\n creditorNameAndAddress | n.a. |
n.a. | n.a. | n.a. |
\n ultimateCreditor |
n.a. | n.a. | n.a. | n.a. |
\n purposeCode |
n.a. | n.a. | n.a. | n.a. |
\n chargeBearer |
n.a. | n.a. | optional | conditional |
\n
remittanceInformationUnstructured | optional | optional |
optional | optional |
\n remittanceInformationUnstructuredArray |
n.a. | n.a. | n.a. | n.a. |
\n remittanceInformationStructured |
n.a. | n.a. | n.a. | n.a. |
\n requestedExecutionDate |
n.a. | n.a. | n.a. | n.a. |
\n requestedExecutionTime |
n.a. | n.a. | n.a. | n.a. |
\n \n
\
\n \nIMPORTANT: In this API definition the following holds:\n *
\ All data elements mentioned above are defined, but some of them are commented,
\n i.e. they are only visible in the source code and can be used by uncommenting
them.\n * Data elements which are mandatory in the table above for all payment
products \n are set to be mandatory in this specification.\n * Data elements
which are indicated in the table above as n.a. for all payment products are
commented in the source code.\n * Data elements which are indicated to be option,
conditional or mandatory for at least one payment product \n in the table
above are set to be optional in the s specification except the case where all
are definde to be mandatory. \n * Data element which are inticated to be n.a.
can be used by the ASPS if needed. \n In this case uncomment tthe the relatetd
lines in the source code.\n * If one uses this data types for some payment
products he has to ensure that the used data type is \n valid according to
the underlying payment product, e.g. by some appropriate validations."
type: object
properties:
endToEndIdentification:
type: string
maxLength: 35
debtorAccount:
$ref: '#/definitions/accountReference'
instructedAmount:
$ref: '#/definitions/amount'
creditorAccount:
$ref: '#/definitions/accountReference'
creditorAgent:
description: BICFI
example: AAAADEBBXXX
type: string
pattern: '[A-Z]{6,6}[A-Z2-9][A-NP-Z0-9]([A-Z0-9]{3,3}){0,1}'
creditorAgentName:
description: Creditor Agent Name
example: Creditor Agent Name
type: string
maxLength: 70
creditorName:
description: Creditor Name
example: Creditor Name
type: string
maxLength: 70
creditorAddress:
$ref: '#/definitions/address'
remittanceInformationUnstructured:
description: Unstructured remittance information
example: Ref Number Merchant
type: string
maxLength: 140
required:
- debtorAccount
- instructedAmount
- creditorAccount
- creditorName
paymentInitiationBulkElement_json:
title: paymentInitiationBulkElement_json
description: "Generic body for a bulk payment initation entry.\n\nThe bulk entry
type is a type which follows the JSON formats for the supported products for
single payments\nexcluding the data elements (if supported):\n * debtorAccount\n
\ * requestedExecutionDate,\n * requestedExecutionTime.\nThese data elements
may not be contained in any bulk entry.\n\nThis data object can be used to represent
valid bulk payment initiations entry for the following JSON based payment product,
\nwhich where defined in the Implementation Guidelines:\n\n * sepa-credit-transfers\n
\ * instant-sepa-credit-transfers\n * target-2-payments\n * cross-border-credit-transfers\n\nFor
the convenience of the implementer additional which are already predefinded
in the Implementation Guidelines \nare included (but commented in source code),
such that an ASPSP may add them easily.\n\nTake care: Since the format is intended
to fit for all payment products \nthere are additional conditions which are
NOT covered by this specification.\nPlease check the Implementation Guidelines
for detailes.\n\n\nThe following data element are depending on the actual payment
product available (in source code):\n \n \n
Data Element | SCT EU Core | SCT INST EU Core | Target2
Paym. Core | Cross Border CT Core |
\n endToEndIdentification |
optional | optional | optional | n.a. |
\n debtorId |
n.a. | n.a. | n.a. | n.a. |
\n ultimateDebtor |
n.a. | n.a. | n.a. | n.a. |
\n instructedAmount |
mandatory | mandatory | mandatory | mandatory |
\n transactionCurrency | n.a. | n.a. | n.a. |
n.a. |
\n exchangeRateInformation | n.a. | n.a. | n.a. |
n.a. |
\n creditorAccount | mandatory | mandatory |
mandatory | mandatory |
\n creditorAgent | optional |
optional | optional | conditional |
\n creditorAgentName |
n.a. | n.a. | n.a. | n.a. |
\n creditorName |
mandatory | mandatory | mandatory | mandatory |
\n creditorId | n.a. | n.a. | n.a. | n.a. |
\n creditorAddress | optional optional | optional |
conditional |
\n creditorNameAndAddress | n.a. |
n.a. | n.a. | n.a. |
\n ultimateCreditor |
n.a. | n.a. | n.a. | n.a. |
\n purposeCode |
n.a. | n.a. | n.a. | n.a. |
\n chargeBearer |
n.a. | n.a. | optional | conditional |
\n
remittanceInformationUnstructured | optional | optional |
optional | optional |
\n remittanceInformationUnstructuredArray |
n.a. | n.a. | n.a. | n.a. |
\n remittanceInformationStructured |
n.a. | n.a. | n.a. | n.a. |
\n \n
\
\n \nIMPORTANT: In this API definition the following holds:\n *
\ All data elements mentioned above are defined, but some of them are commented,
\n i.e. they are only visible in the source code and can be used by uncommenting
them.\n * Data elements which are mandatory in the table above for all payment
products \n are set to be mandatory in this specification.\n * Data elements
which are indicated in the table above as n.a. for all payment products are
commented in the source code.\n * Data elements which are indicated to be option,
conditional or mandatory for at least one payment product \n in the table
above are set to be optional in the s specification except the case where all
are definde to be mandatory. \n * Data element which are inticated to be n.a.
can be used by the ASPS if needed. \n In this case uncomment tthe the relatetd
lines in the source code.\n * If one uses this data types for some payment
products he has to ensure that the used data type is \n valid according to
the underlying payment product, e.g. by some appropriate validations."
type: object
properties:
endToEndIdentification:
type: string
maxLength: 35
instructedAmount:
$ref: '#/definitions/amount'
creditorAccount:
$ref: '#/definitions/accountReference'
creditorAgent:
description: BICFI
example: AAAADEBBXXX
type: string
pattern: '[A-Z]{6,6}[A-Z2-9][A-NP-Z0-9]([A-Z0-9]{3,3}){0,1}'
creditorAgentName:
description: Creditor Agent Name
example: Creditor Agent Name
type: string
maxLength: 70
creditorName:
description: Creditor Name
example: Creditor Name
type: string
maxLength: 70
creditorAddress:
$ref: '#/definitions/address'
remittanceInformationUnstructured:
description: Unstructured remittance information
example: Ref Number Merchant
type: string
maxLength: 140
required:
- instructedAmount
- creditorAccount
- creditorName
periodicPaymentInitiation_json:
title: periodicPaymentInitiation_json
description: "Generic Body for a periodic payment initation via JSON.\n\nThis
generic JSON body can be used to represent valid periodic payment initiations
for the following JSON based payment product, \nwhich where defined in the Implementation
Guidelines:\n\n * sepa-credit-transfers\n * instant-sepa-credit-transfers\n
\ * target-2-payments\n * cross-border-credit-transfers\n\nFor the convenience
of the implementer additional which are already predefinded in the Implementation
Guidelines \nare included (but commented in source code), such that an ASPSP
may add them easily.\n\nTake care: Since the format is intended to fit for all
payment products \nthere are additional conditions which are NOT covered by
this specification.\nPlease check the Implementation Guidelines for detailes.\n\n\nThe
following data element are depending on the actual payment product available
(in source code):\n \n \n Data
Element | SCT EU Core | SCT INST EU Core | Target2 Paym. Core | Cross
Border CT Core |
\n endToEndIdentification | optional |
optional | optional | n.a. |
\n debtorAccount |
mandatory | mandatory | mandatory | mandatory |
\n debtorId | n.a. | n.a. | n.a. | n.a. |
\n ultimateDebtor | n.a. | n.a. | n.a. |
n.a. |
\n instructedAmount | mandatory | mandatory |
mandatory | mandatory |
\n transactionCurrency |
n.a. | n.a. | n.a. | n.a. |
\n exchangeRateInformation |
n.a. | n.a. | n.a. | n.a. |
\n creditorAccount |
mandatory | mandatory | mandatory | mandatory |
\n creditorAgent | optional | optional | optional |
conditional |
\n creditorAgentName | n.a. | n.a. |
n.a. | n.a. |
\n creditorName | mandatory |
mandatory | mandatory | mandatory |
\n creditorId |
n.a. | n.a. | n.a. | n.a. |
\n creditorAddress | optional
optional | optional | conditional |
\n creditorNameAndAddress |
n.a. | n.a. | n.a. | n.a. |
\n ultimateCreditor |
n.a. | n.a. | n.a. | n.a. |
\n purposeCode |
n.a. | n.a. | n.a. | n.a. |
\n chargeBearer |
n.a. | n.a. | optional | conditional |
\n
remittanceInformationUnstructured | optional | optional |
optional | optional |
\n remittanceInformationUnstructuredArray |
n.a. | n.a. | n.a. | n.a. |
\n remittanceInformationStructured |
n.a. | n.a. | n.a. | n.a. |
\n requestedExecutionDate |
n.a. | n.a. | n.a. | n.a. |
\n requestedExecutionTime |
n.a. | n.a. | n.a. | n.a. |
\n startDate |
mandatory | mandatory | mandatory | mandatory |
\n executionRule | optional | optional | optional |
optional |
\n endDate | optional | optional |
optional | optional |
\n frequency | mandatory |
mandatory | mandatory | mandatory |
\n dayOfExecution |
conditional | conditional | conditional | conditional |
\n \n
\n \nIMPORTANT: In this API definition the
following holds:\n * All data elements mentioned above are defined, but some
of them are commented, \n i.e. they are only visible in the source code and
can be used by uncommenting them.\n * Data elements which are mandatory in
the table above for all payment products \n are set to be mandatory in this
specification.\n * Data elements which are indicated in the table above as
n.a. for all payment products are commented in the source code.\n * Data elements
which are indicated to be option, conditional or mandatory for at least one
payment product \n in the table above are set to be optional in the s specification
except the case where all are definde to be mandatory. \n * Data element which
are inticated to be n.a. can be used by the ASPS if needed. \n In this case
uncomment tthe the relatetd lines in the source code.\n * If one uses this
data types for some payment products he has to ensure that the used data type
is \n valid according to the underlying payment product, e.g. by some appropriate
validations."
type: object
properties:
endToEndIdentification:
type: string
maxLength: 35
debtorAccount:
$ref: '#/definitions/accountReference'
instructedAmount:
$ref: '#/definitions/amount'
creditorAccount:
$ref: '#/definitions/accountReference'
creditorAgent:
description: BICFI
example: AAAADEBBXXX
type: string
pattern: '[A-Z]{6,6}[A-Z2-9][A-NP-Z0-9]([A-Z0-9]{3,3}){0,1}'
creditorName:
description: Creditor Name
example: Creditor Name
type: string
maxLength: 70
creditorAddress:
$ref: '#/definitions/address'
remittanceInformationUnstructured:
description: Unstructured remittance information
example: Ref Number Merchant
type: string
maxLength: 140
startDate:
description: The first applicable day of execution starting from this date
is the first payment.
type: string
format: date
endDate:
description: |-
The last applicable day of execution
If not given, it is an infinite standing order.
type: string
format: date
executionRule:
$ref: '#/definitions/executionRule'
frequency:
$ref: '#/definitions/frequencyCode'
dayOfExecution:
$ref: '#/definitions/dayOfExecution'
required:
- debtorAccount
- instructedAmount
- creditorAccount
- creditorName
- startDate
- frequency
bulkPaymentInitiation_json:
title: bulkPaymentInitiation_json
description: "Generic Body for a bulk payment initation via JSON.\n\npaymentInformationId
is contained in code but commented since it is n.a. \nand not all ASPSP are
able to support this field now.\nIn a later version the field will be mandatory."
type: object
properties:
batchBookingPreferred:
description: "If this element equals 'true', the PSU prefers only one booking
entry. \nIf this element equals 'false', the PSU prefers individual booking
of all contained individual transactions. \n\nThe ASPSP will follow this
preference according to contracts agreed on with the PSU."
example: false
type: boolean
debtorAccount:
$ref: '#/definitions/accountReference'
requestedExecutionDate:
type: string
format: date
requestedExecutionTime:
type: string
format: date-time
payments:
description: |-
A list of generic JSON bodies payment initations for bulk payments via JSON.
Note: Some fields from single payments do not occcur in a bulk payment element
type: array
items:
$ref: '#/definitions/paymentInitiationBulkElement_json'
required:
- debtorAccount
- payments
confirmationOfFunds:
title: confirmationOfFunds
description: "JSON Request body for the \"Confirmation of Funds Service\"\n\n
\n \n cardNumber | \n String | \n Optional | \n Card
Number of the card issued by the PIISP. Should be delivered if available. | \n
\n\n account | \n Account Reference | \n Mandatory | \n
\ PSU's account number. | \n
\n \n payee | \n Max70Text | \n
\ Optional | \n The merchant where the card is accepted as an information
to the PSU. | \n
\n\n instructedAmount | \n Amount | \n
\ Mandatory | \n Transaction amount to be checked within the funds
check mechanism. | \n
\n
"
type: object
properties:
cardNumber:
description: "Card Number of the card issued by the PIISP. \nShould be delivered
if available."
type: string
maxLength: 35
account:
$ref: '#/definitions/accountReference'
payee:
description: Name payee
type: string
maxLength: 70
instructedAmount:
$ref: '#/definitions/amount'
required:
- account
- instructedAmount
consents:
title: consents
description: Content of the body of a consent request.
type: object
properties:
access:
$ref: '#/definitions/accountAccess'
recurringIndicator:
description: |-
"true", if the consent is for recurring access to the account data.
"false", if the consent is for one access to the account data.
example: false
type: boolean
validUntil:
description: "This parameter is requesting a valid until date for the requested
consent. \nThe content is the local ASPSP date in ISO-Date Format, e.g.
2017-10-30. \n\nFuture dates might get adjusted by ASPSP. \n\nIf a maximal
available date is requested, a date in far future is to be used: \"9999-12-31\".
\n\nIn both cases the consent object to be retrieved by the GET Consent
Request will contain the adjusted date."
example: "2020-12-31"
type: string
format: date
frequencyPerDay:
description: |-
This field indicates the requested maximum frequency for an access without PSU involvement per day.
For a one-off access, this attribute is set to "1".
The frequency needs to be greater equal to one.
example: 4
type: integer
minimum: 1
format: int32
combinedServiceIndicator:
description: If "true" indicates that a payment initiation service will be
addressed in the same "session".
example: false
type: boolean
required:
- access
- recurringIndicator
- validUntil
- frequencyPerDay
- combinedServiceIndicator
updatePsuAuthentication:
title: updatePsuAuthentication
description: |-
Content of the body of a Update PSU Authentication Request
Password subfield is used.
type: object
properties:
psuData:
$ref: '#/definitions/psuData'
required:
- psuData
selectPsuAuthenticationMethod:
title: selectPsuAuthenticationMethod
description: Content of the body of a Select PSU Authentication Method Request
type: object
properties:
authenticationMethodId:
description: An identification provided by the ASPSP for the later identification
of the authentication method selection.
example: myAuthenticationID
type: string
maxLength: 35
required:
- authenticationMethodId
transactionAuthorisation:
title: transactionAuthorisation
description: Content of the body of a Transaction Authorisation Request
type: object
properties:
scaAuthenticationData:
description: "SCA authentication data, depending on the chosen authentication
method. \nIf the data is binary, then it is base64 encoded."
type: string
required:
- scaAuthenticationData
periodicPaymentInitiationMultipartBody:
title: periodicPaymentInitiationMultipartBody
description: "The multipart message definition for the initiation of a periodic
payment initiation \nwhere the information of the payment is contained in an
pain.001 message (Part 1) and \nthe additional informations related to the periodic
payment is an additional JSON message (Part 2)."
type: object
properties:
xml_sct:
type: object
json_standingorderType:
$ref: '#/definitions/periodicPaymentInitiation_xml-Part2-standingorderType_json'
periodicPaymentInitiation_xml-Part2-standingorderType_json:
title: periodicPaymentInitiation_xml-Part2-standingorderType_json
description: "The body part 2 of a periodic payment initation request containes
the execution related informations \nof the periodic payment."
type: object
properties:
startDate:
description: The first applicable day of execution starting from this date
is the first payment.
type: string
format: date
endDate:
description: |-
The last applicable day of execution
If not given, it is an infinite standing order.
type: string
format: date
executionRule:
$ref: '#/definitions/executionRule'
frequency:
$ref: '#/definitions/frequencyCode'
dayOfExecution:
$ref: '#/definitions/dayOfExecution'
required:
- startDate
- frequency
paymentInitiationStatusResponse-200_json:
title: paymentInitiationStatusResponse-200_json
description: Body of the response for a successful payment initiation status request
in case of an JSON based endpoint.
type: object
properties:
transactionStatus:
$ref: '#/definitions/transactionStatus'
required:
- transactionStatus
paymentInitationRequestResponse-201:
title: paymentInitationRequestResponse-201
description: Body of the response for a successful payment initiation request.
type: object
properties:
transactionStatus:
$ref: '#/definitions/transactionStatus'
paymentId:
description: Resource identification of the generated payment initiation resource.
example: 1234-wertiq-983
type: string
transactionFees:
$ref: '#/definitions/amount'
transactionFeeIndicator:
description: |-
If equals 'true', the transaction will involve specific transaction cost as shown by the ASPSP in
their public price list or as agreed between ASPSP and PSU.
If equals 'false', the transaction will not involve additional specific transaction costs to the PSU.
type: boolean
scaMethods:
description: |-
This data element might be contained, if SCA is required and if the PSU has a choice between different
authentication methods.
Depending on the risk management of the ASPSP this choice might be offered before or after the PSU
has been identified with the first relevant factor, or if an access token is transported.
If this data element is contained, then there is also an hyperlink of type 'startAuthorisationWithAuthenticationMethodSelection'
contained in the response body.
These methods shall be presented towards the PSU for selection by the TPP.
type: array
items:
$ref: '#/definitions/authenticationObject'
chosenScaMethod:
$ref: '#/definitions/authenticationObject'
challengeData:
$ref: '#/definitions/challengeData'
_links:
$ref: '#/definitions/_linksPaymentInitiation'
psuMessage:
description: Text to be displayed to the PSU
type: string
maxLength: 512
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage2XX'
required:
- transactionStatus
- paymentId
- _links
paymentInitationRequestMultiLevelScaResponse-201:
title: paymentInitationRequestMultiLevelScaResponse-201
description: Body of the response for a successful payment initiation request.
type: object
properties:
transactionStatus:
$ref: '#/definitions/transactionStatus'
paymentId:
description: Resource identification of the generated payment initiation resource.
example: 1234-wertiq-983
type: string
transactionFees:
$ref: '#/definitions/amount'
transactionFeeIndicator:
description: |-
If equals 'true', the transaction will involve specific transaction cost as shown by the ASPSP in
their public price list or as agreed between ASPSP and PSU.
If equals 'false', the transaction will not involve additional specific transaction costs to the PSU.
type: boolean
_links:
$ref: '#/definitions/_linksPaymentInitiationMultiLevelSca'
psuMessage:
description: Text to be displayed to the PSU
type: string
maxLength: 512
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage2XX'
required:
- transactionStatus
- paymentId
- _links
paymentInitiationCancelResponse-202:
title: paymentInitiationCancelResponse-202
description: Body of the response for a successful cancel payment request.
type: object
properties:
transactionStatus:
$ref: '#/definitions/transactionStatus'
scaMethods:
description: |-
This data element might be contained, if SCA is required and if the PSU has a choice between different
authentication methods.
Depending on the risk management of the ASPSP this choice might be offered before or after the PSU
has been identified with the first relevant factor, or if an access token is transported.
If this data element is contained, then there is also an hyperlink of type 'startAuthorisationWithAuthenticationMethodSelection'
contained in the response body.
These methods shall be presented towards the PSU for selection by the TPP.
type: array
items:
$ref: '#/definitions/authenticationObject'
chosenScaMethod:
$ref: '#/definitions/authenticationObject'
challengeData:
$ref: '#/definitions/challengeData'
_links:
$ref: '#/definitions/_linksPaymentInitiationCancel'
required:
- transactionStatus
paymentInitiationWithStatusResponse:
title: paymentInitiationWithStatusResponse
description: Generic JSON response body consistion of the corresponding payment
initation JSON body together with an optional transaction status field.
type: object
properties:
endToEndIdentification:
type: string
maxLength: 35
debtorAccount:
$ref: '#/definitions/accountReference'
instructedAmount:
$ref: '#/definitions/amount'
creditorAccount:
$ref: '#/definitions/accountReference'
creditorAgent:
description: BICFI
example: AAAADEBBXXX
type: string
pattern: '[A-Z]{6,6}[A-Z2-9][A-NP-Z0-9]([A-Z0-9]{3,3}){0,1}'
creditorName:
description: Creditor Name
example: Creditor Name
type: string
maxLength: 70
creditorAddress:
$ref: '#/definitions/address'
remittanceInformationUnstructured:
description: Unstructured remittance information
example: Ref Number Merchant
type: string
maxLength: 140
transactionStatus:
$ref: '#/definitions/transactionStatus'
required:
- debtorAccount
- instructedAmount
- creditorAccount
- creditorName
periodicPaymentInitiationWithStatusResponse:
title: periodicPaymentInitiationWithStatusResponse
description: Generic JSON response body consistion of the corresponding periodic
payment initation JSON body together with an optional transaction status field.
type: object
properties:
endToEndIdentification:
type: string
maxLength: 35
debtorAccount:
$ref: '#/definitions/accountReference'
instructedAmount:
$ref: '#/definitions/amount'
creditorAccount:
$ref: '#/definitions/accountReference'
creditorAgent:
description: BICFI
example: AAAADEBBXXX
type: string
pattern: '[A-Z]{6,6}[A-Z2-9][A-NP-Z0-9]([A-Z0-9]{3,3}){0,1}'
creditorName:
description: Creditor Name
example: Creditor Name
type: string
maxLength: 70
creditorAddress:
$ref: '#/definitions/address'
remittanceInformationUnstructured:
description: Unstructured remittance information
example: Ref Number Merchant
type: string
maxLength: 140
startDate:
description: The first applicable day of execution starting from this date
is the first payment.
type: string
format: date
endDate:
description: |-
The last applicable day of execution
If not given, it is an infinite standing order.
type: string
format: date
executionRule:
$ref: '#/definitions/executionRule'
frequency:
$ref: '#/definitions/frequencyCode'
dayOfExecution:
$ref: '#/definitions/dayOfExecution'
transactionStatus:
$ref: '#/definitions/transactionStatus'
required:
- debtorAccount
- instructedAmount
- creditorAccount
- creditorName
- startDate
- frequency
bulkPaymentInitiationWithStatusResponse:
title: bulkPaymentInitiationWithStatusResponse
description: Generic JSON response body consistion of the corresponding bulk payment
initation JSON body together with an optional transaction status field.
type: object
properties:
batchBookingPreferred:
description: "If this element equals 'true', the PSU prefers only one booking
entry. \nIf this element equals 'false', the PSU prefers individual booking
of all contained individual transactions. \n\nThe ASPSP will follow this
preference according to contracts agreed on with the PSU."
example: false
type: boolean
requestedExecutionDate:
type: string
format: date
debtorAccount:
$ref: '#/definitions/accountReference'
payments:
description: |-
A list of generic JSON bodies payment initations for bulk payments via JSON.
Note: Some fields from single payments do not occcur in a bulk payment element
type: array
items:
$ref: '#/definitions/paymentInitiationBulkElement_json'
transactionStatus:
$ref: '#/definitions/transactionStatus'
required:
- debtorAccount
- payments
scaStatusResponse:
title: scaStatusResponse
description: Body of the JSON response with SCA Status
example:
description: Response of an Update PSU Identification for a payment initiation
request for the decoupled approach.
value:
scatransactionStatus: psuIdentified
psuMessage: Please use your BankApp for transaction Authorisation.
_links:
scaStatus:
href: /v1/payments/qwer3456tzui7890/authorisations/123auth456
type: object
properties:
scaStatus:
$ref: '#/definitions/scaStatus'
startScaprocessResponse:
title: startScaprocessResponse
description: Body of the JSON response for a Start SCA authorisation request.
type: object
properties:
scaStatus:
$ref: '#/definitions/scaStatus'
scaMethods:
description: |-
This data element might be contained, if SCA is required and if the PSU has a choice between different
authentication methods.
Depending on the risk management of the ASPSP this choice might be offered before or after the PSU
has been identified with the first relevant factor, or if an access token is transported.
If this data element is contained, then there is also an hyperlink of type 'startAuthorisationWithAuthenticationMethodSelection'
contained in the response body.
These methods shall be presented towards the PSU for selection by the TPP.
type: array
items:
$ref: '#/definitions/authenticationObject'
chosenScaMethod:
$ref: '#/definitions/authenticationObject'
challengeData:
$ref: '#/definitions/challengeData'
_links:
$ref: '#/definitions/_linksStartScaProcess'
psuMessage:
description: Text to be displayed to the PSU
type: string
maxLength: 512
required:
- scaStatus
- _links
updatePsuIdenticationResponse:
title: updatePsuIdenticationResponse
description: Body of the JSON response for a successful update PSU Identification
request.
type: object
properties:
_links:
$ref: '#/definitions/_linksUpdatePsuIdentification'
scaStatus:
$ref: '#/definitions/scaStatus'
psuMessage:
description: Text to be displayed to the PSU
type: string
maxLength: 512
required:
- _links
- scaStatus
updatePsuAuthenticationResponse:
title: updatePsuAuthenticationResponse
description: Body of the JSON response for a successful update PSU Authentication
request.
type: object
properties:
chosenScaMethod:
$ref: '#/definitions/authenticationObject'
challengeData:
$ref: '#/definitions/challengeData'
scaMethods:
description: |-
This data element might be contained, if SCA is required and if the PSU has a choice between different
authentication methods.
Depending on the risk management of the ASPSP this choice might be offered before or after the PSU
has been identified with the first relevant factor, or if an access token is transported.
If this data element is contained, then there is also an hyperlink of type 'startAuthorisationWithAuthenticationMethodSelection'
contained in the response body.
These methods shall be presented towards the PSU for selection by the TPP.
type: array
items:
$ref: '#/definitions/authenticationObject'
_links:
$ref: '#/definitions/_linksUpdatePsuAuthentication'
scaStatus:
$ref: '#/definitions/scaStatus'
psuMessage:
description: Text to be displayed to the PSU
type: string
maxLength: 512
required:
- scaStatus
selectPsuAuthenticationMethodResponse:
title: selectPsuAuthenticationMethodResponse
description: Body of the JSON response for a successful select PSU Authentication
Method request.
type: object
properties:
chosenScaMethod:
$ref: '#/definitions/authenticationObject'
challengeData:
$ref: '#/definitions/challengeData'
_links:
$ref: '#/definitions/_linksSelectPsuAuthenticationMethod'
scaStatus:
$ref: '#/definitions/scaStatus'
psuMessage:
description: Text to be displayed to the PSU
type: string
maxLength: 512
required:
- scaStatus
signingBasketResponse-200:
title: signingBasketResponse-200
description: |-
Body of the JSON response for a successful get signing basket request.
* 'payments': payment initiations which shall be authorised through this signing basket.
* 'consents': consent objects which shall be authorised through this signing basket.
* 'transactionStatus': Only the codes RCVD, ACTC, RJCT are used.
* '_links': The ASPSP might integrate hyperlinks to indicate next (authorisation) steps to be taken.
type: object
properties:
payments:
description: A list of paymentIds
type: array
items:
type: string
minItems: 1
consents:
description: A list of consentIds
type: array
items:
type: string
minItems: 1
transactionStatus:
$ref: '#/definitions/transactionStatus_SBS'
_links:
$ref: '#/definitions/_linksSigningBasket'
required:
- transactionStatus
signingBasketStatusResponse-200:
title: signingBasketStatusResponse-200
type: object
properties:
transactionStatus:
$ref: '#/definitions/transactionStatus_SBS'
required:
- transactionStatus
signingBasketResponse-201:
title: signingBasketResponse-201
description: Body of the JSON response for a successful create signing basket
request.
type: object
properties:
transactionStatus:
$ref: '#/definitions/transactionStatus_SBS'
basketId:
description: Resource identification of the generated signing basket resource.
example: 1234-basket-567
type: string
scaMethods:
description: |-
This data element might be contained, if SCA is required and if the PSU has a choice between different
authentication methods.
Depending on the risk management of the ASPSP this choice might be offered before or after the PSU
has been identified with the first relevant factor, or if an access token is transported.
If this data element is contained, then there is also an hyperlink of type 'startAuthorisationWithAuthenticationMethodSelection'
contained in the response body.
These methods shall be presented towards the PSU for selection by the TPP.
type: array
items:
$ref: '#/definitions/authenticationObject'
chosenScaMethod:
$ref: '#/definitions/authenticationObject'
challengeData:
$ref: '#/definitions/challengeData'
_links:
$ref: '#/definitions/_linksSigningBasket'
psuMessage:
description: Text to be displayed to the PSU
type: string
maxLength: 512
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage2XX'
required:
- transactionStatus
- basketId
- _links
consentsResponse-201:
title: consentsResponse-201
description: Body of the JSON response for a successful conset request.
type: object
properties:
consentStatus:
$ref: '#/definitions/consentStatus'
consentId:
description: ID of the corresponding consent object as returned by an Account
Information Consent Request.
type: string
scaMethods:
description: |-
This data element might be contained, if SCA is required and if the PSU has a choice between different
authentication methods.
Depending on the risk management of the ASPSP this choice might be offered before or after the PSU
has been identified with the first relevant factor, or if an access token is transported.
If this data element is contained, then there is also an hyperlink of type 'startAuthorisationWithAuthenticationMethodSelection'
contained in the response body.
These methods shall be presented towards the PSU for selection by the TPP.
type: array
items:
$ref: '#/definitions/authenticationObject'
chosenScaMethod:
$ref: '#/definitions/authenticationObject'
challengeData:
$ref: '#/definitions/challengeData'
_links:
$ref: '#/definitions/_linksConsents'
message:
description: Text to be displayed to the PSU, e.g. in a Decoupled SCA Approach.
type: string
maxLength: 512
required:
- consentStatus
- consentId
- _links
consentStatusResponse-200:
title: consentStatusResponse-200
description: Body of the JSON response for a successful get status request for
a consent.
type: object
properties:
consentStatus:
$ref: '#/definitions/consentStatus'
required:
- consentStatus
consentInformationResponse-200_json:
title: consentInformationResponse-200_json
description: Body of the JSON response for a successfull get consent request.
type: object
properties:
access:
$ref: '#/definitions/accountAccess'
recurringIndicator:
description: |-
"true", if the consent is for recurring access to the account data.
"false", if the consent is for one access to the account data.
example: false
type: boolean
validUntil:
description: "This parameter is requesting a valid until date for the requested
consent. \nThe content is the local ASPSP date in ISO-Date Format, e.g.
2017-10-30. \n\nFuture dates might get adjusted by ASPSP. \n\nIf a maximal
available date is requested, a date in far future is to be used: \"9999-12-31\".
\n\nIn both cases the consent object to be retrieved by the GET Consent
Request will contain the adjusted date."
example: "2020-12-31"
type: string
format: date
frequencyPerDay:
description: |-
This field indicates the requested maximum frequency for an access without PSU involvement per day.
For a one-off access, this attribute is set to "1".
The frequency needs to be greater equal to one.
example: 4
type: integer
minimum: 1
format: int32
lastActionDate:
description: "This date is containing the date of the last action on the consent
object either through \nthe XS2A interface or the PSU/ASPSP interface having
an impact on the status."
example: "2018-07-01"
type: string
format: date
consentStatus:
$ref: '#/definitions/consentStatus'
required:
- access
- recurringIndicator
- validUntil
- frequencyPerDay
- lastActionDate
- consentStatus
readAccountBalanceResponse-200:
title: readAccountBalanceResponse-200
description: Body of the response for a successful read balance for an account
request.
type: object
properties:
account:
$ref: '#/definitions/accountReference'
balances:
description: |-
A list of balances regarding this account, e.g. the current balance, the last booked balance.
The list migght be restricted to the current ballance.
type: array
items:
$ref: '#/definitions/balance'
required:
- balances
readCardAccountBalanceResponse-200:
title: readCardAccountBalanceResponse-200
description: Body of the response for a successful read balance for a card account
request.
type: object
properties:
cardAccount:
$ref: '#/definitions/accountReference'
balances:
description: |-
A list of balances regarding this account, e.g. the current balance, the last booked balance.
The list migght be restricted to the current ballance.
type: array
items:
$ref: '#/definitions/balance'
required:
- balances
transactionsResponse-200_json:
title: transactionsResponse-200_json
description: |-
Body of the JSON response for a successful read transaction list request.
This account report contains transactions resulting from the query parameters.
example:
description: Response in JSON format for an access on a regular account
value:
account:
iban: DE2310010010123456788
transactions:
booked:
- transactionId: "1234567"
creditorName: John Miles
creditorAccount:
iban: DE67100100101306118605
transactionAmount:
currency: EUR
amount: "256.67"
bookingDate: "2017-10-25"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 1
- transactionId: "1234568"
debtorName: Paul Simpson
debtorAccount:
iban: NL76RABO0359400371
transactionAmount:
currency: EUR
amount: "343.01"
bookingDate: "2017-10-25"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 2
pending:
- transactionId: "1234569"
creditorName: Claude Renault
creditorAccount:
iban: FR7612345987650123456789014
transactionAmount:
currency: EUR
amount: "-100.03"
valueDate: "2017-10-26"
remittanceInformationUnstructured: Example 3
_links:
account:
href: /v1/accounts/3dc3d5b3-7023-4848-9853-f5400a64e80f
type: object
properties:
account:
$ref: '#/definitions/accountReference'
transactions:
$ref: '#/definitions/accountReport'
balances:
description: |-
A list of balances regarding this account, e.g. the current balance, the last booked balance.
The list migght be restricted to the current ballance.
type: array
items:
$ref: '#/definitions/balance'
_links:
$ref: '#/definitions/_linksDownload'
cardAccountsTransactionsResponse200:
title: cardAccountsTransactionsResponse200
description: |-
Body of the JSON response for a successful read card account transaction list request.
This card account report contains transactions resulting from the query parameters.
type: object
properties:
cardAccount:
$ref: '#/definitions/accountReference'
cardTransactions:
$ref: '#/definitions/cardAccountReport'
balances:
description: |-
A list of balances regarding this account, e.g. the current balance, the last booked balance.
The list migght be restricted to the current ballance.
type: array
items:
$ref: '#/definitions/balance'
_links:
$ref: '#/definitions/_linksDownload'
_linksAll:
title: _linksAll
description: A _link object with all availabel link types
type: object
properties:
scaRedirect:
$ref: '#/definitions/hrefType'
scaOAuth:
$ref: '#/definitions/hrefType'
startAuthorisation:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuIdentification:
$ref: '#/definitions/hrefType'
updatePsuIdentification:
$ref: '#/definitions/hrefType'
startAuthorisationWithProprietaryData:
$ref: '#/definitions/hrefType'
updateProprietaryData:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuAuthentication:
$ref: '#/definitions/hrefType'
updatePsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithEncryptedPsuAuthentication:
$ref: '#/definitions/hrefType'
updateEncryptedPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithAuthenticationMethodSelection:
$ref: '#/definitions/hrefType'
selectAuthenticationMethod:
$ref: '#/definitions/hrefType'
startAuthorisationWithTransactionAuthorisation:
$ref: '#/definitions/hrefType'
authoriseTransaction:
$ref: '#/definitions/hrefType'
self:
$ref: '#/definitions/hrefType'
status:
$ref: '#/definitions/hrefType'
scaStatus:
$ref: '#/definitions/hrefType'
account:
$ref: '#/definitions/hrefType'
balances:
$ref: '#/definitions/hrefType'
transactions:
$ref: '#/definitions/hrefType'
transactionDetails:
$ref: '#/definitions/hrefType'
cardAccount:
$ref: '#/definitions/hrefType'
cardTransactions:
$ref: '#/definitions/hrefType'
first:
$ref: '#/definitions/hrefType'
next:
$ref: '#/definitions/hrefType'
previous:
$ref: '#/definitions/hrefType'
last:
$ref: '#/definitions/hrefType'
download:
$ref: '#/definitions/hrefType'
_linksPaymentInitiation:
title: _linksPaymentInitiation
description: "A list of hyperlinks to be recognised by the TPP.\nThe actual hyperlinks
used in the response depend on the dynamical decisions of the ASPSP when\nprocessing
the request.\n\n**Remark:** All links can be relative or full links, to be decided
by the ASPSP.\n\nType of links admitted in this response, (further links might
be added for ASPSP defined extensions):\n\n* 'scaRedirect': \n In case of an
SCA Redirect Approach, the ASPSP is transmitting the link to which to redirect
the PSU browser.\n* 'scaOAuth': \n In case of a SCA OAuth2 Approach, the ASPSP
is transmitting the URI where the configuration of the Authorisation\n Server
can be retrieved. The configuration follows the OAuth 2.0 Authorisation Server
Metadata specification.\n* 'startAuthorisation': \n In case, where an explicit
start of the transaction authorisation is needed, but no more data needs to
be updated \n (no authentication method to be selected, no PSU identification
nor PSU authentication data to be uploaded).\n* 'startAuthorisationWithPsuIdentification':
\n The link to the authorisation end-point, where the authorisation sub-resource
has to be generated while \n uploading the PSU identification data.\n* 'startAuthorisationWithPsuAuthentication':
\n The link to the authorisation end-point, where the authorisation sub-resource
has to be generated while \n uploading the PSU authentication data.\n * 'startAuthorisationWithEncryptedPsuAuthentication':\n
\ Same as startAuthorisactionWithPsuAuthentication where the authentication
data need to be encrypted on \n application layer in uploading.\n* 'startAuthorisationWithAuthenticationMethodSelection':
\n The link to the authorisation end-point, where the authorisation sub-resource
has to be generated while \n selecting the authentication method. \n This
link is contained under exactly the same conditions as the data element \"scaMethods\"\n*
'startAuthorisationWithTransactionAuthorisation':\n The link to the authorisation
end-point, where the authorisation sub-resource has to be generated while \n
\ authorising the transaction e.g. by uploading an OTP received by SMS.\n* 'self':
\n The link to the payment initiation resource created by this request.\n This
link can be used to retrieve the resource data.\n* 'status': \n The link to
retrieve the transaction status of the payment initiation.\n* 'scaStatus': \n
\ The link to retrieve the scaStatus of the corresponding authorisation sub-resource.
\n This link is only contained, if an authorisation sub-resource has been already
created."
example:
scaRedirect:
href: https://www.testbank.com/asdfasdfasdf
self:
href: /v1/payments/sepa-credit-transfers/1234-wertiq-983
type: object
properties:
scaRedirect:
$ref: '#/definitions/hrefType'
scaOAuth:
$ref: '#/definitions/hrefType'
startAuthorisation:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuIdentification:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithEncryptedPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithAuthenticationMethodSelection:
$ref: '#/definitions/hrefType'
startAuthorisationWithTransactionAuthorisation:
$ref: '#/definitions/hrefType'
self:
$ref: '#/definitions/hrefType'
status:
$ref: '#/definitions/hrefType'
scaStatus:
$ref: '#/definitions/hrefType'
_linksPaymentInitiationMultiLevelSca:
title: _linksPaymentInitiationMultiLevelSca
description: "Type of links admitted in this response, (further links might be
added for ASPSP defined extensions):\n\n * 'startAuthorisation': \n In case,
where an explicit start of the transaction authorisation is needed, but no more
data needs to be updated (no authentication method to be selected, no PSU identification
nor PSU authentication data to be uploaded).\n * 'startAuthorisationWithPsuIdentification':
\n The link to the authorisation end-point, where the authorisation sub-resource
has to be generated while uploading the PSU identification data.\n * 'startAuthorisationWithPsuAuthentication':\n
\ The link to the authorisation end-point, where an authorisation sub-resource
has to be generated while uploading the PSU authentication data.\n * 'startAuthorisationWithEncryptedPsuAuthentication':\n
\ Same as startAuthorisactionWithPsuAuthentication where the authentication
data need to be encrypted on \n application layer in uploading.\n * 'self':
\n The link to the payment initiation resource created by this request. This
link can be used to retrieve the resource data. \n * 'status': \n The link
to retrieve the transaction status of the payment initiation."
type: object
properties:
startAuthorisation:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuIdentification:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuAuthentication:
$ref: '#/definitions/hrefType'
self:
$ref: '#/definitions/hrefType'
status:
$ref: '#/definitions/hrefType'
_linksPaymentInitiationCancel:
title: _linksPaymentInitiationCancel
description: "A list of hyperlinks to be recognised by the TPP. The actual hyperlinks
used in the response depend on the \ndynamical decisions of the ASPSP when processing
the request.\n\nRemark: All links can be relative or full links, to be decided
by the ASPSP.\n\nType of links admitted in this response, (further links might
be added for ASPSP defined extensions):\n\n * 'startAuthorisation': \n In
case, where just the authorisation process of the cancellation needs to be started,
\n but no additional data needs to be updated for time being (no authentication
method to be selected, \n no PSU identification nor PSU authentication data
to be uploaded).\n * 'startAuthorisationWithPsuIdentification': \n In case
where a PSU Identification needs to be updated when starting the cancellation
authorisation: \n The link to the cancellation-authorisations end-point,
where the cancellation sub-resource has to be \n generated while uploading
the PSU identification data.\n * 'startAuthorisationWithPsuAuthentication':
\n In case of a yet to be created authorisation sub-resource: The link to
the cancalation authorisation end-point, \n where the authorisation sub-resource
has to be generated while uploading the PSU authentication data.\n * 'startAuthorisationWithEncryptedPsuAuthentication':\n
\ Same as startAuthorisactionWithPsuAuthentication where the authentication
data need to be encrypted on \n application layer in uploading.\n * 'startAuthorisationWithAuthenticationMethodSelection':\n
\ The link to the authorisation end-point, where the cancellation-authorisation
sub-resource has to be \n generated while selecting the authentication method.
This link is contained under exactly the same \n conditions as the data element
'scaMethods'"
type: object
properties:
startAuthorisation:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuIdentification:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithEncryptedPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithAuthenticationMethodSelection:
$ref: '#/definitions/hrefType'
_linksUpdatePsuIdentification:
title: _linksUpdatePsuIdentification
description: "A list of hyperlinks to be recognised by the TPP. The actual hyperlinks
used in the response depend on the dynamical decisions of the ASPSP when processing
the request.\n\n**Remark:** All links can be relative or full links, to be decided
by the ASPSP.\n\nType of links admitted in this response, (further links might
be added for ASPSP \ndefined extensions):\n\n- 'scaStatus': The link to retrieve
the scaStatus of the corresponding authorisation sub-resource."
type: object
properties:
scaStatus:
$ref: '#/definitions/hrefType'
_linksUpdatePsuAuthentication:
title: _linksUpdatePsuAuthentication
description: "A list of hyperlinks to be recognised by the TPP. Might be contained,
if several authentication methods \nare available for the PSU.\nType of links
admitted in this response:\n * 'selectAuthenticationMethod': \n This is
a link to a resource, where the TPP can select the applicable second factor
authentication \n methods for the PSU, if there were several available authentication
methods. \n This link is only contained, if the PSU is already identified
or authenticated with the first relevant \n factor or alternatively an access
token, if SCA is required and if the PSU has a choice between different \n authentication
methods. \n If this link is contained, then there is also the data element
'scaMethods' contained in the response body.\n * 'authoriseTransaction': \n
\ The link to the resource, where the \"Transaction Authorisation Request\"
is sent to. \n This is the link to the resource which will authorise the
transaction by checking the SCA authentication \n data within the Embedded
SCA approach.\n * 'scaStatus': \n The link to retrieve the scaStatus of
the corresponding authorisation sub-resource."
type: object
properties:
selectAuthenticationMethod:
$ref: '#/definitions/hrefType'
authoriseTransaction:
$ref: '#/definitions/hrefType'
scaStatus:
$ref: '#/definitions/hrefType'
_linksSelectPsuAuthenticationMethod:
title: _linksSelectPsuAuthenticationMethod
description: "A list of hyperlinks to be recognised by the TPP. The actual hyperlinks
used in \nthe response depend on the dynamical decisions of the ASPSP when processing
the request.\n\n**Remark:** All links can be relative or full links, to be decided
by the ASPSP. \n\n**Remark:** This method can be applied before or after PSU
identification. \nThis leads to many possible hyperlink responses.\nType of
links admitted in this response, (further links might be added for ASPSP defined
\nextensions):\n\n- \"scaRedirect\": \n In case of an SCA Redirect Approach,
the ASPSP is transmitting the link to which to \n redirect the PSU browser.\n-
\"scaOAuth\": \n In case of a SCA OAuth2 Approach, the ASPSP is transmitting
the URI where the \n configuration of the Authorisation Server can be retrieved.
\n The configuration follows the OAuth 2.0 Authorisation Server Metadata specification.\n-
\"updatePsuIdentification\": \n The link to the authorisation or cancellation
authorisation sub-resource, \n where PSU identification data needs to be uploaded.\n-
\"updatePsuAuthentication\":\n The link to the authorisation or cancellation
authorisation sub-resource, \n where PSU authentication data needs to be uploaded.\n\"authoriseTransaction\":\n
\ The link to the authorisation or cancellation authorisation sub-resource,
\n where the authorisation data has to be uploaded, e.g. the TOP received by
SMS. \n\"scaStatus\": \n The link to retrieve the scaStatus of the corresponding
authorisation sub-resource."
type: object
properties:
scaRedirect:
$ref: '#/definitions/hrefType'
scaOAuth:
$ref: '#/definitions/hrefType'
updatePsuIdentification:
$ref: '#/definitions/hrefType'
updatePsuAuthentication:
$ref: '#/definitions/hrefType'
authoriseTransaction:
$ref: '#/definitions/hrefType'
scaStatus:
$ref: '#/definitions/hrefType'
_linksStartScaProcess:
title: _linksStartScaProcess
description: "A list of hyperlinks to be recognised by the TPP. The actual hyperlinks
used in the \nresponse depend on the dynamical decisions of the ASPSP when processing
the request.\n\n**Remark:** All links can be relative or full links, to be decided
by the ASPSP.\n\nType of links admitted in this response, (further links might
be added for ASPSP defined \nextensions):\n\n- 'scaRedirect': \n In case of
an SCA Redirect Approach, the ASPSP is transmitting the link to which to \n
\ redirect the PSU browser.\n- 'scaOAuth': \n In case of a SCA OAuth2 Approach,
the ASPSP is transmitting the URI where the configuration of the Authorisation
Server can be retrieved. The configuration follows the OAuth 2.0 Authorisation
Server Metadata specification.\n- 'updatePsuIdentification': \n The link to
the authorisation or cancellation authorisation sub-resource, \n where PSU
identification data needs to be uploaded.\n- 'startAuthorisationWithPsuAuthentication':\n
\ The link to the authorisation or cancellation authorisation sub-resource,
\n where PSU authentication data needs to be uploaded.\n * 'startAuthorisationWithEncryptedPsuAuthentication':\n
\ Same as startAuthorisactionWithPsuAuthentication where the authentication
data need to be encrypted on \n application layer in uploading.\n- 'selectAuthenticationMethod':\n
\ The link to the authorisation or cancellation authorisation sub-resource,
\n where the selected authentication method needs to be uploaded. \n This
link is contained under exactly the same conditions as the data element 'scaMethods'.\n-
'authoriseTransaction':\n The link to the authorisation or cancellation authorisation
sub-resource, \n where the authorisation data has to be uploaded, e.g. the
TOP received by SMS. \n- 'scaStatus': \n The link to retrieve the scaStatus
of the corresponding authorisation sub-resource."
type: object
properties:
scaRedirect:
$ref: '#/definitions/hrefType'
scaOAuth:
$ref: '#/definitions/hrefType'
updatePsuIdentification:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithEncryptedPsuAuthentication:
$ref: '#/definitions/hrefType'
selectAuthenticationMethod:
$ref: '#/definitions/hrefType'
authoriseTransaction:
$ref: '#/definitions/hrefType'
scaStatus:
$ref: '#/definitions/hrefType'
_linksDownload:
title: _linksDownload
description: "A list of hyperlinks to be recognised by the TPP.\n\nType of links
admitted in this response:\n - \"download\": a link to a resource, where the
transaction report might be downloaded from in \n case where transaction reports
have a huge size.\n\nRemark: This feature shall only be used where camt-data
is requested which has a huge size."
type: object
properties:
download:
$ref: '#/definitions/hrefType'
required:
- download
_linksConsents:
title: _linksConsents
description: "A list of hyperlinks to be recognised by the TPP.\n\nType of links
admitted in this response (which might be extended by single ASPSPs as indicated
in its XS2A \ndocumentation):\n - 'scaRedirect': \n In case of an SCA Redirect
Approach, the ASPSP is transmitting the link to which to redirect the \n PSU
browser.\n - 'scaOAuth': \n In case of an OAuth2 based Redirect Approach,
the ASPSP is transmitting the link where the configuration \n of the OAuth2
Server is defined. \n The configuration follows the OAuth 2.0 Authorisation
Server Metadata specification. \n - 'startAuthorisation': \n In case, where
an explicit start of the transaction authorisation is needed, \n but no more
data needs to be updated (no authentication method to be selected, \n no
PSU identification nor PSU authentication data to be uploaded).\n - 'startAuthorisationWithPsuIdentification':
\n The link to the authorisation end-point, where the authorisation sub-resource
has to be generated \n while uploading the PSU identification data.\n -
'startAuthorisationWithPsuAuthentication':\n The link to the authorisation
end-point, where the authorisation sub-resource has to be generated \n while
uploading the PSU authentication data.\n * 'startAuthorisationWithEncryptedPsuAuthentication':\n
\ Same as startAuthorisactionWithPsuAuthentication where the authentication
data need to be encrypted on \n application layer in uploading.\n - 'startAuthorisationWithAuthenticationMethodSelection':\n
\ The link to the authorisation end-point, where the authorisation sub-resource
has to be generated \n while selecting the authentication method. This link
is contained under exactly the same conditions \n as the data element 'scaMethods'
\n - 'startAuthorisationWithTransactionAuthorisation':\n The link to the
authorisation end-point, where the authorisation sub-resource has to be generated
\n while authorising the transaction e.g. by uploading an OTP received by
SMS.\n - 'self': \n The link to the Establish Account Information Consent
resource created by this request. \n This link can be used to retrieve the
resource data. \n - 'status': \n The link to retrieve the status of the
account information consent.\n - 'scaStatus': The link to retrieve the scaStatus
of the corresponding authorisation sub-resource. \n This link is only contained,
if an authorisation sub-resource has been already created."
type: object
properties:
scaRedirect:
$ref: '#/definitions/hrefType'
scaOAuth:
$ref: '#/definitions/hrefType'
startAuthorisation:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuIdentification:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithEncryptedPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithAuthenticationMethodSelection:
$ref: '#/definitions/hrefType'
startAuthorisationWithTransactionAuthorisation:
$ref: '#/definitions/hrefType'
self:
$ref: '#/definitions/hrefType'
status:
$ref: '#/definitions/hrefType'
scaStatus:
$ref: '#/definitions/hrefType'
_linksSigningBasket:
title: _linksSigningBasket
description: "A list of hyperlinks to be recognised by the TPP. The actual hyperlinks
used in the \nresponse depend on the dynamical decisions of the ASPSP when processing
the request.\n\nRemark: All links can be relative or full links, to be decided
by the ASPSP.\nType of links admitted in this response, (further links might
be added for ASPSP defined \nextensions):\n\n * 'scaRedirect': \n In case
of an SCA Redirect Approach, the ASPSP is transmitting the link to \n which
to redirect the PSU browser.\n * 'scaOAuth': \n In case of a SCA OAuth2
Approach, the ASPSP is transmitting the URI where the configuration of \n the
Authorisation Server can be retrieved. The configuration follows the \n OAuth
2.0 Authorisation Server Metadata specification.\n * 'startAuthorisation':
\n In case, where an explicit start of the transaction authorisation is needed,
\n but no more data needs to be updated (no authentication method to be selected,
\n no PSU identification nor PSU authentication data to be uploaded).\n *
'startAuthorisationWithPsuIdentification': \n The link to the authorisation
end-point, where the authorisation sub-resource \n has to be generated while
uploading the PSU identification data.\n * 'startAuthorisationWithPsuAuthentication':\n
\ The link to the authorisation end-point, where the authorisation sub-resource
\n has to be generated while uploading the PSU authentication data.\n *
'startAuthorisationWithEncryptedPsuAuthentication':\n The link to the authorisation
end-point, where the authorisation sub-resource has \n to be generated while
uploading the encrypted PSU authentication data.\n * 'startAuthorisationWithAuthenticationMethodSelection':\n
\ The link to the authorisation end-point, where the authorisation sub-resource
\n has to be generated while selecting the authentication method. \n This
link is contained under exactly the same conditions as the data element 'scaMethods'
\n * 'startAuthorisationWithTransactionAuthorisation':\n The link to the
authorisation end-point, where the authorisation sub-resource \n has to be
generated while authorising the transaction e.g. by uploading an \n OTP received
by SMS.\n * 'self': \n The link to the payment initiation resource created
by this request. \n This link can be used to retrieve the resource data.
\n * 'status': \n The link to retrieve the transaction status of the payment
initiation.\n * 'scaStatus': \n The link to retrieve the scaStatus of the
corresponding authorisation sub-resource. \n This link is only contained,
if an authorisation sub-resource has been already created."
type: object
properties:
scaRedirect:
$ref: '#/definitions/hrefType'
scaOAuth:
$ref: '#/definitions/hrefType'
startAuthorisation:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuIdentification:
$ref: '#/definitions/hrefType'
startAuthorisationWithPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithEncryptedPsuAuthentication:
$ref: '#/definitions/hrefType'
startAuthorisationWithAuthenticationMethodSelection:
$ref: '#/definitions/hrefType'
startAuthorisationWithTransactionAuthorisation:
$ref: '#/definitions/hrefType'
self:
$ref: '#/definitions/hrefType'
status:
$ref: '#/definitions/hrefType'
scaStatus:
$ref: '#/definitions/hrefType'
_linksAccountReport:
title: _linksAccountReport
type: object
properties:
account:
$ref: '#/definitions/hrefType'
first:
$ref: '#/definitions/hrefType'
next:
$ref: '#/definitions/hrefType'
previous:
$ref: '#/definitions/hrefType'
last:
$ref: '#/definitions/hrefType'
required:
- account
_linksCardAccountReport:
title: _linksCardAccountReport
type: object
properties:
cardAccount:
$ref: '#/definitions/hrefType'
first:
$ref: '#/definitions/hrefType'
next:
$ref: '#/definitions/hrefType'
previous:
$ref: '#/definitions/hrefType'
last:
$ref: '#/definitions/hrefType'
required:
- cardAccount
_linksTransactionDetails:
title: _linksTransactionDetails
type: object
properties:
transactionDetails:
$ref: '#/definitions/hrefType'
required:
- transactionDetails
_linksAccountDetails:
title: _linksAccountDetails
description: |-
Links to the account, which can be directly used for retrieving account information from this dedicated account.
Links to "balances" and/or "transactions"
These links are only supported, when the corresponding consent has been already granted.
type: object
properties:
balances:
$ref: '#/definitions/hrefType'
transactions:
$ref: '#/definitions/hrefType'
tppMessageCategory:
title: tppMessageCategory
description: Category of the TPP message category
example: ERROR
type: string
enum:
- ERROR
- WARNING
MessageCode2XX:
title: MessageCode2XX
description: Message codes for HTTP Error codes 2XX.
example: WARNING
type: string
enum:
- WARNING
MessageCode400_AIS:
title: MessageCode400_AIS
description: Message codes defined for AIS for HTTP Error code 400 (BAD_REQUEST).
example: FORMAT_ERROR
type: string
enum:
- FORMAT_ERROR
- PARAMETER_NOT_CONSISTENT
- PARAMETER_NOT_SUPPORTED
- SERVICE_INVALID
- RESOURCE_UNKNOWN
- RESOURCE_EXPIRED
- RESOURCE_BLOCKED
- TIMESTAMP_INVALID
- PERIOD_INVALID
- SCA_METHOD_UNKNOWN
- CONSENT_UNKNOWN
- SESSIONS_NOT_SUPPORTED
MessageCode400_PIS:
title: MessageCode400_PIS
description: Message codes defined for PIS for HTTP Error code 400 (BAD_REQUEST).
example: FORMAT_ERROR
type: string
enum:
- FORMAT_ERROR
- PARAMETER_NOT_CONSISTENT
- PARAMETER_NOT_SUPPORTED
- SERVICE_INVALID
- RESOURCE_UNKNOWN
- RESOURCE_EXPIRED
- RESOURCE_BLOCKED
- TIMESTAMP_INVALID
- PERIOD_INVALID
- SCA_METHOD_UNKNOWN
- CONSENT_UNKNOWN
- PAYMENT_FAILED
- EXECUTION_DATE_INVALID
MessageCode400_PIIS:
title: MessageCode400_PIIS
description: Message codes defined for PIIS for HTTP Error code 400 (BAD_REQUEST).
example: FORMAT_ERROR
type: string
enum:
- FORMAT_ERROR
- PARAMETER_NOT_CONSISTENT
- PARAMETER_NOT_SUPPORTED
- SERVICE_INVALID
- RESOURCE_UNKNOWN
- RESOURCE_EXPIRED
- RESOURCE_BLOCKED
- TIMESTAMP_INVALID
- PERIOD_INVALID
- SCA_METHOD_UNKNOWN
- CONSENT_UNKNOWN
- CARD_INVALID
- NO_PIIS_ACTIVATION
MessageCode400_SBS:
title: MessageCode400_SBS
description: Message codes defined for signing baskets for HTTP Error code 400
(BAD_REQUEST).
example: FORMAT_ERROR
type: string
enum:
- FORMAT_ERROR
- PARAMETER_NOT_CONSISTENT
- PARAMETER_NOT_SUPPORTED
- SERVICE_INVALID
- RESOURCE_UNKNOWN
- RESOURCE_EXPIRED
- RESOURCE_BLOCKED
- TIMESTAMP_INVALID
- PERIOD_INVALID
- SCA_METHOD_UNKNOWN
- CONSENT_UNKNOWN
- REFERENCE_MIX_INVALID
MessageCode401_PIS:
title: MessageCode401_PIS
description: Message codes defined for PIS for HTTP Error code 401 (UNAUTHORIZED).
example: CERTIFICATE_INVALID
type: string
enum:
- CERTIFICATE_INVALID
- CERTIFICATE_EXPIRED
- CERTIFICATE_BLOCKED
- CERTIFICATE_REVOKE
- CERTIFICATE_MISSING
- SIGNATURE_INVALID
- SIGNATURE_MISSING
- CORPORATE_ID_INVALID
- PSU_CREDENTIALS_INVALID
- CONSENT_INVALID
- CONSENT_EXPIRED
- TOKEN_UNKNOWN
- TOKEN_INVALID
- TOKEN_EXPIRED
- REQUIRED_KID_MISSING
MessageCode401_AIS:
title: MessageCode401_AIS
description: Message codes defined for AIS for HTTP Error code 401 (UNAUTHORIZED).
example: CERTIFICATE_INVALID
type: string
enum:
- CERTIFICATE_INVALID
- CERTIFICATE_EXPIRED
- CERTIFICATE_BLOCKED
- CERTIFICATE_REVOKE
- CERTIFICATE_MISSING
- SIGNATURE_INVALID
- SIGNATURE_MISSING
- CORPORATE_ID_INVALID
- PSU_CREDENTIALS_INVALID
- CONSENT_INVALID
- CONSENT_EXPIRED
- TOKEN_UNKNOWN
- TOKEN_INVALID
- TOKEN_EXPIRED
MessageCode401_PIIS:
title: MessageCode401_PIIS
description: Message codes defined for PIIS for HTTP Error code 401 (UNAUTHORIZED).
example: CERTIFICATE_INVALID
type: string
enum:
- CERTIFICATE_INVALID
- CERTIFICATE_EXPIRED
- CERTIFICATE_BLOCKED
- CERTIFICATE_REVOKE
- CERTIFICATE_MISSING
- SIGNATURE_INVALID
- SIGNATURE_MISSING
- CORPORATE_ID_INVALID
- PSU_CREDENTIALS_INVALID
- CONSENT_INVALID
- CONSENT_EXPIRED
- TOKEN_UNKNOWN
- TOKEN_INVALID
- TOKEN_EXPIRED
MessageCode401_SBS:
title: MessageCode401_SBS
description: Message codes defined for signing baskets for HTTP Error code 401
(UNAUTHORIZED).
example: CERTIFICATE_INVALID
type: string
enum:
- CERTIFICATE_INVALID
- CERTIFICATE_EXPIRED
- CERTIFICATE_BLOCKED
- CERTIFICATE_REVOKE
- CERTIFICATE_MISSING
- SIGNATURE_INVALID
- SIGNATURE_MISSING
- CORPORATE_ID_INVALID
- PSU_CREDENTIALS_INVALID
- CONSENT_INVALID
- CONSENT_EXPIRED
- TOKEN_UNKNOWN
- TOKEN_INVALID
- TOKEN_EXPIRED
MessageCode403_PIS:
title: MessageCode403_PIS
description: Message codes defined defined for PIS for PIS for HTTP Error code
403 (FORBIDDEN).
example: CONSENT_UNKNOWN
type: string
enum:
- CONSENT_UNKNOWN
- SERVICE_BLOCKED
- RESOURCE_UNKNOWN
- RESOURCE_EXPIRED
- PRODUCT_INVALID
MessageCode403_AIS:
title: MessageCode403_AIS
description: Message codes defined for AIS for HTTP Error code 403 (FORBIDDEN).
example: CONSENT_UNKNOWN
type: string
enum:
- CONSENT_UNKNOWN
- SERVICE_BLOCKED
- RESOURCE_UNKNOWN
- RESOURCE_EXPIRED
MessageCode403_PIIS:
title: MessageCode403_PIIS
description: Message codes defined for PIIS for HTTP Error code 403 (FORBIDDEN).
example: CONSENT_UNKNOWN
type: string
enum:
- CONSENT_UNKNOWN
- SERVICE_BLOCKED
- RESOURCE_UNKNOWN
- RESOURCE_EXPIRED
MessageCode403_SBS:
title: MessageCode403_SBS
description: Message codes defined for signing baskets for HTTP Error code 403
(FORBIDDEN).
example: CONSENT_UNKNOWN
type: string
enum:
- CONSENT_UNKNOWN
- SERVICE_BLOCKED
- RESOURCE_UNKNOWN
- RESOURCE_EXPIRED
MessageCode404_PIS:
title: MessageCode404_PIS
description: Message codes defined for PIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
enum:
- RESOURCE_UNKNOWN
- PRODUCT_UNKNOWN
MessageCode404_AIS:
title: MessageCode404_AIS
description: Message codes defined for AIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
enum:
- RESOURCE_UNKNOWN
MessageCode404_PIIS:
title: MessageCode404_PIIS
description: Message codes defined for PIIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
enum:
- RESOURCE_UNKNOWN
MessageCode404_SBS:
title: MessageCode404_SBS
description: Message codes defined for signing baskets for HTTP Error code 404
(NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
enum:
- RESOURCE_UNKNOWN
MessageCode405_PIS:
title: MessageCode405_PIS
description: Message codes defined for payment cancelations PIS for HTTP Error
code 405 (METHOD NOT ALLOWED).
example: SERVICE_INVALID
type: string
enum:
- SERVICE_INVALID
MessageCode405_PIS_CANC:
title: MessageCode405_PIS_CANC
description: Message codes defined for payment cancelations PIS for HTTP Error
code 405 (METHOD NOT ALLOWED).
example: CANCELLATION_INVALID
type: string
enum:
- CANCELLATION_INVALID
- SERVICE_INVALID
MessageCode405_AIS:
title: MessageCode405_AIS
description: Message codes defined for AIS for HTTP Error code 405 (METHOD NOT
ALLOWED).
example: SERVICE_INVALID
type: string
enum:
- SERVICE_INVALID
MessageCode405_PIIS:
title: MessageCode405_PIIS
description: Message codes defined for PIIS for HTTP Error code 405 (METHOD NOT
ALLOWED).
example: SERVICE_INVALID
type: string
enum:
- SERVICE_INVALID
MessageCode405_SBS:
title: MessageCode405_SBS
description: Message codes defined for SBS for HTTP Error code 405 (METHOD NOT
ALLOWED).
example: SERVICE_INVALID
type: string
enum:
- SERVICE_INVALID
MessageCode406_AIS:
title: MessageCode406_AIS
description: Message codes defined for AIS for HTTP Error code 406 (NOT ACCEPTABLE).
example: REQUESTED_FORMATS_INVALID
type: string
enum:
- REQUESTED_FORMATS_INVALID
MessageCode409_AIS:
title: MessageCode409_AIS
description: Message codes defined for AIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
enum:
- STATUS_INVALID
MessageCode409_PIS:
title: MessageCode409_PIS
description: Message codes defined for PIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
enum:
- STATUS_INVALID
MessageCode409_PIIS:
title: MessageCode409_PIIS
description: Message codes defined for PIIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
enum:
- STATUS_INVALID
MessageCode409_SBS:
title: MessageCode409_SBS
description: Message codes defined for signing baskets for HTTP Error code 409
(CONFLICT).
example: REFERENCE_STATUS_INVALID
type: string
enum:
- REFERENCE_STATUS_INVALID
- STATUS_INVALID
MessageCode429_AIS:
title: MessageCode429_AIS
description: Message codes for HTTP Error code 429 (TOO MANY REQUESTS).
example: ACCESS_EXCEEDED
type: string
enum:
- ACCESS_EXCEEDED
tppMessage2XX:
title: tppMessage2XX
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes for HTTP Error codes 2XX.
example: WARNING
type: string
default: WARNING
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage400_AIS:
title: tppMessage400_AIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode400_AIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage400_PIS:
title: tppMessage400_PIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode400_PIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage400_PIIS:
title: tppMessage400_PIIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode400_PIIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage400_SBS:
title: tppMessage400_SBS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode400_SBS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage401_PIS:
title: tppMessage401_PIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode401_PIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage401_AIS:
title: tppMessage401_AIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode401_AIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage401_PIIS:
title: tppMessage401_PIIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode401_PIIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage401_SBS:
title: tppMessage401_SBS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode401_SBS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage403_PIS:
title: tppMessage403_PIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode403_PIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage403_AIS:
title: tppMessage403_AIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode403_AIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage403_PIIS:
title: tppMessage403_PIIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode403_PIIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage403_SBS:
title: tppMessage403_SBS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode403_SBS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage404_PIS:
title: tppMessage404_PIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode404_PIS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage404_AIS:
title: tppMessage404_AIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for AIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage404_PIIS:
title: tppMessage404_PIIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for PIIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage404_SBS:
title: tppMessage404_SBS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for signing baskets for HTTP Error code
404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage405_PIS:
title: tppMessage405_PIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for payment cancelations PIS for HTTP Error
code 405 (METHOD NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage405_PIS_CANC:
title: tppMessage405_PIS_CANC
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode405_PIS_CANC'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage405_AIS:
title: tppMessage405_AIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for AIS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage405_PIIS:
title: tppMessage405_PIIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for PIIS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage405_SBS:
title: tppMessage405_SBS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for SBS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage409_PIS:
title: tppMessage409_PIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for PIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage406_AIS:
title: tppMessage406_AIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for AIS for HTTP Error code 406 (NOT ACCEPTABLE).
example: REQUESTED_FORMATS_INVALID
type: string
default: REQUESTED_FORMATS_INVALID
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage409_AIS:
title: tppMessage409_AIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for AIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage409_PIIS:
title: tppMessage409_PIIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes defined for PIIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage409_SBS:
title: tppMessage409_SBS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
$ref: '#/definitions/MessageCode409_SBS'
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
tppMessage429_AIS:
title: tppMessage429_AIS
type: object
properties:
category:
$ref: '#/definitions/tppMessageCategory'
code:
description: Message codes for HTTP Error code 429 (TOO MANY REQUESTS).
example: ACCESS_EXCEEDED
type: string
default: ACCESS_EXCEEDED
path:
type: string
text:
description: Additional explaining text to the TPP.
type: string
maxLength: 512
required:
- category
- code
Error400_PIS:
title: Error400_PIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 400 for PIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode400_PIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error400_AIS:
title: Error400_AIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 400 for AIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode400_AIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError1'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error400_PIIS:
title: Error400_PIIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 400 for PIIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode400_PIIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError2'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error400_SBS:
title: Error400_SBS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 400 for signing baskets."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode400_SBS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError3'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error401_PIS:
title: Error401_PIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 401 for PIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode401_PIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError4'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error401_AIS:
title: Error401_AIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 401 for AIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode401_AIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError5'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error401_PIIS:
title: Error401_PIIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 401 for PIIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode401_PIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError6'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error401_SBS:
title: Error401_SBS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 401 for signing baskets."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode401_SBS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError7'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error403_PIS:
title: Error403_PIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 403 for PIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode403_PIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError8'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error403_AIS:
title: Error403_AIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 403 for AIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode403_AIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError9'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error403_PIIS:
title: Error403_PIIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 403 for PIIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode403_PIIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError10'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error403_SBS:
title: Error403_SBS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 403 for signing baskets."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode403_SBS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError11'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error404_PIS:
title: Error404_PIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 404 for PIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode404_PIS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError12'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error404_AIS:
title: Error404_AIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 404 for AIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for AIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError13'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error404_PIIS:
title: Error404_PIIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 404 for PIIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for PIIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError14'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error404_SBS:
title: Error404_SBS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 404 for signing baskets."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for signing baskets for HTTP Error code
404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError15'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error405_PIS:
title: Error405_PIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 405 for PIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for payment cancelations PIS for HTTP Error
code 405 (METHOD NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError16'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error405_PIS_CANC:
title: Error405_PIS_CANC
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 405 for a pament cancelation (PIS)."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode405_PIS_CANC'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError17'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error405_AIS:
title: Error405_AIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 405 for AIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for AIS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError18'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error405_PIIS:
title: Error405_PIIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 405 for PIIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for PIIS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError19'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error405_SBS:
title: Error405_SBS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 405 for signing baskets."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for SBS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError20'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error406_AIS:
title: Error406_AIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 406 for AIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for AIS for HTTP Error code 406 (NOT ACCEPTABLE).
example: REQUESTED_FORMATS_INVALID
type: string
default: REQUESTED_FORMATS_INVALID
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError21'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error409_PIS:
title: Error409_PIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 409 for PIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for PIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError22'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error409_AIS:
title: Error409_AIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 409 for AIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for AIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError23'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error409_PIIS:
title: Error409_PIIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 409 for PIIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for PIIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError24'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error409_SBS:
title: Error409_SBS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 409 for signing baskets."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode409_SBS'
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError25'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error429_AIS:
title: Error429_AIS
description: "Standardised definition of reporting error information according
to [RFC7807] \nin case of a HTTP error code 429 for AIS."
type: object
properties:
type:
description: "A URI reference [RFC3986] that identifies the problem type.
\nRemark For Future: These URI will be provided by NextGenPSD2 in future."
type: string
maxLength: 70
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes for HTTP Error code 429 (TOO MANY REQUESTS).
example: ACCESS_EXCEEDED
type: string
default: ACCESS_EXCEEDED
additionalErrors:
description: |-
Array of Error Information Blocks.
Might be used if more than one error is to be communicated
type: array
items:
$ref: '#/definitions/AdditionalError26'
_links:
$ref: '#/definitions/_linksAll'
required:
- type
- code
Error400_NG_PIS:
title: Error400_NG_PIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 400.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage400_PIS'
_links:
$ref: '#/definitions/_linksAll'
Error400_NG_AIS:
title: Error400_NG_AIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 400.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage400_AIS'
_links:
$ref: '#/definitions/_linksAll'
Error400_NG_PIIS:
title: Error400_NG_PIIS
description: NextGenPSD2 specific definition of reporting error information in
case of a HTTP error code 400.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage400_PIIS'
_links:
$ref: '#/definitions/_linksAll'
Error400_NG_SBS:
title: Error400_NG_SBS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 400.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage400_SBS'
_links:
$ref: '#/definitions/_linksAll'
Error401_NG_PIS:
title: Error401_NG_PIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage401_PIS'
_links:
$ref: '#/definitions/_linksAll'
Error401_NG_AIS:
title: Error401_NG_AIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage401_AIS'
_links:
$ref: '#/definitions/_linksAll'
Error401_NG_PIIS:
title: Error401_NG_PIIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage401_PIIS'
_links:
$ref: '#/definitions/_linksAll'
Error401_NG_SBS:
title: Error401_NG_SBS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage401_SBS'
_links:
$ref: '#/definitions/_linksAll'
Error403_NG_PIS:
title: Error403_NG_PIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 403.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage403_PIS'
_links:
$ref: '#/definitions/_linksAll'
Error403_NG_AIS:
title: Error403_NG_AIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 403.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage403_AIS'
_links:
$ref: '#/definitions/_linksAll'
Error403_NG_PIIS:
title: Error403_NG_PIIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 403.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage403_PIIS'
_links:
$ref: '#/definitions/_linksAll'
Error403_NG_SBS:
title: Error403_NG_SBS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 403.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage403_SBS'
_links:
$ref: '#/definitions/_linksAll'
Error404_NG_PIS:
title: Error404_NG_PIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 404.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage404_PIS'
_links:
$ref: '#/definitions/_linksAll'
Error404_NG_AIS:
title: Error404_NG_AIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 404.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage404_AIS'
_links:
$ref: '#/definitions/_linksAll'
Error404_NG_PIIS:
title: Error404_NG_PIIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 404.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage404_PIIS'
_links:
$ref: '#/definitions/_linksAll'
Error404_NG_SBS:
title: Error404_NG_SBS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 404.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage404_SBS'
_links:
$ref: '#/definitions/_linksAll'
Error405_NG_PIS:
title: Error405_NG_PIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage405_PIS'
_links:
$ref: '#/definitions/_linksAll'
Error405_NG_PIS_CANC:
title: Error405_NG_PIS_CANC
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage405_PIS_CANC'
_links:
$ref: '#/definitions/_linksAll'
Error405_NG_AIS:
title: Error405_NG_AIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage405_AIS'
_links:
$ref: '#/definitions/_linksAll'
Error405_NG_PIIS:
title: Error405_NG_PIIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage405_PIIS'
_links:
$ref: '#/definitions/_linksAll'
Error405_NG_SBS:
title: Error405_NG_SBS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 401.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage405_SBS'
_links:
$ref: '#/definitions/_linksAll'
Error406_NG_AIS:
title: Error406_NG_AIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 406.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage406_AIS'
_links:
$ref: '#/definitions/_linksAll'
Error409_NG_PIS:
title: Error409_NG_PIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 409.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage409_PIS'
_links:
$ref: '#/definitions/_linksAll'
Error409_NG_AIS:
title: Error409_NG_AIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 409.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage409_AIS'
_links:
$ref: '#/definitions/_linksAll'
Error409_NG_PIIS:
title: Error409_NG_PIIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 409.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage409_PIIS'
_links:
$ref: '#/definitions/_linksAll'
Error409_NG_SBS:
title: Error409_NG_SBS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 409.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage409_SBS'
_links:
$ref: '#/definitions/_linksAll'
Error429_NG_AIS:
title: Error429_NG_AIS
description: |
NextGenPSD2 specific definition of reporting error information in case of a HTTP error code 429.
type: object
properties:
tppMessages:
type: array
items:
$ref: '#/definitions/tppMessage429_AIS'
_links:
$ref: '#/definitions/_linksAll'
AdditionalError:
title: AdditionalError
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode400_PIS'
required:
- code
AdditionalError1:
title: AdditionalError1
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode400_AIS'
required:
- code
AdditionalError2:
title: AdditionalError2
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode400_PIIS'
required:
- code
AdditionalError3:
title: AdditionalError3
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode400_SBS'
required:
- code
AdditionalError4:
title: AdditionalError4
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode401_PIS'
required:
- code
AdditionalError5:
title: AdditionalError5
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode401_AIS'
required:
- code
AdditionalError6:
title: AdditionalError6
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode401_PIIS'
required:
- code
AdditionalError7:
title: AdditionalError7
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode401_SBS'
required:
- code
AdditionalError8:
title: AdditionalError8
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode403_PIS'
required:
- code
AdditionalError9:
title: AdditionalError9
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode403_AIS'
required:
- code
AdditionalError10:
title: AdditionalError10
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode403_PIIS'
required:
- code
AdditionalError11:
title: AdditionalError11
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode403_SBS'
required:
- code
AdditionalError12:
title: AdditionalError12
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode404_PIS'
required:
- code
AdditionalError13:
title: AdditionalError13
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for AIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
required:
- code
AdditionalError14:
title: AdditionalError14
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for PIIS for HTTP Error code 404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
required:
- code
AdditionalError15:
title: AdditionalError15
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for signing baskets for HTTP Error code
404 (NOT FOUND).
example: RESOURCE_UNKNOWN
type: string
default: RESOURCE_UNKNOWN
required:
- code
AdditionalError16:
title: AdditionalError16
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for payment cancelations PIS for HTTP Error
code 405 (METHOD NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
required:
- code
AdditionalError17:
title: AdditionalError17
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode405_PIS_CANC'
required:
- code
AdditionalError18:
title: AdditionalError18
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for AIS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
required:
- code
AdditionalError19:
title: AdditionalError19
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for PIIS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
required:
- code
AdditionalError20:
title: AdditionalError20
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for SBS for HTTP Error code 405 (METHOD
NOT ALLOWED).
example: SERVICE_INVALID
type: string
default: SERVICE_INVALID
required:
- code
AdditionalError21:
title: AdditionalError21
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for AIS for HTTP Error code 406 (NOT ACCEPTABLE).
example: REQUESTED_FORMATS_INVALID
type: string
default: REQUESTED_FORMATS_INVALID
required:
- code
AdditionalError22:
title: AdditionalError22
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for PIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
required:
- code
AdditionalError23:
title: AdditionalError23
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for AIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
required:
- code
AdditionalError24:
title: AdditionalError24
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes defined for PIIS for HTTP Error code 409 (CONFLICT).
example: STATUS_INVALID
type: string
default: STATUS_INVALID
required:
- code
AdditionalError25:
title: AdditionalError25
description: This is a data element to support the declaration of additional errors
in the context of [RFC7807].
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
$ref: '#/definitions/MessageCode409_SBS'
required:
- code
AdditionalError26:
title: AdditionalError26
description: "This is a data element to support the declaration of additional
errors in the context of [RFC7807] \nin case of a HTTP error code 429 for."
type: object
properties:
title:
description: "Short human readable description of error type. \nCould be in
local language. \nTo be provided by ASPSPs."
type: string
maxLength: 70
detail:
description: "Detailed human readable text specific to this instance of the
error. \nXPath might be used to point to the issue generating the error
in addition.\nRemark for Future: In future, a dedicated field might be introduced
for the XPath."
type: string
maxLength: 512
code:
description: Message codes for HTTP Error code 429 (TOO MANY REQUESTS).
example: ACCESS_EXCEEDED
type: string
default: ACCESS_EXCEEDED
required:
- code
AllPsd2:
title: AllPsd2
description: |-
Optional if supported by API provider.
Only the value "allAccounts" is admitted.
example: allAccounts
type: string
enum:
- allAccounts
AvailableAccounts:
title: AvailableAccounts
description: |-
Optional if supported by API provider.
Only the values "allAccounts" or "allAccountsWithBalances" is admitted.
example: allAccounts
type: string
enum:
- allAccounts
- allAccountsWithBalances
bookingStatus:
title: bookingStatus
example: booked
type: string
enum:
- booked
- pending
- both
OtpFormat:
title: OtpFormat
description: The format type of the OTP to be typed in. The admitted values are
"characters" or "integer".
example: characters
type: string
enum:
- characters
- integer
payment-product:
title: payment-product
example: sepa-credit-transfers
type: string
enum:
- sepa-credit-transfers
- instant-sepa-credit-transfers
- target-2-payments
- cross-border-credit-transfers
- pain.001-sepa-credit-transfers
- pain.001-instant-sepa-credit-transfers
- pain.001-target-2-payments
- pain.001-cross-border-credit-transfers
payment-service:
title: payment-service
example: payments
type: string
enum:
- payments
- bulk-payments
- periodic-payments
PSU-Http-Method:
title: PSU-Http-Method
example: GET
type: string
enum:
- GET
- POST
- PUT
- PATCH
- DELETE
RateType:
title: RateType
example: SPOT
type: string
enum:
- SPOT
- SALE
- AGRD
TPP-Explicit-Authorisation-Preferred:
title: TPP-Explicit-Authorisation-Preferred
example: "true"
type: string
enum:
- "true"
- "false"
TPP-Redirect-Preferred:
title: TPP-Redirect-Preferred
example: "true"
type: string
enum:
- "true"
- "false"
TPP-Rejection-NoFunds-Preferred:
title: TPP-Rejection-NoFunds-Preferred
example: "true"
type: string
enum:
- "true"
- "false"
Usage:
title: Usage
description: |-
Specifies the usage of the account
* PRIV: private personal account
* ORGA: professional account
example: PRIV
type: string
enum:
- PRIV
- ORGA
V1FundsConfirmationsResponse:
title: V1FundsConfirmationsResponse
description: "Equals \"true\" if sufficient funds are available at the time of
the request, \n\"false\" otherwise."
type: object
properties:
fundsAvailable:
type: boolean
required:
- fundsAvailable
tags:
- name: Payment Initiation Service (PIS)
description: |
The Decription for Payment Initiation Service (PIS) offers the following services:
* Initiation and update of a payment request
* Status information of a payment
- name: Confirmation of Funds Service (PIIS)
description: |
Confirmation of Funds Service (PIIS) returns a confirmation of funds request at the ASPSP.
- name: Account Information Service (AIS)
description: |
The Account Information Service (AIS) offers the following services
* Transaction reports for a given account or card account including balances if applicable.
* Balances of a given account or card account ,
* A list of available accounts or card account ,
* Account details of a given account or card account or of the list of all accessible accounts or card account relative to a granted consent
- name: Signing Baskets Service (SBS)
description: "Signing basket methods are used for authorising several transactions
and resp. or consents with one SCA operation. \n"
- name: Common Services
description: "Processes on starting authorisations, update PSU identification or
PSU authentication data and explicit \nauthorisation of transactions by using
SCA are very similar in PIS and AIS and signing baskets services. \nThe API calls
supporting these processes are described in the following independently from the
service/endpoint. \nFor reasons of clarity, the endpoints are defined always for
the Payment Initiation Service, the Payment Cancellation, \nthe Account Information
Service (Consents), and Signing Baskets separately. \nThese processes usually
are used following a hyperlink of the ASPSP. "
- name: Signing Baskets (SBS)
description: ""
x-ibm-configuration:
enforced: true
testable: true
phase: realized
securityDefinitions:
oauth-1:
type: oauth2
description: ""
flow: accessCode
scopes:
AIS: Vizualizare date conturi
authorizationUrl: https://$(api.endpoint.hostname)/cec/$(env.path)/oauthcec/oauth2/authorize
tokenUrl: https://$(api.endpoint.hostname)/cec/$(env.path)/oauthcec/oauth2/token
api-key-1:
type: apiKey
description: ""
in: header
name: X-IBM-Client-Id
security:
- api-key-1: []
oauth-1:
- AIS
x-ibm-endpoints:
- endpointUrl: https://api-test.cec.ro/cec/tpp
type:
- development
...