Code coverage
- Backend:
- Frontend:
- Example code:
Provides tools, adapters and connectors for transparent access to open banking apis. The initial effort focuses on the connectivity to banks that implement the European PSD2 directive either through one of the common market initiatives like : The Berlin Group NextGenPSD2, The Open Banking UK, The Polish PSD2 API or even through proprietary bank api like the ING’s PSD2 API.
The European PSD2 as the first regulator driven Open Banking initiative offers many opportunities for both banks, known as traditional provider of payment services (called ASPSPs in this context) and other Third Party Providers of payment services (TPPs). TPPs can use account information and payment services provided by banks to offer new innovative services to bank account holders. The more banks and TPPs can interact with each other, the more payment account holders can be provided with reacher banking solutions, which in turn simplifies and leverage commercial value chains.
Being able to interact with different banking APIs can be a time and cost consuming challenge. Even though the PSD2 requires European banks to provide APIs and despite the effort of market initiatives to provide common standard interfaces, there is still a multitude of divergent authorization schemes involved and a lot of space for implementation options. A bank can even decide not to join one of the known market initiatives and define it's own PSD2 compliant API.
The purpose of this open banking gateway is to provide the community with a common and simple interface for accessing major Open Banking APIs.
Being a regulator driven initiative, PSD2 mandates the regulation of TPPs. With this additional detail, the market is experiencing a distinction between regulated TPPs and non regulated FinTechs. This framework is therefore designed taking in consideration the existence of the category of payment service providers called FinTech that used APIs exposed by a regulated TPP to access payment services exposed by banks.
In the Open Banking Context, a payment service user (PSU or banking account holder) might have to deal with up to 3 different user interface to initiate, authorize and get the requested banking service executed. There being redirected back and forth from one UserAgent (resp. device) to another. This intensive use of redirection in Open Banking bearing a lot of risk of impersonating the PSU, we set a goal of this Framework to dissect the complexity involved with those redirection processes and open forums for discussion of possible solutions and sample implementations. Following papers are the first attempt to capture the problem (UserAgent Redirection, PSU Access Security Design).
The following picture displays the overall architecture of this banking gateway:
The following picture displays the overall security concept of this banking gateway:
Security concept has 2 kinds of flows:
- authenticated (for consent sharing)
- anonymous (for payments, but can be authenticated too).
Here are detailed diagrams of each flow:
The following picture displays the overall technical architecture concept of this banking gateway:
Key components as shown on diagram:
APIs:
- Banking API and its implementation Banking API Impl
- Consent API and its implementation Consent API Impl
Facade:
Protocol:
- docker-compose-dev.yml - docker-compose file in the project root for Development (requires building docker images)
- docker-compose.yml - docker-compose file in the project root for Demo (Images will be pulled from DockerHub)
- postman-collections
- postman-environments (for playing use this Postman environment)
- postman-ais-collection Xs2a-embedded or HBCI AIS (account information services) example - getting users' account and transactions list
Note: Postman requires disabled request signing functionality - for that use Spring-profile no-signature-filter.
You can use our DEV environment (without signature check) if you import this Postman environment
-
Working with BPMN: As most protocols use BPMN, we have developed the plugin 'Flowable BPMN visualizer' that directly integrates into IntelliJ with code navigation, refactoring and other stuff for Flowable BPMN engine. It will make your work a lot easier as you don't need to leave IntelliJ to change diagram or to see what class is used at which step.
-
Starting with project: How to start with project
-
Populating database with bank data: How to fill database with bank data
Please take a look into our documentation to know more about:
- Dictionary
- Use Cases
- Banking Protoсol Design
- User Agent Redirection
- PSU Access Security Design
- JavaDoc
This project is designed to enable contribution from different sources, as the open banking challenge will start with a magnitude of discrepancies in individual bank implementations, even for banks implementing a common standards.
- Francis Pouatcha - Initial work - adorsys
See also the list of contributors who participated in this project.
For commercial support please contact adorsys Team.
This project is licensed under the Apache License version 2.0 - see the LICENSE file for details