This product will contain a single API that will sign the incoming request payload with the Santander JWS signature policy. This is being built in the "intra-core" catalogue in order to facilitate the Confirmation Of Payee outbound calls. Currently this is in testing.
Endpoint for Open Banking TLS MA only
Paths
/sign-payload
This endpoint is used to get the JWS value for the outbound call
Valid client ID header
Valid secret in header
Valid JWT
Issuer(iss) claim string used in the jwt
kid (key ID) Header Parameter is a hint indicating which public key was used to secure the JWS.
Reference name to crypto key object used to sing the detached payload
Cryptographic Algorithm used to create the jwt. default PS256
Domain name for Trust Anchor. For OB must be openbanking.org.uk
Content type
type
Content Type
sample payload
200 OK
400 Bad Request
401 Unauthorized
403 Forbidden
404 Not Found
500 Internal Server Error
503 Service Unavailable
/validatepayloadsignature
Valid client ID header
Valid secret in header
jws signature
Content Type
Valid JWT
sample pay load
200 OK
400 Bad Request
401 Unauthorized
403 Forbidden
404 Not Found
500 Internal Server Error
/private-key-jwt
Valid JWT
Valid client ID header
Valid secret in header
kid (key ID) Header Parameter is a hint indicating which public key was used to secure the JWS.
Reference name to crypto key object used to sing the detached payload
Content Type
200 OK
400 Bad Request
401 Unauthorized
403 Forbidden
404 Not Found
500 Internal Server Error
Definitions
{
"properties": {
"iss": {
"type": "string",
"description": "Issuer(iss) claim string used in the jwt",
"example": "8-OZA8bdIUEcWH0oFFZVZGwt"
},
"sub": {
"type": "string",
"description": "Subject(sub) claim identifying the principal that is the subject of the JWT",
"example": "9-IFFZVZGwt0oOZA8bdUEcWH"
},
"aud": {
"type": "string",
"description": "Audience(aud) claim containing a value that identifies the authorization server as an intended audience",
"example": "https:\/\/secure1.coutts.com"
},
"exp": {
"type": "integer",
"description": "Expiration Time (exp) claim that limits the time window during which the JWT can be used",
"example": 1595582756,
"format": "int64"
},
"nbf": {
"type": "integer",
"description": "not before (nbf) claim that identifies the time before which the token MUST NOT be accepted for processing",
"example": 234234234,
"format": "int64"
},
"iat": {
"type": "integer",
"description": "not before (nbf) claim that identifies the time before which the token MUST NOT be accepted for processing",
"example": 1595499626,
"format": "int64"
},
"jti": {
"type": "string",
"description": "JWT ID(jti) claim that provides a unique identifier for the token",
"example": "234234"
}
},
"additionalProperties": false
}
{
"properties": {
"AanyKey": {
"type": "string",
"description": "any json key value",
"example": "any value"
}
},
"additionalProperties": false
}