Stack Overflow
Stack Overflow

Questions tagged [psd2]

PSD2 - The Payment Services Directive is an EU Directive that regulates payment services and payment service providers throughout the European Union (EU) and European Economic Area (EEA)

19 questions
13
votes
4 answers

How to create eIDAS certificate with QWAC and QSealC profiles (PSD2 specific attributes) for testing

I want to create a eIDAS certificate with QWAC and QSealC profiles with PSD2 specific attributes as mentioned in the doc. Please help me, this is just for testing…
Amalka Subasinghe
  • 156
  • 1
  • 6
6
votes
2 answers

How to manage client certificates for mutual TLS to be used within AWS Lambda

Our team is using AWS Lambda functions and API Gateway to facilitate connections to open banking API's within Europe. (PSD2). Our Lambda's are written in NodeJS. PSD2 requires Mutual TLS, which is fine and we have everything correctly implemented…
Michael Doye
  • 8,063
  • 5
  • 40
  • 56
6
votes
6 answers

Where to find the PSD2 technical specification?

PSD2, The Payment Services Directive of the EU. Financial institutions in the EU need to be PSD2 compliant, and there's a bunch of vendors claiming PSD2 compliancy. PSD2 is supposed to be a uniform EU-wide standard, and there's a million…
bbozo
  • 7,075
  • 3
  • 30
  • 56
4
votes
1 answer

Revolut OpenBanking API Authentication and Authorization

I am trying to use Revolut Open Banking API and I can't figure out how the authorization and authentication flow works. What is the dynamic client registration? Should I register the application every single time I start my application? What about…
rpf
  • 3,612
  • 10
  • 38
  • 47
3
votes
1 answer

OpenSSL Error in Req when generating self-signed certificate

I created CSR file eidas.csr following content oid_section = OIDs [ req ] distinguished_name = dn prompt = no [ OIDs ] OrganizationID=2.5.4.97 [ dn ] O=Enable Banking…
giorgiAsanidze
  • 33
  • 1
  • 4
3
votes
2 answers

Is there an equivalent to the default source, when using SetupIntent & PaymentIntent?

With the Sources API, every customer had a default_source, but when using SetupIntent (in order to be compliant with the PSD2/SCA directive), there doesn't seem to be any direct equivalent. So my question is, how this can be properly represented…
Martin Zeitler
  • 1
  • 19
  • 155
  • 216
3
votes
2 answers

PSD2 SagePay - what requirements

Do I need to change anything within my payment gateway script on my ecommerce website, so it complies with PSD2 requirements on sagepay hosted? I don't take payments on my website, but redirect people to SagePay. My question is according to…
vincent
  • 31
  • 2
3
votes
0 answers

How to get Test eIDAS certificate

Need eIDAS certificate with QWAC and QSEAL for PSD2. Can some one let us know how can we get test eIDAS certificate for PSD2 ?
Gaurav
  • 61
  • 10
2
votes
0 answers

Implement dynamic scope in spring security OAuth

I am developing an open banking software, the bank user(also called customer) must allow a third party software to call banking services such as cash withdrawal and transaction viewing for one of his accounts for a limited amount. To implement this…
ali akbar azizkhani
  • 2,213
  • 5
  • 31
  • 48
2
votes
2 answers

New Stripe SCA checkout flow in Rails

I'm struggling with switching my Rails app to the new Stripe checkout flow to accommodate the new SCA regulation. I want to implement the simple dynamic product routine found in this link:…
allesklar
  • 9,506
  • 6
  • 36
  • 53
1
vote
1 answer

How to properly generate X-JWS-Signature in JS based on RFC 7515

I am trying to generate JWS signature for PSD2 purposes (RFC 7515). I have the following functions: function signJson(json, privateKey) { const header = { alg: 'RS256', typ: 'JWT' }; const payload = JSON.stringify(json); const data =…
MatnikR
  • 181
  • 2
  • 16
1
vote
1 answer

QSEALC/QWAC .NET library for identifying actors in PSD2 API communications

We are looking to extract additional information from QSEALC/QWAC client certificate in primarily .NET Core code. Optionally in golang or nodejs. The qualified data (found as an extension to the X509 certificate) is encoded according to ETSI TS 119…
krembanan
  • 1,408
  • 12
  • 28
1
vote
0 answers

eIDAS certificates and EBA trust list

I have a question regarding open banking and PSD2 eIDAS certificates that is needed by the TPPs to identify themselves to an APSPSs. Basically an eIDAS certificate is issued by a QTSP to the TPPs. the question I have is what is the best way to…
user3916750
  • 23
  • 5
1
vote
1 answer

PSD2 QSealC signed message

I have looked everywhere for an example of a QSealC signed message, and I could not find any info. I need to verify the signature of a QsealC signed payload AND I need to sign the responding payload but I understand that the payload is all in json,…
mgarzelli
  • 23
  • 5
1
vote
0 answers

PSD2 Consent Management with Spring Security OAuth2

We're working on exposing our PSD2 Banking API via Spring OAuth2 to handle 3-legged OAuth flow. Part of our PSD2 approach is that we will present a consent UI where the customer can select which bank accounts are exposed and what type of scope is…
user9007536
  • 11
  • 3
1
2