adorsys / adorsys/open-banking-gateway

OBG behaves diffently for HBCI and SCA - how can client know what to do?

オープン
#1,145 コメント 1 件 リアクション 0 件 担当者 0 名 GitHub で見る
BE FinTech low priority
主要言語
Java
スター
338
フォーク
122
PR マージ指標
30日以内にマージされた PR はありません

説明

Currently API of OBG offers two ways of "consent reusage". For xs2a its ok to send PSUSessionID. If consent is available, it will bereused and consent is retrieved without ConsentUI interaction.
As FintechServer currently has no idea which protocol is used, it does the same for HBCI Bank. But in this case, once list of accounts have been retrieved, sending the PSUSessionID results in error in OBG Server.
And switching on Settings Option of FintechUI
TRUE "Discard propably existing consent ONE TIME ONLY"
TRUE "Use protocol cache of TPP Server"
result in another OBG error. Only Setting both options to first option to false and second to true results in ok
FALSE "Discard propably existing consent ONE TIME ONLY"
TRUE "Use protocol cache of TPP Server"
So it looks like PSU ID has to be send AND Option use Cache too. Otherwise Exception is thrown.

This was tested with real bank. Log with test bank will follow.

From bankingProfile client knows if consent is supported or not. Is this sufficiant to decide what to do. If yes, would rule look like this?

`consent supported -> (xs2a)
always send psuSessionID (if available), always ignore TPP Cache Flag
consent not supported -> (HBCI)
when sending psuSessionID send TPP CacheFlag TRUE
never send TPP CacheFlag false when PsuSessionId is not available.
`
If this is ok, the logic should be hidden in FintechUI. It should take place in fintechServer.

コントリビューションガイド

このリポジトリのコントリビューションガイドは索引されていません

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。