NZ Banking Data Security Profile v2.1.0
- Matthew Bell
Owned by Matthew Bell
- 1 Version Control
- 2 Introduction
- 2.1 Security Architecture
- 2.1.1 OAuth 2.0
- 2.1.2 OIDC Core
- 2.1.3 OIDC Client Initiated Backchannel Authentication
- 2.1.4 FAPI
- 2.2 Scope
- 2.3 Normative References
- 2.4 Terms and Definitions
- 2.5 Symbols and Abbreviated Terms
- 2.1 Security Architecture
- 3 NZ Read and Write API Security Profile
- 3.1 5.2 Read and Write API Security Provisions
- 3.1.1 5.2.1 Introduction
- 3.1.2 5.2.2 Authorization Server
- 3.1.3 5.2.4 Confidential Client
- 3.2 6. Accessing Protected Resources
- 3.2.1 6.1 Introduction
- 3.2.2 6.2 Access Provisions
- 3.2.2.1 6.2.1 Protected resources provisions
- 3.2.2.2 6.2.2 Client Provisions
- 3.3 7. Request Object Endpoint
- 3.3.1 7.1 Introduction
- 3.4 8. Security Considerations
- 3.1 5.2 Read and Write API Security Provisions
- 4 NZ Client Initiated Backchannel Authentication Profile
- 5 Non-Normative Examples
- 5.1 Hybrid Flow
- 5.1.1 Authorization Request
- 5.1.1.1 Parameters
- 5.1.2 Request Object
- 5.1.2.1 Claims
- 5.1.3 ID Token
- 5.1.3.1 Claims
- 5.1.1 Authorization Request
- 5.2 Decoupled Request
- 5.2.1 Authorization Request
- 5.2.1.1 Claims
- 5.2.2 Login Hint Token
- 5.2.2.1 Claims
- 5.2.3 ID Token Hint
- 5.2.4 Authorization Request Response
- 5.2.4.1 Claims
- 5.2.5 Token Request
- 5.2.6 Token Request Response
- 5.2.7 Ping Callback
- 5.2.8 ID Token
- 5.2.8.1 Claims
- 5.2.1 Authorization Request
- 5.1 Hybrid Flow
- 6 Implementation Guide
- 6.1 Hybrid Flow
- 6.1.1 Client Types
- 6.1.2 Grant Types
- 6.1.2.1 Client Credentials Grant Type
- 6.1.2.2 Hybrid Flow
- 6.1.3 Access Tokens
- 6.1.4 Refresh Tokens
- 6.1.5 ID Tokens
- 6.1.6 Authorization Codes
- 6.1.7 Unspecified Behaviour
- 6.1.7.1 Client Types
- 6.1.7.2 Grant Types
- 6.1.7.3 Validity Lengths
- 6.1.8 Success Flows
- 6.1.8.1 Client Credentials Grant Type (OAuth 2.0)
- 6.1.8.2 OIDC Hybrid Flow
- 6.1.9 Non-Normative HTTP Request and Response Examples
- 6.1.9.1 Step 1 - Agree Payment Consent
- 6.1.9.2 Step 2 - Setup Payment-Order Consent
- 6.1.9.3 Step 3 - Authorize Consent
- 6.1.9.4 Step 4 - Create Payment-Order
- 6.1.9.5 Step 5 - Get Domestic-Payment Status
- 6.2 Decoupled Flow
- 6.2.1 Client Types
- 6.2.2 Grant Types
- 6.2.2.1 Client Credentials Grant Type
- 6.2.2.2 CIBA Flow
- 6.2.3 Access Tokens
- 6.2.4 Refresh Tokens
- 6.2.5 ID Tokens
- 6.2.6 Unspecified Behaviour
- 6.2.6.1 Validity Lengths
- 6.2.7 Success Flows
- 6.2.7.1 Client Credentials Grant Type (OAuth 2.0)
- 6.2.7.2 CIBA Flow
- 6.2.8 Non-Normative HTTP Request and Response Examples
- 6.3 Edge Cases
- 6.1 Hybrid Flow
- 7 JSON Security Suite