Skip to content


Repository files navigation


The Open Bank Project Hola App is a reference implementation of the OAuth2 authentication and consent flow. It demonstrates and tests OBP authentication, consent creation and data access via OBP API. It supports UK, Berlin Group, and OBP styles. Hola is written in Java / Spring Boot.

Besides OBP API, Hola App depends on Ory Hydra and OBP Hydra Identity Provider.

A working Hola App setup can be used to drive automatic tests using OBP Selenium.

Build with maven

Check out the code from this repository and build it by running mvn clean package inside the main folder.

The resulting JAR file of Hola App will be in the target folder.

Prepare truststore

Assuming OBP-API server URL is:

Assuming Hydra server URL is:

  • retrieve OBP API and Hydra server certificates:

    openssl s_client -servername -connect </dev/null 2>/dev/null | openssl x509 -inform PEM -outform DER -out obp-api.cer

    openssl s_client -servername -connect </dev/null 2>/dev/null | openssl x509 -inform PEM -outform DER -out hydra.cer

  • import both certificates to truststore.jks:

    keytool -import -alias api -keystore truststore.jks -file obp-api.cer

    keytool -import -alias hydra -keystore truststore.jks -file hydra.cer

Prepare keystore

If mTLS is enabled on the OBP API instance, the client key needs to be signed by OBP API client CA. Else, any self-signed certificate will do. Continuing assuming you have client.key and client.crt:

  • convert client key and cert to client-cert.p12:

    openssl pkcs12 -export -in client.crt -inkey client.key -certfile user.crt -out client-cert.p12

  • import client-cert.p12 to keystore.jks:

    keytool -importkeystore -srckeystore client-cert.p12 -srcstoretype pkcs12 -destkeystore keystore.jks

Adjust file

Create according to

  • oauth2.public_url is the URL of the OAuth2 server of the OBP instance.
  • obp.base_url is the main URL of the OBP instance.
  • Fill in the locations and passphrases of the previously created keystore and truststore into mtls.keyStore and mtls.trustStore props
  • Register a new API key on the OBP instance, e.g. and copy and paste all props below "OAuth2:" into
    • oauth2.client_id
    • oauth2.redirect_uri
    • oauth2.client_scope
    • oauth2.jws_alg
    • oauth2.jwk_private_key
  • All other props can be left at default values.


java -jar obp-hola-app-0.0.29-SNAPSHOT.jar

While the app is running, point your browser to the configured port on localhost (e.g. http://localhost:8087) to start the consent flow.

Screenshots of the app

Landing page

alt text

Berlin Group Flow

alt text


alt text

Get Accounts, Balances and Transactions

alt text

Copyright TESOBE GmbH 2020


A Java / Springboot application to demonstrate and test open banking OAuth2, consent creation and usage flows. Supports UK and Berlin Group.







No packages published

Contributors 4