Skip to content

simple command line tools that demonstrates how TPPs can register an OAuth client with an ASPSP using Open Banking dynamic client registration

License

Notifications You must be signed in to change notification settings

pingidentity/open-banking-client-registration-tool

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Open Banking Client Registration Tool

This is a simple Java command line tool that demonstrates how to issue and send client registration requests to ASPSPs. The tool does the following:

  • authenticates against the Open Banking directory to obtain an OAuth Access Token
  • calls the Open Banking software statement API to obtain a new software statement (with the token just obtained)
  • generates a client registration request JWT that embeds the software statement
  • submits the request JWT to the ASPSP

Usage

To run the tool:

  • ensure that a software statement has been created using the Open Banking Directory Frontend and that a signing key and network certificate are associated to the software statement (as explained [here] (https://www.pingidentity.com/en/company/blog/posts/2018/enable-open-banking-dynamic-client-registration-with-ping-identity.html))
  • download and unzip the source code from GitHub or clone the source
  • change the following parameters in the src/main/resources/configuration.properties file:
    • ob.signingKeyId the signing key ID obtained from the Open Banking Directory Frontend
    • ob.softwareStatementId the software statement ID obtained from the Open Banking Directory Frontend
    • ob.organization the organization ID obtained from the Open Banking Directory Frontend
    • aspsp.redirectUri the redirect URI of the TPP app, this must match the redirect URI configured in the OB directory
    • aspsp.audience the audience expected from the ASPSP
    • aspsp.registrationEndpoint the registration endpoint of the ASPSP
    • aspsp.networkCertPassword the password used to protect the p12 network certificate
  • the remaining parameters can be left unmodified for the MIT environment
  • replace the signing key and the network certificates with yours:
    • signing key: replace the file src/main/resources/dynamic_client_reg_signing.key with your signing private key
    • network certificate: replace the file src/main/resources/dynamic_client_reg_network.p12 with your TPP certificate
  • run the following command from the root of the project:
mvn compile exec:java -Dexec.mainClass="com.pingidentity.openbanking.ClientRegistrationTool"

About

simple command line tools that demonstrates how TPPs can register an OAuth client with an ASPSP using Open Banking dynamic client registration

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages