OpenID Foundation Financial-grade API

This is the official repository for OpenID Foundation Financial-grade API (FAPI) Working Group.

What is this repository for?

• Financial-grade API
  • Part 1: Read Only API Security Profile
  • Part 2: Read & Write API Security Profile
  • Client Initiated Backchannel Authentication Profile
  • JWT Secured Authorization Response Mode for OAuth 2.0 (JARM)
  • Pushed Request Object
• Financial-grade API Version 2.0
  • Baseline Profile
  • Advanced Profile
  • Attacker Model
  • Grant Management
• Other documents
  • Cross-Browser Payment Initiation Attack

OpenID Foundation FAPI Working Group is creating a Financial API standard that is applicable internationally. It is taking requirements from Open Banking Standard document, and has started working on based on the contributed FS-ISAC Durable Data API.

You can find the overview and rationale of the working group at the WG page.

Contribution guidelines

• You MUST Execute Contributor Agreement either by
  • Electronic Signature and notify openid-specs-fapi-owner@lists.openid.net; OR
  • print this PDF and fill, sign, scan, and send it to openid-specs-fapi-owner@lists.openid.net.
• You MUST file an issue to the issue tracker before contributing a code.
• You MUST test that the contributed code compiles without error.

Who do I talk to?

• The chairs of the WG can be reached at openid-specs-fapi-owner@lists.openid.net