tuatarapl/polish-api-aspsp-mock

Mock implementation of ASPSP exposing Polish API interface.

polish-api-aspsp-mock

Mock implementation of ASPSP exposing Polish API interface. Used to test TPP integration.

Implemented as Node.js server application with Vue.js based interface.

Functionality

• User management and authentication
• Implementation of XS2A session
  • Exposing Polish API AS methods
  • Internal token and consent management - in memory storage
  • Web UI for PSU authentication and consent approval
  • Option to obtain approval without UI - for use in automated testing
• Implementation of Polish API
  • AIS Methods
  • PIS Methods
  • CAF Methods
• Sample data generation - using polish-api-generator
• UI for browsing PSU consents
• Service exposing internal data - for use in automated testing

Polish API Specification is licensed under CC BY 3.0 PL

polish-api-aspsp-mock's Issues

Implement 2-way-ssl

• Alternative
  • HTTPS Listener
  • Certificate from header
• Validate the client certificate
• Extract qsStatements from client certificate
• Deny access based on TPP roles

Implement JWS

• Signature on responses
• Signature verification on requests
• Flag to disable signature verification