Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Code Block
languagejs
{
    "PROD":{                    // This is the base element, and needs to match whatever is recorded in the CWP 'v2.env', you can have multiple here and the right one will be picked
        "QWAC":true,            // Enforces QWAC Cert Check
        "QSealC":false,         // Enforces QSealC check
        "rateLimit":10,         // Rate limit of how many of the same call per second
        "blackout":30,          // If the rate limit is reached, the amount in seconds of the blackout.
        "SCAlimit":50.00,       // SCA limit for payments, above this value SCA is needed
        "mock":true,            // Default modus of the installed solution pack
        "EBAcheck":true,        // switches the checks TPP  against the EBA registry
        "recurring" : 15,       // maximum numbers of accesses without PSU being active
        "validUntilOffset":90,  // maximum number of days a consent stays valid
        "logName":"psd2",       // Name of the log package (log4j)
        "expiry":{
			"consent":300,		//(4.0)Number of seconds that a consent in "received" is valid for
			"paymentid":300		//(4.0)Number of seconds that a paymentid in "received" is valid for
		},
        "BE":{                  // Back End details
            "mock":"https://localhost:8443", // target endpoint for the mock bank backend
            "pisp":{
                    "pisp_url":"<someurl>",
                    "pisp_usr":"<someusername>",
                    "pisp_usr":"<somepasswordreference>" // !!This is NOT the password itself but the name of the password variable stored securely
                    "},
            "aisp":"<someurl>", // If there is no requirement for a username or password, the url can be inserted directly
            "piisp":"<someurl>"
        },
        "auth": {
            "embedded" :false,  // is embedded flow allowed ?
            "redirect": true,   // is redirect flow allowed ?
            "decoupled":true    // is decoupled flow allowed ?
        },
        "A2S_BE":{              //example of extension
            "A2S_url":"https://.../BusinessService",
            "A2S_un":"myuser",
            "A2S_pwd":"Password!"
        },
        "extra":{               // list of optional fields to complete or extend compliance
            "extension": "OB",  // This is an optional field that changes the behaviour of the PSD2, the possible options are : "OB" for OpenBanking and "BOI" For Bank of Israel
            "mock":{
                "_links":{
                        "scaRedirect": "/mock/bank/authentication/<authorisationid>"
                },
                "headers":[]    // If included, it enforces any additional headers that the ASPSP might require from the TPP.
            },
            "web":{
                "_links":{
                    "scaRedirect":"https://login.bank.com/mocklogin/<authorisationid>"
                },
                "headers":[
                    "PSU-IP-Address"
                ]
            },
            "app":{
                "_links":{
                    "scaRedirect":"https://login.bank.com/mocklogin"
                },
                "headers":[
                    "PSU-Geo-Location",
                    "PSU-Device-ID"
                ]
            }
        }
    }
}