Funds Confirmation Consent - v3.1.3

  1. Overview
  2. Endpoints
    1. POST /funds-confirmation-consents
      1. Funds Confirmation Consent Status
      2. Status Flow
    2. GET /funds-confirmation-consents/{ConsentId}
      1. Funds Confirmation Consent Status
    3. DELETE /funds-confirmation-consents/{ConsentId}
  3. Data Model
    1. Funds Confirmation Consent - Request
      1. UML Diagram
      2. Data Dictionary
    2. Funds Confirmation Consent - Response
      1. UML Diagram
      2. Data Dictionary
    3. Data Payload - Enumerations
  4. Usage Examples
    1. POST - Funds Confirmation Consent
      1. Example with all permitted fields
        1. Request
        2. Response
    2. GET - Funds Confirmation Consent
      1. Example with all permitted fields
        1. Request
        2. Response
    3. DELETE - Funds Confirmation Consent
      1. Example with all permitted fields
        1. Request
        2. Response

Overview

The Funds Confirmation Consent resource is used by an CBPII to register an intent to confirm funds.

This resource description should be read in conjunction with a compatible Confirmation of Funds API Profile.

Endpoints

ResourceHTTP OperationEndpointMandatory ?ScopeGrant TypeMessage SigningIdempotency KeyRequest ObjectResponse Object
funds-confirmation-consentPOSTPOST /funds-confirmation-consentsMandatoryfundsconfirmationsClient CredentialsNoNoOBFundsConfirmationConsent1OBFundsConfirmationConsentResponse1
funds-confirmation-consentGETGET /funds-confirmation-consents/{ConsentId}MandatoryfundsconfirmationsClient CredentialsNoNoNAOBFundsConfirmationConsentResponse1
funds-confirmation-consentDELETEDELETE /funds-confirmation-consents/{ConsentId}MandatoryfundsconfirmationsClient CredentialsNoNoNANA

POST /funds-confirmation-consents

The API allows the CBPII to ask an ASPSP to create a new funds-confirmation-consent resource.

  • This endpoint allows the CBPII to propose a consent to be agreed between the ASPSP and PSU, to authorise the CBPII access to confirm funds are available.
  • The ASPSP creates the funds-confirmation-consent resource and responds with a unique ConsentId to refer to the resource.
  • Prior to calling the operation, the CBPII must have an access token issued by the ASPSP using a client credentials grant.

The PSU must authenticate with the ASPSP and agree the funds-confirmation-consent with the ASPSP, for the funds-confirmation-consent to be successfully setup.

The funds-confirmation-consent resource that is created successfully must have one of the following Status code-list enumerations:

 StatusStatus Description
1AwaitingAuthorisationThe Funds Confirmation Consent is awaiting agreement.

After consent has been agreed the funds-confirmation-consent resource may have these following statuses.

 StatusStatus Description
1RejectedThe Funds Confirmation Consent has been rejected.
2AuthorisedThe Funds Confirmation Consent has been successfully agreed.
3RevokedThe Funds Confirmation Consent has been revoked via the ASPSP interface.

Status Flow

This is the state diagram for the Status.

CoFStateFlow

GET /funds-confirmation-consents/{ConsentId}

A CBPII may optionally retrieve a funds-confirmation-consent resource that they have created to check its status.

Prior to calling the operation, the CBPII must have an access token issued by the ASPSP using a client credentials grant.

Once the PSU agrees the consent outlined in the funds-confirmation-consent resource, the Status of the funds-confirmation-consent resource will be updated with “Authorised”.

The available Status code-list enumerations for the funds-confirmation-consent resource are:

 StatusStatus Description
1RejectedThe Funds Confirmation Consent has been rejected.
2AwaitingAuthorisationThe Funds Confirmation Consent is awaiting agreement.
3AuthorisedThe Funds Confirmation Consent has been successfully agreed.
4RevokedThe Funds Confirmation Consent has been revoked via the ASPSP interface.

DELETE /funds-confirmation-consents/{ConsentId}

If the PSU revokes consent to confirm funds with the CBPII, the CBPII must delete the funds-confirmation-consent resource.

  • This is done by making a call to DELETE the funds-confirmation-consent resource as soon as is practically possible.
  • Prior to calling the operation, the CBPII must have an access token issued by the ASPSP using a client credentials grant.

Data Model

This data dictionary section gives the detail on the payload content.

The OBFundsConfirmationConsent1 object will be used for the following:

  • Request to POST /funds-confirmation-consents

UML Diagram

OBFundsConfirmationConsent1

Data Dictionary

NameOccurrenceXPathEnhancedDefinitionClassCodesPattern
OBFundsConfirmationConsent1 OBFundsConfirmationConsent1 OBFundsConfirmationConsent1  
Data1..1OBFundsConfirmationConsent1/Data OBFundsConfirmationConsentData1  
ExpirationDateTime0..1OBFundsConfirmationConsent1/Data/ExpirationDateTimeSpecified date and time the funds confirmation authorisation will expire. If this is not populated, the authorisation will be open ended.ISODateTime  
DebtorAccount1..1OBFundsConfirmationConsent1/Data/DebtorAccountUnambiguous identification of the account of the debtor to which a confirmation of funds consent will be applied.OBCashAccountDebtor4  
SchemeName1..1OBFundsConfirmationConsent1/Data/DebtorAccount/SchemeNameName of the identification scheme, in a coded form as published in an external list.OBExternalAccountIdentification4Code  
Identification1..1OBFundsConfirmationConsent1/Data/DebtorAccount/IdentificationIdentification assigned by an institution to identify an account. This identification is known by the account owner.Max256Text  
Name0..1OBFundsConfirmationConsent1/Data/DebtorAccount/NameThe account name is the name or names of the account owner(s) represented at an account level, as displayed by the ASPSP’s online channels. Note, the account name is not the product name or the nickname of the account.Max70Text  
SecondaryIdentification0..1OBFundsConfirmationConsent1/Data/DebtorAccount/SecondaryIdentificationThis is secondary identification of the account, as assigned by the account servicing institution. This can be used by building societies to additionally identify accounts with a roll number (in addition to a sort code and account number combination).Max34Text  

The OBFundsConfirmationConsentResponse1 object will be used for the following:

  • Response to POST /funds-confirmation-consents
  • Call to GET /funds-confirmation-consents/{ConsentId}

UML Diagram

OBFundsConfirmationConsentResponse1

Notes:

The OBFundsConfirmationConsentResponse1 object contains the same information as the OBFundsConfirmation1, but with additional fields:

  • ConsentId - to uniquely identify the funds-confirmation-consent resource.
  • Status.
  • StatusUpdateDateTime.
  • CreationDateTime.

Data Dictionary

NameOccurrenceXPathEnhancedDefinitionClassCodesPattern
OBFundsConfirmationConsentResponse1 OBFundsConfirmationConsentResponse1 OBFundsConfirmationConsentResponse1  
Data1..1OBFundsConfirmationConsentResponse1/Data OBFundsConfirmationConsentDataResponse1  
ConsentId1..1OBFundsConfirmationConsentResponse1/Data/ConsentIdUnique identification as assigned to identify the funds confirmation consent resource.Max128Text  
CreationDateTime1..1OBFundsConfirmationConsentResponse1/Data/CreationDateTimeDate and time at which the resource was created.ISODateTime  
Status1..1OBFundsConfirmationConsentResponse1/Data/StatusSpecifies the status of consent resource in code form.OBExternalRequestStatus1CodeAuthorised AwaitingAuthorisation Rejected Revoked 
StatusUpdateDateTime1..1OBFundsConfirmationConsentResponse1/Data/StatusUpdateDateTimeDate and time at which the resource status was updated.ISODateTime  
ExpirationDateTime0..1OBFundsConfirmationConsentResponse1/Data/ExpirationDateTimeSpecified date and time the funds confirmation authorisation will expire. If this is not populated, the authorisation will be open ended.ISODateTime  
DebtorAccount1..1OBFundsConfirmationConsentResponse1/Data/DebtorAccountUnambiguous identification of the account of the debtor to which a confirmation of funds consent will be applied.OBCashAccountDebtor4  
SchemeName1..1OBFundsConfirmationConsentResponse1/Data/DebtorAccount/SchemeNameName of the identification scheme, in a coded form as published in an external list.OBExternalAccountIdentification4Code  
Identification1..1OBFundsConfirmationConsentResponse1/Data/DebtorAccount/IdentificationIdentification assigned by an institution to identify an account. This identification is known by the account owner.Max256Text  
Name0..1OBFundsConfirmationConsentResponse1/Data/DebtorAccount/NameThe account name is the name or names of the account owner(s) represented at an account level, as displayed by the ASPSP’s online channels. Note, the account name is not the product name or the nickname of the account.Max70Text  
SecondaryIdentification0..1OBFundsConfirmationConsentResponse1/Data/DebtorAccount/SecondaryIdentificationThis is secondary identification of the account, as assigned by the account servicing institution. This can be used by building societies to additionally identify accounts with a roll number (in addition to a sort code and account number combination).Max34Text  

Data Payload - Enumerations

This section gives the definitions for enumerations used in the Confirmation of Funds APIs.

Code ClassNameDefinition
OBExternalRequestStatus1CodeAuthorisedThe funds confirmation consent has been successfully agreed.
OBExternalRequestStatus1CodeAwaitingAuthorisationThe funds confirmation consent is awaiting agreement.
OBExternalRequestStatus1CodeRejectedThe funds confirmation consent has been rejected.
OBExternalRequestStatus1CodeRevokedThe funds confirmation consent has been revoked via the ASPSP interface.

Usage Examples

POST - Funds Confirmation Consent

Example with all permitted fields

Request

Post Funds Confirmation Consent

POST /funds-confirmation-consents HTTP/1.1
Content-Type: application/json
Authorization: Bearer 1t1satruthun1v3rs4lly
Accept: application/json; charset=utf-8
x-fapi-auth-date: Mon, 13 Nov 2017 19:49:37 GMT    
x-fapi-customer-ip-address: 92.11.92.11
x-fapi-interaction-id: hook5i13-ntIg-4th3-rP41-3ro535touch3
{
  "Data": {
    "DebtorAccount": {
      "SchemeName": "UK.OBIE.IBAN",
      "Identification": "GB76LOYD30949301273801",
      "SecondaryIdentification": "Roll 56988"
    },
    "ExpirationDateTime": "2017-05-02T00:00:00+00:00"
  }
}
Response

Post Funds Confirmation Consent Response

HTTP/1.1 201 Created
Content-Type: application/json
x-fapi-interaction-id: hook5i13-ntIg-4th3-rP41-3ro535touch3
{
  "Data": {
    "ConsentId": "88379",
    "CreationDateTime": "2017-05-02T00:00:00+00:00",
    "Status": "AwaitingAuthorisation",
    "StatusUpdateDateTime": "2017-05-02T00:00:00+00:00",
    "ExpirationDateTime": "2017-05-02T00:00:00+00:00",
    "DebtorAccount": {
      "SchemeName": "UK.OBIE.IBAN",
      "Identification": "GB76LOYD30949301273801",
      "SecondaryIdentification": "Roll 56988"
    }
  },
  "Links": {
    "Self": "https://api.alphabank.com/open-banking/v3.1/cbpii/funds-confirmation-consents/88379"
  },
  "Meta": {}
}

Example with all permitted fields

Request

GET Funds Confirmation Consent Request

GET /funds-confirmation-consents/88379 HTTP/1.1
Authorization: Bearer Jhingapulaav
x-fapi-interaction-id: 93bac548-d2de-4546-b106-880a5018460d
Accept: application/json
Response

GET Funds Confirmation Consent Response

HTTP/1.1 200 OK
x-fapi-interaction-id: 93bac548-d2de-4546-b106-880a5018460d
Content-Type: application/json
{
  "Data": {
    "ConsentId": "88379",
    "CreationDateTime": "2017-05-02T00:00:00+00:00",
    "Status": "AwaitingAuthorisation",
    "StatusUpdateDateTime": "2017-05-02T00:00:00+00:00",
    "ExpirationDateTime": "2017-05-02T00:00:00+00:00",
    "DebtorAccount": {
      "SchemeName": "UK.OBIE.IBAN",
      "Identification": "GB76LOYD30949301273801",
      "SecondaryIdentification": "Roll 56988"
    }
  },
  "Links": {
    "Self": "https://api.alphabank.com/open-banking/v3.1/cbpii/funds-confirmation-consents/88379"
  },
  "Meta": {}
}

Example with all permitted fields

Request

DELETE Funds Confirmation Consent Request

DELETE /funds-confirmation-consents/88379 HTTP/1.1
Authorization: Bearer Sarsonkasaag
x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT
x-fapi-customer-ip-address: 104.25.212.99
x-fapi-interaction-id: 93bac548-d2de-4546-b106-880a5018460d
Response

DELETE Funds Confirmation Consent Response

HTTP/1.1 204 No Content
x-fapi-interaction-id: 93bac548-d2de-4546-b106-880a5018460d