OpenFinance
Development Portal

openFinance API Framework Extended Account Information Services (2.2)

The Berlin Group - A European Standards Initiative | info@: info@berlin-group.org | URL: https://www.berlin-group.org/

License: Creative Commons Attribution 4.0 International Public License

The core XS2A Interface as introduced above is already supporting Account Information Services (AIS) for current accounts and card reconciliation accounts. These services follow the functionality of online channels of the related ASPSP: Via the services, information on accounts, balances and transactions can be requested for the supported account types. Each request must refer to an underlying consent from the PSU that grants the TPP access to the requested information. For the envisaged Extended Services, the account information function of the openFinance API will go beyond account types defined by the core XS2A Interface. As new entities as a basis of information, the following are supported: * single cards (in contrast to card reconciliation accounts) * savings accounts * loan accounts * securities accounts. Note: Even if introduced for TPP related scenarios, the related premium payment services and related technical endpoints could also be offered in a direct access scenario e.g. for corporates of an ASPSP to request information on their corresponding accounts / cards directly.

List orders

GET /v2/securities-accounts/{account-id}/orders

Reads all orders that are still kept in the ASPSP's data base. The ASPSP may restrict the response values (e.g. restriction to all orders that are still active or all orders that were inactivated no earlier than last month). These restrictions must be documented by the ASPSP in its general documentation of the ASPSP's interface for securities.

Parameter Type Description
account-id string , required

This identification is denoting the addressed (card) account. The account-id is retrieved by using a "Read Account List" or "Read Card Account list" call. The account-id is the "resourceId" attribute of the account structure. Its value is constant at least throughout the lifecycle of a given consent.

Example: Text, maximum of 70 characters.

Allowed length: max: 70

Parameter Type Description
dateFrom string , optional

Conditional: Starting date (inclusive the date dateFrom) of the transaction list, mandated if no delta access is required and if bookingStatus does not equal "information". For booked transactions, the relevant date is the booking date. For pending transactions, the relevant date is the entry date, which may not be transparent neither in this API nor other channels of the ASPSP.

Example: 2020-01-01

Format: date

dateTo string , optional

End date (inclusive the data dateTo) of the transaction list, default is "now" if not given. Might be ignored if a delta function is used. For booked transactions, the relevant date is the booking date. For pending transactions, the relevant date is the entry date, which may not be transparent neither in this API nor other channels of the ASPSP.

Example: 2020-01-01

Format: date

orderStatus string , optional

Comma separated list of Order Status Codes. Restricts the result to orders that are currently assigned to one of the status values provided in this query parameter. If the parameter is not provided, orders are provided without restriction to their respective status.

Example: filled,partiallyFilled

Header Type Description
Digest string , optional

Integrity hash of the request body in the form SHA-256=<base64>. For an empty body, use the hash of an empty string. See Signing requests for how the Digest and signature are built.

Example: SHA-256=hl1/Eps8BEQW58FJhDApwJXjGY4nr1ArGDHIT25vq6A=

x-jws-signature string , optional

Detached JSON Web Signature over the signed request headers and body. See Signing requests for how it is constructed.

X-Request-ID string , required

Unique ID of the request, set by the initiating party and echoed back in the response.

Example: 99391c7e-ad88-49ec-a2ad-99ddcb1f7721

Format: uuid

API-Contract-ID string , optional

Might be mandated by the ASPSP, if a commercial agreement is needed for the usage of the service.

Example: 99435d7f-ad87-4aec-a2ae-99ddcb1f6555

Format: uuid

PSU-IP-Address string , optional

IP address of the PSU's device as forwarded by the TPP. If unavailable, use the IP address the TPP used for this request.

Example: 192.168.8.78

Format: ipv4

Consent-ID string , optional

Identifier of the consent that authorises this access, as returned when the consent was created.

Example: 123cons456

Allowed length: max: 70

Select a status code to see the structure and an example of the response.

Field Type Description
orders array[object] , optional

List of orders placed for this securities account.

account object , required

Identifier of the addressed account.

_links object , optional

A list of hyperlinks to be recognised by the TPP. Type of links admitted in this response: "first": Navigation link for paginated transaction lists. "next:" Navigation link for paginated transaction lists. "previous": Navigation link for paginated transaction lists. "last": Navigation link for paginated transaction lists