- Major new release
- Now using OpenAPI 3.0 (upgraded from Swagger 2.0)
- Updated
AccountSubType
codes - Updated length of resource Id fields from 40 to 128 characters
- Updated phone number (used in
Phone
andMobile
data fields) regular expression - Statements filtering updated and corrected
- Patch release to update all HTTP error responses to include standard error body. This aligns with the documented requirement and Technical Working Group decision 029.
- Patch release to add
additionalProperties: false
to BECSRemittance DebtorReference and CreditorReference sub-schemas. This prevents the possibility of additional JSON member values being supplied
- No new changes to Swagger for v2.3.0
- No new changes to Swagger for v2.2.0 - as changes for the version are on scoping mandatory endpoint functionality
- New error code QueryParam.Invalid
- Updated scope definition for accounts that are accessible via the API
- Removed ReadPAN permission as per Technical Decision - 025 - ReadPAN Permission Code Changes
- Added MaskedCardNumber as new SchemeName enumeration for the account identification object
- Patch update to Swagger specification to include documented query parameters.
Incorporate changes in preparation for v2.0.0 release, including:
- Version bump to v2.0.0 and URL to v2.0
- x-fapi-customer-last-logged-time updated to x-fapi-auth-date (per latest FAPI spec). Aligned definition of date type (per OBIE v3.1.2 spec)
- Content-Type aligned with Accept header rewording; updated Content-Type to Mandatory (align with OBIE v3.1.2)
- Added x-customer-user-agent (agreed for NZ v1.0 spec, but not documented)
- Added x-merchant-ip-address (agreed for NZ v1.0 spec, but not documented)
- 415 (Unsupported Media Type) for unsupported request payloads (per OBIE v3.1.2) - was not documented in v1.0 spec
- 503 (Service Unavailable) for deprecated resources (per OBIE v3.1.2)
- ErrorResponseStructure (align with v3.1.2 OBIE but reworded)
- Updated DeliveryAddress class in NZRisk1 to OBPostalAddress8 to align with Technical Decision - 009 - Standardising Address Objects
- Agreed error codes as per Technical Decision - 003 - Error Codes
- References to "account request" to "account access consent"
- Updated third_party_client_credential scope to accounts based on Technical Decision - 021 - OAuth
Incorporate changes in preparation for v1.0.0 release, including:
- Version bump to v1.0.0 and URL to v1.0
- Removed
501 Not Implemented
from/account-requests/{AccountRequestId}
and/accounts/{AccountId}/transactions
- Update
PaymentLinks
example to usev1.0
in path - Added new risk HTTP headers
x-merchant-ip-address
andx-customer-user-agent
- Added new fields
Risk
object as per the Risk Fields page in confluence documentation - Remove 'QtrDay' in Standing Order Frequency
- Update
ReadPartyPSU
toReadPartyAuthUser
- Removed
OB: reference
- Replaced UK actor names (ASPSP, TPP, PSU) with NZ names (API Provider, Third Party, Customer)
- Replaced
EquivalentAmount
withCurrencyExchange
Incorporate upstream V2.0 changes.
- Basepath changed to /open-banking-nz/v0.3
- Added tags to group endpoints
- Refactored Meta to definitions and referenced
- Fixed balances reference and description
- Refactored parameters and objects similar to upstream
- Added Offers, Party, Statements, Scheduled Payments endpoints
- Scheduled Payments has minor changes to use BECSRemittance, BECSElectronicCredit
- Updated TransactionModel to reflect undocumented changes to Transactions structure
- Not listed in Key changes
- Updated AccountModel to reflect undocumented changes
- Updated Account Requests to reflect undocumented changes
- Updated Beneficiaries to reflect undocumented changes
- Incorporated extensive ProductModel changes
- Updated StandingOrders to reflect undocumented changes
- Added 501 response to new endpoints (reflecting not mandatory)
Removed IBAN and Sort Code from AccountSchemeModel - not relevant to NZ market.
- Altered
Reference
andTransactionReference
fields to use BECSRemittance (alignment with Payment API)- This affects Transactions, Beneficiaries and StandOrders
- Version bump to v0.2.0 indicating re-inclusion of OpenID Connect into authorisation flow
- Basepath changed to /open-banking-nz/v0.2
- Minor correction to enums where 'BECSElectronicCredit' was erroneously 'BECS Electronic Credit' (enum values should not have spaces)
Changing URL to open-banking-nz
- Refactored the following to models and referenced from API paths:
- Transaction (TransactionModel)
- Beneficiary (BeneficiaryModel)
- Standing Orders (StandingOrderModel)
- Products (ProductModel)
- Direct Debits (DirectDebitModel)
- Added 501 response code to specification for endpoints not in MVP scope
- Added account number format description of 2-4-7-2 hyphen-delimited as recommended by Payments NZ working group and accepted by standards sub-group on 4/05/2018. This has been added to both Debtor and Creditor account identifiers in OpenAPI specification
- Creditor Account updated to reflect BECS format accepted (StandingOrderModel, BeneficiaryModel)
- Open Issue reference fields in Standing Orders and Beneficiaries are single field, 35 max length. Should these be updated to match BECSRemittance of Payment API?
- Changed base path to /open-banking/v0.1
- Version bump specification to v0.1.0 to reflect MINOR change to stabilise for pilot
- Added AccountRequestResponseModel - this model wraps the AccountRequestModel (model of account access requests) and adds the required response fields. Previously this was done through read-only attributes, however this causes semantic error when used with 'required'. The AccountRequestsResponseModel is syntactically equivalent, allows for required fields and removes the error condition.
- Updated info section (contact, licence info, terms of service)
- Corrected 200 response in GET /accounts/{AccountId} - now users PaymentLinks (previously not actually included)
- For discussion: used additional 'link' in GET /accounts and GET /accounts/{AccountId} to indicate account is valid for making payments (see PaymentLinks model in specification)
- Created models in 'definitions' section:
- BalanceModel
- AccountModel using AccountSchemeModel
- AccountSchemeModel - enum that allows 'BECS Electronic Credit' - NZ bank account numbers
- AccountRequestModel
- Links
- PaymentLinks
- Updated GET /accounts and GET /accounts/{AccountId} to use AccountModel and PaymentLinks
- Updated GET /accounts/{AccountId}/balances to use BalanceModel and Links (and since this is referred to in GET /balances this is also consistent
- Updated POST /account-requests request and response to use AccountRequestModel
- Updated GET /account-requests to use AccountRequestModel
- Updated request headers to set JWS signature and financial institution identifier as optional
- Left all other resources intact and unchanged (as per MVP directive) - could benefit from resource models being included in 'definitions later'