OpenID Foundation Financial-grade API

This is the official repository for OpenID Foundation Financial-grade API (FAPI) Working Group.

What is this repository for?

• Financial-grade API
  • Part 1: Baseline Security Profile
  • Part 2: Advanced Security Profile
  • Client Initiated Backchannel Authentication Profile
  • JWT Secured Authorization Response Mode for OAuth 2.0 (JARM)
  • Implementation and Deployment Advice
• Financial-grade API Version 2.0
  • Baseline Profile
  • Advanced Profile
  • Attacker Model
  • Grant Management
• Other documents
  • Cross-Browser Payment Initiation Attack

You can find the overview and rationale of the working group at the WG page.

Contribution guidelines

• You MUST Execute Contributor Agreement either by
  • Electronic Signature and notify openid-specs-fapi-owner@lists.openid.net; OR
  • print this PDF and fill, sign, scan, and send it to openid-specs-fapi-owner@lists.openid.net.
• You MUST file an issue to the issue tracker before contributing a code.
• You MUST test that the contributed code compiles without error.

Who do I talk to?

• The chairs of the WG can be reached at openid-specs-fapi-owner@lists.openid.net