chapter ten

10 Financial-grade APIs

 

This chapter covers

  • What open banking is and what it means for the financial services industry
  • What FAPI is and how it helps us deliver highly secure APIs
  • Securing the authorization process with JWT-secured authorization requests and pushed authorization requests
  • Adding non-repudiation capabilities to APIs

In recent years, we have witnessed a revolution in the financial technology (fintech) space. We have seen the emergence of organizations like Plaid, Bud, TrueLayer, Yappily, Yodlee, Stripe, and others, that provide financial market infrastructure. Financial market infrastructure is a critical component of today’s economy that allows businesses to easily manage financial transactions via APIs. We have seen the emergence of so-called NeoBanks or challenger banks, which are banks that operate exclusively online. We have seen businesses provide banking-like services without having a banking license.

10.1 What is open banking?

10.2 What is FAPI?

10.3 Understanding FAPI’s attacker model

10.4 Securing APIs with FAPI 2.0’s security profile

10.5 Securing authorization requests

10.6 Message signing

10.7 Summary