Implements secure, compliant Open Banking integrations and consent lifecycle management using FAPI standards.
This skill provides a specialized framework for developers building fintech applications that interact with financial institution APIs. It offers standardized patterns for FAPI 1.0 Advanced authorization flows, secure consent persistence, proactive token renewal, and idempotent webhook handling. By enforcing best practices and identifying common anti-patterns—such as plaintext token storage or non-compliant payment flows—it ensures that applications meet the rigorous security requirements of UK Open Banking, PSD2, and the Berlin Group standards.
주요 기능
01Detailed identification of fintech-specific security anti-patterns
02Secure webhook handling with JWS signature verification
