[FEAT] [CONNECTOR: NORDEA] Implement SEPA Bank Debit

[pixincreate]

Relevant Docs

• Access Authorization API (To get Access Token)
• Payments API SEPA Credit Transfer
• Payment Common API (I assume this doc gets updated first often)
• Nordea developer FAQ

Digest and Signature creation Docs

• Digest creation and calculation FAQ
• eIDAS certificate
• Generation of Signature (postman JavaScript code)

Testing

• Nordea Playground (Try API Console): https://developer.nordeaopenbanking.com/console/
• Personal API Postman collection v5
• Personal API Postman collection v4

[pixincreate]

They deprecated Nordea SEPA Personal v4 API today morning:

At present, everything in their is a chaos. In fact, SEPA endpoints are not clear. I cannot test it either.

[pixincreate]

• AccessToken flow: 3 step process:
  • /authorize endpoint with relevant body complaint with v5
    • code in response
  • /authorize/token endpoint with:
    • field code and grant_type set to authorization_code
      • returns access_token and refresh_token
    • field refresh_token and grant_type set to refresh_token
      • returns access_token and refresh_token
• Payments: 2 step process
  • /sepa-credit-transfer(s) to initiate payment
  • /sepa-credit-transfer(s)/confirm to confirm the payment
• PUT, PATCH, POST: Requires Digest (Base64 encoded Sha256 hashed request body)
• In Sandbox environment, Signature verification can be skipped by passing SKIP_SIGNATURE_VALIDATION_FOR_SANDBOX instead

[pixincreate]

Signing Doc: eIDAS_signing.md