Module fapi

auth_framework::server::security

Module fapi 

Source
Expand description

FAPI 2.0 (Financial-grade API) Security Profile Implementation

This module implements the Financial-grade API (FAPI) 2.0 Security Profile, which provides enhanced security requirements for high-risk scenarios like financial services.

§Security Features

  • Enhanced Request Security: JWS request object signing
  • Response Security: JWS response signing
  • Advanced Client Authentication: Enhanced mTLS and private key JWT
  • Threat Protection: JARM, DPoP, PAR mandatory
  • Enhanced Logging: Detailed audit trails

§FAPI 2.0 Requirements

  • Mutual TLS (mTLS) for client authentication
  • JWS request object signing (RFC 9101)
  • DPoP for sender constraining (RFC 9449)
  • Pushed Authorization Requests (PAR) (RFC 9126)
  • JWT Secured Authorization Response Mode (JARM)
  • Enhanced threat modeling and protection

Structs§

FapiAuthorizationResponse
FAPI 2.0 Authorization Response (JARM)
FapiConfig
FAPI 2.0 Configuration
FapiManager
FAPI 2.0 Security Profile Manager
FapiRequestObject
FAPI 2.0 Request Object Claims
FapiSession
FAPI 2.0 Session
FapiTokenResponse
FAPI 2.0 Token Response