FAPI-FINANCIAL-API

Hardened OAuth profile for finance.

Definition

FAPI 1.0 (Final, January 2021) requires mTLS or private_key_jwt for client auth, PAR (Pushed Authorization Requests), Signed Response, JARM. FAPI 2.0 (2024) includes DPoP replacing mTLS. Mandatory OBIE UK, Open Finance Brasil, OAuth Profile Australia.

Origin

OpenID Foundation Financial-grade API WG ; FAPI 1.0 Final January 2021 ; FAPI 2.0 March 2024.

Example in context

UK fintech Monzo configures Open Banking APIs as FAPI Advanced — mTLS + signed JARM + PAR.

Related terms

• DPoP — FAPI 2.0 pivot.