tppVerifier
TPP Verifier is an open-source API for automated verification and validation of Third Party Providers (TPPs) in the context of Open Banking and PSD2. It supports the validation of QSealC and QWAC certificates, ensuring compliance with regulatory requirements and secure financial data exchange.
- Open Banking TPP (Third Party Provider) verification
- PSD2 compliance: Validates QSealC and QWAC certificates
- EBA registry integration: Checks TPP IDs against the official registry
- Certificate chain validation: Verifies against trusted root CAs
- REST API: Simple endpoint for certificate verification
- Supports both QSealC and QWAC
Find the source code and more information on GitHub.
How it works
- Parsing the provided QSealC or QWAC certificate
- Extracting the TPP ID from the certificate's organization identifier
- Checking the TPP ID against the EBA registry
- Verifying the certificate chain against trusted root certificates
- Returning TPP information, scopes, and certificate status
See the README on GitHub for API usage, deployment, and more details.