Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
395d075
refactor/(customer): Make customerType and parentCustomerId optional
hongwei1 Feb 19, 2026
cd97e04
test/(connector): Update RestConnector_vMar2019 frozen metadata
hongwei1 Feb 19, 2026
fd26483
refactor/(auth): Add external user authentication fallback
hongwei1 Feb 19, 2026
bce60af
refactor/(api): Improve authentication error messages and remove debu…
hongwei1 Feb 19, 2026
05f7c75
Merge remote-tracking branch 'Hongwei/HEAD' into refactor/RemoveLiftP…
hongwei1 Feb 20, 2026
14b41a4
refactor/(api): Remove legacy web UI components and consolidate authe…
hongwei1 Feb 20, 2026
51820c7
refactor/(auth): Remove OAuth 1.0a support and consolidate authentica…
hongwei1 Feb 20, 2026
623acc8
refactor/(auth): Remove OAuth 1.0a signing implementation and replace…
hongwei1 Feb 20, 2026
d25bc82
refactor/(resources): Add ISO 4217 currency codes reference data
hongwei1 Feb 20, 2026
275076c
test(/api): Add CreateUserTest for v2.0.0 user creation and DirectLogin
hongwei1 Feb 20, 2026
1bf2aac
test/fixed the failed tests
hongwei1 Feb 21, 2026
3c08a70
test/fixed the failed tests - UserInvitationApiTest
hongwei1 Feb 21, 2026
1e3b0aa
test/fixed the failed tests - AuthenticationTypeValidationTest
hongwei1 Feb 21, 2026
f48bb8f
refactor/remove OAuth 1.0a implementation and related code
hongwei1 Feb 21, 2026
b5a65e8
test/removed htmlunit-driver
hongwei1 Feb 21, 2026
2e6f816
refactor/removed SiteMap
hongwei1 Feb 21, 2026
e8fc129
refactor/removed lift frontend code in boot
hongwei1 Feb 21, 2026
d92beda
refactor/removed html page for Admin and AuthUser
hongwei1 Feb 21, 2026
a158cde
refactor/removed Admin.scala
hongwei1 Feb 21, 2026
a57bd1d
refactor/removed html from AuthUser.scala
hongwei1 Feb 21, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@
target
obp-api/src/main/resources/*
!obp-api/src/main/resources/docs/
!obp-api/src/main/resources/media/
obp-api/src/test/resources/**
!obp-api/src/test/resources/frozen_type_meta_data
!obp-api/src/test/resources/logback-test.xml
Expand Down
50 changes: 37 additions & 13 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,9 @@ The OBP API abstracts away the peculiarities of each core banking system so that

Our tagline is: "Bank as a Platform. Transparency as an Asset".

The API supports [OAuth 1.0a](https://apiexplorer-ii-sandbox.openbankproject.com/glossary#OAuth%201.0a), [OAuth 2](https://apiexplorer-ii-sandbox.openbankproject.com/glossary#OAuth%202), [OpenID Connect OIDC](https://apiexplorer-ii-sandbox.openbankproject.com/glossary#OAuth%202%20with%20Google) and other authentication methods including [Direct Login](https://apiexplorer-ii-sandbox.openbankproject.com/glossary#Direct%20Login).
The API supports [OAuth 2](https://apiexplorer-ii-sandbox.openbankproject.com/glossary#OAuth%202), [OpenID Connect OIDC](https://apiexplorer-ii-sandbox.openbankproject.com/glossary#OAuth%202%20with%20Google), [Direct Login](https://apiexplorer-ii-sandbox.openbankproject.com/glossary#Direct%20Login), and other authentication methods.

**Note:** OAuth 1.0a support has been removed. Please use OAuth 2.0, OpenID Connect, or Direct Login for authentication.

## Documentation

Expand Down Expand Up @@ -459,18 +461,36 @@ We use 9 to run the API in production mode.

- You should now be able to browse to `localhost:8080` (or `yourIPaddress:8080`).

## Using OBP-API in different app modes
## Server Mode Configuration (Removed)

**IMPORTANT:** The `server_mode` configuration property has been completely removed from OBP-API.

OBP-API now operates exclusively as a backend API server. There is no configuration needed - the application automatically runs in API-only mode.

### What Changed

- ❌ `server_mode=portal` - Removed (no longer supported)
- ❌ `server_mode=apis` - Removed (no longer needed, this is now the default and only mode)
- ❌ `server_mode=apis,portal` - Removed (no longer supported)

### Migration

If your props file contains `server_mode`, you can safely remove it. The property is ignored.

1. `portal` => OBP-API as a portal i.e. without REST API.
2. `apis` => OBP-API as an _APIs_ app i.e. only REST APIs.
3. `apis,portal`=> OBP-API as portal and apis i.e. REST APIs and web portal.
**Before:**
```properties
server_mode=apis
```

- Edit your props file(s) to contain one of the next cases:
1. `server_mode=portal`
2. `server_mode=apis`
3. `server_mode=apis,portal`
**After:**
```properties
# server_mode property removed - no configuration needed
# OBP-API automatically runs in API-only mode
```

In case it is not defined, the default case is the 3rd one. For example, `server_mode=apis,portal`.
**For portal/UI functionality:** Deploy the separate [OBP-Portal](https://github.com/OpenBankProject/OBP-Portal) application.

For migration instructions, see `.kiro/specs/remove-lift-portal-pages/MIGRATION_GUIDE.md`

## Using Akka remote storage

Expand Down Expand Up @@ -554,7 +574,9 @@ Please refer to the [Code Generation](https://github.com/OpenBankProject/OBP-API

## Customize Portal WebPage

Please refer to the [Custom Webapp](obp-api/src/main/resources/custom_webapp/README.md) for links.
**DEPRECATED:** Portal functionality has been removed from OBP-API.

For UI customization, please use the separate [OBP-Portal](https://github.com/OpenBankProject/OBP-Portal) project.

## Using jetty password obfuscation with props file

Expand Down Expand Up @@ -679,7 +701,9 @@ There are 3 API endpoints related to webhooks:

## OpenID Connect

In order to enable an OIDC workflow at an instance of OBP-API portal app(login functionality) you need to set up the following props:
**Note:** OpenID Connect authentication is supported for API authentication. Portal login functionality has been moved to the separate [OBP-Portal](https://github.com/OpenBankProject/OBP-Portal) project.

In order to enable OIDC authentication for API access, you need to set up the following props:

```props
## Google as an identity provider
Expand All @@ -705,7 +729,7 @@ In order to enable an OIDC workflow at an instance of OBP-API portal app(login f
# openid_connect_2.button_text = Yahoo
```

Please note in the example above you MUST run OBP-API portal at the URL: http://127.0.0.1:8080
**Note:** The callback URL should match your OBP-API deployment URL (e.g., `http://127.0.0.1:8080/auth/openid-connect/callback`).

## OAuth 2.0 Authentication

Expand Down
11 changes: 0 additions & 11 deletions obp-api/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -179,12 +179,6 @@
<artifactId>cglib</artifactId>
<version>3.3.0</version>
</dependency>
<dependency>
<groupId>org.seleniumhq.selenium</groupId>
<artifactId>htmlunit-driver</artifactId>
<version>2.36.0</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
Expand Down Expand Up @@ -239,11 +233,6 @@
<artifactId>scala-library</artifactId>
<version>${scala.compiler}</version>
</dependency>
<dependency>
<groupId>oauth.signpost</groupId>
<artifactId>signpost-commonshttp4</artifactId>
<version>1.2.1.2</version>
</dependency>
<!-- https://mvnrepository.com/artifact/org.apache.pekko/pekko-http-core -->
<dependency>
<groupId>org.apache.pekko</groupId>
Expand Down
Loading