{ "openapi": "3.1.0", "info": { "title": "Service Banking BFF Service", "version": "e4c6ef99c3f9", "summary": "DgCore platform API surface for the Service Banking BFF Service domain.", "description": "The Service Banking BFF Service domain: 16 operations across 14 resource groups.\n\nThis is the published contract, not a description of a running deployment: the environment\nyou were granted may carry operations this document does not, and may not carry every\noperation listed here." }, "servers": [ { "url": "https://{gateway}/service-banking-bff-service", "description": "The full route is `https:///service-banking-bff-service/`. The service segment is fixed; the gateway host is the one you were granted. Substitute it below.", "variables": { "gateway": { "default": "gateway.example" } } } ], "tags": [ { "name": "central-bank-transaction-limits", "description": "Operations addressed under `/central-bank-transaction-limits` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "generate-pwf-otp", "description": "Operations addressed under `/generate-pwf-otp` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "password-policies", "description": "Operations addressed under `/password-policies` — 2 operations.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "pwf-create-document", "description": "Operations addressed under `/pwf-create-document` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "pwf-login", "description": "Operations addressed under `/pwf-login` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "pwf-money-transfer-to-other-account", "description": "Operations addressed under `/pwf-money-transfer-to-other-account` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "pwf-outgoing-transfer-ui-bpm", "description": "Operations addressed under `/pwf-outgoing-transfer-ui-bpm` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "reset-pwf-otp", "description": "Operations addressed under `/reset-pwf-otp` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "slip-transactions", "description": "Operations addressed under `/slip-transactions` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "transactions", "description": "Operations addressed under `/transactions` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "unsigned-required-documents", "description": "Operations addressed under `/unsigned-required-documents` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "users", "description": "Operations addressed under `/users` — 2 operations.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "verify-email-otp", "description": "Operations addressed under `/verify-email-otp` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "name": "verify-sms-otp-and-create-potential-user", "description": "Operations addressed under `/verify-sms-otp-and-create-potential-user` — 1 operation.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } } ], "paths": { "/api/central-bank-transaction-limits": { "get": { "operationId": "service-banking-redirect-get-central-bank-transaction-limit-list", "tags": [ "central-bank-transaction-limits" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-redirect-get-central-bank-transaction-limit-list", "description": "Request and response fields are declared on the routing target `get-central-bank-transaction-limit-list`; this entry declares none of its own.", "parameters": [ { "name": "filter", "in": "query", "required": false, "schema": { "type": "object", "x-aura-field-code": "filter" } }, { "name": "orderBy", "in": "query", "required": false, "schema": { "type": "string", "x-aura-field-code": "orderBy" } }, { "name": "orderSort", "in": "query", "required": false, "schema": { "type": "string", "x-aura-field-code": "orderSort" } }, { "name": "pageIndex", "in": "query", "required": false, "schema": { "type": "integer", "format": "int32", "x-aura-field-code": "pageIndex" } }, { "name": "pageSize", "in": "query", "required": false, "schema": { "type": "integer", "format": "int32", "x-aura-field-code": "pageSize" } } ], "x-aura-request-binding": { "method": "GET", "admits": [ "route", "query", "header", "claim" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 0, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 5 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. An exact, uniquely bound route registration classifies this response as a collection.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-redirect-get-central-bank-transaction-limit-list", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/central-bank-transaction-limits", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-capabilities": { "filtering": true, "ordering": true, "paging": true, "note": "Platform-provided behaviours declared on the routing target `get-central-bank-transaction-limit-list`, which is where this operation's contract lives — the same row the response shape is derived from. The catalog does not record the parameter names the platform uses for them, so they are not rendered as parameters here." }, "x-aura-code-response": { "state": "structure", "declared_type": "IEnumerable", "envelopes": [ "IEnumerable" ], "payload": "CentralBankTransactionLimitDto", "collection": true, "members": [ { "name": "LimitType", "declared_type": "int", "nullable": false, "collection": false }, { "name": "Description", "declared_type": "string", "nullable": false, "collection": false }, { "name": "MinAmountLimit", "declared_type": "decimal?", "nullable": true, "collection": false }, { "name": "MaxAmountLimit", "declared_type": "decimal", "nullable": false, "collection": false } ], "naming": "Member names are the service's declaration names." }, "x-aura-response-contract-disagreement": { "state": "catalog-union-withheld-for-exact-code-contract", "note": "An exact, uniquely bound route registration classifies this response as a collection.", "code_response_state": "structure", "code_cardinality": "collection", "catalog_cardinality": "undeclared", "catalog_success_status": 200 } } }, "/api/generate-pwf-otp": { "post": { "operationId": "service-banking-bff-redirect-generate-pwf-otp", "tags": [ "generate-pwf-otp" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-redirect-generate-pwf-otp", "description": "Request and response fields are declared on the routing target `generate-pwf-otp`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "applicationName": { "type": "string", "x-aura-field-code": "applicationName" }, "citizenId": { "type": "string", "x-aura-field-code": "citizenId" }, "password": { "type": "string", "x-aura-field-code": "oldPassword", "x-aura-encrypted": true } }, "required": [ "applicationName", "citizenId", "password" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 3, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. An exact, uniquely bound route registration classifies this response as a single-record.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-redirect-generate-pwf-otp", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/generate-pwf-otp", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "structure", "declared_type": "PwfOtpDto", "payload": "PwfOtpDto", "collection": false, "members": [ { "name": "EncryptedCredentials", "declared_type": "string", "nullable": false, "collection": false }, { "name": "StateToken", "declared_type": "string", "nullable": false, "collection": false }, { "name": "CustomerId", "declared_type": "int", "nullable": false, "collection": false }, { "name": "FirstName", "declared_type": "string", "nullable": false, "collection": false }, { "name": "LastName", "declared_type": "string", "nullable": false, "collection": false }, { "name": "PhoneNumber", "declared_type": "string", "nullable": false, "collection": false }, { "name": "Username", "declared_type": "string", "nullable": false, "collection": false }, { "name": "SmsSuccess", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "IsTempPassword", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "CustomerIdGuid", "declared_type": "Guid", "nullable": false, "collection": false }, { "name": "Success", "declared_type": "bool", "nullable": false, "collection": false } ], "naming": "Member names are the service's declaration names." }, "x-aura-response-contract-disagreement": { "state": "catalog-union-withheld-for-exact-code-contract", "note": "An exact, uniquely bound route registration classifies this response as a single-record.", "code_response_state": "structure", "code_cardinality": "single-record", "catalog_cardinality": "undeclared", "catalog_success_status": 200 } } }, "/api/password-policies": { "get": { "operationId": "service-banking-bff-service-redirect-get-password-policy-list", "tags": [ "password-policies" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-get-password-policy-list", "description": "Invokes the `service-banking-bff-service-redirect-get-password-policy-list` service definition through `GET /api/password-policies`.\n\nRequest and response fields are declared on the routing target `get-password-policy-list`; this entry declares none of its own.", "parameters": [ { "name": "filter", "in": "query", "required": false, "schema": { "type": "object", "properties": { "code": { "x-aura-type": "unresolved" }, "expression": { "type": "string", "x-aura-field-code": "expression" }, "parameters": { "type": "object", "properties": { "comparer": { "type": "object", "x-aura-field-code": "comparer" }, "count": { "type": "integer", "format": "int32", "x-aura-field-code": "count" }, "item": { "type": "object", "x-aura-field-code": "item" }, "keys": { "x-aura-type": "unresolved" }, "values": { "x-aura-type": "unresolved" } }, "x-aura-type": "unresolved" } }, "x-aura-field-code": "filter" } }, { "name": "orderBy", "in": "query", "required": false, "schema": { "type": "string", "x-aura-field-code": "orderBy" } }, { "name": "orderSort", "in": "query", "required": false, "schema": { "type": "string", "x-aura-field-code": "orderSort" } }, { "name": "pageIndex", "in": "query", "required": false, "schema": { "type": "integer", "format": "int32", "x-aura-field-code": "pageIndex" } }, { "name": "pageSize", "in": "query", "required": false, "schema": { "type": "integer", "format": "int32", "x-aura-field-code": "pageSize" } } ], "x-aura-request-binding": { "method": "GET", "admits": [ "route", "query", "header", "claim" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 0, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 5 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. An exact, uniquely bound route registration classifies this response as a collection.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-get-password-policy-list", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/password-policies", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-capabilities": { "filtering": true, "ordering": true, "paging": true, "note": "Platform-provided behaviours declared on the routing target `get-password-policy-list`, which is where this operation's contract lives — the same row the response shape is derived from. The catalog does not record the parameter names the platform uses for them, so they are not rendered as parameters here." }, "x-aura-code-response": { "state": "structure", "declared_type": "IEnumerable", "envelopes": [ "IEnumerable" ], "payload": "PasswordPolicyDto", "collection": true, "members": [ { "name": "Id", "declared_type": "Guid", "nullable": false, "collection": false }, { "name": "UserType", "declared_type": "int", "nullable": false, "collection": false }, { "name": "MinDigitRequired", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MinLength", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MinSpecialLetter", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MinUppercaseLetter", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MinLowercaseLetter", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MaxLength", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictSequentialNumber", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "SequentialNumberCharacterCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictRepeating", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "MaxRepeatingCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "CheckPasswordHistory", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "PasswordHistoryCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictBirthDate", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "RestrictCustomerNumber", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "RestrictCitizenId", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "RestrictSameNumber", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "MaxSameNumberCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictSequentialArray", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "SequentialArrayCharacterCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictMobileKeyboardNumber", "declared_type": "bool", "nullable": false, "collection": false } ], "naming": "Member names are the service's declaration names." }, "x-aura-response-contract-disagreement": { "state": "catalog-union-withheld-for-exact-code-contract", "note": "An exact, uniquely bound route registration classifies this response as a collection.", "code_response_state": "structure", "code_cardinality": "collection", "catalog_cardinality": "undeclared", "catalog_success_status": 200 } } }, "/api/password-policies/{id}": { "get": { "operationId": "service-banking-bff-service-redirect-get-password-policy-by-id", "tags": [ "password-policies" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-get-password-policy-by-id", "description": "Invokes the `service-banking-bff-service-redirect-get-password-policy-by-id` service definition through `GET /api/password-policies/{id}`.\n\nRequest and response fields are declared on the routing target `get-password-policy-by-id`; this entry declares none of its own.", "parameters": [ { "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid", "x-aura-field-code": "id" } } ], "x-aura-request-binding": { "method": "GET", "admits": [ "route", "query", "header", "claim" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 0, "claim": 0, "form": 0, "header": 0, "path": 1, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. An exact, uniquely bound route registration classifies this response as a single-record.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-get-password-policy-by-id", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/password-policies/{id}", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "structure", "declared_type": "PasswordPolicyDto", "payload": "PasswordPolicyDto", "collection": false, "members": [ { "name": "Id", "declared_type": "Guid", "nullable": false, "collection": false }, { "name": "UserType", "declared_type": "int", "nullable": false, "collection": false }, { "name": "MinDigitRequired", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MinLength", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MinSpecialLetter", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MinUppercaseLetter", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MinLowercaseLetter", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "MaxLength", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictSequentialNumber", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "SequentialNumberCharacterCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictRepeating", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "MaxRepeatingCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "CheckPasswordHistory", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "PasswordHistoryCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictBirthDate", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "RestrictCustomerNumber", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "RestrictCitizenId", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "RestrictSameNumber", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "MaxSameNumberCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictSequentialArray", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "SequentialArrayCharacterCount", "declared_type": "int?", "nullable": true, "collection": false }, { "name": "RestrictMobileKeyboardNumber", "declared_type": "bool", "nullable": false, "collection": false } ], "naming": "Member names are the service's declaration names." }, "x-aura-response-contract-disagreement": { "state": "catalog-union-withheld-for-exact-code-contract", "note": "An exact, uniquely bound route registration classifies this response as a single-record.", "code_response_state": "structure", "code_cardinality": "single-record", "catalog_cardinality": "undeclared", "catalog_success_status": 200 }, "x-aura-error-codes": { "note": "Error codes this operation is known to raise, read from the handler and its validators. `message_available` says whether the error catalog carries text for a code at this ref — many are raised by code that has no seeded definition here, and for those the code itself is all the platform publishes. This is what was FOUND, not a closed list: an operation may raise a code through a path this scan does not follow.", "codes": [ { "code": "ERR_CORE_164", "status": 400, "message": { "ar": "لم يتم العثور على معرف سياسة كلمة المرور", "en": "Password Policy cannot be found.", "tr": "Parola İlkesi bulunamadı." }, "message_available": true, "constant_name": "PASSWORD_POLICY_ID_IS_NOT_FOUND" } ] } } }, "/api/pwf-create-document": { "post": { "operationId": "service-banking-bff-service-redirect-pwf-create-document", "tags": [ "pwf-create-document" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-pwf-create-document", "description": "Request and response fields are declared on the routing target `pwf-create-document`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "applicationName": { "type": "string", "x-aura-field-code": "applicationName" }, "customerId": { "type": "integer", "format": "int32", "x-aura-field-code": "pwfCustomerId" }, "ownerKey": { "type": "string", "x-aura-field-code": "ownerKey" }, "referenceToken": { "type": "string", "x-aura-field-code": "referenceToken" }, "templateDesignId": { "type": "string", "format": "uuid", "x-aura-field-code": "templateDesignId" } }, "required": [ "applicationName", "customerId", "ownerKey", "referenceToken", "templateDesignId" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 5, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The schema is an `anyOf` over three envelopes: the record, a bare array of it, and a page `{total, data[]}` carrying the same record.", "content": { "application/json": { "schema": { "description": "Response whose record fields are declared but whose outer cardinality is not established by the catalog.", "anyOf": [ { "type": "object", "properties": { "status": { "type": "integer", "format": "int32", "x-aura-field-code": "status" } } }, { "type": "array", "description": "Bare-array response possibility.", "items": { "type": "object", "properties": { "status": { "type": "integer", "format": "int32", "x-aura-field-code": "status" } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "type": "object", "description": "Paged response envelope observed on the BFF response path.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "properties": { "data": { "type": "array", "description": "Response records carried by this page.", "items": { "type": "object", "properties": { "status": { "type": "integer", "format": "int32", "x-aura-field-code": "status" } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "total": { "type": "integer", "format": "int64", "description": "Total matching records, ignoring paging.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } } }, "required": [ "data" ] } ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-pwf-create-document", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/pwf-create-document", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "no-code-endpoint", "note": "No endpoint registration was found at this address." } } }, "/api/pwf-login": { "post": { "operationId": "service-banking-bff-service-redirect-pwf-login", "tags": [ "pwf-login" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-pwf-login", "description": "Request and response fields are declared on the routing target `pwf-verify-and-login`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "applicationNames": { "type": "array", "items": { "type": "string", "x-aura-field-code": "applicationNames" } }, "loginOtp": { "type": "string", "x-aura-field-code": "loginOtp" }, "password": { "type": "string", "x-aura-field-code": "keycloak_password", "x-aura-encrypted": true }, "userIdentifier": { "type": "string", "x-aura-field-code": "userIdentifier" } }, "required": [ "applicationNames", "loginOtp", "password", "userIdentifier" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 4, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. An exact, uniquely bound route registration classifies this response as a single-record.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-pwf-login", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/pwf-login", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-request-contract": { "state": "structure", "note": "The fields a caller sends.", "members": [ { "name": "UserIdentifier", "declared_type": null, "nullable": false, "collection": false }, { "name": "Password", "declared_type": null, "nullable": false, "collection": false }, { "name": "LoginOtp", "declared_type": null, "nullable": false, "collection": false } ] }, "x-aura-code-response": { "state": "structure", "declared_type": "PwfLoginDto", "payload": "PwfLoginDto", "collection": false, "members": [ { "name": "AccessToken", "declared_type": "string", "nullable": false, "collection": false }, { "name": "ExpiresIn", "declared_type": "int", "nullable": false, "collection": false }, { "name": "RefreshExpiresIn", "declared_type": "int", "nullable": false, "collection": false }, { "name": "RefreshToken", "declared_type": "string", "nullable": false, "collection": false }, { "name": "TokenType", "declared_type": "string", "nullable": false, "collection": false }, { "name": "SessionState", "declared_type": "string", "nullable": false, "collection": false }, { "name": "Scope", "declared_type": "string", "nullable": false, "collection": false }, { "name": "IsRequiredDocument", "declared_type": "bool", "nullable": false, "collection": false }, { "name": "IsNonRequiredDocument", "declared_type": "bool", "nullable": false, "collection": false } ], "naming": "Member names are the service's declaration names." }, "x-aura-response-contract-disagreement": { "state": "catalog-union-withheld-for-exact-code-contract", "note": "An exact, uniquely bound route registration classifies this response as a single-record.", "code_response_state": "structure", "code_cardinality": "single-record", "catalog_cardinality": "undeclared", "catalog_success_status": 200 }, "x-aura-error-codes": { "note": "Error codes this operation is known to raise, read from the handler and its validators. `message_available` says whether the error catalog carries text for a code at this ref — many are raised by code that has no seeded definition here, and for those the code itself is all the platform publishes. This is what was FOUND, not a closed list: an operation may raise a code through a path this scan does not follow.", "codes": [ { "code": "ERR_AURAX_37", "status": 400, "message": null, "message_available": false, "constant_name": "KEYCLOAK_AUTHORIZATION_SERVICE_ERROR" }, { "code": "ERR_AURAX_38", "status": 400, "message": null, "message_available": false, "constant_name": "USER_NOT_FOUND" }, { "code": "ERR_AURAX_44", "status": 400, "message": null, "message_available": false, "constant_name": "USER_NOT_CUSTOMER" } ] } } }, "/api/pwf-money-transfer-to-other-account": { "post": { "operationId": "service-banking-bff-service-redirect-pwf-money-transfer-to-other-account-bpm", "tags": [ "pwf-money-transfer-to-other-account" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-pwf-money-transfer-to-other-account-bpm", "description": "Request and response fields are declared on the routing target `pwf-money-transfer-to-other-account-BPM`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "amount": { "type": "number", "format": "decimal", "x-aura-field-code": "amount" }, "applicationName": { "type": "string", "x-aura-field-code": "applicationName" }, "cashTransactionType": { "type": "integer", "format": "int32", "x-aura-field-code": "cashTransactionType" }, "currencyNumber": { "type": "string", "x-aura-field-code": "currencyNumber" }, "description": { "type": "string", "x-aura-field-code": "description" }, "fromAccountId": { "type": "string", "format": "uuid", "x-aura-field-code": "fromAccountId" }, "ownerKey": { "type": "string", "x-aura-field-code": "ownerKey" }, "paymentPurpose": { "type": "integer", "format": "int32", "x-aura-field-code": "paymentPurpose" }, "referenceToken": { "type": "string", "x-aura-field-code": "referenceToken" }, "savedTransactionName": { "type": "string", "x-aura-field-code": "savedTransactionName" }, "toAccountId": { "type": "string", "format": "uuid", "x-aura-field-code": "toAccountId" } }, "required": [ "amount", "applicationName", "cashTransactionType", "currencyNumber", "fromAccountId", "ownerKey", "paymentPurpose", "referenceToken", "toAccountId" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 11, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The catalog declares no response fields for this operation. The body is UNKNOWN CONTENT.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-pwf-money-transfer-to-other-account-bpm", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/pwf-money-transfer-to-other-account", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "no-code-endpoint", "note": "No endpoint registration was found at this address." } } }, "/api/pwf-outgoing-transfer-ui-bpm": { "post": { "operationId": "service-banking-bff-service-redirect-pwf-outgoing-transfer-ui-bpm", "tags": [ "pwf-outgoing-transfer-ui-bpm" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-pwf-outgoing-transfer-ui-bpm", "description": "Request and response fields are declared on the routing target `pwf-outgoing-transfer-ui-bpm`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "applicationName": { "type": "string", "x-aura-field-code": "applicationName" }, "content": { "type": "string", "x-aura-field-code": "content" }, "description": { "type": "string", "x-aura-field-code": "description" }, "easyAddressRef": { "type": "string", "x-aura-field-code": "easyAddressRef" }, "fromIban": { "type": "string", "x-aura-field-code": "fromIban" }, "ownerKey": { "type": "string", "x-aura-field-code": "ownerKey" }, "processDate": { "type": "string", "format": "date-time", "x-aura-field-code": "transferDate" }, "referenceToken": { "type": "string", "x-aura-field-code": "referenceToken" }, "savedTransactionName": { "type": "string", "x-aura-field-code": "savedTransactionName" }, "toIban": { "type": "string", "x-aura-field-code": "toIban" } }, "required": [ "applicationName", "fromIban", "ownerKey", "processDate", "referenceToken", "toIban" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 10, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The catalog declares no response fields for this operation. The body is UNKNOWN CONTENT.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-pwf-outgoing-transfer-ui-bpm", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/pwf-outgoing-transfer-ui-bpm", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "no-code-endpoint", "note": "No endpoint registration was found at this address." } } }, "/api/reset-pwf-otp": { "post": { "operationId": "service-banking-bff-redirect-reset-pwf-otp", "tags": [ "reset-pwf-otp" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-redirect-reset-pwf-otp", "description": "Request and response fields are declared on the routing target `pwf-reset-password`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "encryptedCredentials": { "type": "string", "x-aura-field-code": "encryptedCredentials" }, "newPassword": { "type": "string", "x-aura-field-code": "newPassword", "x-aura-encrypted": true } }, "required": [ "encryptedCredentials", "newPassword" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 2, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The catalog declares no response fields for this operation. The body is UNKNOWN CONTENT. The response type this route registers was read from the service's own source and is published on this operation as `x-aura-code-response`.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-redirect-reset-pwf-otp", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/reset-pwf-otp", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "structure", "declared_type": "PwfResetPasswordDto", "payload": "PwfResetPasswordDto", "collection": false, "members": [ { "name": "Success", "declared_type": "bool", "nullable": false, "collection": false } ], "naming": "Member names are the service's declaration names." } } }, "/api/slip-transactions/view-receipt": { "post": { "operationId": "service-banking-bff-service-redirect-view-receipt-by-entityrowid", "tags": [ "slip-transactions" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-view-receipt-by-entityrowid", "description": "Invokes the `service-banking-bff-service-redirect-view-receipt-by-entityrowid` service definition through `POST /api/slip-transactions/view-receipt`.", "requestBody": { "required": false, "content": { "application/json": { "schema": { "type": "object", "properties": { "entityRowId": { "type": "string", "format": "uuid", "x-aura-field-code": "entityRowId" }, "id": { "type": "string", "format": "uuid", "x-aura-field-code": "slipId" }, "isPdf": { "type": "boolean", "x-aura-field-code": "isPdf" }, "slipNumber": { "type": "string", "x-aura-field-code": "slipNumber" } } } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "query", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": false, "declared_root_fields_by_binding_source": { "body": 4, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "This usage type is outside the invocation layer's filtered set, so that layer applies no binding-source filter at all and every declared source is passed through.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The catalog declares no response fields for this operation. The body is UNKNOWN CONTENT. The response type this route registers was read from the service's own source and is published on this operation as `x-aura-code-response`.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-view-receipt-by-entityrowid", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/slip-transactions/view-receipt", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-request-contract": { "state": "structure", "note": "The fields a caller sends.", "members": [ { "name": "EntityRowId", "declared_type": null, "nullable": false, "collection": false, "documentation": { "summary": "Tablonun id bilgisini veya EKB icin BusinessKey bilgisini icerir", "source": "the service's own XML documentation comment, read from its source" } }, { "name": "SlipNumber", "declared_type": null, "nullable": false, "collection": false }, { "name": "Id", "declared_type": null, "nullable": true, "collection": false }, { "name": "IsPdf", "declared_type": null, "nullable": true, "collection": false }, { "name": "AccountNumber", "declared_type": null, "nullable": false, "collection": false, "documentation": { "summary": "Ekb icin musteri hesap numarasi", "source": "the service's own XML documentation comment, read from its source" } } ] }, "x-aura-code-response": { "state": "declared-non-dto", "note": "The route returns `string`, a scalar rather than an object. There is no field tree below because there are no fields: the body is a JSON string. This is a complete answer read from the declaration, not a gap.", "declared_type": "string", "payload": "string" }, "x-aura-error-codes": { "note": "Error codes this operation is known to raise, read from the handler and its validators. `message_available` says whether the error catalog carries text for a code at this ref — many are raised by code that has no seeded definition here, and for those the code itself is all the platform publishes. This is what was FOUND, not a closed list: an operation may raise a code through a path this scan does not follow.", "codes": [ { "code": "ERR_BNKNG_11", "status": 400, "message": null, "message_available": false, "constant_name": "NOT_AUTHORIZED_TO_VIEW_SLIP" } ] } } }, "/api/unsigned-required-documents": { "get": { "operationId": "service-banking-bff-redirect-get-unsigned-required-documents", "tags": [ "unsigned-required-documents" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-redirect-get-unsigned-required-documents", "description": "Read from the caller's token, not from the request: customerId.", "x-aura-request-binding": { "method": "GET", "admits": [ "route", "query", "header", "claim" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 0, "claim": 1, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The catalog declares no response fields for this operation. The body is UNKNOWN CONTENT.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-redirect-get-unsigned-required-documents", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/unsigned-required-documents", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "no-code-endpoint", "note": "No endpoint registration was found at this address." } } }, "/api/users/password/pwf-change": { "post": { "operationId": "service-banking-bff-service-redirect-pwf-change-user-password", "tags": [ "users" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-pwf-change-user-password", "description": "Request and response fields are declared on the routing target `pwf-change-user-password`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "newPassword": { "type": "string", "x-aura-field-code": "newPassword", "x-aura-encrypted": true }, "oldPassword": { "type": "string", "x-aura-field-code": "oldPassword", "x-aura-encrypted": true }, "username": { "type": "string", "x-aura-field-code": "username" }, "validityDuration": { "type": "integer", "format": "int32", "x-aura-field-code": "validityDuration" } }, "required": [ "newPassword", "oldPassword", "username", "validityDuration" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 4, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. An exact, uniquely bound route registration classifies this response as a single-record.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-pwf-change-user-password", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/users/password/pwf-change", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "structure", "declared_type": "PwfResetPasswordDto", "payload": "PwfResetPasswordDto", "collection": false, "members": [ { "name": "Success", "declared_type": "bool", "nullable": false, "collection": false } ], "naming": "Member names are the service's declaration names." }, "x-aura-response-contract-disagreement": { "state": "catalog-union-withheld-for-exact-code-contract", "note": "An exact, uniquely bound route registration classifies this response as a single-record.", "code_response_state": "structure", "code_cardinality": "single-record", "catalog_cardinality": "undeclared", "catalog_success_status": 200 } } }, "/api/verify-email-otp": { "post": { "operationId": "service-banking-bff-redirect-verify-email-otp-bpm", "tags": [ "verify-email-otp" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-redirect-verify-email-otp-bpm", "description": "Request and response fields are declared on the routing target `verify-email-otp`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "oneTimePassword": { "type": "string", "x-aura-field-code": "oneTimePassword", "x-aura-encrypted": true }, "transactionId": { "type": "string", "format": "uuid", "x-aura-field-code": "transactionId" } }, "required": [ "oneTimePassword", "transactionId" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 2, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The catalog declares no response fields for this operation. The body is UNKNOWN CONTENT.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-redirect-verify-email-otp-bpm", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/verify-email-otp", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "no-code-endpoint", "note": "No endpoint registration was found at this address." } } }, "/api/verify-sms-otp-and-create-potential-user": { "post": { "operationId": "service-banking-bff-service-redirect-verify-sms-otp-and-create-potential-user", "tags": [ "verify-sms-otp-and-create-potential-user" ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "summary": "service-banking-bff-service-redirect-verify-sms-otp-and-create-potential-user", "description": "Request and response fields are declared on the routing target `verify-sms-otp-and-create-potential-user-bpm`; this entry declares none of its own.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "citizenId": { "type": "string", "x-aura-field-code": "citizenId" }, "oneTimePassword": { "type": "string", "x-aura-field-code": "oneTimePassword", "x-aura-encrypted": true }, "transactionId": { "type": "string", "format": "uuid", "x-aura-field-code": "transactionId" } }, "required": [ "citizenId", "oneTimePassword", "transactionId" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 3, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The schema is an `anyOf` over three envelopes: the record, a bare array of it, and a page `{total, data[]}` carrying the same record.", "content": { "application/json": { "schema": { "description": "Response whose record fields are declared but whose outer cardinality is not established by the catalog.", "anyOf": [ { "type": "object", "properties": { "token": { "type": "string", "x-aura-field-code": "token" } } }, { "type": "array", "description": "Bare-array response possibility.", "items": { "type": "object", "properties": { "token": { "type": "string", "x-aura-field-code": "token" } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "type": "object", "description": "Paged response envelope observed on the BFF response path.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "properties": { "data": { "type": "array", "description": "Response records carried by this page.", "items": { "type": "object", "properties": { "token": { "type": "string", "x-aura-field-code": "token" } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "total": { "type": "integer", "format": "int64", "description": "Total matching records, ignoring paging.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } } }, "required": [ "data" ] } ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "service-banking-bff-service-redirect-verify-sms-otp-and-create-potential-user", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "api/verify-sms-otp-and-create-potential-user", "x-aura-collapsed-from": { "note": "This operation and the target are one logical API. The path above is the caller-facing one and is deliberately decoupled from the target path." }, "x-aura-code-response": { "state": "no-code-endpoint", "note": "No endpoint registration was found at this address." } } }, "/transactions/check-transaction-source": { "post": { "operationId": "get-receipt-from-multi-source", "tags": [ "transactions" ], "summary": "get-receipt-from-multi-source", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "accountNumber": { "type": "string", "x-aura-field-code": "accountNumber" }, "entityRowId": { "type": "string", "format": "uuid", "x-aura-field-code": "entityrowid" }, "id": { "type": "string", "format": "uuid", "x-aura-field-code": "id" }, "isPdf": { "type": "boolean", "x-aura-field-code": "isPdf" }, "slipNumber": { "type": "string", "x-aura-field-code": "slipNumber" } }, "required": [ "entityRowId" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 5, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The catalog declares no response fields for this operation. The body is UNKNOWN CONTENT.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "get-receipt-from-multi-source", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "transactions/check-transaction-source", "x-aura-code-response": { "state": "no-code-endpoint", "note": "No endpoint registration was found at this address." } } }, "/users/exchange-agent-token": { "post": { "operationId": "exchange-agent-token", "tags": [ "users" ], "summary": "exchange-agent-token", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "agentWebUserId": { "type": "string", "x-aura-field-code": "agentWebUserId" }, "callCenterCustomerNumber": { "type": "string", "x-aura-field-code": "callCenterCustomerNumber" } }, "required": [ "agentWebUserId", "callCenterCustomerNumber" ] } } } }, "x-aura-request-binding": { "method": "POST", "admits": [ "route", "header", "claim", "body", "form" ], "binder_filters_by_binding_source": true, "declared_root_fields_by_binding_source": { "body": 2, "claim": 0, "form": 0, "header": 0, "path": 0, "query": 0 }, "dropped_binding_sources": [], "dropped_field_names": {}, "dropped_mandatory_field_names": [], "verdict": "all-declared-sources-admitted", "basis": "Read from the platform's service-invocation layer, which selects binding sources by the contract row's usage type and operation type and then keeps only fields bound to one of them.", "http_edge_note": null }, "responses": { "200": { "description": "Success. The schema is an `anyOf` over three envelopes: the record, a bare array of it, and a page `{total, data[]}` carrying the same record.", "content": { "application/json": { "schema": { "description": "Response whose record fields are declared but whose outer cardinality is not established by the catalog.", "anyOf": [ { "type": "object", "properties": { "accessToken": { "type": "string", "x-aura-field-code": "accessToken" }, "expiresIn": { "type": "integer", "format": "int32", "x-aura-field-code": "expiresIn" }, "refreshExpiresIn": { "type": "integer", "format": "int32", "x-aura-field-code": "refreshExpiresIn" }, "refreshToken": { "type": "string", "x-aura-field-code": "refreshToken" } } }, { "type": "array", "description": "Bare-array response possibility.", "items": { "type": "object", "properties": { "accessToken": { "type": "string", "x-aura-field-code": "accessToken" }, "expiresIn": { "type": "integer", "format": "int32", "x-aura-field-code": "expiresIn" }, "refreshExpiresIn": { "type": "integer", "format": "int32", "x-aura-field-code": "refreshExpiresIn" }, "refreshToken": { "type": "string", "x-aura-field-code": "refreshToken" } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, { "type": "object", "description": "Paged response envelope observed on the BFF response path.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" }, "properties": { "data": { "type": "array", "description": "Response records carried by this page.", "items": { "type": "object", "properties": { "accessToken": { "type": "string", "x-aura-field-code": "accessToken" }, "expiresIn": { "type": "integer", "format": "int32", "x-aura-field-code": "expiresIn" }, "refreshExpiresIn": { "type": "integer", "format": "int32", "x-aura-field-code": "refreshExpiresIn" }, "refreshToken": { "type": "string", "x-aura-field-code": "refreshToken" } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "total": { "type": "integer", "format": "int64", "description": "Total matching records, ignoring paging.", "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } } }, "required": [ "data" ] } ], "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } } } }, "x-aura-documentation": { "language": "en", "status": "structural-fallback", "source": "catalog-structure" } }, "400": { "$ref": "#/components/responses/Error400", "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one." }, "408": { "$ref": "#/components/responses/Error408", "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`." }, "409": { "$ref": "#/components/responses/Error409", "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`." }, "500": { "$ref": "#/components/responses/Error500", "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`." }, "502": { "$ref": "#/components/responses/Error502", "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`." }, "default": { "description": "Error.\n\n**Platform error envelope:** The platform error envelope. The status is chosen by the KIND of failure, not by the error code, so one code can arrive with different statuses and one status covers many codes. Where this operation is known to raise specific codes they are listed under `x-aura-error-codes`; that list is what was found by reading its handler and validators, not a closed set.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } }, "x-aura-service-code": "exchange-agent-token", "x-aura-domain": "service-banking-bff", "x-aura-raw-url-path": "users/exchange-agent-token", "x-aura-request-contract": { "state": "structure", "note": "The fields a caller sends.", "members": [ { "name": "AgentWebUserId", "declared_type": null, "nullable": false, "collection": false }, { "name": "CallCenterCustomerNumber", "declared_type": null, "nullable": false, "collection": false } ] }, "x-aura-code-response": { "state": "no-code-endpoint", "note": "No endpoint registration was found at this address." } } } }, "components": { "schemas": { "PlatformError": { "type": "object", "title": "PlatformError", "description": "The body a mapped failure returns. One `error` object; `error.code` is the only place the code appears. Not every failure carries it — see the individual statuses.", "required": [ "error" ], "properties": { "error": { "type": "object", "required": [ "code", "message" ], "properties": { "code": { "type": "string", "description": "The platform error code. It is the identifier on the wire; a human-readable message for it is NOT guaranteed. The error catalog carries the codes seeded for this snapshot, with whichever of the published languages each one has text for, and many codes raised by services have no seeded entry at all. Where this portal knows which operations raise a code, they list it under `x-aura-error-codes`, each entry saying whether a message exists for it." }, "message": { "type": "string", "description": "The resolved message for the code, in the language the request asked for." }, "validationErrors": { "type": "array", "description": "Present on a validation failure only: one entry per rule that failed, each carrying its own code.", "items": { "type": "object", "additionalProperties": true } }, "businessErrors": { "type": "array", "description": "Present on a bulk failure only: one code/message pair per failed item.", "items": { "type": "object", "properties": { "code": { "type": "string" }, "message": { "type": "string" } } } } } } } } }, "responses": { "Error400": { "description": "Raised by: AuraValidationException, BatchException, BulkBusinessException, BusinessException, ChannelException, ChannelNotFoundException, JsonException, PartnerCodeNotFoundException, PartnerCodeNullException, PartnerException. Fixed codes for this status: ERR_AURA_30, ERR_AURA_31, ERR_AURA_32, ERR_AURA_39, ERR_AURA_4, ERR_AURA_5, VALIDATION_ERROR. Usually carries the error envelope, but 1 of the 10 failure classes mapped to this status do not — a client that always parses `error.code` must tolerate a body without one.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } }, "Error408": { "description": "Raised by: AuraTimeoutException. Fixed code for this status: ERR_AURA_33. Carries the error envelope; read `error.code`.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } }, "Error409": { "description": "Raised by: DbUpdateConcurrencyException, IdempotencyException. Fixed codes for this status: ERR_AURA_1, ERR_AURA_3. Carries the error envelope; read `error.code`.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } }, "Error500": { "description": "Raised by: AuraException. Fixed code for this status: ERROR. Carries the error envelope; read `error.code`.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } }, "Error502": { "description": "Raised by: AuraResponseTooLargeException. Fixed code for this status: ERR_AURA_41. Carries the error envelope; read `error.code`.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlatformError" } } } } } } }