search

SecureApiGateway / SecureApiGateway

Top level project - includes wiki, github-pages and issues
https://github.com/SecureApiGateway/SecureApiGateway/wiki
Apache License 2.0
1 stars 1 forks source link

Review if we want to support test createDomesticPaymentsConsents_withNonExistentDebtorAccount_v3_1_10 #1041

Open dbadham-fr opened 1 year ago

dbadham-fr commented 1 year ago

Test: createDomesticPaymentsConsents_withNonExistentDebtorAccount_v3_1_10 was disabled when moving to the RCS Consent Store.

The IG/IDM solution had a custom backoffice filter to do some validation here, this has not been implemented in the RS with the new consent store.

This logic provides fail fast behaviour, if the debtorAccount in the payment request is not known to the ASPSP then it is rejected immediately. It could still be the case that the PSU is not the owner of the accound.

Without this logic, a consent can be created with an invalid debtorAccount, the failure will occur at a later step when the PSU authorisation is done.

The reason that this logic wasn't ported over to the RS is because we were short on time, and it was assessed to be a nice to have feature.

dbadham-fr commented 1 year ago

This will apply to all payments, each payment type will have their own version of this test.

BohoCode commented 8 months ago

Hey team! Please add your planning poker estimate with Zenhub @dbadham-fr @jorgesanchezperez