adorsys / open-banking-gateway

Provides RESTful API, tools, adapters, and connectors for transparent access to open banking API's (for banks that support PSD2 and XS2A as well as HBCI/FinTS)
https://adorsys.github.io/open-banking-gateway
GNU Affero General Public License v3.0
253 stars 95 forks source link

Add support for encryption, redirect-code, cookie checking bypass #973

Open valb3r opened 4 years ago

valb3r commented 4 years ago

For development purpose (to execute the same request multiple times and observe changes in the behavior) we need to add special spring profile(s) that disable:

  1. Database encryption
  2. Redirect code validation (both on request and fromAspsp)
  3. Cookie (Authorization-Session-Key) bypass in addtion to already existing no-signature-filter filter
gatiskalnins commented 3 years ago

https://jira.adorsys.de/browse/OBG-67