search

openbankingspace / tpp-issues

34 stars 1 forks source link

Ozone - v1.1 does not implement refresh tokens #132

Open mattrayner opened 5 years ago

mattrayner commented 5 years ago

The Problem

The Ozone test bank should fully implement the OpenBanking APIs if it is to function as a useful test case. Currently the bank does not, and does intend to, implement refresh tokens.

Expected behaviour

The API should implement refresh tokens as part of the OAuth flow.

Current behaviour

A user must re-initiate the flow after a few hours, re-issuing their permission each time.

I response to a query raised about this Ozone said:

Ozone bank does not support refresh token at this point and is not likely to support in upcoming releases either.

tobypinder commented 5 years ago

I'm not sure refresh_tokens are a requirement - I can appreciate wanting Ozone to support it for testing reasons but I think there is validity in the statement that it's not required