Skip to main content
Update Embedded Bulk Payment Authorisation
curl --request PUT \
  --url https://api.yapily.com/embedded-bulk-payment-auth-requests/{consentId} \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json;charset=UTF-8' \
  --data '
{
  "applicationUserId": "string",
  "institutionId": "fiducia-sandbox",
  "scaCode": "123456",
  "paymentRequest": {
    "executionDateTime": "2021-10-29T00:00:00Z",
    "payments": [
      {
        "type": "DOMESTIC_PAYMENT",
        "paymentIdempotencyId": "e4f913909a3d11eabb370242ac130002",
        "reference": "REFERENCE",
        "amount": {
          "amount": 1,
          "currency": "EUR"
        },
        "payer": {
          "name": "John Doe",
          "accountIdentifications": [
            {
              "type": "IBAN",
              "identification": "DE39499999600000005111"
            }
          ]
        },
        "payee": {
          "name": "Jane Doe",
          "address": {
            "country": "DE"
          },
          "accountIdentifications": [
            {
              "type": "IBAN",
              "identification": "DE12345678901234567890"
            }
          ]
        }
      },
      {
        "type": "DOMESTIC_PAYMENT",
        "paymentIdempotencyId": "e4f913909a3d11eabb370242ac130002",
        "reference": "REFERENCE",
        "amount": {
          "amount": 1,
          "currency": "EUR"
        },
        "payer": {
          "name": "Jane Doe",
          "accountIdentifications": [
            {
              "type": "IBAN",
              "identification": "DE39499999600000005111"
            }
          ]
        },
        "payee": {
          "name": "John Doe",
          "address": {
            "country": "DE"
          },
          "accountIdentifications": [
            {
              "type": "IBAN",
              "identification": "DE12345678900000000000"
            }
          ]
        }
      }
    ]
  }
}
'
{
  "meta": {
    "tracingId": "cfa351c5de6f4398bb9deea04041acc5"
  },
  "data": {
    "id": "6117b6dd-5a43-4f26-8e36-b91b9bf3c434",
    "userUuid": "3ddf5dd0-aa48-4d0f-baa7-fa057e9e911d",
    "applicationUserId": "string",
    "institutionId": "fiducia-sandbox",
    "status": "AUTHORIZED",
    "createdAt": "2021-08-02T14:58:45.446Z",
    "featureScope": [
      "EXISTING_PAYMENT_INITIATION_DETAILS",
      "CREATE_BULK_PAYMENT",
      "EXISTING_PAYMENTS_DETAILS"
    ],
    "state": "85853421299c44e0829debefffd8622e",
    "authorizedAt": "2021-08-02T14:59:29.174Z",
    "institutionConsentId": "0515485612080120206PSDLT-BL-LB002045PA9545RW"
  }
}

Authorizations

Authorization
string
header
required

Use HTTP Basic Authentication with your Application ID as username and Application Secret as password. Manage credentials in the Yapily Console. See Authentication for details.

Headers

psu-id
string

Conditional. Represents the user's login ID for the Institution to a personal account.

See PSU identifiers to see if this header is required.

psu-corporate-id
string

Conditional. Represents the user's login ID for the Institution to a business account.

See PSU identifiers to see if this header is required.

psu-ip-address
string

Conditional. The IP address of the PSU.

See PSU identifiers to see if this header is required.

Path Parameters

Mandatory. The consent Id of the Consent to update.

Body

application/json;charset=UTF-8

The request body containing a BulkPaymentEmbeddedAuthorisationRequest json payload

institutionId
string
required

Mandatory. The reference to the Institution which identifies which institution the authorisation request is sent to.

Example:

"yapily-mock"

userUuid
string<uuid>

Conditional. The reference to the User that will authorise the authorisation request using the Yapily generated UUID. Either the userUuid or applicationUserId must be provided.

Example:

"e006a012-c306-4355-a6a1-99bf69ae5171"

applicationUserId
string

Conditional. The user-friendly reference to the User that will authorise the authorisation request. If a User with the specified applicationUserId exists, it will be used otherwise, a new User with the specified applicationUserId will be created and used. Either the userUuid or applicationUserId must be provided.

Example:

"user-234562290"

callback
string

Optional. The server to redirect the user to after the user complete the authorisation at the Institution.

See Using a callback (Optional) for more information.

Example:

"https://display-parameters.com"

redirect
object

Optional. The server to redirect the user to after the user complete the authorisation at the Institution.

oneTimeToken
boolean

Conditional. Used to receive a oneTimeToken rather than a consentToken at the callback for additional security. This can only be used when the callback is set.

See Using a callback with an OTT (Optional) for more information.

Example:

false

paymentRequest
object

The payment request object defining the details of the bulk payment

userCredentials
object

Conditional. Used to capture the user's credentials to allow them to login to an Institution that uses the embedded account authorisation flow.

This is the first step required in the embedded account authorisation flow to authorise the Consent.

selectedScaMethod
object

Conditional. Used to update the authorisation with the sca method of the user's choice for the Institution that uses the embedded authorisation flow. If the user has multiple sca methods configured, the Institution will allow the user to select from each of these options.

When the user has multiple sca methods for the Institution, this is the second step required in the embedded authorisation flow to authorise the Consent.

Example:
{
"id": "944",
"type": "PUSH_OTP",
"description": "SecureSIGN"
}
scaCode
string

Conditional. Used to update the authorisation with the sca code received by the user from the Institution using the embedded payment authorisation flow.

This is the penultimate step required in the embedded payment authorisation flow to authorise the Consent. After sending the sca code, to obtain an authorised consent, the last step is to poll Get Consent until the Institution authorises the request and the Consent status transitions to AUTHORIZED.

Example:

"325614"

Response

Ok

meta
object
data
object
forwardedData
object[]
raw
object[]
deprecated