This repository provides a few examples on how to use Sbankens Open Banking APIs. These will enable you to quickly get started and get familiar with the basic concepts of authorization and API usage.
Simple .NET Core Console Application which retrieves accessToken, customer and account information.
Simple Node client which retrieves accessToken and account information.
Java client which retrieves accessToken and account information.
Simple Electron App with an example GUI which retrives accessToken and account information
Python script which retrieves accessToken, customer and account information.
Shell script examples on how to retrieve accessToken and account information
The following links provides detailed description of the REST interfaces. This includes how to construct your requests and what response to expect.
https://api.sbanken.no/Bank/swagger
https://api.sbanken.no/Customers/swagger
One must authenticate in order to get an access token. To authenticate the clientId and secret is sent to the sbanken authorization server. If valid, an access token is returned.
// client credentials
var clientId = "*****" // clientId obtained from Sbanken API Beta / utviklerportalen
var secret = "****" // password
// First, the application must authenticate itself with Sbanken's authorization server.
// The basic authentication scheme is used here (https://tools.ietf.org/html/rfc2617#section-2 )
// The clientId and secret must be base64 encoded and separated by a single colon ( : ).
// You might have to investigate which base64 encoding-library to use depending on your choice of programming language.
var basicAuthentationHeaderValue = btoa(clientId + ":" + secret);
To obtain the access token, send a request to the token URI with the following http headers. Note: For the Authorization header, the value of the header must be prefixed with "Basic " as shown below.
// host
https://api.sbanken.no
// uri
POST /identityserver/connect/token
// headers
Authorization: Basic Y2xpZW50aWQ6c2VjcmV0
Accept: application/json
Content-Type: application/x-www-form-urlencoded
// request body
grant_type=client_credentials
If the request was successful, one should get the following response:
{
"access_token": "abcdefghijklmnopqrstuvwxyz..",
"expires_in": 3600,
"token_type": "Bearer"
}
- The Try Me-button will not work. This is because it will send an unauthenticated request.
- In the swagger documentation for the Transfer POST request, the example payload may appear to be missing. The format of the POST request body is as follows:
{
"fromAccount": "string",
"toAccount": "string",
"message": "string",
"amount": 0
}
- Swagger documentation for the Transfer request has a typo where FromAccount is mentioned twice. The second mention should be ToAccount.
This is your social security number. The same Id which is used when you log in with BankID.
In order to get access to these APIs certain requirements needs to be fullfilled:
- You are a Sbanken customer
- You have to sign up for access via https://utvikler.sbanken.no
- You have to enable "Beta" in your personal settings
- Finally, you need to complete the API Beta setup wizard.
(Detailed information will be provided after you sign up for access)