cboj-payments-prc-api
home
Payments Process API
Description :
This API is used to orchestrate the logic for the customers process.
Base URLs
Description
Payments Services are classified into following :
- Single Transfer Payments
 - Standing Order Payments
 - Get Transfer Tracking Service
 - Get Swift Image
 - This document describes the API specification for ‘Single Transfer Payments’.
 
‘Single Transfer Payments’ functionality includes the following APIs :
- Single Payments Domestic Posting ACH
 - Single Payments Domestic Posting RTGS
 - Single Payments International Posting
 - Single Payments Internal Transfer Posting
 
‘Standing Order Payments’ functionality includes the following APIs :
- Standing Order Domestic Posting ACH
 - Standing Order Domestic Posting RTGS
 - Standing Order International Posting
 - Standing Order Internal Posting
 - Standing Order Third Party Posting
 - Terminate Standing Order
 - Search Standing Order Summary
 
Other APIs include :
- Get Transfer Tracking Payment Service
 - Get Swift Image
 - Submit Financial Posting
 - Get Transaction details
 - Internal Salary Credit Ryalize
 - Program Fee Settlement Online
 - Payment Transaction
 
Technical Specifications
Headers
Below are the headers that are set with every HTTP Request
| Header Name | Sample Value | Optional? | 
|---|---|---|
| client_id | 9712801dbaaffg90d43a0b09c59fdaf21e65524235436 | Mandatory | 
| client_secret | 234d8AeC33e34bE1b3eiud31b2887cD4 | Mandatory | 
| Authorization | Bearer afdca88b-9ed0-344b-8af0-b2195e382574 | Optional | 
| x-channel-id | CFFCHL | Mandatory | 
| x-correlation-id | aftca88b-9ed0-344b-8af0-b2155e382574 | Mandatory and unique for each request and is duplicate check. Can be any unique number but preferably a global unique identifier (GUID) | 
| x-bank-id | CBOJ | Mandatory and should be hardcoded to 'CBOJ' | 
| x-debug-flag | 0 | Optional (enum - 0 or 1) | 
| x-customer-id | 2100122 | Optional (mandatory for customer facing channels) | 
| x-sub-channel-id | CLIQ | Optional | 
Error handling
HTTP Status
The HTTP error codes are:
- 400 - Bad Request: An error in the client request (Mostly due to validations)
 - 400 - Bad Request: Any Error from Temenos System
 - 401 - Unauthorized: User can't be authenticated
 - 403 - Forbidden: The server cannot give access to the resource
 - 404 - Not Found: The resource defined in the URL doesn't exist
 - 405 - Method Not Allowed
 - 415 - Unsupported Media Type
 - 500 - Internal Server Error: The server encountered an unexpected condition
 
Error Response
A REST API should reply with an error code and a message to be shown to the consumer.
{
    "status": {
        "success": false,
        "code": "T24003799",
        "reasonCode": "",
        "arabicMessage": "NO SIGN ON NAME SUPPLIED DURING SIGN ON PROCESS",
        "englishMessage": "NO SIGN ON NAME SUPPLIED DURING SIGN ON PROCESS",
        "errorCode": "T24003799",
        "errorDescription": "INVALID/ NO SIGN ON NAME SUPPLIED DURING SIGN ON PROCESS"
    }
}API Security
Below polices are applied.
| Name | Description | Example | 
|---|---|---|
| Client ID Enforcement | It restricts access to a protected resource | client_id: 9d41a8940c5e4181aace6fc5e6cfffc3 client_secret: aB9D5Bd7450d49F584F23250D96872fD | 
Config Information
- The T24 versions which are to be used are determined by headers 'x-channel-id' and 'x-sub-channel-id'. The versions details are organized in such a way that in case a version needs to be changed , we can navigate to the properties based on the channel and sub channel id (t24.'x-channel-id'.'x-sub-channel-id'.endpoint.option.version)
 - Any new channel or sub channel id needs to be added , we can add the required details under the same hierarchy. (t24.new 'x-channel-id'.new 'x-sub-channel-id'.new endpoint.option.version)