Overview
The API has three layers of authentication:
Account Authentication
We authenticate your API requests using your API keys. If you do not include your key when making an API request or you include an invalid API key, we respond with a 401 - Unauthorized HTTP error.
End-User Authentication
With Weavr, you can offer financial services to your customers. In such a case, financial instruments such as cards and IBANs, together with the funds on these instruments, belong to your customers not to you.
JWKS - JSON Web Key Set
You are not obliged to validate authentication tokens, we do this automatically when they are used in an API call. However, if you want to rely on our authentication method for other purposes (for example, to allow users access to other parts of your application), we provide the means for you to do so. To validate a token that we have provided, you can do so via the below endpoint:
Step-Up Authentication
The revised Payment Service Directive, more commonly known as PSD2, outlines regulations to improve customer authentication processes that better protect customers from fraud.