FAPI 2.0 Security Profile: OAuth 2.0 Hardening for Open Banking with PAR, DPoP and mTLS
FAPI 2.0 explained: the OpenID Foundation security profile for open banking, PAR, PKCE, DPoP and mTLS sender-constrained tokens, JAR/JARM, attack models.
Open Banking API Architecture: PSD2 to PSD3/PSR (2026)
Open Banking API architecture explained: AISP/PISP roles, strong customer authentication, dedicated interfaces, OAuth/FAPI security and the PSD2 to PSD3/PSR transition - a 2026 systems reference.