basePath: /corporate/
definitions:
  AccountDetailsResponse:
    description: Account details response
    properties:
      group_header:
        $ref: '#/definitions/ResponseHeader'
        description: Standard format response header
        x-availabilityStatus: Stable
      response:
        $ref: '#/definitions/AccountInfo'
        description: Payload
        x-availabilityStatus: Stable
    title: AccountDetailsResponse
    type: object
  AccountFilterRequest:
    description: Request for filtered accounts
    properties:
      account_list:
        description: Account List
        example:
        - SE0295000099604213908314
        items:
          type: string
        type: array
        x-availabilityStatus: Stable
      country_list:
        description: Country List
        example:
        - SEK
        items:
          type: string
        type: array
        x-availabilityStatus: Stable
      currency_list:
        description: Currency List
        example:
        - SE
        items:
          type: string
        type: array
        x-availabilityStatus: Stable
    title: AccountFilterRequest
    type: object
  AccountInfo:
    description: Account information
    properties:
      _id:
        description: Internal, technical account identifier
        type: string
        x-availabilityStatus: Stable
      _links:
        description: 'HATEOAS inspired links: ''rel'' and ''href'''
        items:
          $ref: '#/definitions/Link'
        type: array
        x-availabilityStatus: Stable
      account_name:
        description: Account name
        type: string
        x-availabilityStatus: Stable
      account_short_name:
        description: Company defined name
        type: string
        x-availabilityStatus: Stable
      account_type:
        description: Account type
        type: string
        x-availabilityStatus: Stable
      available_balance:
        description: Available balance indicates the funds which are available to
          the account holder at the time of the query
        example: 3451.12
        type: string
        x-availabilityStatus: Stable
      bban:
        description: Basic Bank Account Number
        type: string
        x-availabilityStatus: Stable
      bic:
        description: Bank Identifier Code
        example: NDEASESS
        type: string
        x-availabilityStatus: Stable
      booked_balance:
        description: Booked balance includes all transactions entered on the account
          at the time of the query
        example: 3451.12
        type: string
        x-availabilityStatus: Stable
      branch_code:
        description: Local branch code
        type: string
        x-availabilityStatus: Stable
      country:
        description: Country code where the account is held according to ISO ALPHA-2
        example: SE
        type: string
        x-availabilityStatus: Stable
      credit_limit:
        description: Amount of credit extended to account holder beyond account booked
          balance
        example: 3451.12
        type: string
        x-availabilityStatus: Stable
      currency:
        description: Currency code according to ISO 4217
        example: SEK
        type: string
        x-availabilityStatus: Stable
      error_description:
        description: Detailed description of the error status.
        type: string
        x-availabilityStatus: Stable
      error_status:
        description: 'Status that is returned in case of failure.

          * NOT_FOUND = Account information is not accessible.

          * ERROR_OCCURRED = Returned when unexpected error happen while getting the
          account details.'
        enum:
        - NOT_FOUND
        - ERROR_OCCURRED
        type: string
        x-availabilityStatus: Stable
      group_account_type:
        description: 'Account type of group account.

          Only for Cash Pool accounts.'
        enum:
        - GMA
        - GCT
        - GCS
        - GSA
        - GTR
        - MA
        - CT
        - CS
        - SA
        - TR
        - TA
        type: string
        x-availabilityStatus: Stable
      iban:
        description: International Bank Account Number
        type: string
        x-availabilityStatus: Stable
      latest_transaction_booking_date:
        description: Date of last transaction booked to the account
        type: string
        x-availabilityStatus: Stable
      legal_balance:
        description: 'Indicates if the balances are on-balance or off-balance.

          Only for Cash Pool accounts.'
        enum:
        - Y
        - N
        type: string
        x-availabilityStatus: Stable
      master_account_number:
        description: 'Master account number in group account hierarchy.

          Only for Cash Pool accounts.'
        type: string
        x-availabilityStatus: Stable
      opening_balance:
        description: This is the booked balance on the account at the beginning of
          the period. It equals the closing balance of the previous business day
        example: 3451.12
        type: string
        x-availabilityStatus: Stable
      plusgiro:
        description: Plusgiro number (only used in Sweden)
        type: string
        x-availabilityStatus: Stable
      product:
        description: Name of the banking product delivered by this account
        type: string
        x-availabilityStatus: Stable
      status:
        description: Status of account
        type: string
        x-availabilityStatus: Stable
      value_dated_balance:
        description: Value dated balance is the balance on the basis of which interest
          is calculated on the account
        example: 3451.12
        type: string
        x-availabilityStatus: Stable
    required:
    - _id
    - account_type
    - bic
    - booked_balance
    - country
    - currency
    - iban
    - product
    - status
    title: AccountInfo
    type: object
  AccountList:
    description: List of accounts
    properties:
      _links:
        description: 'HATEOAS inspired links: ''rel'' and ''href'''
        items:
          $ref: '#/definitions/Link'
        type: array
        x-availabilityStatus: Stable
      accounts:
        description: List of accounts
        items:
          $ref: '#/definitions/AccountInfo'
        type: array
        x-availabilityStatus: Stable
    title: AccountList
    type: object
  AccountListResponse:
    description: Account list response
    properties:
      group_header:
        $ref: '#/definitions/ResponseHeader'
        description: Standard format response header
        x-availabilityStatus: Stable
      response:
        $ref: '#/definitions/AccountList'
        description: Payload
        x-availabilityStatus: Stable
    title: AccountListResponse
    type: object
  ErrorPayload:
    description: Error response body
    properties:
      failures:
        description: More details on the occurred error
        items:
          $ref: '#/definitions/Failure'
        type: array
        x-availabilityStatus: Stable
      request:
        $ref: '#/definitions/RequestEcho'
        description: Error details
        x-availabilityStatus: Stable
    title: ErrorPayload
    type: object
  ErrorResponse:
    description: Error response
    properties:
      error:
        $ref: '#/definitions/ErrorPayload'
        description: Payload
        x-availabilityStatus: Stable
      group_header:
        $ref: '#/definitions/ResponseHeader'
        description: Standard format response header
        x-availabilityStatus: Stable
    title: ErrorResponse
    type: object
  Failure:
    description: Validation error
    properties:
      code:
        description: Failure code
        type: string
        x-availabilityStatus: Stable
      description:
        description: Failure description
        type: string
        x-availabilityStatus: Stable
      path:
        description: JSON path of the failing element if applicable
        type: string
        x-availabilityStatus: Stable
      type:
        description: Type of the validation error, e.g. NotNull
        type: string
        x-availabilityStatus: Stable
    title: Failure
    type: object
  Link:
    description: Context specific link (only GET supported)
    properties:
      href:
        description: Relative path to the linked resource
        type: string
        x-availabilityStatus: Stable
      rel:
        description: Describes the nature of the link, e.g. 'details' for a link to
          the detailed information of a listed resource.
        type: string
        x-availabilityStatus: Stable
    title: Link
    type: object
  RequestEcho:
    description: Original request information
    properties:
      url:
        description: Original request url
        type: string
        x-availabilityStatus: Stable
    title: RequestEcho
    type: object
  ResponseHeader:
    description: External response header
    properties:
      creation_date_time:
        description: Response creation time
        format: date-time
        type: string
        x-availabilityStatus: Stable
      http_code:
        description: HTTP code for response
        example: 200
        format: int32
        type: integer
        x-availabilityStatus: Stable
      message_identification:
        description: Original request id for correlation purposes
        type: string
        x-availabilityStatus: Stable
    title: ResponseHeader
    type: object
  Transaction:
    description: Details of individual transaction
    properties:
      amount:
        description: Transaction value
        example: 123.45
        type: string
        x-availabilityStatus: Stable
      archive_code:
        description: Archive Code
        type: string
        x-availabilityStatus: Stable
      balance_after_transaction:
        description: Balance on account after transaction executed
        example: 3451.12
        type: string
        x-availabilityStatus: Stable
      booking_date:
        description: Date transaction was booked to the account ledger
        type: string
        x-availabilityStatus: Stable
      card_number:
        description: Card number.
        type: string
        x-availabilityStatus: Stable
      charge_type:
        description: The way in which the service fee of the transaction was charged.
        type: string
        x-availabilityStatus: Stable
      correction_flag:
        description: Indicates if the transaction is a correction transaction or not
        type: string
        x-availabilityInfo: Currently only available in Sandbox
        x-availabilityStatus: Beta
      correspondent_bic:
        description: Via bank's SWIFT/ BIC if the counterparty requests that the payment
          should be sent via another bank to the counterparty's bank.
        type: string
        x-availabilityStatus: Stable
      counterparty_account:
        description: Counterparty's account number.
        type: string
        x-availabilityStatus: Stable
      counterparty_address:
        description: Address of the counterparty.
        type: string
        x-availabilityStatus: Stable
      counterparty_bank_address:
        description: Address of the bank with which the counterparty's account is
          held.
        type: string
        x-availabilityStatus: Stable
      counterparty_bank_bic:
        description: SWIFT (BIC) address of the counterparty's bank.
        type: string
        x-availabilityStatus: Stable
      counterparty_bank_name:
        description: Name of the bank with which the counterparty's account is held.
        type: string
        x-availabilityStatus: Stable
      counterparty_name:
        description: Counterparty name
        type: string
        x-availabilityStatus: Stable
      currency:
        description: Currency code according to ISO 4217
        type: string
        x-availabilityStatus: Stable
      currency_rate:
        description: Currency exchange rate applied to foreign currency transactions
        example: 0.80654
        type: string
        x-availabilityStatus: Stable
      debtor_id:
        description: Payer id
        type: string
        x-availabilityInfo: Currently only available in Sandbox
        x-availabilityStatus: Beta
      end_to_end_reference:
        description: 'Unique identification, as assigned by the initiating party,
          to unambiguously identify the transaction.

          This identification is passed on, unchanged, throughout the entire end-to-end
          chain.'
        type: string
        x-availabilityStatus: Stable
      exchange_rate_reference:
        description: The reference to the FX (Foreign Exchange) deal made with the
          bank for this specific transaction
        type: string
        x-availabilityInfo: Currently only available in Sandbox
        x-availabilityStatus: Beta
      extra_info:
        description: Extra information
        type: string
        x-availabilityInfo: Currently only available in Sandbox
        x-availabilityStatus: Beta
      message:
        description: A short message text provided by the remitter to the beneficiary
        type: string
        x-availabilityStatus: Stable
      narrative:
        description: Description of transaction
        type: string
        x-availabilityStatus: Stable
      original_archive_code:
        description: Original archive code of the transaction
        type: string
        x-availabilityInfo: Currently only available in Sandbox
        x-availabilityStatus: Beta
      original_currency:
        description: Currency of original transaction
        type: string
        x-availabilityStatus: Stable
      original_currency_amount:
        description: Foreign transaction amount in original currency
        example: 3451.12
        type: string
        x-availabilityStatus: Stable
      own_message:
        description: Text message for the account holder's own use
        type: string
        x-availabilityStatus: Stable
      payee_alias:
        description: Payee Alias
        type: string
        x-availabilityStatus: Stable
      payer_alias:
        description: Payer Alias
        type: string
        x-availabilityStatus: Stable
      payment_date:
        description: Payment date of the transaction
        type: string
        x-availabilityStatus: Stable
      payment_urgency:
        description: Urgency of the payment.
        type: string
        x-availabilityStatus: Stable
      reference:
        description: Reference number
        type: string
        x-availabilityStatus: Stable
      serv_key:
        description: Internal, technical Serv Key
        type: string
        x-availabilityStatus: Stable
      serv_name:
        description: Internal, technical Serv Name
        type: string
        x-availabilityStatus: Stable
      status:
        description: Status of the transaction
        example: billed
        type: string
        x-availabilityStatus: Stable
      transaction_date:
        description: Date on which transaction was enacted
        type: string
        x-availabilityStatus: Stable
      transaction_id:
        description: Transaction identifier as defined by the bank
        type: string
        x-availabilityStatus: Stable
      transfer_purpose:
        description: Transfer purpose code.
        type: string
        x-availabilityStatus: Stable
      type_description:
        description: Description of the type of transaction, e.g. Cash withdrawal,
          Account transfer, etc. (localized)
        example: ATM Cash Withdrawal
        type: string
        x-availabilityStatus: Stable
      ultimate_creditor_address:
        description: Address of ultimate party to which an amount of money is due.
        type: string
        x-availabilityStatus: Stable
      ultimate_creditor_id:
        description: Id of ultimate party to which an amount of money is due.
        type: string
        x-availabilityStatus: Stable
      ultimate_creditor_name:
        description: Name of ultimate party to which an amount of money is due.
        type: string
        x-availabilityStatus: Stable
      ultimate_debtor_id:
        description: Id of ultimate party that owes an amount of money to (ultimate)
          creditor.
        type: string
        x-availabilityStatus: Stable
      ultimate_debtor_name:
        description: Name of ultimate party that owes an amount of money to (ultimate)
          creditor.
        type: string
        x-availabilityStatus: Stable
      value_date:
        description: Value date of the transaction, used for interest calculation
        type: string
        x-availabilityStatus: Stable
    required:
    - amount
    - booking_date
    - currency
    - status
    - type_description
    - value_date
    title: Transaction
    type: object
  TransactionList:
    description: List of transactions
    properties:
      _links:
        description: 'HATEOAS inspired links: ''rel'' and ''href'''
        items:
          $ref: '#/definitions/Link'
        type: array
        x-availabilityStatus: Stable
      continuation_key:
        description: Resource listing may return a continuationKey if there is more
          results available. Request may be retried with the continuationKey, but
          otherwise same parameters, in order to get more results.
        type: string
        x-availabilityStatus: Stable
      transactions:
        description: Listed transactions
        items:
          $ref: '#/definitions/Transaction'
        type: array
        x-availabilityStatus: Stable
    title: TransactionList
    type: object
  TransactionListResponse:
    description: Transaction history response
    properties:
      group_header:
        $ref: '#/definitions/ResponseHeader'
        description: Standard format response header
        x-availabilityStatus: Stable
      response:
        $ref: '#/definitions/TransactionList'
        description: Payload
        x-availabilityStatus: Stable
    title: TransactionListResponse
    type: object
host: api.nordeaopenbanking.com
info:
  contact:
    email: support@nordeaopenbanking.com
    name: Open Banking team
    url: https://nordeaopenbanking.com
  description: Instant Reporting API
  license:
    name: Apache 2.0
    url: http://www.apache.org/licenses/LICENSE-2.0.html
  title: Instant Reporting API
  version: '4.1'
  x-ibm-name: instant-reporting-v4
  x-version: '4.1'
paths:
  /premium/v4/accounts:
    get:
      deprecated: false
      operationId: getAccountsListUsingGET_3
      parameters:
      - description: "A signature of request by the TPP on application level. The\
          \ process of signing a request is described in 'Signing HTTP Messages' RFC\
          \ draft version 10 (<a href=\"https://tools.ietf.org/html/draft-cavage-http-signatures-10\"\
          \ target=\"_blank\">https://tools.ietf.org/html/draft-cavage-http-signatures-10</a>).\
          \ The request signature needs to be sent in the 'Signature' HTTP header\
          \ as described in the RFC. Additional requirements from Nordea \n - The\
          \ only allowed algorithm is RSA-SHA256 \n- The key size for the used RSA\
          \ key pair has to be at least 2048 bit \n- The keyId is the clientId of\
          \ your application originating from the Nordea Developer Portal \n- We require\
          \ the following headers to be used in the signature \n* Request without\
          \ body: (request-target) X-Nordea-Originating-Host X-Nordea-Originating-Date\
          \ \n* Request with body: (request-target) X-Nordea-Originating-Host X-Nordea-Originating-Date\
          \ Content-type Digest \n* The request-target is a combination of the HTTP\
          \ action verb and the request URI path"
        in: header
        name: Signature
        required: true
        type: string
      - description: Id of the Client
        in: header
        name: X-IBM-Client-Id
        required: true
        type: string
      - description: Secret password generated for the Client
        in: header
        name: X-IBM-Client-Secret
        required: true
        type: string
      - description: 'HTTP header element for date and time represented as RFC 7231
          Full Dates (GMT). Example date: **Wed, 24 Apr 2019 14:00:37 GMT**. It is
          similar to standard HTTP ''Date'' expect that it allows to set it under
          JavaScript in browser while standard ''Date'' is forbidden'
        in: header
        name: X-Nordea-Originating-Date
        required: true
        type: string
      - description: HTTP header element for specification of the domain name of the
          server. It is similar to standard HTTP 'Host' header but it won't be overridden
          by proxies. It also allows to set it under JavaScript in browser while standard
          'Host' is forbidden
        in: header
        name: X-Nordea-Originating-Host
        required: true
        type: string
      - description: End user (i.e. PSU) agent information, to be provided if TPP
          is in session with the PSU
        in: header
        name: X-Nordea-Originating-User-Agent
        required: false
        type: string
      - description: End user (i.e. PSU) IP address, to be provided if TPP is in session
          with the PSU
        in: header
        name: X-Nordea-Originating-User-Ip
        required: false
        type: string
      - description: Page number
        in: query
        name: page
        required: false
        type: string
        x-availabilityStatus: Stable
      - description: Page size
        in: query
        name: size
        required: false
        type: string
        x-availabilityStatus: Stable
      produces:
      - application/json
      responses:
        '200':
          description: List of accounts
          schema:
            $ref: '#/definitions/AccountListResponse'
        '400':
          description: Bad Request
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: 'Unauthorized with failure code:

            * error.apikey.missing = Missing API key. This operation requires API
            key, but it was missing.

            * error.token = Unspecified error with supplied token.

            * error.token.invalid = Missing access token or token did not authorized
            requested operation. This operation requires valid access token, but it
            was missing.

            * error.token.expired = Access token has expired.'
          schema:
            $ref: '#/definitions/ErrorResponse'
        '403':
          description: Login failure
          schema:
            $ref: '#/definitions/ErrorResponse'
        '404':
          description: Resource not found
          schema:
            $ref: '#/definitions/ErrorResponse'
      security:
      - DecoupledAuth:
        - ACCOUNTS_BROADBAND
      summary: List Accounts
      tags:
      - accounts-v4
      x-availabilityStatus: Stable
  /premium/v4/accounts/filter:
    post:
      consumes:
      - application/json
      deprecated: false
      operationId: getFilteredAccountListUsingPOST_3
      parameters:
      - description: 'The Digest Header header as defined in [RFC3230] contains a
          Hash of the message body. The only hash algorithms that may be used to calculate
          the Digest within the context of this specification are SHA-256 and SHA-512
          as defined in [RFC5843]. For POST with ''application/x-www-form-urlencoded''
          content type Digest should be calculated for normalized string created from
          request parameters like this: ''param1&#61;value1&#38;param2&#61;value2''.
          It is important that parameters should be placed in alphabetic order'
        in: header
        name: Digest
        required: true
        type: string
      - description: "A signature of request by the TPP on application level. The\
          \ process of signing a request is described in 'Signing HTTP Messages' RFC\
          \ draft version 10 (<a href=\"https://tools.ietf.org/html/draft-cavage-http-signatures-10\"\
          \ target=\"_blank\">https://tools.ietf.org/html/draft-cavage-http-signatures-10</a>).\
          \ The request signature needs to be sent in the 'Signature' HTTP header\
          \ as described in the RFC. Additional requirements from Nordea \n - The\
          \ only allowed algorithm is RSA-SHA256 \n- The key size for the used RSA\
          \ key pair has to be at least 2048 bit \n- The keyId is the clientId of\
          \ your application originating from the Nordea Developer Portal \n- We require\
          \ the following headers to be used in the signature \n* Request without\
          \ body: (request-target) X-Nordea-Originating-Host X-Nordea-Originating-Date\
          \ \n* Request with body: (request-target) X-Nordea-Originating-Host X-Nordea-Originating-Date\
          \ Content-type Digest \n* The request-target is a combination of the HTTP\
          \ action verb and the request URI path"
        in: header
        name: Signature
        required: true
        type: string
      - description: Id of the Client
        in: header
        name: X-IBM-Client-Id
        required: true
        type: string
      - description: Secret password generated for the Client
        in: header
        name: X-IBM-Client-Secret
        required: true
        type: string
      - description: 'HTTP header element for date and time represented as RFC 7231
          Full Dates (GMT). Example date: **Wed, 24 Apr 2019 14:00:37 GMT**. It is
          similar to standard HTTP ''Date'' expect that it allows to set it under
          JavaScript in browser while standard ''Date'' is forbidden'
        in: header
        name: X-Nordea-Originating-Date
        required: true
        type: string
      - description: HTTP header element for specification of the domain name of the
          server. It is similar to standard HTTP 'Host' header but it won't be overridden
          by proxies. It also allows to set it under JavaScript in browser while standard
          'Host' is forbidden
        in: header
        name: X-Nordea-Originating-Host
        required: true
        type: string
      - description: End user (i.e. PSU) agent information, to be provided if TPP
          is in session with the PSU
        in: header
        name: X-Nordea-Originating-User-Agent
        required: false
        type: string
      - description: End user (i.e. PSU) IP address, to be provided if TPP is in session
          with the PSU
        in: header
        name: X-Nordea-Originating-User-Ip
        required: false
        type: string
      - description: Request for filtered accounts
        in: body
        name: filterRequest
        required: false
        schema:
          $ref: '#/definitions/AccountFilterRequest'
        x-availabilityStatus: Stable
      - description: Page number
        in: query
        name: page
        required: false
        type: string
        x-availabilityStatus: Stable
      - description: Page size
        in: query
        name: size
        required: false
        type: string
        x-availabilityStatus: Stable
      produces:
      - application/json
      responses:
        '200':
          description: Filtered list of accounts
          schema:
            $ref: '#/definitions/AccountListResponse'
        '400':
          description: Bad Request
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: 'Unauthorized with failure code:

            * error.apikey.missing = Missing API key. This operation requires API
            key, but it was missing.

            * error.token = Unspecified error with supplied token.

            * error.token.invalid = Missing access token or token did not authorized
            requested operation. This operation requires valid access token, but it
            was missing.

            * error.token.expired = Access token has expired.'
          schema:
            $ref: '#/definitions/ErrorResponse'
        '403':
          description: Login failure
          schema:
            $ref: '#/definitions/ErrorResponse'
        '404':
          description: Resource not found
          schema:
            $ref: '#/definitions/ErrorResponse'
      security:
      - DecoupledAuth:
        - ACCOUNTS_BROADBAND
      summary: Filter Accounts
      tags:
      - accounts-v4
      x-availabilityStatus: Stable
  /premium/v4/accounts/{account_id}:
    get:
      deprecated: false
      operationId: getAccountDetailsUsingGET_3
      parameters:
      - description: "A signature of request by the TPP on application level. The\
          \ process of signing a request is described in 'Signing HTTP Messages' RFC\
          \ draft version 10 (<a href=\"https://tools.ietf.org/html/draft-cavage-http-signatures-10\"\
          \ target=\"_blank\">https://tools.ietf.org/html/draft-cavage-http-signatures-10</a>).\
          \ The request signature needs to be sent in the 'Signature' HTTP header\
          \ as described in the RFC. Additional requirements from Nordea \n - The\
          \ only allowed algorithm is RSA-SHA256 \n- The key size for the used RSA\
          \ key pair has to be at least 2048 bit \n- The keyId is the clientId of\
          \ your application originating from the Nordea Developer Portal \n- We require\
          \ the following headers to be used in the signature \n* Request without\
          \ body: (request-target) X-Nordea-Originating-Host X-Nordea-Originating-Date\
          \ \n* Request with body: (request-target) X-Nordea-Originating-Host X-Nordea-Originating-Date\
          \ Content-type Digest \n* The request-target is a combination of the HTTP\
          \ action verb and the request URI path"
        in: header
        name: Signature
        required: true
        type: string
      - description: Id of the Client
        in: header
        name: X-IBM-Client-Id
        required: true
        type: string
      - description: Secret password generated for the Client
        in: header
        name: X-IBM-Client-Secret
        required: true
        type: string
      - description: 'HTTP header element for date and time represented as RFC 7231
          Full Dates (GMT). Example date: **Wed, 24 Apr 2019 14:00:37 GMT**. It is
          similar to standard HTTP ''Date'' expect that it allows to set it under
          JavaScript in browser while standard ''Date'' is forbidden'
        in: header
        name: X-Nordea-Originating-Date
        required: true
        type: string
      - description: HTTP header element for specification of the domain name of the
          server. It is similar to standard HTTP 'Host' header but it won't be overridden
          by proxies. It also allows to set it under JavaScript in browser while standard
          'Host' is forbidden
        in: header
        name: X-Nordea-Originating-Host
        required: true
        type: string
      - description: End user (i.e. PSU) agent information, to be provided if TPP
          is in session with the PSU
        in: header
        name: X-Nordea-Originating-User-Agent
        required: false
        type: string
      - description: End user (i.e. PSU) IP address, to be provided if TPP is in session
          with the PSU
        in: header
        name: X-Nordea-Originating-User-Ip
        required: false
        type: string
      - description: Internal, technical account identifier
        in: path
        name: account_id
        required: true
        type: string
        x-availabilityStatus: Stable
      produces:
      - application/json
      responses:
        '200':
          description: Account details
          schema:
            $ref: '#/definitions/AccountDetailsResponse'
        '400':
          description: Bad Request
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: 'Unauthorized with failure code:

            * error.apikey.missing = Missing API key. This operation requires API
            key, but it was missing.

            * error.token = Unspecified error with supplied token.

            * error.token.invalid = Missing access token or token did not authorized
            requested operation. This operation requires valid access token, but it
            was missing.

            * error.token.expired = Access token has expired.'
          schema:
            $ref: '#/definitions/ErrorResponse'
        '403':
          description: Login failure
          schema:
            $ref: '#/definitions/ErrorResponse'
        '404':
          description: Account not found
          schema:
            $ref: '#/definitions/ErrorResponse'
      security:
      - DecoupledAuth:
        - ACCOUNTS_BROADBAND
      summary: Account details
      tags:
      - accounts-v4
      x-availabilityStatus: Stable
  /premium/v4/accounts/{account_id}/transactions:
    get:
      deprecated: false
      operationId: getTransactionsUsingGET_3
      parameters:
      - description: "A signature of request by the TPP on application level. The\
          \ process of signing a request is described in 'Signing HTTP Messages' RFC\
          \ draft version 10 (<a href=\"https://tools.ietf.org/html/draft-cavage-http-signatures-10\"\
          \ target=\"_blank\">https://tools.ietf.org/html/draft-cavage-http-signatures-10</a>).\
          \ The request signature needs to be sent in the 'Signature' HTTP header\
          \ as described in the RFC. Additional requirements from Nordea \n - The\
          \ only allowed algorithm is RSA-SHA256 \n- The key size for the used RSA\
          \ key pair has to be at least 2048 bit \n- The keyId is the clientId of\
          \ your application originating from the Nordea Developer Portal \n- We require\
          \ the following headers to be used in the signature \n* Request without\
          \ body: (request-target) X-Nordea-Originating-Host X-Nordea-Originating-Date\
          \ \n* Request with body: (request-target) X-Nordea-Originating-Host X-Nordea-Originating-Date\
          \ Content-type Digest \n* The request-target is a combination of the HTTP\
          \ action verb and the request URI path"
        in: header
        name: Signature
        required: true
        type: string
      - description: Id of the Client
        in: header
        name: X-IBM-Client-Id
        required: true
        type: string
      - description: Secret password generated for the Client
        in: header
        name: X-IBM-Client-Secret
        required: true
        type: string
      - description: 'HTTP header element for date and time represented as RFC 7231
          Full Dates (GMT). Example date: **Wed, 24 Apr 2019 14:00:37 GMT**. It is
          similar to standard HTTP ''Date'' expect that it allows to set it under
          JavaScript in browser while standard ''Date'' is forbidden'
        in: header
        name: X-Nordea-Originating-Date
        required: true
        type: string
      - description: HTTP header element for specification of the domain name of the
          server. It is similar to standard HTTP 'Host' header but it won't be overridden
          by proxies. It also allows to set it under JavaScript in browser while standard
          'Host' is forbidden
        in: header
        name: X-Nordea-Originating-Host
        required: true
        type: string
      - description: End user (i.e. PSU) agent information, to be provided if TPP
          is in session with the PSU
        in: header
        name: X-Nordea-Originating-User-Agent
        required: false
        type: string
      - description: End user (i.e. PSU) IP address, to be provided if TPP is in session
          with the PSU
        in: header
        name: X-Nordea-Originating-User-Ip
        required: false
        type: string
      - description: Internal, technical account identifier
        in: path
        name: account_id
        required: true
        type: string
        x-availabilityStatus: Stable
      - description: Resource listing may return a continuationKey if there is more
          results available. Request may be retried with the continuationKey, but
          otherwise same parameters, in order to get more results.
        in: query
        name: continuation_key
        required: false
        type: string
        x-availabilityStatus: Stable
      - description: List transactions starting from and including this date
        in: query
        name: from_date
        required: false
        type: string
        x-availabilityStatus: Stable
      - description: List any transactions booked after (later than) the specified
          from_transaction
        in: query
        name: from_transaction
        required: false
        type: string
        x-availabilityStatus: Stable
      - description: Preferred language for text values
        in: query
        name: language
        required: false
        type: string
        x-availabilityStatus: Stable
      - description: List transactions until and including this date
        in: query
        name: to_date
        required: false
        type: string
        x-availabilityStatus: Stable
      produces:
      - application/json
      responses:
        '200':
          description: List of account transactions
          schema:
            $ref: '#/definitions/TransactionListResponse'
        '400':
          description: Bad Request
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: 'Unauthorized with failure code:

            * error.apikey.missing = Missing API key. This operation requires API
            key, but it was missing.

            * error.token = Unspecified error with supplied token.

            * error.token.invalid = Missing access token or token did not authorized
            requested operation. This operation requires valid access token, but it
            was missing.

            * error.token.expired = Access token has expired.'
          schema:
            $ref: '#/definitions/ErrorResponse'
        '403':
          description: Login failure
          schema:
            $ref: '#/definitions/ErrorResponse'
        '404':
          description: Account not found
          schema:
            $ref: '#/definitions/ErrorResponse'
      security:
      - DecoupledAuth:
        - ACCOUNTS_BROADBAND
      summary: List Transactions
      tags:
      - accounts-v4
      x-availabilityStatus: Stable
securityDefinitions:
  DecoupledAuth:
    authorizationUrl: /v2/authorize
    flow: accessCode
    scopes:
      ACCOUNTS_BROADBAND: Scope used for Instant Reporting
    tokenUrl: /v2/authorize/token
    type: oauth2
    x-addAuthorizerDescription: Send authorization request to relevant agreement administrator
    x-addAuthorizerUrl: /v2/authorize
    x-authSubType: decoupled-auth
    x-codeStatusDescription: Returns code when authorization second step is finished
    x-codeStatusUrl: /v2/authorize
swagger: '2.0'
tags:
- description: Customer accounts
  name: accounts-v4
