---
swagger: "2.0"
info:
  x-ibm-name: security
  title: Security
  version: 1.2.3
  description: Includes API calls for securing monetrary transactions, implementing
    a 2FA mechanism using sms and/or token devices.
  termsOfService: <href a="https://rapidlink.piraeusbank.gr/privacy">Privacy Policy</href>
  contact:
    name: rapidlink support
    email: rapidlink@piraeusbank.gr
    url: https://rapidlink.piraeusbank.gr
  license:
    name: Terms and Conditions of Use
    url: https://rapidlink.piraeusbank.gr/terms
schemes:
- https
basePath: /v1.2/security
securityDefinitions:
  MSIS OAuth:
    type: oauth2
    description: ""
    flow: accessCode
    authorizationUrl: https://openbank.piraeusbank.gr/identityserver/connect/authorize
    scopes:
      winbankAccess winbankAccess.info winbankAccess.monetaryTransactions: ""
    tokenUrl: https://openbank.piraeusbank.gr/identityserver/connect/token
    x-tokenIntrospect:
      url: https://$(api.endpoint.address)/$(api.org.name)/$(env.path)/v1.2/oauth/external/introspect
  Sandbox OAuth:
    type: oauth2
    description: Resource Owner Implicit Grant Type
    flow: accessCode
    authorizationUrl: https://api.rapidlink.piraeusbank.gr/piraeusbank/production/v1.2/oauth/oauth2/authorize
    scopes:
      /sandboxapi: Access to all security resources in sandbox
    tokenUrl: https://api.rapidlink.piraeusbank.gr/piraeusbank/production/v1.2/oauth/oauth2/token
    x-tokenIntrospect:
      url: https://$(api.endpoint.address)/$(api.org.name)/$(env.path)/v1.2/oauth/internal/introspect
  clientIdHeader:
    type: apiKey
    description: ""
    in: header
    name: X-IBM-Client-Id
security:
- clientIdHeader: []
  MSIS OAuth:
  - winbankAccess winbankAccess.info winbankAccess.monetaryTransactions
- clientIdHeader: []
  Sandbox OAuth:
  - /sandboxapi
paths:
  /token/select/{TokenType}/for/{SessionKey}:
    post:
      responses:
        200:
          description: OK
          schema:
            $ref: '#/definitions/Token_Select_Output'
        400:
          description: Bad Request
          schema:
            $ref: '#/definitions/Error_Output'
        401:
          description: Unauthorized
          schema:
            $ref: '#/definitions/Error_Output'
        403:
          description: Forbidden
          schema:
            $ref: '#/definitions/Error_Output'
        404:
          description: Not Found
          schema:
            $ref: '#/definitions/Error_Output'
        412:
          description: Precondition Failed
          schema:
            $ref: '#/definitions/Error_Output'
        440:
          description: Login Time-Out
          schema:
            $ref: '#/definitions/Error_Output'
        501:
          description: Not Implemented
          schema:
            $ref: '#/definitions/Error_Output'
      description: Use <b>/{TokenType}/generate/force</b> to generate <b>again</b>
        temporary pin to be used as a second factor authentication in monetary and
        other information sensitive transactions.  This is usefull in case the first
        pin, never reached the client.
      summary: Generate {TokenType} second factor pin
      tags: []
    parameters:
    - $ref: '#/parameters/Authorization'
    - $ref: '#/parameters/TokenType'
    - $ref: '#/parameters/TokenValue'
x-ibm-configuration:
  testable: true
  enforced: true
  phase: realized
consumes:
- application/json
produces:
- application/json
- lisa.pavlidi@gr.ey.com
parameters:
  Authorization:
    name: Authorization
    type: string
    required: true
    in: header
    description: This header should be in the form "Bearer Token", where Token is
      returned from the call to OAuth2.
  TokenType:
    name: TokenType
    type: string
    required: true
    in: path
    description: 'The method through which the user will receive the extrapin token
      for the particular transaction. Accepted values: SMS_OTP, PUSH_OTP.'
  SessionKey:
    name: SessionKey
    type: string
    required: true
    in: path
    description: The session key of the transaction for which the user wishes to change
      the method of receiving the extrapin token.
definitions:
  Error_Output:
    description: ""
    type: object
    properties:
      httpCode:
        type: string
      httpMessage:
        type: string
      errorCode:
        type: string
      errorMessage:
        type: string
    example: "{\n\t\"httpCode\": \"412\",\n\t\"httpMessage\": \"Precondition Failed\",\n\t\"errorCode\":
      \"API-987\",\n\t\"errorMessage\": \"sample error message\"\n}"
  Token_Select_Output:
    description: ""
    type: object
    properties:
      Valid:
        type: boolean
      tokenType:
        type: string
    example: "{\n\t\"Valid\": true,\n\t\"tokenType\": \"extrapin\"\n}"
externalDocs:
  description: Getting Started
  url: https://rapidlink.piraeusbank.gr/start
x-ibm-endpoints:
- endpointUrl: https://api.rapidlink.piraeusbank.gr/piraeusbank/production
  description: Base Gateway API Endpoint
  type:
  - production
  - development
...