How To
Error Codes - Scenarios
| Scenario | NBS Response | TPP Action |
|---|---|---|
TPP attempts to access a resource for which the access has been revoked at the ASPSP. (Sub-scenario: Access token has been revoked; consent is still in Authorised state) | This Scenario is not implemented in NBS as we do not revoke the Access Token as an ASPSP. | N/A |
TPP attempts to access a resource for which the access has been revoked at the ASPSP. (Sub-scenario: Access token not revoked; consent has been changed to Rejected by ASPSP.) | Http Status: 400 Error Code: UK.OBIE.Resource.InvalidConsentStatus Error Type: AuthoriseConsent | Create a new consent using a POST operation. Authorize the consent with the PSU. |
TPP attempts to access a resource for which the access has been revoked at the ASPSP. (Sub-scenario: Access token is revoked; consent has been changed to Rejected by ASPSP.) | This Scenario is not implemented in NBS as we do not revoke the Access Token as an ASPSP. | N/A |
TPP attempts to access a resource for which the access has been revoked at the ASPSP. (Sub-scenarios: Access token is active; consent is still in Authorised state). | HTTP Status: 403 Error Code: NA Error Type: Re-Authenticate | N/A |
TPP attempts to access a resource using an access token that has expired. The underlying consent has not expired. | HTTP Status: 401 Error Code: NA Error Type: Re-Authenticate | If the TPP has a valid refresh token, use the refresh token to get a new access token. If the refresh token has expired as well, take the user through a re-auth. |
TPP attempts to access a resource using an access token that has expired. The underlying consent has expired. | HTTP Status: 403 Error Code: NA Error Type: Re-Consent | Create a new consent using a POST operation. Take the PSU through an authentication journey. |
TPP attempts to access a resource using an access token outside of the SCA period. The underlying consent has not expired. Typically this applies to AIS resources that do not benefit from RTS Article 10. | This Scenario is not implemented in NBS. | N/A |
TPP attempts to access a resource related to an account that is closed. This may also apply in situations where the account holder has wound up, is under receivership, or is deceased. | HTTP Status: 403 Error Code: NA Error Type: NA | No Action Required from TPP. |
TPP attempts to access a resource related to an account that is temporarily barred from access. This includes situations where the account has a fraud marker or access has been barred for other reasons. | HTTP Status: 403 Error Code: NA Error Type: Re-Authenticate | TPP needs to reach to PSU and ask for contact with the Bank. Note: temporarily barred should be remove before it can be re authenticated |
| TPP attempts to access a resource for which the access has been revoked at the TPP. The consent is revoked by the TPP. | HTTP Status: 403 Error Code: NA Error Type: NA | N/A |