Záznam webináře je k dispozici zde: https://www.youtube.com/watch?v=3v02Zd_W0PM Co musí banka udělat pro to, aby se mohla zapojit do multi-bankingu Zingly? Ukážeme, že to není tak složité, a že náklady na nasazení potřebné infrastruktury nepřesahují několik jednotek dní práce.

1. Co musí banka
udělat pro zapojení
do Zingly?

2. Petr Dvořák
CEO at Lime
E-mail: petr@lime-company.eu
Twitter: @joshis_tweets

3. Sdílejte přátelům a známým
Otázky lze klást v Q&A boxu
Odkaz na Slideshare v popisu videa
Záznam bude dostupný on-line

4. Infrastruktura Zingly

5. PowerAuth Server PowerAuth Server
Zingly API Server Zingly API Server
Zingly Multi-Banking Hub Server
Banka A Banka B
BankyUživatelé
PowerAuth Server
Zingly
Internetové
bankovnictví
Internetové
bankovnictví

6. PowerAuth Server PowerAuth Server
Zingly API Server Zingly API Server
Zingly Multi-Banking Hub Server
Banka A Banka B
BankyUživatelé
PowerAuth Server
Zingly
Internetové
bankovnictví
Internetové
bankovnictví

7. PowerAuth Server PowerAuth Server
Zingly API Server Zingly API Server
Zingly Multi-Banking Hub Server
Banka A Banka B
BankyUživatelé
PowerAuth Server
Zingly
Internetové
bankovnictví
Internetové
bankovnictví

8. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
SOAP
REST-ish
SOAP
REST-ish
PowerAuth 2.0 Standard API
Zingly Banking API

9. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
Internal Banking Infrastructure
Plugin / Adapter Plugin / Adapter
Connector

10. Použité technologie

11. Spring Boot
JPA + Hibernate
Aplikace - Java EE 7

12. OracleDB, IBM DB2,
MySQL, PostgreSQL
Databáze - JPA2.0

13. Github
Maven
Development
*
* komerční support

14. SOAP
REST
Service API

15. Postup nasazování

16. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
1. Nasazení PowerAuth 2.0 Serveru

17. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
2. Integrace s IB

18. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
3. Nasazení Zingly API Serveru

19. Nasazení PowerAuth 2.0
Serveru
https://github.com/lime-company/lime-security-powerauth/blob/master/powerauth-
docs/source/tutorial/deployment.md

20. 1. Stáhněte si PowerAuth 2.0 Server
https://github.com/lime-company/lime-security-powerauth/releases/tag/0.8

21. 2. Přidejte DB connector na classpath
mysql-connector-java-${VERSION}.jar

22. 3. Vytvořte databázové schéma

24. 4. Nastavte parametry pro připojení
PowerAuth serveru do DB

25. spring.datasource.url=jdbc:mysql://localhost:3306/powerauth
spring.datasource.username=powerauth
spring.datasource.password=
spring.datasource.driver-class-name=com.mysql.jdbc.Driver
spring.jpa.hibernate.ddl-auto=none

26. 5. Nasaďte WAR soubor do Java EE
aplikačního containeru
Nebo spusťte ”java -jar powerauth-java-server.war”

27. Demo

28. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
SOAP
REST-ish
PowerAuth 2.0 Standard API
Zingly Banking API
SOAP
REST-ish

29. PowerAuth 2.0
Admin

30. Správa aplikací

31. Přehled aktivací uživatele

32. Nová aktivace

33. Detail a správa aktivace

34. 1. Stáhněte si PowerAuth 2.0 Admin
https://github.com/lime-company/lime-security-powerauth/releases/tag/0.8

35. 2. Nastavte cestu k PowerAuth Serveru

36. powerauth.service.url=http://localhost:8080/powerauth/soap

37. 3. Nasaďte WAR soubor do Java EE
aplikačního containeru
Nebo spusťte ”java -jar powerauth-admin.war”

38. Demo

39. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
SOAP
REST-ish
PowerAuth 2.0 Standard API
Zingly Banking API
SOAP
REST-ish
PowerAuth
Admin

40. Integrace PowerAuth 2.0
a Internetbankingu
https://github.com/lime-company/lime-security-powerauth/blob/
master/powerauth-docs/source/tutorial/internet-banking.md

41. Admin ~ Internetbanking

42. 1. Přidejte do projektu Maven závislost

43. <dependency>
<groupId>io.getlime.security</groupId>
<artifactId>powerauth-java-client</artifactId>
<version>0.0.8</version>
</dependency>

44. <dependency>
<groupId>io.getlime.security</groupId>
<artifactId>powerauth-java-client</artifactId>
<version>0.0.8</version>
</dependency>

45. <dependency>
<groupId>io.getlime.security</groupId>
<artifactId>powerauth-java-client</artifactId>
<version>0.0.8</version>
</dependency>

46. <dependency>
<groupId>io.getlime.security</groupId>
<artifactId>powerauth-java-client</artifactId>
<version>0.0.8</version>
</dependency>

47. 2. Napojte se na PowerAuth Server

48. @Configuration
@ComponentScan(basePackages = {"io.getlime"})
public class PowerAuthWebServiceConfiguration {
@Bean
public Jaxb2Marshaller marshaller() {
Jaxb2Marshaller marshaller = new Jaxb2Marshaller();
marshaller.setContextPath("io.getlime.powerauth.soap");
return marshaller;
}
@Bean
public PowerAuthServiceClient powerAuthClient(Jaxb2Marshaller m) {
PowerAuthServiceClient client = new PowerAuthServiceClient();
client.setDefaultUri("http://localhost:8080/powerauth/soap");
client.setMarshaller(marshaller);
client.setUnmarshaller(marshaller);
return client;
}
}

49. @Configuration
@ComponentScan(basePackages = {"io.getlime"})
public class PowerAuthWebServiceConfiguration {
@Bean
public Jaxb2Marshaller marshaller() {
Jaxb2Marshaller marshaller = new Jaxb2Marshaller();
marshaller.setContextPath("io.getlime.powerauth.soap");
return marshaller;
}
@Bean
public PowerAuthServiceClient powerAuthClient(Jaxb2Marshaller m) {
PowerAuthServiceClient client = new PowerAuthServiceClient();
client.setDefaultUri("http://localhost:8080/powerauth/soap");
client.setMarshaller(marshaller);
client.setUnmarshaller(marshaller);
return client;
}
}

50. @Configuration
@ComponentScan(basePackages = {"io.getlime"})
public class PowerAuthWebServiceConfiguration {
@Bean
public Jaxb2Marshaller marshaller() {
Jaxb2Marshaller marshaller = new Jaxb2Marshaller();
marshaller.setContextPath("io.getlime.powerauth.soap");
return marshaller;
}
@Bean
public PowerAuthServiceClient powerAuthClient(Jaxb2Marshaller m) {
PowerAuthServiceClient client = new PowerAuthServiceClient();
client.setDefaultUri("http://localhost:8080/powerauth/soap");
client.setMarshaller(marshaller);
client.setUnmarshaller(marshaller);
return client;
}
}

51. @Configuration
@ComponentScan(basePackages = {"io.getlime"})
public class PowerAuthWebServiceConfiguration {
@Bean
public Jaxb2Marshaller marshaller() {
Jaxb2Marshaller marshaller = new Jaxb2Marshaller();
marshaller.setContextPath("io.getlime.powerauth.soap");
return marshaller;
}
@Bean
public PowerAuthServiceClient powerAuthClient(Jaxb2Marshaller m) {
PowerAuthServiceClient client = new PowerAuthServiceClient();
client.setDefaultUri("http://localhost:8080/powerauth/soap");
client.setMarshaller(marshaller);
client.setUnmarshaller(marshaller);
return client;
}
}

52. 3. Používejte PowerAuthServiceClient
ve vaší aplikaci

53. @Controller
@RequestMapping(value = "/ib/settings")
public class AuthenticationController {
@Autowired
private PowerAuthServiceClient client;
// ... Controller code
List<Activations> aL = client.getActivationListForUser(uid);
}

54. @Controller
@RequestMapping(value = "/ib/settings")
public class AuthenticationController {
@Autowired
private PowerAuthServiceClient client;
// ... Controller code
List<Activations> aL = client.getActivationListForUser(uid);
}

55. Blokace / odblokování aktivace
Odstranění aktivace
Nová aktivace a “commit” aktivace
Přehled aktivací

56. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
SOAP
REST-ish
PowerAuth 2.0 Standard API
Zingly Banking API
SOAP
REST-ish
PowerAuth
Admin

57. Nasazení Zingly API
Serveru

58. Open-source *
* již brzy

59. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
SOAP
REST-ish
PowerAuth 2.0 Standard API
Zingly Banking API
SOAP
REST-ish
PowerAuth
Admin

60. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
SOAP
REST-ish
SOAP
REST-ish
PowerAuth 2.0 Standard API
Zingly Banking API
Bankovní služby
PowerAuth
Admin

61. Orchestruje obchodní logiku
Služby pro přehledy účtů a transakcí
Vystavuje PowerAuth 2.0 Standard API
Integrace s PowerAuth 2.0 Serverem
Služby pro realizaci platby

62. Orchestruje obchodní logiku
Služby pro přehledy účtů a transakcí
Vystavuje PowerAuth 2.0 Standard API
Integrace s PowerAuth 2.0 Serverem
Služby pro realizaci platby

63. 1. Stáhněte si Zingly API Server
TBD - TODO - SOON

64. 2. Nastavte cestu k PowerAuth Serveru

65. powerauth.service.url=http://localhost:8080/powerauth/soap

66. 3. Rozšiřte projekt o vaše specifické
technologie a knihovny

67. 4. Naimplementujte bankovní službu

68. public interface ZinglyService {
public List<AccountModel> getAccountsForUser(String userId);
public boolean canGetTransactions(String userId, String iban);
public List<TransactionModel> getTransactionsForAccount(
String iban,
Date dateFrom,
Date dateTo,
BigInteger offset,
BigInteger itemCount
);
public boolean canExecutePayment(String userId, String iban);
public List<ErrorModel> validatePayment(PaymentModel payment);
public PaymentModel executePayment(PaymentModel payment);
// ...
}

69. public interface ZinglyService {
public List<AccountModel> getAccountsForUser(String userId);
public boolean canGetTransactions(String userId, String iban);
public List<TransactionModel> getTransactionsForAccount(
String iban,
Date dateFrom,
Date dateTo,
BigInteger offset,
BigInteger itemCount
);
public boolean canExecutePayment(String userId, String iban);
public List<ErrorModel> validatePayment(PaymentModel payment);
public PaymentModel executePayment(PaymentModel payment);
// ...
}

70. Ukázka kódu

71. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
SOAP
REST-ish
SOAP
REST-ish
PowerAuth 2.0 Standard API
Zingly Banking API
Bankovní služby
PowerAuth
Admin

72. Testování integrace
https://github.com/lime-company/lime-security-powerauth/blob/
master/powerauth-docs/source/tutorial/console-client-app.md

74. 1. Stáhněte si PowerAuth 2.0 CMD
https://github.com/lime-company/lime-security-powerauth/releases

75. 2. Připravte si konfigurační soubor

76. $ cat /tmp/pamk.json
{
"applicationName": "PowerAuth 2.0 Reference Client",
"applicationId": "Xg2sNup4wH7UQdchEld10w==",
"applicationSecret": "+k9EBCszvcDOalMK9FZYiQ==",
"masterPublicKey": "BByU43YKRNkzB+1/rahhaJC4kiGNiciYrcTBrL8="
}

77. 3. Testujte integraci :-)

78. $ java -jar powerauth-java-cmd.jar
--url "http://localhost:8080/zingly-api"
--config-file "/tmp/pamk.json"
--status-file "/tmp/pa_status.json"
--method "prepare"
--password "1234"
--activation-code "F3CCT-FNOUS-GEVJF-O3HMV"

79. $ cat /tmp/pa_status.json
{
"activationId" : "24ac43a6-375e-4428-843a-84a2faa87e8e"
"counter" : 4,
"signaturePossessionKey" : "CwCviJR/wGqm8wNrNe4JGA==",
"signatureKnowledgeKeyEncrypted" : "WFKHFrezmYuFAUToAQ==",
"signatureKnowledgeKeySalt" : "RmDQ8hwsy0V/Gi1GHDKjWw==",
"signatureBiometryKey" : "K2ZrnBP/AU2dWheFJOQKvw==",
"transportMasterKey" : "kp2sNKVGepV9xtTwLXs/5g==",
"encryptedDevicePrivateKey" : "17LLl/C8pYo/YA+w4Z6z1LLZa2U",
"serverPublicKey" : "BEWx7a6LnkW7ckbJKUz2IINY5VSL0U6INwM="
}

80. $ cat /tmp/pa_status.json
{
"activationId" : "24ac43a6-375e-4428-843a-84a2faa87e8e"
"counter" : 4,
"signaturePossessionKey" : "CwCviJR/wGqm8wNrNe4JGA==",
"signatureKnowledgeKeyEncrypted" : “WFKHFrezmYuFAUToAQ==",
"signatureKnowledgeKeySalt" : "RmDQ8hwsy0V/Gi1GHDKjWw==",
"signatureBiometryKey" : "K2ZrnBP/AU2dWheFJOQKvw==",
"transportMasterKey" : "kp2sNKVGepV9xtTwLXs/5g==",
"encryptedDevicePrivateKey" : "17LLl/C8pYo/YA+w4Z6z1LLZa2U",
"serverPublicKey" : "BEWx7a6LnkW7ckbJKUz2IINY5VSL0U6INwM="
}

81. $ cat /tmp/pa_status.json
{
"activationId" : "24ac43a6-375e-4428-843a-84a2faa87e8e"
"counter" : 4,
"signaturePossessionKey" : "CwCviJR/wGqm8wNrNe4JGA==",
"signatureKnowledgeKeyEncrypted" : "WFKHFrezmYuFAUToAQ==",
"signatureKnowledgeKeySalt" : "RmDQ8hwsy0V/Gi1GHDKjWw==",
"signatureBiometryKey" : "K2ZrnBP/AU2dWheFJOQKvw==",
"transportMasterKey" : "kp2sNKVGepV9xtTwLXs/5g==",
"encryptedDevicePrivateKey" : "17LLl/C8pYo/YA+w4Z6z1LLZa2U",
"serverPublicKey" : "BEWx7a6LnkW7ckbJKUz2IINY5VSL0U6INwM="
}

82. $ cat /tmp/pa_status.json
{
"activationId" : "24ac43a6-375e-4428-843a-84a2faa87e8e"
"counter" : 4,
"signaturePossessionKey" : "CwCviJR/wGqm8wNrNe4JGA==",
"signatureKnowledgeKeyEncrypted" : "WFKHFrezmYuFAUToAQ==",
"signatureKnowledgeKeySalt" : "RmDQ8hwsy0V/Gi1GHDKjWw==",
"signatureBiometryKey" : "K2ZrnBP/AU2dWheFJOQKvw==",
"transportMasterKey" : "kp2sNKVGepV9xtTwLXs/5g==",
"encryptedDevicePrivateKey" : "17LLl/C8pYo/YA+w4Z6z1LLZa2U",
"serverPublicKey" : "BEWx7a6LnkW7ckbJKUz2IINY5VSL0U6INwM="
}

83. $ cat /tmp/pa_status.json
{
"activationId" : "24ac43a6-375e-4428-843a-84a2faa87e8e"
"counter" : 4,
"signaturePossessionKey" : "CwCviJR/wGqm8wNrNe4JGA==",
"signatureKnowledgeKeyEncrypted" : "WFKHFrezmYuFAUToAQ==",
"signatureKnowledgeKeySalt" : "RmDQ8hwsy0V/Gi1GHDKjWw==",
"signatureBiometryKey" : "K2ZrnBP/AU2dWheFJOQKvw==",
"transportMasterKey" : "kp2sNKVGepV9xtTwLXs/5g==",
"encryptedDevicePrivateKey" : "17LLl/C8pYo/YA+w4Z6z1LLZa2U",
"serverPublicKey" : "BEWx7a6LnkW7ckbJKUz2IINY5VSL0U6INwM="
}

84. $ cat /tmp/pa_status.json
{
"activationId" : "24ac43a6-375e-4428-843a-84a2faa87e8e"
"counter" : 4,
"signaturePossessionKey" : "CwCviJR/wGqm8wNrNe4JGA==",
"signatureKnowledgeKeyEncrypted" : "WFKHFrezmYuFAUToAQ==",
"signatureKnowledgeKeySalt" : "RmDQ8hwsy0V/Gi1GHDKjWw==",
"signatureBiometryKey" : "K2ZrnBP/AU2dWheFJOQKvw==",
"transportMasterKey" : "kp2sNKVGepV9xtTwLXs/5g==",
"encryptedDevicePrivateKey" : "17LLl/C8pYo/YA+w4Z6z1LLZa2U",
"serverPublicKey" : "BEWx7a6LnkW7ckbJKUz2IINY5VSL0U6INwM="
}

85. $ cat /tmp/pa_status.json
{
"activationId" : "24ac43a6-375e-4428-843a-84a2faa87e8e"
"counter" : 4,
"signaturePossessionKey" : "CwCviJR/wGqm8wNrNe4JGA==",
"signatureKnowledgeKeyEncrypted" : "WFKHFrezmYuFAUToAQ==",
"signatureKnowledgeKeySalt" : "RmDQ8hwsy0V/Gi1GHDKjWw==",
"signatureBiometryKey" : "K2ZrnBP/AU2dWheFJOQKvw==",
"transportMasterKey" : "kp2sNKVGepV9xtTwLXs/5g==",
"encryptedDevicePrivateKey" : "17LLl/C8pYo/YA+w4Z6z1LLZa2U",
"serverPublicKey" : "BEWx7a6LnkW7ckbJKUz2IINY5VSL0U6INwM="
}

86. PowerAuth Server
Zingly API Server
Internetové
bankovnictví
SOAP
REST-ish
SOAP
REST-ish
PowerAuth 2.0 Standard API
Zingly Banking API
Bankovní služby
PowerAuth
Admin

87. PowerAuth Server PowerAuth Server
Zingly API Server Zingly API Server
Zingly Multi-Banking Hub Server
Banka A Banka B
BankyUživatelé
PowerAuth Server
Zingly
Internetové
bankovnictví
Internetové
bankovnictví

88. Děkuji
Petr Dvořák
e-mail: petr@lime-company.eu
twitter: @zinglyapp
http://zingly.cz/

89. 31.3., 15:00 - 16:00
Dopad multi-bankingu a otevřených
bankovních API do obchodního fungování
bank

90. Otázky? :-)
Petr Dvořák
e-mail: petr@lime-company.eu
twitter: @zinglyapp
http://zingly.cz/