POST to PAR endpoint

Request

POST /par HTTP/1.1
Host: as1.sandbox.mya.ozoneapi.io
Content-Type: application/x-www-form-urlencoded
x-fapi-interaction-id: 5009f9bd-629a-4e6c-978e-f411c016305f

client_id=55aa605c-89ef-4473-aa88-47709f0ff383&
request=eyJhbGciOiJQUzI1Ni...<truncated-JAR-jwt>
client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer&
client_assertion=eyJhbGciOiJQ..<truncated-PK-jwt>

Decoded JAR JWT

Header

{
  "alg": "PS256",
  "kid": "CYMIwoZ1CUbkI0WhG1Km7Td8bU7V2DYEB3cXVHdGwAI"
}

Body

{
  "aud": "https://auth1.sandbox.mya.ozoneapi.io",
  "exp": 1769767018.445,
  "iss": "55aa605c-89ef-4473-aa88-47709f0ff383",
  "scope": "accounts profile",
  "redirect_uri": "https://www.auth-app.ozoneapi.co.uk/redirect-url",
  "client_id": "55aa605c-89ef-4473-aa88-47709f0ff383",
  "nonce": "11fdc21a-ee49-4d6f-9e1b-17ab17bb0c59",
  "state": "f37011fc-cb38-43f3-bf3c-d5771c692a08",
  "nbf": 1769766708.445,
  "response_type": "code",
  "code_challenge_method": "S256",
  "code_challenge": "OhVeHJxBatrq8rXdqjOUY2tK-dPUXWiMHmEc65R-rjA",
  "max_age": 3600,
  "claims": {
    "userinfo": {
      "name": null,
      "email": null,
      "email_verified": null,
      "id_type": null,
      "hashed_id_number": null
    }
  },
  "authorization_details": [
    {
      "type": "urn:openfinance-ml:account-access-consent:v1.2",
      "consent": {
        "dc_id": "16f87e367071230059bff09a",
        "dp_id": "DP9876543210",
        "consent_type": "urn:openfinance-ml:account-access-consent:v1.2",
        "consent_purpose": "pfm",
        "permissions": [
          "read_accounts",
          "read_transactions",
          "read_balances"
        ],
        "expiration_datetime": "2026-11-30T23:59:59Z"
      }
    }
  ]
}

Decoded Private Key JWT

Header

{
  "alg": "PS256",
  "kid": "CYMIwoZ1CUbkI0WhG1Km7Td8bU7V2DYEB3cXVHdGwAI"
}

Body

{
  "aud": "https://auth1.sandbox.mya.ozoneapi.io",
  "exp": 1769767012.739,
  "iss": "55aa605c-89ef-4473-aa88-47709f0ff383",
  "sub": "55aa605c-89ef-4473-aa88-47709f0ff383",
  "jti": "633bfebd-b960-4330-80c7-0f163a52c4e3",
  "iat": 1769766702.739
}

Response

200 OK
Content-Type: application/json; charset=utf-8
x-fapi-interaction-id: 5009f9bd-629a-4e6c-978e-f411c016305f

{
    "request_uri": "urn:ietf:params:oauth:request_uri:2e265616-436b-49b8-bf63-585a70fa68d8",
    "expires_in": 600
}