@mojaloop/api-snippets 18.3.1 → 18.4.0

package/thirdparty/v1_0/openapi3/thirdparty-dfsp-api.yaml

@@ -8,11 +8,11 @@ info:
     PISPs should implement the accompanying API - Mojaloop Third  Party API (PISP) instead.
   license:
     name: Open API for FSP Interoperability (FSPIOP) (Implementation Friendly Version)
-    url: 'https://github.com/mojaloop/mojaloop-specification/blob/main/LICENSE.md'
+    url: https://github.com/mojaloop/mojaloop-specification/blob/main/LICENSE.md
 servers:
   - url: /
 paths:
-  '/accounts/{ID}':
+  /accounts/{ID}:
     parameters:
       - name: ID
         in: path
@@ -81,7 +81,7 @@ paths:
                 The PUT /accounts/{ID} response is used to inform the requester of the result of a request for accounts information. The identifier ID given in the call are the values given in the original request.
                 https://github.com/mojaloop/documentation/blob/main/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#31121--put-accountsid
               properties:
-                accountList:
+                accounts:
                   title: AccountList
                   type: array
                   description: |-
@@ -97,7 +97,7 @@ paths:
                       accountNickname:
                         title: Name
                         type: string
-                        pattern: '^(?!\s*$)[\w .,''-]{1,128}$'
+                        pattern: ^(?!\s*$)[\w .,'-]{1,128}$
                         description: |-
                           The API data type Name is a JSON String, restricted by a regular expression to avoid characters which are generally not used in a name.
 
@@ -144,7 +144,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/accounts/{ID}/error':
+  /accounts/{ID}/error:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -184,8 +184,8 @@ paths:
                     errorCode:
                       title: ErrorCode
                       type: string
-                      pattern: '^[1-9]\d{3}$'
-                      description: 'The API data type ErrorCode is a JSON String of four characters, consisting of digits only. Negative numbers are not allowed. A leading zero is not allowed. Each error code in the API is a four-digit number, for example, 1234, where the first number (1 in the example) represents the high-level error category, the second number (2 in the example) represents the low-level error category, and the last two numbers (34 in the example) represent the specific error.'
+                      pattern: ^[1-9]\d{3}$
+                      description: The API data type ErrorCode is a JSON String of four characters, consisting of digits only. Negative numbers are not allowed. A leading zero is not allowed. Each error code in the API is a four-digit number, for example, 1234, where the first number (1 in the example) represents the high-level error category, the second number (2 in the example) represents the low-level error category, and the last two numbers (34 in the example) represent the specific error.
                       example: '5100'
                     errorDescription:
                       title: ErrorDescription
@@ -260,12 +260,12 @@ paths:
                 consentRequestId:
                   title: CorrelationId
                   type: string
-                  pattern: '^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$'
-                  description: 'Identifier that correlates all messages of the same sequence. The API data type UUID (Universally Unique Identifier) is a JSON String in canonical format, conforming to [RFC 4122](https://tools.ietf.org/html/rfc4122), that is restricted by a regular expression for interoperability reasons. A UUID is always 36 characters long, 32 hexadecimal symbols and 4 dashes (‘-‘).'
+                  pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+                  description: Identifier that correlates all messages of the same sequence. The API data type UUID (Universally Unique Identifier) is a JSON String in canonical format, conforming to [RFC 4122](https://tools.ietf.org/html/rfc4122), that is restricted by a regular expression for interoperability reasons. A UUID is always 36 characters long, 32 hexadecimal symbols and 4 dashes (‘-‘).
                   example: b51ec534-ee48-4575-b6a9-ead2955b8069
                 userId:
                   type: string
-                  description: 'The identifier used in the **GET /accounts/**_{ID}_. Used by the DFSP to correlate an account lookup to a `consentRequest`'
+                  description: The identifier used in the **GET /accounts/**_{ID}_. Used by the DFSP to correlate an account lookup to a `consentRequest`
                   minLength: 1
                   maxLength: 128
                 scopes:
@@ -289,7 +289,7 @@ paths:
                           An entity providing accounts to parties (i.e. a participant) can provide any value for an AccountAddress that is meaningful to that entity. It does not need to provide an address that makes the account identifiable outside the entity's domain.
                           IMPORTANT: The policy for defining addresses and the life-cycle of these is at the discretion of the address space owner (the payer DFSP in this case).
                           https://github.com/mojaloop/documentation/blob/main/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#3212-accountaddress
-                        pattern: '^([0-9A-Za-z_~\-\.]+[0-9A-Za-z_~\-])$'
+                        pattern: ^([0-9A-Za-z_~\-\.]+[0-9A-Za-z_~\-])$
                         minLength: 1
                         maxLength: 1023
                       actions:
@@ -331,7 +331,7 @@ paths:
                 callbackUri:
                   title: Uri
                   type: string
-                  pattern: '^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?'
+                  pattern: ^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?
                   minLength: 1
                   maxLength: 512
                   description: |
@@ -339,7 +339,7 @@ paths:
                 extensionList:
                   title: ExtensionList
                   type: object
-                  description: 'Data model for the complex type ExtensionList. An optional list of extensions, specific to deployment.'
+                  description: Data model for the complex type ExtensionList. An optional list of extensions, specific to deployment.
                   properties:
                     extension:
                       type: array
@@ -393,7 +393,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/consentRequests/{ID}':
+  /consentRequests/{ID}:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -575,8 +575,8 @@ paths:
               properties:
                 authToken:
                   type: string
-                  pattern: '^[A-Za-z0-9-_]+[=]{0,2}$'
-                  description: 'The API data type BinaryString is a JSON String. The string is a base64url  encoding of a string of raw bytes, where padding (character ‘=’) is added at the end of the data if needed to ensure that the string is a multiple of 4 characters. The length restriction indicates the allowed number of characters.'
+                  pattern: ^[A-Za-z0-9-_]+[=]{0,2}$
+                  description: The API data type BinaryString is a JSON String. The string is a base64url  encoding of a string of raw bytes, where padding (character ‘=’) is added at the end of the data if needed to ensure that the string is a multiple of 4 characters. The length restriction indicates the allowed number of characters.
                 extensionList:
                   $ref: '#/paths/~1consentRequests/post/requestBody/content/application~1json/schema/properties/extensionList'
               required:
@@ -600,7 +600,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/consentRequests/{ID}/error':
+  /consentRequests/{ID}/error:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -615,6 +615,7 @@ paths:
     put:
       tags:
         - consentRequests
+        - sampled
       operationId: NotifyErrorConsentRequests
       summary: NotifyErrorConsentRequests
       description: |
@@ -681,7 +682,7 @@ paths:
         schema:
           type: string
         required: false
-        description: 'The `FSPIOP-Destination` header field is a non-HTTP standard field used by the API for HTTP header based routing of requests and responses to the destination. The field must be set by the original sender of the request if the destination is known (valid for all services except GET /parties) so that any entities between the client and the server do not need to parse the payload for routing purposes. If the destination is not known (valid for service GET /parties), the field should be left empty.'
+        description: The `FSPIOP-Destination` header field is a non-HTTP standard field used by the API for HTTP header based routing of requests and responses to the destination. The field must be set by the original sender of the request if the destination is known (valid for all services except GET /parties) so that any entities between the client and the server do not need to parse the payload for routing purposes. If the destination is not known (valid for service GET /parties), the field should be left empty.
       - name: FSPIOP-Encryption
         in: header
         schema:
@@ -699,13 +700,13 @@ paths:
         schema:
           type: string
         required: false
-        description: 'The `FSPIOP-URI` header field is a non-HTTP standard field used by the API for signature verification, should contain the service URI. Required if signature verification is used, for more information, see [the API Signature document](https://github.com/mojaloop/docs/tree/main/Specification%20Document%20Set).'
+        description: The `FSPIOP-URI` header field is a non-HTTP standard field used by the API for signature verification, should contain the service URI. Required if signature verification is used, for more information, see [the API Signature document](https://github.com/mojaloop/docs/tree/main/Specification%20Document%20Set).
       - name: FSPIOP-HTTP-Method
         in: header
         schema:
           type: string
         required: false
-        description: 'The `FSPIOP-HTTP-Method` header field is a non-HTTP standard field used by the API for signature verification, should contain the service HTTP method. Required if signature verification is used, for more information, see [the API Signature document](https://github.com/mojaloop/docs/tree/main/Specification%20Document%20Set).'
+        description: The `FSPIOP-HTTP-Method` header field is a non-HTTP standard field used by the API for signature verification, should contain the service HTTP method. Required if signature verification is used, for more information, see [the API Signature document](https://github.com/mojaloop/docs/tree/main/Specification%20Document%20Set).
     post:
       tags:
         - consents
@@ -914,7 +915,7 @@ paths:
               $ref: '#/paths/~1consents/post/responses/400/headers/Content-Length'
             Content-Type:
               $ref: '#/paths/~1consents/post/responses/400/headers/Content-Type'
-  '/consents/{ID}':
+  /consents/{ID}:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -1141,13 +1142,13 @@ paths:
                               description: |
                                 credential id: identifier of pair of keys, base64 encoded
                                 https://w3c.github.io/webauthn/#ref-for-dom-credential-id
-                              minLength: 59
+                              minLength: 20
                               maxLength: 118
                             rawId:
                               type: string
                               description: |
                                 raw credential id: identifier of pair of keys, base64 encoded
-                              minLength: 59
+                              minLength: 20
                               maxLength: 118
                             response:
                               type: object
@@ -1172,7 +1173,7 @@ paths:
                               additionalProperties: false
                             type:
                               type: string
-                              description: 'response type, we need only the type of public-key'
+                              description: response type, we need only the type of public-key
                               enum:
                                 - public-key
                           required:
@@ -1286,7 +1287,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/consents/{ID}/error':
+  /consents/{ID}/error:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -1301,6 +1302,7 @@ paths:
     put:
       tags:
         - consents
+        - sampled
       operationId: NotifyErrorConsents
       summary: NotifyErrorConsents
       description: |
@@ -1351,6 +1353,7 @@ paths:
       summary: PostThirdpartyRequestsAuthorizations
       tags:
         - authorizations
+        - sampled
       parameters:
         - $ref: '#/paths/~1consents/post/parameters/0'
         - $ref: '#/paths/~1consents/post/parameters/1'
@@ -1391,7 +1394,7 @@ paths:
                 payer:
                   allOf:
                     - $ref: '#/paths/~1thirdpartyRequests~1transactions/post/requestBody/content/application~1json/schema/properties/payer/allOf/0'
-                  description: 'Information about the Payer type, id, sub-type/id, FSP Id in the proposed financial transaction.'
+                  description: Information about the Payer type, id, sub-type/id, FSP Id in the proposed financial transaction.
                 payee:
                   allOf:
                     - $ref: '#/paths/~1thirdpartyRequests~1transactions/post/requestBody/content/application~1json/schema/properties/payee/allOf/0'
@@ -1421,8 +1424,8 @@ paths:
                     subScenario:
                       title: TransactionSubScenario
                       type: string
-                      pattern: '^[A-Z_]{1,32}$'
-                      description: 'Possible sub-scenario, defined locally within the scheme (UndefinedEnum Type).'
+                      pattern: ^[A-Z_]{1,32}$
+                      description: Possible sub-scenario, defined locally within the scheme (UndefinedEnum Type).
                       example: LOCALLY_DEFINED_SUBSCENARIO
                     initiator:
                       title: TransactionInitiator
@@ -1469,8 +1472,8 @@ paths:
                     balanceOfPayments:
                       title: BalanceOfPayments
                       type: string
-                      pattern: '^[1-9]\d{2}$'
-                      description: '(BopCode) The API data type [BopCode](https://www.imf.org/external/np/sta/bopcode/) is a JSON String of 3 characters, consisting of digits only. Negative numbers are not allowed. A leading zero is not allowed.'
+                      pattern: ^[1-9]\d{2}$
+                      description: (BopCode) The API data type [BopCode](https://www.imf.org/external/np/sta/bopcode/) is a JSON String of 3 characters, consisting of digits only. Negative numbers are not allowed. A leading zero is not allowed.
                       example: '123'
                   required:
                     - scenario
@@ -1479,7 +1482,7 @@ paths:
                 expiration:
                   allOf:
                     - $ref: '#/paths/~1thirdpartyRequests~1transactions~1%7BID%7D/patch/requestBody/content/application~1json/schema/properties/completedTimestamp'
-                  description: 'The time by which the transfer must be completed, set by the payee DFSP.'
+                  description: The time by which the transfer must be completed, set by the payee DFSP.
                 extensionList:
                   $ref: '#/paths/~1consentRequests/post/requestBody/content/application~1json/schema/properties/extensionList'
               required:
@@ -1513,7 +1516,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/thirdpartyRequests/authorizations/{ID}':
+  /thirdpartyRequests/authorizations/{ID}:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -1534,6 +1537,7 @@ paths:
       summary: GetThirdpartyRequestsAuthorizationsById
       tags:
         - authorizations
+        - sampled
       parameters:
         - $ref: '#/paths/~1consents/post/parameters/0'
       responses:
@@ -1577,7 +1581,7 @@ paths:
               oneOf:
                 - title: ThirdpartyRequestsAuthorizationsIDPutResponseRejected
                   type: object
-                  description: 'The object sent in the PUT /thirdpartyRequests/authorizations/{ID} callback.'
+                  description: The object sent in the PUT /thirdpartyRequests/authorizations/{ID} callback.
                   properties:
                     responseType:
                       title: AuthorizationResponseTypeRejected
@@ -1592,7 +1596,7 @@ paths:
                     - responseType
                 - title: ThirdpartyRequestsAuthorizationsIDPutResponseFIDO
                   type: object
-                  description: 'The object sent in the PUT /thirdpartyRequests/authorizations/{ID} callback.'
+                  description: The object sent in the PUT /thirdpartyRequests/authorizations/{ID} callback.
                   properties:
                     responseType:
                       title: AuthorizationResponseType
@@ -1621,7 +1625,7 @@ paths:
                   additionalProperties: false
                 - title: ThirdpartyRequestsAuthorizationsIDPutResponseGeneric
                   type: object
-                  description: 'The object sent in the PUT /thirdpartyRequests/authorizations/{ID} callback.'
+                  description: The object sent in the PUT /thirdpartyRequests/authorizations/{ID} callback.
                   properties:
                     responseType:
                       $ref: '#/paths/~1thirdpartyRequests~1authorizations~1%7BID%7D/put/requestBody/content/application~1json/schema/oneOf/1/properties/responseType'
@@ -1662,7 +1666,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/thirdpartyRequests/authorizations/{ID}/error':
+  /thirdpartyRequests/authorizations/{ID}/error:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -1734,6 +1738,7 @@ paths:
       description: The HTTP request POST `/thirdpartyRequests/transactions` is used by a PISP to initiate a 3rd party Transaction request with a DFSP
       tags:
         - thirdpartyRequests
+        - sampled
       parameters:
         - $ref: '#/paths/~1consents/post/parameters/0'
         - $ref: '#/paths/~1consents/post/parameters/1'
@@ -1768,8 +1773,8 @@ paths:
                         merchantClassificationCode:
                           title: MerchantClassificationCode
                           type: string
-                          pattern: '^[\d]{1,4}$'
-                          description: 'A limited set of pre-defined numbers. This list would be a limited set of numbers identifying a set of popular merchant types like School Fees, Pubs and Restaurants, Groceries, etc.'
+                          pattern: ^[\d]{1,4}$
+                          description: A limited set of pre-defined numbers. This list would be a limited set of numbers identifying a set of popular merchant types like School Fees, Pubs and Restaurants, Groceries, etc.
                         name:
                           title: PartyName
                           type: string
@@ -1791,7 +1796,7 @@ paths:
                                   type: string
                                   minLength: 1
                                   maxLength: 128
-                                  pattern: '^(?!\s*$)[\p{L}\p{gc=Mark}\p{digit}\p{gc=Connector_Punctuation}\p{Join_Control} .,''''-]{1,128}$'
+                                  pattern: ^(?!\s*$)[\p{L}\p{gc=Mark}\p{digit}\p{gc=Connector_Punctuation}\p{Join_Control} .,''-]{1,128}$
                                   description: First name of the Party (Name Type).
                                   example: Henrik
                                 middleName:
@@ -1799,7 +1804,7 @@ paths:
                                   type: string
                                   minLength: 1
                                   maxLength: 128
-                                  pattern: '^(?!\s*$)[\p{L}\p{gc=Mark}\p{digit}\p{gc=Connector_Punctuation}\p{Join_Control} .,''''-]{1,128}$'
+                                  pattern: ^(?!\s*$)[\p{L}\p{gc=Mark}\p{digit}\p{gc=Connector_Punctuation}\p{Join_Control} .,''-]{1,128}$
                                   description: Middle name of the Party (Name Type).
                                   example: Johannes
                                 lastName:
@@ -1807,13 +1812,13 @@ paths:
                                   type: string
                                   minLength: 1
                                   maxLength: 128
-                                  pattern: '^(?!\s*$)[\p{L}\p{gc=Mark}\p{digit}\p{gc=Connector_Punctuation}\p{Join_Control} .,''''-]{1,128}$'
+                                  pattern: ^(?!\s*$)[\p{L}\p{gc=Mark}\p{digit}\p{gc=Connector_Punctuation}\p{Join_Control} .,''-]{1,128}$
                                   description: Last name of the Party (Name Type).
                                   example: Karlsson
                             dateOfBirth:
                               title: DateofBirth (type Date)
                               type: string
-                              pattern: '^(?:[1-9]\d{3}-(?:(?:0[1-9]|1[0-2])-(?:0[1-9]|1\d|2[0-8])|(?:0[13-9]|1[0-2])-(?:29|30)|(?:0[13578]|1[02])-31)|(?:[1-9]\d(?:0[48]|[2468][048]|[13579][26])|(?:[2468][048]|[13579][26])00)-02-29)$'
+                              pattern: ^(?:[1-9]\d{3}-(?:(?:0[1-9]|1[0-2])-(?:0[1-9]|1\d|2[0-8])|(?:0[13-9]|1[0-2])-(?:29|30)|(?:0[13578]|1[02])-31)|(?:[1-9]\d(?:0[48]|[2468][048]|[13579][26])|(?:[2468][048]|[13579][26])00)-02-29)$
                               description: Date of Birth of the Party.
                               example: '1966-06-16'
                       required:
@@ -1852,7 +1857,7 @@ paths:
                             [RFC 3696](https://tools.ietf.org/html/rfc3696).
                             - PERSONAL_ID - A personal identifier is used as reference to a participant.
                             Examples of personal identification are passport number, birth certificate
-                            number, and national registration number. The identifier number is added in
+                            number, and national registration number. The identifier number is added in 
                             the PartyIdentifier element. The personal identifier type is added in the
                             PartySubIdOrType element.
                             - BUSINESS - A specific Business (for example, an organization or a company)
@@ -1876,12 +1881,12 @@ paths:
                             PartySubIdOrType element for identifying an account under an Alias defined
                             by the PartyIdentifier.
                             - CONSENT - A Consent represents an agreement between a PISP, a Customer and
-                            a DFSP which allows the PISP permission to perform actions on behalf of the
-                            customer. A Consent has an authoritative source: either the DFSP who issued
+                            a DFSP which allows the PISP permission to perform actions on behalf of the 
+                            customer. A Consent has an authoritative source: either the DFSP who issued 
                             the Consent, or an Auth Service which administers the Consent.
                             - THIRD_PARTY_LINK - A Third Party Link represents an agreement between a PISP,
-                            a DFSP, and a specific Customer's account at the DFSP. The content of the link
-                            is created by the DFSP at the time when it gives permission to the PISP for
+                            a DFSP, and a specific Customer's account at the DFSP. The content of the link 
+                            is created by the DFSP at the time when it gives permission to the PISP for 
                             specific access to a given account.
                           example: PERSONAL_ID
                         partyIdentifier:
@@ -1896,7 +1901,7 @@ paths:
                           type: string
                           minLength: 1
                           maxLength: 128
-                          description: 'Either a sub-identifier of a PartyIdentifier, or a sub-type of the PartyIdType, normally a PersonalIdentifierType.'
+                          description: Either a sub-identifier of a PartyIdentifier, or a sub-type of the PartyIdType, normally a PersonalIdentifierType.
                         fspId:
                           title: FspId
                           type: string
@@ -1921,7 +1926,7 @@ paths:
                         - SEND - Amount the Payer would like to send, that is, the amount that should be withdrawn from the Payer account including any fees.
                         - RECEIVE - Amount the Payer would like the Payee to receive, that is, the amount that should be sent to the receiver exclusive of any fees.
                       example: RECEIVE
-                  description: 'SEND for sendAmount, RECEIVE for receiveAmount.'
+                  description: SEND for sendAmount, RECEIVE for receiveAmount.
                 amount:
                   allOf:
                     - title: Money
@@ -1930,7 +1935,7 @@ paths:
                       properties:
                         currency:
                           title: Currency
-                          description: 'The currency codes defined in [ISO 4217](https://www.iso.org/iso-4217-currency-codes.html) as three-letter alphabetic codes are used as the standard naming representation for currencies.'
+                          description: The currency codes defined in [ISO 4217](https://www.iso.org/iso-4217-currency-codes.html) as three-letter alphabetic codes are used as the standard naming representation for currencies.
                           type: string
                           minLength: 3
                           maxLength: 3
@@ -2102,8 +2107,8 @@ paths:
                         amount:
                           title: Amount
                           type: string
-                          pattern: '^([0]|([1-9][0-9]{0,17}))([.][0-9]{0,3}[1-9])?$'
-                          description: 'The API data type Amount is a JSON String in a canonical format that is restricted by a regular expression for interoperability reasons. This pattern does not allow any trailing zeroes at all, but allows an amount without a minor currency unit. It also only allows four digits in the minor currency unit; a negative value is not allowed. Using more than 18 digits in the major currency unit is not allowed.'
+                          pattern: ^([0]|([1-9][0-9]{0,17}))([.][0-9]{0,3}[1-9])?$
+                          description: The API data type Amount is a JSON String in a canonical format that is restricted by a regular expression for interoperability reasons. This pattern does not allow any trailing zeroes at all, but allows an amount without a minor currency unit. It also only allows four digits in the minor currency unit; a negative value is not allowed. Using more than 18 digits in the major currency unit is not allowed.
                           example: '123.45'
                       required:
                         - currency
@@ -2152,7 +2157,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/thirdpartyRequests/transactions/{ID}':
+  /thirdpartyRequests/transactions/{ID}:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -2219,6 +2224,8 @@ paths:
                 After a PISP requests the creation of a Third Party Transaction request (POST /thirdpartyRequests/transactions) or the status of a previously created Third Party Transaction request (GET /thirdpartyRequests/transactions/{ID}), the DFSP will send this callback.
                 https://github.com/mojaloop/documentation/blob/main/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#31721-put-thirdpartyrequeststransactionsid
               properties:
+                transactionId:
+                  $ref: '#/paths/~1consentRequests/post/requestBody/content/application~1json/schema/properties/consentRequestId'
                 transactionRequestState:
                   title: TransactionRequestState
                   type: string
@@ -2289,8 +2296,8 @@ paths:
                 completedTimestamp:
                   title: DateTime
                   type: string
-                  pattern: '^(?:[1-9]\d{3}-(?:(?:0[1-9]|1[0-2])-(?:0[1-9]|1\d|2[0-8])|(?:0[13-9]|1[0-2])-(?:29|30)|(?:0[13578]|1[02])-31)|(?:[1-9]\d(?:0[48]|[2468][048]|[13579][26])|(?:[2468][048]|[13579][26])00)-02-29)T(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:(\.\d{3}))(?:Z|[+-][01]\d:[0-5]\d)$'
-                  description: 'The API data type DateTime is a JSON String in a lexical format that is restricted by a regular expression for interoperability reasons. The format is according to [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html), expressed in a combined date, time and time zone format. A more readable version of the format is yyyy-MM-ddTHH:mm:ss.SSS[-HH:MM]. Examples are "2016-05-24T08:38:08.699-04:00", "2016-05-24T08:38:08.699Z" (where Z indicates Zulu time zone, same as UTC).'
+                  pattern: ^(?:[1-9]\d{3}-(?:(?:0[1-9]|1[0-2])-(?:0[1-9]|1\d|2[0-8])|(?:0[13-9]|1[0-2])-(?:29|30)|(?:0[13578]|1[02])-31)|(?:[1-9]\d(?:0[48]|[2468][048]|[13579][26])|(?:[2468][048]|[13579][26])00)-02-29)T(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:(\.\d{3}))(?:Z|[+-][01]\d:[0-5]\d)$
+                  description: The API data type DateTime is a JSON String in a lexical format that is restricted by a regular expression for interoperability reasons. The format is according to [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html), expressed in a combined date, time and time zone format. A more readable version of the format is yyyy-MM-ddTHH:mm:ss.SSS[-HH:MM]. Examples are "2016-05-24T08:38:08.699-04:00", "2016-05-24T08:38:08.699Z" (where Z indicates Zulu time zone, same as UTC).
                   example: '2016-05-24T08:38:08.699-04:00'
                 transactionRequestState:
                   $ref: '#/paths/~1thirdpartyRequests~1transactions~1%7BID%7D/put/requestBody/content/application~1json/schema/properties/transactionRequestState'
@@ -2336,7 +2343,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/thirdpartyRequests/transactions/{ID}/error':
+  /thirdpartyRequests/transactions/{ID}/error:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -2456,13 +2463,13 @@ paths:
                           description: |
                             credential id: identifier of pair of keys, base64 encoded
                             https://w3c.github.io/webauthn/#ref-for-dom-credential-id
-                          minLength: 59
+                          minLength: 20
                           maxLength: 118
                         rawId:
                           type: string
                           description: |
                             raw credential id: identifier of pair of keys, base64 encoded.
-                          minLength: 59
+                          minLength: 20
                           maxLength: 118
                         response:
                           type: object
@@ -2501,7 +2508,7 @@ paths:
                           additionalProperties: false
                         type:
                           type: string
-                          description: 'response type, we need only the type of public-key'
+                          description: response type, we need only the type of public-key
                           enum:
                             - public-key
                       required:
@@ -2569,7 +2576,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/thirdpartyRequests/verifications/{ID}':
+  /thirdpartyRequests/verifications/{ID}:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'
@@ -2670,7 +2677,7 @@ paths:
           $ref: '#/paths/~1consents/post/responses/501'
         '503':
           $ref: '#/paths/~1consents/post/responses/503'
-  '/thirdpartyRequests/verifications/{ID}/error':
+  /thirdpartyRequests/verifications/{ID}/error:
     parameters:
       - $ref: '#/paths/~1accounts~1%7BID%7D/parameters/0'
       - $ref: '#/paths/~1consents/parameters/0'