FAQs
This page contains some Frequently Asked Questions and some common errors reported by TPPs, categorised into four main sections:
Certificates
No client registered with client_id = xxx and tls_client_auth_dn = yyy
client_id = xxx and tls_client_auth_dn = yyyThis error can be returned by the /token endpoint when you have changed your transport certificate or, in some cases, when your certificate's distinguished name (DN) contains special characters.
- If you have just obtained a new transport certificate, check the guide on how to rotate your certificate.
- If you have already rotated your certificate and are unable to access the API with the new certificate, reach out to us providing the details:
- Make a request to the
/distinguished-nameendpoint. - Save the full response to a plaintext file, and email it to our API Support team.
- Make a request to the
Can I register several applications with the same certificate?
Yes. In fact, we recommend that you register separate applications for separate use cases, especially if those applications serve different purposes or correspond to different customer-facing applications.
Every application that you register gets a distinct client_id, which you must provide when obtaining the client_credentials access tokens.
See an example here.
I need to rotate the certificates for my application. Will I face any downtime?
There is no downtime for rotating signing certificates. However, when rotating transport certificates, there might be some downtime if the distinguished name of the new certificate is different from the previous one's.
To learn how to rotate the certificates, see the guide: Update application certificates.
Consent authorisation
I get the error Request signature is not valid for key id
Request signature is not valid for key idThis error is returned when you call some PIS endpoints.
Those endpoints require a x-jws-signature header to be included.
- Double check that the signature is included and correctly formatted.
Pay special attention to the JSON formatting applied to your JWS and your request payload.tip
Learn how to work with JSON web signatures.
- Additionally, make sure your that your JWKS is correct, and that it contains a JWK for the
kidyou are using in your JWS.
I created a consent but the PSU sees "Unfortunately your country is not supported"
When you register an Open Banking application, it has access to certain regions, depending on the certificate which is being used.
For more information, check the guide: Global customer access controls.
I created a consent, but the PSU is asked to contact their administrator
This can happen when the PSU is a Revolut Business user, and they don't have the necessary permissions for the account.
- For AIS consents, the user must have the permissions to manage integrations, view accounts, and view transactions.
- For PIS consents, the user must have enough permissions to initiate a transaction of the same amount in the application not subject to additional approval rules.
In addition to the above, the PSU must have their ID verified in the Revolut Business account.
Access restrictions
I created a consent, but when querying it, I get a 404
This can happen when you are querying the consent with an incorrect application.
- Check which application you used to obtain the access token. It must be the same application that was used to create the consent.
- If you have created multiple applications with the same certificate, make sure that you provide the correct
client_idwhen requesting the access token.
I am unable to retrieve transactions before or after a certain date
There are several restrictions which apply to the timeframe within which you can query PSU transactions.
-
When creating a consent, you can define the optional parametrs:
ExpirationDateTime,TransactionFromDateTimeandTransactionToDateTime. If those dates are provided, no transaction which occurred beforeTransactionFromDateTimeor afterTransactionToDateTimewill be returned. Additionally, the consent will expire afterExpirationDateTime, which means you will no longer be able to query transactions past this date. -
Additionally, if a request for transactions is made later than 5 minutes after the user authorised the consent, no transactions older than 90 days are returned, even if the
TransactionFromDateTimeis set to an earlier date. Those 90 days are counted from the moment the request for the transactions is made. -
When the PSU authorises the consent, you will get an access token linked to that consent with a validity that will depend on the region assigned to your application:
- 50 years for the UK,
- 180 days for the EU.
After your access token expires, the user must reauthorise the consent (or authorise a new consent) in order for you to maintain the access.