Debit mandate

Cancel mandate

POST/api/v1/end-user/autodebit-cancel

Authorization + AESFirm banking

Starts mandate cancellation. autodebit-recall-cancel resends the OTP of the same flow.

The sandbox receives { data } encrypted with AES-256-CBC (PKCS7, base64). The key is 32 bytes and the vector is 16 bytes, both UTF-8. Try encrypts the form payload in the browser, then sends it. The key never leaves your machine.

Headers

Fields	Description
`Content-Type`Required	application/json
`Authorization`Required	Authorization key Fintwin issues for the company code.

Body

Fields	Description
`com_cd`Required	Enterprise code.
`bank_cd`Required	NAPAS code.
`contract_id`Required	Contract id.
`sourceId`Required	Issued mandate token.

Samples

curl -X POST 'https://sandbox.example.invalid/api/v1/end-user/autodebit-cancel' \
  -H 'Content-Type: application/json' \
  -H 'Authorization: <authorization-key>' \
  -d '{"data":"<base64 AES-256-CBC of the business JSON>"}'