Account linking

Confirm link

POST/api/v1/end_user_topup/confirm-topup

Authorization + signatureFirm banking

Confirms the OTP to finish linking and receive a resourceId.

This API needs a Signature header. The portal signs when that company code has a signing key configured. Without it, the sandbox receives the request unsigned.

Headers

Fields	Description
`Content-Type`Required	application/json
`Authorization`Required	Authorization key Fintwin issues for the company code.
`Signature`Required	Body integrity signature. The signing key is issued with the API key.
`Timestamp`Required	Request time.

Body

Fields	Description
`clientMessageId`Required	Message id.
`comCode`Required	Enterprise code.
`bankCode`Required	Bank code.
`sourceNumber`Required	Account number.
`attemptId`Required	attemptId from the link step.
`otp`Required	OTP.

Samples

curl -X POST 'https://sandbox.example.invalid/api/v1/end_user_topup/confirm-topup' \
  -H 'Content-Type: application/json' \
  -H 'Authorization: <authorization-key>' \
  -d '{"clientMessageId":"MSG-TEST-002","comCode":"TEST0001","bankCode":"970422","sourceNumber":"000000000000TEST","attemptId":"ATT-TEST-001","otp":"000000"}'