A single object for the authorization_details request parameter as defined by RFC 9396 (Rich Authorization Requests). Type-specific fields not modeled below can be added to the catch-all additionalFields parameter, whose entries are flattened onto the object before sending the request.

interface AuthorizationDetail {
    actions?: string[];
    additionalFields?: Record<string, unknown>;
    datatypes?: string[];
    locations?: string[];
    privileges?: string[];
    type: string;
}

Properties

actions?: string[]

Actions this authorization applies to

additionalFields?: Record<string, unknown>

Catch-all for type-specific fields not modeled above (e.g. instructedAmount for payment_initiation)

datatypes?: string[]

Data types this authorization applies to

locations?: string[]

Locations this authorization applies to

privileges?: string[]

Privileges this authorization applies to

type: string

The type of authorization details as defined by the authorization server