Go to file
2024-09-25 16:00:46 +02:00
.github/workflows Remove Node.js 19 from CI and add Node.js 22, update actions versions. 2024-09-25 16:00:46 +02:00
assets chore: update readme 2019-11-07 11:53:09 +02:00
examples Fix bank letter script not working from the root directory like all other scripts. 2024-09-25 16:00:46 +02:00
lib Fix response parsing. 2024-07-15 14:59:23 +02:00
templates Add additional bank configuration items 2021-03-30 11:02:36 +02:00
test feat: replace <request> with <rock-req> 2023-10-11 22:15:35 +03:00
.editorconfig test: add more tests 2019-11-20 11:12:37 +02:00
.env initial commit 2018-05-17 18:03:59 +03:00
.eslintignore chore: update linter 2019-11-05 05:49:07 +02:00
.eslintrc chore: update linter 2019-11-05 05:49:07 +02:00
.gitignore chore: gitignore 2019-11-26 18:21:56 +02:00
.travis.yml feat: update dependencies 2023-10-11 21:58:26 +03:00
changelog-template.hbs add changelog configoration 2019-11-07 11:20:34 +02:00
CHANGELOG.md chore: bump 2024-07-25 12:09:05 +03:00
index.js Add traces storage 2018-08-31 08:50:18 +03:00
LICENSE Update LICENSE 2022-08-04 06:58:54 +03:00
package-lock.json Update xml-crypto. 2024-09-25 16:00:46 +02:00
package.json Fix tests failing due to RSA_PKCS1_PADDING being disabled my default. 2024-09-25 16:00:46 +02:00
README.md Document the initialization process and add a note on how to make this library work in recent Node.js versions. 2024-09-25 16:00:46 +02:00

node-ebics-client

Build Status ebics-client Known Vulnerabilities GPL-3.0 Coverage Status

Pure Node.js (>= 16) implementation of EBICS (Electronic Banking Internet Communication).

The client is aimed to be 100% ISO 20022 compliant, and supports the complete initializations process (INI, HIA, HPB orders) and HTML letter generation.

Usage

For examples on how to use this library, take a look at the examples.

A note on recent Node.js versions

The latest Node.js versions don't support RSA_PKCS1_PADDING for private decryption for security reasons, throwing an error like TypeError: RSA_PKCS1_PADDING is no longer supported for private decryption, this can be reverted with --security-revert=CVE-2023-46809.

EBICS requires this mode, so in order for this library to work, add the following parameter when starting Node.js: --security-revert=CVE-2023-46809

Initialization

  1. Create a configuration (see example configs) with the EBICS credentials you received from your bank and name it in this schema: config.<environment>.<bank>[.<entity>].json (the entity is optional).

    • The fields url, partnerId, userId, hostId are provided by your bank.
    • The passphrase is used to encrypt the keys file, which will be stored at the storageLocation.
    • The bankName and bankShortName are used internally for creating files and identifying the bank to you.
    • The languageCode is used when creating the Initialization Letter and can be either de, en, or fr.
    • You can chose any environment, bank and, optionally, entity name. Entities are useful if you have multiple EBICS users for the same bank account.
  2. Run node examples/initialize.js <environment> <bank> [entity] to generate your key pair and perform the INI and HIA orders (ie. send the public keys to your bank)
    The generated keys are stored in the file specified in your config and encrypted with the specified passphrase.

  3. Run node examples/bankLetter.js <environment> <bank> [entity] to generate the Initialization Letter

  4. Print the letter, sign it and send it to your bank. Wait for them to activate your EBICS account.

  5. Download the bank keys by running node examples/save-bank-keys.js <environment> <bank> [entity]

If all these steps were executed successfully, you can now do all things EBICS, like fetching bank statements by running node examples/send-sta-order.js <environment> <bank> [entity], or actually use this library in your custom banking applications.

Supported Banks

The client is currently tested and verified to work with the following banks:

Inspiration

The basic concept of this library was inspired by the EPICS library from the Railslove Team.

Copyright: Dimitar Nanov, 2019-2022.
Licensed under the MIT license.