V1.25.0 Release Notes
Release notes for version v1.25.0 of the CDR Standards.
Changes Made
Change Requests
This release addresses the following minor defects raised on Standards Staging:
- None
 
This release addresses the following change requests raised on Standards Maintenance:
- Standards Maintenance Issue 413 - 400 Error code missing in swagger for some endpoints
 - Standards Maintenance Issue 516 - Get OpenId Provider Config and Get JWKS API documented paths are incorrect
 - Standards Maintenance Issue 522 - OpenID Provider Configuration End Point parameter requirements
 - Standards Maintenance Issue 536 - Define new toUType value to relevant schemas
 - Standards Maintenance Issue 559 - FAPI 1.0 Final Phase 3 Obligation example for authorisation request using the Authorisation Code Flow does not have "response_mode" attribute
 - Standards Maintenance Issue 575 - Inconsistency of data types in various schema
 - Standards Maintenance Issue 585 - Clarify Base and Adjustment Rate Types
 - Standards Maintenance Issue 586 - Maintenance Iteration 15 Holistic Feedback
 - Standards Maintenance Issue 590 - Remove FAPI 1.0 draft references
 - Standards Maintenance Issue 591 - Energy 'Get Agreed Payment Schedule' - BSB and Account Number Tokenisation/non-Tokenisation
 - Standards Maintenance Issue 592 - EnergyBillingDemandTransaction - timeOfUseType - New Value
 
Decision Proposals
This release addresses the following Decision Proposals published on Standards:
- Decision Proposal 288 - Non-Functional Requirements Revision
 - Decision Proposal 303 - Maintenance Iteration 15
 
Introduction
| Change | Description | Link | 
|---|---|---|
| Removed legacy obligation dates | Standards Maintenance #586: Removed legacy obligation dates more than 6 months in the past. Addresses this issue comment) | Future Dated Obligations | 
| Added Data Holder Brands Summary API to endpoint schedule | Standards Maintenance #586: Included the Get Data Holder Brands Summary API into the endpoint version schedule. Addresses this issue comment | Endpoint Version Schedule | 
| Typo correction in the endpoint schedule | Standards Maintenance #586: Corrected typos in the endpoint version schedule. Addresses this issue comment | Endpoint Version Schedule | 
| Heading changes | Standards Maintenance #586: Renamed InfoSec Profile to Security Profile and CDR Register APIs to Register APIs in the endpoint version schedule. Addresses this issue comment | Endpoint Version Schedule | 
| Spelling mistake | Standards Maintenance #586: Fixed misspelling of "Register". Addresses this issue comment | Future Dated Obligations | 
High Level Standards
No Change
API End Points
| Change | Description | Link | 
|---|---|---|
| Error response codes | Standards Maintenance #413: Added missing error response codes to multiple endpoints. | Banking APIs Energy APIs Common APIs Admin APIs  | 
Add digitalWallet to Scheduled Payments | 
Standards Maintenance #536: 
  | 
Banking APIsEnergy APIsTelco APIs | 
| Corrected HTTP Methods | Standards Maintenance #586: Corrected the endpoint version schedule to correctly list POST not GET methods for energy APIs: 
 Addresses this issue comment)  | 
Endpoint Version Schedule | 
| Clarify Base and Adjustment Rate Types | Standards Maintenance #585: Split the 'Product & Account Components' tables that provide more detail on the 'Product Deposit Rate Types' and 'Product Lending Rate Types' into Base Rate Types and Adjustment Rate Types. | Product & Account Components | 
| Get Products | Standards Maintenance #586: Corrected typo in the Get Products API description. Addresses this issue comment) | Get Products API | 
| Energy APIs | Standards Maintenance #591: Updated description of  EnergyPaymentSchedule.isTokenised field to further clarify when it can be used | 
Energy APIs | 
| Energy APIs | Standards Maintenance #592: 
  | 
Energy APIs | 
| Get Metrics | Added v4 and v5 of the Get Metrics API | Admin APIs | 
Information Security Profile
| Change | Description | Link | 
|---|---|---|
| OpenID Provider Configuration End Point | Standards Maintenance #522: Provides an exhaustive list of the required OpenID discovery parameters Data Holders must publish. | OpenID Provider Configuration End Point | 
| Authorization Code Flow non-normative example | Standards Maintenance #559: Added "response_mode" to the authorisation request examples in accordance with FAPI 1.0 requirements for Authorisation Code Flow and JARM use. | Security Profile | 
| FAPI normative references | Standards Maintenance #590: Removed legacy draft FAPI references and legacy phasing ensuring all normative references for FAPI align to the final versions | Security Profile | 
Register Standards
| Change | Description | Link | 
|---|---|---|
| Register Base Paths | Standards Maintenance #516: Match the endpoints paths for jwks and well known to match actual Register implementation. | Register APIs | 
| Header types | Standards Maintenance #575: Updated a number of headers to use more consistent types. | Register APIs | 
Consumer Experience
No Change
Non Functional Requirements
| Change | Description | Link | 
|---|---|---|
| Site Wide TPS Tiers | Added authorisation based tiering for site wide TPS thresholds | Traffic Thresholds | 
| Low Velocity Data Sets | Added NFRs applicable to data recipients to accommodate low velocity data sets | Data Recipient Requirements | 
Known Issues
No Change