Test values
Reference for sandbox control values. The values are deterministic: the same input always produces the same result.
Test online-bank sign-in
| Login / password | Result |
|---|
test_user / sandbox | Successful sign-in, authorization code returned |
| Any other values | Error: “Incorrect login or password” |
Tokens
| Object | Lifetime | Sandbox behaviour |
|---|
access_token, id_token | 24 hours | Static for the session; repeated issue returns the same values |
refresh_token | 30 days | Refresh returns the same token pair |
| Authorization code | Single-use | Repeated exchange → 400 invalid_grant |
| Session | 24 hours | Data is removed afterwards |
Message-level scenarios
| Action | Result | What to verify |
|---|
Resubmit with the same MsgId | Usually HTTP 400 + RJCT; asynchronous duplicate detection also returns RJCT | Duplicate handling |
Request status for an unknown msgId | HTTP 200 + NPMT | “Payment not found” |
NbOfTxs ≠ number of PmtInf | Initially HTTP 200 + PDNG, then RJCT | Validation error |
CtrlSum ≠ sum of InstdAmt | Initially HTTP 200 + PDNG, then RJCT | Control-sum error |
Submit without ds:Signature | HTTP 400 + RJCT (XML fails XSD validation) | Signature error |
