Added
- User Password Reset: A new endpoint has been added to the Partner API, allowing partners to trigger a password reset for an active user. The user will receive a new temporary password via email, which will expire after 30 days.
- Endpoint:
POST /users/{userId}/reset-password
- Enhanced API Validation: New validation rules have been implemented to increase API robustness and data integrity.
- Technical Details:
- Header Validation: Comprehensive OpenAPI validation has been added for required header parameters (e.g.,
requestorId), enforcing presence, type, format, and other constraints.
- Duplicate Account Prevention: Added API and database-level validation to prevent duplicate
refAccount values during customer creation and updates.
Changed
- Onboarding Process Refactored: The centralized onboarding process has been split into three domain-specific APIs to improve clarity and separation of concerns. The documentation has been updated to clearly describe the three distinct workflows:
- Role Onboarding: Manages
CUSTOMER and PROXY roles via the /roles/onboardings endpoint.
- Entity Onboarding: Manages
BENEFICIAL_OWNER entities via the /entities/onboardings endpoint.
- User Onboarding: Manages partner users via the
/user-onboardings endpoint.
- Onboarding Process Improvement: The entity onboarding flow has been refactored to correctly process multiple administrative tasks (e.g., adding signatories) for a single customer.
- NACE Sector Data: The list of available NACE sectors has been updated.