Scope is not specific enough

[Nat Sakimura]

Currently, the scope states:

This document specifies the method of

• applications to obtain the OAuth tokens in an appropriately secure manner for the financial data access;
• application to utilize OpenID Connect to identify the customer;
• representing financial data in JSON format;
• using the tokens to interact with the REST endpoints that provides financial data; and
• enabling users to control the security and privacy settings.

This document is applicable to both commercial and investment banking accounts as well as insurance, and credit card accounts are to be considered.

This is applicable to the entire document set and not to this particular part, which is very confusing.

It should instead state what this part describes.

[Nat Sakimura]

Propose to amend as:

This document specifies the method

• to obtain the OAuth tokens in an appropriately secure manner for the read-only access to the financial data;
• to utilize OpenID Connect to identify the customer; and
• of using the tokens to interact with the REST endpoints from which the client obtains financial data.

[Nat Sakimura]

Discussed in the call.

We should explain the overall structure of Part 1 - Part 5 and then the specifics about this document.

[Nat Sakimura]

Fixed #62

→ <<cset 4ac30e345cf5>>