// the find
adorsys/open-banking-gateway
Provides RESTful API, tools, adapters, and connectors for transparent access to open banking API's (for banks that support PSD2 and XS2A as well as HBCI/FinTS)
A Java middleware gateway that abstracts the mess of European PSD2 bank APIs (Berlin Group XS2A, HBCI/FinTS, Open Banking UK) behind a single REST interface. Aimed at FinTechs and TPPs who need to connect to German and European retail banks without implementing each bank's quirks individually. AGPL v3 with a commercial licensing escape hatch from adorsys.
BPMN-driven protocol flows via Flowable are a smart call here — bank SCA flows are genuinely stateful and branchy, and a process engine handles that better than ad-hoc state machines. The three-layer split (Banking API, Consent API, Protocol facade) maps cleanly to real PSD2 actor separation between TPP, FinTech, and PSU. Test infrastructure is solid: Testcontainers with reuse flags, separate CI jobs for heavy tests, and Codecov tracking across backend/frontend/examples. The consent UI ships as a standalone Angular app with its own Cypress e2e suite, which is the right call rather than embedding it in the gateway.
327 stars for a project this size signals it never got real community traction — the AGPL license probably killed adoption since anyone building a commercial FinTech product hits the copyleft wall immediately. Last push was January 2026 but the roadmap and release notes suggest development has been mostly maintenance since 2022; the XS2A adapter is a separate repo and the connector coverage is unclear. The OpenAPI clients in the Angular app are checked in as generated code rather than generated at build time, which means they drift. No public hosted demo that actually connects to a sandbox bank, so evaluating whether it actually works requires standing up the full docker-compose stack.