Financial Institution Authentication Flow

This demo shows how a partner-issued JWT becomes a trusted Vestara session. Follow the steps below, then inspect the live session data captured for a downstream Financial Institution.

Generate keys

Each FI creates an RSA key pair and shares the base64 public key with Vestara.

Sign the token

Use the provided script or existing tooling to mint an RS256 JWT containing `account_id` and optional claims.

Distribute the link

Send the FI user a secure /fi/login?token=... link so the session cookie is established instantly in their browser.