{
	"id": "1c52042c-0511-406f-8bb6-ba26383b7c66",
	"name": "Payment sandbox",
	"values": [
		{
			"key": "basePath",
			"value": "",
			"type": "default",
			"enabled": true
		},
		{
			"key": "resourceHost",
			"value": "https://sandbox-cert-api.sydbank.dk",
			"description": "Resource server (product APIs), mTLS. Change subdomain for other banks.",
			"enabled": true
		},
		{
			"key": "authHost",
			"value": "https://sandbox-auth.sydbank.dk",
			"description": "OAuth 2 Authorization Server (TLS) - browser authorize endpoint / discovery.",
			"enabled": true
		},
		{
			"key": "certAuthHost",
			"value": "https://sandbox-cert-auth.sydbank.dk",
			"description": "OAuth 2 Authorization Server (mTLS) - token endpoint host (usually discovered).",
			"enabled": true
		},
		{
			"key": "clientId",
			"value": "",
			"description": "OAuth client id from sandbox sign-up.",
			"enabled": true
		},
		{
			"key": "x-api-key",
			"value": "",
			"description": "API key from sandbox sign-up (x-api-key header on every product call).",
			"enabled": true
		},
		{
			"key": "redirectUri",
			"value": "",
			"description": "Pre-registered redirect URI for your sandbox app.",
			"enabled": true
		},
		{
			"key": "twoLeggedScope",
			"value": "pisprepare",
			"description": "Scope for the 2-legged client-credentials token.",
			"enabled": true
		},
		{
			"key": "acr",
			"value": "psd2_sandbox",
			"description": "SCA authorization type. Use psd2_sandbox_erhverv for corporate. psd2_mobile is not available in sandbox.",
			"enabled": true
		},
		{
			"key": "psuId",
			"value": "",
			"description": "Test PSU id (scenario dependent).",
			"enabled": true
		},
		{
			"key": "psuIpAddress",
			"value": "192.168.1.100",
			"description": "PSU-IP-Address header value.",
			"enabled": true
		},
		{
			"key": "accessToken",
			"value": "",
			"description": "2-legged access token (set by folder 0).",
			"enabled": true
		},
		{
			"key": "accessToken3L",
			"value": "",
			"description": "3-legged access token (set after SCA).",
			"enabled": true
		},
		{
			"key": "mtlsTokenEndpoint",
			"value": "https://sandbox-cert-auth.sydbank.dk/oauth-token",
			"description": "mTLS token endpoint (used for BOTH 2-legged and 3-legged token calls). Must be the sandbox-cert-auth host so the tpptst100.pfx client certificate is presented - the TLS token_endpoint would return 'invalid_client'.",
			"enabled": true
		},
		{
			"key": "authorizationEndpoint",
			"value": "https://sandbox-auth.sydbank.dk/oauth-authorize",
			"description": "Authorization endpoint (TLS, browser). Pre-filled; refreshed by OIDC discovery.",
			"enabled": true
		},
		{
			"key": "scaOAuth",
			"value": "",
			"description": "Set from _links.scaOAuth after starting authorisation.",
			"enabled": true
		},
		{
			"key": "authCode",
			"value": "",
			"description": "Paste the 'code' returned to your redirect URI after SCA.",
			"enabled": true
		},
		{
			"key": "codeVerifier",
			"value": "",
			"description": "PKCE verifier (set automatically).",
			"enabled": true
		}
	],
	"color": null,
	"_postman_variable_scope": "environment",
	"_postman_exported_at": "2026-08-09T20:33:30.790Z",
	"_postman_exported_using": "Postman/12.22.8"
}