FinTS TAN resume: gln tan resume
Synopsis
gln [global-options] tan resume --resume-file <path>
--secret-stdin [--decoupled] [--vop-confirm] [--hhduc-response <value>]
Options
| Argument or flag | Type | Required | Default | Description |
|---|---|---|---|---|
--resume-file | path | yes | - | Path to the resume artifact emitted by the original command's action.details.resume_file. |
--secret-stdin | flag | yes | false | Read the classified, framed PIN/TAN input described below from standard input. |
--decoupled | flag | no | false | Poll a decoupled (out-of-band) approval instead of submitting a TAN. |
--vop-confirm | flag | no | false | Confirm the verification-of-payee details without submitting a TAN. |
--hhduc-response | text | no | - | Optional HHD_UC response value carried alongside the TAN. |
Description
Resumes a TAN-gated FinTS operation that was previously paused with an
action_required envelope. Loads the continuation that was saved at the
path printed in the originating response's action.details.resume_file,
then submits the TAN (or the decoupled poll) through
gln_resume_continuation. The response carries the same envelope shape as
the originating command: ok if the bank accepted the resumed
operation, action_required again if a further step is needed (rare,
but possible for chained TAN flows), or error / rejected on failure.
The PIN and TAN never belong in command arguments. --secret-stdin selects a
single versioned input frame containing classified records in canonical order:
GLN-SECRET-INPUT 1
pin <UTF-8-byte-count>
<exact PIN bytes>
tan <UTF-8-byte-count>
<exact TAN bytes>
end
Each value is read as exactly the declared number of bytes and is followed by
one LF or CRLF delimiter. end must be followed immediately by EOF. A normal
TAN or HHD_UC continuation requires both records. A decoupled poll or VoP
confirmation requires the PIN record and omits the TAN record. Duplicate,
out-of-order, empty, oversized, truncated, trailing, or unknown records are
rejected without echoing their values. scripts/run_live_suite.ps1 constructs
this frame after its hidden prompts and sends it only to the child process's
standard input.
Status and exit codes
| Status | Exit | Meaning | Continuation |
|---|---|---|---|
ok | 0 | Bank accepted the resumed operation; the original result is in result. | - |
action_required | 10 | Bank requires another step. The new continuation is saved at resume_file. | Saved at resume_file. |
error | 1 | Validation, transport, missing/invalid resume artifact, or backend error. | - |
rejected | 1 | Bank rejected the resumed operation. | - |