Resources are available for authorization for 30 minutes by default. However, in accordance with Article 4 (3)(d) of Commission Delegated Regulation (EU) 2018/389 (RTS on SCA & CSC), the authorization sub-resource is only valid for a maximum of 5 minutes if the user is inactive.
How long is your Payment authentication URL valid for, and if the bank sends a Push notification for a payment, how long does the PSU have to approve it?
