Technical reference for service providers Version 0.9.9.13 2021 Table of Contents Terminology ........................................................................................................................................................ 6 Changelog .......................................................................................................................................................... 8 Version 0.9.9.13 .............................................................................................................................................. 8 Version 0.9.9.12 .............................................................................................................................................. 8 Version 0.9.9.11 .............................................................................................................................................. 8 Version 0.9.9.10 .............................................................................................................................................. 8 Version 0.9.9.9 ................................................................................................................................................ 8 Version 0.9.9.8 ................................................................................................................................................ 8 Version 0.9.9.7 ................................................................................................................................................ 8 Version 0.9.9.6 ................................................................................................................................................ 8 Breaking changes for version 0.9.9.6 ......................................................................................................... 8 Version 0.9.9.5 ................................................................................................................................................ 8 Version 0.9.9.4 ................................................................................................................................................ 8 Version 0.9.9.3 ................................................................................................................................................ 8 Version 0.9.9.2 ................................................................................................................................................ 9 Version 0.9.9.1 ................................................................................................................................................ 9 Version 0.9.9.0 23/4-2021 .............................................................................................................................. 9 Version 0.9.8.0 - 25/03-2021 .......................................................................................................................... 9 Version 0.9.7.3 - 28/1-2021 .......................................................................................................................... 10 Version 0.9.7.2 .............................................................................................................................................. 10 Integrating to the Nets eID Broker overview .................................................................................................... 11 OpenID Connect ........................................................................................................................................... 11 Administration web-interface and API ....................................................................................................... 11 Web and app client integration ......................................................................................................................... 12 OpenID Connect ........................................................................................................................................... 12 OpenID Connect client .................................................................................................................................. 12 OpenID Connect Authorization Code flow .................................................................................................... 13 Example requests ......................................................................................................................................... 13 Authorization request ................................................................................................................................ 13 Authorization Code Token endpoint example ........................................................................................... 14 Secure vs. public OpenID Connect client ..................................................................................................... 14 Code, Hybrid, and Implicit flows ................................................................................................................... 14 Signing request parameters .......................................................................................................................... 14 Example of Request Object by reference ................................................................................................. 15 Signing Token endpoint requests with private key JWT’s ............................................................................ 16 Example .................................................................................................................................................... 16 Allow any redirect URI for signed requests .................................................................................................. 16 Signaturgruppen A/S www.signaturgruppen.dk Navitas, Inge Lehmanns gade 10, 8000 Aarhus N [email protected] Side 2 User flows ......................................................................................................................................................... 16 User flow parameters .................................................................................................................................... 17 Reauthentication ........................................................................................................................................... 19 Requesting additional scopes ................................................................................................................... 19 Max age and authentication time .............................................................................................................. 19 Error codes ................................................................................................................................................... 20 General error codes .................................................................................................................................. 20 Scopes .......................................................................................................................................................... 20 Environments .................................................................................................................................................... 21 Pilot test environment – https://brokertest.signaturgruppen.dk/op ............................................................... 21 Token signing certificate (self-signed) ...................................................................................................... 21 SSL certificate ........................................................................................................................................... 21 Transaction token signing certificate ......................................................................................................... 21 Preproduction environment – https://pp.netseidbroker.dk/op ....................................................................... 22 Token signing certificate ........................................................................................................................... 22 SSL certificate ........................................................................................................................................... 22 Transaction token signing certificate ......................................................................................................... 22 Production environment – https://netseidbroker.dk/op ................................................................................. 22 Token signing certificate ........................................................................................................................... 23 SSL certificate ........................................................................................................................................... 23 Transaction token signing certificate ......................................................................................................... 23 Nets eID Broker API ......................................................................................................................................... 23 API specification ........................................................................................................................................ 24 Error Handling ..........................................................................................................................................