Infrastructure high complexity backend
0
Dependencies
0
Dependents
0
Entities
0
Integrations

Description

HTTP client and configuration layer for communicating with the certified BankID broker over OpenID Connect. Manages OIDC discovery, token exchange, and JWKS-based id_token signature verification so the BankID Integration Service works against a stable typed interface regardless of which broker is configured.

Feature: BankID Authentication

bankid-oidc-broker-connector

Responsibilities

  • Fetch and cache OIDC discovery metadata from the broker well-known endpoint
  • Exchange authorization codes for access and id tokens at the token endpoint
  • Validate id_token signature and claims using broker-published JWKS
  • Expose typed configuration for broker base URL, client ID, client secret, and redirect URI

Interfaces

discoverConfiguration(): OidcConfiguration
exchangeCode(code, redirectUri): TokenResponse
verifyIdToken(idToken): BankIdClaims
getJwks(): JwksResponse