Document toolboxDocument toolbox

Access Tokens (xID Useradmin)

Owned by Frode Nilsen (Unlicensed)
23 Apr 2018
1 min read

xID Userinfo uses the default Access Token format of the OIDC Provider from BankID, adapted to Client Credential flow that is used by xID Userinfo.

Eglibile OIDC Clients can request Access Tokens for xID Useradmin by invoking the Token endpoint using Client Credential Grant and supplying appropriate scope values. The Access Token must be added as an OAuth2 Bearer Token to subsequent requests to endpoints for the xID Useradmin REST API.

The following is an example of a valid Access Token for xID Useradmin

{
  "jti": "327f2faa-3e69-478f-a7ce-0233cf6639df",
  "exp": 1520371414,
  "nbf": 0,
  "iat": 1520371114,
  "iss": "https://prototype.bankidnorge.no/auth/realms/Systemtest",
  "aud": "xid-core",
  "sub": "0f9c17bf-6b5c-44fd-8c21-1a59cecbad2c",
  "typ": "Bearer",
  "azp": "oidc-testclient",
  "auth_time": 0,
  "session_state": "1b2d806f-57bb-4252-a2f0-829017e17eff",
  "acr": "1",
  "allowed-origins": [],
  "resource_access": {
    "xid-core": {
      "roles": [
        "UnrollEndUser",
        "GetEndUserPersonalData",
        "ReleaseBrowserEnrollment",
        "SetConsent"
      ]
    }
  },
  "clientHost": "80.86.138.154",
  "clientId": "oidc-testclient",
  "clientAddress": "80.86.138.154"
}