Skip to content

Commit 8c983a5

Browse files
committed
add NO BankID text signing example
1 parent 65e1cf2 commit 8c983a5

File tree

2 files changed

+24
-0
lines changed

2 files changed

+24
-0
lines changed

src/components/AuthorizeURLBuilder.tsx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ const ACTION_SUPPORTING_ACR_VALUES = [
1313
'urn:grn:authn:se:bankid',
1414
'urn:grn:authn:se:bankid:same-device',
1515
'urn:grn:authn:se:bankid:another-device:qr',
16+
'urn:grn:authn:no:bankid',
1617
];
1718

1819
const FREJA_ACTION_SUPPORTING_ACR_VALUES = [
@@ -40,6 +41,7 @@ const MESSAGE_SUPPORTING_ACR_VALUES = [
4041
'urn:grn:authn:se:bankid:same-device',
4142
'urn:grn:authn:se:bankid:another-device:qr',
4243
'urn:grn:authn:se:frejaid',
44+
'urn:grn:authn:no:bankid',
4345
];
4446

4547
const NONVISIBLEDATA_SUPPORTING_ACR_VALUES = [

src/pages/verify/e-ids/norwegian-bankid.mdx

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -207,6 +207,28 @@ Criipto _does not_ store the SSN itself, just the fact that the user has granted
207207

208208
You can use the Criipto management dashboard [dashboard.criipto.com](https://dashboard.criipto.com/providers/NO_BANKID) to configure access to the optional user data, in the **Identity Sources** -> **NO BankID** section.
209209

210+
## Signing text/markdown
211+
212+
Norwegian BankID supports signing text.
213+
214+
Text signing is triggered by using the `action` and `message` parameters [via login_hint](https://docs.criipto.com/verify/getting-started/oidc-intro/#the-loginhint-parameter).
215+
216+
- The `action` parameter must be set to `sign`
217+
- The `message` parameter must be base64 encoded.
218+
219+
*Note: Signing produces very large JWTs that are not appropriate for authentication/Bearer header use*
220+
221+
Text signing has a different eID cost than authentication, please [contact Criipto sales](https://www.criipto.com/contact) if you have questions.
222+
223+
<details>
224+
<summary><strong>Example</strong></summary>
225+
226+
```login_hint=action:sign message:VmVuZG9yOgoKQ29vbCBEZWxpdmVyeQoKQW1vdW50OgoKMzAwIEVVUgoKCgpJIGFwcHJvdmUgdGhpcyB0cmFuc2FjdGlvbi4=```
227+
228+
Try out the example in [our URL builder](/verify/guides/authorize-url-builder/?acr_values=urn:grn:authn:no:bankid&action=sign&message=Vendor%3A%0A%0ACool%20Delivery%0A%0AAmount%3A%0A%0A300%20EUR%0A%0A%0A%0AI%20approve%20this%20transaction.)
229+
230+
</details>
231+
210232
## Ordering Norwegian BankID
211233

212234
To start accepting real users with Norwegian BankID, you must first request your _client credentials_ from Bidbax. The credentials consists of a _client id_ and a _client secret_.

0 commit comments

Comments
 (0)