Service Layer high complexity backend
3
Dependencies
2
Dependents
3
Entities
0
Integrations

Description

Backend service that abstracts the BankID OIDC provider flow behind a common authentication interface. Handles OAuth authorization code exchange, validates the BankID identity token, creates or links a platform user account, and issues a platform JWT. Runs on the Next.js backend and is called via the REST API OAuth callback route.

Feature: BankID & Vipps Authentication

bankid-integration-service

Responsibilities

  • Initiate BankID OIDC authorization request and return redirect URL
  • Handle OAuth callback and exchange authorization code for tokens
  • Validate BankID identity token signature and claims
  • Create or link user account based on verified Norwegian identity
  • Issue platform JWT upon successful verification

Interfaces

getAuthorizationUrl(state, nonce)
handleCallback(code, state)
validateIdentityToken(idToken)
createOrLinkUser(identityClaims)
issueSessionToken(userId)
revokeSession(sessionId)

Relationships

Dependencies (3)

Components this component depends on

Dependents (2)

Components that depend on this component

Related Data Entities (3)

Data entities managed by this component