...

Logic

...

Service logic

1. Fetch JWT TTL value from JWT_LOGIN_TTL env parameter (in minutes).

2. Generate JWT with following parameters:

   1. alg = HS512

   2. aud = trusted-client if client_type = TRUSTED_PIS, else mithril-login

   3. exp = iat + JWT_LOGIN_TTL

   4. iat = now()

   5. iss = EHealth

   6. jti = generate uuid of JWT

   7. nbf = now() - 1 second

   8. nonce = generate uuid of nonce

   9. sub = nonce

   10. typ = access

3. Render a response according to specification.

Request structure

See on Apiary

...

• Get client_type from client_id

• Check client_secret is submitted if client_type = TRUSTED_PIS

  • in case of error - return 422 ('required property <property> was not present')

• Check client_secret belongs to client (through connections table)

  • in case of error - return 401 ('Invalid client id or secret.')

Processing

Service logic

...

Fetch JWT TTL value from JWT_LOGIN_TTL env parameter (in minutes).

...

Generate JWT with following parameters:

1. alg = HS512

2. aud = trusted-client if client_type = TRUSTED_PIS, else mithril-login

3. exp = iat + JWT_LOGIN_TTL

4. iat = now()

5. iss = EHealth

6. jti = generate uuid of JWT

7. nbf = now() - 1 second

8. nonce = generate uuid of nonce

9. sub = nonce

10. typ = access

...

Response structure

See on Apiary

...