Staff Identity
Begin browser authorization and choose fictional staff/role
Use a browser for consent, not a background HTTP client. Sets cis2_interaction cookie and displays CSRF-protected staff selection. /cis2/ provides a working demonstration; /cis2/callback completes it.
get/cis2/authorize
Request
- Base URLhttps://sim.animahealth.com
- Authnone required
Query parameters
client_idstring required
Example:nhs-sim-client
Registered client ID.
redirect_uristring uri required
Exact registered callback URL.
response_type'code' required
Authorization code only.
scopestring
openid required; only openid/profile supported.
code_challengestring required
Base64url SHA256 hash of your verifier.
code_challenge_method'S256' required
S256 only.
statestring required
Client state; check at callback.
noncestring required
Nonce included in ID token.
signin_method'smartcard' | 'security-key'
Presentation only; no physical credential is accessed.
Response
HTML consent form; open in a browser to continue
Changes
No recorded changes to this operation across all 1 revision of this API.