Staff Identity

Begin browser authorization and choose fictional staff/role

Use a browser for consent, not a background HTTP client. Sets cis2_interaction cookie and displays CSRF-protected staff selection. /cis2/ provides a working demonstration; /cis2/callback completes it.

get/cis2/authorize

Request

  • Base URL
    https://sim.animahealth.com
  • Auth
    none required

Query parameters

client_idstring required
Example:nhs-sim-client

Registered client ID.

redirect_uristring uri required

Exact registered callback URL.

response_type'code' required

Authorization code only.

scopestring

openid required; only openid/profile supported.

code_challengestring required

Base64url SHA256 hash of your verifier.

code_challenge_method'S256' required

S256 only.

statestring required

Client state; check at callback.

noncestring required

Nonce included in ID token.

signin_method'smartcard' | 'security-key'

Presentation only; no physical credential is accessed.

Response

HTML consent form; open in a browser to continue

Changes

No recorded changes to this operation across all 1 revision of this API.