Authentication

Verify and complete an authentication process

The client sends a request, with a prolonged timeout if necessary, using the appropriate payload. A bearer token is received, later used to authenticate calls.

A list of account holders the user has access to is also included. Each holder will have a list of capabilities, selected from a set of capabilities that have user access level conditions. All other endpoints may be assumed to give access to all users, so the list of capabilities is not an exhaustive list.

post/auth/verify

Request

  • Base URL: https://bankapidemo.svea.com
  • URL: https://bankapidemo.svea.com/auth/verify
  • Auth: none declared

Headers

X-Svea-CorrelationIdstring uuid

The correlationId is a unique identifier value that is attached to requests and messages that allow reference to a particular transaction or event chain. Used to follow transaction information, especially for logging purposes.

Example:21436a05-d62d-4f29-a253-31b3815d148b
X-Svea-SessionIdstring uuid

The sessionId is a unique identifier value for a users session. This identifier should be the same for the entire duration of that users session. Mainly used for logging and troubleshooting purposes.

Example:afe56332-dee2-48b4-ae0b-d694a6174a7e

Request body

bankIdTokenstring required

Example request

{
  "bankIdToken": "3764cca2-169d-4a1d-9a8b-949cb68e0faa"
}

Response

OK

bearerTokenstring required
refreshTokenstring nullable required

Example response

{
  "bankIdUser": {
    "bankIdNumber": "199403086854",
    "correspondenceName": "Testy McTestface",
    "firstName": "Testy",
    "lastName": "McTestface"
  },
  "bearerToken": "eyJhbGciOiJSUzI1NiIsImtpZCI6IjA2RThEQTgwMDQ...",
  "psus": [
    {
      "accessLevel": "restrictedLevel",
      "actionRequired": [
        {
          "action": "kyc",
          "validUntil": "2020-12-24"
        }
      ],
      "capabilities": [
        "sendPaymentOrders"
      ],
      "capabilitiesContext": [
        {
          "accessType": "accountAccess",
          "accountAccessLevel": "read",
          "bankAccountId": "ccf7c77a-8e32-4d9b-8f40-ea446f37d492"
        }
      ],
      "delegateId": "7aa2dfea-2b0c-45cb-8f03-4743c284417d",
      "psuContext": {
        "correspondenceName": "Testy McTestface",
        "personKey": "199403086854"
      },
      "psuId": "febbe8f2-bd6b-4e53-89c6-e89ca92ff5ee",
      "psuType": "person"
    }
  ],
  "refreshToken": "27a5dc2d363357ab4f32ff5..."
}

Changes

No recorded changes to this operation across all 1 revision of this API.