BankID Test Application for BankID Norge AS

This is a Java based test application for authenticating a user with BankID OpenID Connect Server (BID OIDC) developed for BankID Norge AS. When the user is authenticated you will see the result from a call to UserInfo RESTful service and the contents of the id_token which was returned from BID OIDC.

Process flow

The application examplifies all steps of the OIDC authentication process.

1. Fetch configuration from OIDC. GET to a non protected URL, such as https://preprod.bankidapis.no/oidc/oauth/.well-known/openid-configuration The configuration contains information such as relevant endpoints, and public key for the id_token (JWT).

2. Redirect to the authentication URL.

3. Handle the callback from UIDC. The callback contains an attribute access_code which needs to be exchanged with the access_token (POST to OIDC)

4. Fetch user info. Finally we use the access_token to fetch a protected resource, in this case the user info provided by BID OIDC.

Build and run

To be able to run the application you will need to edit the client_id and client_password in the source code. Contact BankID Norge ([email protected]) to retrieve the appropriate settings.

class Configuration {

    /**
     * Client_id and password must be inseted here for the appliction to work.
     * <p>
     * Make contact with BankID Norge ([email protected]) to retrieve the information needed.
     */
    public static final String CLIENT_ID = "<insert client_id>";
    public static final String CLIENT_PWD = "<insert client password>";
}

Run with maven and jetty

mvn clean install
mvn jetty:run

Dependencies

This example application uses the following libraries

javax.servlet-api for web gui

jersey-client used in all integration

oauth2-client oauth2 support in jersey

org.json.json for json parsing

nimbus-jose-jwt for handling the json web token

jetty-maven-plugin for running the application locally