Maskinporten¶

Maskinporten is a service provided by DigDir used to authorize access to APIs between organizations or businesses.

NAIS provides support for declarative registration and configuration of Maskinporten resources. These cover two distinct use cases:

Consume an API¶

To consume an external API secured with Maskinporten, you'll need to acquire a token:

graph LR
  Consumer["Application"] -- request token ---> Maskinporten
  Maskinporten -- issue new token ---> Consumer
  Consumer -- use token ---> API["External API"]

Learn how to consume an external API using Maskinporten

Secure your API¶

To secure your API with Maskinporten, you'll need to define permissions (also known as scopes) and grant consumers access to these.

Once configured, your consumers can acquire a token from Maskinporten to consume your API.

Your application code must verify inbound requests by validating the included tokens.

Learn how to secure your API with Maskinporten