Maskinporten¶
Maskinporten is a service provided by DigDir used to authorize access to APIs between organizations or businesses.
NAIS provides support for declarative registration and configuration of Maskinporten resources. These cover two distinct use cases:
Consume an API¶
To consume an external API secured with Maskinporten, you'll need to acquire a token:
graph LR
Consumer["Application"] --1. request token---> Maskinporten
Maskinporten --2. return token---> Consumer
Consumer --3. use token---> API["External API"]
Learn how to consume an external API using Maskinporten
Secure your API¶
To secure your API with Maskinporten, you'll need to define permissions (also known as scopes) and grant consumers access to these.
Once configured, your consumers can acquire a token from Maskinporten to consume your API.
Your application code must verify inbound requests by validating the included tokens.