Id02256 at 08:59, 2 September 2019

2019-09-02T08:59:29Z

Id02256 at 08:58, 2 September 2019

2019-09-02T08:58:51Z

Id02256 at 08:58, 2 September 2019

2019-09-02T08:58:09Z

Id02256 at 08:57, 2 September 2019

2019-09-02T08:57:30Z

Id02256: Created page with "{{Api_Method_Spec| Description=This method can be used to retrieve a redirection url for external user authentication (OIDC based). It generates a url with all the required pa..."

2019-09-02T08:56:58Z

Created page with "{{Api_Method_Spec| Description=This method can be used to retrieve a redirection url for external user authentication (OIDC based). It generates a url with all the required pa..."

New page

{{Api_Method_Spec|
Description=This method can be used to retrieve a redirection url for external user authentication (OIDC based). It generates a url with all the required parameters to perform external authentication in the OB authentication server.
The UNIAPI method generates the url based on a set of parameters defined at instance level and the input parameters. It also generates two parameters internally:
* '''nonce:''' String UUIDv4 value used to associate a Client session with an ID Token, and to mitigate replay attacks. The value is passed through unmodified from the Authentication Request to the ID Token. This nonce is stored in the state variable and returned to the end application. This parameter is used to maintain the authentication session during all the flow (and use it for logging and BI logs).
* <span id=state>'''state:'''</span> UNIAPI creates a json with some of the input parameters and then encodes it into base64 string. The state is composed of:

<syntaxhighlight lang="javascript">
{
"instanceId": 29, //taken from the token
"deviceType": 401, //taken from the token,
"deviceId": 323424234, //taken from the input
"ipAddress": "213.4.177.115", //required to validate the geoblock within the jukilo assertion
"deviceCallbackUrl": "https://movistarplay.com.cl/sso" // received as input in the UNI API method
"payloadDevice": "2342dsf2329fjj92332fd",
"nonce":"42231976-a86d-42e2-8fe6-98f7546bdf89" // nonce generated by UNIAPI for this authentication session
}
</syntaxhighlight>

See [https://wikis.tid.es/gvp-dev/index.php/External_authentication_via_4P#1._Authentication_request External authentication specification for more information].

==== Geo-Location ====
Geo-location is performed inside the SSO after the authentication has been performed correctly.

==== BI ====
This method creates events in KAFKA with '''topic = gvp.authentication.external''' and the following event formats:
<syntaxhighlight lang="javascript">

{
"ob":"25",
"operation":"OID/login",
"step":"1 - BuildOIDCAuthRequest",
"transaction_id":"727fe862-3b46-43ca-8306-14b5076622f6",
"timestamp":"2018-12-13T20:14:34.0875272Z",
"status": "OK", // OK if the url has been build correctly. ERROR if there was an error in the method. Fill the error with the error code and error_desc with the StatusMessage
"device_type_id":"401",
"device_id":"3243242334",
"user_id":"",
"error": "",
"error_desc":""
}
</syntaxhighlight>

|Parameters=
{{Api_Parameter|
ParamName=acrValues
|ParamType=int
|ParamRequired=optional
|ParamDescription=defines the authentication level (2=mobile number (mobile connect), 3=user&password). The application can provide an acr_value that will override the default one defined in the OIDC_CODE_ACR_VALUES parameter parameter.
}}
{{Api_Parameter|
ParamName=token
|ParamType=String
|ParamRequired=required
|ParamDescription=the UNIAPI token for the device app to call UNIAPI. It will be an anonymous token
}}
{{Api_Parameter|
ParamName=deviceId
|ParamType=String
|ParamRequired=required
|ParamDescription=the ID of the device from which the authentication is being performed
}}
{{Api_Parameter|
ParamName=deviceCallbackUrl
|ParamType=String
|ParamRequired=optional
|ParamDescription=the callback url where the device wants to receive the final result of the authentication process.
}}
{{Api_Parameter|
ParamName=payloadDevice
|ParamType=String
|ParamRequired=optional
|ParamDescription= random hash generated by the client and stored locally, to perform security validations.
}}
|Returns=
Returns a JSON object containing the generated anonymous token and its expiration time (in UnixTimestamp format).

'''Example:'''

{
: "StatusCode": 0,
: "Severity": 1,
: "StatusMessage": "OK",
: "Content": {
:: "authUrl": "https://auth.global-int.baikalplatform.com/authorize?response_type=code&client_id=video&acr_values=2&purpose=identify-customer&redirect_uri=https%3A%2F%2Fvideodomain.es%2Fcallback&scope=openid%20offline_access&nonce=42231976-a86d-42e2-8fe6-98f7546bdf89&state=213",
:: "nonce": "42231976-a86d-42e2-8fe6-98f7546bdf89"
: }
}
|Exceptions=
None
|Cache=
This method is not cached.
|KnownIssues=
None
|VersionHistory=
{{{!}} border="2" style="width:800px;" cellpadding="5" cellspacing="0"
{{!}}- style="background:#88ccff;font-size:110%"
! API Version Number
! Change description
! Changes author
{{!}}- valign="top"
! 7.1
{{!}} Initial method design
{{!}} Fran Milagro
{{!}}}

|SeeAlso=
}}

@@ Line 107: / Line 107: @@
 |SeeAlso=
-* [https://wikis.tid.es/gvp-public/index.php?title=BuildOIDCLogoutRequest BuildOIDCLogoutRequest]
+* [[BuildOIDCLogoutRequest]]
 * [https://wikis.tid.es/gvp-dev/index.php/External_authentication_via_4P OIDC External authentication specification]
 }}

@@ Line 107: / Line 107: @@
 |SeeAlso=
-https://wikis.tid.es/gvp-public/index.php?title=BuildOIDCLogoutRequest
+* [https://wikis.tid.es/gvp-public/index.php?title=BuildOIDCLogoutRequest BuildOIDCLogoutRequest]
 }}

← Older revision		Revision as of 08:58, 2 September 2019
Line 107:		Line 107:

	\|SeeAlso=		\|SeeAlso=
		+	https://wikis.tid.es/gvp-public/index.php?title=BuildOIDCLogoutRequest
	}}		}}

@@ Line 21: / Line 21: @@
 ==== Geo-Location ====
 Geo-location is performed inside the SSO after the authentication has been performed correctly.
 ==== BI ====
 This method creates events in KAFKA with '''topic = gvp.authentication.external''' and the following event formats:
 <syntaxhighlight lang="javascript">
+{
 "ob":"25",
@@ Line 89: / Line 87: @@
 :  }
+}
 |Exceptions=
 None

BuildOIDCAuthRequest - Revision history

Id02256 at 08:59, 2 September 2019

Id02256 at 08:58, 2 September 2019

Id02256 at 08:58, 2 September 2019

Id02256 at 08:57, 2 September 2019

Id02256: Created page with "{{Api_Method_Spec| Description=This method can be used to retrieve a redirection url for external user authentication (OIDC based). It generates a url with all the required pa..."