How to enroll a disposable with an assertion provided by an authorized eID

Copy

• Copy for LLM

  Copy page as Markdown for LLMs
• View as Markdown

  Open this page as Markdown
• Open in ChatGPT

  Get insights from ChatGPT
• Open in Claude

  Get insights from Claude
• Connect to Cursor

  Install MCP server on Cursor
• Connect to VS Code

  Install MCP server on VS Code

To enroll a disposable using an authorized assertion you have to:

• specify the DisposableeIDAssertionHolder object providing the country and type of the eID
  Check the authorized eIDs

• specify the DisposableCertificateobject, providing:

  • type = certificate type
  • otpType = otp type

• specify the DisposableContactsobject:

  • if an OTP is required and the type is SMS

    • specify otpType=SMS in the DisposableCertificateobject
    • (Optional) specify the phoneNumber with the mobile property in the DisposableContactsobject.
      If this property is specified, this phonenumber will be used to send the otp.
      If it is not specified and the assertion used in the DisposableeIDAssertionHolder contains a phoneNumber, this number will be used to send the otp.
      If it is not specified and the assertion doesn't contain the phoneNumber an error is triggered.

  • if an OTP is required and the type is EMAIL

    • specify otpType=EMAIL in the DisposableCertificateobject
    • (Optional) specify the email property in the DisposableContactsobject
      If this property is specified, this email will be used to send the otp.
      If it is not specified and the assertion used in the DisposableeIDAssertionHolder contains an email, this will be used to send the otp.
      If it is not specified and the assertion doesn't contain the email an error is triggered.

  • if an OTP is required and the type is WHATSAPP

    • specify otpType=WHATSAPP in the DisposableCertificateobject
    • (Optional) specify the phoneNumber with the mobile property in the DisposableContactsobject.
      If this property is specified, this phonenumber will be used to send the otp via WhatsApp.
      If it is not specified and the assertion used in the DisposableeIDAssertionHolder contains a phoneNumber, this number will be used to send the otp.
      If it is not specified and the assertion doesn't contain the phoneNumber an error is triggered.

Then use these methods:

• checkDataWitheIDAssertion (optional)
• getDisposableContractWitheIDAssertion (optional)
• use the enrollDisposableWitheIDAssertionmethod to enroll the certificate
• sendOtp : send the otp (if required)
• signPKCS1WithSHA256 in the FRA service or use SWS: sign the document
• uploadDoc to upload the evidence of the otp or the authentication flow (optional)

To use otpType=EMAIL, otpType=WHATSAPP or otpType=NO_OTP the LRA has to be authorized.