BankID Gateway
Component Detail
Infrastructure
medium complexity
backend
0
Dependencies
0
Dependents
0
Entities
0
Integrations
Description
External BankID BankAxept gateway integration that performs the actual national eID verification. Acts as the trust boundary between Meander and the Norwegian BankID infrastructure.
bankid-gateway
Sources & reasoning
Matrix row 'BankID / Vipps innlogging' is marked MUST HAVE with Phase column = 2, and §7 Phase 2 explicitly lists 'BankID / Vipps'. Phase 2 in the source phases block is named 'Core Product' (§5 Fase 2 - Kjerneprodukt), so target_release uses that verbatim name.
-
docs/source/likeperson.md · line 26-27Alle fire organisasjoner peker på BankID eller Vipps som foretrukket autentisering ved førstegangs innlogging
-
docs/source/likeperson.md · line 315BankID / Vipps
-
docs/source/Subprocessors.md · line 16BankID BankAxept AS | Autentisering via BankID som alternativ til Vipps. | Planlagt
Responsibilities
- Establish and maintain the mTLS connection to BankID BankAxept endpoints
- Forward authentication requests and receive signed identity assertions
- Validate gateway responses and surface transport-level errors
- Enforce rate limits and timeout policies for BankID calls
Interfaces
requestAuthentication(payload): GatewayResponse
fetchIdentityAssertion(sessionRef): SignedAssertion