Confidential Client Template

Available requests for Confidential Client Template

Redirect URI

1532

Redeem

2196

Full documentation for endpoints

RequestHttp MethodEndpointParametersDetails
Redirect URIGET/oauth/redirect_uriclient_id: the id of the client
redirect_uri: the redirect_uri to be included in the response
IDP expects the following pattern for the redirect_uri:
[host]/oauth/v2/oauth-authorize?[scope=openid trading:write trading:read]&[response_type=code]&[clientId=]&[state=]&[nonce=]&[request=]&[redirect_uri=]

Example cURL Request:
curl --location --request GET 'https://confidential-client-template-idp-ci1.apps.ckd-int.corp.dir/oauth/redirect_uri?scope=openid trading:write trading:read'

Example Response:
{
"content": "https://api.consorsbank.de/oauth/v2/oauth-authorize?scope=openid trading:write trading:read&response_type=code&client_id=your_client_id&state=a46rqq1u8v3h8b9vttvjoavr81&nonce=7c20526d-5ba9459188rsd7a8a&request=eyJhbGcisdd1NiJ9.eyJzY29wZSdsafZWfdsf....&redirect_uri=your_redirect_uri"
}
RedeemPOST/oauth/redeemaccess_code: the access code to be exchanged for a bearer tokenUsed to exchange the access code for a bearer token, which contains the id token, access token and refresh token. Then, a validation is performed on the id token where the state and nonce are checked.
The response contains the id token validation result.

Example cURL Request:
curl --location --request POST 'https://confidential-client-template-idp-ci1.apps.ckd-int.corp.dir/oauth/redeem'
--data-urlencode 'authCode=gpEzDGytF5TOqPsbOq99TA1lrZqR7Cys'

Example Response:
{
"successful": true
}