Service that document providers need to implement. All document providers need to implement the same interface. The mailbox will call this service to retrieve documents from the document provider when a user wants to view the document.
HTTPS communication is required. The backend system will identify itself with JWT in the Authorization header using the Bearer schema. The service MUST validate the signature, issuer, expiry dates, audience and scope
Document
The operation returns an owner's document. The service should only return a document if the documentId and owner_kennitala matches a registered document in the document provider's system.
GET $BASE_URL$/{kennitala}/documents/{documentId}?authenticationType={authenticationType}&includeDocument={includeDocument}
Request Parameters:
Variable
Type
Description
kennitala
String
Owners/recipients kennitala.
documentId
String
A unique identifier for the reference within the document provider.
authenticationType
String
Strength of authentication of the user/recipient of the document.
LOW = User/pass
SUBSTANTIAL = Two factor authentication (User/Pass and additionally SMS)
HIGH = Client Certificate
includeDocument
Boolean
If the actual document should be returned or only the metadata
Document form (file ending). For example, pdf. If nothing is given, pdf is the default and recommended if there is not a special reason for something else.
Sequence diagram that describes how Island.is retrieves a document and displays the user. This is valid when documents that are in the form of a non-external connection are required, such as pdf.