MiTrust sharing-flow follows the standard OAuth2 Authorization code flow.
\n","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json","toc":[],"owner":"106688","collectionId":"bda9f1fd-1341-4f24-bc5b-4451eb876d5d","publishedId":"Tzm9iEHU","public":true,"customColor":{"top-bar":"FFFFFF","right-sidebar":"303030","highlight":"EF5B25"},"publishDate":"2021-07-13T15:26:46.000Z"},"item":[{"name":"Availability","item":[{"name":"Count available DPs","id":"62c15489-abfb-4210-8958-1af9b550161a","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[],"url":"https://sbx-app.m-itrust.com/v2/public/dp/statistics?scope=name address&client_id=sbx_MiTrust_Integration_Tutorial.gb","description":"This request will answer the number of available data sources given the input arguments.
\nAs MiTrust offers many data sources, its is recommended that requests made to this API use the same scope that you would use to start the Sharing Flow.
\nA more generic scope, like name address from this sample, will answer that many sources are availalbe, whereas the data source that you actually need for your use case will be hidden amongst them.
A typical URL to redirect the EndUser to start a sharing flow.
\n","urlObject":{"protocol":"https","path":["v2","sp","sharingflow","start"],"host":["sbx-app.m-itrust.com"],"query":[{"description":{"content":"Provided on application registration
\n","type":"text/plain"},"key":"client_id","value":"sbx_MiTrust_Integration_Tutorial.gb"},{"description":{"content":"The EndUser will be redirected to this URL.
\nYou have to properly encode the parameters (especially the scope and redirectUri). In Javascript, you should rely on encodeURIComponent
\n","type":"text/plain"},"key":"redirect_uri","value":"https://www.example.com/redirect_from_mitrust"},{"description":{"content":"A value supposed to be unique per flow. It will be provided back at the end of the sharing-flow. Not generated on each call in Postman as later call (e.g. to fetch the access_token) shall rely on the samle value
\n","type":"text/plain"},"key":"state","value":"postman-sbx_MiTrust_Integration_Tutorial.gb"},{"description":{"content":"The scope describes the data requested to be shared in given sharing-flow
\n","type":"text/plain"},"key":"scope","value":"{{encoded_autoupdate_scope}}"},{"key":"response_type","value":"code"}],"variable":[]}},"response":[{"id":"832f372c-fbd7-4501-b789-1097588b94e6","name":"Start sharing-flow v2","originalRequest":{"method":"GET","header":[],"url":{"raw":"https://sbx-app.m-itrust.com/v2/sp/sharingflow/start?client_id=sbx_MiTrust_Integration_Tutorial.gb&redirect_uri=https://www.example.com/redirect_from_mitrust&state=postman-sbx_MiTrust_Integration_Tutorial.gb&scope=name address&response_type=code","protocol":"https","host":["sbx-app.m-itrust.com"],"path":["v2","sp","sharingflow","start"],"query":[{"key":"client_id","value":"sbx_MiTrust_Integration_Tutorial.gb","description":"Provided on application registration"},{"key":"redirect_uri","value":"https://www.example.com/redirect_from_mitrust","description":"The EndUser will be redirected to this URL.\n\nYou have to properly encode the parameters (especially the scope and redirectUri). In Javascript, you should rely on encodeURIComponent"},{"key":"state","value":"postman-sbx_MiTrust_Integration_Tutorial.gb","description":"A value supposed to be unique per flow. It will be provided back at the end of the sharing-flow. Not generated on each call in Postman as later call (e.g. to fetch the access_token) shall rely on the samle value"},{"key":"scope","value":"name address","description":"The scope describes the data requested to be shared in given sharing-flow"},{"key":"response_type","value":"code"}]}},"status":"Found","code":302,"_postman_previewlanguage":"plain","header":[{"key":"Cache-Control","value":"no-store, must-revalidate, no-cache, max-age=0"},{"key":"Pragma","value":"no-cache"},{"key":"Expires","value":"0"},{"key":"Location","value":"/#/sharing/start?client_id=sbx_MiTrust_Integration_Tutorial.gb&scope=name%20address&redirect_uri=https%3A%2F%2Fwww.example.com%2Fredirect_from_mitrust&state=postman-sbx_MiTrust_Integration_Tutorial.gb&language=en&sharing_flow_id=d21aaa71-d43b-42d0-b3f2-1ccc35369b8b"},{"key":"Vary","value":"Access-Control-Request-Headers"},{"key":"Server","value":"Kestrel"},{"key":"MiTrust-git_sha1-datasharing","value":"4816f34ba034adbb3b97ee1a9270d127b1df6d92"},{"key":"MiTrust-azure_instance_id-datasharing","value":"f6ac135c52b048d91b92cc79c27b985ddd7ffd33d5b3fa221fdb235825d7cb12"},{"key":"MiTrust-spring-start","value":"2021-07-16T17:39:13.100350+02:00"},{"key":"MiTrust-spring-end","value":"2021-07-16T17:39:13.260488+02:00"},{"key":"X-Content-Type-Options","value":"nosniff"},{"key":"X-XSS-Protection","value":"1; mode=block"},{"key":"Strict-Transport-Security","value":"max-age=31536000 ; includeSubDomains"},{"key":"X-Frame-Options","value":"DENY"},{"key":"Date","value":"Fri, 16 Jul 2021 15:39:12 GMT"},{"key":"Content-Length","value":"0"}],"cookie":[],"responseTime":null,"body":null}],"_postman_id":"3566a965-0288-424d-af20-5ec0cd8e1030"},{"name":"Generate client_credentials access_token","event":[{"listen":"test","script":{"id":"2b6d4692-aef5-4e5a-b51f-94faa887c39f","exec":["// Check there is an access_token\r","var jsonData = pm.response.json();\r","pm.test(\"Check access_token\", function () {\r"," pm.collectionVariables.set(\"basic_access_token-headless\", jsonData.access_token);\r"," pm.expect(jsonData.access_token).to.be.a('string');\r"," pm.expect(jsonData.token_type).equal(\"bearer\");\r"," pm.expect(jsonData.expires_in).to.be.a('number');\r","});\r","pm.test(\"Check scope\", function () {\r"," pm.expect(jsonData.scope).equal('headless');\r","});"],"type":"text/javascript"}}],"id":"730d268f-583d-492d-822b-05f21adc6066","protocolProfileBehavior":{"disableBodyPruning":true,"followRedirects":false},"request":{"auth":{"type":"basic","basic":{"basicConfig":[{"key":"username","value":"sbx_MiTrust_Integration_Tutorial.gb"},{"key":"password","value":"clientSecretProvidedByMiTrust"}]},"isInherited":false},"method":"POST","header":[{"key":"Content-Type","name":"Content-Type","value":"application/x-www-form-urlencoded","type":"text"}],"body":{"mode":"urlencoded","urlencoded":[{"description":"This is a hardcoded value: do not edit it
\n","key":"grant_type","type":"text","value":"client_credentials"},{"key":"scope","value":"headless","type":"text"}]},"url":"https://sbx-app.m-itrust.com/oauth/token","description":"Some data can be fetched without a User SharingFlow, as they do not require any User credentials.\n You have to generate a token, through a POST request authenticated with BASIC.\n The token has grant_type=client_credentials as there is no user interaction.
This newly generated access_token can now be used to generate a headless_token.
To be able to start your headless session, you need your a headless_session token. You will ll have to make a POST request with your previously created access_token and headless_token.
Now that you have your headless_session, your backend shall poll MiTrust BE with it as a header.
Get info from the back end using /userinfo with your access_token and your headless_session
To be able to start your headless session, you need your a headless_session token. You will ll have to make a POST request with your previously created access_token and headless_token.
Once completed, you should acknowledged to good reception of data. By sending a DELETE request.
\n","urlObject":{"protocol":"https","path":["v2","sp","headless"],"host":["sbx-app.m-itrust.com"],"query":[{"key":"headless_session","value":"headless_session"}],"variable":[]}},"response":[{"id":"7a30e4be-3927-448c-b45d-306763640ce4","name":"DELETE headless session SUCCESS","originalRequest":{"method":"DELETE","header":[{"key":"headless_session","name":"Content-Type","value":"headless_session","type":"text"}],"url":"https://sbx-app.m-itrust.com/v2/sp/headless"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"MiTrust-azure_instance_id","value":"{ deprecated } The old way to redirect the EndUser to start a sharing flow.\nIt would be better to implement the v2 version
\n","urlObject":{"protocol":"https","path":["data-sharing","v1","start-sharing-flow"],"host":["sbx-app.m-itrust.com"],"query":[{"description":{"content":"Provided on application registration
\n","type":"text/plain"},"key":"client_id","value":"sbx_MiTrust_Integration_Tutorial.gb"},{"description":{"content":"The EndUser will be redirected to this URL.
\nYou have to properly encode the parameters (especially the scope and redirectUri). In Javascript, you should rely on encodeURIComponent
\n","type":"text/plain"},"key":"redirect_uri","value":"https://www.example.com/redirect_from_mitrust"},{"description":{"content":"A value supposed to be unique per flow. It will be provided back at the end of the sharing-flow. Not generated on each call in Postman as later call (e.g. to fetch the access_token) shall rely on the samle value
\n","type":"text/plain"},"key":"state","value":"postman-sbx_MiTrust_Integration_Tutorial.gb"},{"description":{"content":"The scope describes the data requested to be shared in given sharing-flow
\n","type":"text/plain"},"key":"scope","value":"name address"},{"key":"response_type","value":"code"}],"variable":[]}},"response":[],"_postman_id":"7f86d399-3bea-4dcf-b8d2-acaa1f60c50e"}],"id":"a32f5f4c-4718-4ffc-88ca-3b23bbc6dcbf","_postman_id":"a32f5f4c-4718-4ffc-88ca-3b23bbc6dcbf","description":""},{"name":"Start sharing-flow v2","event":[{"listen":"test","script":{"id":"00357286-78c1-47b9-bf09-76607ac8ad45","exec":["// MiTrust will redirect the User to the proper URL","pm.test(\"Redirect Url location\", function () {"," console.log(pm.response)"," pm.response.to.have.header(\"Location\");","});"],"type":"text/javascript"}},{"listen":"prerequest","script":{"id":"a624bcf1-4472-4f91-a98f-4a97dc3bebaa","exec":[""],"type":"text/javascript"}}],"id":"5207ba82-81a4-431c-aafd-d34903c9b241","protocolProfileBehavior":{"disableBodyPruning":true,"followRedirects":false},"request":{"auth":{"type":"noauth","isInherited":false},"method":"GET","header":[],"url":"https://sbx-app.m-itrust.com/v2/sp/sharingflow/start?client_id=sbx_MiTrust_Integration_Tutorial.gb&redirect_uri=https://www.example.com/redirect_from_mitrust&state=postman-sbx_MiTrust_Integration_Tutorial.gb&scope=name address&response_type=code","description":"A typical URL to redirect the EndUser to start a sharing flow.
\n","urlObject":{"protocol":"https","path":["v2","sp","sharingflow","start"],"host":["sbx-app.m-itrust.com"],"query":[{"description":{"content":"Provided on application registration
\n","type":"text/plain"},"key":"client_id","value":"sbx_MiTrust_Integration_Tutorial.gb"},{"description":{"content":"The EndUser will be redirected to this URL.
\nYou have to properly encode the parameters (especially the scope and redirectUri). In Javascript, you should rely on encodeURIComponent
\n","type":"text/plain"},"key":"redirect_uri","value":"https://www.example.com/redirect_from_mitrust"},{"description":{"content":"A value supposed to be unique per flow. It will be provided back at the end of the sharing-flow. Not generated on each call in Postman as later call (e.g. to fetch the access_token) shall rely on the samle value
\n","type":"text/plain"},"key":"state","value":"postman-sbx_MiTrust_Integration_Tutorial.gb"},{"description":{"content":"The scope describes the data requested to be shared in given sharing-flow
\n","type":"text/plain"},"key":"scope","value":"name address"},{"key":"response_type","value":"code"}],"variable":[]}},"response":[{"id":"f22c154f-7f33-4650-9919-afef8c5de5da","name":"Start sharing-flow v2","originalRequest":{"method":"GET","header":[],"url":{"raw":"https://sbx-app.m-itrust.com/v2/sp/sharingflow/start?client_id=sbx_MiTrust_Integration_Tutorial.gb&redirect_uri=https://www.example.com/redirect_from_mitrust&state=postman-sbx_MiTrust_Integration_Tutorial.gb&scope=name address&response_type=code","protocol":"https","host":["sbx-app.m-itrust.com"],"path":["v2","sp","sharingflow","start"],"query":[{"key":"client_id","value":"sbx_MiTrust_Integration_Tutorial.gb","description":"Provided on application registration"},{"key":"redirect_uri","value":"https://www.example.com/redirect_from_mitrust","description":"The EndUser will be redirected to this URL.\n\nYou have to properly encode the parameters (especially the scope and redirectUri). In Javascript, you should rely on encodeURIComponent"},{"key":"state","value":"postman-sbx_MiTrust_Integration_Tutorial.gb","description":"A value supposed to be unique per flow. It will be provided back at the end of the sharing-flow. Not generated on each call in Postman as later call (e.g. to fetch the access_token) shall rely on the samle value"},{"key":"scope","value":"name address","description":"The scope describes the data requested to be shared in given sharing-flow"},{"key":"response_type","value":"code"}]}},"status":"Found","code":302,"_postman_previewlanguage":"plain","header":[{"key":"Cache-Control","value":"no-store, must-revalidate, no-cache, max-age=0"},{"key":"Pragma","value":"no-cache"},{"key":"Expires","value":"0"},{"key":"Location","value":"/#/sharing/start?client_id=sbx_MiTrust_Integration_Tutorial.gb&scope=name%20address&redirect_uri=https%3A%2F%2Fwww.example.com%2Fredirect_from_mitrust&state=postman-sbx_MiTrust_Integration_Tutorial.gb&language=en&sharing_flow_id=d21aaa71-d43b-42d0-b3f2-1ccc35369b8b"},{"key":"Vary","value":"Access-Control-Request-Headers"},{"key":"Server","value":"Kestrel"},{"key":"MiTrust-git_sha1-datasharing","value":"4816f34ba034adbb3b97ee1a9270d127b1df6d92"},{"key":"MiTrust-azure_instance_id-datasharing","value":"f6ac135c52b048d91b92cc79c27b985ddd7ffd33d5b3fa221fdb235825d7cb12"},{"key":"MiTrust-spring-start","value":"2021-07-16T17:39:13.100350+02:00"},{"key":"MiTrust-spring-end","value":"2021-07-16T17:39:13.260488+02:00"},{"key":"X-Content-Type-Options","value":"nosniff"},{"key":"X-XSS-Protection","value":"1; mode=block"},{"key":"Strict-Transport-Security","value":"max-age=31536000 ; includeSubDomains"},{"key":"X-Frame-Options","value":"DENY"},{"key":"Date","value":"Fri, 16 Jul 2021 15:39:12 GMT"},{"key":"Content-Length","value":"0"}],"cookie":[],"responseTime":null,"body":null}],"_postman_id":"5207ba82-81a4-431c-aafd-d34903c9b241"},{"name":"Convert authorization-code to access-token","event":[{"listen":"test","script":{"id":"6b1d9990-64e3-4464-a0be-4262f43d7b86","exec":["// Check there is an access_token\r","pm.test(\"Check no error\", function () {\r"," var jsonData = pm.response.json();\r"," // Typically happens if authorization code has already been turned into access_token\r"," pm.expect(jsonData.error).not.equal(\"invalid_grant\");\r","});\r","\r","// Check there is an access_token\r","pm.test(\"Check access_token\", function () {\r"," var jsonData = pm.response.json();\r"," pm.collectionVariables.set(\"converted_access_token\", jsonData.access_token);\r"," pm.expect(jsonData.access_token).to.be.a('string');\r"," pm.expect(jsonData.token_type).equal(\"bearer\");\r"," pm.expect(jsonData.expires_in).to.be.a('number');\r"," \r","});"],"type":"text/javascript"}}],"id":"6f81ebb1-5a85-4521-ab36-ca694caa0044","protocolProfileBehavior":{"disableBodyPruning":true,"followRedirects":false},"request":{"auth":{"type":"basic","basic":{"basicConfig":[{"key":"username","value":"sbx_MiTrust_Integration_Tutorial.gb"},{"key":"password","value":"clientSecretProvidedByMiTrust"}]},"isInherited":false},"method":"POST","header":[{"key":"Content-Type","name":"Content-Type","value":"application/x-www-form-urlencoded","type":"text"}],"body":{"mode":"urlencoded","urlencoded":[{"description":"The code available as a query parameters to which the EndUser has been redirected
\n","key":"code","type":"text","value":"m2N2Dv"},{"description":"The redirect_uri configured at the beginning of the flow
\n","key":"redirect_uri","type":"text","value":"https://www.example.com/redirect_from_mitrust"},{"description":"This is a hardcoded value: do not edit it
\n","key":"grant_type","type":"text","value":"authorization_code"}]},"url":"https://sbx-app.m-itrust.com/oauth/token?code=LDRfc7w5myk5dUfQ6oc4P7jaa0QBSr7h&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fwww.example.com%2Foauth2%2Fredirect_from_mitrust","description":"Once you've been redirected after having completed the sharing part. You will have an authorization_code that will require a conversion to an access_token.
Get info from the back end using /userinfo with your access_token.