GET /parties/{partyId}

GET /parties/{partyId}

Returns a single participant to the requesting party from the DSGO central participant registry, based on a iSHARE did organisation ID

Parties will use the central participant registry mainly to verify the status of a party in a certain role. In order to support this, query parameters to filter claims are added.

The returned information is sufficient for a party to determine if another party complies with legal and technical conditions of DSGO, and is active in a certain role.

The central participant registry MUST support a GET call to a /parties/{partyId} endpoint to retrieve a single DSGO participant in a partyInfo object. {partyId} must be a valid iSHARE did organisation ID

Request

Authorization

An access token is used in GET calls to the /parties/{partyId} endpoint. For more information, see Access Token.

The central participant registry MUST validate that a GET call to a /parties/{partyId} endpoint includes the “Authorization" header according to RFC 6750 and includes a valid access token

Query parameters

For information about the parameters that are common to the trust framework’s API’s see Generic API Requirements.

The central participant registry MUST validate that a GET request to the /parties/{partyId} endpoint only contains the query parameters as defined in the table below

The central participant registry MUST validate that the HTTP body of a GET request to the /parties/{partyId} endpoint contains at least a single query parameter.

Query parameter

Type

Description

Query parameter

Type

Description

type

Optional

String

MUST be the claim type. Enum with values frameworkCompliance , dataspaceMembership,frameworkRole , dataspaceRole

dataspaceId

Optional

String

MUST be the id of the data space when type is dataspaceMembership ordataspaceRole. Enum with value EU.DS.NL.DSGO

frameworkId

Optional

String

MUST be the id of the framework whentype is frameworkCompliance or frameworkRole. Enum with valuesiSHARE

roleId

Optional

String

MUST be the id of the role when type is dataspaceRole or frameworkRole. See the claim object for allowed values

status

Optional

String

MUST be the status of the claim. Enum with values Active, Pending, NotActive, Revoked.

format

Optional

String

Used to specify if the response is in plain JSON or a signed JWT. Enum with values json, jwt

The example below shows a request for party did:ishare:EU.NL.NTRNL-98765432 with type=dataspaceRole, dataspaceId=EU.DS.NL.DSGO and roleId=ServiceConsumer and status=Active:

> Authorization: Bearer IIeDIrdnYo2ngwDQYJKoZIhvcNAQELBQAwSDEZMBcGA1UEAwwQaVNIQ GET /parties/did:ishare:EU.NL.NTRNL-98765432?type=dataspaceRole&dataspaceId=EU.DS.NL.DSGO&roleId=ServiceConsumer&status=Active

Responses

400 Bad Request

When Authorization header is provided, but the token format is invalid (for example, not Bearer). Additionally, a 400 should be returned when the provided access token is valid, but query parameters are either invalid or none of them were provided.

401 Unauthorized

When Authorization header is either missing, invalid or the access token has already expired.

404 Not Found

When a party is not found

200 OK

If successful, the response contains data providing the requested parties information in a partyToken. The partyToken is a signed JWT, which contains the claims as defined in the iSHARE JWT, and additionally contains a partyInfo object as defined here.

The response may also be the partyInfo object in plain JSON.

The response may also return zero claims, for instance if the query is filtered on active status but a party has all claims with status revoked

The central participant registry MUST offer a partyToken including a partyTnfo object in a response to a successful GET calls to the /parties/{partyId} endpoint

The central participant registry MAY also offer a plain JSON partyInfo object in a response to a successful GET call to the /parties/{partyId} endpoint

The example below shows the example response for the request example above:

< Content-Type: application/json { "partyToken": "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.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.U2nIhL2600VX1uaMdJ_uUJky_Q8WSSRDKcbmeYrL_GGHifptwlB00uwj1uWmbUbd5KlYIYio-lPX1BwMzYmVXLC6ZydkI7kIsdQypiSEXGT6U2KIlTO2EyF3CU6EY6iBzuVtvyupbDVPkKzDVh8thE5cepCS_FAsZZvxYXfeWGjVoKRpHtAIGq8reTIgEE_9w-p6Toa970ERJ01Lcn3xpDPp-FNLobmMa_mM6Vn4m6WjvMxr77coO54GDJ6FM70egChiBHJSjUGqDaBUgebdAFh3AQ8TfYJntka9DiNVFiY5Y_HqecBmKW_DiokT40DiljXEhRy6YVLSHjxOKa81TQ" } Decoded partyToken payload : { "iss": "did:ishare:EU.NL.NTRNL-63202158", "sub": "did:ishare:EU.NL.NTRNL-63202158", "jti": "77e8179fbfe6469eb64c054da26a77c3", "iat": 1589282112, "exp": 1589282142, "aud": "did:ishare:EU.NL.NTRNL-00000000", "partyInfo": { "id": "did:ishare:EU.NL.NTRNL-98765432", "alsoKnownAs": [ "kvk:98765432", "eori:EU.EORI.NL000123456" ], "name": "XYZ Vastgoed b.v.", "claims": [ { "type": "dataspaceRole", "dataspaceId": "EU.DS.NL.DSGO", "roleId": "ServiceConsumer", "title": "Service Consumer", "registrarId": "did:ishare:EU.NL.NTRNL-63202158", // Stichting digiGO manages this role. "loa": "not-applicable", "compliancyVerified": "no", "legalAdherence": "yes", "status": "Active", "startDate": "2019-05-01T00:00:00.000Z", "endDate": "", "id": "2ba62796-1ca3-4420-b396-d23cca2fc6bb" } ] } }