UZI Card Authentication Server

💳 dotnet core implementation for handling UZI Card Client Certificate authentication.

Preparation

Install root CA for Zorverlener UZI-Cards (PassType=Z) located in AuthenticationServer/CertStorage and enable Client Authentication

• macOS: Import certificate in Keychain Access, then drag certificate to System Roots
• Windows

Usage

1. Change JWT secret as described in AuthenticationServer/appsettings.json

2. Start server by running following commands in root of repo:

   dotnet build Authentication-Server && dotnet run --project Authentication-Server 

3. Open client page Authorization-Client/client_demo.html

Todo

• Check revocation with hosting ISS Server @ windows
• Secret Manager implementation
• Client request JWT key generation -> optional, but unnecessary