capabilities.work

Authenticate a person with a Lithuanian eID card

A 4-step recipe with Tvarka ATK API. We can help you get access.

Recipe · 4 steps

Authenticate a person with a Lithuanian eID card

with Tvarka ATK API

Authenticate a card holder and retrieve the verified identity.

  1. Backend, HTTP Basic. Returns the requestId, clientToken, nonce and verificationCode.
  2. Device, clientToken. Send the base64 DER authentication certificate read from the card; receive the exact data-to-be-signed and a one-shot operationToken.
  3. Device, clientToken. Return the raw card signature over dtbs, unmodified. The operationToken is single-use.
  4. Fetch the JWKS so the optional assertion JWT can be verified independently. This operation is served from the host root, outside the /v1 base path.
What you'll need to have ready
  • audience: An origin already approved for your provider; anything else returns 403 origin_not_allowed.
  • method
  • webhookUrl: Optional - receive the terminal state instead of polling.
For your developer

Arazzo workflow tvarka:authenticate-eid-card, 4 operations: createAuthRequest → submitAuthCertificate → completeAuth → getJwks. Specs on APIs.io.

More recipes with Tvarka ATK API

Sign a PDF with a qualified electronic signatureValidate, timestamp and archive an existing signed document