The document is a manual for the Bangladesh Election Commission's Partner Service API, detailing authentication management for the Bangladesh Voter Registration System (BVRS). It outlines the functionalities of the RESTful API, including login, logout, and password change services, along with technical specifications and response codes. The document is confidential and intended for authorized developers integrating with the BVRS system.
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0 ratings0% found this document useful (0 votes)
244 views11 pages
For API User - API Authentication Management
The document is a manual for the Bangladesh Election Commission's Partner Service API, detailing authentication management for the Bangladesh Voter Registration System (BVRS). It outlines the functionalities of the RESTful API, including login, logout, and password change services, along with technical specifications and response codes. The document is confidential and intended for authorized developers integrating with the BVRS system.
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
{REST:API} Integration Manual
Partner Service API
Authentication Management Revision 1.0.0
Prepared by Bangladesh Election Commission National Identity Registration Wing (NIDW)
All information provided in this document is strictly confidential and intended solely for the evaluation committee. Unless used exclusively for the purpose of the project for which this document is intended, no part of this publication may be reproduced in any form, in an electronic retrieval system or otherwise, without the prior written permission of the publisher. BANGLADESH VOTER REGISTRATION SYSTEM (BVRS) 2
Contents
Disclaimer ............................................................................................................................................... 3 General Information............................................................................................................................... 4 RESTful API Functional Overview........................................................................................................... 5 Auth Service (Login) ........................................................................................................................... 5 Auth Service (Logout) ......................................................................................................................... 5 Change Password ............................................................................................................................... 5 Technical Specification of the RESTful API ............................................................................................ 6 Base URL ............................................................................................................................................. 6 Auth Service (Login) ........................................................................................................................... 6 Sample Request .............................................................................................................................. 6 Sample Response............................................................................................................................ 6 Response Code and Messages ....................................................................................................... 7 Auth Service (Logout) ......................................................................................................................... 8 Sample Response............................................................................................................................ 8 Response Code and Messages ....................................................................................................... 8 Consequences of Password Expiration .............................................................................................. 9 Sample Response............................................................................................................................ 9 Change Password ............................................................................................................................... 9 Sample Request .............................................................................................................................. 9 Sample Response............................................................................................................................ 9 Response Code and Messages ..................................................................................................... 10 Conclusion ............................................................................................................................................ 11
Disclaimer This document is for the internal use of and Bangladesh Election Commission only. Portions of the documents will remain the intellectual property of Bangladesh Election Commission such details are not to be passed to anyone. No part of this document may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise for any purpose, without the express written permission of Bangladesh Election Commission.
Additionally, this document contains confidential information on National ID system architecture
and thus may not be shared or disclosed to anyone. Any violation of the confidentiality of this document may result in security breaches and pose threats to the national database.
General Information Bangladesh Voter Registration System or BVRS is the central enterprise application solution of Bangladesh Election Commission. It is a custom solution designed and developed specifically for Bangladesh Election commission based on their operational requirements.
The system architecture of BVRS was very well planned and sophisticated, considering the time at which it was designed and developed. But, with time and increased usage and demand, it was unable to meet the new requirements. In continuation of running with different issues at BVRS, considering the technological barriers Bangladesh Election Commission has taken steps to upgrade the entire solution with the Up-to- date & High-tech Sophisticated Enterprise Technologies.
Partner Service Application of the CMS Module caters External Partners Requests for Voter Information and Voter Information Verification using the API and Web Portals. Government Agencies like Special Branch, Police & RAB, Non-Government Partners like Banks and Telco Operators can request for Voter Specific Information or Verify Voter Information under a Service Level Agreement (SLA) with the Bangladesh Election Commission.
This guide is intended for the developers (from authorized organizations) who plan to integrate their system with Bangladesh Election Commission over shared RESTful API to get specific services.
Developers are able to build custom applications and services in their platform of choice that supports the open standard RESTful “Web Services” methodology.
This RESTful Service Handles Authentication Process Securely using a valid Login Credentials shared by Bangladesh Election Commission.
Auth Service (Logout)
This RESTful Service Handles Authentication Process Securely using a valid Logout request.
Change Password
This RESTful service is designed for Changing Passwords used for API authentication. The Election Commission Partners are required to update their passwords according to three specified parameters, ensuring password effectiveness for the following 45 days.
Tag: error - Code: 201 - Message: Created - Code: 400 - Message: Bad Request - Code: 401 - Message: You are not authorized to view the resource - Code: 403 - Message: Accessing the resource you were trying to reach is forbidden - Code: 404 - Message: The resource you were trying to reach is not found - Code: 500 - Message: Internal Server Error
Tag: result - If the operation was successful, this field will have the result. 1. Access token 2. Refresh token 3. Username
Tag: error - Code: 201 - Message: Created - Code: 400 - Message: Bad Request - Code: 401 - Message: You are not authorized to view the resource - Code: 403 - Message: Accessing the resource you were trying to reach is forbidden - Code: 404 - Message: The resource you were trying to reach is not found - Code: 500 - Message: Internal Server Error
Tag: result - If the operation was successful, this field will have the result. 1. Logout success message.
Users will receive a notification as mentioned in the 'Sample Response’ when their password expires. This response applies to all APIs, and users must reset their password through the "Change Password" API.
Change Password API URL: [Link] user-password Request Type: POST Parameter Content Type: application/json Request Header: Bearer Token
Parameter Name Description Type
MANDATORY currentPassword Users current password (less than 50 character) MANDATORY newPassword New password that users want to set (less than 50 character) MANDATORY confirmPassword Rewrite the new password to confirm (less than 50 character)
{ "status": "BAD_REQUEST", "statusCode": "ERROR", "error": { "field": "password", "message": "Old Password and New Password Cannot Be Same" } }
{ "status": "BAD_REQUEST", "statusCode": "ERROR", "error": { "field": "confirmPassword", "message": "Password Should Not Be Greater than 50 Character" } }
{ "status": "BAD_REQUEST", "statusCode": "ERROR", "error": { "message": "Message not readable or request body is empty" } }
NOTE: Upon successful password update, the user session will terminate.
Response Code and Messages
Tag: success - Code: 200 - Message: Successful
Tag: error - Code: 201 - Message: Created - Code: 401 - Message: You are not authorized to view the resource - Code: 403 - Message: Accessing the resource you were trying to reach is forbidden - Code: 404 - Message: The resource you were trying to reach is not found - Code: 500 - Message: Internal Server Error
A group of Servers is dedicated to running the Partner Service Application of CMS Module. We are expecting End Users will experience extraordinary performance with less downtime under the Optimized Application Architecture.