Page Comparison

All unauthenticated endpoints

Cross-origin resource sharing (CORS) protections are being disabled on all unauthenticated endpoints.

Access-Control-Allow-Origin: *

Mid-August 2023

Get Data Holder Brands V1

Remove obsolete endpoint

Mid-21 September 2023

Get Software Statement Assertion (SSA) V1

Remove obsolete endpoint

Mid-21 September 2023

Get Software Statement Assertion (SSA) V2

Remove obsolete endpoint

Mid-21 September 2023

Get Software Products Statuses V1

Remove obsolete endpoint

Mid-21 September 2023

Get Data Recipient Statuses V1

Remove obsolete endpoint

Mid-21 September 2023

Get Data Recipients V1

Remove obsolete endpoint

Mid-21 September 2023

Get Data Recipients V2

Remove obsolete endpoint

Mid-21 September 2023

Get Data Holder Brands V2

The x-v header will be mandatory for incoming requests.

Mid-21 September 2023

Get Software Statement Assertion (SSA) V3

The x-v header will be mandatory for incoming requests.

Mid-21 September 2023

Get Software Products Statuses V2

The x-v header will be mandatory for incoming requests.

Mid-21 September 2023

Get Data Recipient Statuses V2

The x-v header will be mandatory for incoming requests.

Mid-21 September 2023

Get Data Recipients V3

The x-v header will be mandatory for incoming requests.

Mid-21 September 2023

Private Key JWT Client Authentication

Support RFC7521 such that, until November 13th 2023, clients authenticating using Private Key JWT are recommended to provide the client_id, but no longer required. From November 13th 2023, it is then optional to provide the client_id. This relates to the CDR Register authenticating with Data Holders and ADRs authenticating with the CDR Register.

13 November 21 September 2023