android-bankdroid icon indicating copy to clipboard operation
android-bankdroid copied to clipboard

Published 20 hours ago • verified publisher icon liato

Usage of Swedbanks EasyLogin API

Open ghost opened this issue 9 years ago • 3 comments

As the personal number is of the sensitive side it would be good if Bankdroid didn't store the personal number if it isn't needed. Swedbank have the EasyLogin API that works as following.

  1. User logs in with any of Swedbank authentication methods
  2. A call to the Easy Login service returns a easy login token which is a randomized token that is in Swedbanks system translated to the personal number of user that is currently logged in.
  3. Next time the user needs to login the easy login token can be sent instead of the personal number.

This means that for Swedbank and Savingsbank only users there is no need to actually store the personal number of the user on the device.

ghost avatar Oct 30 '14 15:10 ghost