The Syntpop API version 1.0 introduces a new authentication mechanism using HelseId with DPoP (Demonstration of Proof-of-Possession). This change enhances the security of the API by ensuring that access tokens are bound to a specific client and request.
To target API version 0.2, include the X-api-version HTTP header in your request: X-api-version: 0.2
To target API version 1.0, You need to request access to the Syntpop API through the HelseID self-service portalHelseID selvbetjening Each time when you make a request to the Syntpop API, you need an valid access token and a DPOP proof with an appropriate scope from HelseId and include them in the header of your HTTP request. The available scope is: nhntsd:syntpop-api/full-access
Headers about "X-Syntpop-apikey" should not be included in the request anymore, and instead, you should include the following headers:
If no version is specified, the request defaults to version 0.1.