Explain how to change default text (#1306) (#1316)

Altinn · Dec 8, 2023 · a46812c · a46812c
1 parent 97ffc44
commit a46812c
Show file tree

Hide file tree

Showing 15 changed files with 325 additions and 187 deletions.
diff --git a/content/broker/1. Introduction/_index.en.md b/content/broker/1. Introduction/_index.en.md
@@ -1,17 +1,14 @@
 ---
 title: Altinn Broker Introduction
-title: Altinn Broker Introduction
 linktitle: Introduction
 description: Introduction to the Altinn Broker Service
-description: Introduction to the Altinn Broker Service
 tags: [architecture, solution]
 toc: true
 weight: 10
 ---
 
 {{<notice warning>}} <!-- info -->
 This is work in progress.
-This is work in progress.
 {{</notice>}}
 
 ## What is Altinn Broker?

diff --git a/...alization of capabilities and features/10 Building Blocks Overview/_index.en.md b/...alization of capabilities and features/10 Building Blocks Overview/_index.en.md
@@ -0,0 +1,21 @@
+---
+title: Altinn 3 Broker Building Blocks Overview
+linktitle: Building Blocks Overview
+description: Altinn 3 Broker Building Blocks Overview
+tags: [architecture, solution]
+toc: true
+weight: 10
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+
+## Overview of Building Blocks
+An overview of relevant Digdir components … TBD… update and translate…
+
+[{{< figure src="./image10.png" title="Figure 10: Altinn Solution Building Block in question for use or re-use" alt="Alt-text">}}](https://www.vg.no)
+
+## Dependencies
+TBD
diff --git a/... of capabilities and features/image10.png → ...s/10 Building Blocks Overview/image10.png b/... of capabilities and features/image10.png → ...s/10 Building Blocks Overview/image10.png
diff --git a/...tion of capabilities and features/100 Summary of security controls/_index.en.md b/...tion of capabilities and features/100 Summary of security controls/_index.en.md
@@ -0,0 +1,62 @@
+---
+title: Altinn 3 Broker Security Controls
+linktitle: Security Controls
+description: Altinn 3 Broker Security Controls - Summary 
+tags: [architecture, solution]
+toc: true
+weight: 100
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+
+## Authentication and Authorization
+Maskinporten and Altinn Authorization
+
+## Checksum
+TBD
+
+## Virus check
+
+- Configurable per transfer via intitalization
+
+## In-transit protection
+
+Encrypted file transfers with TLS/HTTPS.
+
+## At rest protection
+
+Encrypted Broker File Storage; ref. [Azure Storage encryption for data
+at rest \| Microsoft
+Learn](https://learn.microsoft.com/en-us/azure/storage/common/storage-service-encryption).
+
+Encrypted Broker Metadata Storage, Metadata storage using the PostgreSQL Database. Detalis TBD
+
+TBD: Specific encryption solution... firewall, not V-net... 
+
+
+## Alternative file storage solutions
+
+TBD
+
+## DDoS attack prevention
+
+DDoS attack prevention via Azure API Management.
+
+## Hosting
+
+Private cloud hosting
+
+On-premises hosting
+
+## Coding practices
+
+TBD Open source
+
+## Key Vault
+
+Azure Key Vault, Private keys, internals... identities (hidden tokens); secrets,  Altinn authentication
+
+
diff --git a/...n of capabilities and features/20 Authentication and Authorization/_index.en.md b/...n of capabilities and features/20 Authentication and Authorization/_index.en.md
@@ -0,0 +1,53 @@
+---
+title: Altinn 3 Broker Authentication and Authorization
+linktitle: Authentication and Authorization
+description: Altinn 3 Broker Authentication and Authorization
+tags: [architecture, solution]
+toc: true
+weight: 20
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+
+## General
+Altinn solutions for Authentication and Authorization are described under:
+
+* [Altinn Authentication](https://docs.altinn.studio/authentication/)  
+* [Altinn Authorization](https://docs.altinn.studio/authorization/).
+
+TBD: More excplicit reference to the updated Maskinporten and Altinn Authorization 
+solution architecture documentation. 
+
+
+
+## Maskinporten-token med systembruker-ID
+
+Ref. [Draft Dialogporten documentation on Authorization](https://digdir.github.io/dialogporten/#autorisasjon)
+
+Maskinporten foretar autentisering av systembruker/passord og utsteder
+et beriket token med identifikator for systembrukeren. Både
+tjenestetilbyder og Dialogporten må foreta oppslag mot Altinn
+Autorisasjon for å autorisere den oppgitte systembrukeren på
+tjenestenivå.
+
+<img src="./image11.png" style="width:6.3in;height:3.08056in"
+alt="Et bilde som inneholder tekst, skjermbilde, line, nummer Automatisk generert beskrivelse" />
+
+## Maskinporten-token med innbakt autorisasjon
+
+Ref. [Draft Dialogporten documentation on Authorization](https://digdir.github.io/dialogporten/#autorisasjon)
+
+I dette mønsteret oppgir SBS systembruker + passord, samt
+tjenesteressurs i forespørselen til Maskinporten, som da foretar både
+grov- og finkornet autorisasjon. Dette krever innføring av RAR (Rich
+Authorization Requests) for Maskinporten, og en tettere kobling mellom
+Maskinporten og Altinn Autorisasjon. Samme token-type kan benyttes mot
+både Tjenestetilbyder og Dialogporten, men aud-claim må settes i token
+og valideres for å unngå å åpne for replay-attacks.
+
+<img src="./image12.png" style="width:6.3in;height:2.43264in"
+alt="Et bilde som inneholder tekst, line, kvittering, diagram Automatisk generert beskrivelse" />
+
diff --git a/... of capabilities and features/image11.png → ...hentication and Authorization/image11.png b/... of capabilities and features/image11.png → ...hentication and Authorization/image11.png
diff --git a/... of capabilities and features/image12.png → ...hentication and Authorization/image12.png b/... of capabilities and features/image12.png → ...hentication and Authorization/image12.png
diff --git a/...fers)/5.8 Realization of capabilities and features/30 File Storage/_index.en.md b/...fers)/5.8 Realization of capabilities and features/30 File Storage/_index.en.md
@@ -0,0 +1,20 @@
+---
+title: Altinn 3 Broker File Storage
+linktitle: File storage
+description: Altinn 3 Broker File storage
+tags: [architecture, solution]
+toc: true
+weight: 30
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+## Overview
+Broker File Storage is based MS Azure Blob Storage...
+
+## Information security considerations
+Stored Files are always encrypted; ref. [Azure Storage encryption for
+data at rest \| Microsoft
+Learn](https://learn.microsoft.com/en-us/azure/storage/common/storage-service-encryption).
diff --git a/...)/5.8 Realization of capabilities and features/40 Metadata storage/_index.en.md b/...)/5.8 Realization of capabilities and features/40 Metadata storage/_index.en.md
@@ -0,0 +1,37 @@
+---
+title: Altinn 3 Broker Metadata Storage
+linktitle: Metadata Storage
+description: Altinn 3 Broker Metadata Storage
+tags: [architecture, solution]
+toc: true
+weight: 80
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+## Overview
+Broker Metadata Storage uses the PostgreSQL Database.
+
+## File metadata
+
+- correlationId
+
+- uploadProtocol
+
+- filename
+
+- sendersFileReference
+
+- checksum
+
+- sender
+
+- recipients
+
+- Name-value pairs
+
+
+## Information security considerations
+Stored files are not accessible from the outside. TBD: Add detail!
diff --git a/... Realization of capabilities and features/50 Addressing an Routing/_index.en.md b/... Realization of capabilities and features/50 Addressing an Routing/_index.en.md
@@ -0,0 +1,28 @@
+---
+title: Altinn 3 Broker Addressing and Routinng
+linktitle: Addressing and Routinng
+description: Altinn 3 Broker Addressing and Routinng
+tags: [architecture, solution]
+toc: true
+weight: 50
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+
+## General
+
+TBD... About addressing vs. Capability Lookup, Routing and Authorization
+
+
+## Addressing
+
+TBD
+
+## Capability Lookup
+TBD
+
+## Routing
+TBD
diff --git a/...Realization of capabilities and features/60 Logging and Monitoring/_index.en.md b/...Realization of capabilities and features/60 Logging and Monitoring/_index.en.md
@@ -0,0 +1,26 @@
+---
+title: Altinn 3 Broker Logging and Monitoring
+linktitle: Logging and Monitoring
+description: Altinn 3 Broker Logging and Monitoring
+tags: [architecture, solution]
+toc: true
+weight: 60
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+
+
+## Introduction
+
+TBD
+
+## Logging
+
+TBD
+
+### Monitoring
+
+TBD
diff --git a/...transfers)/5.8 Realization of capabilities and features/70 Billing/_index.en.md b/...transfers)/5.8 Realization of capabilities and features/70 Billing/_index.en.md
@@ -0,0 +1,26 @@
+---
+title: Altinn 3 Broker Clearing and Billing
+linktitle: Clearing and Billing
+description: Altinn 3 Broker Clearing and Billing
+tags: [architecture, solution]
+toc: true
+weight: 70
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+
+## Introduction
+
+TBD
+
+
+## Clearing
+
+TBD
+
+## Billing
+
+TBD
diff --git a/...ers)/5.8 Realization of capabilities and features/80 Notifications/_index.en.md b/...ers)/5.8 Realization of capabilities and features/80 Notifications/_index.en.md
@@ -0,0 +1,28 @@
+---
+title: Altinn 3 Broker Notifications
+linktitle: Notifications
+description: Altinn 3 Broker Notifications
+tags: [architecture, solution]
+toc: true
+weight: 80
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+
+
+## Introduction
+
+TBD
+
+
+### Notifications to persons
+
+TBD
+
+### Notifications to End User Systems
+
+Ref.
+<https://digdir.github.io/dialogporten/#integrasjon-med-event-komponent>
diff --git a/...s)/5.8 Realization of capabilities and features/90 API Management/_index.en.md b/...s)/5.8 Realization of capabilities and features/90 API Management/_index.en.md
@@ -0,0 +1,23 @@
+---
+title: Altinn 3 Broker API Management
+linktitle: API Management
+description: Altinn 3 Broker API Management
+tags: [architecture, solution]
+toc: true
+weight: 90
+---
+
+{{<notice warning>}} <!-- info -->
+This is work in progress.
+{{</notice>}}
+
+
+
+
+## Introduction
+TBD… MS Azure API Management
+
+
+## MS Azure API Management
+
+TBD