[ Виды сведений ] [ Права и согласие ] [ Шаги запросов ] [ Состояние ответа ] [ Отображение в атрибуты ] [ Особенности ] [ Полный пример конфигурации ]
Сведения МВД России: паспорта и документы иностранных граждан, история паспортов, водительское удостоверение, выписка о транспортных средствах. Подробные кейсы: история паспортов, водительское удостоверение, транспортные средства (подстраницы).
Общий механизм (согласие, шаги конвейера, состояния ответа) описан на странице «Цифровой профиль ФЛ: все виды сведений и реализация».
Виды сведений
| Сведение | doc_type | Область доступа | Формат | Примечание |
|---|---|---|---|---|
| Паспорт гражданина РФ | RF_PASSPORT | id_doc | XML | |
| Паспорта РФ детей гражданина | KID_RF_PASSPORT | kid_id_doc | XML | |
| Заграничный паспорт | FRGN_PASS | foreign_passport_doc | XML | |
| Документ иностранного гражданина, удостоверяющий личность | FID_DOC | — | XML | |
| История выданных паспортов | PASSPORT_HISTORY | history_passport_doc | JSON | подробно: кейс 8.7.1.1; API v2 |
| Водительское удостоверение | GIBDD_DRIVER_LICENSE | drivers_licence_doc | XML | подробно: кейс 8.7.1.2 |
| Выписка о транспортных средствах по владельцу | VEHICLE_INFO | vehicle_reg_cert_doc | XML | подробно: кейс 8.7.1.3 |
Права и согласие
Параметр permissions в redirectForm (перед кодированием — JSON-массив). В запросе авторизации в scope остаётся только openid. В scopes указываются только необходимые области.
[
{
"sysname": "<ТИП_СОГЛАСИЯ>",
"scopes": [
{
"sysname": "id_doc"
},
{
"sysname": "kid_id_doc"
},
{
"sysname": "foreign_passport_doc"
},
{
"sysname": "history_passport_doc"
},
{
"sysname": "drivers_licence_doc"
},
{
"sysname": "vehicle_reg_cert_doc"
}
],
"purposes": [
{
"sysname": "<ЦЕЛЬ>"
}
],
"actions": [
{
"sysname": "ALL_ACTIONS_TO_DATA"
}
],
"responsibleObject": "<ФИО_ИЛИ_ПОДРАЗДЕЛЕНИЕ>",
"expire": "<СРОК_В_МИНУТАХ>"
}
]
Шаги запросов
Шаги конвейера после проверки токена и is_trusted. В конвейер включаются только необходимые виды сведений: каждый шаг — отдельный запрос к ЕСИА.
[
{
"t": 0,
"r": "person",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "rf_passport",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/RF_PASSPORT",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "kid_rf_passport",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/KID_RF_PASSPORT",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "frgn_pass",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/FRGN_PASS",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "fid_doc",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/FID_DOC",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "passport_history",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v2/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/PASSPORT_HISTORY",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "gibdd_driver_license",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/GIBDD_DRIVER_LICENSE",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "vehicle_info",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/VEHICLE_INFO",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
}
]
Состояние ответа
JavaScript-шаг определяет состояние каждого ответа (yes, pending, NO_CONSENT, error, no):
{
"rf_passport_status": "r = \"no\"; d = rf_passport; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"kid_rf_passport_status": "r = \"no\"; d = kid_rf_passport; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"frgn_pass_status": "r = \"no\"; d = frgn_pass; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"fid_doc_status": "r = \"no\"; d = fid_doc; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"passport_history_status": "r = \"no\"; d = passport_history; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"gibdd_driver_license_status": "r = \"no\"; d = gibdd_driver_license; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"vehicle_info_status": "r = \"no\"; d = vehicle_info; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;"
}
Отображение в атрибуты
{
"fn": "{{.person.firstName}}",
"ln": "{{.person.lastName}}",
"mn": "{{.person.middleName}}",
"un": "",
"e": "",
"p": "",
"l": "",
"xid": "",
"rid": "state",
"x": {
"rf_passport_status": "{{.rf_passport_status}}",
"kid_rf_passport_status": "{{.kid_rf_passport_status}}",
"frgn_pass_status": "{{.frgn_pass_status}}",
"fid_doc_status": "{{.fid_doc_status}}",
"passport_history_status": "{{.passport_history_status}}",
"gibdd_driver_license_status": "{{.gibdd_driver_license_status}}",
"vehicle_info_status": "{{.vehicle_info_status}}"
}
}
Особенности
PASSPORT_HISTORYвызывается через API v2 и возвращает JSON; остальные виды — XML в полеcontent(Base64).- Для вида без указанной области доступа (
FID_DOC) область определяется при подключении системы к ЕСИА. - Паспорта детей (
KID_RF_PASSPORT) возвращаются по детям, привязанным к пользователю. - Реквизиты паспортов являются персональными данными. Рекомендуется передавать в атрибуты статус и признак наличия, а не реквизиты.
Подробные кейсы: история паспортов, водительское удостоверение, транспортные средства (подстраницы раздела).
Полный пример конфигурации
Файл конфигурации внешнего провайдера (extidp.json) целиком. Значение typeDetails — строка с JSON; значения в <...> задаются при настройке.
[
{
"id": "<UUID_ПРОВАЙДЕРА>",
"redirectMethod": 0,
"authorizeUri": "{{.extidp_details.baseUrl}}/aas/oauth2/v2/ac",
"logoutRedirectMethod": 0,
"logoutUri": "{{.extidp_details.baseUrl}}/aas/oauth2/api/logout",
"logoutForm": {
"redirect_url": "https://<адрес-после-выхода>",
"client_id": "{{ .extidp_details.clientID }}"
},
"type": "esia",
"name": "dp-mvd",
"synonym": "esia",
"typeDetails": "{\n \"baseUrl\": \"https://esia-portal1.test.gosuslugi.ru\",\n \"clientCertHash\": \"<ХЕШ_СЕРТИФИКАТА_ГОСТ_Р_34.11-2012_256>\",\n \"clientID\": \"<MNEMONIC_ИС_В_ЕСИА>\",\n \"cryptoProvider\": {\n \"name\": \"cprocsp_raw\",\n \"details\": {\n \"certPath\": \"/opt/esia-adapter/certs/<сертификат_ИС>.cer\",\n \"containerName\": \"<ИМЯ_КОНТЕЙНЕРА>\",\n \"containerPIN\": \"<PIN_КОНТЕЙНЕРА>\",\n \"sha1Thumbprint\": \"<SHA1_ОТПЕЧАТОК>\",\n \"hashAlg\": \"GOST3411_2012_256\"\n }\n },\n \"scope\": \"openid\",\n \"scopeOrg\": \"\"\n}",
"redirectForm": {
"response_type": "code",
"client_id": "{{ .extidp_details.clientID }}",
"redirect_uri": "{{ .extidp_request.CallbackURI }}",
"scope": "{{ .extidp_details.scope }}",
"client_secret": "{{ $ts := timeFormat \"2006.01.02 15:04:05 Z0700\" .process_started }}{{ $clientSecretRaw := join .extidp_details.clientID .extidp_details.scope $ts .extidp_request.ID .extidp_request.CallbackURI }}{{ cryptoSign .context $clientSecretRaw .extidp_details.cryptoProvider | base64 }}",
"client_certificate_hash": "{{ .extidp_details.clientCertHash }}",
"timestamp": "{{ timeFormat \"2006.01.02 15:04:05 Z0700\" .process_started }}",
"state": "{{ .extidp_request.ID }}",
"access_type": "offline",
"code_challenge_method": "{{ .extidp_details.cryptoProvider.details.hashAlg }}",
"code_challenge": "{{ cryptoHashSum .context .code_verifier .extidp_details.cryptoProvider }}",
"permissions": "{{ $perm := printf `[{\"sysname\":\"<ТИП_СОГЛАСИЯ>\",\"scopes\":[{\"sysname\":\"id_doc\"},{\"sysname\":\"kid_id_doc\"},{\"sysname\":\"foreign_passport_doc\"},{\"sysname\":\"history_passport_doc\"},{\"sysname\":\"drivers_licence_doc\"},{\"sysname\":\"vehicle_reg_cert_doc\"}],\"purposes\":[{\"sysname\":\"<ЦЕЛЬ>\"}],\"actions\":[{\"sysname\":\"ALL_ACTIONS_TO_DATA\"}],\"responsibleObject\":\"<ФИО_ИЛИ_ПОДРАЗДЕЛЕНИЕ>\",\"expire\":<СРОК_В_МИНУТАХ>}]` }}{{ $perm | base64 }}"
},
"userInfoPipeline": [
{
"t": 1,
"d": {
"state": "{{ guid }}"
}
},
{
"t": 0,
"r": "token",
"m": "POST",
"u": "{{.extidp_details.baseUrl}}/aas/oauth2/v3/te",
"d": {
"client_certificate_hash": "{{.extidp_details.clientCertHash}}",
"client_id": "{{.extidp_details.clientID}}",
"client_secret": "{{$ts := timeFormat \"2006.01.02 15:04:05 Z0700\" .process_started}}{{$clientSecretRaw := join .extidp_details.clientID .extidp_details.scope $ts .state .extidp_request.CallbackURI .code}}{{ cryptoSign .context $clientSecretRaw .extidp_details.cryptoProvider | base64 }}",
"code": "{{.code}}",
"grant_type": "authorization_code",
"redirect_uri": "{{.extidp_request.CallbackURI}}",
"scope": "{{.extidp_details.scope}}",
"state": "{{.state}}",
"timestamp": "{{timeFormat \"2006.01.02 15:04:05 Z0700\" .process_started}}",
"token_type": "Bearer",
"code_verifier": "{{ .code_verifier }}"
}
},
{
"t": 1,
"d": {
"verify_id_token": "{{ cryptoVerifyJWT .context .token.id_token .extidp_details.cryptoProvider }}"
}
},
{
"t": 2,
"d": {
"id_token_claims": "jwt(token.id_token)"
}
},
{
"t": 1,
"d": {
"is_trusted": "{{ with index .id_token_claims \"urn:esia:sbj\" \"urn:esia:sbj:is_tru\" }}{{ if not . }}{{ fail \"user is not trusted\" }}{{ end }}{{ end }}"
}
},
{
"t": 0,
"r": "person",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 1,
"d": {
"person_ok": "{{ with .person.oid }}{{ else }}{{ fail \"cp: pso response has no oid\" }}{{ end }}"
}
},
{
"t": 0,
"r": "rf_passport",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/RF_PASSPORT",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "kid_rf_passport",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/KID_RF_PASSPORT",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "frgn_pass",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/FRGN_PASS",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "fid_doc",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/FID_DOC",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "passport_history",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v2/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/PASSPORT_HISTORY",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "gibdd_driver_license",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/GIBDD_DRIVER_LICENSE",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 0,
"r": "vehicle_info",
"m": "GET",
"u": "{{.extidp_details.baseUrl}}/digital/api/public/v1/pso/{{printf \"%.0f\" .id_token_claims.sub}}/doc/VEHICLE_INFO",
"h": {
"Authorization": "Bearer {{.token.access_token}}"
}
},
{
"t": 2,
"d": {
"rf_passport_status": "r = \"no\"; d = rf_passport; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"kid_rf_passport_status": "r = \"no\"; d = kid_rf_passport; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"frgn_pass_status": "r = \"no\"; d = frgn_pass; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"fid_doc_status": "r = \"no\"; d = fid_doc; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"passport_history_status": "r = \"no\"; d = passport_history; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"gibdd_driver_license_status": "r = \"no\"; d = gibdd_driver_license; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;",
"vehicle_info_status": "r = \"no\"; d = vehicle_info; if (Array.isArray(d)) { if (d.length && d[0].error) { r = \"error\"; } else if (d.length && d[0].status) { r = \"yes\"; } else if (d.length && d[0].requestId) { r = \"pending\"; } else if (d.length && d[0].statusDoc) { r = d[0].statusDoc; } } else if (d) { if (d.statusDoc) { r = d.statusDoc; } else if (d.requestId) { r = \"pending\"; } else if (d.error) { r = \"error\"; } else if (d.status) { r = \"yes\"; } } r;"
}
}
],
"attrMapping": {
"fn": "{{.person.firstName}}",
"ln": "{{.person.lastName}}",
"mn": "{{.person.middleName}}",
"un": "",
"e": "",
"p": "",
"l": "",
"xid": "",
"rid": "state",
"x": {
"rf_passport_status": "{{.rf_passport_status}}",
"kid_rf_passport_status": "{{.kid_rf_passport_status}}",
"frgn_pass_status": "{{.frgn_pass_status}}",
"fid_doc_status": "{{.fid_doc_status}}",
"passport_history_status": "{{.passport_history_status}}",
"gibdd_driver_license_status": "{{.gibdd_driver_license_status}}",
"vehicle_info_status": "{{.vehicle_info_status}}"
}
},
"isActive": false
}
]