API Info and Metadata

API Versioning

The HTTP header api-version is required. Use it to specify which version of the API you are making the request to.

Supported values:

• 2 Stable version nearing end-of-life
• 3 New version currently in the testing phase. Use this version if you are making a new API client.

Example: "api-version: 3"

Source System

The HTTP header nhn-source-system is required. Use it to specify which clinical system you are making the API calls from, and possibly which version.

Norsk Helsenett wants all API calls from external actors (that's you!) to be enriched with information about the system that produced the call. It also helps when troubleshooting complex integrations when the sender of the API call identifies itself as accurately as possible.

Example: "nhn-source-system": "My-EPJ, v1.0.2"

Authentication

Authentication is performed via two required HTTP headers:

• Authorization: Write the text DPoP (note the trailing space) followed by the encoded JWT token from HelseID.
• DPoP: Write the encoded DPoP proof from HelseID.

URL for Environments