EPIC: eID Identity Server

What are we building:

An eID server is a software component that enables service providers to integrate the eID function into their IT systems. It handles the secure communication that takes place between eID clients, the chips on users' eID cards, and eID applications. To perform its checks (on eID cards and eID applications), a server of this kind retrieves new authorisation certificates and updated certificate revocation lists from an authorisation certificate provider on a regular basis.

Authentication flow can be found here:
https://gitlab.opencode.de/governikus/keycloak-eid-identity-provider

Protocols:
[PART1: Functional Specification](https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03130/TR-03130_TR-eID-Server_Part1.pdf?__blob=publicationFile&v=3)
[PART2: Security Framework](https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03130/TR-03130_TR-eID-Server_Part2.pdf%3F__blob%3DpublicationFile%26v%3D1&ved=2ahUKEwjVjKPll_OLAxV4h_0HHZwILwIQFnoECBIQAQ&usg=AOvVaw2aqgwqEugxgDRt5vKJPYbA)
[PART3: eIDAS Middleware Service](https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03130/TR-03130_TR-eID-Server_Part3.pdf%3F__blob%3DpublicationFile%26v%3D3&ved=2ahUKEwi05svemfOLAxWq9QIHHbULA7cQFnoECBQQAQ&usg=AOvVaw2dKYFkKYEft2YHrgvPpoEs)
[PART4: Conformance Test Specification](https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03130/TR-03130_TR-eID-Server_Part4.pdf%3F__blob%3DpublicationFile%26v%3D3&ved=2ahUKEwjz5LeBmvOLAxWA1QIHHeaaOs0QFnoECBIQAQ&usg=AOvVaw2H0mqv1Vbwug876oGm7WD-)
[PART5:Conformance TLS test specification](https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TR03116/BSI-TR-03116-TS_v1.pdf?__blob=publicationFile&v=2)

IDClient spec (IDClient != eID-Server) : https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03124/TR-03124-1.pdf?__blob=publicationFile&v=2

Order of the work:

1.1) Project Setup: Install Rust, create project, dependencies research (SOAP, SAML, TLS, XML)
1.2) Spec Study (Get a good overview of this epic and the flow of work)
XML Parsing Setup: Create a shared XML parsing and generation module
2) SOAP Interface: Build endpoints, parse XML, add mock logic together. Proper error handling.
3) TLS: Add HTTPS with self-signed certificates to secure communication.
4) SAML Interface: Integrate SAML message handling into SOAP endpoints.
5) Testing: Use AusweisApp2 and PersoSim to verify functionality.
6) Documentation/Deployment: Finalize and run locally.

Endpoints:
useID initiates a session
getResult retrieves results
getServerInfo provides metadata.

Since this is a test server, the logic is mock (e.g., returning fake session IDs or data), making it lightweight enough to bundle with endpoint setup.

Issues:

- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/3
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/2
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/4 (for everyone)
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/5
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/6
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/60
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/11
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/66
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/13
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/14
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/15
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/17
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/21
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/38

New EPIC about establishing POAS communication betwenn channels:
- [ ] https://github.com/ADORSYS-GIS/eID-Server/issues/26