<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:28452317;
mso-list-template-ids:-1746400438;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:764880122;
mso-list-template-ids:-1475575622;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Liebe Projektverantwortliche,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">wir möchten Sie heute auf einen wichtigen Aspekt der technischen Integration von FIT-Connect aufmerksam machen, welche am 30.04.2025 auf die Testumgebung deployed wird. Bitte geben Sie die Information an Ihre Hersteller weiter.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Wir können beobachten, dass viele Anbindende weiterhin beim Abholen von Access-Tokens verschiedenste Oauth-Scopes explizit angeben. Laut
<a href="https://docs.fitko.de/fit-connect/docs/getting-started/authentication#abfrage-von-access-tokens-mit-allen-zugewiesenen-scopes" target="_blank">
https://docs.fitko.de/fit-connect/docs/getting-started/authentication#abfrage-von-access-tokens-mit-allen-zugewiesenen-scopes</a> wird davon aber dringend abgeraten. Sofern ihre Integration nicht auf den offiziellen SDKs basiert, überprüfen Sie bitte, ob Scopes
beim Abholen von Access-Tokens (JWTs) angegeben werden und stellen Sie ihre Implementierung um, um mögliche zukünftige Brüche zu vermeiden.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Was bedeutet das für Sie?<o:p></o:p></p>
<ul style="margin-top:0cm" type="disc">
<li class="MsoNormal" style="mso-list:l1 level1 lfo1"><b>Access-Tokens</b> sind sozusagen digitale Schlüssel, mit denen Ihre Fachverfahren oder Onlinedienste bei FIT-Connect Zugriff erhalten.<o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo1"><b>OAuth-Scopes</b> regeln, wofür diese Schlüssel konkret gelten (z.<span style="font-family:"Arial",sans-serif"> </span>B. welche Daten übermittelt oder empfangen werden dürfen).<o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo1">Wenn Entwickler:innen beim Anfordern dieser Schlüssel zu viele oder unnötige Rechte mit anfragen, kann das zu Problemen führen – insbesondere dann, wenn sich in Zukunft etwas an den technischen Standards
ändert.<o:p></o:p></li></ul>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI Emoji",sans-serif">👉</span>
<b>Was sollten Sie jetzt tun?</b><br>
Falls Sie selbst nicht mit der technischen Integration betraut sind, <b>bitten Sie Ihre technischen Ansprechpartner:innen oder Dienstleister um eine kurze Prüfung</b>:<o:p></o:p></p>
<ul style="margin-top:0cm" type="disc">
<li class="MsoNormal" style="mso-list:l0 level1 lfo2">Wird bei Ihrer FIT-Connect-Anbindung aktuell beim Anfordern von Tokens explizit festgelegt, welche Rechte (Scopes) notwendig sind?<o:p></o:p></li><li class="MsoNormal" style="mso-list:l0 level1 lfo2">Falls ja, sollte die Implementierung überarbeitet werden – idealerweise unter Nutzung der offiziellen SDKs von FIT-Connect oder durch Anpassung entsprechend der verlinkten technischen Anleitung.<o:p></o:p></li></ul>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Bei Rückfragen oder Unsicherheiten unterstützen wir Sie gern – kommen Sie einfach auf uns zu.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-fareast-language:DE">Beste Grüße<span style="mso-ligatures:none"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-fareast-language:DE">Laura Elges (im Auftrag der FITKO)<o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><span style="font-family:"Arial",sans-serif;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-fareast-language:DE"><img border="0" width="196" height="55" style="width:2.0416in;height:.575in" id="Grafik_x0020_803005564" src="cid:image002.png@01DBB51D.4D4A36F0"></span><span style="mso-ligatures:none;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><span style="font-family:"Arial",sans-serif;mso-fareast-language:DE"><img border="0" width="254" height="20" style="width:2.65in;height:.2083in" id="Grafik_x0020_12" src="cid:image003.png@01DBB51D.4D4A36F0"><b><u><span style="color:red"><o:p></o:p></span></u></b></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D;mso-fareast-language:DE">FITKO (Föderale IT-Kooperation)
</span></b><span style="color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D;mso-fareast-language:DE">Digitale Verwaltung. Intelligent vernetzt.</span><span style="color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#5F5F5F;mso-fareast-language:DE">Zum Gottschalkhof 3 | 60594 Frankfurt am Main</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:DE"><a href="https://www.fitko.de/"><span style="color:#595959">www.fitko.de
</span></a></span><span style="color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#5F5F5F;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#5F5F5F;mso-fareast-language:DE">Twitter:
</span></b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:DE"><a href="https://twitter.com/FITKOfoederal"><span style="color:#595959">twitter.com/FITKOfoederal
</span></a></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#5F5F5F;mso-fareast-language:DE">Mastodon:
</span></b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:DE"><a href="https://social.bund.de/@fitkofoederal"><span style="color:#595959">social.bund.de/@fitkofoederal
</span></a></span><span style="color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#5F5F5F;mso-fareast-language:DE">LinkedIn:
</span></b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:DE"><a href="https://www.linkedin.com/company/fitko-f%C3%B6derale-it-kooperation/"><span style="color:#595959">linkedin.com/company/fitko-föderale-it-kooperation
</span></a></span><span style="color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#5F5F5F;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#5F5F5F;mso-fareast-language:DE">Anstalt des öffentlichen Rechts | Präsident: Dr. André Göbel<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#5F5F5F;mso-fareast-language:DE">Bitte beachten Sie unsere Datenschutzhinweise:
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:DE"><a href="https://www.fitko.de/datenschutz"><span style="color:#595959">www.fitko.de/datenschutz
</span></a></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#44546A;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:DE">Bitte beachten Sie, dass die Nachrichten im HTML-Format versendet werden. Stellen
Sie daher sicher, dass Ihr Postfach entsprechend konfiguriert ist, um die Nachrichten korrekt anzuzeigen.<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>