One ID Nepal treats government identity the way the web treats social login. Instead of every portal building its own signup, storing its own copy of a citizenship number and losing it in its own breach, an application redirects to One ID, the citizen authenticates once, and the application receives only the claims it was granted — conceptually the Nagarik App extended into an identity provider other services can build on.

The build is three Spring Boot services behind a gateway: an authorization server implementing OpenID Connect on top of Spring Authorization Server, with a login and a consent screen where the citizen sees exactly which records an app is asking for; a developer portal where a third party registers an application and receives client credentials and redirect URIs; and a resource server holding the identity records themselves — person, national ID, citizenship, passport and driving licence — each behind its own OAuth scope.

Because it speaks standard OIDC, an integrating application needs no custom SDK: any existing OAuth client library works, the ID token is a normal JWT, and scopes are the only vocabulary a developer has to learn. Built as a hackathon project by team Brogrammers.