From 9c19da6499a31320d07d60fb43a7c0604b68e57d Mon Sep 17 00:00:00 2001
From: Pedro Felix <pedro.felix@curity.io>
Date: Fri, 19 Dec 2025 09:38:03 +0000
Subject: [PATCH] IS-9422: adds template to evaluate browser context needed for
 BankID returnURL computation on the backend

---
 .../compute-browser-context.vm                | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 src/identity-server/templates/core/authenticator/bankid/enter-personalnumber/compute-browser-context.vm

diff --git a/src/identity-server/templates/core/authenticator/bankid/enter-personalnumber/compute-browser-context.vm b/src/identity-server/templates/core/authenticator/bankid/enter-personalnumber/compute-browser-context.vm
new file mode 100644
index 00000000..13278c10
--- /dev/null
+++ b/src/identity-server/templates/core/authenticator/bankid/enter-personalnumber/compute-browser-context.vm
@@ -0,0 +1,27 @@
+#*
+ * Copyright (C) 2025 Curity AB. All rights reserved.
+ *
+ * The contents of this file are the property of Curity AB.
+ * You may not copy or use this file, in either source code
+ * or executable form, except in compliance with terms
+ * set by Curity AB.
+ *
+ * For further information, please contact Curity AB.
+ *###
+
+## redirect to the same URL
+#set ($_callbackUrl = "")
+## using a GET
+#set ($_callbackMethod = "get")
+#define($_formContent)
+    ## providing 'navigator.maxTouchPoints' in the 'nmtp' query-string variable
+    <input type="hidden" name="nmtp" id="nmtp"/>
+    <script type="text/javascript" $!nonceAttr>
+        const nmtp = navigator.maxTouchPoints
+        document.getElementById("nmtp").setAttribute("value", "" + nmtp)
+    </script>
+
+    ## just to ensure the query-string is not empty and we do not endup on an infinit loop
+    <input type="hidden" name="ctx" value="1" />
+#end
+#parse("layouts/redirect")