SECURITY_CONSTRAINT

All the reverse entity references for this entity

Accessing the service is subject to prior approval by the VAAC London Manager and agreeing to our terms and conditions. 

Access is based on OAUTH2 Client Credentials using Client ID and Secret to retrieve a Bearer Token. Login credentials must be set up days in advance of first-time use.

Access to the two VAAC London's Quantitative Volcanic Ash APIs does NOT include reciprocal access to VAAC Toulouse QVA service, operated by Meteo France. Should you wish to access VAAC Toulouse QVA service, then you must apply directly with Meteo-France.

The service shall ensure point-to-point integrity in accordance with EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile through the use of Transport Layer Security (TLS) 1.2 or above.

The service shall ensure point-to-point confidentiality in accordance with EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile through the use of Transport Layer Security (TLS) 1.2 or above.

The service shall ensure that satisfactory authorisation is put in place according to EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile requirement SWIM-TIYP-0070.

Consumer and provider authentication shall be ensured.

The service shall ensure consumer authentication in accordance with the EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile through the use of a X.509 certificate or the use of a username/password (SASL).

The service shall ensure provider authentication in accordance with EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile through the use of a X.509 certificate.

Header information in the response will include messages indicating where there is corrupt or missing data. Headers must always be checked with each request.