This document details the inner design of the Knooppunt.
External data requests are authenticated and authorized by the Knooppunt.
We follow the Nuts Reference Solution Architecture for handling inbound data requests:

The Knooppunt acts as Authorization Server (“AS”) and Policy Decision Point (“PXP”).
The following diagram shows how inbound data requests are handled: