nodes/nemid

Nemid package for php

Nem-id integration

A PHP Laravel library for using the Danish NemID for authenticating a user., _(*1)

I'm sure it can be used easily without laravel also. Feel free to contribute to improvements, _(*2)

, _(*3)

The library supports:

• Preparing the parameters for the applet
• Validate the returned signature and the certificate chain
• Extract Name and PID
• Matching PID to CPR SOAP webservice

This is a rewrite of an original library for an older version of the applet in java, _(*4)

Original library can be found: https://code.google.com/p/nemid-php/, _(*5)

To become a nemid partner please follow this Link, _(*6)

You must then modify your composer.json file and run composer update to include the latest version of the package in your project., _(*7)

"require": {
    "nodes/nemid": "^1.0"
}

Or you can run the composer require command from your terminal., _(*8)

composer require nodes/nemid:^1.0

🔧 Laravel Setup

Setup service provider in config/app.php, _(*9)

Nodes\Nemid\ServiceProvider::class

Publish config files, _(*10)

php artisan vendor:publish --provider="Nodes\NemId\ServiceProvider"

If you want to overwrite any existing config files use the --force parameter, _(*11)

php artisan vendor:publish --provider="Nodes\NemId\ServiceProvider" --force

Certificates

Make sure you have bcmath installed

sudo apt-get install php7.0-bcmath

If your p12 file is password protected and the password holds special characters, see this stack overflow post, _(*12)

You got your p12 certificate now generate pem files, use following commands:, _(*13)

publicCertificate:

openssl pkcs12 -in path.p12 -out certificate.pem -clcerts -nokeys, _(*14)

NB: Remove the initial lines with Bag Attributes if present., _(*15)

Only the -----BEGIN CERTIFICATE-----, the base64 encoded certificate and -----END CERTIFICATE----- are relevant., _(*16)

privateKey & privateKeyPassword

openssl pkcs12 -in path.p12 -clcerts -out privateKey.pem, _(*17)

Openssl will prompt you for a PEM pass phrase that will have to be set in your nemid.php configuration., _(*18)

certifateAndPrivateKey & password (For PID/CPR match)

openssl pkcs12 -in path.p12 -out certificateAndPrivateKey.pem -chain, _(*19)

The -nodes flag disables encryption and password protection of your certificates (it has nothing to do with Nodes)., _(*20)

If left out Openssl will prompt you for a PEM pass phrase that will have to be set in your nemid.php configuration., _(*21)

Now you have all the certificates needed -, _(*22)

Copy the config file to htdocs and fill settings

Look in the config file for more help, _(*23)

Login integration

In the inspiration folder an example of how you can setup the login flow can be found., _(*24)

First prepare parameters to inject into the iframe. By creating a Login object., _(*25)

$login = new Login(config('nodes.nemid'));, _(*26)

Setup a html document with the iframe url, js with param data and a form for callbacks, _(*27)

$login->getIFrameUrl();, _(*28)

$login->getParams();, _(*29)

The iframe will now submit the response to the form, _(*30)

The submitted data is base64 encoded, besides that all errors comes as string while successfully logins are xml documents, _(*31)

$response = base64_decode(\Input::get('response'));, _(*32)

CertificationCheck::isXml($response), _(*33)

Now validate the certificates and extract name and PID from it by initialize a CertificationCheck object, _(*34)

$userCertificate = new CertificationCheck(config('nodes.nemid'));, _(*35)

$certificate = $userCertificate->checkAndReturnCertificate($response);, _(*36)

$certificate->getSubject()->getName();, _(*37)

$certificate->getSubject()->getPid();, _(*38)

PID/CPR match integration

Initialize a PidCprMatch object and call the function with pid and cpr params., _(*39)

$pidCprMatch = new PidCprMatch(config('nodes.nemid'));, _(*40)

$response = $pidCprMatch->pidCprRequest($pid, $cpr);, _(*41)

A response object will be returned. The object has functions to to check match and possible errors, _(*42)

$response->didMatch();, _(*43)

Misc

• The name Pseudonym or Pseudonym Pseudonym will be used for version 1 of nemid users, which have not set their name afterwards

Enjoy, _(*44)