sausin/signere-sdk

Package to work with Signere.no APIs for bankid implementation.

Signere SDK

, _(*1)

Signere provides APIs to perform authentication and signing of documents using various identification systems., _(*2)

This package uses the publicly available API documentation provided by Signere and makes it easy to work with those APIs., _(*3)

While it's created to work well with Laravel, it's possible to use the functionality of the package with any setup in PHP. An implementation of Illuminate\Contracts\Config\Repository is required in non-laravel environments to provide the configuration inputs for the package., _(*4)

Laravel handles dependency injection using its powerful service container. If this package is used without Laravel, your application needs to manage the dependency injection on its own and inject the relevant classes., _(*5)

Note that the controllers, service provider, routes and resources can only be used with Laravel., _(*6)

Installing

Install via composer:, _(*7)

composer require sausin/signere-sdk

When using the package with Laravel 5.5 and upwards, the service provider will automatically be registered. For Laravel 5.4, the service provider needs to be registered in the config/app.php file as below:, _(*8)

Sausin\Signere\SignereServiceProvider::class

The config file should be published using the below artisan command:, _(*9)

php artisan vendor:publish --provider="Sausin\Signere\SignereServiceProvider"

The config file has the following keys setup for the package to function correctly:, _(*10)

'mode'              => null,
'id'                => env('SIGNERE_API_ID', 'id'),
'primary_key'       => env('SIGNERE_KEY_PRIMARY', 'primary_key'),
'secondary_key'     => env('SIGNERE_KEY_SECONDARY', 'secondary_key'),
'ping_token'        => env('PINGTOKEN', 'ping_token'),
'cancel_url'        => 'https://abc.com/auth/abort?requestid=[1]&externalid=[2]',
'error_url'         => 'https://abc.com/auth/error?status=[0]',
'success_url'       => 'https://abc.com/auth/success?requestid=[1]&externalid=[2]',
'sign_cancel_url'   => 'https://abc.com/auth/abort?requestid=[1]&externalid=[2]',
'sign_error_url'    => 'https://abc.com/auth/error?status=[0]',
'sign_success_url'  => 'https://abc.com/auth/success?requestid=[1]&externalid=[2]',
'identity_provider' => 'NO_BANKID_WEB',

Pre-requisites

Keys

The .env file in the project this SDK is used in should have the following keys defined:, _(*11)

SIGNERE_API_ID
SIGNERE_KEY_PRIMARY
SIGNERE_KEY_SECONDARY
PINGTOKEN

These keys are provided by Signere when you register yourself with them., _(*12)

If you're using this package without Laravel, then the these variables need to be provided by an implementation of Illuminate\Contracts\Config\Repository. This is injected to the respective classes where required., _(*13)

SSL

Your application needs to have an operational SSL configuration. This is required for bankID to work correctly, in iframe setups., _(*14)

Usage

To make API calls, appropriate headers need to be set to signere can verify your requests are authentic. This is automatically taken care of by the Header class in this package. The specifications in Signere documentation for required headers in API calls have been used., _(*15)

Access Control with Laravel

If the package is used with Laravel, routes are automatically registered. Refer to the routes/api.php in this package to see all the available routes., _(*16)

The routes are split into four groups - admin, user, guest and bidder. Access control is made possible by the Signere class which can be setup in the AppServiceProvider of the application using this package. An example is shown below:, _(*17)

Signere::auth(function ($request) {
    // return true / false;
});

Each controller's constructor method calls Authenticate middleware, which in turn calls the Signere class to check if the request is to be authenticated., _(*18)

Most of the routes are organized under admin group as there is a cost to the operations performed., _(*19)

Utilizing Authentication Services

The workflow for authentication is like this:, _(*20)

• Create a request using the create method on RequestId class. This method accepts an array of values and returns a GuzzleHttp\Psr7\Response object, which contains among other things the URL for signing
• Go to the URL above and provide your BankID credentials. Depending on the outcome of this authentication process, you will be redirected to one of the URLs given to the create method above
• When you want to logout or invalidate your login, use the invalidate method on RequestId class. This accepts a string input which corresponds to the requestid received on the response of the create method

Utilizing Signing Services

Signing can be performed in two ways:, _(*21)

• External
• Signere way

The first method means that you create a document available for signing and distribute the URLs to the signees yourself., _(*22)

In the second method, Signere does the hard work for you. You basically setup a process with Signere which sends out the notifications to signees. It is also possible to automate reminders., _(*23)

... ..., _(*24)

Tips

Laravel supports real time facades (since 5.4)., _(*25)

This can be very useful when you want to use a class from this package with injected dependencies and be able to test your own app's code. Read more about Laravel facades here., _(*26)

Further, this can also be useful in tinker to check if you are getting correct responses. For example on a tinker console:, _(*27)

>>> $r = Facades\Sausin\Signere\Events::getEncryptionKey()
=> GuzzleHttp\Psr7\Response {#1234}
>>> $r->getBody()->getContents()
=> ""fcbYIytltKmGrmd3lre71wpdBDn4D56dNjp8Bn1TROl=""

gets you an encryption key from Signere, corresponding to your setup! Also,, _(*28)

>>> Facades\Sausin\Signere\Events::getBaseUrl();

will give you the URL being used by the package. If you're in test/local environment, this will return https://testapi.signere.no/api/events/encryptionkey and https://api.signere.no/api/events/encryptionkey if you're in production., _(*29)

Commands

This package ships with the artisan command signere:renew. It accepts an optional argument --key= which is either primary or secondary., _(*30)

If nothing is specified, it uses primary. This is useful to renew your signere keys and can be combined with the powerful scheduler that Laravel comes with so you don't have to worry about renewing your keys. Just set it up for renewal and forget about it :), _(*31)

Credits

• Taylor Otwell and Mohamed Said for the awesome Horizon package which served as a template for this.
• Signere for providing an amazing API service to use BankId

Trademarks

All trademarks belong to their respective owners, _(*32)