ap-singpass-helpers

Package Status


$3

Digital ID and e-KYC are greatly simplified by using SingPass and MyInfo, allowing such use cases as:

- On-boarding of new customers
- Authentication of customers
- Digital authorisations and signatures

This set of tools is prepared to integrate SingPass easier.

$3

``bash
openssl genpkey -algorithm EC -out ecPrivKey.pem \
-pkeyopt ec_paramgen_curve:P-256 \
-pkeyopt ec_param_enc:named_curve
`

$3

SingPass application works only for Singaporean citizens and PR.

$3

npm install ap-singpass-helpers

$3

Create a unique, and non-guessable values for nonce/state, base64-encoded.

Payload receied from SingPass BO server could be verified using _verifyPayload_ method.

NRIC information is a sensitive one, so helper is provided to mask NRIC, by using _maskNRIC_ function.

#### ES6

`javascript
const singpassHelper = require('ap-singpass-helpers')

const pubKey = -----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1xc5NSTs3KLltnTtuyiHYI+HeFjQ
SQh+4MWQvpenh1LrxQ/uvUXO0auGSp0GR5cyQLRh66HFzof3ZFV3rk4UzA==
-----END PUBLIC KEY-----

const jwk = await getPubKeyFromPEM(pubKey)

// creates nonce, max 255 characters, alphanumeric
const nonce = singpassHelper.createNonce()

// creates state, max 255 characters, base64 encoded
const state = singpassHelper.createState()

const payload = await singpassHelper.verifyPayload(
'payload to verify',
'validUrlToFetchJWKS keys from',
'validPubKeyId'
) // return verified payload

const NRIC = 'S3000941Z'
const data = singpassHelper.maskNRIC(NRIC) // data equals '**0941Z' now
``

$3

Aprimerose Pte Ltd, Singapore

$3

GPLv3.0