New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

irma-web-glue

Package Overview
Dependencies
Maintainers
1
Versions
5
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

irma-web-glue

Glue irma-web-frontend to irmajs

  • 0.2.0
  • latest
  • npm
  • Socket score

Version published
Maintainers
1
Created
Source

IRMA web glue

This package provides the glue between IRMA flow styling and IRMA flow logic. It has been set up to make it easy to swap out different designs (markup and css) and/or different logic that communicates with an IRMA back-end. These two worlds communicate with each other through manipulating a state machine.

This package is designed as a semi-drop-in-replacement for the irmajs package. If you replace irmajs with this package it will make the whole IRMA flow look and act like irma-web-frontend.

You can try out this live demo that asks if you are over 18.

Current state

irma-web-glue should be fully functional on desktop (Chrome, Firefox, Safari, Opera, Edge and IE11 have been tested), Android and iOS.

Design considerations

We want to make embedding an IRMA disclosure flow in your website as simple as we can. Because of this we have chosen a similar (though slightly simpler) API to the irmajs API. irma-web-glue intends to be your one stop shop to import in your project and launch into good-looking IRMA flows in the web browser with zero hassle. If you feel that we can do better in this regard, please let us know 😉.

How to use in your application

This package only contains the Javascript part of the IRMA flow, you will have to combine it with a CSS counterpart like irma-web-frontend. Or you can choose to write your own styling.

Embedding

The old fashioned way

There is a normal version and a minified version of the Javascripts available for download on Github that you can include in your own project.

If you include the irma-web-glue[.min].js file in your HTML, you will have IrmaWebGlue available as a class (on window).

The way the cool kids do it

Alternatively, you can install it as an npm package. This can be useful if you want to use only parts of the package and roll your own glue, if you need to package it in some complicated way (frameworks, for example) or if you want to stay up to date.

$ npm install irma-web-glue

irmajs is built in to this package, so you don't need to add that as an extra dependency. If you want you can remove any existing dependencies on it your own project.

You can then import the IrmaWebGlue class like so:

import IrmaWebGlue from "irma-web-glue";

Usage

See docs/index.html for a complete example. This section explains how the different parts go together.

Just like irmajs we need an IRMA server and a request:

// The usual configuration for irmajs
const server = "http://localhost:8088";
const request = {
  type: 'disclosing',
  content: [{
      label:        'Over 18',
      attributes: [ 'irma-demo.MijnOverheid.ageLower.over18' ]
  }]
};

We instantiate the IrmaWebGlue class, supplying a DOM element to render to:

const irmaForm = document.getElementById('irma-web-form');
const glue     = new IrmaWebGlue(irmaForm);

Finally, we call startFlow on this object with the server and the request that we wish to have fulfilled. This returns a Promise:

glue.startFlow(server, request)
    .then((result) => {
      alert("Successful disclosure! 🎉");
      console.log(result);
    })
    .catch((state) => {
      alert("Disclosure failed in state '" + state + "' 🤨")
    });

To prevent flickering, it helps if the rendered-to element has already been pre-loaded with the right markup. For irma-web-frontend this is:

<section class="irma-web-form" id="irma-web-form">
  <header class="header">
    <p>Inloggen met <i class="irma-web-logo">IRMA</i></p>
  </header>
  <section class="content">
    <section class="centered">
      <!-- State: Uninitialized -->
      <div class="irma-web-loading-animation">
        <i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i>
      </div>
      <p>Eén moment alsjeblieft</p>
    </section>
  </section>
</section>

Using NutsAuth as back-end

If you wish to use this package for authenticating a user against a Nuts node, the moving parts are exactly the same as above, but you have to tell IrmaWebGlue to use the NutsAuth back-end:

const glue = new IrmaWebGlue(irmaForm, {
  backend: IrmaWebGlue.backends.NutsAuth
});

Then, you supply a Nuts node URL and a Nuts contract instead of an IRMA request:

// Point to a Nuts endpoint
const server = 'http://localhost:21323';

// Request in Nuts-form
const request = {
  type: "BehandelaarLogin",
  language: "NL",
  version: "v1"
};

And you feed that to the startFlow method of your IrmaWebGlue instance as explained above.

Please note that NutsAuth doesn't support mobile flows (yet) and will always show a QR code to scan, even on mobile.

Customizing

You can override some behaviour, most irmajs options and all the strings used in the front-end (for example to implement translations). See src/irma-web-glue.js, src/frontends/irma-web.js and src/backends/irmajs.js for all options. An example:

const options = {
  frontEndOptions: {
    showHelper: true,
    translations: {
      helper: 'Hello world 🌍'
    }
  }
};

let glue = new IrmaWebGlue(irmaForm, options);

This could do with a good manual or reference. If you feel like writing one, let us know 😉

Contributing

Compiling locally

Requires a working git and npm on your machine.

# Clone the project
$ git clone git@github.com:nuts-foundation/irma-web-glue.git

# Install dependencies
$ cd irma-web-glue
$ npm install

# Run the dev server
$ npm run serve

You should now have the example running on http://localhost:8080.

For this example you need a working IRMA server.

Any change you make to the javascript will trigger a rebuild of the project and automatically refresh in the browser.

Making PRs

Feel free to make pull requests on this repository. If you do, please sign off your commits. We sign off commits to indicate that we, as authors, are okay with releasing this software under the license in the LICENSE file.

$ git commit --signoff -m "Made some awesome changes"

FAQs

Package last updated on 01 Nov 2019

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc