node-my-info-sg

node-my-info-sg 🇸🇬

Small wrapper around Singapore MyInfo V3 API for node JS. Wraps the scary-scary 😱 security logic into easy to use APIs

Lightly refactored from the excellent official example 🎉

Usage

• Initialise MyInfoClient

  const MyInfoClient = require('node-my-info-sg');
  
  const myInfoClient = new MyInfoClient({
    // MyInfo API base URL (sandbox/test/production)
    // https://www.ndi-api.gov.sg/assets/lib/trusted-data/myinfo/specs/myinfo-kyc-v3.0.1.yaml.html#section/Environments/Available-Environments
    baseUrl: 'https://sandbox.api.myinfo.gov.sg',
    
    // Api auth level (L0 for sandbox; Otherwise L2)
    authLevel: 'L0',
    
    // Public key from MyInfo Consent Platform given to you during onboarding for RSA digital signature
    publicCertContent: './ssl/stg-auth-signing-public.pem',
    
    // Your private key for RSA digital signature
    privateKeyContent: './ssl/stg-demoapp-client-privatekey-2018.pem',
    
    // Your client_id provided to you during onboarding
    clientId: 'STG2-MYINFO-SELF-TEST',
    
    // Your client_secret provided to you during onboarding
    clientSecret: '44d953c796cccebcec9bdc826852857ab412fbe2',
    
    // Redirect URL for your web application
    // https://www.ndi-api.gov.sg/library/trusted-data/myinfo/implementation-technical-requirements (Callback URLs)
    redirectUrl: 'http://localhost:3001/callback',
  });
  

• Generate the OAuth2 url

  var authoriseUrl = myInfoClient.getAuthoriseUrl(purpose, attributes);
  // Then pass this to the frontend, and redirect them 
  // (or open it on a webview for your mobile app)
  

• Get the person object

  myInfoClient.getToken(code) // Exchange authorisation code with usable access token
  .then((accessToken) => myInfoClient.getPerson(accessToken, _attributes)) // Get the person object
  .then((personData) => {
    console.log("Person Data:");
    console.log(JSON.stringify(personData))
  });
  

Example

In the example directory, run:

yarn install
./start.sh

Future Improvement

• Add unit tests and sensible linting rules
• Pass this repository to the cool government guy, so they can maintain it