node-my-info-sg

node-my-info-sg 🇸🇬

Small wrapper around Singapore MyInfo V3 API for node JS. Wraps the scary-scary 😱 security logic into easy to use APIs

Lightly refactored from the excellent official example 🎉

Usage

1. Initialise MyInfoClient

   const MyInfoClient = require('node-my-info-sg');
   
   const myInfoClient = new MyInfoClient({
     // MyInfo API base URL (sandbox/test/production)
     // https://www.ndi-api.gov.sg/assets/lib/trusted-data/myinfo/specs/myinfo-kyc-v3.0.1.yaml.html#section/Environments/Available-Environments
     baseUrl: 'https://sandbox.api.myinfo.gov.sg',
     
     // Api auth level (L0 for sandbox; Otherwise L2)
     authLevel: 'L0',
     
     // Public key from MyInfo Consent Platform given to you during onboarding for RSA digital signature
     publicCertContent: './ssl/stg-auth-signing-public.pem',
     
     // Your private key for RSA digital signature
     privateKeyContent: './ssl/stg-demoapp-client-privatekey-2018.pem',
     
     // Your client_id provided to you during onboarding
     clientId: 'STG2-MYINFO-SELF-TEST',
     
     // Your client_secret provided to you during onboarding
     clientSecret: '44d953c796cccebcec9bdc826852857ab412fbe2',
     
     // Redirect URL for your web application
     // https://www.ndi-api.gov.sg/library/trusted-data/myinfo/implementation-technical-requirements (Callback URLs)
     redirectUrl: 'http://localhost:3001/callback',
   });
   

2. Generate the OAuth2 url

   var authoriseUrl = myInfoClient.getAuthoriseUrl(purpose, attributes);
   // Then pass this to the frontend, and redirect them 
   // (or open it on a webview for your mobile app)
   

3. Get the person object

   myInfoClient.getToken(code) // Exchange authorisation code with usable access token
   .then((accessToken) => myInfoClient.getPerson(accessToken, _attributes)) // Get the person object
   .then((personData) => {
     console.log("Person Data:");
     console.log(JSON.stringify(personData))
   });
   

Example

In the example directory, run:

yarn install
./start.sh

Future Improvement

1. Add unit tests and sensible linting rules
2. Pass this repository to the cool government guy, so they can maintain it