node-my-info-sg

node-my-info-sg 🇸🇬

Small wrapper around Singapore MyInfo V3 API for node JS. Wraps the scary-scary 😱 security logic into easy to use APIs

Lightly refactored from the excellent official example 🎉

Usage

1. Initialise MyInfoClient

   const MyInfoClient = require('node-my-info-sg');
   
   const myInfoClient = new MyInfoClient({
     // MyInfo API base URL (sandbox/test/production)
     // https://www.ndi-api.gov.sg/assets/lib/trusted-data/myinfo/specs/myinfo-kyc-v3.0.1.yaml.html#section/Environments/Available-Environments
     baseUrl: 'https://sandbox.api.myinfo.gov.sg',
     
     // Api auth level (L0 for sandbox; Otherwise L2)
     authLevel: 'L0',
     
     // Public key from MyInfo Consent Platform given to you during onboarding for RSA digital signature
     publicCertPath: './ssl/stg-auth-signing-public.pem',
     
     // Your private key for RSA digital signature
     privateKeyPath: './ssl/stg-demoapp-client-privatekey-2018.pem',
     
     // Your client_id provided to you during onboarding
     clientId: 'STG2-MYINFO-SELF-TEST',
     
     // Your client_secret provided to you during onboarding
     clientSecret: '44d953c796cccebcec9bdc826852857ab412fbe2',
     
     // Redirect URL for your web application
     // https://www.ndi-api.gov.sg/library/trusted-data/myinfo/implementation-technical-requirements (Callback URLs)
     redirectUrl: 'http://localhost:3001/callback',
   });
   

2. Generate the OAuth2 url

   var { authoriseUrl, state } = myInfoClient.getAuthoriseUrl(purpose, attributes);
   // Then you can pass authoriseUrl to your frontend app and redirect the user 
   // (or open authoriseUrl on a WebView on your mobile apps)
   //
   // Note: You might want to store authoriseUrl, attributes, and state to fulfill the transaction log requirements
   // https://www.ndi-api.gov.sg/library/trusted-data/myinfo/implementation-technical-requirements
   

3. Get the person object

   // Exchange authorisation code with usable access token
   myInfoClient.getToken(code)
   	// Get the person object
   	.then(({ accessToken }) => myInfoClient.getPerson(accessToken, _attributes)) 
   	// Now you can use the person object to pre-fill your form!
   	.then(({ person }) => console.log(JSON.stringify(person))); 
   

Example

In the example directory, run:

yarn install
./start.sh

Future Improvement

1. Add unit tests and sensible linting rules
2. Pass this repository to the cool government guy, so they can maintain it