Signature Gateway demo application

Demo application is provided to study the flows and integration of Signature Gateway. NB! This is not meant to be used in production!

Functionality:

• Authorization
• Container conversion to and from HASHCODE form
• Mobile-ID signing
• ID card signing (with Web eID in front end)
• Smart-ID signing
• Signature validation

How to set up

SiGa demo application is not a standalone system, it requires either the SiGa application to already be running on your machine or pointing the demo app towards sample APIs.

Preconditions:

• Java 17

Option 1: Running with SiGa locally

To build the docker image run the following command:

./mvnw spring-boot:build-image

Then, follow the Docker instructions at SiGa webapp to run both apps at the same time.

If everything was successful, open up the browser at https://siga-demo.localhost:9443/.

Option 2: Running with external APIs

1. Open up the application.properties file and change the following properties accordingly:

siga.api.uri=https://siga.localhost:8443/siga
siga.api.trustStore=file:/path/to/siga_server_truststore.p12
siga.api.trustStorePassword=changeit
siga.client.hmac.algorithm=HmacSHA256
siga.client.hmac.service-uuid=a7fd7728-a3ea-4975-bfab-f240a67e894f
siga.client.hmac.shared-signing-key=746573745365637265744b6579303031

Parameter	Description	Example
siga.api.uri	SIGA server URL (without slash symbol in the end)	https://siga.localhost:8443/siga
siga.api.trustStore	Location of the trustore containing servers certificate or CA (path without quotes symbol)	file:/path/to/siga_server_truststore.p12

2. Build this project

./mvnw clean install

3. Run compiled JAR (found in target folder)

java -jar siga-demo-application-X.X.X.jar

Now application is accessible at https://siga-demo.localhost:9443/.

SiGa demo configuration

Example application.properties file can be seen here. Common Spring Boot properties are described here.

Parameter	Mandatory	Description	Example
spring.servlet.multipart.max-file-size	N	Max file size.	20MB
spring.servlet.multipart.max-request-size	N	Max request size.	35MB

How to use

Before every signing the webapage needs to be reloaded and files uploaded.

With Docker setup, Signature Gateway is in TEST mode. Meaning it is possible to sign only with TEST ID-card, TEST Mobile-ID or TEST Smart-ID.

• TEST ID-cards can be ordered here.
• TEST Mobile-ID numbers can be found here.
• TEST Smart-ID numbers can be found here.