SingPass Login API

[dexboi]

Came across this the other day:
https://www.ndi-api.gov.sg/library/sg-login/introduction

Is it possible to implement SingPass QR login on WordPress? Anyone attempted the api?

 

[davidktw]

Came across this the other day:
https://www.ndi-api.gov.sg/library/sg-login/introduction

Is it possible to implement SingPass QR login on WordPress? Anyone attempted the api?

Of course you can *implement* SingPass QR login on any site, just don’t expect it to be a drop-in plug-in.

 

[dexboi]

ok, thanks David. i think i ma going to apply for the api onboarding and see what comes back. Most likely too overwhelming for me to integrate.

 

[davidktw]

ok, thanks David. i think i ma going to apply for the api onboarding and see what comes back. Most likely too overwhelming for me to integrate.

If it is your own site from scratch where you take care of the entire login flow, it will be easier to integrate. Since you are using WP and WP has its own login flow that you need to augment, you will need to understand how WP authenticate and how you can intercept or bypass the original login flow with an external IDP.

I have not done SingPass QR myself, but I have inspected the network behaviour of the existing sites that have integrated. You can activate the developer console and observe what happens when you login with your own SingPass and get an idea what is going on at the network side of things.

If you have done OAUTH/OIDC and JWT, most of the complexity is around there. Some effort required to make sure the signing/encryption/decryption is done properly.

They have a staging environment for you to trial all you like, and the documentation seems pretty detail, so just give it your best shot

 

[GoodBetterBest]

Can individual integrated with Singpass API for learning purpose ? Own program.

 

[davidktw]

Can individual integrated with Singpass API for learning purpose ? Own program.

https://www.singpass.gov.sg/main/contact/

Get it from the horse mouth.

 

[davidktw]

https://www.singpass.gov.sg/main/contact/

Get it from the horse mouth.

I can do better. Just remembered this
https://github.com/opengovsg/mockpass

The latest approach to Singpass integration is via JWKS. They no longer recommend using certificates. It is also more cost effective and realistic.

 

[X66]

Thanks for this. I was looking for a SingPass/MyInfo implementation for React/Next.js hosted on AWS EC2. Is there any YouTube video with an explanation? Or do you know if GovTech does organise training for aspiration developers to implement SingPass/MyInfo?

I am a self-taught MERN stack developer. I implemented the JWS login and refresh token for my CRA app but need to change it to React & Next.js. I want to add SingPass/MyInfo capabilities, but the online info is limited.

 

[davidktw]

Thanks for this. I was looking for a SingPass/MyInfo implementation for React/Next.js hosted on AWS EC2. Is there any YouTube video with an explanation? Or do you know if GovTech does organise training for aspiration developers to implement SingPass/MyInfo?

I am a self-taught MERN stack developer. I implemented the JWS login and refresh token for my CRA app but need to change it to React & Next.js. I want to add SingPass/MyInfo capabilities, but the online info is limited.

Sign up with them to integrate with them and you can enquire all you like. Singpass&Myinfo is not like facebook or some private commercial API. They are a tad more stringent because you are getting individual national information.

I am sure if you go thru the formal channel of signing up with them and get the approval, you should be able to get the help you need and their documents are online or other documents offline

In any case, they are not using some new technology, just basic stuffs like Oauth/OpenID/JWT/JWKS/RESTFUL API/JSON/HTTP/X.509 etc…

All these are agnostic to which server side or frontend technology.