API Scope
eID provides two separate API sets, each of it serving a certain purpose and covering a specific scope:
Kosovo Wallet API: for integrating strong authentication with Kosovo WalletSigning API: for integrating digital signature/seal and time stamping features
Strong authentication
Strong authentication is a very useful and powerful feature provided by eID. This feature will allow your users to login to your systems using their national eID and their Kosovo Wallet.
Be aware that we cannot authorise your users inside your systems. We can only authenticate them. After successful passing the login flow with Kosovo Wallet we will return to you the user information that you may need for further authorisation inside your system, according to your authorisation policies.
The most important advantage of using strong authentication with Kosovo Wallet is that the user does not need username and password, thus making the authentication process very simple and secure. Combining this with the fact that the user needs to use the Kosovo Wallet from his device (which is protected by user’s biometrics) will make this authentication flow as the most simple and secure way to login to any application.
For implementing the strong authentication with Kosovo Wallet in the right way, we made available some resources that you will find next. First, we advise you to download the detailed presentation of the integration process:
Second, we invite you to check out code examples for the most frequent tech stacks used in software development today:
Sign/Stamp
This API allows you to implement the specific signature (or stamping, or time stamping) flow in your app. This flow is illustrated next (click to enlarge picture).
Please observe that the correct implementation of the signature flow requires to modify a little bit your app. We provide only the full API set for signing, we do not store any raw or signed document. For this reason, you may need to implement a storage feature inside your app. The storage feature will have the role to allow the user to upload raw documents and to receive from us the signed documents, further allowing the user to download them (if needed).
For implementing the signing (or stamping, or time stamping) flow in the right way, we made available some resources that you will find next. These resources are the detailed API docs and the POSTMAN environments and collections to explore the API. API docs is valid for both test and production environments, while the POSTMAN collections are given individually for each environment.
On this page
