SOAP signature wrappers

The SOAP signature wrapper auth-sdk full-sdk maps all commands defined in the OneSpan Authentication Server signature WSDL file in a class called SignatureBean.

For the signature object, the IdentikeyResponse class is extended to a SignatureResponse class. For a list of different methods defined by this class, see Overview of SOAP wrappers.

Java code samples: Standard signature

Below are code samples that need to be included in the webpages where the OneSpan Authentication Server standard signature functionality is to be integrated.

<%@ page import="com.vasco.identikey.model.Signature" %>
<%@ page import="com.vasco.identikey.controller.IdentikeyError" %>
<%@ page import="com.vasco.identikey.controller.signature.SignatureCommandResponse" %>
<%@ page import="org.w3._2001.xmlschema.UnsignedInt" %>

<!-- Signature details have been provided, now perform the request -->
<%
    String userID = request.getParameter("SIGNFLD_USERID");
    String domain = request.getParameter("SIGNFLD_DOMAIN");
    String signature = request.getParameter("SIGNFLD_SIGNATURE");
    Boolean rcc = Boolean.valueOf("on".equals(request.getParameter("SIGNFLD_REQUEST_CONFIRM_CODE")));
    java.util.List<String> fields = new java.util.ArrayList();
    fields.add(request.getParameter("SIGNFLD_DATA_FIELD_1"));
    fields.add(request.getParameter("SIGNFLD_DATA_FIELD_2"));
    fields.add(request.getParameter("SIGNFLD_DATA_FIELD_3"));
    fields.add(request.getParameter("SIGNFLD_DATA_FIELD_4"));
    fields.add(request.getParameter("SIGNFLD_DATA_FIELD_5"));
    fields.add(request.getParameter("SIGNFLD_DATA_FIELD_6"));
    fields.add(request.getParameter("SIGNFLD_DATA_FIELD_7"));
    fields.add(request.getParameter("SIGNFLD_DATA_FIELD_8"));

    java.text.SimpleDateFormat format = new java.text.SimpleDateFormat("dd/MM/yyyy HH:mm:ss");
    java.util.Date deferredTime = null;
    try {
        String s = request.getParameter("SIGNFLD_DEFERRED_DATETIME");
        if (s != null && !"".equals(s))
            deferredTime = format.parse(s);
        } catch(Exception e) {}

    UnsignedInt deferredEvent = null;
    try {
        deferredEvent = new UnsignedInt(Integer.parseInt(request.getParameter("SIGNFLD_DEFERRED_EVENT_VALUE")));
    } catch(Exception e) {}

    Signature.RequestConfirmationCode reqConfCode = rcc ? Signature.RequestConfirmationCode.Required : Signature.RequestConfirmationCode.Optional;

    // Execute the command
    SignatureCommandResponse results = signatureBean.authSignature(domain, userID, signature, fields, deferredTime, deferredEvent, reqConfCode);
    if (results.getReturnCode() == 0) {
        // Success
    }
%>

Java code samples: Secure channel signature

The Secure Channel signature consists of two steps:

Getting signing request
Authenticate signature

Below are code samples that need to be included in the webpages where the OneSpan Authentication Server Secure Channel signature functionality is to be integrated.

To use Secure Channel signature, add a client component (Signature Secure Channel Sample Client) with the IDENTIKEY Signature Validation with Secure Channel policy and configure the SDK as described here to use this component for Secure Channel signature.

To use Secure Channel signature, the following code element must be set in the controller.properties file:

component.type.signature.secure_channel = Signature Secure Channel Sample Client

Code sample: Getting signing request

<%@ page import="com.vasco.identikey.model.Signature" %>
<%@ page import="com.vasco.identikey.controller.IdentikeyError" %>
<%@ page import="com.vasco.identikey.controller.signature.SignatureCommandResponse" %>
<jsp:useBean id="signatureBean" class="com.vasco.identikey.controller.signature.SignatureBean" scope="session" />

<!-- Signature details have been provided, now perform the request -->
<%
    String userID = request.getParameter("SIGNFLD_USERID");
    String domain = request.getParameter("SIGNFLD_DOMAIN");
    String serialNo = request.getParameter("SIGNFLD_SERIAL_NO");
    String requestBody = request.getParameter("SIGNFLD_REQUEST_BODY");
    String transactionTitle = request.getParameter("SIGNFLD_TRANSACTION_TITLE");

    java.util.LinkedHashMap<String, String> dataFields = new java.util.LinkedHashMap();
    dataFields.put(request.getParameter("SIGNFLD_DATA_FIELD_KEY1"), request.getParameter("SIGNFLD_DATA_FIELD_VAL1"));

    if (request.getParameter("SIGNFLD_DATA_FIELD_KEY2") != null && request.getParameter("SIGNFLD_DATA_FIELD_VAL2") != null) {
        dataFields.put(request.getParameter("SIGNFLD_DATA_FIELD_KEY2"), request.getParameter("SIGNFLD_DATA_FIELD_VAL2"));
    }
    if (request.getParameter("SIGNFLD_DATA_FIELD_KEY3") != null && request.getParameter("SIGNFLD_DATA_FIELD_VAL3") != null) {
        dataFields.put(request.getParameter("SIGNFLD_DATA_FIELD_KEY3"), request.getParameter("SIGNFLD_DATA_FIELD_VAL3"));
    }
    if (request.getParameter("SIGNFLD_DATA_FIELD_KEY4") != null && request.getParameter("SIGNFLD_DATA_FIELD_VAL4") != null) {
        dataFields.put(request.getParameter("SIGNFLD_DATA_FIELD_KEY4"), request.getParameter("SIGNFLD_DATA_FIELD_VAL4"));
    }

    // Execute the genRequest command
    SignatureCommandResponse results = signatureBean.genRequest(userID, domain, serialNo, requestBody, transactionTitle, dataFields);

    if (results.getReturnCode() == 0) {
        Signature sig = results.getResults();
        userID = sig.getUserID();
        domain = sig.getDomain();
        String requestKey = sig.getRequestKey();
    }
%>

<!-- generate cronto image from RequestMessage -->
<img id="crontoImage" class="image-centered" alt="Request Message" title="Request Message" src="data:image/png;base64,<%=sig.getRequestMessageImage(6)%>"/>

Code sample: Authenticating signature