Demo for FIRS

rahulpandita

Hi, we are preparing for the demo as an Access Point Provider. Could you please let us know the key aspects we need to showcase during the presentation, and if there are any specific APIs that should be demonstrated?

Ams

Hi @SysAdmin , i have same question. we're preparing for the demo as a system integrator.

SysAdmin

Dear @rahulpandita and @Ams,

We follow a decentralized integration model to enable Service Providers to innovate and build flexible solutions around the APIs provided. However, for the purpose of your demonstration, there are minimum capabilities you are expected to showcase in order to present your business model and target audience effectively.

For Access Point Providers (APP):
You are required to:

Onboard a taxpayer using your test entity.
Demonstrate connectivity with an ERP or accounting solution, depending on your business model.
Validate, sign, and exchange invoices created.
Perform a bidirectional role by being able to receive invoices on behalf of your customer (test entity).
Acknowledge, download, decrypt, and extend the received invoice to the customer.
Report paid transactions into the fiscalization engine

For System Integrators (SI):
You are required to:

Demonstrate the ability to generate an IRN and QR Code that can be successfully validated.
Ensure that the payload structure strictly conforms to the published schema.
Set up mechanisms for data interoperability (inflow & outflow)

Please refer to the API documentation page for the relevant endpoints and technical specifications needed to achieve the above.

Ams

@SysAdmin ,

I'm a system integrator, we're able to generate the QRCode, but we're currently having issues validating the QRCode via the MBS360 app. We used our technologies for encryption process as highlighted on the documentation. Is there a specification to the type of encryption, or hashing algorithm to be used. We're not too clear on the issue here. Subsequently , we've tried exploring the firs npm package provided, we're unable to use the node.js on our system as well due to compatibility issue. Is there like an endpoint we're we can provide the irn , certificate and public key as parameters and we get the hashed base64 string to be used for the QRcode .

Thank you

SysAdmin

Dear Ams,

If the MBS360 app is unable to validate your QR Code, it indicates that the QR Code was not generated in compliance with the required cryptographic standards.

Kindly review your implementation process, particularly how your cryptography key was obtained and applied during the signing and generation process. Could you also confirm the source of your cryptography key?

Ams

We onboarded as a taxpayer, and was provided a button to download the cryptographic key. It contained the public key and certificate

SysAdmin

Ams You have sourced the right cryptographic. Please check the documentation again.

Also, please confirm that you included a timestamp in your IRN encryption.

Ams

@SysAdmin , Yes i included a timestamp in the IRN encyption

Ams

https://drive.google.com/file/d/1MhVubOKiu-3z6RAyMXZ7Hc9mNUvT9xqW/view?usp=sharing

https://drive.google.com/file/d/1acZAS7jA0cAmn6sdQv72ijXMJt2RRY2g/view?usp=sharing

i've also tried using the firs npm package on the documentation.. however i'm unable the access the decryption.js and generateQRCode.js files to perform the encryption and QRCode generate. Kindly find attached link

i'm guessing the package does not have browser friendly build

Ams

As a follow up question to better understand and debug on our end. Are we required to have validated and signed the invoice before we are able to scan the QRCode?

secondly, does the requirement for the encryption include that it must be asymmetric (RSA -OAES combo) or symmetric encryption can also be used?

SysAdmin

Hello Ams,

Please find our responses here:

As a follow up question to better understand and debug on our end. Are we required to have validated and signed the invoice before we are able to scan the QRCode? No

secondly, does the requirement for thae encryption include that it must be asymmetric (RSA -OAES combo) or symmetric encryption can also be used? Asymmetric

In addition, we inputted our IRN on the system integrator portal under the Test Integration ---> Generate QR Code. It generated an encrypted base 64 , as well as it displayed the QRCode on the portal. We tried to scan the QRCode and it failed to validate using the MB360. Please follow the steps outlined in the documentation to generate your QR Code successfully. Additionally, if you scroll to the final section of the documentation, you will find a sample QR Code that you can scan using the MBS360 app for reference and validation.

Ams

SysAdmin

Thank you for your response , this clear