In order to verify your ID with the app your phone must have NFC support to scan the passport/id, and on the screen where you do the verification it says: if your phone doesnt have support find a friend with a phone that supports it, I kid you not.. edit, found it in the code: https://github.com/MinBZK/woo-besluit-broncode-digid-app/blo...
Source code for Dutch DigiD app released under Dutch Open Government Act
41–50 of 161 posts
Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#42I find the DigiD app to be one of the most annoying implementations of 2FA out there. You have to unlock the app with a pin code, then enter an app-generated code on the site, then scan a QR with the app, and then grant permission to login to that site. If you compare that to 2FA for Office 365 for example, where you just have a push notification where you press a button to allow, then you can't help but think that s…
I do appreciate that they keep is so secure (or perhaps I should say, not logged in by default). It works well in general imho.
Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#43Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#44I find the DigiD app to be one of the most annoying implementations of 2FA out there. You have to unlock the app with a pin code, then enter an app-generated code on the site, then scan a QR with the app, and then grant permission to login to that site. If you compare that to 2FA for Office 365 for example, where you just have a push notification where you press a button to allow, then you can't help but think that s…
On desktop, you use pin, type code, then scan. I find the flow quite smooth.
Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#45Italy does the same: https://github.com/pagopa/io-app This is the official government app (you can get benefits, pay taxes, etc...), downloaded by 30+ million citizens, stack is React Native + Typescript
Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#46I find the DigiD app to be one of the most annoying implementations of 2FA out there. You have to unlock the app with a pin code, then enter an app-generated code on the site, then scan a QR with the app, and then grant permission to login to that site. If you compare that to 2FA for Office 365 for example, where you just have a push notification where you press a button to allow, then you can't help but think that s…
Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#47In order to verify your ID with the app your phone must have NFC support to scan the passport/id, and on the screen where you do the verification it says: if your phone doesnt have support find a friend with a phone that supports it, I kid you not.. edit, found it in the code: https://github.com/MinBZK/woo-besluit-broncode-digid-app/blo...
Certainly better than in my country where you need to have a windows machine w/ a card reader to use the certificate from the ID card to login.
Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#48Italy does the same: https://github.com/pagopa/io-app This is the official government app (you can get benefits, pay taxes, etc...), downloaded by 30+ million citizens, stack is React Native + Typescript
Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#49Question: can you modify, compile, and run that code and still have it work for the same uses?
It would seem so: https://github.com/MinBZK/woo-besluit-broncode-digid-app/blo... The interesting aspect of this is that it can be studied to write clients for platforms that are not officially supported -- currently, only Android and iOS are supported, but it'd be great to see a Linux client too. It's a big shame that history has been rewritten and heavily redacted though. Version control history often has a lot of…
Re: Source code for Dutch DigiD app released under Dutch Open Government Act
#50Sounds like it was not voluntary. Also not sure what kind of transparency is expected here, since there is no way to find if the source code published is the same used to build the app. Maybe decompilation is the way to go...