Dependencies

If you plan on using the built in EGS module to generate keys, and CSR. The EGS module in the package is dependent on OpenSSL being installed in the system it's running on. It's being used to generate an ECDSA key pair using the secp256k1 curve. also to generate and sign a CSR.

All other parts of the package will work fine without OpenSSL. (meaning it supports react-native and other frameworks)

Supports

All tha main futures required to on-board a new EGS. Create, sign, and report a simplified tax invoice are currently supported.

• EGS (E-Invoice Generation System).
  • Creation/on-boarding (Compliance and Production x.509 CSIDs).
  • Cryptographic stamps generation.
• Simplified Tax Invoice.
  • Creation.
  • Signing.
  • Compliance checking.
  • Reporting.

Installation

npm install zatca-xml-js

Usage

View full example at examples

import {
    EGS, EGSUnitInfo,
    ZATCASimplifiedTaxInvoice,
} from "zatca-xml-js";


// New Invoice and EGS Unit
const invoice: ZATCASimplifiedTaxInvoice = {/*...*/};
const egsunit: EGSUnitInfo = {/*...*/};

// Init EGS unit
const egs = new EGS(egsunit);
// New Keys & CSR for the EGS
await egs.generateNewKeysAndCSR(false, "solution_name");
// Issue a new compliance cert for the EGS
const compliance_rid = await egs.issueComplianceCertificate("123345");
// Sign invoice
const {signed_invoice_string, invoice_hash} = egs.signInvoice(invoice);
// Check invoice compliance
await egs.checkInvoiceCompliance(signed_invoice_string, invoice_hash);
// Issue production certificate
await egs.issueProductionCertificate(compliance_rid);
// Report invoice
await egs.reportInvoice(signed_invoice_string, invoice_hash);

Implementation

• General implementation (More details)
  • KSA Rules & Business
  • UBL 2.1 Spec
  • ISO EN16931
  • UN/CEFACT Code List 1001
  • ISO 3166
  • ISO 4217:2015
  • UN/CEFACT Code List 5305, D.16B
• Security standards (More details)
  • NCA National Cryptographic Standards (NCS - 1 : 2020)
  • NCDC Digital Signing Policy (Version 1.1: 2020)
  • ETSI EN 319 102-1
  • ETSI EN 319 132-1
  • ETSI EN 319 142-1
  • W3C XML-Signature Syntax and Processing
  • ETSI EN 319 122-1
  • IETF RFC 5035 (2007)
  • RFC 5280
  • ISO 32000-1
  • IETF RFC 5652 (2009)
  • RFP6749
  • NIST SP 56A

Notice of Non-Affiliation and Disclaimer

zatca-xml-js is not affiliated, associated, authorized, endorsed by, or in any way officially connected with ZATCA (Zakat, Tax and Customs Authority), or any of its subsidiaries or its affiliates. The official ZATCA website can be found at https://zatca.gov.sa.

Contribution

All contributions are appreciated.

Roadmap

• CSIDs renewal, revoking.
• Populating templates using a template engine instead of replace
• Getting ZATCA to hopefully minify the XMLs before hashing ?