Civipass
| 开发者 | jbosnakis |
|---|---|
| 更新时间 | 2026年11月6日 23:00 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Civipass connects a WordPress site to the official user authentication service (OAuth 2.0) of the Greek General Secretariat for Information Systems (GSIS). People sign in with their TaxisNet credentials on the GSIS pages — the site never sees them — and come back signed in to an account linked to their tax number.
The GSIS offers this service to public sector bodies (ministries, municipalities, regions, universities, legal entities of public law, chambers and other bodies of the wider public sector). Each body applies through the Interoperability Centre's request application (EDA) and receives its own credentials. Civipass shows the exact return address to declare in that request.
Features
- "Sign in with TaxisNet" button on the login screen, as a shortcode (
[civipass_login]) and as a block. - Pilot (test.gsis.gr) and production (oauth2.gsis.gr) environments, each with its own credentials, and a button that checks them.
- Accounts are recognised by tax number. New accounts can be created on first sign-in (off by default), always with a role that cannot manage the site.
- People link their existing account from their profile. The tax number and names of a linked account are never edited by hand: they come from the GSIS at every sign-in, and the person can fetch them again with "Update details from TaxisNet" on their profile or with the
[civipass_refresh]shortcode. Only staff who edit the account can unlink it. - The GSIS does not give an e-mail address: new people enter one and confirm it by e-mail before it is saved.
- Signing out of the site also signs out of the GSIS, so a shared computer cannot reuse the session.
[civipass_field name="fullname"]shows the signed-in person their own details (afm_masked, firstname, lastname, fullname…).- Administrators see each linked account's tax number in the users list and can find an account by typing the 9-digit number in the search box; everyone else sees it masked.
- Bodies that the GSIS has granted the one-time-code variant of the service (oAuth2.0-OTP) enter its credentials and get a second button.
- Personal data export and erasure, and suggested privacy policy text.
- Nothing reaches the GSIS until a person presses the button. The TaxisNet password is typed only on the GSIS pages; the site never sees or stores it.
- Every sign-in carries a random, one-time
statethat is tied to the browser that started it (cookie) and expires after ten minutes, so a callback cannot be replayed, forged or forced on someone else. - The one-time code is exchanged for the person's details server to server, with certificate checks on, no redirects, a short timeout and a size limit. The answer is read with external entities and network access turned off.
- Accounts that can manage the site (administrators, editors and anyone with similar capabilities, also on multisite) cannot sign in with TaxisNet unless an administrator turns that on explicitly; they keep their password. New accounts never get such a role.
- The tax number and the GSIS client secrets are stored encrypted (libsodium). The key can be moved to wp-config.php, so a copy of the database alone reveals nothing. A keyed hash is used to find an account by tax number.
- User names are random, so the tax number never appears in author archives or other public addresses. Names that came from the GSIS cannot be changed by hand, through the profile screen, the REST API or
wp_update_user(). - Sign-in attempts and callbacks are rate-limited per address (per /64 for IPv6).
- Every form and action checks a nonce and the user's capabilities, and every value is sanitised on input and escaped on output.
- A test server can only be used on sites marked as local, development or staging (
WP_ENVIRONMENT_TYPE), so a forgotten setting can never send a live site's sign-ins elsewhere.
安装:
- Install and activate the plugin.
- Go to Settings → Civipass and copy the return address.
- Submit an OAuth2 Service request in the EDA (https://www.gsis.gr/dimosia-dioikisi/ked/EDA) with that address for the pilot and for production.
- When the request is approved, set a password for the pilot in the EDA and enter the EDA username and that password in Settings → Civipass. Press "Test the connection".
- Test the sign-in on the pilot; after the GSIS starts production, enter the production credentials and switch the environment to Production.
CIVIPASS_KEY line shown in Settings → Civipass into wp-config.php.屏幕截图:
常见问题:
Can a private company use it?
No. The GSIS gives this service only to bodies of the public and wider public sector. The plugin works only with credentials that the GSIS issued to your body.
Does the site see the TaxisNet password?
No. People type it only on the GSIS pages.
Which details does the site receive?
Tax number, first and last name, and for natural persons father's name, mother's name and year of birth. Civipass keeps the tax number (encrypted) and the first and last name; the rest only if you turn that on.
Can someone take over an administrator account with TaxisNet?
No. Accounts that can manage the site cannot sign in with TaxisNet unless an administrator turns that on, and a tax number can be linked to one account only.
Does our body have to log the sign-ins?
Yes. The ministerial decisions that grant the oAuth2.0 service (for example ΥΑ 36695/2026, Β΄ 6269, article 2) oblige every body to take and keep appropriate technical and organisational security measures, and as a minimum to record and monitor access and ensure traceability. They also allow the received details to be used only for the purpose stated in the decision. Civipass itself does not keep a log of sign-ins: the body has to cover this obligation another way, for example with an activity-log plugin or the server's access logs.
更新日志:
1.0.0
- First version.