Brukerstyrt signering

<bpmn:task id="SigningTask" name="Signering">
  <bpmn:extensionElements>
    <altinn:taskExtension>
      <altinn:taskType>signing</altinn:taskType>
      <altinn:actions>
      <altinn:action>sign</altinn:action>
      <altinn:action>reject</altinn:action>
      </altinn:actions>
      <altinn:signatureConfig>
        <!-- De faktiske dataene som skal signeres. Kan være vedlegg, skjemadata i xml, eller PDF fra tidligere steg. -->
        <altinn:dataTypesToSign>
          <altinn:dataType>ref-data-as-pdf</altinn:dataType>
        </altinn:dataTypesToSign>

        <!-- Signature-datatypen brukes for å lagre signaturene. -->
        <altinn:signatureDataType>signatures</altinn:signatureDataType>

        <!-- SigneeStates-datatypen brukes for å lagre de som skal signere og tilhørende informasjon. -->
        <altinn:signeeStatesDataTypeId>signeeState</altinn:signeeStatesDataTypeId>

        <!-- Denne ID-en angir hvilken implementasjon av C# interface-et -->
        <!-- ISigneeProvider som skal benyttes for dette signeringssteget. -->
        <altinn:signeeProviderId>founders</altinn:signeeProviderId>

        <!-- Her oppgis en meldingsressurs, som brukes for å si fra til de som skal signere -->
        <!-- om at de må inn og signere, samt signeringskvittering. Påkrevd. -->
        <altinn:correspondenceResource>app-correspondence-resource</altinn:correspondenceResource>

        <!-- Dersom man ønsker at det skal bli generert en PDF av signeringssteget -->
        <!-- så kan man oppgi en datatype her av type application/pdf. -->
        <altinn:signingPdfDataType>signing-step-pdf</altinn:signingPdfDataType> <!-- optional -->

        <!-- Vi har laget en standard validator som kan slås på her. -->
        <!-- Den validerer at påkrevd antall signaturer (minCount på signatur-datatypen) er oppfylt. -->
        <!-- Om denne ikke slås på, bør man skrive egen validering av signaturer. -->
        <altinn:runDefaultValidator>true</altinn:runDefaultValidator>
      </altinn:signatureConfig>
    </altinn:taskExtension>
  </bpmn:extensionElements>
  <bpmn:incoming>SequenceFlow_1oot28q</bpmn:incoming>
  <bpmn:outgoing>SequenceFlow_1if1sh9</bpmn:outgoing>
</bpmn:task>

<altinn:signatureConfig>
    ...
  <altinn:correspondenceResource env="Development">app-correspondence-resource-1</altinn:correspondenceResource>
  <altinn:correspondenceResource env="Staging">app-correspondence-resource-2</altinn:correspondenceResource>
  <altinn:correspondenceResource env="Production">app-correspondence-resource</altinn:correspondenceResource>
    ...
</altinn:signatureConfig>

{
  "id": "signatures",
  "allowedContentTypes": [
    "application/json"
  ],
  "allowedContributors": [
    "app:owned"
  ],
  "minCount": 1,
  "actionRequiredToRead": "signature-access",
  "actionRequiredToWrite": "signature-access"
}

{
  "id": "signeeState",
  "allowedContentTypes": [
    "application/json"
  ],
  "allowedContributors": [
    "app:owned"
  ],
  "maxCount": 1,
  "minCount": 1,
  "actionRequiredToRead": "signature-access",
  "actionRequiredToWrite": "signature-access"
}

<xacml:Rule RuleId="urn:altinn:org:ttd:signering-brukerstyrt:ruleid:7" Effect="Permit">
  <xacml:Description>
    A rule defining all instance delegation rights the App itself is allowed to perform for instances of the app ttd/signering-brukerstyrt.
    In this example the app can delegate the Read and Sign actions for task SigningTask.
  </xacml:Description>
  <xacml:Target>
    <xacml:AnyOf>
      <xacml:AllOf>
        <xacml:Match MatchId="urn:oasis:names:tc:xacml:3.0:function:string-equal-ignore-case">
          <xacml:AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">app_ttd_signering-brukerstyrt</xacml:AttributeValue>
          <xacml:AttributeDesignator AttributeId="urn:altinn:resource:delegation" Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false" />
        </xacml:Match>
      </xacml:AllOf>
    </xacml:AnyOf>
    <xacml:AnyOf>
      <xacml:AllOf>
        <xacml:Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
          <xacml:AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">ttd</xacml:AttributeValue>
          <xacml:AttributeDesignator AttributeId="urn:altinn:org" Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false" />
        </xacml:Match>
        <xacml:Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
          <xacml:AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">signering-brukerstyrt</xacml:AttributeValue>
          <xacml:AttributeDesignator AttributeId="urn:altinn:app" Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false" />
        </xacml:Match>
        <xacml:Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
          <xacml:AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">SigningTask</xacml:AttributeValue>
          <xacml:AttributeDesignator AttributeId="urn:altinn:task" Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false" />
        </xacml:Match>
      </xacml:AllOf>
    </xacml:AnyOf>
    <xacml:AnyOf>
      <xacml:AllOf>
        <xacml:Match MatchId="urn:oasis:names:tc:xacml:3.0:function:string-equal-ignore-case">
          <xacml:AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">read</xacml:AttributeValue>
          <xacml:AttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id" Category="urn:oasis:names:tc:xacml:3.0:attribute-category:action" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false" />
        </xacml:Match>
      </xacml:AllOf>
      <xacml:AllOf>
        <xacml:Match MatchId="urn:oasis:names:tc:xacml:3.0:function:string-equal-ignore-case">
          <xacml:AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">sign</xacml:AttributeValue>
          <xacml:AttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id" Category="urn:oasis:names:tc:xacml:3.0:attribute-category:action" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false" />
        </xacml:Match>
      </xacml:AllOf>
    </xacml:AnyOf>
  </xacml:Target>
</xacml:Rule>

#nullable enable
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using Altinn.App.Core.Features;
using Altinn.App.Core.Features.Signing;
using Altinn.App.Models.Skjemadata;
using Altinn.Platform.Storage.Interface.Models;

namespace Altinn.App.logic;

public class FounderSigneesProvider : ISigneeProvider
{
  public string Id { get; init; } = "founders";

  public async Task<SigneeProviderResult> GetSignees(GetSigneesParameters parameters)
  {
    DataElement dataElement = parameters.InstanceDataAccessor
      .GetDataElementsForType("Skjemadata")
      .Single();

    var formData = await parameters.InstanceDataAccessor.GetFormData<Skjemadata>(dataElement);

    List<ProvidedSignee> providedSignees = [];
    foreach (StifterPerson stifterPerson in formData.StifterPerson)
    {
      var personSignee = new ProvidedPerson
      {
        FullName = string.Join(
          " ",
          [stifterPerson.Fornavn, stifterPerson.Mellomnavn, stifterPerson.Etternavn]
        ),
        SocialSecurityNumber = stifterPerson.Foedselsnummer?.ToString() ?? string.Empty,

        // CommunicationConfig added here is optional, shown and described in section 6
      };

      providedSignees.Add(personSignee);
    }

    foreach (StifterVirksomhet stifterVirksomhet in formData.StifterVirksomhet)
    {
      var organisationSignee = new ProvidedOrganization
      {
        Name = stifterVirksomhet.Navn,
        OrganizationNumber =
          stifterVirksomhet.Organisasjonsnummer?.ToString() ?? string.Empty,

        // CommunicationConfig added here is optional, shown and described in section 6
      };

      providedSignees.Add(organisationSignee);
    }

    return new SigneeProviderResult { Signees = providedSignees };
  }
}

{
  "id": "signing.correspondence_title_common",
  "value": "Task - Sign founding documents"
},
{
  "id": "signing.correspondence_summary_stifter_person",
  "value": "You have been added as a signee."
},
{
  "id": "signing.correspondence_summary_stifter_organisation",
  "value": "The organisation has been added as a signee."
},
{
  "id": "signing.correspondence_body_stifter_person",
  "value": "You have been added as a signee for founding documents. <br /> $instanceUrl$ <br /><br />"
},
{
  "id": "signing.correspondence_body_stifter_organisation",
  "value": "Your organisation has been added as a signee for founding documents. <br /> $instanceUrl$ <br /><br />"
},
{
  "id": "signing.notification_content",
  "value": "Hello $correspondenceRecipientName$,\n\nYou have received founding documents for signing in Altinn. Log in to Altinn to sign the documents.\n\nBest regards,\nBrønnøysund Register Centre"
},
{
  "id": "signing.email_subject",
  "value": "Founding documents received for signing in Altinn. Go to Altinn inbox to sign."
},

{
  "id": "signing.correspondence_receipt_title",
  "value": "Receipt: Signing of founding documents"
},
{
  "id": "signing.correspondence_receipt_summary",
  "value": "You have signed the founding documents"
},
{
  "id": "signing.correspondence_receipt_body",
  "value": "The documents you have signed are attached. These can be downloaded if desired. <br /><br />If you have any questions, contact the Brønnøysund Register Centre at phone 75 00 75 00."
}

// Minimal: notify by SMS and email using the default texts and the
// registered contact information of the signee.
var minimalSignee = new ProvidedPerson
{
    FullName = fullName,
    SocialSecurityNumber = socialSecurityNumber,
    CommunicationConfig = new CommunicationConfig
    {
        NotificationChoice = NotificationChoice.SmsAndEmail,
    },
};

// Full override of texts and contact information.
var personSignee = new ProvidedPerson
{
    FullName = fullName,
    SocialSecurityNumber = socialSecurityNumber,
    CommunicationConfig = new CommunicationConfig
    {
        InboxMessage = new InboxMessage
        {
            TitleTextResourceKey = "signing.correspondence_title_common",
            SummaryTextResourceKey = "signing.correspondence_summary_stifter_person",
            BodyTextResourceKey = "signing.correspondence_body_stifter_person",
        },
        Notification = new Notification
        {
            Email = new Email
            {
                EmailAddress = stifterPerson.Epost,
                SubjectTextResourceKey = "signing.email_subject",
                BodyTextResourceKey = "signing.notification_content",
            },
            Sms = new Sms
            {
                MobileNumber = stifterPerson.Mobiltelefon,
                BodyTextResourceKey = "signing.notification_content",
            },
        },
        // Optional: send a reminder if the signee has not acted. Uses the default reminder texts.
        ReminderNotification = new Notification(),
        NotificationChoice = NotificationChoice.EmailPreferred,
    },
};