Connect to a signing provider
Calls info, auth/login, credentials/list and credentials/info
Calls info, auth/login, credentials/list and credentials/info
A credential is a key in the provider's HSM plus its certificate
Runs oauth2/authorize → oauth2/token → credentials/create.
You sign in and choose the signing PIN on the provider's page; this app never sees it.
Hashed here; only a 32-byte SHA-256 hash goes to the provider
Calls credentials/getChallenge, credentials/authorize and signatures/signHash
We'll email you a 6-digit code.
PAdES signature embedded and validated