Download the PHP package novadaemon/skyflow-php without Composer

Skyflow-PHP

Description

This PHP SDK is designed to help developers easily implement Skyflow into their php backend.

Table of Contents

• Features
• Installation
  • Requirements
  • Install
• Examples
  • Prerequisites
  • Create the vault
  • Create a Service Account
• Service Account Bearer Token Generation
• Vault API
  • Get records
  • Get record by ID
  • Insert records
  • Update record
  • Delete record
  • Bulk delete records
  • Detokenization
  • Tokenization
  • Execute SQL Query
  • Invoke Connection

Features

Authentication with a Skyflow Service Account and generation of a bearer token.

Vault API operations to insert, retrieve, update, delete and tokenize sensitive data.

Execute SQL queries into vault scheme.

Invoking connections to call downstream third party APIs without directly handling sensitive data.

Installation

Requirements

• Require PHP 8.1 or above

• You need to have installed Composer

  Install

  Type in your terminal:

Examples

You can find samples for all the features of the SDK in the samples directory. To run a given example:

1. Download the repository using git clone https://github.com/novadaemon/skyflow-php.git
2. Run $ composer install into directory project.
3. Go to the samples directory in your terminal.
4. Change the values enclosed by <> for the right values into the example file.
5. Execute the example you want: $ php get_records.php

Prerequisites

• A Skyflow account. If you don't have one, register for one on the Try Skyflow page.
• PHP 8.1 or above.
• GIT

Create the vault

1. In a browser, sign in to Skyflow Studio.
2. Create a vault by clicking Create Vault > Start With a Template > Quickstart vault.
3. Once the vault is ready, click the gear icon and select Edit Vault Details.
4. Note your Vault URL and Vault ID values, then click Cancel. You will need these later.

Create a Service Account

1. In the side navigation click, IAM > Service Accounts > New Service Account.
2. For Name, enter "SDK Sample". For Roles, choose Vault Editor.
3. Click Create. Your browser downloads a credentials.json file. Keep this file secure, as You will need it for each of the samples.

Service Account Bearer Token Generation

The Novadaemon\SkyFlow\ServiceAccount\Token class is used to generate service account tokens from service account credentials file which is downloaded upon creation of service account. The token generated from this class is valid for 60 minutes and can be used to make API calls to vault services as well as management API(s) based on the permissions of the service account.

The Token::generateBearerToken($credentialsPath) static method takes the credentials file path for token generation, alternatively, you can also send the entire credentials as array, by using Token::generateBearerTokenFromCredentials($credentials)

Example using filepath:

Example using credentials:

Response:

Vault API

The Novadaemon\Skyflow\Vault\Client has all methods to perform operations on the vault such as get records, inserting records, detokenizing tokens, retrieving tokens for a skyflow_id, excute sql query and to invoke a connection.

To use this class, the skyflow client must first be initialized as follows.

All Vault API endpoints must be invoked using a client instance.

Get Records

Use the method Client@getRecords() to perform bulk operation of retrieve records of table. This method has the following parameters:

Note: There are parameters that cannot be used together with others. If you pass the getRecords method arguments incorrectly, a SkyflowException is thrown.

Note: If the tokenization argument is true, you can set only tokenized field names in the fields parameter. An error is returned if you set the tokenization parameter to true and set a non-tokenized field name in the fields parameter.

An example of Client@getRecords() call:

Response:

Error:

Get record by id

To retrieve only once record from your Skyflow vault, use the method Client@getRecordById(). This method has the following parameters:

An example of Client@getRecordById() call:

Response:

Error:

Insert records into the vault

To insert data into your vault use the Cient@insertRecord() method. The parameters to this method are:

An example of Client@insertRecords() call:

Response:

Error:

Update record

To update data in your vault, use the Client@updateRecord() method. The parameters to this method are:

An example of Client@updateRecord() call:

Response:

Error:

Delete record

The Client@deleteRecord() allow you to delete a record from your Skyflow vault. This method has the following parameters:

An example of Client@deleteRecord() call:

Response:

Error:

Bulk delete

The Client@bulkDelete() allow you to delete specified record from your Skyflow vault. This method has the following parameters:

An example of Client@bulkDelete() call:

Response:

Error:

Detokenization

In order to retrieve data from your vault using tokens that you have previously generated for that data, you can use the Client@detokenize() method. The parameters to this method are:

An example of Client@detokenize() call:

Response:

Error:

Note: The structure for each item of the params parameter is:

Tokenization

The method Client@tokenize() method returns tokens that correspond to the specified records. Only applicable for fields with deterministic tokenization. The parameters to this method are:

Note: This endpoint doesn't insert records, it returns tokens for existing values. To insert records and tokenize that new record's values, see Insert Records and the tokenization parameter.

An example of Client@tokenize() call:

Response:

Error:

Execute SQL Query

The method Client@query() returns record for a valid SQL query. While this endpoint retrieves columns under a valid redaction scheme, it can't retrieve tokens. Only supports the SELECT command. The parameters to this method are:

Note: See the Skyflow API Documentation to know moer about the query restrictions.

An example of Client@query() call:

Error:

Invoke Connection

Using Skyflow Connection, end-user applications can integrate checkout/card issuance flow with their apps/systems. To invoke connection, use the Client@invokeConnection() method of the Skyflow client. This method accepts the following parameters:

Note: See the Skyflow API Documentation to know more about Connections.

An example of Client@invokeConnection() call: