Desktop Browser Flow

Sign with DSC from Windows, Linux, or macOS desktop browsers using the same SecureSign deep link as mobile.

Flow Diagram

User signs from desktop browser via securesign:// deep link — SecureSign Desktop Software opens, no localhost API

Same deep link as mobile

Desktop browsers use the identical securesign://sign protocol. On desktop OS, the link opens SecureSign Desktop Software instead of the Mobile App. No browser extension, Java, or localhost API required.

Step by Step

User clicks Sign with DSC on your desktop web page
Your server generates requestId and document hash (SHA-256, base64)
Browser redirects to securesign://sign
SecureSign Desktop Software opens, detects token, shows certificate list, collects PIN
Software signs hash and redirects to your callbackUrl
Your callback handler receives signature and completes portal upload

Deep Link Format

securesign://sign?requestId={uuid}&hashBase64={sha256}&hashAlgo=SHA256&documentType=hash&callbackUrl={encoded}&apiKey={ss_live_xxx}

Return Payload

{"requestId":"a1b2c3d4","success":true,"signatureBase64":"MEUCIQD...","certificate":{"subjectCN":"Rajesh Kumar","serialNumber":"4A3B2C1D","validTo":"2027-01-01"},"signedAt":"2026-06-22T10:30:00Z"}

Code Samples

const params = new URLSearchParams({
  requestId: crypto.randomUUID(),
  hashBase64: sha256Base64,
  hashAlgo: 'SHA256',
  documentType: 'hash',
  callbackUrl: 'https://portal.example.gov.in/sign/callback',
  apiKey: 'ss_live_abc123xyz'
});
window.location.href = `securesign://sign?${params}`;

$params = http_build_query([
  'requestId' => bin2hex(random_bytes(16)),
  'hashBase64' => base64_encode(hash('sha256', $doc, true)),
  'hashAlgo' => 'SHA256',
  'documentType' => 'hash',
  'callbackUrl' => 'https://portal.example.gov.in/sign/callback',
  'apiKey' => 'ss_live_abc123xyz'
]);
header('Location: securesign://sign?' . $params);

import base64, hashlib, uuid, urllib.parse
params = urllib.parse.urlencode({
  'requestId': uuid.uuid4().hex,
  'hashBase64': base64.b64encode(hashlib.sha256(doc).digest()).decode(),
  'hashAlgo': 'SHA256',
  'documentType': 'hash',
  'callbackUrl': 'https://portal.example.gov.in/sign/callback',
  'apiKey': 'ss_live_abc123xyz'
})
redirect(f'securesign://sign?{params}')

See also Deep Link Protocol for full parameter reference and error callbacks.