Check EU Digitial Covid Certificates with ease and validate them against country and local rules.

Check EU Digitial Covid Certificates with ease and validate them against local or country rules.

What is the purpose of CovidValidator?

CovidValidator allows you to scan and validate EU Digital Covid Certificates based on country or local rules. It gives the person that checks the certificate only as little personal information as possible to protect the users' privacy. This web app is an alternative to other existing products because it does not rely on certain app stores or country restrictions.

What does BETA mean?

The web app is still in active development and might contain minor bugs. The production use of this app is not recommended yet, so please use it with caution. Updates will come regularly.

What rules are being used?

At the moment, the app uses the official EU DCC Validation Rules to validate the certificate. These rules are being provided by the member countries of the Digital Covid Certificate. It is a known problem that those rules might be out of date and do not reflect state or local regulations. This project is working on a custom rule builder that allows more precise rules for local regulations. You can follow the development here.

EU Digital Covid Certificate

A EU Digital Covid Certificate (EU DCC) is a digital proof that a person has been vaccinated against COVID-19, has recovered from COVID-19 or has a test result. Therefore, the EU Digital COVID Certificate refers collectively to 3 types of certificates: vaccination, recovery and test. (ref)

Key features of the certificate (ref)

• Digital and/or paper format
• with QR code
• free of charge
• in national language and English
• safe and secure
• valid in all EU countries

Signature Verification

The QR code on every certificate has a digital signature to protect it against falsification and it is being checked every time the QR code is scanned. Those signatures are being created by issuing entities, like hospitals, test centers, and health authorities. The public keys are shared through a European gateway with the member countries. The countries then provide additional software to allow the download of those keys. Read more about the update flow here.

CovidValidation uses a Github Action to fetch the newest DSC list once a day from the following API.

• API: de.dscg.ubirch.com
• Data Schema: github.com/Digitaler-Impfnachweis/certification-apis

The verification takes place in async function verifyDCC(dcc: DCC): Promise<boolean> (link). Every time a certificate is scanned, the app checks for the kid in the CBOR Web Token and searches for the matching DSC. If no kid is available, then all DSCs will be used to verify the certificate. The app uses cose-js to verify the signature of the DCC. If the check fails, the user will get an error message that the certificate is technically invalid.

More Information

• Technical Specifications for Digital Green Certificates
• CBOR Object Signing and Encryption
• DCC Schema

Test Data

You can find a repository with test certificates here.

IMPORTANT: At the moment CovidValidator only supports production certificates. The debug build will soon handle test certificates as well.

EU DCC Validation Rules

The EU DCC Validation Rules allow a verifier to check if a DCC holder fulfills all requirements to enter a country. You, as a verifier, can change the rules by selecting a different country in the app. Always make sure to select the rules that are required by law in your country, otherwise the verification results might be invalid.

CovidValidation uses a Github Action to fetch the newest rules and value sets once a day from the EU Digital COVID Certificate Business Rule Service.

• API: distribution.dcc-rules.de
• OpenAPI Specs: eu-digital-green-certificates.github.io/dgca-businessrule-service
• Overview of current rules: EU DCC Rules

For reference implementations, please refer to github.com/ehn-dcc-development/dgc-business-rules.

Getting Started

NEXT_PUBLIC_CONTACT_NAME=xxx
NEXT_PUBLIC_CONTACT_ADDRESS=xxx
NEXT_PUBLIC_CONTACT_ADDRESS_CITY=xxx
NEXT_PUBLIC_CONTACT_ADDRESS_COUNTRY=xxx
NEXT_PUBLIC_CONTACT_EMAIL=xxx
NEXT_PUBLIC_CONTACT_WEBSITE=covidvalidator.app
NEXT_PUBLIC_VERSION=0.0.1

npm install
npm run dev

Developer Notes

The QR code reader needs to run over localhost or SSL to work. For the local development, follow the script on https://github.com/vercel/next.js/discussions/10935#discussioncomment-1540436 and run ipconfig getifaddr en0 to get your address. Now you can access your dev build via HTTPS on your network.

i18n

The app uses i18next for internationalization. We want to offer this app to as many people as possible therefore native translations are important. We welcome anyone to help us translate this app. To do so, follow these steps:

1. If the language does not exist, create a folder in /translations and copy the files /translations/en/common.json and /translations/en/country.json in that folder
2. Translate the existing values in those files and make sure you do not change the key
3. In case of a new language, please follow the next three steps, otherwise jump to 4) a) Add the translation for the new language to the other common.json files b) Add the language key to the const availableLanguages = ['en', 'de'] array in components/modal/settings.tsx c) Add the i18next resource to pages/_app.tsx similar to the other languages
4. Save and commit your changes

Note: If you do not add a translation in any given language, the app will default to English.

Made with ♥ for the community