Enables web-based applications (specifically EasyInvoice by Softdreams JSC) to perform digital signature operations using local hardware tokens/smart cards that cannot be accessed directly from the browser

1. User installs the extension and the native messaging host component (com.tokensign) on their computer. 2. When using EasyInvoice or another web app that integrates with the TokenSigning API, the page injects page.js which provides the signing interface. 3. The web page calls TokenSigning methods (e.g., signHashData, signXMLData) to request signing operations. 4. content.js relays messages from page.js to background.js. 5. background.js forwards signing requests to the native messaging host via chrome.runtime.connectNative(). 6. The native host interacts with the local hardware token/smart card to perform cryptographic signing. 7. The signed result is returned back through the chain to the web page.

Target users: Vietnamese businesses and accountants using EasyInvoice electronic invoicing system / Users with digital certificates on hardware tokens who need to sign electronic invoices in the browser

The extension is based on the open-source chrome-token-signing project from open-eid (Estonian e-ID), adapted for Vietnamese EasyInvoice use — we cannot fully verify the native host component behavior from the extension source alone
The native messaging host (com.tokensign) binary is not included in the extension package and its capabilities are not visible in this analysis
The EasyInvoice web application (easyinvoice.vn) workflow and its own authentication/payment requirements are outside the scope of this extension source analysis

Monetization

No paid features detected

The extension contains no payment infrastructure, no subscription checks, no license validation, no upgrade prompts, and no billing APIs. All 'license' keyword hits are from the GNU LGPL open-source license header. All 'pro' keyword hits are JavaScript Promise objects or the word 'probe' in comments. The extension is open-source (LGPL) and freely available. The EasyInvoice service and hardware tokens used with this extension may have separate costs, but the extension itself does not gate any features behind payment.

Confidence: 85
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension acts as a local bridge between a web page and a native messaging host (com.tokensign) for digital signing. It does not implement any login UI, authentication flow, or account system. The core workflow (signing via hardware token through native messaging) requires no credentials within the extension. The web pages it integrates with (e.g., EasyInvoice) may require their own authentication, but the extension itself does not gate any functionality behind a login.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging

Publisher

Softdreams JSC

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access