Question 1

Who can generate the IRN from the e-invoice system?

Accepted Answer

Presently, IRN can be generated only by the taxpayers whose turnover is more than Rs. 20 Crores.

Question 2

Which is the algorithm used for the encryption and decryption of data?

Accepted Answer

The asymmetric algorithm (RSA/ECB/PKCS1Padding) and symmetric algorithm AES256 (AES/ECB/PKCS5Padding) and SEK are used to encrypt the request payloads of the POST API methods and decrypt response payloads. It may be noted that SEK is generated and passed by the e-invoice system while sending the authentication token.

Question 3

Should we whitelist our IPs to access Sandbox APIs?

Accepted Answer

There is no need for whitelisting the IPs to test on the Sandbox.

Question 4

How and where can Taxpayer/GSP get the credentials to access the APIs?

Accepted Answer

Taxpayer/GSP can get the API credentials using the online registration option under this portal's 'Login' system Portal URL.

Question 5

Where can the Taxpayer/GSP get the URL or endpoints of APIs?

Accepted Answer

Taxpayer/GST On logging into the testing portal, one can get the endpoints of APIs for the sandbox system.

Question 6

Where can Taxpayer/GSP get the Public Key to the e-invoice system?

Accepted Answer

Taxpayer/GSP On logging into the testing portal, one can get the public key of the e-invoice system for the sandbox system.

Question 7

What is the validity of the authentication token?

Accepted Answer

The authentication token generated by the e-invoice system is valid for 6 hours on the production system. However, the developer's effective testing has been set for 1 hour in the Sandbox.

Question 8

Does Taxpayer/GSP need to generate the token for each transaction or request?

Accepted Answer

It is not advisable to request a new token before terminating each transaction. Once the token is generated, it can re-use it any number of times until it expires. Even if a new request for a token is made, the system returns the already generated valid token with an expiry time.

Once the token is generated, the best practice is stored in the Taxpayer/GSP system along with SEK and expiry time. Next, the token can be referred to from the system and used whenever the transaction request is made. If it has expired, request a new token and store and use it.

Question 9

What is the purpose of the parameter ForceRefreshAccessToken in authentication API?

Accepted Answer

The Taxpayer/GSP system can use the forceRefreshAccessToken parameter of Authentication API to generate the new token just 10 minutes before the token's expiry. The Taxpayer/GSP system can use it to avoid the failure of the transaction fired after the token's expiry.

Question 10

Where to get the public key for encrypting the password and App key?

Accepted Answer

Please log in to Portal using your generated credentials. To the right side, you will get an option to download the public keys.

E-invoice Solution - e-invoice APIs For Developers

A Licensed GST Suvidha Provider - APIs enable automatically

Pricing Details:

MasterGST SAP Add-on / Connector:

How to Start:

Enabled e - invoice Methods and You can test here

Download e-Invoice API Library Files

.NET

PHP

Visual Fox Pro

C-Sharp

Node JS

VB .Net

VB6

E INVOICE API Postman Collection

MasterGST

Products

API's & Tools

MasterGST Guides