ANAF Integration

Storno.ro integrates with Romania's ANAF (Agenția Națională de Administrare Fiscală) e-Factura system for electronic invoice submission and retrieval.

Overview

The e-Factura system requires all B2B invoices in Romania to be submitted electronically in UBL 2.1 XML format. Storno.ro handles:

1. XML Generation — Converts invoice data to UBL 2.1 compliant XML
2. Submission — Uploads XML to ANAF's SPV (Spațiul Privat Virtual) platform
3. Status Tracking — Monitors submission status (validated, rejected, etc.)
4. Incoming Invoices — Downloads and parses invoices received from suppliers
5. Message Monitoring — Tracks all e-Factura messages from ANAF

Authentication with ANAF

ANAF uses OAuth 2.0 for API authentication. Storno.ro supports two methods for obtaining ANAF tokens:

Accountant Method (Direct OAuth)

The user authenticates directly with ANAF through the OAuth flow:

1. Initiate the OAuth flow: GET /api/connect/anaf
2. User logs in on ANAF's website
3. ANAF redirects back with an authorization code
4. Storno.ro exchanges the code for an access token
5. Token is validated against all user's companies

Device Method (Link-based)

For users who can't complete the OAuth flow on the same device (e.g., mobile users):

1. Create a token link: POST /api/v1/anaf/token-links
2. Share the link URL with the person who has ANAF access
3. They open the link, complete ANAF OAuth on their device
4. Check link status: GET /api/v1/anaf/token-links/{linkToken}
5. Once completed, the token is automatically associated with the user

# Create a token link
curl -X POST https://api.storno.ro/api/v1/anaf/token-links \
  -H "Authorization: Bearer {token}"

# Response
{
  "linkToken": "abc123...",
  "url": "https://app.storno.ro/anaf/link/abc123...",
  "expiresAt": "2026-02-17T12:00:00Z"
}

Token Lifecycle

• ANAF tokens expire (typically after 90 days)
• Storno.ro extracts the JWT expiry and tracks validity
• Users are notified before token expiration
• Expired tokens must be re-obtained through a new OAuth flow

Sync Process

Automatic Sync

When sync is enabled for a company (syncEnabled: true), Storno.ro periodically:

1. Checks for new outgoing invoice statuses (validated/rejected)
2. Downloads new incoming invoices
3. Parses incoming XML to create invoice, client, and product records
4. Sends notifications for new invoices and status changes

Manual Sync

Trigger a sync manually:

curl -X POST https://api.storno.ro/api/v1/sync/trigger \
  -H "Authorization: Bearer {token}" \
  -H "X-Company: {company_uuid}"

Sync Configuration

Invoice Submission Flow

Draft → Issue → (optional delay) → Submit to ANAF → ANAF Processing → Validated/Rejected

1. Issue (POST /invoices/{uuid}/issue) — Validates data, generates UBL XML, generates PDF
2. Submit (POST /invoices/{uuid}/submit) — Uploads XML to ANAF
3. Status Update — Sync process checks for ANAF response
4. Validated — ANAF accepted the invoice; it's now in the national e-Factura system
5. Rejected — ANAF found errors; invoice needs correction

Delayed Submission

Companies can configure efacturaDelayHours to add a review window between issuing and ANAF submission. This allows catching errors before the invoice enters the national system.

E-Factura Messages

ANAF sends various message types through the SPV platform:

curl https://api.storno.ro/api/v1/efactura-messages \
  -H "Authorization: Bearer {token}" \
  -H "X-Company: {company_uuid}"

Message types include:

• FACTURA_PRIMITA — Incoming invoice received
• FACTURA_TRIMISA — Outgoing invoice status update
• ERORI_FACTURA — Invoice validation errors

XML Validation

Before submission, invoices can be validated against ANAF's rules:

# Quick validation (structural)
curl -X POST https://api.storno.ro/api/v1/invoices/{uuid}/validate?mode=quick \
  -H "Authorization: Bearer {token}" \
  -H "X-Company: {company_uuid}"

# Full validation (Schematron rules)
curl -X POST https://api.storno.ro/api/v1/invoices/{uuid}/validate?mode=full \
  -H "Authorization: Bearer {token}" \
  -H "X-Company: {company_uuid}"

Digital Signature Verification

Invoices validated by ANAF receive a digital signature. You can verify it:

curl -X POST https://api.storno.ro/api/v1/invoices/{uuid}/verify-signature \
  -H "Authorization: Bearer {token}" \
  -H "X-Company: {company_uuid}"