Merge pull request #34 from EWC-consortium/staging

Staging
EWC-consortium · Nov 12, 2024 · eb4390d · eb4390d
2 parents d1c284c + 2a20f5f
commit eb4390d
Show file tree

Hide file tree

Showing 33 changed files with 6,673 additions and 2,158 deletions.
diff --git a/data/issuer-config.json b/data/issuer-config.json
diff --git a/data/oauth-config.json b/data/oauth-config.json
@@ -1,63 +1,43 @@
 {
   "issuer": "https://server.example.com",
   "authorization_endpoint": "https://server.example.com/authorize",
+  "pushed_authorization_request_endpoint": "https://server.example.com/par",
+  "require_pushed_authorization_requests": true,
   "token_endpoint": "https://server.example.com/token",
   "jwks_uri": "https://server.example.com/jwks",
-  "scopes_supported": [
-    "openid"
-  ],
-  "response_types_supported": [
-    "vp_token",
-    "id_token"
-  ],
-  "response_modes_supported": [
-    "query"
-  ],
-  "grant_types_supported": [
-    "authorization_code"
-  ],
-  "subject_types_supported": [
-    "public"
-  ],
-  "id_token_signing_alg_values_supported": [
-    "ES256"
-  ],
-  "request_object_signing_alg_values_supported": [
-    "ES256"
-  ],
+  "scopes_supported": ["openid"],
+  "response_types_supported": ["code", "vp_token", "id_token"],
+  "response_modes_supported": ["query"],
+  "grant_types_supported": ["authorization_code","urn:ietf:params:oauth:grant-type:pre-authorized_code"],
+  "subject_types_supported": ["public", "pairwise"],
+  "id_token_signing_alg_values_supported": ["ES256"],
+
+  "pre-authorized_grant_anonymous_access_supported": true,
+
+  "request_object_signing_alg_values_supported": ["ES256"],
   "request_parameter_supported": true,
   "request_uri_parameter_supported": true,
-  "token_endpoint_auth_methods_supported": [
-    "private_key_jwt"
-  ],
+  "token_endpoint_auth_methods_supported": ["none"],
   "request_authentication_methods_supported": {
-    "authorization_endpoint": [
-      "request_object"
-    ]
+    "authorization_endpoint": ["request_object"]
   },
   "vp_formats_supported": {
     "jwt_vp": {
-      "alg_values_supported": [
-        "ES256"
-      ]
+      "alg_values_supported": ["ES256"]
     },
     "jwt_vc_json": {
-      "alg_values_supported": [
-        "ES256"
-      ]
+      "alg_values_supported": ["ES256"]
     }
   },
   "subject_syntax_types_supported": [
     "did:key:jwk_jcs-pub",
     "did:ebsi:v1",
-    "did:ebsi:v2"
-  ],
-  "subject_trust_frameworks_supported": [
-    "ebsi",
-    "ewc-issuer-trust-list"
+    "did:ebsi:v2",
+    "did:jwk"
   ],
+  "subject_trust_frameworks_supported": ["ebsi", "ewc-issuer-trust-list"],
   "id_token_types_supported": [
     "subject_signed_id_token",
     "attester_signed_id_token"
   ]
-}
+}
diff --git a/data/presentation_definition.json b/data/presentation_definition.json
@@ -26,7 +26,7 @@
             "path": ["$.vct"],
             "filter": {
               "type": "string",
-              "const": "VerifiablePortableDocumentA1"
+              "const": "VerifiablePortableDocumentA2"
             }
           }
         ],

diff --git a/data/presentation_definition_sdjwt.json b/data/presentation_definition_sdjwt.json
@@ -0,0 +1,37 @@
+{
+  "id": "d49ee616-0e8d-4698-aff5-2a8a2362652d",
+  "name": "id-card-proof",
+  "format": {
+    "vc+sd-jwt": {
+      "alg": ["ES256", "ES384"]
+    }
+  },
+  "input_descriptors": [
+    {
+      "id": "abd4acb1-1dcb-41ad-8596-ceb1401a69c7",
+      "format": {
+        "vc+sd-jwt": {
+          "alg": ["ES256", "ES384"]
+        }
+      },
+      "constraints": {
+        "fields": [
+          {
+            "path": ["$.given_name"]
+          },
+          {
+            "path": ["$.last_name"]
+          },
+          {
+            "path": ["$.vct"],
+            "filter": {
+              "type": "string",
+              "const": "VerifiablePortableDocumentA1SDJWT"
+            }
+          }
+        ],
+        "limit_disclosure": "required"
+      }
+    }
+  ]
+}
diff --git a/data/verifier-config copy.json b/data/verifier-config copy.json
@@ -0,0 +1,35 @@
+{
+    "client_id": "https://dss.aegean.gr",
+    "client_name": "UAegean EWC Verifier",
+    "vp_formats_supported": [
+      "jwt_vc_json",
+      "ldp_vc"
+    ],
+    "vp_token_endpoint_auth_methods_supported": [
+      "client_secret_basic",
+      "client_secret_post"
+    ],
+    "scopes_supported": [
+      "openid",
+      "profile",
+      "vc_present"
+    ],
+    "response_types_supported": [
+      "vp_token"
+    ],
+    "grant_types_supported": [
+      "authorization_code"
+    ],
+    "id_token_signing_alg_values_supported": [
+      "RS256",
+      "ES256"
+    ],
+    "vp_token_signing_alg_values_supported": [
+      "RS256",
+      "ES256"
+    ],
+    "subject_types_supported": [
+      "pairwise"
+    ]
+  }
+
diff --git a/data/verifier-config.json b/data/verifier-config.json
@@ -1,39 +1,7 @@
 {
-    "client_id": "https://dss.aegean.gr",
-    "client_name": "UAegean EWC Verifier",
-    "redirect_uris": [
-      "https://example-verifier.com/callback"
-    ],
-    "vp_formats_supported": [
-      "jwt_vc_json",
-      "ldp_vc"
-    ],
-    "vp_token_endpoint_auth_methods_supported": [
-      "client_secret_basic",
-      "client_secret_post"
-    ],
-    "presentation_definition_uri": "https://example-verifier.com/presentation-definitions",
-    "scopes_supported": [
-      "openid",
-      "profile",
-      "vc_present"
-    ],
-    "response_types_supported": [
-      "vp_token"
-    ],
-    "grant_types_supported": [
-      "authorization_code"
-    ],
-    "id_token_signing_alg_values_supported": [
-      "RS256",
-      "ES256"
-    ],
-    "vp_token_signing_alg_values_supported": [
-      "RS256",
-      "ES256"
-    ],
-    "subject_types_supported": [
-      "pairwise"
-    ]
-  }
-
+  "client_name": "UAegean EWC Verifier",
+  "logo_uri": "https://studyingreece.edu.gr/wp-content/uploads/2023/03/25.png",
+  "location": "Greece",
+  "cover_uri": "string",
+  "description": "EWC pilot case verification"
+}
diff --git a/didjwks/did_private.key b/didjwks/did_private.key
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIDfw3MPQvb1xZQSca9QrZvJXTpGquu+bmVT1+/eeGh8boAoGCCqGSM49
+AwEHoUQDQgAEijVgOGHvwHSeV1Z2iLF9pQLQAw7KcHF3VIjThhvVtBRJ8VKFYBQY
+Sc3HbhXZvkbWOuEk0eYzC2BE4E6L04oktw==
+-----END EC PRIVATE KEY-----
diff --git a/didjwks/did_private_pkcs8.key b/didjwks/did_private_pkcs8.key
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgN/Dcw9C9vXFlBJxr
+1Ctm8ldOkaq675uZVPX7954aHxuhRANCAASKNWA4Ye/AdJ5XVnaIsX2lAtADDspw
+cXdUiNOGG9W0FEnxUoVgFBhJzcduFdm+RtY64STR5jMLYETgTovTiiS3
+-----END PRIVATE KEY-----
diff --git a/didjwks/did_public.pem b/didjwks/did_public.pem
@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEijVgOGHvwHSeV1Z2iLF9pQLQAw7K
+cHF3VIjThhvVtBRJ8VKFYBQYSc3HbhXZvkbWOuEk0eYzC2BE4E6L04oktw==
+-----END PUBLIC KEY-----
diff --git a/openapi/conformance-backend-endpoint.yaml b/openapi/conformance-backend-endpoint.yaml
@@ -0,0 +1,148 @@
+openapi: 3.0.0
+info:
+  title: ITB Conformance Backend
+  version: "1.0.0"
+servers:
+  - description: Example conformance server
+    url: https://example.conformance.com
+paths:
+  /offer-code-sd-jwt:
+    get:
+      summary: Credential offer (SD-JWT)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /offer-no-code:
+    get:
+      summary: Credential Offer without transaction code
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /offer-tx-code:
+    get:
+      summary: Credential Offer with transaction code
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /pre-offer-jwt-bpass:
+    get:
+      summary: Pre Authorised Credential Offer (Boarding Pass)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /pre-offer-jwt-edu:
+    get:
+      summary: Pre Authorised Credential Offer (Education ID)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /pre-offer-jwt-alliance:
+    get:
+      summary: Pre Authorised Credential Offer (Alliance)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /pre-offer-jwt-passport:
+    get:
+      summary: Pre Authorised Credential Offer (Passport)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /pre-offer-jwt-pid:
+    get:
+      summary: Pre Authorised Credential Offer (PID)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /offer-pid-persona:
+    get:
+      summary: Pre Authorised Credential Offer (PID with persona)
+      parameters:
+        - in: query
+          name: personaId
+          schema:
+            type: string
+          required: true
+          example: "2"
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /offer:
+    get:
+      summary: Credential Offer
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC001: Issue Verifiable Credential"
+  /vp-request/pid:
+    get:
+      summary: Verification Request (PID)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC002: Present Verifiable Credential"
+  /vp-request/epassport:
+    get:
+      summary: Verification Request (EPassport)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC002: Present Verifiable Credential"
+  /vp-request/educationid:
+    get:
+      summary: Verification Request (Education ID)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC002: Present Verifiable Credential"
+  /vp-request/allianceid:
+    get:
+      summary: Verification Request (Alliance ID)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC002: Present Verifiable Credential"
+  /vp-request/erua-id:
+    get:
+      summary: Verification Request (EURA ID)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC002: Present Verifiable Credential"
+  /vp-request/ferryboardingpass:
+    get:
+      summary: Verification Request (Ferry Boarding Pass)
+      responses:
+        "200":
+          description: Successful response
+      tags:
+        - "EWC RFC002: Present Verifiable Credential"
+tags:
+  - description: "This consists of conformance endpoints for EWC RFC001: Issue Verifiable Credential"
+    name: "EWC RFC001: Issue Verifiable Credential"
+  - description: "This consists of conformance endpoints for EWC RFC002: Present Verifiable Credential"
+    name: "EWC RFC002: Present Verifiable Credential"