@cef-ebsi/cli 0.0.0-alpha.0 → 0.1.0

package/dist/scripts/assets/VerifiableAuthorisationToOnboard.json

@@ -0,0 +1,24 @@
+{
+  "@context": [
+    "https://www.w3.org/2018/credentials/v1"
+  ],
+  "type": [
+    "VerifiableCredential",
+    "VerifiableAttestation",
+    "VerifiableAuthorisationToOnboard"
+  ],
+  "issuer": "",
+  "credentialSubject": {
+    "id": "",
+    "accreditedFor": []
+  },
+  "termsOfUse": {
+    "id": "",
+    "type": "IssuanceCertificate"
+ 
+  },
+  "credentialSchema": {
+    "id": "https://api-pilot.ebsi.eu/trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM",
+    "type": "FullJsonSchemaValidator2021"
+  }
+}

package/dist/scripts/bootstrap/0a-loadTPROperator

@@ -0,0 +1,5 @@
+# Script to load the admin with the ROLE OPERATOR in the Trusted Apps Registry
+# This role is granted by the multisignature wallet
+env SET_ENV
+using user null
+using user ES256K did1 PRIVATE_KEY_TPR_OPERATOR DID_TPR_OPERATOR

package/dist/scripts/bootstrap/0b-loadAdmin

@@ -0,0 +1,6 @@
+# Script to load a user with admin attributes in the Trusted Policies Registry
+# (example: "TIR:insertIssuer" -> attribute to insert issuers in the Trusted Issuers Registry)
+env SET_ENV
+using user null
+using user ES256K did1 PRIVATE_KEY_ES256K_SUPPORT_OFFICE DID_SUPPORT_OFFICE
+using user ES256 did1 PRIVATE_KEY_ES256_SUPPORT_OFFICE DID_SUPPORT_OFFICE

package/dist/scripts/bootstrap/1-populateTPR

@@ -0,0 +1,115 @@
+run bootstrap/0a-loadTPROperator
+
+# New Policies
+
+# DID
+proxyledger tpr insertPolicy DIDR:insertHashAlgorithm true ["insertHashAlgorithm in DID Registry"]
+proxyledger tpr insertPolicy DIDR:updateHashAlgorithm true ["updateHashAlgorithm in DID Registry"]
+proxyledger tpr insertPolicy DID:updateBaseDocument true ["updateBaseDocument in DID Registry"]
+proxyledger tpr insertPolicy DID:addController true ["addController in DID Registry"]
+proxyledger tpr insertPolicy DID:revokeController true ["revokeController in DID Registry"]
+proxyledger tpr insertPolicy DID:addVerificationMethod true ["addVerificationMethod in DID Registry"]
+proxyledger tpr insertPolicy DID:addVerificationRelationship true ["addVerificationRelationship in DID Registry"]
+proxyledger tpr insertPolicy DID:revokeVerificationMethod true ["revokeVerificationMethod in DID Registry"]
+proxyledger tpr insertPolicy DID:expireVerificationMethod true ["expireVerificationMethod in DID Registry"]
+proxyledger tpr insertPolicy DID:rollVerificationMethod true ["rollVerificationMethod in DID Registry"]
+
+#TIR
+proxyledger tpr insertPolicy TIR:insertIssuer true ["insertIssuer in Trusted Issuers Registry"]
+proxyledger tpr insertPolicy TIR:updateIssuer true ["updateIssuer in Trusted Issuers Registry"]
+proxyledger tpr insertPolicy TIR:setAttributeMetadata true ["setAttributeMetadata in Trusted Issuers Registry"]
+
+#Timestamp
+proxyledger tpr insertPolicy TS:insertHashAlgorithm true ["insertHashAlgorithm in Timestamp"]
+proxyledger tpr insertPolicy TS:updateHashAlgorithm true ["updateHashAlgorithm in Timestamp"]
+
+#TSR
+proxyledger tpr insertPolicy TSR:insertSchema true ["insertSchema in Trusted Schemas Registry"]
+proxyledger tpr insertPolicy TSR:updateSchema true ["updateSchema in Trusted Schemas Registry"]
+proxyledger tpr insertPolicy TSR:updateMetadata true ["updateMetadata in Trusted Schemas Registry"]
+
+#TAR
+proxyledger tpr insertPolicy TAR:insertApp true ["insertApp in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:insertRevocation true ["insertRevocation in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:updateApp true ["updateApp in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:insertAppInfo true ["insertAppInfo in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:insertAuthorization true ["insertAuthorization in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:updateAuthorization true ["updateAuthorization in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:insertAppPublicKey true ["insertAppPublicKey in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:updateAppPublicKey true ["updateAppPublicKey in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:insertAppAdministrator true ["insertAppAdministrator in Trusted Apps Registry"]
+proxyledger tpr insertPolicy TAR:deleteAppAdministrator true ["deleteAppAdministrator in Trusted Apps Registry"]
+
+
+# User Attributes
+# List taken from https://ec.europa.eu/digital-building-blocks/wikis/display/BLOCKCHAININT/RFC+-+Procedure+for+multisig+wallet+maintenance
+
+# Iulian Florin NITA
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# Alen Horvat
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# Julian GONZALEZ AGUDELO
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# wesley DEGLISE
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# Arnaud RIESS
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# Guillermo Liarte Cano
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# Pablo STAIANO
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# Yannick HUARD
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# Stefan-Adrian Bancu
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]
+
+# Support EBSI
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"] [true, true, true, true, true, true, true, true]
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"] [true, true]
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"] [true, true, true]
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["TAR:insertApp", "TAR:insertRevocation", "TAR:updateApp", "TAR:insertAppInfo", "TAR:insertAuthorization", "TAR:updateAuthorization", "TAR:insertAppPublicKey", "TAR:updateAppPublicKey", "TAR:insertAppAdministrator", "TAR:deleteAppAdministrator"] [true, true, true, true, true, true, true, true, true, true]

package/dist/scripts/bootstrap/2-populateDID

@@ -0,0 +1,21 @@
+# DID of TPR Role Operator
+run bootstrap/0a-loadTPROperator
+proxyledger did insertDidDocument
+proxyledger did addVerificationMethod user.did ES256
+proxyledger did addVerificationRelationship user.did authentication ES256
+proxyledger did addVerificationRelationship user.did assertionMethod ES256
+
+# DID admin
+run bootstrap/0b-loadAdmin
+proxyledger did insertDidDocument
+proxyledger did addVerificationMethod user.did ES256
+proxyledger did addVerificationRelationship user.did authentication ES256
+proxyledger did addVerificationRelationship user.did assertionMethod ES256
+
+# DID users-onboarding-api_pilot-temp-01
+using user null
+using user ES256K did1 <PRIVATE-KEY> <DID>
+proxyledger did insertDidDocument
+proxyledger did addVerificationMethod user.did ES256
+proxyledger did addVerificationRelationship user.did authentication ES256
+proxyledger did addVerificationRelationship user.did assertionMethod ES256

package/dist/scripts/bootstrap/3-populateTAR

@@ -0,0 +1,92 @@
+run bootstrap/0b-loadAdmin
+
+## Insert generic apps
+proxyledger tar insertApp ledger-api
+proxyledger tar insertApp did-registry-api
+proxyledger tar insertApp timestamp-api
+proxyledger tar insertApp trusted-issuers-registry-api
+proxyledger tar insertApp trusted-policies-registry-api
+proxyledger tar insertApp trusted-schemas-registry-api
+proxyledger tar insertApp storage-api
+proxyledger tar insertApp notifications-api
+proxyledger tar insertApp proxy-data-hub-api
+proxyledger tar insertApp ebsi-core-services
+proxyledger tar insertApp authorisation-api
+
+## Insert specific apps
+proxyledger tar insertApp did-registry-api_pilot-temp-01
+proxyledger tar insertApp timestamp-api_pilot-temp-01
+proxyledger tar insertApp trusted-issuers-registry-api_pilot-temp-01
+proxyledger tar insertApp trusted-policies-registry-api_pilot-temp-01
+proxyledger tar insertApp trusted-schemas-registry-api_pilot-temp-01
+proxyledger tar insertApp notifications-api_pilot-temp-01
+proxyledger tar insertApp proxy-data-hub-api_pilot-temp-01
+proxyledger tar insertApp authorisation-api_pilot-temp-01
+proxyledger tar insertApp users-onboarding-api_pilot-temp-01
+proxyledger tar insertApp test-app-pilot1
+proxyledger tar insertApp test-app-pilot2
+
+## Insert apps for e2e tests
+proxyledger tar insertApp did-registry-api_pilot-test-01
+proxyledger tar insertApp notifications-api_pilot-test-01
+proxyledger tar insertApp proxy-data-hub-api_pilot-test-01
+proxyledger tar insertApp timestamp-api_pilot-test-01
+proxyledger tar insertApp trusted-issuers-registry-api_pilot-test-01
+proxyledger tar insertApp trusted-policies-registry-api_pilot-test-01
+proxyledger tar insertApp trusted-schemas-registry-api_pilot-test-01
+
+## Authorizations between apps
+
+# APIs that need to access the blockchain through ledger-api
+#   Note: trusted-apps-registry-api doesn't require
+#   authorization because it connects directly to besu
+proxyledger tar insertAuthorization ledger-api did-registry-api
+proxyledger tar insertAuthorization ledger-api timestamp-api
+proxyledger tar insertAuthorization ledger-api trusted-issuers-registry-api
+proxyledger tar insertAuthorization ledger-api trusted-policies-registry-api
+proxyledger tar insertAuthorization ledger-api trusted-schemas-registry-api
+
+# APIs that need to access cassandra through storage-api
+proxyledger tar insertAuthorization storage-api notifications-api
+proxyledger tar insertAuthorization storage-api proxy-data-hub-api
+
+# With regarding users, each API will authorize tokens issued by
+# authorisation-api, and the set of API is defined as ebsi-core-services
+proxyledger tar insertAuthorization ebsi-core-services authorisation-api
+
+# Authorisations for testing purposes
+proxyledger tar insertAuthorization test-app-pilot1 test-app-pilot2
+proxyledger tar insertAuthorization storage-api test-app-pilot2
+proxyledger tar insertAuthorization ledger-api test-app-pilot2
+
+## Define public keys for APIs using the old version (generic apps)
+proxyledger tar insertAppPublicKey 0x8d508a564259616f0f035a5ac6b5f8c3f4223163261b2b3a07c8f3df9b08cbdd <PRIVATE-KEY> # did-registry-api
+proxyledger tar insertAppPublicKey 0xee52082af8acb4a3d78b668bb6ec2809e58e2b5c0c6612c92d872e18289951fc <PRIVATE-KEY> # timestamp-api
+proxyledger tar insertAppPublicKey 0x1795ede2b64392744b86bcf7d5af61aa783def0dbab758ed3b2670d6be130268 <PRIVATE-KEY> # trusted-issuers-registry-api
+proxyledger tar insertAppPublicKey 0xbeed83fa6ecc88546cb8cba6c370ad12b1136fc54cb347b583adf8446594d33f <PRIVATE-KEY> # trusted-policies-registry-api
+proxyledger tar insertAppPublicKey 0x462230ee44ba7f75752d829e359f7fc6dc495038440a0767e62d93dc30c98c47 <PRIVATE-KEY> # trusted-schemas-registry-api
+proxyledger tar insertAppPublicKey 0xb2317e0eec5efd96eccace2740b31850a437189caa378e5ca162a86e3a6379f8 <PRIVATE-KEY> # notifications-api
+proxyledger tar insertAppPublicKey 0xaf06f0c2b3fc140dd3d461e073aa9588806a48e3e54c6f5a3caa99fa8f6e6167 <PRIVATE-KEY> # proxy-data-hub-api
+proxyledger tar insertAppPublicKey 0x559c4f32dc35566e4b92b697499c38f3847a6c53f8344821c24354ead1f2ab1e <PRIVATE-KEY> # authorisation-api
+
+## Define public keys for APIs using the latest version
+proxyledger tar insertAppPublicKey 0xf8e19211b5255735c5264eda71b3fb52586503c4a48b0a727745fc618682043b <PRIVATE-KEY> # did-registry-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0x270321e53c610ec9a13e2fd823c393820960cf32a37309ec98808bffa69c7147 <PRIVATE-KEY> # timestamp-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0xe385c4eb306b7a46798638cf63bd6ceceee470861d1d74490b0e624e93000756 <PRIVATE-KEY> # trusted-issuers-registry-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0xa5bbd1dee2410ac8da4a998aec3ee0226ede6a0ad5b62207e053e7e4567e6a12 <PRIVATE-KEY> # trusted-policies-registry-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0xdb53a0e9d547bb4ce64099d755a75bd2f0f07462c7b56e9dcc8c4710766cd2cb <PRIVATE-KEY> # trusted-schemas-registry-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0x0d757c80b54f5f3496aa20498e7e4ebc6ff23c877f053d4f89afcb00479d6a6d <PRIVATE-KEY> # notifications-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0x58f6362154f607e99925959d62acffc4089b83a07ffea2484c296729e3393f33 <PRIVATE-KEY> # proxy-data-hub-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0x6295c85baca8d6957cc975c100535eeae0086f768e79829f548ce981393557c8 <PRIVATE-KEY> # authorisation-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0x0cfa02df489fd0fa197468ee0919023e1b393e2fb15edaf3feb9a32924d8e9fa <PRIVATE-KEY> # users-onboarding-api_pilot-temp-01
+proxyledger tar insertAppPublicKey 0x6e59a3303d47da29eac1ab6bd90244845fe8dbb8b82ab95baaee30f0a6d2b045 <PRIVATE-KEY> # test-app-pilot1
+proxyledger tar insertAppPublicKey 0x7b2506e8d27a8b26566e25b109302ffafc5c1972e484d568906b74eff606f275 <PRIVATE-KEY> # test-app-pilot2
+
+## Define public keys for APIs used in e2e tests
+proxyledger tar insertAppPublicKey 0xde146ccd61b7f99abd9b7da87df81f03cb2ff313a43d29c68262e0862c4ba7ba <PRIVATE-KEY> # did-registry-api_pilot-test-01
+proxyledger tar insertAppPublicKey 0x3e0dc63b97b1e7cb3a7d0b2da8f04ea956bc88e26423b3f1e94fdb0f0511d397 <PRIVATE-KEY> # notifications-api_pilot-test-01
+proxyledger tar insertAppPublicKey 0x52b71dd9660af6450d8fdc02767b1cad77bac742fb92eca94adfc993e747b875 <PRIVATE-KEY> # proxy-data-hub-api_pilot-test-01
+proxyledger tar insertAppPublicKey 0x38c974c33a877f2725046b05ff9d762809d3f8c0392bd3be31803ca2ddecf86b <PRIVATE-KEY> # timestamp-api_pilot-test-01
+proxyledger tar insertAppPublicKey 0x62c2b561c7f8c98795b8db9dff1c304c83ba5988664a40c561d92fe146009848 <PRIVATE-KEY> # trusted-issuers-registry-api_pilot-test-01
+proxyledger tar insertAppPublicKey 0xdf1f9efa300761aae5b586c6e8775ff3413cab87caf412e9e0876e84371d68cf <PRIVATE-KEY> # trusted-policies-registry-api_pilot-test-01
+proxyledger tar insertAppPublicKey 0x16b7cf8141898ad870d8342c5b79e46bb550f139462dda6da99742b63032ba22 <PRIVATE-KEY> # trusted-schemas-registry-api_pilot-test-01

package/dist/scripts/bootstrap/4-populateTimestamp

@@ -0,0 +1,10 @@
+run bootstrap/0b-loadAdmin
+
+proxyledger timestamp insertHashAlgorithm 256 sha-256 2.16.840.1.101.3.4.2.1 1 sha2-256
+proxyledger timestamp insertHashAlgorithm 256 sha-256 2.16.840.1.101.3.4.2.1 1 sha2-256
+proxyledger timestamp insertHashAlgorithm 384 sha-384 2.16.840.1.101.3.4.2.2 1 sha2-384
+proxyledger timestamp insertHashAlgorithm 512 sha-512 2.16.840.1.101.3.4.2.3 1 sha2-512
+proxyledger timestamp insertHashAlgorithm 224 sha3-224 2.16.840.1.101.3.4.2.7 1 sha3-224
+proxyledger timestamp insertHashAlgorithm 256 sha3-256 2.16.840.1.101.3.4.2.8 1 sha3-256
+proxyledger timestamp insertHashAlgorithm 384 sha3-384 2.16.840.1.101.3.4.2.9 1 sha3-384
+proxyledger timestamp insertHashAlgorithm 512 sha3-512 2.16.840.1.101.3.4.2.10 1 sha3-512

package/dist/scripts/bootstrap/5-populateTIR

@@ -0,0 +1,9 @@
+run bootstrap/0b-loadAdmin
+
+# support office
+set domain SET_DOMAIN
+reservedAttributeId: compute randomID
+vc: run issue_SelfAttestationSupportOffice user.did reservedAttributeId
+proxyledger tir setAttributeMetadata user.did reservedAttributeId roottao
+proxyledger tir setAttributeData user.did reservedAttributeId vc
+

package/dist/scripts/bootstrap/6-populateTSR

@@ -0,0 +1,22 @@
+# before running the script download the schemas and put them in scripts/local/schemas
+run bootstrap/0b-loadAdmin
+
+attestation_2022-11: load local/schemas/ebsi-attestation/2022-11/schema.json
+attestation_2022-11_01: load local/schemas/ebsi-attestation/2022-11_01/schema.json
+id_attestation_2022-11_01: compute schemaId attestation_2022-11_01
+presentation_2022-11: load local/schemas/ebsi-presentation/2022-11/schema.json
+
+accreditation_2022-11_01: load local/schemas/ebsi-accreditation/2022-11_01/schema.json
+set accreditation_2022-11_01.allOf.0.$ref SET_DOMAIN /trusted-schemas-registry/v3/schemas/ id_attestation_2022-11_01
+
+accreditation_2023-04: load local/schemas/ebsi-accreditation/2023-04-11/schema.json
+set accreditation_2023-04.allOf.0.$ref SET_DOMAIN /trusted-schemas-registry/v3/schemas/ id_attestation_2022-11_01
+
+proxyledger tsr insertSchema attestation_2022-11 {}
+proxyledger tsr insertSchema attestation_2022-11_01 {}
+
+# skip these commands for later if TSR API v3 is not ready
+proxyledger tsr insertSchema accreditation_2022-11_01 {}
+proxyledger tsr insertSchema accreditation_2023-04 {}
+
+# the rest of the schemas can be inserted from the json-schema repository

package/dist/scripts/bootstrap/7-setupConformanceIssuer

@@ -0,0 +1,35 @@
+# create keys for conformance
+using user null
+using user ES256K did1
+using user ES256 did1 user.privateKeyHex
+set confIssuer user
+
+# register conformance in the DID Registry
+proxyledger did insertDidDocument
+proxyledger did addVerificationMethod user.did ES256
+proxyledger did addVerificationRelationship user.did authentication ES256
+proxyledger did addVerificationRelationship user.did assertionMethod ES256
+
+# conformance service can authorize Root TAOs then it needs to be registered in TPR
+run bootstrap/0a-loadTPROperator
+proxyledger tpr insertUserAttributes confIssuer.address ["TIR:setAttributeMetadata"]
+using user confIssuer
+
+# registration in the TIR
+reservedAttributeId: compute randomID
+vc: run issue_SelfAttestationSupportOffice user.did reservedAttributeId
+proxyledger tir setAttributeMetadata user.did reservedAttributeId roottao
+proxyledger tir setAttributeData user.did reservedAttributeId vc
+
+# register a proxy
+set proxyData {"prefix":"","headers":{},"testSuffix":"/credentials/status/1"}
+set proxyData.prefix SET_CONFORMANCE_DOMAIN /conformance/v4/issuer-mock
+proxyledger tir addIssuerProxy user.did proxyData
+proxyId: compute sha256 proxyData
+
+set user.accreditationUrl SET_DOMAIN /trusted-issuers-registry/v5/issuers/ user.did /attributes/ reservedAttributeId
+set proxyUrl SET_DOMAIN /trusted-issuers-registry/v5/issuers/ user.did /proxies/ proxyId
+set user.proxyId proxyId
+
+view user
+view proxyUrl

package/dist/scripts/initializeContracts

@@ -0,0 +1,5 @@
+proxyledger did setTrustedPoliciesRegistryAddress
+proxyledger tar setRegistryAddresses
+proxyledger timestamp setTrustedPoliciesRegistryAddress
+proxyledger tir setRegistryAddresses
+proxyledger tsr setTrustedPoliciesRegistryAddress

package/dist/scripts/issue_CTRevocableCredential

@@ -0,0 +1,13 @@
+# way of use:
+# ==> set domain https://api-test.ebsi.eu
+# ==> run issue_CTRevocableCredential <didIssuer> <didSubject> <issuerAttributeIdUrl> <issuerProxyId> <statusIndex> <statusListIndex>
+
+payloadCTRevocableCredential: load assets/CTRevocableCredential.json
+set payloadCTRevocableCredential.issuer $1
+set payloadCTRevocableCredential.credentialSubject.id $2
+set payloadCTRevocableCredential.termsOfUse.id $3
+set payloadCTRevocableCredential.credentialSchema.id domain /trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM
+set payloadCTRevocableCredential.credentialStatus.id domain /trusted-issuers-registry/v4/issuers/ user.did /proxies/ $4 /credentials/status/ $5
+set payloadCTRevocableCredential.credentialStatus.statusListIndex $6
+set payloadCTRevocableCredential.credentialStatus.statusListCredential domain /trusted-issuers-registry/v4/issuers/ user.did /proxies/ $4 /credentials/status/ $5
+compute createVcJwt payloadCTRevocableCredential {} ES256

package/dist/scripts/issue_SelfAttestationSupportOffice

@@ -0,0 +1,11 @@
+# way of use:
+# ==> set domain https://api-test.ebsi.eu
+# ==> run issue_SelfAttestationSupportOffice <didIssuer> <reservedAttributeId>
+
+payloadVc: load assets/CredentialToAttestVerifiableAuthorisationForTrustChain.json
+set payloadVc.issuer $1
+set payloadVc.credentialSubject.id $1
+set payloadVc.credentialSubject.accreditedFor[0].schemaId domain /trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM
+set payloadVc.credentialSchema.id domain /trusted-schemas-registry/v2/schemas/zjVFNvbEBPAr3a724DttioZpgZmNr75BBtRzZqk7pkDe
+set payloadVc.credentialSubject.reservedAttributeId $2
+compute createVcJwt payloadVc {} ES256

package/dist/scripts/issue_VerifiableAccreditationToAccredit

@@ -0,0 +1,12 @@
+# way of use:
+# ==> set domain https://api-test.ebsi.eu
+# ==> run issue_VerifiableAccreditationToAccredit <didIssuer> <didSubject> <issuerAttributeIdUrl> <reservedAttributeId>
+
+payloadVcTAO: load assets/VerifiableAccreditationToAccredit.json
+set payloadVcTAO.issuer $1
+set payloadVcTAO.credentialSubject.id $2
+set payloadVcTAO.credentialSubject.accreditedFor.0.schemaId domain /trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM
+set payloadVcTAO.termsOfUse.0.id $3
+set payloadVcTAO.credentialSchema.id domain /trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM
+set payloadVcTAO.credentialSubject.reservedAttributeId $4
+compute createVcJwt payloadVcTAO {} ES256

package/dist/scripts/issue_VerifiableAccreditationToAttest

@@ -0,0 +1,12 @@
+# way of use:
+# ==> set domain https://api-test.ebsi.eu
+# ==> run issue_VerifiableAccreditationToAttest <didIssuer> <didSubject> <issuerAttributeIdUrl> <reservedAttributeId>
+
+payloadVcTI: load assets/VerifiableAccreditationToAttest.json
+set payloadVcTI.issuer $1
+set payloadVcTI.credentialSubject.id $2
+set payloadVcTI.credentialSubject.accreditedFor.0.schemaId domain /trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM
+set payloadVcTI.termsOfUse.id $3
+set payloadVcTI.credentialSchema.id domain /trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM
+set payloadVcTI.credentialSubject.reservedAttributeId $4
+compute createVcJwt payloadVcTI {} ES256

package/dist/scripts/issue_VerifiableAuthorisationForTrustChain

@@ -0,0 +1,11 @@
+# way of use:
+# ==> set domain https://api-test.ebsi.eu
+# ==> run issue_VerifiableAuthorisationForTrustChain <didIssuer> <didSubject> <issuerAttributeIdUrl> <reservedAttributeId>
+
+payloadVcRootTAO: load assets/VerifiableAuthorisationForTrustChain.json
+set payloadVcRootTAO.issuer $1
+set payloadVcRootTAO.credentialSubject.id $2
+set payloadVcRootTAO.termsOfUse.id $3
+set payloadVcRootTAO.credentialSchema.id domain /trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM
+set payloadVcRootTAO.credentialSubject.reservedAttributeId $4
+compute createVcJwt payloadVcRootTAO {} ES256

package/dist/scripts/issue_VerifiableAuthorisationToOnboard

@@ -0,0 +1,10 @@
+# way of use:
+# ==> set domain https://api-test.ebsi.eu
+# ==> run issue_VerifiableAuthorisationToOnboard <didIssuer> <didSubject> <issuerAttributeIdUrl>
+
+payloadVcOnboard: load assets/VerifiableAuthorisationToOnboard.json
+set payloadVcOnboard.issuer $1
+set payloadVcOnboard.credentialSubject.id $2
+set payloadVcOnboard.termsOfUse.id $3
+set payloadVcOnboard.credentialSchema.id domain /trusted-schemas-registry/v2/schemas/z3MgUFUkb722uq4x3dv5yAJmnNmzDFeK5UC8x83QoeLJM
+compute createVcJwt payloadVcOnboard {} ES256

package/dist/scripts/registerDidDocument_ES256K_ES256

@@ -0,0 +1,13 @@
+# register first part of DID document
+resAuthDIDRInvite: authorisation auth didr_invite_presentation ES256 $1
+using token resAuthDIDRInvite.access_token
+
+did insertDidDocument
+
+# complete DID document
+resAuthDIDRWrite: authorisation auth didr_write_presentation ES256K
+using token resAuthDIDRWrite.access_token
+
+did addVerificationMethod user.did ES256
+did addVerificationRelationship user.did authentication ES256
+did addVerificationRelationship user.did assertionMethod ES256

package/dist/scripts/wctv3/accreditAndAuthorize

@@ -0,0 +1,106 @@
+env test
+set domain https://api-test.ebsi.eu
+
+# create new issuer
+using user null
+using user
+using user ES256
+
+# request credential to onboard
+vcOnboard: conformance getCredential onboard
+set myIssuer user
+conformance check ti_request_verifiable_authorisation_to_onboard
+
+# register did document
+run registerDidDocument_ES256K_ES256 vcOnboard.vc
+conformance check ti_register_did
+
+# request VerifiableAccreditationToAttest (TI)
+vcTI: conformance getCredential ti
+conformance check ti_request_verifiable_accreditation_to_attest
+
+# register the credential for TI
+t: authorisation auth tir_invite_presentation ES256 vcTI.vc
+using token t.access_token
+tir setAttributeData myIssuer.did vcTI.reservedAttributeId vcTI.vc
+set vcTI.url https://api-test.ebsi.eu/trusted-issuers-registry/v4/issuers/ myIssuer.did /attributes/ vcTI.reservedAttributeId
+conformance check ti_register_verifiable_accreditation_to_attest
+
+# create a proxy
+conformance clientMockUpdateList 1 0 0
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+set proxyData {"prefix":"","headers":{},"testSuffix":"/credentials/status/1"}
+set proxyData.prefix myIssuer.clientId
+tir addIssuerProxy myIssuer.did proxyData
+proxies: tir get /issuers/ myIssuer.did /proxies
+set user.proxyId proxies.items.0.proxyId
+set user.accreditationUrl vcTI.url
+conformance clientMockInitiate
+
+# issue CTRevocable with credentialStatus StatusList2021
+conformance check ti_request_ctrevocable
+
+# Validate the issued credential details
+conformance check ti_validate_ctrevocable
+
+# revoke credential
+statusListIndex: compute statusListIndex did:ebsi:zy8jAhPDbhwKN74YFWAUzD5
+conformance clientMockUpdateList 1 statusListIndex 1
+conformance check ti_revoke_ctrevocable
+
+# request VerifiableAccreditationToAccredit (TAO)
+vcTAO: conformance getCredential tao
+conformance check tao_request_verifiable_accreditation_to_accredit
+
+# register the credential for TAO
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+tir setAttributeData myIssuer.did vcTAO.reservedAttributeId vcTAO.vc
+set vcTAO.url https://api-test.ebsi.eu/trusted-issuers-registry/v4/issuers/ myIssuer.did /attributes/ vcTAO.reservedAttributeId
+set user.accreditationUrl vcTAO.url
+conformance clientMockInitiate
+conformance check tao_register_verifiable_accreditation_to_accredit
+
+# request credential to onboard sub-account
+conformance check tao_request_verifiable_authorisation_to_onboard_subaccount
+
+# validate credential and register sub-account
+conformance check tao_validate_verifiable_authorisation_to_onboard_subaccount
+
+# request VerifiableAccreditationToAttest for sub-account (TI)
+conformance check tao_request_verifiable_accreditation_to_attest_subaccount
+
+# validate and register credential for sub-account
+conformance check tao_validate_verifiable_accreditation_to_attest_subaccount
+
+# request VerifiableAccreditationToAccredit for sub-account (TAO)
+conformance check tao_request_verifiable_accreditation_to_accredit_subaccount
+
+# validate and register credential for sub-account
+conformance check tao_validate_verifiable_accreditation_to_accredit_subaccount
+
+# revoke credentials issued to subaccount
+subaccount: compute subaccountDid myIssuer.did
+attributes: tir get /issuers/ subaccount /attributes
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+tir setAttributeMetadata subaccount attributes.items.0.id revoked myIssuer.did vcTAO.reservedAttributeId
+tir setAttributeMetadata subaccount attributes.items.1.id revoked myIssuer.did vcTAO.reservedAttributeId
+conformance check tao_revoke_rights_subaccount
+
+# request VerifiableAuthorisationForTrustChain (Root TAO)
+vcRootTAO: conformance getCredential roottao ES256 vcOnboard.vc
+conformance check rtao_request_verifiableauthorisationfortrustchain
+
+# register the credential for RootTAO
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+tir setAttributeData myIssuer.did vcRootTAO.reservedAttributeId vcRootTAO.vc
+conformance check rtao_register_verifiableauthorisationfortrustchain
+
+# request CTAAQualificationCredential
+ctaaQualification: conformance getCredential qualification
+conformance check request_ctaaqualificationcredential
+
+# ACCREDIT AND AUTHORIZE TESTS FINISHED!!

package/dist/scripts/wctv3/holderWallet

@@ -0,0 +1,29 @@
+using user ES256 did2
+
+c0: conformance holder CTWalletCrossInTime inTime
+conformance check ct_wallet_cross_in_time
+
+c1: conformance holder CTWalletCrossDeferred deferred
+conformance check ct_wallet_cross_deferred
+
+c2: conformance holder CTWalletCrossPreAuthorised preAuthorised
+conformance check ct_wallet_cross_pre_authorised
+
+c3: conformance holder CTWalletSameInTime inTime
+conformance check ct_wallet_same_in_time
+
+c4: conformance holder CTWalletSameDeferred deferred
+conformance check ct_wallet_same_deferred
+
+c5: conformance holder CTWalletSamePreAuthorised preAuthorised
+conformance check ct_wallet_same_pre_authorised
+
+set credentials []
+set credentials.0 c0
+set credentials.1 c1
+set credentials.2 c2
+set credentials.3 c3
+set credentials.4 c4
+set credentials.5 c5
+conformance holder CTWalletQualificationCredential inTime ES256 credentials
+conformance check request_ct_wallet_qualification_credential

package/dist/scripts/wctv3/issueToHolder

@@ -0,0 +1,27 @@
+using user ES256 did2
+set user.issuerState issuer-state
+conformance clientMockInitiate
+
+jwks: conformance get /issuer-mock/jwks
+issuerMockDidNP: compute did2 jwks.keys.0
+
+set preAuthPayload {"authorization_details":[{"type":"openid_credential","format":"jwt_vc","types":["VerifiableCredential","VerifiableAttestation","CTWalletSamePreAuthorised"],"locations":[""]}]}
+set preAuthPayload.iss user.clientId
+set preAuthPayload.sub issuerMockDidNP
+set preAuthPayload.client_id issuerMockDidNP
+set preAuthPayload.authorization_details[0].locations[0] user.clientId
+set preAuthHeaders {}
+set preAuthHeaders.kid user.keys.ES256.id
+preAuthorizedCode: compute signJwt preAuthPayload ES256 preAuthHeaders
+userPin: compute userPin issuerMockDidNP
+
+conformance check issue_to_holder_initiate_ct_wallet_same_in_time
+conformance check issue_to_holder_validate_ct_wallet_same_in_time
+conformance check issue_to_holder_initiate_ct_wallet_same_deferred
+conformance check issue_to_holder_validate_ct_wallet_same_deferred
+conformance check issue_to_holder_initiate_ct_wallet_same_pre_authorised preAuthorizedCode userPin
+conformance check issue_to_holder_validate_ct_wallet_same_pre_authorised preAuthorizedCode userPin
+
+compute wait 11
+conformance holder CTIssueQualificationCredential inTime ES256 empty skip-credential-offer
+conformance check request_ct_issue_to_holder_qualification_credential