@eudiplo/cli 9.0.0 → 9.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/config/portability/migrations.spec.js +3 -2
- package/dist/commands/config/portability/migrations.spec.js.map +1 -1
- package/dist/commands/config/validate/index.d.ts.map +1 -1
- package/dist/commands/config/validate/index.js +2 -2
- package/dist/commands/config/validate/index.js.map +1 -1
- package/dist/commands/deployment/index.d.ts.map +1 -1
- package/dist/commands/deployment/index.js +8 -3
- package/dist/commands/deployment/index.js.map +1 -1
- package/dist/commands/deployment/pass-through.d.ts +15 -0
- package/dist/commands/deployment/pass-through.d.ts.map +1 -0
- package/dist/commands/deployment/pass-through.js +52 -0
- package/dist/commands/deployment/pass-through.js.map +1 -0
- package/dist/commands/upgrade/action.d.ts.map +1 -1
- package/dist/commands/upgrade/action.js +5 -2
- package/dist/commands/upgrade/action.js.map +1 -1
- package/dist/index.js +930 -140
- package/dist/services/compose-args.d.ts +1 -1
- package/dist/services/compose-args.d.ts.map +1 -1
- package/dist/services/compose-args.js +4 -2
- package/dist/services/compose-args.js.map +1 -1
- package/dist/services/compose-upgrade.d.ts +2 -0
- package/dist/services/compose-upgrade.d.ts.map +1 -1
- package/dist/services/compose-upgrade.js +5 -0
- package/dist/services/compose-upgrade.js.map +1 -1
- package/dist/services/container-state.d.ts +4 -1
- package/dist/services/container-state.d.ts.map +1 -1
- package/dist/services/container-state.js +21 -8
- package/dist/services/container-state.js.map +1 -1
- package/dist/services/diagnostics.d.ts.map +1 -1
- package/dist/services/diagnostics.js +10 -0
- package/dist/services/diagnostics.js.map +1 -1
- package/package.json +5 -5
- package/templates/demo-config/presentation/pid.json +1 -2
- package/templates/demo-config.manifest.json +1 -3
- package/templates/docker-compose.yml +11 -6
- package/templates/schemas/IssuanceConfig.schema.json +20 -0
- package/templates/schemas/IssuanceConfigFile.schema.json +676 -1
- package/templates/demo-config/attribute-providers/claims-provider.json +0 -15
- package/templates/demo-config/webhook-endpoints/notification.json +0 -15
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
"properties": {
|
|
10
10
|
"$schema": {
|
|
11
11
|
"type": "string",
|
|
12
|
-
"const": "https://eudiplo.dev/schemas/
|
|
12
|
+
"const": "https://eudiplo.dev/schemas/v3/IssuanceConfigFile.schema.json"
|
|
13
13
|
},
|
|
14
14
|
"metadata": {
|
|
15
15
|
"type": "object",
|
|
@@ -701,6 +701,681 @@
|
|
|
701
701
|
"title": "IssuanceConfig"
|
|
702
702
|
}
|
|
703
703
|
}
|
|
704
|
+
},
|
|
705
|
+
{
|
|
706
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
707
|
+
"$id": "https://eudiplo.dev/schemas/v2/IssuanceConfigFile.schema.json",
|
|
708
|
+
"title": "IssuanceConfigFile",
|
|
709
|
+
"type": "object",
|
|
710
|
+
"properties": {
|
|
711
|
+
"$schema": {
|
|
712
|
+
"type": "string",
|
|
713
|
+
"const": "https://eudiplo.dev/schemas/v2/IssuanceConfigFile.schema.json"
|
|
714
|
+
},
|
|
715
|
+
"metadata": {
|
|
716
|
+
"type": "object",
|
|
717
|
+
"properties": {
|
|
718
|
+
"generation": {
|
|
719
|
+
"type": "integer",
|
|
720
|
+
"minimum": 1,
|
|
721
|
+
"description": "Monotonically increasing configuration generation."
|
|
722
|
+
},
|
|
723
|
+
"ownership": {
|
|
724
|
+
"type": "string",
|
|
725
|
+
"enum": [
|
|
726
|
+
"unmanaged",
|
|
727
|
+
"file-managed"
|
|
728
|
+
],
|
|
729
|
+
"description": "Requested ownership recorded when the document is applied."
|
|
730
|
+
}
|
|
731
|
+
},
|
|
732
|
+
"additionalProperties": false
|
|
733
|
+
},
|
|
734
|
+
"spec": {
|
|
735
|
+
"$ref": "#/$defs/IssuanceConfig"
|
|
736
|
+
}
|
|
737
|
+
},
|
|
738
|
+
"required": [
|
|
739
|
+
"$schema",
|
|
740
|
+
"spec"
|
|
741
|
+
],
|
|
742
|
+
"additionalProperties": false,
|
|
743
|
+
"$defs": {
|
|
744
|
+
"IssuanceConfig": {
|
|
745
|
+
"type": "object",
|
|
746
|
+
"properties": {
|
|
747
|
+
"batchSize": {
|
|
748
|
+
"description": "Optional issuance batch size.",
|
|
749
|
+
"type": "integer",
|
|
750
|
+
"minimum": 1,
|
|
751
|
+
"maximum": 9007199254740991
|
|
752
|
+
},
|
|
753
|
+
"dPopRequired": {
|
|
754
|
+
"description": "Require DPoP proofs for issuance endpoints.",
|
|
755
|
+
"type": "boolean"
|
|
756
|
+
},
|
|
757
|
+
"walletAttestationRequired": {
|
|
758
|
+
"description": "Default wallet attestation requirement for managed authorization servers.",
|
|
759
|
+
"type": "boolean"
|
|
760
|
+
},
|
|
761
|
+
"walletProviderTrustLists": {
|
|
762
|
+
"description": "Shared wallet provider trust lists for key attestations and default authorization server wallet authentication.",
|
|
763
|
+
"type": "array",
|
|
764
|
+
"items": {
|
|
765
|
+
"type": "object",
|
|
766
|
+
"properties": {
|
|
767
|
+
"trustListId": {
|
|
768
|
+
"type": "string",
|
|
769
|
+
"minLength": 1
|
|
770
|
+
},
|
|
771
|
+
"url": {
|
|
772
|
+
"description": "URL of the wallet provider trust list.",
|
|
773
|
+
"type": "string",
|
|
774
|
+
"format": "uri"
|
|
775
|
+
},
|
|
776
|
+
"verifierKey": {
|
|
777
|
+
"description": "Optional verifier key material used for trust list verification.",
|
|
778
|
+
"type": "object",
|
|
779
|
+
"propertyNames": {
|
|
780
|
+
"type": "string"
|
|
781
|
+
},
|
|
782
|
+
"additionalProperties": {}
|
|
783
|
+
},
|
|
784
|
+
"verifierX509Der": {
|
|
785
|
+
"description": "Optional verifier certificate in DER/base64 form.",
|
|
786
|
+
"type": "string"
|
|
787
|
+
}
|
|
788
|
+
},
|
|
789
|
+
"additionalProperties": false
|
|
790
|
+
}
|
|
791
|
+
},
|
|
792
|
+
"signingKeyId": {
|
|
793
|
+
"description": "Default signing key chain id for credential issuance.",
|
|
794
|
+
"type": "string",
|
|
795
|
+
"minLength": 1
|
|
796
|
+
},
|
|
797
|
+
"authorizationServers": {
|
|
798
|
+
"minItems": 1,
|
|
799
|
+
"type": "array",
|
|
800
|
+
"items": {
|
|
801
|
+
"oneOf": [
|
|
802
|
+
{
|
|
803
|
+
"type": "object",
|
|
804
|
+
"properties": {
|
|
805
|
+
"type": {
|
|
806
|
+
"type": "string",
|
|
807
|
+
"const": "external",
|
|
808
|
+
"description": "Use an externally managed authorization server."
|
|
809
|
+
},
|
|
810
|
+
"id": {
|
|
811
|
+
"type": "string",
|
|
812
|
+
"minLength": 1,
|
|
813
|
+
"description": "Authorization server identifier."
|
|
814
|
+
},
|
|
815
|
+
"issuer": {
|
|
816
|
+
"type": "string",
|
|
817
|
+
"format": "uri",
|
|
818
|
+
"description": "Issuer URL for the external authorization server."
|
|
819
|
+
},
|
|
820
|
+
"sessionBinding": {
|
|
821
|
+
"description": "Explicit mapping from an external access-token claim to an existing issuance session.",
|
|
822
|
+
"type": "object",
|
|
823
|
+
"properties": {
|
|
824
|
+
"method": {
|
|
825
|
+
"type": "string",
|
|
826
|
+
"const": "access_token_claim",
|
|
827
|
+
"description": "Read the correlation value from a configured access-token claim."
|
|
828
|
+
},
|
|
829
|
+
"claim": {
|
|
830
|
+
"type": "string",
|
|
831
|
+
"minLength": 1,
|
|
832
|
+
"description": "Claim name that contains the issuance-session correlation value."
|
|
833
|
+
}
|
|
834
|
+
},
|
|
835
|
+
"required": [
|
|
836
|
+
"method",
|
|
837
|
+
"claim"
|
|
838
|
+
],
|
|
839
|
+
"additionalProperties": false
|
|
840
|
+
},
|
|
841
|
+
"label": {
|
|
842
|
+
"description": "Optional display label for UI selection.",
|
|
843
|
+
"type": "string"
|
|
844
|
+
},
|
|
845
|
+
"enabled": {
|
|
846
|
+
"description": "Whether this authorization server entry is enabled.",
|
|
847
|
+
"type": "boolean"
|
|
848
|
+
}
|
|
849
|
+
},
|
|
850
|
+
"required": [
|
|
851
|
+
"type",
|
|
852
|
+
"id",
|
|
853
|
+
"issuer"
|
|
854
|
+
],
|
|
855
|
+
"additionalProperties": false
|
|
856
|
+
},
|
|
857
|
+
{
|
|
858
|
+
"type": "object",
|
|
859
|
+
"properties": {
|
|
860
|
+
"type": {
|
|
861
|
+
"type": "string",
|
|
862
|
+
"const": "oid4vp",
|
|
863
|
+
"description": "Use OID4VP-based authorization server chaining."
|
|
864
|
+
},
|
|
865
|
+
"id": {
|
|
866
|
+
"type": "string",
|
|
867
|
+
"minLength": 1,
|
|
868
|
+
"description": "Authorization server identifier."
|
|
869
|
+
},
|
|
870
|
+
"presentationConfigId": {
|
|
871
|
+
"type": "string",
|
|
872
|
+
"minLength": 1,
|
|
873
|
+
"description": "Presentation configuration id used during authorization."
|
|
874
|
+
},
|
|
875
|
+
"immediateWalletRedirect": {
|
|
876
|
+
"description": "Redirect wallets immediately after authorization response creation.",
|
|
877
|
+
"type": "boolean"
|
|
878
|
+
},
|
|
879
|
+
"token": {
|
|
880
|
+
"description": "Optional token issuance settings.",
|
|
881
|
+
"type": "object",
|
|
882
|
+
"properties": {
|
|
883
|
+
"lifetimeSeconds": {
|
|
884
|
+
"description": "Access token lifetime in seconds.",
|
|
885
|
+
"type": "number",
|
|
886
|
+
"minimum": 60
|
|
887
|
+
},
|
|
888
|
+
"signingKeyId": {
|
|
889
|
+
"description": "Optional key chain id used to sign issued tokens.",
|
|
890
|
+
"type": "string",
|
|
891
|
+
"minLength": 1
|
|
892
|
+
},
|
|
893
|
+
"refreshTokenEnabled": {
|
|
894
|
+
"description": "Enable issuing refresh tokens.",
|
|
895
|
+
"type": "boolean"
|
|
896
|
+
},
|
|
897
|
+
"refreshTokenExpiresInSeconds": {
|
|
898
|
+
"description": "Refresh token lifetime in seconds.",
|
|
899
|
+
"type": "number",
|
|
900
|
+
"minimum": 60
|
|
901
|
+
}
|
|
902
|
+
},
|
|
903
|
+
"additionalProperties": false
|
|
904
|
+
},
|
|
905
|
+
"requireDPoP": {
|
|
906
|
+
"description": "Require DPoP proofs for token/credential requests.",
|
|
907
|
+
"type": "boolean"
|
|
908
|
+
},
|
|
909
|
+
"walletAttestationRequired": {
|
|
910
|
+
"description": "Require wallet attestation for this authorization server.",
|
|
911
|
+
"type": "boolean"
|
|
912
|
+
},
|
|
913
|
+
"walletProviderTrustLists": {
|
|
914
|
+
"description": "Optional wallet provider trust list references for this authorization server.",
|
|
915
|
+
"type": "array",
|
|
916
|
+
"items": {
|
|
917
|
+
"type": "object",
|
|
918
|
+
"properties": {
|
|
919
|
+
"trustListId": {
|
|
920
|
+
"type": "string",
|
|
921
|
+
"minLength": 1
|
|
922
|
+
},
|
|
923
|
+
"url": {
|
|
924
|
+
"description": "URL of the wallet provider trust list.",
|
|
925
|
+
"type": "string",
|
|
926
|
+
"format": "uri"
|
|
927
|
+
},
|
|
928
|
+
"verifierKey": {
|
|
929
|
+
"description": "Optional verifier key material used for trust list verification.",
|
|
930
|
+
"type": "object",
|
|
931
|
+
"propertyNames": {
|
|
932
|
+
"type": "string"
|
|
933
|
+
},
|
|
934
|
+
"additionalProperties": {}
|
|
935
|
+
},
|
|
936
|
+
"verifierX509Der": {
|
|
937
|
+
"description": "Optional verifier certificate in DER/base64 form.",
|
|
938
|
+
"type": "string"
|
|
939
|
+
}
|
|
940
|
+
},
|
|
941
|
+
"additionalProperties": false
|
|
942
|
+
}
|
|
943
|
+
},
|
|
944
|
+
"label": {
|
|
945
|
+
"description": "Optional display label for UI selection.",
|
|
946
|
+
"type": "string"
|
|
947
|
+
},
|
|
948
|
+
"enabled": {
|
|
949
|
+
"description": "Whether this authorization server entry is enabled.",
|
|
950
|
+
"type": "boolean"
|
|
951
|
+
}
|
|
952
|
+
},
|
|
953
|
+
"required": [
|
|
954
|
+
"type",
|
|
955
|
+
"id",
|
|
956
|
+
"presentationConfigId"
|
|
957
|
+
],
|
|
958
|
+
"additionalProperties": false
|
|
959
|
+
},
|
|
960
|
+
{
|
|
961
|
+
"type": "object",
|
|
962
|
+
"properties": {
|
|
963
|
+
"type": {
|
|
964
|
+
"type": "string",
|
|
965
|
+
"const": "chained",
|
|
966
|
+
"description": "Use upstream OIDC as authorization source."
|
|
967
|
+
},
|
|
968
|
+
"id": {
|
|
969
|
+
"type": "string",
|
|
970
|
+
"minLength": 1,
|
|
971
|
+
"description": "Authorization server identifier."
|
|
972
|
+
},
|
|
973
|
+
"upstream": {
|
|
974
|
+
"type": "object",
|
|
975
|
+
"properties": {
|
|
976
|
+
"issuer": {
|
|
977
|
+
"type": "string",
|
|
978
|
+
"format": "uri",
|
|
979
|
+
"description": "Upstream OIDC issuer URL."
|
|
980
|
+
},
|
|
981
|
+
"clientId": {
|
|
982
|
+
"type": "string",
|
|
983
|
+
"minLength": 1,
|
|
984
|
+
"description": "Client id for upstream OIDC authentication."
|
|
985
|
+
},
|
|
986
|
+
"clientSecret": {
|
|
987
|
+
"description": "Optional client secret for upstream OIDC authentication.",
|
|
988
|
+
"type": "string",
|
|
989
|
+
"minLength": 1
|
|
990
|
+
},
|
|
991
|
+
"scopes": {
|
|
992
|
+
"description": "Optional scopes requested from the upstream issuer.",
|
|
993
|
+
"type": "array",
|
|
994
|
+
"items": {
|
|
995
|
+
"type": "string",
|
|
996
|
+
"minLength": 1
|
|
997
|
+
}
|
|
998
|
+
}
|
|
999
|
+
},
|
|
1000
|
+
"required": [
|
|
1001
|
+
"issuer",
|
|
1002
|
+
"clientId"
|
|
1003
|
+
],
|
|
1004
|
+
"additionalProperties": false,
|
|
1005
|
+
"description": "Upstream OIDC connection settings."
|
|
1006
|
+
},
|
|
1007
|
+
"token": {
|
|
1008
|
+
"description": "Optional token issuance settings.",
|
|
1009
|
+
"type": "object",
|
|
1010
|
+
"properties": {
|
|
1011
|
+
"lifetimeSeconds": {
|
|
1012
|
+
"description": "Access token lifetime in seconds.",
|
|
1013
|
+
"type": "number",
|
|
1014
|
+
"minimum": 60
|
|
1015
|
+
},
|
|
1016
|
+
"signingKeyId": {
|
|
1017
|
+
"description": "Optional key chain id used to sign issued tokens.",
|
|
1018
|
+
"type": "string",
|
|
1019
|
+
"minLength": 1
|
|
1020
|
+
},
|
|
1021
|
+
"refreshTokenEnabled": {
|
|
1022
|
+
"description": "Enable issuing refresh tokens.",
|
|
1023
|
+
"type": "boolean"
|
|
1024
|
+
},
|
|
1025
|
+
"refreshTokenExpiresInSeconds": {
|
|
1026
|
+
"description": "Refresh token lifetime in seconds.",
|
|
1027
|
+
"type": "number",
|
|
1028
|
+
"minimum": 60
|
|
1029
|
+
}
|
|
1030
|
+
},
|
|
1031
|
+
"additionalProperties": false
|
|
1032
|
+
},
|
|
1033
|
+
"requireDPoP": {
|
|
1034
|
+
"description": "Require DPoP proofs for token/credential requests.",
|
|
1035
|
+
"type": "boolean"
|
|
1036
|
+
},
|
|
1037
|
+
"walletAttestationRequired": {
|
|
1038
|
+
"description": "Require wallet attestation for this authorization server.",
|
|
1039
|
+
"type": "boolean"
|
|
1040
|
+
},
|
|
1041
|
+
"walletProviderTrustLists": {
|
|
1042
|
+
"description": "Optional wallet provider trust list references for this authorization server.",
|
|
1043
|
+
"type": "array",
|
|
1044
|
+
"items": {
|
|
1045
|
+
"type": "object",
|
|
1046
|
+
"properties": {
|
|
1047
|
+
"trustListId": {
|
|
1048
|
+
"type": "string",
|
|
1049
|
+
"minLength": 1
|
|
1050
|
+
},
|
|
1051
|
+
"url": {
|
|
1052
|
+
"description": "URL of the wallet provider trust list.",
|
|
1053
|
+
"type": "string",
|
|
1054
|
+
"format": "uri"
|
|
1055
|
+
},
|
|
1056
|
+
"verifierKey": {
|
|
1057
|
+
"description": "Optional verifier key material used for trust list verification.",
|
|
1058
|
+
"type": "object",
|
|
1059
|
+
"propertyNames": {
|
|
1060
|
+
"type": "string"
|
|
1061
|
+
},
|
|
1062
|
+
"additionalProperties": {}
|
|
1063
|
+
},
|
|
1064
|
+
"verifierX509Der": {
|
|
1065
|
+
"description": "Optional verifier certificate in DER/base64 form.",
|
|
1066
|
+
"type": "string"
|
|
1067
|
+
}
|
|
1068
|
+
},
|
|
1069
|
+
"additionalProperties": false
|
|
1070
|
+
}
|
|
1071
|
+
},
|
|
1072
|
+
"label": {
|
|
1073
|
+
"description": "Optional display label for UI selection.",
|
|
1074
|
+
"type": "string"
|
|
1075
|
+
},
|
|
1076
|
+
"enabled": {
|
|
1077
|
+
"description": "Whether this authorization server entry is enabled.",
|
|
1078
|
+
"type": "boolean"
|
|
1079
|
+
}
|
|
1080
|
+
},
|
|
1081
|
+
"required": [
|
|
1082
|
+
"type",
|
|
1083
|
+
"id",
|
|
1084
|
+
"upstream"
|
|
1085
|
+
],
|
|
1086
|
+
"additionalProperties": false
|
|
1087
|
+
},
|
|
1088
|
+
{
|
|
1089
|
+
"type": "object",
|
|
1090
|
+
"properties": {
|
|
1091
|
+
"type": {
|
|
1092
|
+
"type": "string",
|
|
1093
|
+
"const": "built-in",
|
|
1094
|
+
"description": "Use EUDIPLO built-in authorization server."
|
|
1095
|
+
},
|
|
1096
|
+
"id": {
|
|
1097
|
+
"type": "string",
|
|
1098
|
+
"minLength": 1,
|
|
1099
|
+
"description": "Authorization server identifier."
|
|
1100
|
+
},
|
|
1101
|
+
"token": {
|
|
1102
|
+
"description": "Optional token issuance settings.",
|
|
1103
|
+
"type": "object",
|
|
1104
|
+
"properties": {
|
|
1105
|
+
"lifetimeSeconds": {
|
|
1106
|
+
"description": "Access token lifetime in seconds.",
|
|
1107
|
+
"type": "number",
|
|
1108
|
+
"minimum": 60
|
|
1109
|
+
},
|
|
1110
|
+
"signingKeyId": {
|
|
1111
|
+
"description": "Optional key chain id used to sign issued tokens.",
|
|
1112
|
+
"type": "string",
|
|
1113
|
+
"minLength": 1
|
|
1114
|
+
},
|
|
1115
|
+
"refreshTokenEnabled": {
|
|
1116
|
+
"description": "Enable issuing refresh tokens.",
|
|
1117
|
+
"type": "boolean"
|
|
1118
|
+
},
|
|
1119
|
+
"refreshTokenExpiresInSeconds": {
|
|
1120
|
+
"description": "Refresh token lifetime in seconds.",
|
|
1121
|
+
"type": "number",
|
|
1122
|
+
"minimum": 60
|
|
1123
|
+
}
|
|
1124
|
+
},
|
|
1125
|
+
"additionalProperties": false
|
|
1126
|
+
},
|
|
1127
|
+
"requireDPoP": {
|
|
1128
|
+
"description": "Require DPoP proofs for token/credential requests.",
|
|
1129
|
+
"type": "boolean"
|
|
1130
|
+
},
|
|
1131
|
+
"walletAttestationRequired": {
|
|
1132
|
+
"description": "Require wallet attestation for this authorization server.",
|
|
1133
|
+
"type": "boolean"
|
|
1134
|
+
},
|
|
1135
|
+
"walletProviderTrustLists": {
|
|
1136
|
+
"description": "Optional wallet provider trust list references for this authorization server.",
|
|
1137
|
+
"type": "array",
|
|
1138
|
+
"items": {
|
|
1139
|
+
"type": "object",
|
|
1140
|
+
"properties": {
|
|
1141
|
+
"trustListId": {
|
|
1142
|
+
"type": "string",
|
|
1143
|
+
"minLength": 1
|
|
1144
|
+
},
|
|
1145
|
+
"url": {
|
|
1146
|
+
"description": "URL of the wallet provider trust list.",
|
|
1147
|
+
"type": "string",
|
|
1148
|
+
"format": "uri"
|
|
1149
|
+
},
|
|
1150
|
+
"verifierKey": {
|
|
1151
|
+
"description": "Optional verifier key material used for trust list verification.",
|
|
1152
|
+
"type": "object",
|
|
1153
|
+
"propertyNames": {
|
|
1154
|
+
"type": "string"
|
|
1155
|
+
},
|
|
1156
|
+
"additionalProperties": {}
|
|
1157
|
+
},
|
|
1158
|
+
"verifierX509Der": {
|
|
1159
|
+
"description": "Optional verifier certificate in DER/base64 form.",
|
|
1160
|
+
"type": "string"
|
|
1161
|
+
}
|
|
1162
|
+
},
|
|
1163
|
+
"additionalProperties": false
|
|
1164
|
+
}
|
|
1165
|
+
},
|
|
1166
|
+
"label": {
|
|
1167
|
+
"description": "Optional display label for UI selection.",
|
|
1168
|
+
"type": "string"
|
|
1169
|
+
},
|
|
1170
|
+
"enabled": {
|
|
1171
|
+
"description": "Whether this authorization server entry is enabled.",
|
|
1172
|
+
"type": "boolean"
|
|
1173
|
+
}
|
|
1174
|
+
},
|
|
1175
|
+
"required": [
|
|
1176
|
+
"type",
|
|
1177
|
+
"id"
|
|
1178
|
+
],
|
|
1179
|
+
"additionalProperties": false
|
|
1180
|
+
}
|
|
1181
|
+
],
|
|
1182
|
+
"description": "Supported authorization server configurations."
|
|
1183
|
+
},
|
|
1184
|
+
"description": "Configured authorization server entries."
|
|
1185
|
+
},
|
|
1186
|
+
"federation": {
|
|
1187
|
+
"description": "Optional OpenID Federation settings.",
|
|
1188
|
+
"anyOf": [
|
|
1189
|
+
{
|
|
1190
|
+
"type": "object",
|
|
1191
|
+
"properties": {
|
|
1192
|
+
"role": {
|
|
1193
|
+
"description": "Federation role for this issuer.",
|
|
1194
|
+
"type": "string",
|
|
1195
|
+
"enum": [
|
|
1196
|
+
"trust_anchor",
|
|
1197
|
+
"intermediate",
|
|
1198
|
+
"leaf"
|
|
1199
|
+
]
|
|
1200
|
+
},
|
|
1201
|
+
"mode": {
|
|
1202
|
+
"description": "Federation operation mode.",
|
|
1203
|
+
"type": "string",
|
|
1204
|
+
"enum": [
|
|
1205
|
+
"federation-only",
|
|
1206
|
+
"hybrid"
|
|
1207
|
+
]
|
|
1208
|
+
},
|
|
1209
|
+
"entityId": {
|
|
1210
|
+
"description": "Optional local federation entity id.",
|
|
1211
|
+
"type": "string"
|
|
1212
|
+
},
|
|
1213
|
+
"enforceSigningPolicy": {
|
|
1214
|
+
"description": "Enforce strict signing policy checks.",
|
|
1215
|
+
"type": "boolean"
|
|
1216
|
+
},
|
|
1217
|
+
"cacheTtlSeconds": {
|
|
1218
|
+
"description": "Cache time-to-live for federation metadata in seconds.",
|
|
1219
|
+
"type": "integer",
|
|
1220
|
+
"minimum": 1,
|
|
1221
|
+
"maximum": 9007199254740991
|
|
1222
|
+
},
|
|
1223
|
+
"trustAnchors": {
|
|
1224
|
+
"type": "array",
|
|
1225
|
+
"items": {
|
|
1226
|
+
"type": "object",
|
|
1227
|
+
"properties": {
|
|
1228
|
+
"entityId": {
|
|
1229
|
+
"type": "string",
|
|
1230
|
+
"minLength": 1,
|
|
1231
|
+
"description": "Federation trust anchor entity id."
|
|
1232
|
+
},
|
|
1233
|
+
"entityConfigurationUri": {
|
|
1234
|
+
"type": "string",
|
|
1235
|
+
"format": "uri",
|
|
1236
|
+
"description": "Entity configuration URI for the trust anchor."
|
|
1237
|
+
}
|
|
1238
|
+
},
|
|
1239
|
+
"required": [
|
|
1240
|
+
"entityId",
|
|
1241
|
+
"entityConfigurationUri"
|
|
1242
|
+
],
|
|
1243
|
+
"additionalProperties": false
|
|
1244
|
+
},
|
|
1245
|
+
"description": "Federation trust anchors."
|
|
1246
|
+
}
|
|
1247
|
+
},
|
|
1248
|
+
"required": [
|
|
1249
|
+
"trustAnchors"
|
|
1250
|
+
],
|
|
1251
|
+
"additionalProperties": false
|
|
1252
|
+
},
|
|
1253
|
+
{
|
|
1254
|
+
"type": "null"
|
|
1255
|
+
}
|
|
1256
|
+
]
|
|
1257
|
+
},
|
|
1258
|
+
"registrationCertificate": {
|
|
1259
|
+
"description": "Optional registration certificate settings.",
|
|
1260
|
+
"anyOf": [
|
|
1261
|
+
{
|
|
1262
|
+
"type": "object",
|
|
1263
|
+
"properties": {
|
|
1264
|
+
"enabled": {
|
|
1265
|
+
"description": "Enable issuer registration certificate support.",
|
|
1266
|
+
"type": "boolean"
|
|
1267
|
+
},
|
|
1268
|
+
"mode": {
|
|
1269
|
+
"description": "How registration certificate data is provided.",
|
|
1270
|
+
"type": "string",
|
|
1271
|
+
"enum": [
|
|
1272
|
+
"import",
|
|
1273
|
+
"generate"
|
|
1274
|
+
]
|
|
1275
|
+
},
|
|
1276
|
+
"jwt": {
|
|
1277
|
+
"description": "Optional registration certificate JWT when using import mode.",
|
|
1278
|
+
"type": "string"
|
|
1279
|
+
},
|
|
1280
|
+
"privacyPolicy": {
|
|
1281
|
+
"description": "Optional privacy policy URI.",
|
|
1282
|
+
"type": "string"
|
|
1283
|
+
},
|
|
1284
|
+
"supportUri": {
|
|
1285
|
+
"description": "Optional support URI.",
|
|
1286
|
+
"type": "string"
|
|
1287
|
+
}
|
|
1288
|
+
},
|
|
1289
|
+
"additionalProperties": false
|
|
1290
|
+
},
|
|
1291
|
+
{
|
|
1292
|
+
"type": "null"
|
|
1293
|
+
}
|
|
1294
|
+
]
|
|
1295
|
+
},
|
|
1296
|
+
"display": {
|
|
1297
|
+
"description": "Localized issuer metadata shown to wallets.",
|
|
1298
|
+
"type": "array",
|
|
1299
|
+
"items": {
|
|
1300
|
+
"type": "object",
|
|
1301
|
+
"properties": {
|
|
1302
|
+
"name": {
|
|
1303
|
+
"description": "Issuer display name.",
|
|
1304
|
+
"type": "string"
|
|
1305
|
+
},
|
|
1306
|
+
"locale": {
|
|
1307
|
+
"description": "Locale tag for this display entry.",
|
|
1308
|
+
"type": "string"
|
|
1309
|
+
},
|
|
1310
|
+
"logo": {
|
|
1311
|
+
"description": "Optional issuer logo metadata.",
|
|
1312
|
+
"type": "object",
|
|
1313
|
+
"properties": {
|
|
1314
|
+
"uri": {
|
|
1315
|
+
"type": "string",
|
|
1316
|
+
"minLength": 1,
|
|
1317
|
+
"description": "Logo URI."
|
|
1318
|
+
},
|
|
1319
|
+
"alt_text": {
|
|
1320
|
+
"description": "Optional localized alternative text.",
|
|
1321
|
+
"type": "string"
|
|
1322
|
+
}
|
|
1323
|
+
},
|
|
1324
|
+
"required": [
|
|
1325
|
+
"uri"
|
|
1326
|
+
],
|
|
1327
|
+
"additionalProperties": {}
|
|
1328
|
+
}
|
|
1329
|
+
},
|
|
1330
|
+
"additionalProperties": {}
|
|
1331
|
+
}
|
|
1332
|
+
},
|
|
1333
|
+
"notificationEndpointEnabled": {
|
|
1334
|
+
"description": "Whether the OID4VCI notification endpoint is exposed for this issuance configuration.",
|
|
1335
|
+
"type": "boolean"
|
|
1336
|
+
},
|
|
1337
|
+
"credentialResponseEncryption": {
|
|
1338
|
+
"description": "Enable encrypted credential responses.",
|
|
1339
|
+
"type": "boolean"
|
|
1340
|
+
},
|
|
1341
|
+
"credentialRequestEncryption": {
|
|
1342
|
+
"description": "Require encrypted credential requests.",
|
|
1343
|
+
"type": "boolean"
|
|
1344
|
+
},
|
|
1345
|
+
"txCodeMaxAttempts": {
|
|
1346
|
+
"description": "Maximum verification attempts for transaction codes. Null resets to defaults.",
|
|
1347
|
+
"anyOf": [
|
|
1348
|
+
{
|
|
1349
|
+
"type": "integer",
|
|
1350
|
+
"minimum": 1,
|
|
1351
|
+
"maximum": 9007199254740991
|
|
1352
|
+
},
|
|
1353
|
+
{
|
|
1354
|
+
"type": "null"
|
|
1355
|
+
}
|
|
1356
|
+
]
|
|
1357
|
+
},
|
|
1358
|
+
"offerLifetimeSeconds": {
|
|
1359
|
+
"description": "Default lifetime of credential offers in seconds. Can be overridden per offer request. Null or unset: offers do not expire.",
|
|
1360
|
+
"anyOf": [
|
|
1361
|
+
{
|
|
1362
|
+
"type": "integer",
|
|
1363
|
+
"minimum": 1,
|
|
1364
|
+
"maximum": 9007199254740991
|
|
1365
|
+
},
|
|
1366
|
+
{
|
|
1367
|
+
"type": "null"
|
|
1368
|
+
}
|
|
1369
|
+
]
|
|
1370
|
+
}
|
|
1371
|
+
},
|
|
1372
|
+
"required": [
|
|
1373
|
+
"authorizationServers"
|
|
1374
|
+
],
|
|
1375
|
+
"additionalProperties": false,
|
|
1376
|
+
"title": "IssuanceConfig"
|
|
1377
|
+
}
|
|
1378
|
+
}
|
|
704
1379
|
}
|
|
705
1380
|
]
|
|
706
1381
|
}
|