@eudiplo/cli 9.1.0-main.892d49e → 9.1.0-main.8be8b4e

package/templates/schemas/FederationTrustAnchorConfigFile.schema.json

@@ -0,0 +1,60 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./FederationTrustAnchorConfigFile.schema.json",
+  "title": "FederationTrustAnchorConfigFile",
+  "description": "Configuration file identified by its $schema URL.",
+  "oneOf": [
+    {
+      "type": "object",
+      "properties": {
+        "$schema": {
+          "type": "string",
+          "const": "https://eudiplo.dev/schemas/v1/FederationTrustAnchorConfigFile.schema.json"
+        },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "generation": {
+              "type": "integer",
+              "minimum": 1,
+              "description": "Monotonically increasing configuration generation."
+            },
+            "ownership": {
+              "type": "string",
+              "enum": [
+                "unmanaged",
+                "file-managed"
+              ],
+              "description": "Requested ownership recorded when the document is applied."
+            }
+          },
+          "additionalProperties": false
+        },
+        "spec": {
+          "allOf": [
+            {
+              "$ref": "./CreateFederationTrustAnchorDto.schema.json"
+            },
+            {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              }
+            }
+          ]
+        }
+      },
+      "required": [
+        "$schema",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/IssuanceConfig.schema.json

@@ -52,10 +52,21 @@
         "additionalProperties": false
       }
     },
-    "signingKeyId": {
-      "description": "Default signing key chain id for credential issuance.",
-      "type": "string",
-      "minLength": 1
+    "walletAttestationStatusCheckMode": {
+      "description": "Default status check mode for wallet attestations at managed authorization servers: strict, best_effort (default) or disabled.",
+      "anyOf": [
+        {
+          "type": "string",
+          "enum": [
+            "strict",
+            "best_effort",
+            "disabled"
+          ]
+        },
+        {
+          "type": "null"
+        }
+      ]
     },
     "authorizationServers": {
       "minItems": 1,
@@ -149,7 +160,7 @@
                     "minimum": 60
                   },
                   "signingKeyId": {
-                    "description": "Optional key chain id used to sign issued tokens.",
+                    "description": "ID of a key chain with usage type \"authorizationServer\" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.",
                     "type": "string",
                     "minLength": 1
                   },
@@ -209,6 +220,15 @@
                   "additionalProperties": false
                 }
               },
+              "walletAttestationStatusCheckMode": {
+                "description": "Status check mode for wallet attestations at this authorization server. Omit to inherit the issuance default.",
+                "type": "string",
+                "enum": [
+                  "strict",
+                  "best_effort",
+                  "disabled"
+                ]
+              },
               "label": {
                 "description": "Optional display label for UI selection.",
                 "type": "string"
@@ -282,7 +302,7 @@
                     "minimum": 60
                   },
                   "signingKeyId": {
-                    "description": "Optional key chain id used to sign issued tokens.",
+                    "description": "ID of a key chain with usage type \"authorizationServer\" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.",
                     "type": "string",
                     "minLength": 1
                   },
@@ -342,6 +362,15 @@
                   "additionalProperties": false
                 }
               },
+              "walletAttestationStatusCheckMode": {
+                "description": "Status check mode for wallet attestations at this authorization server. Omit to inherit the issuance default.",
+                "type": "string",
+                "enum": [
+                  "strict",
+                  "best_effort",
+                  "disabled"
+                ]
+              },
               "label": {
                 "description": "Optional display label for UI selection.",
                 "type": "string"
@@ -381,7 +410,7 @@
                     "minimum": 60
                   },
                   "signingKeyId": {
-                    "description": "Optional key chain id used to sign issued tokens.",
+                    "description": "ID of a key chain with usage type \"authorizationServer\" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.",
                     "type": "string",
                     "minLength": 1
                   },
@@ -441,6 +470,15 @@
                   "additionalProperties": false
                 }
               },
+              "walletAttestationStatusCheckMode": {
+                "description": "Status check mode for wallet attestations at this authorization server. Omit to inherit the issuance default.",
+                "type": "string",
+                "enum": [
+                  "strict",
+                  "best_effort",
+                  "disabled"
+                ]
+              },
               "label": {
                 "description": "Optional display label for UI selection.",
                 "type": "string"
@@ -485,8 +523,9 @@
               ]
             },
             "entityId": {
-              "description": "Optional local federation entity id.",
-              "type": "string"
+              "description": "Entity Identifier of the tenant's federation entity, usually {PUBLIC_URL}/issuers/{tenantId}: an https URL with a host and without query or fragment (OpenID Federation 1.0 Section 1.2). http is accepted only when OUTBOUND_URL_ALLOW_HTTP is true.",
+              "type": "string",
+              "pattern": "^(https?:\\/\\/[^\\s?#]+)?$"
             },
             "enforceSigningPolicy": {
               "description": "Enforce strict signing policy checks.",
@@ -521,6 +560,80 @@
                 "additionalProperties": false
               },
               "description": "Federation trust anchors."
+            },
+            "entityTypes": {
+              "description": "Roles the entity configuration publishes metadata for. Defaults to openid_credential_issuer.",
+              "minItems": 1,
+              "type": "array",
+              "items": {
+                "type": "string",
+                "enum": [
+                  "openid_credential_issuer",
+                  "openid_credential_verifier"
+                ]
+              }
+            },
+            "authorityHints": {
+              "description": "authority_hints of the entity configuration: the superiors that issue a subordinate statement about this entity. Defaults to the trust anchor entity ids.",
+              "type": "array",
+              "items": {
+                "type": "string",
+                "format": "uri"
+              }
+            },
+            "entityKeyChainId": {
+              "description": "Key chain with usage type 'federation' that signs the entity configuration. Without it, a federation key chain of the tenant is used; set it when the tenant has several.",
+              "type": "string",
+              "minLength": 1
+            },
+            "entityConfigurationLifetimeSeconds": {
+              "description": "Lifetime (exp - iat) of the entity configuration in seconds. Defaults to 86400.",
+              "type": "integer",
+              "minimum": 60,
+              "maximum": 31536000
+            },
+            "trustMarks": {
+              "description": "Trust mark JWTs issued to this entity, published in the entity configuration.",
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "entityMetadata": {
+              "description": "Informational federation_entity metadata of the entity configuration.",
+              "type": "object",
+              "properties": {
+                "organization_name": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "contacts": {
+                  "minItems": 1,
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "logo_uri": {
+                  "type": "string",
+                  "format": "uri"
+                },
+                "policy_uri": {
+                  "type": "string",
+                  "format": "uri"
+                },
+                "homepage_uri": {
+                  "type": "string",
+                  "format": "uri"
+                }
+              },
+              "additionalProperties": false
+            },
+            "includeTrustChain": {
+              "description": "Add the trust chain of this entity as trust_chain header to federation SD-JWT VCs and OID4VP request objects.",
+              "type": "boolean"
             }
           },
           "required": [