feat: sd-jwt issuance support

apps/authorization-service/src/plugins/auth.ts

@@ -9,7 +9,6 @@ import { util as didKeyUtil } from '@cef-ebsi/key-did-resolver';
 import { util as didEbsiUtil } from '@cef-ebsi/ebsi-did-resolver';
 import type { PresentationDefinitionV2 } from '@sphereon/pex-models';
 import {
-  COUPON_DEMO_PRESENTATION_DEFINITION,
   INTEROP_TEST_PRESENTATION_DEFINITION,
   VERIFIER_TEST_PRESENTATION_DEFINITION,
 } from '../utils/presentationDefinitions.js';
@@ -22,43 +21,113 @@ declare module 'fastify' {
   }
 }
 
-const CONFORMANCE_TEST_SUPPORTED_CREDENTIALS: string[][] = [
-  [
-    'VerifiableCredential',
-    'VerifiableAttestation',
-    'CTWalletSameAuthorisedInTime',
-  ],
-  [
-    'VerifiableCredential',
-    'VerifiableAttestation',
-    'CTWalletSameAuthorisedDeferred',
-  ],
-  [
-    'VerifiableCredential',
-    'VerifiableAttestation',
-    'CTWalletSamePreAuthorisedInTime',
-  ],
-  [
-    'VerifiableCredential',
-    'VerifiableAttestation',
-    'CTWalletSamePreAuthorisedDeferred',
-  ],
-  ['VerifiableCredential', 'VerifiableAttestation', 'InTimeIssuance'],
-  ['VerifiableCredential', 'VerifiableAttestation', 'DefferedIssuance'],
-  ['VerifiableCredential', 'VerifiableAttestation', 'PreAuthIssuance'],
+const CONFORMANCE_TEST_SUPPORTED_CREDENTIALS: {
+  format: string;
+  types: string[];
+}[] = [
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'CTWalletSameAuthorisedInTime',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'CTWalletSameAuthorisedDeferred',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'CTWalletSamePreAuthorisedInTime',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'CTWalletSamePreAuthorisedDeferred',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: ['VerifiableCredential', 'VerifiableAttestation', 'InTimeIssuance'],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'DefferedIssuance',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: ['VerifiableCredential', 'VerifiableAttestation', 'PreAuthIssuance'],
+  },
 ];
 
-const SUPPORTED_CREDENTIALS: string[][] = [
-  ['VerifiableCredential', 'VerifiableAttestation', 'EducationCredential'],
-  ['VerifiableCredential', 'VerifiableAttestation', 'EventTicketCredential'],
-  ['VerifiableCredential', 'VerifiableAttestation', 'CouponCredential'],
-  [
-    'VerifiableCredential',
-    'VerifiableAttestation',
-    'EuropeanDigitalCredential',
-  ],
-  ['VerifiableCredential', 'VerifiableAttestation', 'EHIC'],
-  ['VerifiableCredential', 'VerifiableAttestation', 'DiplomaCredential'],
+const SUPPORTED_CREDENTIALS: { format: string; types: string[] }[] = [
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'EducationCredential',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'EventTicketCredential',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'CouponCredential',
+    ],
+  },
+  {
+    format: 'sd-jwt',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'CouponCredential',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'EuropeanDigitalCredential',
+    ],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: ['VerifiableCredential', 'VerifiableAttestation', 'EHIC'],
+  },
+  {
+    format: 'jwt_vc_json',
+    types: [
+      'VerifiableCredential',
+      'VerifiableAttestation',
+      'DiplomaCredential',
+    ],
+  },
 ];
 
 export default fp(async (fastify, _) => {
@@ -163,7 +232,9 @@ export default fp(async (fastify, _) => {
         return presentationDefinition;
       }
     },
-    credentialTypesSupported: credentialTypesSupported,
+    credentialTypesSupported: credentialTypesSupported.map(
+      (credentialTypesSupported) => credentialTypesSupported.types,
+    ),
   });
 
   fastify.decorate('auth', auth);

apps/dashboard/package.json

@@ -8,7 +8,7 @@
     "build": "pnpm clean && next build",
     "clean": "rimraf .next",
     "postbuild": "next-sitemap --config=next-sitemap.config.js",
-    "dev": "next dev",
+    "dev": "USE_TEST_PROVIDER=true next dev",
     "docker:build": "docker build . -t blockchain-lab-um/eductx-platform-dashboard",
     "start": "next start"
   },

apps/dashboard/src/app/api/issue-oidc/route.ts

@@ -98,7 +98,7 @@ export async function POST(req: NextRequest) {
     }
 
     const basicEmailHtml = await renderBasicEmail({
-      qrCodeUrl: uploadResponse.data.url,
+      qrCodeUrl: uploadResponse.data.ufsUrl,
     });
 
     let attachments: Mail.Attachment[] = [];

apps/dashboard/src/components/IssueView/Schemas/couponCredential.ts

@@ -3,6 +3,7 @@ import type { Schema, SchemaNode } from '../schemaTypes';
 export const CouponCredential = {
   $id: '#couponCredential',
   type: 'object',
+  format: 'jwt_vc_json',
   properties: {
     credentialSubject: {
       type: 'object',
@@ -26,6 +27,36 @@ export const CouponCredential = {
 export const CouponCredentialSchema = {
   title: 'Coupon Credential',
   type: '#couponCredential',
+  format: 'jwt_vc_json',
+  fields: [
+    {
+      title: 'Credential Subject',
+      type: 'object',
+      propertyName: 'credentialSubject',
+      fields: [
+        {
+          title: 'Coupon ID',
+          propertyName: 'couponId',
+          type: 'string',
+          required: true,
+        } as SchemaNode,
+        {
+          title: 'Coupon Name',
+          propertyName: 'couponName',
+          type: 'string',
+          required: true,
+        } as SchemaNode,
+      ],
+      required: true,
+    },
+  ],
+  required: true,
+} as Schema;
+
+export const CouponCredentialSdJwtSchema = {
+  title: 'Coupon Credential (SD-JWT)',
+  type: '#couponCredential',
+  format: 'sd-jwt',
   fields: [
     {
       title: 'Credential Subject',

apps/dashboard/src/components/IssueView/index.tsx

@@ -17,6 +17,7 @@ import { useToastStore } from '@/stores';
 import { CredentialForm } from './CredentialForm';
 import {
   CouponCredentialSchema,
+  CouponCredentialSdJwtSchema,
   EducationalCredentialSchema,
   EducationalCredentialSchemaNOO,
   EuropeanDigitalCredentialSchema,
@@ -29,6 +30,7 @@ const SCHEMAS: Schema[] = [
   EducationalCredentialSchema,
   EducationalCredentialSchemaNOO,
   CouponCredentialSchema,
+  CouponCredentialSdJwtSchema,
   EuropeanDigitalCredentialSchema,
   DiplomaCredentialSchema,
   EHICCredentialSchema,
@@ -71,7 +73,6 @@ export const IssueView = () => {
   const [next, setNext] = useState(false);
   const [inputs, setInputs] = useState<any>({});
   const [_, setIsFilled] = useState(false);
-  const [credentialIssued, setCredentialIssued] = useState(false);
   const [isIssuing, setIsIssuing] = useState(false);
   const [email, setEmail] = useState('');
 
@@ -114,7 +115,6 @@ export const IssueView = () => {
   };
 
   const goBack = () => {
-    setCredentialIssued(false);
     setNext(false);
   };
 
@@ -130,7 +130,6 @@ export const IssueView = () => {
     });
 
     if (response.ok) {
-      setCredentialIssued(true);
       useToastStore.setState({
         open: true,
         title: 'Credential Issued',
@@ -168,14 +167,13 @@ export const IssueView = () => {
             getCredentialType(selectedSchema!.type),
           ],
           flow: 'pre-authorized_code',
-          format: 'jwt_vc_json',
+          format: selectedSchema!.format,
           credential_subject: inputs.credentialSubject,
         },
       }),
     });
 
     if (response.ok) {
-      setCredentialIssued(true);
       useToastStore.setState({
         open: true,
         title: 'Credential Issued',

apps/dashboard/src/components/IssueView/schemaTypes.ts

@@ -17,5 +17,6 @@ export interface SchemaObject {
 export interface Schema {
   title: string;
   type?: string;
+  format?: string;
   fields: SchemaNode[] | SchemaObject[];
 }

apps/dashboard/src/lib/auth.ts

@@ -1,5 +1,6 @@
 import type { NextAuthOptions } from 'next-auth';
 import AzureADProvider from 'next-auth/providers/azure-ad';
+import CredentialsProvider from 'next-auth/providers/credentials';
 
 export const authOptions: NextAuthOptions = {
   secret: process.env.NEXTAUTH_SECRET,
@@ -10,5 +11,21 @@ export const authOptions: NextAuthOptions = {
       clientSecret: process.env.AZURE_AD_CLIENT_SECRET!,
       tenantId: process.env.AZURE_AD_TENANT_ID!,
     }),
+    ...(process.env.USE_TEST_PROVIDER
+      ? [
+          CredentialsProvider({
+            name: 'Credentials',
+            credentials: {},
+            async authorize() {
+              // Always return a successful authentication
+              return {
+                id: '1',
+                name: 'Test User',
+                email: '[email protected]',
+              };
+            },
+          }),
+        ]
+      : []),
   ],
 };

apps/issuer-service/package.json

@@ -30,6 +30,9 @@
     "@fastify/sensible": "^6.0.1",
     "@fastify/type-provider-json-schema-to-ts": "^4.0.0",
     "@noble/curves": "1.6.0",
+    "@sd-jwt/crypto-nodejs": "0.14.0",
+    "@sd-jwt/sd-jwt-vc": "0.14.0",
+    "@sd-jwt/types": "0.14.0",
     "cache-manager": "6.1.2",
     "cacheable": "1.8.2",
     "close-with-grace": "^1.3.0",