feat: add mso mdoc proof support

Signed-off-by: Bjorn Molin <[email protected]>
diggsweden · Feb 18, 2025 · b5276d0 · b5276d0
1 parent 5245793
commit b5276d0
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 3 deletions.
diff --git a/docs/DEVELOPMENT.md b/docs/DEVELOPMENT.md
@@ -20,7 +20,9 @@ openssl req -new -x509 \
 -key issuer_private_pkcs8.key \
 -out issuer-certificate.crt \
 -days 365 \
--subj "/CN=local.dev.swedenconnect.se"
+-subj "/CN=local.dev.swedenconnect.se" \
+-addext "subjectAltName = DNS:local.dev.swedenconnect.se" \
+-addext "keyUsage = Digital Signature"
 ```
 
 

diff --git a/src/main/java/se/digg/eudiw/controllers/MetadataController.java b/src/main/java/se/digg/eudiw/controllers/MetadataController.java
@@ -181,6 +181,7 @@ CredentialIssuerMetadata metadata() {
                         .scope("eu.europa.ec.eudi.pid.1")
                         .credentialSigningAlgValuesSupported(List.of("ES256"))
                         .cryptographicBindingMethodsSupported(List.of("jwk"))
+                        .proofType("jwt", ProofTypeWrapper.createProofType(List.of("ES256")))
                         .display(List.of(
                                 Display.builder()
                                         .name("DIGG mdoc PID")

diff --git a/src/main/resources/application-dev.yaml b/src/main/resources/application-dev.yaml
@@ -68,6 +68,7 @@ eudiw:
     - "https://local.dev.swedenconnect.se:9443/callback-test-2-pre-authorisation-flow"
     - "https://local.dev.swedenconnect.se:9443/callback-test-3-par"
     - "https://local.dev.swedenconnect.se:9443"
+    - "eu.europa.ec.euidi://authorization"
   swedenconnect:
     base-url: https://local.dev.swedenconnect.se:9060/id-backend/auth
     client: wallet-dev
@@ -90,7 +91,7 @@ credential:
         certificates: file:../eudiw-prototype/sc-environment/config/openid-fed/keystores/issuer-certificate.crt
         #./pkcs8/certificate.crt
 
-        name: "Issuer credential"
+        #name: "Issuer credential"
   bundle:
     monitoring:
-      health-endpoint-enabled: true
+      health-endpoint-enabled: true