Skip to content
GitLab

Mapping of UserInfo to Verifiable Credential

Merged Boyan Tsolov requested to merge feature/oidc into develop

Supposing we have an OIDC provider and a front end for the user to acquire his access token for us, we can fetch his userInfo and map it to a Verifiable Credential, which will then be issued.

Procedure:

  • Endpoint:
  1. expect access token and userinfo URL
  2. fetch userinfo using token and url
  3. create connection (invitation url, connection id) by calling connection manager
  4. save userinfo and connection id to DB (temporarily)
  5. return invitation url and userInfo preview from endpoint (this will be displayed in the PORTAL)
  • Listener:
  1. Listen for connectionStateChanged event
  2. when complete and matching some qualifier (contains userinfo or a tag in the db for this type of connections) map the userinfo from db to a VC
  3. create schema based on keys of userinfo
  4. create credDef
  5. issue VC by calling attestation manager
  6. delete record from DB

Possible issues:

  • what happens when QR code is not scanned before connection is deleted and how do we let user know
  • invalidation of access token possible
Edited by Boyan Tsolov