[OCM] PrincipalCredentialRequest

HTTP Endpoint Overview

Calling the endpoint executes a policy to determine whether a Verifiable Credential (VC) issuance request from a PCM (principal) should proceed.

flowchart LR 
	subgraph Person
	A
	end
	A[PCM] -- Request VC --> B[OCM]
	subgraph Organization
	B -- /policy/PrincipalCredentialRequest --> C[TSA]
	end

Functionality

Decision could be based on:

• whether connection is in ACTIVE state
• what if the credential is already issued?
• is timestamp needed in the request?
• see other possible rules in the DOCS

CURL example

POST /policy/{groupName}/{policyName}/{version}/evaluation

curl -X POST http://localhost:8080/policy/testgroup/PrincipalCredentialRequest/1.0/evaluation

Request Body

{
  "data": {
    "principalDid": "did:example:123456789abcdefghi",
    "principalEmail": "info@example.com",
    "connectionId": 1646925527015
  }
} 

Response

{
  "allow": false
}

changed the description

changed the description

Questions:

• How should the TSA decide to answer the call?

closed with commit 97518bfe