⬆️ Upgrade to latest version of walt.id

connector/iam/src/main/java/eu/datacellar/iam/WaltIDIdentityServices.java

@@ -227,7 +227,7 @@ public JSONObject getKeyAsJWK(String didHolder) throws IOException {
 
         monitor.info("Exporting key with ID: %s".formatted(keyId));
 
-        String baseUrl = walletUrl + "/wallet-api/wallet/" + walletId + "/keys/export/" + keyId;
+        String baseUrl = walletUrl + "/wallet-api/wallet/" + walletId + "/keys/" + keyId + "/export";
         HttpUrl.Builder urlBuilder = HttpUrl.parse(baseUrl).newBuilder();
         urlBuilder.addQueryParameter("format", "JWK");
         urlBuilder.addQueryParameter("loadPrivateKey", "true");
@@ -425,17 +425,6 @@ public JSONObject getJsonObject() {
                                         }
                                     });
                                 }
-                            },
-                            new HashMap<String, Object>() {
-                                {
-                                    put("path", Arrays.asList("$.expirationDate"));
-                                    put("filter", new HashMap<String, Object>() {
-                                        {
-                                            put("type", "string");
-                                            put("format", "date-time");
-                                        }
-                                    });
-                                }
                             }));
                 }
             };

dev-config/dev-consumer.properties

@@ -22,7 +22,7 @@ eu.datacellar.wallet.url=http://host.docker.internal:7001
 eu.datacellar.wallet.email[email protected]
 eu.datacellar.wallet.password=consumer
 eu.datacellar.trust.did=did:web:gaiax.cticpoc.com:anchor
-eu.datacellar.uniresolver.url=https://uniresolver.test.ctic.es/1.0/identifiers
+eu.datacellar.uniresolver.url=https://dev.uniresolver.io/1.0/identifiers
 edc.datasource.default.url=jdbc:postgresql://host.docker.internal:25432/connector
 edc.datasource.default.user=postgres
 edc.datasource.default.password=postgres

dev-config/dev-provider.properties

@@ -23,7 +23,7 @@ eu.datacellar.wallet.url=http://host.docker.internal:7061
 eu.datacellar.wallet.email[email protected]
 eu.datacellar.wallet.password=provider
 eu.datacellar.trust.did=did:web:gaiax.cticpoc.com:anchor
-eu.datacellar.uniresolver.url=https://uniresolver.test.ctic.es/1.0/identifiers
+eu.datacellar.uniresolver.url=https://dev.uniresolver.io/1.0/identifiers
 edc.datasource.default.url=jdbc:postgresql://host.docker.internal:15432/connector
 edc.datasource.default.user=postgres
 edc.datasource.default.password=postgres

dev-config/waltid/wallet-anchor/_features.conf

@@ -0,0 +1,6 @@
+enabledFeatures = [
+    # external-signature-endpoints,
+    # trusted-ca,
+    # entra,
+    # ...
+]

dev-config/waltid/wallet-anchor/auth.conf

@@ -0,0 +1,18 @@
+encryptionKey = "<128 bit -- key>" // a 128 bit (16 chars) key
+signKey = "<128 bit -- key>" // a 128 bit (16 chars) key
+
+# Available Signing Algorithms are: RS256 or HS256.
+# If HS256, then provide the 256+ bit key in the tokenKey field. If RS256, then provide the private key in JWK format in the tokenKey field.
+tokenKey = "<a - longer 256+ bit key or rsa private key in jwk format- here>" // at least 256 bit (32 chars)
+
+# Specify your iss and sub claims
+audTokenClaim = "audience value"
+issTokenClaim = "issuer value"
+tokenLifetime = "30"//days
+
+# Examples:
+; tokenKey = "hjklwcptiniwjkdwwkigreumcayoyiso"
+; tokenKey = "{"p":"8DhAtwXUO8as8-jY_e0OIX2tB8TmoLkLTwJtJXmWrE7pFUVFMviXCHiNd3x_KngJel002xGW3zTHweSqVIkKO_0HqSEed9XKrKQnJTypU5_M-lDHNUtYTp6ATB-rjuGL8F-BxjoMZUTq5arUQ8IxHJda0iQSqwIH-8F-ivHpO2U","kty":"RSA","q":"xoPLLuoXVh9Wk4m8cTXhLf-RA9lapIKhwoPadRJSA8ceA1dqhsH1Vjgk0UVxV1nc-LJUBvpPsWuJDoDc7SUPNZR79Z2UyXZXBBMnXx82UOuK_wJ6yi111rLUDgeHZhh67MAL0TSX6Pje1Xl2s--i7UQuOba6P06SFrl81S--mGM","d":"TSmJ37dU1yZ7NSfL3hm6yfFPCtjww0D4t6uiy8KTpi3Oy7C8_vx1HFZLPr6AlDJkIGfOvHAJ87gVexguJGQgmhu0VJzEsH4IXiVx9L8aNqloc6umhS44dLZU6mwr5EVhx3jz0qI3t6CORzzs6BNnzLtUCIErwpFLDzyI9T0-vxivIBlG4pjmJL0I0zpirMGg-E2oYYIYWgRAc6teibQ5auS3skxIJINBOiAKhvQGU1uOxRnPHiGzEk-sStwrgBbCmlWFy4xXBymkUZTpPwW-dqCpxIUXcfDI-AQ85XmdWoOZRvX5YpX5BDdkeHy1Og3GAsf7w8BCQeROv6fnLEgVPQ","e":"AQAB","kid":"44benLH7kwpQ5uynsoM8JkhftDR6QYpAxVeVm5i-Cqw","qi":"Nw-UbUD9eBIEUJr_y2VkIi1zzrFY19DU3842PRY7sal4pUO1OSO65v5KJwxRsww-k4oD2IrJM1vwCOYXMOkGadldpYDbHZcZAXd4MMfLrrmNKS7eP60m36n5WUookGOowqhLScCYlArYF7JcptN2E77-gRFGf-Yo7KRJA8Q0TYI","dp":"uB31hBJErBhIAZ6rilyCYysHTxgcyH1r7H_oljuOP70vqyzvr_SXFlgH3dgfQ7bDVPVRiML_h07V-IfCAY8TuAzlLT2EM8c6U35xvnmzMrQdkJIPTYrVQVT88tunS5kWAAPD3OIrFAdxntyDWvfhWo-rfbtGT6n74ntY-TgXUn0","dq":"s2Iit6kXH17AKCAdpZuPeLZo_zZovyHANHpbbND6RamniFN00oLwRFIFiwmaStnMYPscDRYh72wB9JYjjTOg08TyYtdbvNTv-qGoQT9-II9IEfnWpV2BD1qXXnoVMv_KDKfZxdklsIM7MWJKDnzsGEU1FDf3gv9n6ZsBn88-Bos","n":"ukctf01ANV4BiJ3eBdoqepmTh1CspUkzKK3zFa2kfUM2O1HMGrNUoJYyUZOFTcrPATOils1I27zGkYeLOYVHQn-QM4kjXDB_OxTpczYOkSu2s50QBk5jTAIb2pLC8ynnDAQWAXFzVOyT_e_PY3crhnosI900tzvyjtAhb8BxIAe7co7OCScagv8A2MOcm-3I9LsM_ecjM5ACfNpOwPzrxPgQzKp3vZapBVLOp1LqiKuyf1_1gTGMmr17MnliPoMo-jiQQaaU-DE-rnuARTabE05b7TqdK2WXFWnXnIRxwoklbZajXJY5EqeMlbt4FNVfmtFC7FXv_3GGUCNoqGvwDw"}"
+; audTokenClaim = "http://localhost:7001"
+; issTokenClaim = "http://localhost:7001"
+; tokenLifetime = "30"//days

dev-config/waltid/wallet-anchor/db.conf

@@ -1 +1,28 @@
-database = "db.sqlite"
+dataSource {
+    # -- jdbcUrl --
+    # postgres: "jdbc:postgresql://127.0.0.1:5432/waltid"
+    # sqlite: "jdbc:sqlite:data/wallet.db"
+    # mssql: "jdbc:sqlserver://localhost:1433;databaseName=master"
+    jdbcUrl = "jdbc:sqlite:data/wallet.db"
+
+    # -- driverClassName --
+    # postgres: "org.postgresql.Driver"
+    # sqlite: "org.sqlite.JDBC"
+    # mssql: "com.microsoft.sqlserver.jdbc.SQLServerDriver"
+    driverClassName = "org.sqlite.JDBC"
+
+    username = "waltid" # ignored by sqlite
+    password = "waltid" # ignored by sqlite
+
+    transactionIsolation = "TRANSACTION_SERIALIZABLE"
+
+    maximumPoolSize = 16
+    minimumIdle = 4
+    maxLifetime = 60000
+    autoCommit = false
+    dataSource {
+        journalMode = WAL
+        fullColumnNames = false
+    }
+}
+recreateDatabaseOnStart = true

dev-config/waltid/wallet-anchor/issuer-service.conf

@@ -0,0 +1 @@
+baseUrl = "http://localhost:7002"

dev-config/waltid/wallet-anchor/key-generation-defaults.conf

@@ -0,0 +1,18 @@
+keyGenerationDefaults {
+    oci {
+        vaultId: "ocid1.vault.oc1.eu-frankfurt-1...",
+        compartmentId: "ocid1.compartment.oc1...",
+    }
+
+    oci-rest-api {
+        tenancyOcid: "ocid1.tenancy.oc1...",
+        compartmentOcid: "ocid1.tenancy.oc1...",
+        userOcid: "ocid1.user.oc1...",
+        fingerprint: "aa:bb:cc:dd:ee:ff...",
+        managementEndpoint: "123456789-management.kms.eu-frankfurt-1.oraclecloud.com",
+        cryptoEndpoint: "123456789-crypto.kms.eu-frankfurt-1.oraclecloud.com",
+        signingKeyPem: """
+            SIGNING KEY HERE
+        """
+    }
+}

dev-config/waltid/wallet-anchor/logins.conf

@@ -3,4 +3,4 @@ enabledLoginMethods: [
     "web3",
     "oidc",
     "passkeys"
-]
+]

dev-config/waltid/wallet-anchor/notification.conf

@@ -0,0 +1,2 @@
+url = "<webhook>"
+apiKey = "<apiKey>"

dev-config/waltid/wallet-anchor/oidc.conf

@@ -1,24 +1,28 @@
 # This configuration file is used for setting up OIDC login
 # with an OIDC server for the Web Wallet.
 #
-# OIDC in this file is exlusively related to login/authentication with the Web Wallet.
-# It does not refer to any ODIC credential exchange protocol.
+# OIDC in this file is exclusively related to login/authentication with the Web Wallet.
+# It does not refer to any OIDC credential exchange protocol.
 
 # This example configuration can be used for Keycloak.
 
-# enable/disable OIDC login (backend functionality - seperately enable/disable in frontend)
-enableOidcLogin = false
+publicBaseUrl = "http://localhost:7101"
+
 providerName = keycloak
 # Enter the realm URL
-oidcRealm = "https://keycloak.walt-test.cloud/realms/waltid-keycloak-ktor"
-
+oidcRealm = "http://0.0.0.0:8080/realms/waltid-keycloak-ktor"
 # JWKS (to verify access keys the user claims to received through OIDC server)
 oidcJwks = "${oidcRealm}/protocol/openid-connect/certs"
+oidcScopes = ["roles"]
 authorizeUrl = "${oidcRealm}/protocol/openid-connect/auth"
 accessTokenUrl = "${oidcRealm}/protocol/openid-connect/token"
 logoutUrl = "${oidcRealm}/protocol/openid-connect/logout"
-clientId = "waltid_backend_localhost"
-clientSecret = "Xp8fJG5RTtj6lYUlqqIG57iovXMvfD5j"
+
+clientId = "waltid_backend"
+clientSecret = "**********"
+
+# Keycloak authentication strategy
+keycloakUserApi = "http://0.0.0.0:8080/admin/realms/waltid-keycloak-ktor/users"
 
 # JWKS is cached:
 jwksCache = {
@@ -28,4 +32,4 @@ jwksCache = {
         bucketSize: 10
         refillRateMinutes: 1
     }
-}
+}

dev-config/waltid/wallet-anchor/registration-defaults.conf

@@ -0,0 +1,51 @@
+// Setup what key should be generated on registration
+defaultKeyConfig: {
+    backend: jwk
+    keyType: Ed25519
+}
+
+// Setup what DID should be generated based on above above defined key on registration
+defaultDidConfig: {
+    method: jwk
+}
+
+defaultIssuerConfig: {
+    did = "did:web:walt.id",
+    description = "walt.id issuer portal",
+    uiEndpoint = "https://portal.walt.id/credentials?ids=",
+    configurationEndpoint = "https://issuer.portal.walt.id/.well-known/openid-credential-issuer",
+    authorized = false,
+}
+
+// -- Hashicorp Vault TSE key example --
+// defaultKeyConfig: {
+//     backend: tse
+//     config: {
+//         server: "http://127.0.0.1:8200/v1/transit"
+//         accessKey: "<your token here>"
+//     }
+//     keyType: Ed25519
+// }
+
+// -- Oracle Cloud Infrastructure Vault KMS key example --
+// defaultKeyConfig: {
+//     backend: oci
+//     config: {
+//         tenancyOcid: "ocid1.tenancy.oc1..<long id>",
+//         userOcid: "ocid1.user.oc1..<long id>",
+//         fingerprint: "aa:bb:cc:dd:ee:ff:00:11:22:33:44:55:66:77:88:99",
+//         cryptoEndpoint: "<some id>-crypto.kms.<the location>.oraclecloud.com",
+//         managementEndpoint: "<some id>-management.kms.<the location>.oraclecloud.com",
+//         signingKeyPem: "<private request signing key in PEM format>"
+//     }
+//     keyType: secp256r1
+// }
+
+// -- did:web example --
+// defaultDidConfig: {
+//     method: web
+//     config: {
+//         domain: "https://wallet.walt.id"
+//         path: "/wallet-api/registry/[random-uuid]" // automatically generates random Uuid for path
+//     }
+// }

dev-config/waltid/wallet-anchor/trust.conf

@@ -1,10 +1,10 @@
-entra: {
-    issuer: {
-        baseUrl = "<url>"
-        trustRecordPath = "<path>"
-    }
-    verifier: {
-        baseUrl = "<url>"
-        trustRecordPath = "<path>"
-    }
+issuersRecord: {
+    baseUrl = "<url>"
+    trustRecordPath = "<path>"
+    governanceRecordPath = "<path>"
+}
+verifiersRecord: {
+    baseUrl = "<url>"
+    trustRecordPath = "<path>"
+    governanceRecordPath = "<path>"
 }

dev-config/waltid/wallet-anchor/trusted-ca.conf

@@ -0,0 +1,4 @@
+// list of trusted PEM-encoded x509 certificates
+certificates = [
+"-----BEGIN CERTIFICATE-----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\nFVH0vHAZqlS+fs2BBahpPupnhbvmNfzR9N43VG69nlcUDBgkMoFz\n-----END CERTIFICATE-----\n"
+]

dev-config/waltid/wallet-anchor/web.conf

@@ -1,3 +1,3 @@
 webHost = "0.0.0.0"
 webPort = 7001
-publicBaseUrl = "http://localhost:3000"
+

dev-config/waltid/wallet-consumer/_features.conf

@@ -0,0 +1,6 @@
+enabledFeatures = [
+    # external-signature-endpoints,
+    # trusted-ca,
+    # entra,
+    # ...
+]

dev-config/waltid/wallet-consumer/auth.conf

@@ -0,0 +1,18 @@
+encryptionKey = "<128 bit -- key>" // a 128 bit (16 chars) key
+signKey = "<128 bit -- key>" // a 128 bit (16 chars) key
+
+# Available Signing Algorithms are: RS256 or HS256.
+# If HS256, then provide the 256+ bit key in the tokenKey field. If RS256, then provide the private key in JWK format in the tokenKey field.
+tokenKey = "<a - longer 256+ bit key or rsa private key in jwk format- here>" // at least 256 bit (32 chars)
+
+# Specify your iss and sub claims
+audTokenClaim = "audience value"
+issTokenClaim = "issuer value"
+tokenLifetime = "30"//days
+
+# Examples:
+; tokenKey = "hjklwcptiniwjkdwwkigreumcayoyiso"
+; tokenKey = "{"p":"8DhAtwXUO8as8-jY_e0OIX2tB8TmoLkLTwJtJXmWrE7pFUVFMviXCHiNd3x_KngJel002xGW3zTHweSqVIkKO_0HqSEed9XKrKQnJTypU5_M-lDHNUtYTp6ATB-rjuGL8F-BxjoMZUTq5arUQ8IxHJda0iQSqwIH-8F-ivHpO2U","kty":"RSA","q":"xoPLLuoXVh9Wk4m8cTXhLf-RA9lapIKhwoPadRJSA8ceA1dqhsH1Vjgk0UVxV1nc-LJUBvpPsWuJDoDc7SUPNZR79Z2UyXZXBBMnXx82UOuK_wJ6yi111rLUDgeHZhh67MAL0TSX6Pje1Xl2s--i7UQuOba6P06SFrl81S--mGM","d":"TSmJ37dU1yZ7NSfL3hm6yfFPCtjww0D4t6uiy8KTpi3Oy7C8_vx1HFZLPr6AlDJkIGfOvHAJ87gVexguJGQgmhu0VJzEsH4IXiVx9L8aNqloc6umhS44dLZU6mwr5EVhx3jz0qI3t6CORzzs6BNnzLtUCIErwpFLDzyI9T0-vxivIBlG4pjmJL0I0zpirMGg-E2oYYIYWgRAc6teibQ5auS3skxIJINBOiAKhvQGU1uOxRnPHiGzEk-sStwrgBbCmlWFy4xXBymkUZTpPwW-dqCpxIUXcfDI-AQ85XmdWoOZRvX5YpX5BDdkeHy1Og3GAsf7w8BCQeROv6fnLEgVPQ","e":"AQAB","kid":"44benLH7kwpQ5uynsoM8JkhftDR6QYpAxVeVm5i-Cqw","qi":"Nw-UbUD9eBIEUJr_y2VkIi1zzrFY19DU3842PRY7sal4pUO1OSO65v5KJwxRsww-k4oD2IrJM1vwCOYXMOkGadldpYDbHZcZAXd4MMfLrrmNKS7eP60m36n5WUookGOowqhLScCYlArYF7JcptN2E77-gRFGf-Yo7KRJA8Q0TYI","dp":"uB31hBJErBhIAZ6rilyCYysHTxgcyH1r7H_oljuOP70vqyzvr_SXFlgH3dgfQ7bDVPVRiML_h07V-IfCAY8TuAzlLT2EM8c6U35xvnmzMrQdkJIPTYrVQVT88tunS5kWAAPD3OIrFAdxntyDWvfhWo-rfbtGT6n74ntY-TgXUn0","dq":"s2Iit6kXH17AKCAdpZuPeLZo_zZovyHANHpbbND6RamniFN00oLwRFIFiwmaStnMYPscDRYh72wB9JYjjTOg08TyYtdbvNTv-qGoQT9-II9IEfnWpV2BD1qXXnoVMv_KDKfZxdklsIM7MWJKDnzsGEU1FDf3gv9n6ZsBn88-Bos","n":"ukctf01ANV4BiJ3eBdoqepmTh1CspUkzKK3zFa2kfUM2O1HMGrNUoJYyUZOFTcrPATOils1I27zGkYeLOYVHQn-QM4kjXDB_OxTpczYOkSu2s50QBk5jTAIb2pLC8ynnDAQWAXFzVOyT_e_PY3crhnosI900tzvyjtAhb8BxIAe7co7OCScagv8A2MOcm-3I9LsM_ecjM5ACfNpOwPzrxPgQzKp3vZapBVLOp1LqiKuyf1_1gTGMmr17MnliPoMo-jiQQaaU-DE-rnuARTabE05b7TqdK2WXFWnXnIRxwoklbZajXJY5EqeMlbt4FNVfmtFC7FXv_3GGUCNoqGvwDw"}"
+; audTokenClaim = "http://localhost:7001"
+; issTokenClaim = "http://localhost:7001"
+; tokenLifetime = "30"//days

dev-config/waltid/wallet-consumer/db.conf

@@ -1 +1,28 @@
-database = "db.sqlite"
+dataSource {
+    # -- jdbcUrl --
+    # postgres: "jdbc:postgresql://127.0.0.1:5432/waltid"
+    # sqlite: "jdbc:sqlite:data/wallet.db"
+    # mssql: "jdbc:sqlserver://localhost:1433;databaseName=master"
+    jdbcUrl = "jdbc:sqlite:data/wallet.db"
+
+    # -- driverClassName --
+    # postgres: "org.postgresql.Driver"
+    # sqlite: "org.sqlite.JDBC"
+    # mssql: "com.microsoft.sqlserver.jdbc.SQLServerDriver"
+    driverClassName = "org.sqlite.JDBC"
+
+    username = "waltid" # ignored by sqlite
+    password = "waltid" # ignored by sqlite
+
+    transactionIsolation = "TRANSACTION_SERIALIZABLE"
+
+    maximumPoolSize = 16
+    minimumIdle = 4
+    maxLifetime = 60000
+    autoCommit = false
+    dataSource {
+        journalMode = WAL
+        fullColumnNames = false
+    }
+}
+recreateDatabaseOnStart = true