Build your Issuer¶
Overview¶
The Issuer is an implementation of the PID and (Q)EAA Provider service, supporting the OpenID4VCI (version 1.0) protocol.
The service provides, by default, support for the mso_mdoc and SD-JWT VC formats, for the following credentials:
| Credential/Attestation | Format |
|---|---|
| PID | mso_mdoc |
| PID(sample) | SD-JWT VC |
| mDL | mso_mdoc |
| mDL | SD-JWT VC |
For authenticating the user, it requires the use of an eIDAS node, an OAuth 2.0 server or a simple form (for testing purposes).
OpenID4VCI Coverage¶
This version of the Issuer supports the OpenId for Verifiable Credential Issuance (version 1.0) protocol with the following coverage:
| Feature | Coverage |
|---|---|
| Authorization Code flow draft | ✅ Support for credential configuration id, scope, (version 1.0) |
| Pre-authorized code flow | ✅ (version 1.0) |
| Credential Offer | ✅ authorization_code , ✅ pre-authorized_code (version 1.0) |
| Dynamic Credential Request | ✅ (version 1.0) |
| mso_mdoc format | ✅ |
| SD-JWT VC format | ✅ |
| W3C VC DM | ❌ |
| Token Endpoint | ✅ (version 1.0) |
| Credential Endpoint | ✅ Including proofs and repeatable invocations, (version 1.0) |
| Credential Issuer MetaData | ✅ Unsigned metadata, (version 1.0) |
| Nonce endpoint | ✅ (version 1.0) |
| Deferred Endpoint | ✅ (version 1.0) |
| Proof | ✅ JWT |
| Credential response encryption | ✅ (version 1.0) |
| Notification Endpoint | ✅ |
| Pushed authorization request | ✅ |
| Wallet authentication | ✅ public client |
| Demonstrating Proof of Possession (DPoP) | ❌ |
| PKCE | ✅ |
You can use the Issuer at https://issuer.eudiw.dev/, or install it locally.