Build your Remote Verifier

Overview

This is a Web application (Backend Restful service) that acts as a Verifier/RP trusted end-point that implements OpenID4VP (1.0) protocol. This backend service is accompanied by a Web UI application.

The application exposes two APIs:

• Verifier API.
• Wallet API.

The Verifier API supports two operations:

• Initialise Transaction, where Verifier may define whether it wants to request a SIOP or OpenID4VP or combined request.
• Get Wallet response, where Verifier receives a vp_token, or an error.

These operations are specified in an Open API v3 specification.

The Wallet API, provides the following main operations:

• Get Request Object according to the JWT Secured Authorization Request.
• Direct Post according to OpenID4VP direct_post.

Please note that:

• Both APIs need to be exposed over HTTPS.
• The Verifier API needs to be protected to allow only authorised access.

Neither of these concerns has been addressed by the current version of the application, since in its current form it is merely a development tool rather than a production application.