Dynamic endpoint

test_client.sh

@@ -8,14 +8,12 @@ client=$(docker run --rm -it \
     --grant-type authorization_code \
     --response-type token,code,id_token \
     --scope openid \
-    --redirect-uri http://localhost:9010/callback \
+    --redirect-uri "http://localhost:3000/api/auth/callback/oidc" \
     -e http://hydra:4445 \
     --format json )
 
 echo $client
 
-client_id=$(echo $client | jq -r '.client_id')
-
 docker run --rm -it \
     --network ory-hydra-net \
     -p 9010:9010 \
@@ -24,8 +22,8 @@ docker run --rm -it \
     --port 9010 \
     --client-id $client_id \
     --client-secret some-secret \
-    --redirect http://localhost:9010/callback \
+    --redirect "http://localhost:3000/api/auth/callback/oidc" \
     --scope openid \
     --auth-url http://localhost:5004/oauth2/auth \
-    --token-url http://hydra:4444/oauth2/token \
+    --token-url http://localhost:5004/oauth2/token \
     -e http://hydra:4444

vclogin/__tests__/testdata/pex/descriptorVerifiableIDFromAltme.json

@@ -0,0 +1,18 @@
+[
+  {
+    "id": "verifiableId",
+    "name": "Input descriptor for login credential",
+    "purpose": "Sign-in to MVG",
+    "constraints": {
+      "fields": [
+        {
+          "path": ["$.credentialSubject.type"],
+          "filter": {
+            "type": "string",
+            "pattern": "VerifiableId"
+          }
+        }
+      ]
+    }
+  }
+]

vclogin/__tests__/testdata/policies/acceptAnything.json

@@ -1,6 +1,6 @@
 [
   {
-    "credentialId": "credential1",
+    "credentialId": "1",
     "patterns": [
       {
         "issuer": "*",

vclogin/__tests__/testdata/policies/acceptAnythingMisconfigured.json

@@ -0,0 +1,15 @@
+[
+  {
+    "credentialId": "some random string",
+    "patterns": [
+      {
+        "issuer": "*",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.id"
+          }
+        ]
+      }
+    ]
+  }
+]

vclogin/__tests__/testdata/policies/acceptAnythingMultiVC.json

@@ -0,0 +1,32 @@
+[
+  {
+    "credentialId": "1",
+    "patterns": [
+      {
+        "issuer": "*",
+        "claims": [
+          {
+            "claimPath": "$1.credentialSubject.*",
+            "newPath": "$.firstCredentialSubject",
+            "required": false
+          }
+        ]
+      }
+    ]
+  },
+  {
+    "credentialId": "2",
+    "patterns": [
+      {
+        "issuer": "*",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.*",
+            "newPath": "$.secondCredentialSubject",
+            "required": false
+          }
+        ]
+      }
+    ]
+  }
+]

vclogin/__tests__/testdata/policies/acceptEmailFromAltme.json

@@ -1,6 +1,6 @@
 [
   {
-    "credentialId": "one",
+    "credentialId": "1",
     "patterns": [
       {
         "issuer": "did:web:app.altme.io:issuer",

vclogin/__tests__/testdata/policies/acceptEmailFromAltmeConstr.json

@@ -1,6 +1,6 @@
 [
   {
-    "credentialId": "one",
+    "credentialId": "1",
     "patterns": [
       {
         "issuer": "did:web:app.altme.io:issuer",

vclogin/__tests__/testdata/policies/acceptEmployeeFromAnyone.json

@@ -1,6 +1,6 @@
 [
   {
-    "credentialId": "one",
+    "credentialId": "1",
     "patterns": [
       {
         "issuer": "*",

vclogin/__tests__/testdata/policies/acceptMultiEmailFromAltmeConstr.json

@@ -0,0 +1,38 @@
+[
+  {
+    "credentialId": "1",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.email"
+          }
+        ],
+        "constraint": {
+          "op": "equalsDID",
+          "a": "$VP.proof.verificationMethod",
+          "b": "$1.credentialSubject.id"
+        }
+      }
+    ]
+  },
+  {
+    "credentialId": "2",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.type"
+          }
+        ],
+        "constraint": {
+          "op": "equalsDID",
+          "a": "$2.credentialSubject.id",
+          "b": "$1.credentialSubject.id"
+        }
+      }
+    ]
+  }
+]

vclogin/__tests__/testdata/policies/acceptMultiEmailFromAltmeSimpleConstr.json

@@ -0,0 +1,33 @@
+[
+  {
+    "credentialId": "1",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.email"
+          }
+        ],
+        "constraint": {
+          "op": "equalsDID",
+          "a": "$VP.proof.verificationMethod",
+          "b": "$1.credentialSubject.id"
+        }
+      }
+    ]
+  },
+  {
+    "credentialId": "2",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.type"
+          }
+        ]
+      }
+    ]
+  }
+]

vclogin/__tests__/testdata/policies/acceptMultiVCFromAltmeConstr.json

@@ -0,0 +1,38 @@
+[
+  {
+    "credentialId": "1",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.email"
+          }
+        ],
+        "constraint": {
+          "op": "equalsDID",
+          "a": "$VP.proof.verificationMethod",
+          "b": "$1.credentialSubject.id"
+        }
+      }
+    ]
+  },
+  {
+    "credentialId": "2",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.firstName"
+          }
+        ],
+        "constraint": {
+          "op": "equals",
+          "a": "$2.credentialSubject.id",
+          "b": "$1.credentialSubject.id"
+        }
+      }
+    ]
+  }
+]

vclogin/__tests__/testdata/policies/acceptMultiVCFromAltmeMisconfigured.json

@@ -0,0 +1,28 @@
+[
+  {
+    "credentialId": "one",
+    "patterns": [
+      {
+        "issuer": "*",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.type"
+          }
+        ]
+      }
+    ]
+  },
+  {
+    "credentialId": "two",
+    "patterns": [
+      {
+        "issuer": "*",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.id"
+          }
+        ]
+      }
+    ]
+  }
+]

vclogin/__tests__/testdata/policies/acceptMultiVCFromAltmeSimpleConstr.json

@@ -0,0 +1,33 @@
+[
+  {
+    "credentialId": "1",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.email"
+          }
+        ],
+        "constraint": {
+          "op": "equalsDID",
+          "a": "$VP.proof.verificationMethod",
+          "b": "$1.credentialSubject.id"
+        }
+      }
+    ]
+  },
+  {
+    "credentialId": "2",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.firstName"
+          }
+        ]
+      }
+    ]
+  }
+]

vclogin/__tests__/testdata/policies/acceptVerifiableIDFromAltme.json

@@ -0,0 +1,21 @@
+[
+  {
+    "credentialId": "1",
+    "patterns": [
+      {
+        "issuer": "did:web:app.altme.io:issuer",
+        "claims": [
+          {
+            "claimPath": "$.credentialSubject.dateOfBirth"
+          },
+          {
+            "claimPath": "$.credentialSubject.firstName"
+          },
+          {
+            "claimPath": "$.credentialSubject.familyName"
+          }
+        ]
+      }
+    ]
+  }
+]