EUDIW pilot setup

Description

This page describes a Digital Identity wallet interoperability lab setup. Including the components used in the lab and APIs that needs to be followed to connect to the lab.

Interoperability lab

Overview of the wallet ecosystem
DC4EU issuer and verifier architecture
DC4EU interoperability lab

Supporting documentation

DC4EU Open Source Architechture

Lab components 

Wallets

• wwWallet - https://demo.wwwallet.org/login
• DC4EU instance of wwWallet - https://wallet.dc4eu.eu/login
• EUDIW Reference Implementation - https://github.com/eu-digital-identity-wallet/.github/blob/main/profile/reference-implementation.md

Issuers

• DC4EU generic issuer
  • Credential constructor and datastore - https://github.com/dc4eu/vc

Verifiers

• Under development

Trust frameworks

• OpenID federation - https://github.com/SUNET/docker-fedservice/tree/main

APIs

• Authentic source <-> Issuer/Datastore Rest API - https://github.com/dc4eu/vc/tree/main/standards
  • Live setup https://vc-test-1.sunet.se/datastore/swagger/index.html#/

Setup steps

Openid federation

• Copy all files from https://github.com/SUNET/docker-fedservice/tree/main/setup_SUNET into /opt
• Start all the dockers with docker compose -f /opt/openidfed/docker-compose.yml up
• Configure everything with /opt/setup.sh

Wallet provider

• Configure SaToSa with a backend for user verification
• Configure a frontend according to info in https://github.com/rohe/satosa-openid4vci/tree/main/openid4vci_oidc
  • docker exec -t openidfed-ta_eu-1 bash -c "/src/fedservice/setup_federation/get_info.py  -k -t https://0.0.0.0:8443 > /data/trust_anchor.json" to get TA-keys
  • docker exec -t openidfed-tmi-1 bash -c "/src/fedservice/setup_federation/create_trust_mark.py -d /data -m http://dc4eu.example.com/PersonIdentificationData/se -e https://satosa-test-1.sunet.se" to create Trust Mark
  • docker exec -t openidfed-ta_eu-1 bash -c "/src/fedservice/setup_federation/add_info.py -s /data/wallet-ci.json -t /data/subordinates" to import Wallet into federation

Endpoints

Trust Anchor Keys

{"https://openidfed-test-1.sunet.se:7001": {"keys": [{"kty": "RSA", "use": "sig", "kid": "UFpoajluZU42dTNUUXo5RnhBVEJnRk9JY2N
tU1JKdlVYUk1RUFRyVkFFRQ", "n": "p9S2whcSjmBdxerp80tIJreUUmZiGNGXIocJlNjx9pgD5_WD2l6mBNuEZMpP-QUB_TSV3VesNiqmOdydGp1wkfQ-NmVdo
so29FjEdgrckLIwirAVmVQ6bGQQnXJrR56mRz0QqENi11vVpbDj6hsprxK1EZBQL-sQ2kem289B_BCNT-NvwVHrYJlaQA32z7cs1a7W8wt9eLxA10PeiYMgDVU_69
wKBw4YrjjozOHKMRGchUQEjQhfSZfk49bip_5TNz4dmBmSCIbdE2yilFrfRSNrh7q2myuyDE3k2QZbSOXXGGT1LtHO74WIY58v-M3A7_zxp0f2Eo9ZD3N4h-InIw"
, "e": "AQAB"}, {"kty": "EC", "use": "sig", "kid": "Nm82cTJKMDkydXhxOUMtTm0teFpMWlZiR0ZVa2U3YVVtbkJTV3hBd3FqOA", "crv": "P-25
6", "x": "69XlQkKYfWJDXAv_Vbrqyfz9gfAhu1qQ4mtLde18-Cg", "y": "ntBwdhy4_cS2PRBS-xdKkNwcO1yQP8TdoOHbHN9Yjv8"}]}}