Feature/iam bridge flow

cli/src/commands/setup/issuer.ts

@@ -146,14 +146,20 @@ export async function setupCreateIssuer2(ctx: CommandContext): Promise<void> {
             },
           },
         },
-        clientAttestationConfig: {
-          required: true,
-          verificationMethod: {
-            type: 'static-jwk',
-            jwk: attesterPublicJwk,
-          },
-          clockSkewSeconds: 300,
-          replayWindowSeconds: 300,
+        clientAuthenticationConfig: {
+          supportedMethods: [
+            {
+              type: 'client-attestation',
+              config: {
+                verificationMethod: {
+                  type: 'static-jwk',
+                  jwk: attesterPublicJwk,
+                },
+                clockSkewSeconds: 300,
+                replayWindowSeconds: 300,
+              },
+            },
+          ],
         },
       };
       ctx.saveJson('create-issuer2-request.json', request, step);

cli/src/commands/system.ts

@@ -10,7 +10,7 @@
  */
 
 import { CommandContext } from '../context.js';
-import { buildBaseUrl, buildOrgUrl } from '../config.js';
+import { buildBaseUrl } from '../config.js';
 
 // ============================================================================
 // System Commands
@@ -56,8 +56,8 @@ export async function createSuperadminAccount(ctx: CommandContext): Promise<bool
   console.log('   [INFO] Using credentials from: config/superadmin-registration.conf');
 
   try {
-    const orgUrl = buildOrgUrl(ctx.config.baseUrl, ctx.config.organization, ctx.config.port);
-    const response = await fetch(`${orgUrl}/v1/superadmin/create-by-token`, {
+    const adminUrl = buildBaseUrl(ctx.config.baseUrl, ctx.config.port);
+    const response = await fetch(`${adminUrl}/v1/superadmin/create-by-token`, {
       method: 'POST',
       headers: {
         'accept': '*/*',
@@ -69,7 +69,7 @@ export async function createSuperadminAccount(ctx: CommandContext): Promise<bool
     const text = await response.text();
 
     if (text.includes('exception') || !response.ok) {
-      if (text.includes('already') || text.includes('exists')) {
+      if (text.includes('already') || text.includes('exists') || text.includes('already used')) {
         console.log(`   [SKIP] Superadmin account already exists`);
         return true;
       }

cli/src/flows/dcapi-config.json

@@ -0,0 +1,122 @@
+{
+  "flow_type": "dc_api",
+  "core": {
+    "dcql_query": {
+      "credentials": [
+        {
+          "id": "my_pid",
+          "format": "mso_mdoc",
+          "meta": {
+            "doctype_value": "eu.europa.ec.eudi.pid.1"
+          },
+          "claims": [
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "family_name"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "given_name"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "birth_date"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "age_birth_year"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "age_over_18"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "age_over_21"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "family_name_birth"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "given_name_birth"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "birth_place"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "birth_country"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "issuance_date"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "expiry_date"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "issuing_authority"
+              ]
+            },
+            {
+              "path": [
+                "eu.europa.ec.eudi.pid.1",
+                "issuing_country"
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    "signed_request": true,
+    "encrypted_response": true,
+    "clientId": "x509_hash:kZ5SI3MAFaLDPRxza8xguw-o6b8LYfmP2ZvrqVSRWng",
+    "key": {
+      "type": "jwk",
+      "jwk": {
+        "kty": "EC",
+        "crv": "P-521",
+        "x": "APWg4T3FQIeJD_xQN0kap5Mzp7lJ17Ctg_T8Gy24lwOp_EIhDzBK9MoCufSIITRolWlcjFTj3Ty91C9rctTuSf0F",
+        "y": "AEnFDKiecuqnZ8XMKgt7dFZWRfmzPFrgQmauwlbXDC0kHCZhV76VOgCoWdzfSLegLKGn-nINAIRqPR9n2KPpQwKn",
+        "d": "AZT9f0qOOSMQl25qXwvFs23rq0PIUOV1R8YcG1iqRNKEYYs5k8gXNNuud4W6amuItCGWCrKSXRoHmgj6C5NUDzhA"
+      }
+    },
+    "x5c": [
+      "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",
+      "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"
+    ]
+  },
+  "expectedOrigins": [
+    "http://waltid.enterprise.localhost"
+  ]
+}