[2024/2/17 update]
credo-ts libは、openid-credential-offerに含まれる"credentials":["OpenBadgeCredential"]をもとにissuerのmetadataを検索する。なのでmetadataに含まれる値、すなわち"credentials":["OpenBadgeCredentialJwt"]に変更
はじめに
最近EUDI walletの話をよく聞くようになってきた。EUDIとは欧州デジタルIDウォレットのことらしい(参考)。IDウォレットではOpenID4VCI/OpenID4VP+SIOPv2を使って、VCの受け渡しをするようである。
図にすると以下のような感じなる(引用元：globalPlatform)
このOpenID4VCIを試す事ができるものがないか探してみると「Sphereon Wallet」を見つけることが出来た。さらに都合のいいことにios app storeで配付されていた(https://github.com/Sphereon-Opensource/ssi-mobile-wallet)。
またOpenID4VCI/OpenID4VPをしゃべるdemoサーバも用意されていて、以下のサイトで試す事が出来る。
このプロトコルの中身を見ながら、最終的には簡易的なopenID4VCIをしゃべるサーバをnodejsで作ってみようと思う。
OpenID4VCIの動き
1) QRコードを発行
demoサーバにブラウザでアクセスし、[manually fill out details]を選択して、適当なfirstname/lastname, emailを入力してcontinueをクリック。その後select credentials画面が出るので「University degree」を選択すると、下記のようなQRコードが発行される
QRコードの中身は以下のようになっている。
openid-credential-offer://?credential_offer={
"grants":{
"urn:ietf:params:oauth:grant-type:pre-authorized_code":{
"pre-authorized_code":"AZcbrjCMa9StPQxVQRQAf",
"user_pin_required":false
}
},
"credentials":["OpenBadgeCredential"],
"credential_issuer":"https://ssi.sphereon.com/pf3"
}
2) Credential Issuer Metadata の用意
QRコードを読み取ったスマホは、issuerのMetadata情報(issuerはどのURLでCredentialsを発行していて、どこでtokenをもらえるかなどが書かれたJSON)を取得しにくる。demoサーバの場合、https://ssi.sphereon.com/pf3/.well-known/openid-credential-issueがそのURLである。以下のようなjsonが用意されている。
metadata.json
{
"credential_issuer":"https://ssi.sphereon.com/pf3",
"credential_endpoint": "https://ssi.sphereon.com/pf3/credentials",
"token_endpoint": "https://ssi.sphereon.com/pf3/token",
"display":[{name":"Sphereon","description":"Sphereon JFF Plugfest3 Issuer"}],
"credentials_supported":[
{..}
{..}
{
"display":[
{
"name":"Example University Degree",
"description":"JFF Plugfest 3 OpenBadge (JWT)",
"text_color":"#FFFFFF",
"background_color":"#1763c1",
"logo":{
"url":"https://w3c-ccg.github.io/vc-ed/plugfest-1-2022/images/JFF_LogoLockup.png",
"alt_text":"Red, magenta and yellow vertical lines with 3 black dots and the text JFF, depicting the Jobs For the Future logo."
}
},
{
"locale":"en-US",
"name":"Example University Degree",
"description":"JFF Plugfest 3 OpenBadge (JWT)"",
"text_color":"#FFFFFF",
"background_color":"#1763c1",
"logo":{
"url":"https://w3c-ccg.github.io/vc-ed/plugfest-1-2022/images/JFF_LogoLockup.png",
"alt_text":"Red, magenta and yellow vertical lines with 3 black dots and the text JFF, depicting the Jobs For the Future logo."
}
}
],
"id":"OpenBadgeCredentialJwt",
"types":["VerifiableCredential","OpenBadgeCredential"],
"format":"jwt_vc_json",
"cryptographic_binding_methods_supported":["did:key"],
"cryptographic_suites_supported":["EdDSA"]
}
],
"credential_supplier_config":{
"templates_base_dir":"templates/sphereon",
"template_mappings":[
{..},
{..},
{
"credential_types":["OpenBadgeCredential"],
"template_path":"OpenBadgeCredential.hbs",
"format":"jwt_vc_json"
}
]
}
};
3) tokenを発行
QRコードに書かれたpre-authorized_codeを用いて、スマホはdemoサーバからtokenを取得する。curlで書くと以下になる
curl https://ssi.sphereon.com/pf3/token -X POST -H "Content-Type: application/json" -d @data1.txt
data1.txt
{
"client_id": "sphereon:ssi-wallet",
"grant_type": "urn:ietf:params:oauth:grant-type:pre-authorized_code",
"pre-authorized_code": "AZcbrjCMa9StPQxVQRQAf"
}
POSTに成功すると、以下のような値が返ってくる
{
"access_token":"eyJ0eXAiOiJKV1....6Vg8v4xrWbxA",
"token_type":"bearer",
"expires_in":300,
"c_nonce":"48aa8701-dbec-4e56-a49e-2d9bf83f7ec3",
"c_nonce_expires_in":300000,
"authorization_pending":false,
"interval":300000
}
access_tokeの中身は、以下のようなJWTになっている。
{"typ":"JWT", "alg":"ES256K"}.
{
"iat":1704349765484, "exp":300,
"iss":"https://ssi.sphereon.com/pf3",
"preAuthorizedCode":"AZcbrjCMa9StPQxVQRQAf"
}.signature
4) VCを発行
スマホは、metadata情報にｋhttps://ssi.sphereon.com/pf3/credentialsに、3)で取得したaccess_tokenを用いてアクセスすることでVCを取得することができる。curlで書くと以下になる。
curl https://ssi.sphereon.com/pf3/credentials -X POST -H "Content-Type: application/json" -H "authorization: Bearer eyJ0eXAiOiJKV1....6Vg8v4xrWbxA" -d @data2.txt
data2.txt
{
"types": [ "OpenBadgeCredential" ],
"format": "jwt_vc_json",
"proof": {
"proof_type": "jwt",
"jwt": "eyJhbGciOiJFUzI1Nksi....7GootXw"
}
}
このdata2.txtに書かれているjwtをbase64デコードすると中身は以下の通りである。token取得時にdemoサーバから発行されたc_nonceや、issuer endpoint:https://ssi.sphereon.com/pf3を用いて生成されている。
{
"alg":"ES256K",
"typ":"openid4vci-proof+jwt",
"kid":"did:key:zQ3shdST2uDCn8eNRhTNYs3Yh6dDx9aYQSV7gYyFfhc9kCxnm"}.
{
"iat":1704349849,"exp":1704353449,
"aud":"https://ssi.sphereon.com/pf3",
"nonce":"48aa8701-dbec-4e56-a49e-2d9bf83f7ec3",
"iss":"sphereon:ssi-wallet",
"jti":"C289A6F6-7731-49B6-BC4A-CF8247369D2D"
}.signature
POSTが成功すると、VC credentialが入ったJSONが返ってくる。
{
"credential":"eyJhbGciOiJFUzI1NiIsInR5c....kX8s64CusI6Tz-ZtJkQ",
"format":"jwt_vc_json",
"c_nonce":"1fbd4fa8-cd62-4b90-a07f-9201d97f9951",
"c_nonce_expires_in":300000
}
credentialの中身をデコードすると、以下のようになっている。
{"alg":"ES256","typ":"JWT"}.
{
"exp":1704954740,
"vc":{
"@context":["https://www.w3.org/2018/credentials/v1","https://purl.imsglobal.org/spec/ob/v3p0/context.json"],
"type":["VerifiableCredential","OpenBadgeCredential"],
"credentialSubject":{
"type":["AchievementSubject"],
"achievement":{
"id":"urn:uuid:ac254bd5-8fad-4bb1-9d29-efd938536926",
"type":["Achievement"],
"name":"JFF x vc-edu PlugFest 3 Interoperability",
"description":".........<snip>.......",
"criteria":{
"type":"Criteria",
"narrative":".........<snip>......."
},
"image":{
"id":"https://w3c-ccg.github.io/vc-ed/plugfest-3-2023/images/JFF-VC-EDU-PLUGFEST3-badge-image.png",
"type":"Image"
}
},
"id":"did:key:zQ3shdST2uDCn8eNRhTNYs3Yh6dDx9aYQSV7gYyFfhc9kCxnm"
}
},
"@context":["https://www.w3.org/2018/credentials/v1","https://purl.imsglobal.org/spec/ob/v3p0/context.json"],
"type":["VerifiableCredential","OpenBadgeCredential"],
"expirationDate":"2024-01-11T06:32:20.016Z",
"name":"JFF x vc-edu PlugFest 3 Interoperability",
"issuer":{
"type":["Profile"],
"name":"Jobs for the Future (JFF)",
"url":"https://www.jff.org/",
"image":"https://w3c-ccg.github.io/vc-ed/plugfest-1-2022/images/JFF_LogoLockup.png",
"id":"did:jwk:eyJhbGciOiJ....M4In0"
},
"credentialSubject":{
"type":["AchievementSubject"],
"achievement":{
"id":"urn:uuid:ac254bd5-8fad-4bb1-9d29-efd938536926",
"type":["Achievement"],
"name":"JFF x vc-edu PlugFest 3 Interoperability",
"description":".........<snip>.......",
"criteria":{
"type":"Criteria",
"narrative":".........<snip>......."
},
"image":{
"id":"https://w3c-ccg.github.io/vc-ed/plugfest-3-2023/images/JFF-VC-EDU-PLUGFEST3-badge-image.png",
"type":"Image"
}
},
"id":"did:key:zQ3shdST2uDCn8eNRhTNYs3Yh6dDx9aYQSV7gYyFfhc9kCxnm"
},
"issuanceDate":"2024-01-04T06:32:20.016Z",
"sub":"did:key:zQ3shdST2uDCn8eNRhTNYs3Yh6dDx9aYQSV7gYyFfhc9kCxnm",
"nbf":1704349940,
"iss":"did:jwk:eyJhbGciOiJ....M4In0"
}.signature
簡易サーバで動作確認
demoサーバ：https://ssi.sphereon.com/demo/issuer/の動きをnodejsで実装し、SSI sphereon walletにVCを発行してみる
1. index.html, server.js, package.jsを以下のフォルダ構成のように配置する
├── server.js
├── package.json
└── views/
├── index.html
index.htmlのコードを見る
index.html
<!DOCTYPE html>
<html lang='en'>
<head><meta charset='utf-8'></head>
<body>
<div align=center>
<div id="title">[ngrok openBadge issue]</div><br>
<div id="parameter">University:<input type="text" id="university" value="xx University"><br>
achievement:<input type="text" id="achievement" value="Math."><br>
<input type="button" value="発行" onclick="issuerQR()"/><br>
<p><div id=qrmsg></div>
<p><div id=qr></div>
</div>
</body>
<script type="text/javascript">
function getData(url, type, cb){
let xhr = new XMLHttpRequest();
xhr.onreadystatechange = function(){
switch(xhr.readyState){
case 4:
if (xhr.status == 200||xhr.status ==304){
cb(xhr.response)
}
}
};
xhr.open("GET", url, false);
xhr.setRequestHeader('Content-Type', type);
xhr.send('');
}
function sendData(url, data, type, cb){
let xhr = new XMLHttpRequest();
xhr.onreadystatechange = function(){
switch(xhr.readyState){
case 4:
if (xhr.status == 200||xhr.status ==304){
console.log("send success");
cb(xhr.response)
}
}
};
xhr.open("POST", url, false);
xhr.setRequestHeader('Content-Type', type);
xhr.send(data);
}
function issuerQR() {
let setting={
"clientName": "ngrok openBadge issue",
"type": "openBadge",
"claims": {"university": document.getElementById('university').value, "achievement": document.getElementById('achievement').value}
}
sendData("./.issuer_init", JSON.stringify(setting), 'application/json',
function(data){
target = document.getElementById("qr");
target.innerHTML = "<img src="+JSON.parse(data).qrcode+" />";
let interval_id = setInterval(
function(){
console.log("request check status");
istatusCheck(interval_id, JSON.parse(data).sess);
}, 3000);
}
);
}
function istatusCheck(clearid, sess){
getData("./.istatus/"+sess, 'application/json',
function(data){
console.log("status:"+JSON.parse(data).status);
if (JSON.parse(data).status == "request_retrieved"){
let msg = "QR code sccand. waiting..";
if (typeof JSON.parse(data).pin !=="undefined"){ msg +="PIN:"+JSON.parse(data).pin;}
document.getElementById("qrmsg").innerHTML =msg;
}else if(JSON.parse(data).status == "issuance_successful"){
document.getElementById("qrmsg").innerHTML = "finish";
document.getElementById("qr").innerHTML = "";
clearInterval(clearid);
}
}
);
}
</script>
</html>
server.jsのコードを見る
server.js
const express = require('express');
const bodyParser = require('body-parser');
const app = express();
const http = require('http');
const QRCode = require('qrcode');
const crypto = require('crypto');
const elliptic = require('elliptic');
const didJWT = require('did-jwt');
const fs = require('fs');
const uuid = require('uuid');
const base58 = require('bs58');
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: true }));
app.use('/', express.static(__dirname + '/views/'));
//*******setting********
const port=8888;
let hostname = '127.0.0.1'+":"+port;
if (process.argv.length > 2){ hostname = process.argv[2];}
//**********************
//*******global variable*******
let DID="did:web:"+hostname;
let task= new Array();
let taskstatus= new Array();
let storageJson=[];
let didwebkey, didkey, didjwk;
const main = async()=>{
didwebkey = await init(hostname);
didkey = a_did(didwebkey, "key");
didjwk = a_did(didwebkey, "jwk");
console.log("\n " + DID)
console.log(" " + didkey)
console.log(" " + didjwk+"\n")
}
main();
//******************************
//*******web server*******
const httpServer = http.createServer(app);
const server = httpServer.listen(port, () => {
console.log('\n web page start: listening on port %s...', server.address().port);
});
app.get('/.*', async function(req,res){
console.log("\n====GET====");
console.log("cmd:"+JSON.stringify(req.params));
console.log("query:"+JSON.stringify(req.query));
console.log("headers:"+JSON.stringify(req.headers));
console.log(req.body);
console.log("====GET====");
let ret="";
let cmd = req.params[0].split('/');
if (cmd[0] =="pf" && cmd[1] ==".well-known" && cmd[2] == "openid-credential-issuer"){
console.log("access to openid-credential-issuer")
let _metadata = await metadata(hostname, "");
res.send(_metadata);
} else if (cmd[0] =="istatus"){
ret={"status":taskstatus[cmd[1]].vcstatus};
res.send(JSON.stringify(ret));
}else{
res.send(ret);
}
});
app.post('/.*', async function(req,res){
console.log("\n====POST====");
console.log("cmd:"+JSON.stringify(req.params));
console.log("query:"+JSON.stringify(req.query));
console.log("headers:"+JSON.stringify(req.headers));
console.log(req.body);
console.log("====POST====");
let ret="";
let cmd = req.params[0].split('/');
if (cmd[0] =="issuer_init"){
let preAuthorizedCode = await issuerInit(req.body);
let offer = {
"grants":{
"urn:ietf:params:oauth:grant-type:pre-authorized_code":{
"pre-authorized_code":preAuthorizedCode,
"user_pin_required":false
}
},
"credentials":["OpenBadgeCredentialJwt"],
"credential_issuer":"https://"+hostname+"/.pf"
}
let inviteUrl = "openid-credential-offer://?credential_offer="+encodeURIComponent(JSON.stringify(offer));
QRCode.toDataURL(inviteUrl, function (err, url) {
let sendData = {"qrcode":url, "sess":task[preAuthorizedCode].sess, "url":task[preAuthorizedCode].serviceEndpoint};
res.send(sendData);
});
}else if(cmd[0] == "pf" && cmd[1]=="token"){
let token={};
let authcode = req.body['pre-authorized_code'];
if (typeof task[authcode] !== "undefined"){
console.log("authenticated!!");
task[authcode].client_id = req.body.client_id;
task[authcode].nonce = uuid.v4();
let atoken = await makeToken(authcode, 300);
token = {
"access_token":atoken,
"token_type":"bearer",
"expires_in":300,
"c_nonce":task[authcode].nonce,
"c_nonce_expires_in":300000,
"authorization_pending":false,
"interval":300000
}
res.send(JSON.stringify(token))
}else{
console.log("unauthenticated!!:"+ req.body['pre-authorized_code']);
res.send(JSON.stringify(token))
}
}else if (cmd[0] == "pf" && cmd[1]=="credentials"){
let credJson={}
let auth = req.headers.authorization;
let token = didJWT.decodeJWT(auth.split(" ")[1]);
if (typeof task[token.payload.preAuthorizedCode] !== "undefined"){
let _jwt = didJWT.decodeJWT(req.body.proof.jwt);
if (task[token.payload.preAuthorizedCode].nonce == _jwt.payload.nonce
&& task[token.payload.preAuthorizedCode].serviceEndpoint == _jwt.payload.aud){
let _kid = _jwt.header.kid;
let cred = await makecred(
_kid, uuid.v4(),
Math.floor( new Date().getTime() / 1000 ) , 30*24*60*60, // from now to 1 month
task[token.payload.preAuthorizedCode].sess
);
let credJson = {
"credential":cred,
"format":"jwt_vc_json",
"c_nonce":uuid.v4(),
"c_nonce_expires_in":300000
}
taskstatus[task[token.payload.preAuthorizedCode].sess].vcstatus="issuance_successful";
res.send(JSON.stringify(credJson))
}else{
console.log("bad nonce or bad aud")
res.send(JSON.stringify(credJson))
}
}else{
console.log("unauthentication: bad token")
res.send(JSON.stringify(credJson))
}
}else{
res.send(null);
}
});
//////////////////////
// support function
///////////////////////
async function issuerInit(_body){
let preAuthorizedCode = base58.encode(crypto.randomBytes(18));
console.log(preAuthorizedCode)
let sess = crypto.randomBytes(8).toString("hex")
let serviceEndpoint = "https://"+hostname+"/.pf";
task[preAuthorizedCode]= {
"claims": _body.claims,
"preAuthorizedCode":preAuthorizedCode,
"serviceEndpoint":serviceEndpoint,
"isskey": didwebkey,
"sess": sess
};
taskstatus[sess]={"vcstatus":"wait", "claims":_body.claims};
return preAuthorizedCode;
}
async function metadata(_hostname, _sess){
let _endpoint = "https://"+_hostname+"/.pf";
let ret = {
"credential_issuer":_endpoint,
"credential_endpoint": _endpoint + "/credentials",
"token_endpoint": _endpoint + "/token",
"display":[{"name":"ngrok:"+hostname,"description":"ngrok Issuer:"+hostname}],
"credentials_supported":[{
"display":[
{
"name":"xx university",
"description":"OpenBadge (JWT)",
"text_color":"#FFFFFF",
"background_color":"#1763c1",
"logo":{
"url":"https://w3c-ccg.github.io/vc-ed/plugfest-1-2022/images/JFF_LogoLockup.png",
"alt_text":"Red, magenta and yellow vertical lines with 3 black dots and the text JFF, depicting the Jobs For the Future logo."
}
},
{
"locale":"en-US",
"name":"xx university",
"description":"OpenBadge (JWT)",
"text_color":"#FFFFFF",
"background_color":"#1763c1",
"logo":{
"url":"https://w3c-ccg.github.io/vc-ed/plugfest-1-2022/images/JFF_LogoLockup.png",
"alt_text":"Red, magenta and yellow vertical lines with 3 black dots and the text JFF, depicting the Jobs For the Future logo."
}
}
],
"id":"OpenBadgeCredentialJwt",
"types":["VerifiableCredential","OpenBadgeCredential"],
"format":"jwt_vc_json",
"cryptographic_binding_methods_supported":["did:key"],
"cryptographic_suites_supported":["EdDSA"]
}],
"credential_supplier_config":{
"templates_base_dir":"templates/sphereon",
"template_mappings":[
{
"credential_types":["OpenBadgeCredential"],
"template_path":"OpenBadgeCredential.hbs",
"format":"jwt_vc_json"
}
]
}
};
return ret;
}
async function makecred(_subdidkey, _uuid, _nbf, _exp, _sess){
const signer = didJWT.ES256KSigner(didJWT.hexToBytes(Buffer.from(didwebkey.privateJwk.d, 'base64').toString('hex')))
let _body = {
"vc":await makevc(_subdidkey, _uuid, taskstatus[_sess].claims.achievement),
"@context":["https://www.w3.org/2018/credentials/v1","https://purl.imsglobal.org/spec/ob/v3p0/context.json"],
"type":["VerifiableCredential","OpenBadgeCredential"],
"name": taskstatus[_sess].claims.university +"'s openBadge",
"issuer":{
"type":["Profile"],
"name":"Jobs",
"url":"https://www.jff.org/",
"image":"https://w3c-ccg.github.io/vc-ed/plugfest-1-2022/images/JFF_LogoLockup.png",
"id":didjwk
},
"credentialSubject":{
"type":["AchievementSubject"],
"achievement":{
"id":"urn:uuid:"+_uuid,
"type":["Achievement"],
"name":taskstatus[_sess].claims.university +"'s openBadge",
"description":"demo",
"criteria":{
"type":"Criteria",
"narrative":"..."
},
"image":{
"id":"https://w3c-ccg.github.io/vc-ed/plugfest-3-2023/images/JFF-VC-EDU-PLUGFEST3-badge-image.png",
"type":"Image"
}
},
"id": _subdidkey
},
"sub": _subdidkey,
"iss": didjwk,
"nbf": _nbf
}
let jwt = await didJWT.createJWT(
_body,
{ issuer: didjwk, expiresIn:_exp, signer },
{ alg: 'ES256K' , typ:'JWT'}
)
return jwt
}
async function makevc(_subdidkey, _uuid, name){
let _vc = {
"@context":["https://www.w3.org/2018/credentials/v1","https://purl.imsglobal.org/spec/ob/v3p0/context.json"],
"type":["VerifiableCredential","OpenBadgeCredential"],
"credentialSubject":{
"type":["AchievementSubject"],
"achievement":{
"id":"urn:uuid:"+_uuid,
"type":["Achievement"],
"name": name,
"image":{
"id":"https://w3c-ccg.github.io/vc-ed/plugfest-3-2023/images/JFF-VC-EDU-PLUGFEST3-badge-image.png",
"type":"Image"
}
},
"id":_subdidkey
}
};
return _vc;
}
async function init(_hostname){
let _did = "did:web:"+_hostname;
let _key = await loadDid(_did);
if (_key ==null){
console.log("\n this "+_did+"'s key not registered")
let _key = await createkey();
await saveDid(_did, _key);
return _key;
}else{
console.log("\n this "+_did+"'s key is registered")
return _key;
}
}
async function loadDid(_did){
let key = null;
try{
storageJson = JSON.parse(fs.readFileSync('./storage.json'));
storageJson.forEach((item) =>{
if (item.did == _did) key = item.key
})
return key;
}catch(err){
return null;
}
}
async function saveDid(_did, _key){
storageJson.push({did:_did, key:_key})
try{
fs.writeFileSync("./storage.json", JSON.stringify(storageJson))
}catch(err){
console.error(err);
}
}
async function createkey(){
const key = crypto.randomBytes(32).toString("hex");
const ec = new elliptic.ec('secp256k1');
const prv = ec.keyFromPrivate(key, 'hex');
const pub = prv.getPublic();
const ecjwk = {
kty:"EC",
crv:"secp256k1",
"x":pub.x.toBuffer().toString('base64'),
"y":pub.y.toBuffer().toString('base64')
};
const ecjwkpri = {
kty:"EC",
crv:"secp256k1",
"x":pub.x.toBuffer().toString('base64'),
"y":pub.y.toBuffer().toString('base64'),
"d":prv.getPrivate().toBuffer().toString('base64')
};
let _key={"publicJwk":ecjwk,"privateJwk":ecjwkpri};
return _key;
}
function a_did(key, method){
let ret = "";
if (method == "key"){
if (key.publicJwk.kty == "EC" && key.publicJwk.crv=="secp256k1"){
let yhex = Buffer.from(key.publicJwk.y, 'base64').toString('hex')
if ((parseInt(yhex.slice( -1 ), 16) %2)==1){
parity_flag = "03";
}else{
parity_flag = "02";
}
let tmp = "E701" + parity_flag + Buffer.from(key.publicJwk.x, 'base64').toString('hex');
ret = "did:key:z"+base58.encode(Buffer.from(tmp, 'hex'));
}
}else if(method == "jwk"){
if (key.publicJwk.kty == "EC" && key.publicJwk.crv=="secp256k1"){
let jwt = {"alg":"ES256K","use":"sig","kty":"EC","crv":"secp256k1","x":key.publicJwk.x.replaceAll("=",""),"y":key.publicJwk.y.replace("=", "")}
ret = "did:jwk:"+Buffer.from(JSON.stringify(jwt)).toString('base64').replaceAll("=", "");
}
}else{
}
return ret;
}
async function makeToken(authcode, exp){
const signer = didJWT.ES256KSigner(didJWT.hexToBytes(Buffer.from(task[authcode].isskey.privateJwk.d, 'base64').toString('hex')))
let jwt = await didJWT.createJWT(
{ preAuthorizedCode: authcode},
{ issuer: task[authcode].serviceEndpoint, expiresIn:exp, signer },
{ alg: 'ES256K' , typ:'JWT'}
)
return jwt
}
package.jsonのコードを見る
package.json
{
"dependencies": {
"body-parser": "^1.20.2",
"bs58": "^5.0.0",
"did-jwt": "^7.4.7",
"elliptic": "^6.5.4",
"express": "^4.18.2",
"qrcode": "^1.5.3",
"uuid": "^9.0.1"
}
}
2. 関連モジュールをインストールする
> npm install
3. サーバに割り当てるドメイン名を取得
> ngrok http 8888
Region United States (us)
Web Interface http://127.0.0.1:4040
Forwarding http://57dd-180-53-77-xxx.ngrok-free.app -> http://localhost:8888
Forwarding https://57dd-180-53-77-xxx.ngrok-free.app -> http://localhost:8888
4. 取得したドメイン名を引数に、サーバを起動する
> nodejs server.js 57dd-180-53-77-xxx.ngrok-free.app
web page start: listening on port 8888...
this did:web:6f3d-153-219-137-227.ngrok-free.app's key is registered
did:web:57dd-180-53-77-xxx.ngrok-free.app
did:key:zQ3shq4taAWbUYmvaf4gNmfR9ZtJ1wN8nauwRxnacLQarYTCp
did:jwk:eyJhbGciOiJFUzI1NksiLCJ1c2UiOiJzaWciLCJrdHkiOiJFQyIsImNydiI6InNlY3AyNTZrMSIsIngiOiJtdTR4b0JHV0lmd0VvYkoyN3krcitMYjhCSklqaC9kU1pYRmlRaEN6clIwIiwieSI6InJ5Nkh5QmVqNENOVllveGZZYmQrOW1ibVZWU0VySEdDUUQ1NnJ5TFFrenMifQ
5. ブラウザでhttps://57dd-180-53-77-xxx.ngrok-free.app/にアクセス
-
画面上にある「発行」ボタンを押してQRコードを表示
-
表示されたQRコードを、スマホでスキャンするとVC発行の手続きが始まる
