Support OpenID Connect for Verifiable Presentations (SIOP)

[rolsonquadras]

Wallet should support OpenID Connect for Verifiable Presentations spec. The spec uses DIF Presentation Exchange specification, which is already supported by TrustBloc wallet. As part of the implementation, the PEx should be wrapped in OIDC SIOP request/response.

Tasks:

• Handle Auth request
  • Add Authentication request endpoint in wallet-web
  • Extract PEx from claims query param
  • Run a search through existing VCs in Wallet
  • Show preview/consent screen
  • Construct Authentication Response (including vp_token)
• [oidc4vp] mock-verifier to test oidc-vp flows #1529
• [oidc4vp] Automation tests for OIDC-VP flow #1530
• [oidc4vp] generate vp_token #1563
• [oidc4vp] generate id_token #1560
• [oidc4vp] display id_token and vp_token in mock-verifier success page #1585
• [oidc4vp] relying party registration #1558
  • [oidc4vp] relying party registration (Pre-Registered Relying Party) #1627
  • [oidc4vp] relying party registration (Non-Pre registered Relying Party) #1628
• [oidc4vp] validate auth request #1559
• [oidc4vp] document spec divergence #1582
• [oidc4vp] expose oidc config file for discovery #1652

Additional Tasks:

• SIOP authorization request claims as URL encoded string (and base64URL support if required)
• currently wallet is reading and validating only presentation definition from claims vp_token & redirect URL
• validating VP formats from vp_token against RP metadata vp_formats.
• id token from wallet has to be upgraded to match specifications. Currently fake empty JWT is being used.
• preventing replay attacks (using nonce)
• fetching presentation definition by reference
• Support for Federations/Trust Schemes
• Need story for authorization token flow

[sudeshrshetty]

Reference for how to perform presentation definition query in wallet: https://github.com/trustbloc/agent-sdk/blob/51b612b6a37ab5b44824078b00420d7cd6e3c737/cmd/wallet-js-sdk/test/specs/credential/credential-manager.spec.js#L455-L472