Well Known URIs

JWT VC Issuer Metadata

get

A well-known endpoint required to be published as a SD-JWT VC Issuer.

Returned metadata is an object with issuer name and a JWKS that contains public key(s) used in signing issued credentials.

Purpose

Verification of issued credentials.

Supported Standards

• SD-JWT VC - JWT VC Issuer Metadata.

Responses

200

OK

application/json

issuerstringOptional

get/.well-known/jwt-vc-issuer

HTTPcURLJavaScriptPython

GET /.well-known/jwt-vc-issuer HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Accept: */*

200

OK

{
  "issuer": "https://issuer.example.com",
  "jwks": {
    "keys": [
      {
        "kty": "EC",
        "alg": "P-256",
        "kid": "kid",
        "x": "...",
        "y": "..."
      }
    ]
  }
}

Authorization Server Metadata

get

Authorization Server metadata as defined in RFC8414 - OAuth 2.0 Authorization Server Metadata and extended with additional fields and values in:

• RFC 9126 – OAuth 2.0 Pushed Authorization Requests (PAR)

• RFC 9449 - OAuth 2.0 Demonstrating Proof of Possession (DPoP)

• OAuth 2.0 JWT Secured Authorization Response Mode (JARM)

• RFC 9396 - OAuth 2.0 Rich Authorization Requests

• OpenID for Verifiable Credential Issuance (OpenID4VCI 1.0)

The use of this endpoint is optional. It is relevant when the server acts and an Authorization Server. It does so when authorization_servers is omitted from Issuer Metadata or when authorization_servers contains an item that references the server. In that case, the Credential Issuer is also an Authorization Server and its metadata is retrieved from this endpoint.

Responses

200

OK

application/json

authorization_endpointstringOptional

authorization_response_iss_parameter_supportedbooleanOptional

authorization_signing_alg_values_supportedstring[]Optional

claim_types_supportedstring[]Optional

claims_supportedstring[]Optional

code_challenge_methods_supportedstring[]Optional

grant_types_supportedstring[]Optional

id_token_signing_alg_values_supportedstring[]Optional

issuerstringOptional

jwks_uristringOptional

pushed_authorization_request_endpointstringOptional

request_object_signing_alg_values_supportedstring[]Optional

request_parameter_supportedbooleanOptional

request_uri_parameter_supportedbooleanOptional

response_modes_supportedstring[]Optional

response_types_supportedstring[]Optional

scopes_supportedstring[]Optional

subject_types_supportedstring[]Optional

token_endpointstringOptional

token_endpoint_auth_methods_supportedstring[]Optional

get/.well-known/oauth-authorization-server

HTTPcURLJavaScriptPython

GET /.well-known/oauth-authorization-server HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Accept: */*

200

OK

{
  "authorization_endpoint": "text",
  "authorization_response_iss_parameter_supported": true,
  "authorization_signing_alg_values_supported": [
    "text"
  ],
  "claim_types_supported": [
    "text"
  ],
  "claims_supported": [
    "text"
  ],
  "code_challenge_methods_supported": [
    "text"
  ],
  "grant_types_supported": [
    "text"
  ],
  "id_token_signing_alg_values_supported": [
    "text"
  ],
  "issuer": "text",
  "jwks_uri": "text",
  "pushed_authorization_request_endpoint": "text",
  "request_object_signing_alg_values_supported": [
    "text"
  ],
  "request_parameter_supported": true,
  "request_uri_parameter_supported": true,
  "response_modes_supported": [
    "text"
  ],
  "response_types_supported": [
    "text"
  ],
  "scopes_supported": [
    "text"
  ],
  "subject_types_supported": [
    "text"
  ],
  "token_endpoint": "text",
  "token_endpoint_auth_methods_supported": [
    "text"
  ]
}

OpenID Provider Configuration Metadata

get

This endpoint serves the same content as /.well-known/oauth-authorization-server and is here for interoperability reasons. The recommendation is to use /.well-known/oauth-authorization-server whenever possible.

Supported Standards

• OpenID Connect Discovery 1.0

Responses

200

OK

application/json

authorization_endpointstringOptional

authorization_response_iss_parameter_supportedbooleanOptional

authorization_signing_alg_values_supportedstring[]Optional

claim_types_supportedstring[]Optional

claims_supportedstring[]Optional

code_challenge_methods_supportedstring[]Optional

grant_types_supportedstring[]Optional

id_token_signing_alg_values_supportedstring[]Optional

issuerstringOptional

jwks_uristringOptional

pushed_authorization_request_endpointstringOptional

request_object_signing_alg_values_supportedstring[]Optional

request_parameter_supportedbooleanOptional

request_uri_parameter_supportedbooleanOptional

response_modes_supportedstring[]Optional

response_types_supportedstring[]Optional

scopes_supportedstring[]Optional

subject_types_supportedstring[]Optional

token_endpointstringOptional

token_endpoint_auth_methods_supportedstring[]Optional

get/.well-known/openid-configuration

HTTPcURLJavaScriptPython

GET /.well-known/openid-configuration HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Accept: */*

200

OK

{
  "authorization_endpoint": "text",
  "authorization_response_iss_parameter_supported": true,
  "authorization_signing_alg_values_supported": [
    "text"
  ],
  "claim_types_supported": [
    "text"
  ],
  "claims_supported": [
    "text"
  ],
  "code_challenge_methods_supported": [
    "text"
  ],
  "grant_types_supported": [
    "text"
  ],
  "id_token_signing_alg_values_supported": [
    "text"
  ],
  "issuer": "text",
  "jwks_uri": "text",
  "pushed_authorization_request_endpoint": "text",
  "request_object_signing_alg_values_supported": [
    "text"
  ],
  "request_parameter_supported": true,
  "request_uri_parameter_supported": true,
  "response_modes_supported": [
    "text"
  ],
  "response_types_supported": [
    "text"
  ],
  "scopes_supported": [
    "text"
  ],
  "subject_types_supported": [
    "text"
  ],
  "token_endpoint": "text",
  "token_endpoint_auth_methods_supported": [
    "text"
  ]
}

Credential Issuer Metadata

get

Returns the Credential Issuer Metadata document as defined in Section 12.2 of the OpenID for Verifiable Credential Issuance (OID4VCI) specification.

This endpoint is mandatory for Credential Issuers and serves as the primary discovery mechanism for wallets and other clients interacting with the issuer.

The credential_configurations_supported object is populated from the available Credential Templates.

Each configuration describes a credential that can be issued and provides the information required to initiate and complete the issuance flow.

Supported Standard

OpenID for Verifiable Credential Issuance

Responses

200

OK

application/json

authorization_serversstring[]Optional

identifier of the OAuth 2.0 Authorization Server (as defined in [RFC8414]) the Credential Issuer relies on for authorization

credential_endpointstringOptional

credential_issuerstringOptional

nonce_endpointstringOptional

nonce_endpoint is only present if issuer.issuance_policy.nonce_required is configured to true.

If present the nonce must be used in the proof sent during credential issuance.

get/.well-known/openid-credential-issuer

HTTPcURLJavaScriptPython

GET /.well-known/openid-credential-issuer HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Accept: */*

200

OK

{
  "authorization_servers": [
    "text"
  ],
  "batch_credential_issuance": {
    "batch_size": 1
  },
  "credential_configurations_supported": [
    {
      "credential_metadata": {
        "claims": [
          {
            "path": [],
            "mandatory": true,
            "display": [
              {
                "name": "text",
                "locale": "text"
              }
            ]
          }
        ],
        "display": [
          {
            "name": "text",
            "locale": "text"
          }
        ]
      },
      "credential_definition": {
        "type": [
          "text"
        ]
      },
      "vct": "text",
      "doctype": "text",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        "text"
      ],
      "format": "dc+sd-jwt",
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        },
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "scope": "text"
    }
  ],
  "credential_endpoint": "text",
  "credential_issuer": "text",
  "display": [
    {
      "name": "text",
      "locale": "text"
    }
  ],
  "nonce_endpoint": "text"
}

SelectID Relying Party metadata

get

SelectID Relying Party metadata.

Available for SelectID Authorizers to interact with the Wallet as a relying party.

Responses

200

OK

application/json

issuerstringOptional

redirect_urisstring[]Optional

client_namestringOptional

client_uristringOptional

logo_uristringOptional

jwks_uristringOptional

resume_uristringOptional

get/.well-known/appspecific/selectid.rp

HTTPcURLJavaScriptPython

GET /.well-known/appspecific/selectid.rp HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Accept: */*

200

OK

{
  "issuer": "text",
  "redirect_uris": [
    "text"
  ],
  "client_name": "text",
  "client_uri": "text",
  "logo_uri": "text",
  "jwks_uri": "text",
  "resume_uri": "text"
}