[java-idp-plugin-vci] 04/05: new static files for deployer to pusblish

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/FirstInstructions
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/20b1650dae56f6b5e44a3d5741bd4474c2a4977d

commit 20b1650dae56f6b5e44a3d5741bd4474c2a4977d
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Mon Sep 7 17:23:48 2026 +0300

    new static files for deployer to pusblish
---
 .../shibboleth/plugin/openidvci/module.properties  | 11 +++++++++++
 .../plugin/openidvci/static/jwt-vc-issuer.json     |  4 ++++
 .../static/oauth-authorization-server.json         | 22 ++++++++++++++++++++++
 3 files changed, 37 insertions(+)

diff --git a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/module.properties b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/module.properties
index b616ad0..ec6b0f0 100644
--- a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/module.properties
+++ b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/module.properties
@@ -22,6 +22,12 @@ OpenID-VCI.3.dest = static/openid-credential-issuer.json
 OpenID-VCI.4.src = /org/geant/shibboleth/plugin/openidvci/conf/openid-vci-oidfed.xml
 OpenID-VCI.4.dest = conf/openid-vci-oidfed.xml
 
+OpenID-VCI.5.src = /org/geant/shibboleth/plugin/openidvci/static/jwt-vc-issuer.json
+OpenID-VCI.5.dest = static/jwt-vc-issuer.json
+
+OpenID-VCI.6.src = /org/geant/shibboleth/plugin/openidvci/static/oauth-authorization-server.json
+OpenID-VCI.6.dest = static/oauth-authorization-server.json
+
 OpenID-VCI.postenable = Add <import resource="openid-vci-credentials.xml" /> in conf/credentials.xml \
 if you want to sign Verifiable Credentials, or Status List Tokens, with keys of their own. Until \
 that, Credentials are signed with OP's own signing credentials. That file lists every signing \
@@ -32,6 +38,11 @@ it is a Velocity template evaluated against the issuer of the OP. Credential Con
 kept in that file, they are published from metadata/verifiable-credentials.json. Signed metadata \
 is served in addition to the unsigned document, to a wallet asking for application/jwt, only once \
 you enable the metadata signing key in conf/openid-vci-credentials.xml. \
+Wallets read also /.well-known/jwt-vc-issuer and /.well-known/oauth-authorization-server, which \
+this plugin does not serve. Publish static/jwt-vc-issuer.json and \
+static/oauth-authorization-server.json in those paths yourself. Replace {{ service_name }} in \
+both with your host and add every credential configuration id you want requestable with the \
+authorization code flow to scopes_supported of the latter. \
 If you run the OpenID Federation plugin, add <import resource="openid-vci-oidfed.xml" /> in \
 conf/global.xml to state this deployment as a Credential Issuer in its Entity Configuration. Do \
 not import it without that plugin, the IdP will not start.
diff --git a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/jwt-vc-issuer.json b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/jwt-vc-issuer.json
new file mode 100644
index 0000000..ec79c45
--- /dev/null
+++ b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/jwt-vc-issuer.json
@@ -0,0 +1,4 @@
+{
+   "issuer":"https://{{ service_name }}",
+   "jwks_uri":"https://{{ service_name }}/idp/profile/oidc/keyset"
+}
diff --git a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/oauth-authorization-server.json b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/oauth-authorization-server.json
new file mode 100644
index 0000000..54d368f
--- /dev/null
+++ b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/oauth-authorization-server.json
@@ -0,0 +1,22 @@
+{
+   "issuer":"https://{{ service_name }}",
+   "authorization_endpoint":"https://{{ service_name }}/idp/profile/oidc/authorize",
+   "pushed_authorization_request_endpoint":"https://{{ service_name }}/idp/profile/oauth2/pushed-authorization",
+   "token_endpoint":"https://{{ service_name }}/idp/profile/openid/vci/token",
+   "jwks_uri":"https://{{ service_name }}/idp/profile/oidc/keyset",
+   "token_endpoint_auth_methods_supported":[
+      "none",
+      "client_secret_basic",
+      "client_secret_post",
+      "client_secret_jwt"
+   ],
+   "response_types_supported":[
+      "code"
+   ],
+   "scopes_supported":[
+      "openid"
+   ],
+   "authorization_details_types_supported":[
+      "openid_credential"
+   ]
+}

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.