Skip to content

Commit

Permalink
Deploy to GitHub pages
Browse files Browse the repository at this point in the history
  • Loading branch information
@github-actions
github-actions[bot] authored Feb 28, 2024
1 parent 754bc43 commit 8302df2
Show file tree
Hide file tree
Showing 6 changed files with 87 additions and 112 deletions.
Binary file modified met/en/.doctrees/environment.pickle
View file
Binary file not shown.
Binary file modified met/en/.doctrees/pid-eaa-issuance.doctree
View file
Binary file not shown.
98 changes: 42 additions & 56 deletions met/en/_sources/pid-eaa-issuance.rst.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -914,7 +914,12 @@ Credential Response to the Wallet Instance MUST be sent using `application/json`
Entity Configuration Credential Issuer
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Below is a non-normative example of an Entity Configuration containing an `openid_credential_issuer` metadata.
Below is a non-normative example of an Entity Configuration of a PID Provider containing a metadata for

- `federation_entity`
- `oauth_authorization_server`
- `openid_credential_issuer`
- `openid_relying_party`

.. code-block:: http
Expand Down Expand Up @@ -945,26 +950,31 @@ Below is a non-normative example of an Entity Configuration containing an `openi
},
"authority_hints": ["https://superior-entity.example.org/federation"],
"metadata": {
"federation_entity": {
"organization_name": "PID Provider Organization Example",
"homepage_uri": "https://pid-provider.example.org",
"policy_uri": "https://pid-provider.example.org/privacy_policy",
"tos_uri": "https://pid-provider.example.org/info_policy",
"logo_uri": "https://pid-provider.example.org/logo.svg",
"contacts": ["[email protected]"],
"federation_resolve_endpoint": "https://pid-provider.example.org/resolve"
},
"oauth_authorization_server": {
"authorization_endpoint": "https://pid-provider.example.org/authorization",
"pushed_authorization_request_endpoint": "https://pid-provider.example.org/connect/par",
"dpop_signing_alg_values_supported": ["RS256", "RS512", "ES256", "ES512"],
"revocation_endpoint": "https://pid-provider.example.org/revocation",
"id_token_encryption_alg_values_supported": ["RSA-OAEP"],
"id_token_encryption_enc_values_supported": ["A128CBC-HS256"],
"token_endpoint": "https://pid-provider.example.org/token",
"userinfo_endpoint": "https://pid-provider.example.org/userinfo",
"introspection_endpoint": "https://pid-provider.example.org/introspection",
"contacts": ["[email protected]"],
"client_registration_types_supported": ["automatic"],
"code_challenge_methods_supported": ["S256"],
"request_authentication_methods_supported": {"ar": ["request_object"]},
"authorization_details_types_supported":[
"openid_credential",
],
"acr_values_supported": [
"https://www.spid.gov.it/SpidL2",
"https://www.spid.gov.it/SpidL3"
],
"grant_types_supported": ["authorization_code"],
"id_token_signing_alg_values_supported": ["ES256"],
"issuer": "https://pid-provider.example.org",
"jwks": {
"keys": [
Expand All @@ -976,20 +986,13 @@ Below is a non-normative example of an Entity Configuration containing an `openi
]
},
"scopes_supported": [
"openid",
"offline_access",
"PersonIdentificationData"
],
"logo_uri": "https://pid-provider.example.org/static/svg/spid-logo-c-lb.svg",
"organization_name": "Authorization Server",
"op_policy_uri": "https://pid-provider.example.org/legal-information/",
"request_parameter_supported":true,
"request_uri_parameter_supported":true,
"require_request_uri_registration":true,
"request_uri_parameter_supported":false,
"response_types_supported": ["code"],
"subject_types_supported": [
"pairwise",
"public"
],
"token_endpoint_auth_methods_supported": [
"attest_jwt_client_auth"
Expand All @@ -999,33 +1002,18 @@ Below is a non-normative example of an Entity Configuration containing an `openi
"ES384",
"ES512"
],
"userinfo_encryption_alg_values_supported": [
"RSA-OAEP",
"RSA-OAEP-256"
],
"userinfo_encryption_enc_values_supported": [
"A128CBC-HS256",
"A192CBC-HS384",
"A256CBC-HS512",
"A128GCM",
"A192GCM",
"A256GCM"
],
"userinfo_signing_alg_values_supported": [
"ES256",
"ES384",
"ES512"
],
"request_object_signing_alg_values_supported": [
"ES256",
"ES384",
"ES512"
]
},
"openid_credential_issuer": {
"credential_issuer": "https://pid-provider.example.org",
"authorization_servers": ["https://pid-provider.example.org"],
"credential_issuer": "https://pid-provider.example.org",
"credential_endpoint": "https://pid-provider.example.org/credential",
"revocation_endpoint": "https://pid-provider.example.org/revoke",
"status_attestation_endpoint": "https://pid-provider.example.org/status",
"credential_hash_alg_supported": "sha-256",
"display": [
{
"name": "PID Provider Italiano di esempio",
Expand Down Expand Up @@ -1086,6 +1074,24 @@ Below is a non-normative example of an Entity Configuration containing an `openi
],
"credential_definition": {
"type": ["PersonIdentificationData"],
"verification": {
"trust_framework": "eidas",
"assurance_level": "high",
"evidence": [
{
"type": "electronic_record",
"record": {
"type": "https://eudi.wallet.cie.gov.it",
"source": {
"organization_name": "Ministero dell'Interno",
"organization_id":
"urn:eudi:it:organization_id:ipa_code:m_it",
"country_code": "IT"
}
}
}
]
},
"credentialSubject": {
"given_name": {
"mandatory": true,
Expand All @@ -1111,7 +1117,7 @@ Below is a non-normative example of an Entity Configuration containing an `openi
}
]
},
"birthdate": {
"birth_date": {
"mandatory": true,
"display": [{
"name": "Date of Birth",
Expand All @@ -1123,18 +1129,6 @@ Below is a non-normative example of an Entity Configuration containing an `openi
}
]
},
"place_of_birth": {
"mandatory": true,
"display": [{
"name": "Place of Birth",
"locale": "en-US"
},
{
"name": "Luogo di Nascita",
"locale": "it-IT"
}
]
},
"unique_id": {
"mandatory": true,
"display": [{
Expand Down Expand Up @@ -1164,14 +1158,6 @@ Below is a non-normative example of an Entity Configuration containing an `openi
}
}
},
"federation_entity": {
"organization_name": "PID Provider Organization Example",
"homepage_uri": "https://pid-provider.example.org",
"policy_uri": "https://pid-provider.example.org/privacy_policy",
"tos_uri": "https://pid-provider.example.org/info_policy",
"logo_uri": "https://pid-provider.example.org/logo.svg"
},
"openid_relying_party": {
<This is the metadata of the PID/EAA Provider acting as a Relying Party in the national digital identity systems (CIE/SPID). See spid-cie-oidc-docs for details.>
}
Expand Down
99 changes: 44 additions & 55 deletions met/en/pid-eaa-issuance.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2100,7 +2100,15 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
</section>
<section id="entity-configuration-credential-issuer">
<span id="id38"></span><h3>Entity Configuration Credential Issuer<a class="headerlink" href="#entity-configuration-credential-issuer" title="Permalink to this heading"></a></h3>
<p>Below is a non-normative example of an Entity Configuration containing an <cite>openid_credential_issuer</cite> metadata.</p>
<p>Below is a non-normative example of an Entity Configuration of a PID Provider containing a metadata for</p>
<blockquote>
<div><ul class="simple">
<li><p><cite>federation_entity</cite></p></li>
<li><p><cite>oauth_authorization_server</cite></p></li>
<li><p><cite>openid_credential_issuer</cite></p></li>
<li><p><cite>openid_relying_party</cite></p></li>
</ul>
</div></blockquote>
<div class="highlight-http notranslate"><div class="highlight"><pre><span></span><span class="kr">HTTP</span><span class="o">/</span><span class="m">1.1</span> <span class="m">200</span> <span class="ne">OK</span>
<span class="na">Content-Type</span><span class="o">:</span> <span class="l">application/entity-statement+jwt</span>

Expand Down Expand Up @@ -2128,26 +2136,31 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
},
&quot;authority_hints&quot;: [&quot;https://superior-entity.example.org/federation&quot;],
&quot;metadata&quot;: {
&quot;federation_entity&quot;: {
&quot;organization_name&quot;: &quot;PID Provider Organization Example&quot;,
&quot;homepage_uri&quot;: &quot;https://pid-provider.example.org&quot;,
&quot;policy_uri&quot;: &quot;https://pid-provider.example.org/privacy_policy&quot;,
&quot;tos_uri&quot;: &quot;https://pid-provider.example.org/info_policy&quot;,
&quot;logo_uri&quot;: &quot;https://pid-provider.example.org/logo.svg&quot;,
&quot;contacts&quot;: [&quot;[email protected]&quot;],
&quot;federation_resolve_endpoint&quot;: &quot;https://pid-provider.example.org/resolve&quot;
},
&quot;oauth_authorization_server&quot;: {
&quot;authorization_endpoint&quot;: &quot;https://pid-provider.example.org/authorization&quot;,
&quot;pushed_authorization_request_endpoint&quot;: &quot;https://pid-provider.example.org/connect/par&quot;,
&quot;dpop_signing_alg_values_supported&quot;: [&quot;RS256&quot;, &quot;RS512&quot;, &quot;ES256&quot;, &quot;ES512&quot;],
&quot;revocation_endpoint&quot;: &quot;https://pid-provider.example.org/revocation&quot;,
&quot;id_token_encryption_alg_values_supported&quot;: [&quot;RSA-OAEP&quot;],
&quot;id_token_encryption_enc_values_supported&quot;: [&quot;A128CBC-HS256&quot;],
&quot;token_endpoint&quot;: &quot;https://pid-provider.example.org/token&quot;,
&quot;userinfo_endpoint&quot;: &quot;https://pid-provider.example.org/userinfo&quot;,
&quot;introspection_endpoint&quot;: &quot;https://pid-provider.example.org/introspection&quot;,
&quot;contacts&quot;: [&quot;[email protected]&quot;],
&quot;client_registration_types_supported&quot;: [&quot;automatic&quot;],
&quot;code_challenge_methods_supported&quot;: [&quot;S256&quot;],
&quot;request_authentication_methods_supported&quot;: {&quot;ar&quot;: [&quot;request_object&quot;]},
&quot;authorization_details_types_supported&quot;:[
&quot;openid_credential&quot;,
],
&quot;acr_values_supported&quot;: [
&quot;https://www.spid.gov.it/SpidL2&quot;,
&quot;https://www.spid.gov.it/SpidL3&quot;
],
&quot;grant_types_supported&quot;: [&quot;authorization_code&quot;],
&quot;id_token_signing_alg_values_supported&quot;: [&quot;ES256&quot;],
&quot;issuer&quot;: &quot;https://pid-provider.example.org&quot;,
&quot;jwks&quot;: {
&quot;keys&quot;: [
Expand All @@ -2159,20 +2172,13 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
]
},
&quot;scopes_supported&quot;: [
&quot;openid&quot;,
&quot;offline_access&quot;,
&quot;PersonIdentificationData&quot;
],
&quot;logo_uri&quot;: &quot;https://pid-provider.example.org/static/svg/spid-logo-c-lb.svg&quot;,
&quot;organization_name&quot;: &quot;Authorization Server&quot;,
&quot;op_policy_uri&quot;: &quot;https://pid-provider.example.org/legal-information/&quot;,
&quot;request_parameter_supported&quot;:true,
&quot;request_uri_parameter_supported&quot;:true,
&quot;require_request_uri_registration&quot;:true,
&quot;request_uri_parameter_supported&quot;:false,
&quot;response_types_supported&quot;: [&quot;code&quot;],
&quot;subject_types_supported&quot;: [
&quot;pairwise&quot;,
&quot;public&quot;
],
&quot;token_endpoint_auth_methods_supported&quot;: [
&quot;attest_jwt_client_auth&quot;
Expand All @@ -2182,23 +2188,6 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
&quot;ES384&quot;,
&quot;ES512&quot;
],
&quot;userinfo_encryption_alg_values_supported&quot;: [
&quot;RSA-OAEP&quot;,
&quot;RSA-OAEP-256&quot;
],
&quot;userinfo_encryption_enc_values_supported&quot;: [
&quot;A128CBC-HS256&quot;,
&quot;A192CBC-HS384&quot;,
&quot;A256CBC-HS512&quot;,
&quot;A128GCM&quot;,
&quot;A192GCM&quot;,
&quot;A256GCM&quot;
],
&quot;userinfo_signing_alg_values_supported&quot;: [
&quot;ES256&quot;,
&quot;ES384&quot;,
&quot;ES512&quot;
],
&quot;request_object_signing_alg_values_supported&quot;: [
&quot;ES256&quot;,
&quot;ES384&quot;,
Expand All @@ -2207,8 +2196,10 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
},
&quot;openid_credential_issuer&quot;: {
&quot;credential_issuer&quot;: &quot;https://pid-provider.example.org&quot;,
&quot;authorization_servers&quot;: [&quot;https://pid-provider.example.org&quot;],
&quot;credential_endpoint&quot;: &quot;https://pid-provider.example.org/credential&quot;,
&quot;revocation_endpoint&quot;: &quot;https://pid-provider.example.org/revoke&quot;,
&quot;status_attestation_endpoint&quot;: &quot;https://pid-provider.example.org/status&quot;,
&quot;credential_hash_alg_supported&quot;: &quot;sha-256&quot;,
&quot;display&quot;: [
{
&quot;name&quot;: &quot;PID Provider Italiano di esempio&quot;,
Expand Down Expand Up @@ -2269,6 +2260,24 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
],
&quot;credential_definition&quot;: {
&quot;type&quot;: [&quot;PersonIdentificationData&quot;],
&quot;verification&quot;: {
&quot;trust_framework&quot;: &quot;eidas&quot;,
&quot;assurance_level&quot;: &quot;high&quot;,
&quot;evidence&quot;: [
{
&quot;type&quot;: &quot;electronic_record&quot;,
&quot;record&quot;: {
&quot;type&quot;: &quot;https://eudi.wallet.cie.gov.it&quot;,
&quot;source&quot;: {
&quot;organization_name&quot;: &quot;Ministero dell&#39;Interno&quot;,
&quot;organization_id&quot;:
&quot;urn:eudi:it:organization_id:ipa_code:m_it&quot;,
&quot;country_code&quot;: &quot;IT&quot;
}
}
}
]
},
&quot;credentialSubject&quot;: {
&quot;given_name&quot;: {
&quot;mandatory&quot;: true,
Expand All @@ -2294,7 +2303,7 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
}
]
},
&quot;birthdate&quot;: {
&quot;birth_date&quot;: {
&quot;mandatory&quot;: true,
&quot;display&quot;: [{
&quot;name&quot;: &quot;Date of Birth&quot;,
Expand All @@ -2306,18 +2315,6 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
}
]
},
&quot;place_of_birth&quot;: {
&quot;mandatory&quot;: true,
&quot;display&quot;: [{
&quot;name&quot;: &quot;Place of Birth&quot;,
&quot;locale&quot;: &quot;en-US&quot;
},
{
&quot;name&quot;: &quot;Luogo di Nascita&quot;,
&quot;locale&quot;: &quot;it-IT&quot;
}
]
},
&quot;unique_id&quot;: {
&quot;mandatory&quot;: true,
&quot;display&quot;: [{
Expand Down Expand Up @@ -2347,14 +2344,6 @@ <h3>Credential Response<a class="headerlink" href="#credential-response" title="
}
}
},
&quot;federation_entity&quot;: {
&quot;organization_name&quot;: &quot;PID Provider Organization Example&quot;,
&quot;homepage_uri&quot;: &quot;https://pid-provider.example.org&quot;,
&quot;policy_uri&quot;: &quot;https://pid-provider.example.org/privacy_policy&quot;,
&quot;tos_uri&quot;: &quot;https://pid-provider.example.org/info_policy&quot;,
&quot;logo_uri&quot;: &quot;https://pid-provider.example.org/logo.svg&quot;
},

&quot;openid_relying_party&quot;: {
&lt;This is the metadata of the PID/EAA Provider acting as a Relying Party in the national digital identity systems (CIE/SPID). See spid-cie-oidc-docs for details.&gt;
}
Expand Down
2 changes: 1 addition & 1 deletion met/en/searchindex.js
View file

Large diffs are not rendered by default.

Binary file modified met/it/.doctrees/environment.pickle
View file
Binary file not shown.

0 comments on commit 8302df2

Please sign in to comment.