diff --git a/refs/pull/176/merge/en/.doctrees/environment.pickle b/refs/pull/176/merge/en/.doctrees/environment.pickle index 691deab7f..dd94c052e 100644 Binary files a/refs/pull/176/merge/en/.doctrees/environment.pickle and b/refs/pull/176/merge/en/.doctrees/environment.pickle differ diff --git a/refs/pull/176/merge/en/_images/cross_device_auth_seq_diagram.svg b/refs/pull/176/merge/en/_images/cross_device_auth_seq_diagram.svg index e3e1a3c5b..a857aa081 100644 --- a/refs/pull/176/merge/en/_images/cross_device_auth_seq_diagram.svg +++ b/refs/pull/176/merge/en/_images/cross_device_auth_seq_diagram.svg @@ -1,2 +1,2 @@ -User's DevicesUserUserWallet InstanceWallet Instanceuser-agentuser-agentRelying PartyRelying Party1Web Service navigation2Request Protected ResourceUser Authentication (Presentation Phase)3Create astatevaluebound to user-agent cookie4Create request_uri resourcewith a random fragment5QRCode OR HTTP Redirect (302) with client_id, request_uri and discovery_uriCross Device only6Show the QRCode page7Open the Wallet Instance app, local authentication8Scan QR Code9Extractclient_idrequest_uriand discovery_urifrom the QR Code10POST Wallet Technical Capabilities to the discovery_uri endpoint11evaluates the Wallet Technical Capabilities12Request Object13Attest Relying Party Trust14Verify Relying Party Metadata15Validate JWT Signature16Validate Requested VP(s)17Request for consent18Confirmed19POST Authorization Responsewith vp_token20Evaluate the Verifiable Presentation token21Validate the Wallet Instance Attestation.Attest the Wallet Provideris part of the Federationand the Wallet Instance is not revoked.22Attest Credential Issuer Trustand Validate JWT Signature23Process the credentialProcess the credential:Check Holder Key Binding and Proof of Possession:- using the public key bound in\n the Credential to verify the VP token. Then Extract the disclosed attributes: \n Check if all the required data are available24Update the User session (cookie updated)25HTTP/1.1 200 OK{"redirect_uri": https url with response_code }Same Device only26Use the redirect_uriCross Device only27QRCode JS: Check authentication state (HTTP request with cookie)28Authentication state given with HTTP codes, untill expired or successful \ No newline at end of file +User's DevicesUserUserWallet InstanceWallet Instanceuser-agentuser-agentRelying PartyRelying Party1Web Service navigation2Request Protected ResourceUser Authentication (Presentation Phase)3Create astatevaluebound to user-agent cookie4Create request_uri resource5QRCode OR HTTP Redirect (302) with client_id, request_uri and discovery_uriCross Device only6Show the QRCode page7Open the Wallet Instance app, local authentication8Scan QR Code9Extractclient_idrequest_uriand discovery_urifrom the QR Code10POST Wallet Technical Capabilities to the discovery_uri endpoint11evaluates the Wallet Technical Capabilities12Request Object13Attest Relying Party Trust14Verify Relying Party Metadata15Validate JWT Signature16Validate Requested VP(s)17Request for consent18Confirmed19POST Authorization Responsewith vp_token20Evaluate the Verifiable Presentation token21Validate the Wallet Instance Attestation.Attest the Wallet Provideris part of the Federationand the Wallet Instance is not revoked.22Attest Credential Issuer Trustand Validate JWT Signature23Process the credentialProcess the credential:Check Holder Key Binding and Proof of Possession:- using the public key bound in\n the Credential to verify the VP token. Then Extract the disclosed attributes: \n Check if all the required data are available24Update the User session (cookie updated)25HTTP/1.1 200 OK{"redirect_uri": https url with response_code }Same Device only26Use the redirect_uriCross Device only27QRCode JS: Check authentication state (HTTP request with cookie)28Authentication state given with HTTP codes, untill expired or successful \ No newline at end of file diff --git a/refs/pull/176/merge/it/.doctrees/environment.pickle b/refs/pull/176/merge/it/.doctrees/environment.pickle index c7366a723..acd2a6e12 100644 Binary files a/refs/pull/176/merge/it/.doctrees/environment.pickle and b/refs/pull/176/merge/it/.doctrees/environment.pickle differ