OID4VC (OpenID for Verifiable Credentials) PoC

Welcome to the OID4VC PoC repository. This repository contains a Proof of Concept (PoC) project for testing the OID4VC (OID4VCI/OID4VP) standards in integration with OpenDID.

Project Goals

• Understand the issuance and verification flows of the OID4VC protocol
• Evaluate the feasibility of building a DID-based VC (Verifiable Credential) ecosystem
• Test integration between Spring Boot-based servers and native mobile applications (Android/iOS)

Folder Structure

An overview of the main folders and documents in the project directory.

poc-oid4vc
├── apps
│   ├── android-app
│   └── ios-app
├── docs
│   └── api
│       ├── authorization-server
│       ├── issuer-server
│       ├── sd-jwt-sdk
│       └── verifier-server
├── sdks
│   └── sd-jwt-sdk
└── servers
    ├── authorization-server
    ├── issuer-server
    └── verifier-server

Description of each folder:

Name	Description
servers	Contains server implementations for the OID4VC flow.
┖ authorization-server	Manages authentication and authorization based on OAuth 2.0 and OIDC.
┖ issuer-server	Issues VC (Verifiable Credentials) according to the OID4VCI standard.
┖ verifier-server	Verifies VC according to the OID4VP standard.
apps	Contains sample mobile wallet applications.
┖ android-app	Sample Android wallet application for storing and submitting VCs.
┖ ios-app	Sample iOS wallet application for storing and submitting VCs.
sdks	Contains SDKs for core functionality.
┖ sd-jwt-sdk	SDK for creating, signing, and verifying SD-JWT VCs.
docs	Contains project documentation.
┖ api	API documentation for each server and SDK.

Supported Versions

Standard	Version	Link
OID4VCI	OpenID for Verifiable Credential Issuance 1.0	Specification
OID4VP	OpenID for Verifiable Presentations 1.0	Specification
SD-JWT	RFC 9901	Specification

Feature List

• OID4VCI

Category	Feature	Status
Authorization & Flows	Authorization Code Flow
	Pre-Authorized Code Flow
Credential Formats	SD-JWT VC
	W3C VC DM(JWT, JSON-LD)
	mDoc Format
Endpoints	Token Endpoint
	Credential Endpoint
	Nonce Endpoint
	Deferred Endpoint
	Notification Endpoint
Credential Offer & Response	Credential Offer with authorization_code
	Credential Offer with pre-authorized_code
	Credential Issuer Metadata
	Pushed Authorization Request
	Credential Response Encryption
Security	Proof(JWT)
	PKCE(Proof Key for Code Exchange)
	JWE(JSON Web Encryption)
	DPoP(Demonstration of Proof-of-Possession)

• OID4VP

Category	Feature	Status
Authorization & Flows	Same-Device Flow
	Cross-Device Flow
Credential Formats	SD-JWT VC
	W3C VC DM(JWT, JSON-LD)
	mDoc Format
Authorization Request	Verifiable Presentations Authorization Requests
	Scoped Authorization Requests
	Self-Issued OpenID Provider Authorization Requests
	JWT Secured Authorization Request(JAR)
Authorization Response	direct_post
	query
	fragment
	*.jwt
Query & Metadata	DCQL(Digital Credentials Query Language)
	Client Metadata
	Wallet Metadata
	Request URI Methods - GET
	Request URI Methods - POST
Additional Features	Transaction Data
Security	Proof(JWT)
	JWE(JSON Web Encryption)

Getting Started

Please refer to the Installation and Operation Guide below to get started with OID4VC.

• OID4VC PoC Project Installation and Operation Guide

For information on each subproject, please refer to the README.md file in the respective directory.

• Authorization Server README
• Issuer Server README
• Verifier Server README
• SD-JWT SDK README
• Android App README
• iOS App README

API Reference Documentation

API documentation for each component can be found in the docs/api directory.

• Authorization Server API
• Issuer Server API
• Verifier Server API
• SD-JWT SDK API

Contributing

For detailed information on contribution procedures and the code of conduct, please refer to CONTRIBUTING.md and CODE_OF_CONDUCT.md.

License

Apache 2.0