Sync main from develop

.env-issuer.sample

@@ -86,4 +86,4 @@ ISSUER_UNIVERSAL_LINKS_BASE_URL=https://wallet.privado.id
 ISSUER_PAYMENTS_SETTINGS_PATH=./payment_settings.yaml
 
 #if you want, you can specify the content of the payments configuration encoded in base64. In this case ISSUER_PAYMENTS_SETTINGS_PATH have to be empty
-ISSUER_PAYMENTS_SETTINGS_FILE=
+ISSUER_PAYMENTS_SETTINGS_FILE=

.github/workflows/deploy_backend.yml

@@ -10,9 +10,7 @@ on:
 env:
   AWS_DEFAULT_REGION: ${{ secrets.AWS_REGION }}
   AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
-  ECR_REPOSITORY: ${{vars.ECR_REPOSITORY}}
   AWS_ACCOUNT_ID_BSH: ${{ secrets.AWS_ACCOUNT_ID_BSH }}
-  ECR_REPOSITORY_BSH: ${{vars.ECR_REPOSITORY_BSH}}
 
 jobs:
   build-backend:
@@ -69,7 +67,7 @@ jobs:
       - name: Tag and push image
         env:
           ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
-          ECR_REPOSITORY: ${{ env.ECR_REPOSITORY }}
+          ECR_REPOSITORY: ${{ vars.ECR_REPOSITORY }}
           IMAGE_TAG: ${{ steps.version.outputs.VERSION }}
         run: |
           docker tag issuer/api:${{ env.IMAGE_TAG }} ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }}
@@ -80,22 +78,22 @@ jobs:
 
       - name: Configure AWS credentials Billions SH
         uses: aws-actions/configure-aws-credentials@v1-node16
-        if: github.ref == 'refs/heads/main'
+        if: github.event.workflow_run.head_branch == 'main'
         with:
           aws-region: ${{ env.AWS_DEFAULT_REGION }}
           role-to-assume: arn:aws:iam::${{ env.AWS_ACCOUNT_ID_BSH }}:role/BillionsActionsRole
           role-session-name: GitHubActionsSession
 
       - name: Login to Amazon ECR Billions SH
         uses: aws-actions/amazon-ecr-login@v1
-        if: github.ref == 'refs/heads/main'
+        if: github.event.workflow_run.head_branch == 'main'
         id: login-ecr-bsh
 
       - name: Tag and push image Billions SH
-        if: github.ref == 'refs/heads/main'
+        if: github.event.workflow_run.head_branch == 'main'
         env:
           ECR_REGISTRY: ${{ steps.login-ecr-bsh.outputs.registry }}
-          ECR_REPOSITORY: ${{ env.ECR_REPOSITORY_BSH }}
+          ECR_REPOSITORY: ${{ vars.ECR_REPOSITORY_BSH }}
           IMAGE_TAG: ${{ steps.version.outputs.VERSION }}
         run: |
           docker tag issuer/api:${{ env.IMAGE_TAG }} ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }}

.github/workflows/deploy_ui.yml

@@ -9,9 +9,7 @@ on:
 env:
   AWS_DEFAULT_REGION: ${{ secrets.AWS_REGION }}
   AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
-  ECR_REPOSITORY: ${{vars.ECR_REPOSITORY_UI}}
   AWS_ACCOUNT_ID_BSH: ${{ secrets.AWS_ACCOUNT_ID_BSH }}
-  ECR_REPOSITORY_BSH: ${{vars.ECR_REPOSITORY_UI_BSH}}
 
 jobs:
   deploy:
@@ -56,7 +54,7 @@ jobs:
       - name: Tag and push image
         env:
           ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
-          ECR_REPOSITORY: ${{ env.ECR_REPOSITORY }}
+          ECR_REPOSITORY: ${{ vars.ECR_REPOSITORY_UI }}
           IMAGE_TAG: ${{ steps.version.outputs.VERSION }}
         run: |
           docker tag polygonid/issuernode_ui:${{ env.IMAGE_TAG }} ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }}
@@ -82,7 +80,7 @@ jobs:
         if: github.ref == 'refs/heads/main'
         env:
           ECR_REGISTRY: ${{ steps.login-ecr-bsh.outputs.registry }}
-          ECR_REPOSITORY: ${{ env.ECR_REPOSITORY_BSH }}
+          ECR_REPOSITORY: ${{ vars.ECR_REPOSITORY_UI_BSH }}
           IMAGE_TAG: ${{ steps.version.outputs.VERSION }}
         run: |
           docker tag polygonid/issuernode_ui:${{ env.IMAGE_TAG }} ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }}

.golangci.yml

@@ -71,7 +71,7 @@ linters-settings:
       - name: argument-limit
         severity: warning
         disabled: false
-        arguments: [ 16 ]
+        arguments: [ 17 ]
       - name: exported
         severity: warning
         disabled: false

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.22 AS base
+FROM golang:1.24 AS base
 ARG VERSION
 WORKDIR /service
 ENV GOBIN=/service/bin

api/api.yaml

@@ -730,6 +730,18 @@ paths:
           schema:
             type: string
             example: did:polygonid:polygon:amoy:2qFpPHotk6oyaX1fcrpQFT4BMnmg8YszUwxYtaoGoe
+        - in: query
+          name: schemaType
+          schema:
+            type: string
+            example: UniquenessCredential
+          description: Filter credentials by schema type (partial match)
+        - in: query
+          name: schemaUrl
+          schema:
+            type: string
+            example: ipfs://QmYpsAHYPrNNaNc2o9SAMrPknSAYYAbse4hYxQgMP64Tvj
+          description: Filter credentials by schema URL (begins with match)
         - in: query
           name: status
           schema:
@@ -2553,6 +2565,22 @@ components:
           x-omitempty: true
           example: "Iden3ReverseSparseMerkleTreeProof"
           enum: [ Iden3commRevocationStatusV1.0, Iden3ReverseSparseMerkleTreeProof, Iden3OnchainSparseMerkleTreeProof2023 ]
+        encryptionKey:
+          type: object
+          x-omitempty: true
+          example:
+            EncryptionKey:
+              summary: Encryption Key
+              value:
+                alg: "ECDH-ES+A256KW"
+                crv: "P-256"
+                kid: "tu-kid"
+                kty: "EC"
+                use: "enc"
+                x: "8UfTxPvmMFAPuqwtxaRWrWmihC_7uYF2rEnxa4lLQ_s"
+                y: "M4PFcNXKyyRJ3zNPg19FlB6O0Tlbqs8euRcflpbDtcE"
+
+
       example:
         credentialSchema: "https://raw.githubusercontent.com/iden3/claim-schema-vocab/main/schemas/json/KYCAgeCredential-v3.json"
         type: "KYCAgeCredential"
@@ -2599,14 +2627,58 @@ components:
         connection:
           $ref: '#/components/schemas/AuthenticationConnection'
 
+
+    EncryptedVC:
+      type: object
+      required:
+        - id
+        - data
+        - proof
+        - context
+        - type
+        - issuanceDate
+        - credentialStatus
+      properties:
+        id:
+          type: string
+          x-omitempty: false
+        data:
+          type: object
+          x-go-type: protocol.JWEJSONEncryption
+          x-go-type-import:
+            name: protocol
+            path: "github.com/iden3/iden3comm/v2/protocol"
+        proof:
+          type: object
+          x-go-type: verifiable.CredentialProofs
+          x-go-type-import:
+            name: verifiable
+            path: "github.com/iden3/go-schema-processor/v2/verifiable"
+        context:
+          type: string
+          example: "https://www.w3.org/2018/credentials/examples/v1"
+        type:
+          type: string
+          example:  "KYCAgeCredential"
+        expirationDate:
+          $ref: '#/components/schemas/TimeUTC'
+        issuanceDate:
+          $ref: '#/components/schemas/TimeUTC'
+        credentialStatus:
+          type: object
+          x-go-type: verifiable.CredentialStatus
+          x-go-type-import:
+            name: verifiable
+            path: "github.com/iden3/go-schema-processor/v2/verifiable"
+
+
     Credential:
       type: object
       required:
         - id
         - proofTypes
         - revoked
         - schemaHash
-        - vc
       properties:
         id:
           type: string
@@ -2628,6 +2700,9 @@ components:
           x-go-type-import:
             name: verifiable
             path: "github.com/iden3/go-schema-processor/v2/verifiable"
+        encryptedVC:
+            $ref: '#/components/schemas/EncryptedVC'
+
 
     AuthenticationResponse:
       type: object
@@ -2738,6 +2813,7 @@ components:
           example: "did:iden3:polygon:amoy:2qVSDLNYs2s5HDMTyb4Su67ZvrZ..."
           description: If a User DID is provided, the payment will be verified for the specified User DID.
 
+
     BasicMessage:
       type: object
       required:

cmd/platform/main.go

@@ -12,7 +12,7 @@ import (
 	chiMiddleware "github.com/go-chi/chi/v5/middleware"
 	"github.com/go-chi/cors"
 	auth "github.com/iden3/go-iden3-auth/v2"
-	authLoaders "github.com/iden3/go-iden3-auth/v2/loaders"
+	"github.com/iden3/go-iden3-auth/v2/loaders"
 	"github.com/iden3/iden3comm/v2"
 	"github.com/iden3/iden3comm/v2/packers"
 	iden3commProtocol "github.com/iden3/iden3comm/v2/protocol"
@@ -142,8 +142,7 @@ func main() {
 		return
 	}
 
-	verificationKeyLoader := &authLoaders.FSKeyLoader{Dir: cfg.Circuit.Path + "/authV2"}
-	verifier, err := auth.NewVerifier(verificationKeyLoader, networkResolver.GetStateResolvers(), auth.WithDIDResolver(universalDIDResolverHandler))
+	verifier, err := auth.NewVerifier(loaders.NewEmbeddedKeyLoader(), networkResolver.GetStateResolvers(), auth.WithDIDResolver(universalDIDResolverHandler))
 	if err != nil {
 		log.Error(ctx, "failed init verifier", "err", err)
 		return