Skip to content

Issuer API

API for issuing verifiable credentials and managing their lifecycle using OpenID4VCI (OIDC for Verifiable Credential Issuance).

OpenAPI Specification

The Issuer OpenAPI specification is automatically generated from the backend service (springdoc-openapi).

Main Endpoints

Endpoints for backend systems to trigger the credential lifecycle. Require OAuth 2.0 authentication with a client credentials access_token.

Note: This is the API used by external integrations (SCIM, webhooks, internal portals). It is not part of the standard OID4VCI protocol; it is an EUDIStack management layer.

Method Path Description
POST /api/v1/issuances Creates a new credential offer and triggers the issuance flow. Returns credential_offer_uri.
GET /api/v1/issuances/{id} Queries the status of an issuance by its issuance_id.

Standard OID4VCI protocol endpoints. Invoked by the wallet during the issuance flow.

Method Path Description
POST /oid4vci/v1/credential-offer Creates a credential issuance offer for the Wallet.
POST /oid4vci/v1/credential Endpoint where the Wallet requests credential issuance.
POST /oid4vci/v1/deferred-credential Retrieves credentials issued in a deferred manner.
POST /oid4vci/v1/notification Notifications for the issuance flow (status, events).
POST /oid4vci/v1/token OAuth2 endpoint for the OID4VCI flow.
Method Path Description
GET /w3c/v1/credentials/status/{listId} Queries credential status (W3C BitString Status List).
POST /w3c/v1/credentials/status/revoke Revokes an issued credential.
GET /token/v1/credentials/status/{listId} Credential status based on OAuth Token Status List.
POST /token/v1/credentials/status/revoke Revocation via token status list.
Method Path Description
GET /.well-known/openid-credential-issuer Issuer metadata for OID4VCI.
GET /.well-known/openid-configuration OAuth2 / OIDC configuration.
GET /.well-known/oauth-authorization-server Authorization Server metadata.
GET /.well-known/jwks.json Public keys (JWKS) for cryptographic verification.
GET /.well-known/jwt-issuer JWT Issuer metadata; required by wallets to validate the vct signature.
Technical Notes
  • Protocol: OpenID4VCI (OIDC for Verifiable Credential Issuance)
  • Profile: eIDAS 2.0 / DOME compatible
  • Formats: JWT VC · SD-JWT VC (dc+sd-jwt)
  • Cryptography: ES256 (ECDSA P-256)
  • Backend: Spring WebFlux (reactive)