RP_WS_SM_TrustMechanisms_008a¶
Objective¶
Verify that the Relying Party starts accepting PIDs in SD-JWT VC format from a PID Provider once its entry is added to the PID Provider list.
References¶
- [ARF] Annex 2, OIA_15a
- [SD-JWT VC] section 2.5
- [HAIP] section 6.1.1
- [RFC5280] section 6.1
- [ETSI TS 119 602]
Profile applicability¶
- Relying Party requests credentials in IETF SD-JWT VC format.
EUDI-wallet relevancy¶
EUDI_specific | EUDI_required
Technology¶
- Presentation of a credential in IETF SD-JWT VC format.
Preconditions¶
- The Relying Party is set to
default_configuration_rp_1. - The test environment publishes
default_trust_configuration_rp, and the Relying Party has loaded it. - Test case
RP_WS_IA_MainInteraction_001apassed in the same environment.
Test Scenario¶
- Perform a presentation for
default_query_pidin which the Conformance Wallet presents, in an otherwise valid Authorization Response, a variant ofdefault_credential_pidthat differs from it only in that it is issued byPP-C. - The Test Trust Infrastructure publishes a new version of
TL-PIDthat adds an entry forPP-Cwith a granted PID/Issuance and PID/Revocation service. Wait until the Relying Party has retrieved it, at mostT_refresh. - Perform a presentation for
default_query_pidin which the Conformance Wallet presents, in an otherwise valid Authorization Response, a variant ofdefault_credential_pidthat differs from it only in that it is issued byPP-C.
Expected results¶
- The Relying Party rejects the presentation: its verification result reports a failure and releases no attribute value from the presentation, and the endpoint receiving the Authorization Response does not answer with HTTP status 5xx.
- The Test Trust Infrastructure logs a retrieval of the new version of
TL-PIDby the Relying Party. - The Relying Party accepts the presentation: its verification result reports success and releases exactly the attributes requested in
default_query_pid, with the values of the presented credential.
Comments¶
Restore the previous version of TL-PID after the test case.
Execute this test case once for each presentation flow the Relying Party supports (redirects, W3C Digital Credentials API).