Skip to content

Commit

Permalink
move scopes into root object
Browse files Browse the repository at this point in the history
  • Loading branch information
paullatzelsperger committed Jul 5, 2024
1 parent f961458 commit f49d066
Showing 1 changed file with 7 additions and 10 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -16,15 +16,14 @@ these are static - they can't be changed at runtime.
So if a provider offers assets, that are only available is a special (non-default) credential is presented, the consumer
must be able to attach the respective scope strings to the access token.

_NB: the information \_which_ scopes must be added, has to be conveyed out-of-band.\_
_NB: the information which scopes must be added, has to be conveyed out-of-band._

In other words, a consumer may know that a provider has certain assets available, but they have an access policy
constraint on them, which makes them "invisible" unless a certain credential is presented.

## Approach

The `CatalogRequest` will receive a new field `parameters`, which is an extensible map. This map may contain an
entry `additionalScopes` which is a list of scope strings (as
The `CatalogRequest` will receive a new nullable field `additionalScopes` which is a list of scope strings (as
per [DCP Specification, Section 3.1](https://github.com/eclipse-tractusx/identity-trust/blob/main/specifications/verifiable.presentation.protocol.md#31-access-scopes)):

```json
Expand All @@ -36,18 +35,16 @@ per [DCP Specification, Section 3.1](https://github.com/eclipse-tractusx/identit
"querySpec": {
//...
},
"parameters": {
"additionalScopes": [
"org.eclipse.edc.vc.type.AdditionalCredentialType1:read",
"org.eclipse.edc.vc.type.AdditionalCredentialType2:*"
]
}
"additionalScopes": [
"org.eclipse.edc.vc.type.AdditionalCredentialType1:read",
"org.eclipse.edc.vc.type.AdditionalCredentialType2:*"
]
}
```

Scope strings provided in that fashion will get added to the default scopes.

NB: both the `parameters` map and the `additionalScopes` entry are _OPTIONAL_.
NB: the `additionalScopes` entry is _OPTIONAL_.

This feature will be added in an Alpha version of the Management API first, specifically of `3.1.0-alpha`. The
respective URL path will be `/v3.1alpha/api/management/catalog/request` as per
Expand Down

0 comments on commit f49d066

Please sign in to comment.