Verifiable credentials and delegated authorization demo

1. Introduction

This is a quick and dirty demo on using W3C type Verifiable Credentials for delegating resource access build on top of Hyperledger Indy.

2. Prerequisites and setup

Indy 1.3.1 SDK & Java wrapper

Build Verifiable Credentials https://github.com/TrustNetFI/verifiable-credentials-java

In project setupindy open setup.java and modify pool_name , TRUSTEE_DID and TRUSTEE_SEED to meet your Indy setup.

If you use other pool than default_pool you need to change the NETWORK_NAME in IndyConfig.java files in resource-server , agent and demo-client projects.

Run setupindy . This creates needed wallets and keys.

3. Running the demo

• Start projects resource-server, agent and demo-client.
• Go to http://localhost:8080 . Username is alice and password is ``password``` .
• Accept the connection request, you will be redirected to resource server, login using username alice and password password. Accept the connection and you will be redirected back to the agent.
• Accept the credential offer from the Company X.
• Issue new delegated access credential to service Y.
• Go to service example-client http://localhost:8099
• Request the access token, should receive access token
• Request the data, should receive sample data
• On agent side (http://localhost:8080) click revoke
• On example client side try to make new data request, should receive UNAUTHORIZED

4. Troubleshooting

If you receive JNA errors add

 <jna.version>4.2.1</jna.version>
 <dependency>
 <groupId>net.java.dev.jna</groupId>
    <artifactId>jna</artifactId>
    <version>${jna.version}</version>
 </dependency>

to all pom.xml files.

5. Resources

Indy

Verifiable Credentials implementation

W3C Verifiable Credentials