Verifier API – Agent-Assisted Credential Presentation

✅ Overview

This API defines a new generation of Verifier APIs that extend OpenID Connect protocol to support agent-assisted Verifiable Credential presentation.

🔁 Bridge Architecture:
This API acts as a bridge between the verifier application (using standard OpenID Connect)
and the user's digital wallet (using OIDC4VP – OpenID Connect for Verifiable Presentations).
It allows existing OIDC-compatible systems to request and verify credentials without needing direct
integration with the wallet's native protocol.

Supports:

• Authorization Code Flow
• Implicit Flow
• SD-JWT VC (only format supported for now)

🧠 Agent Assistance Levels

This allows to define the nature of the AI Agent assistance within the flow. If level 0 then no AI Agent at all, the QRCode is displayed as a standard OIDC4VP flow.

🧾 Core Agent Instructions

1. Begin with a welcoming conversation.
2. Ask for given_name, family_name, and birth_date. If available, retrieve from the wallet.
3. Ask permission before triggering the wallet (QR on desktop, button on mobile).
4. If user says they don’t have a wallet, do not show or mention a QR code.
5. If data is not verified, ask if they can provide it from their wallet.
6. As soon as you have verified values, call:

return_to_app(VC_data_depending on_the_vc_type);

🔐 API Usage

Authorization Request Parameters

Accepted Scope Values

The scopes are associated to VC type.

• openid – always required
• pid – Identity credential (limited to firstname, lastname, birthdate)
• over18 – Age verification
• any – Any available credential

📤 Example Authorization Request

curl -X GET "https://verifier.wallet-provider.com/authorize?client_id=verifier123&response_type=code&scope=openid%20pid&redirect_uri=https%3A%2F%2Fverifier.example.com%2Fcallback&state=abc123&agent_assistance_level=7"

🧭 Standard OIDC Endpoints

Example: Python (pyoidc)

  from flask import Flask, jsonify, render_template, redirect, request, session
  from flask_session import Session
  from flask_pyoidc import OIDCAuthentication
  from flask_pyoidc.provider_configuration import ProviderConfiguration, ClientMetadata
  from flask_pyoidc.user_session import UserSession
  import redis
  import json
  
  # Initialize Redis client
  red = redis.Redis(host='localhost', port=6379, db=0)
  
  # Init Flask
  app = Flask(__name__)
  app.config.update(
      OIDC_REDIRECT_URI='http://192.168.0.65:5000/callback',  # Update with ngrok for testing
      SECRET_KEY="lkjhlkjh"
  )
  
  # Session config with Redis backend
  app.config['SESSION_PERMANENT'] = True
  app.config['SESSION_COOKIE_NAME'] = 'talao'
  app.config['SESSION_TYPE'] = 'redis'
  app.config['SESSION_REDIS'] = red  
  
  sess = Session(app)
  
  # Configure OpenID Connect
  client_metadata = ClientMetadata(
      client_id='your_client_id',          # contact us
      client_secret='your_client_secret'   # contact us
  )
  
  provider_config = ProviderConfiguration(
      issuer='https://verifier.wallet-provider.com/api/app',
      client_metadata=client_metadata,
      auth_request_params={
          'scope': ['openid', 'pid'],
          'agent_assistance_level': 7
      }
  )
  
  auth = OIDCAuthentication({'default': provider_config}, app)
  
  @app.route('/', methods=['GET', 'POST'])
  def site():
      if request.method == 'GET':
          return render_template("site.html")  # Should include a button to POST to /
      else:
          session.clear()
          return redirect('/login')
  
  @app.route('/login')
  @auth.oidc_auth('default')
  def index():
      user_session = UserSession(session)
      print("Id token = ", user_session.id_token)  # ID token contents
      return render_template('token.html', token=json.dumps(user_session.id_token, indent=4))
  
  @auth.error_view
  def error(error=None, error_description=None):
      return jsonify({'error': error, 'description': error_description or "Sorry"})
  
  if __name__ == '__main__':
      app.run(host="192.168.0.65", port=5000, debug=True)  # Use ngrok for external tests