Add FbN Ouranos service provider to DSBA BAE

FIWARE-Ops · Sep 29, 2023 · 0c4b2d3 · 0c4b2d3
1 parent 8210025
commit 0c4b2d3
Show file tree

Hide file tree

Showing 2 changed files with 82 additions and 1 deletion.
diff --git a/aws/dsba/marketplace/keycloak/templates/realmConfigMap.yaml b/aws/dsba/marketplace/keycloak/templates/realmConfigMap.yaml
@@ -61,6 +61,23 @@ data:
               "clientRole": true
             }
           ],
+          "did:web:ouranos-ws.com": [
+            {
+              "name": "CREATE_ISSUER",
+              "description": "Is allowed to create issuers",
+              "clientRole": true
+            },
+            {
+              "name": "UPDATE_ISSUER",
+              "description": "Is allowed to update issuers",
+              "clientRole": true
+            },
+            {
+              "name": "DELETE_ISSUER",
+              "description": "Is allowed to delete issuers",
+              "clientRole": true
+            }
+          ],
           "orion-pep": [
             {
               "name": "admin",
@@ -120,6 +137,9 @@ data:
             "did:web:ips.dsba.aws.fiware.io:did": [
               "CREATE_ISSUER"
             ],
+            "did:web:ouranos-ws.com": [
+              "CREATE_ISSUER"
+            ],
             "account": [
               "view-profile",
               "manage-account"
@@ -195,6 +215,38 @@ data:
           "defaultClientScopes": [],
           "optionalClientScopes": []
         },
+        {
+          "clientId": "did:web:ouranos-ws.com",
+          "enabled": true,
+          "description": "Client to connect the FbN Ouranos activation service",
+          "surrogateAuthRequired": false,
+          "alwaysDisplayInConsole": false,
+          "clientAuthenticatorType": "client-secret",
+          "defaultRoles": [],
+          "redirectUris": [],
+          "webOrigins": [],
+          "notBefore": 0,
+          "bearerOnly": false,
+          "consentRequired": false,
+          "standardFlowEnabled": true,
+          "implicitFlowEnabled": false,
+          "directAccessGrantsEnabled": false,
+          "serviceAccountsEnabled": true,
+          "publicClient": false,
+          "frontchannelLogout": false,
+          "protocol": "SIOP-2",
+          "attributes": {
+              "client.secret.creation.time": "1675260539",
+              "expiryInMin": "5000000",
+              "vctypes_OuranosActivationService": "ldp_vc,jwt_vc_json",
+              "OuranosActivationService_claims": "email,firstName,familyName,roles"
+          },
+          "authenticationFlowBindingOverrides": {},
+          "fullScopeAllowed": true,
+          "nodeReRegistrationTimeout": -1,
+          "defaultClientScopes": [],
+          "optionalClientScopes": []
+        },
         {
           "clientId": "orion-pep",
           "adminUrl": "{{ .Values.realm.orionPep.adminUrl }}",

diff --git a/aws/dsba/marketplace/walt-id/values.yaml b/aws/dsba/marketplace/walt-id/values.yaml
@@ -77,4 +77,33 @@ vcwaltid:
         "issuanceDate": "2021-08-31T00:00:00Z",
         "type": ["VerifiableCredential", "IpsActivationService"]
       }
-    
+    OuranosActivationService.json: |
+      {
+        "@context": [
+          "https://www.w3.org/2018/credentials/v1"
+        ],
+        "credentialSchema": {
+          "id": "https://raw.githubusercontent.com/FIWARE-Ops/i4trust-provider/main/docs/schema.json",
+          "type": "FullJsonSchemaValidator2021"
+        },
+        "credentialSubject": {
+          "id": "did:ebsi:2AEMAqXWKYMu1JHPAgGcga4dxu7ThgfgN95VyJBJGZbSJUtp",
+          "roles": [
+            {
+              "names": [
+                "CREATE_ISSUER"
+              ],
+              "target": "did:web:ouranos-ws.com"
+            }
+          ]
+        },
+        "id": "urn:uuid:3add94f4-28ec-42a1-8704-4e4aa51006b4",
+        "issued": "2021-08-31T00:00:00Z",
+        "issuer": "did:ebsi:2A9BZ9SUe6BatacSpvs1V5CdjHvLpQ7bEsi2Jb6LdHKnQxaN",
+        "validFrom": "2021-08-31T00:00:00Z",
+        "issuanceDate": "2021-08-31T00:00:00Z",
+        "type": [
+            "VerifiableCredential",
+            "OuranosActivationService"
+        ]
+      }