[keycloak - OID4VCI] Approaching Credential Scope based API design

[francis-pouatcha]

This is a proxy of

• [OID4VCI] Approaching Credential Scope based API design keycloak/keycloak#32961

Epic Tickets:

• [keycloak - OID4VCI] Migrate Verifiable Credential Definitions from Client Attributes to Realm Level Attributes #6
• [keycloak - OID4VCI] Create a CredentialBuilderProvider interface #8
• [keycloak - OID4VCI] Create CredentialSignerProvider interface #9
• [keycloak - OID4VCI] Simplify SD-JWT API usage #10
• [keycloak - OID4VCI] Decouple ClientScopeProvider from JpaRealmProvider #11
• [keycloak - OID4VCI] Extend AbstractOIDCProtocolMapper for credentials #12
• [keycloak - OID4VCI] Make signature-algorithm selectable #13
• [keycloak - OID4VCI] (DiscoveryEndpoint) Find supported formats by implemented providers #14
• [keycloak - OID4VCI] (DiscoveryEndpoint) Find available signature algorithms by provided realm-keys #15
• [keycloak - OID4VCI] Add oid4vci scope #16
• [keycloak - OID4VCI] Limit Client capabilities to OpenID Connect or OpenID4VCI #17

[hugoib]

This tickets are in order. It is suggested to start from the beginning (Top)

[nitch2019]

I have a conflict today and will be late. But in matter of keycloak oid4vc, here are my comment:

Here are some simple tickets in the queue:

• [OID4VCI] Extend AbstractOIDCProtocolMapper for credentials keycloak/keycloak#32957 this one is a simple flag, with default to false. It might be better to implement it in a different way. Think and let us discuss. Addiing some selector in the protocol mapper config. Check and let us disccuss.
• [OID4VCI] (DiscoveryEndpoint) Find available signature algorithms by provided realm-keys keycloak/keycloak#32960 this one is just an evaluation of the .well-known file. So i suspect there is nothing to do.
• [OID4VCI] Add oid4vci scope keycloak/keycloak#32963: I am not sure if w are not violating the protocol doing this. Need discussion.

This one is a bit tricky, i will start with an analysis: keycloak#32958

This is very related to Ingrid's ticket: keycloak#32959, today we user signer to do the same work.

• Big first frontEnd ticket: [OID4VCI] Limit Client capabilities to OpenID Connect or OpenID4VCI keycloak/keycloak#32967