Session DUVOfyMjdb6e... - Issuer Playground

Session ID DUVOfyMjdb6eTQwcbscqXg

Status
token_exchanged

Grant Type

pre-authorized_code

Credential Types
eu.europa.ec.eudi.pid_mdoc

Supply Claims

Submit claims for a credential configuration in this session (for deferred issuance).

Session Logs

12 total

2026-06-29 10:47:42 error /credential Holder proof validation failed ▼

Data:

{
  "expected": "One of: `jwk` (inline JWK), `x5c` (X.509 certificate chain), or `key_attestation` (key attestation JWT with attested_keys)",
  "header_params": [
    "typ",
    "alg",
    "kid"
  ],
  "help": "Include the holder\u0027s public key in the JWT proof header using one of:\n  1. `jwk`: {\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}\n  2. `x5c`: [\"\u003cbase64-DER-encoded-certificate\u003e\"]\n  3. `key_attestation`: \"\u003ckey-attestation-jwt\u003e\" (with kid referencing a key in attested_keys)",
  "proof_type": "jwt",
  "reason": "JWT proof header does not contain a holder public key. Found header parameters: [\u0027typ\u0027, \u0027alg\u0027, \u0027kid\u0027]. The header contains `kid` (\"did:jwk:eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6InJIdC1hdGFsUkVrWDY3ajlQSWg5...\") but `kid` alone is not sufficient \u2014 the issuer cannot resolve external key references. The holder\u0027s public key material must be included directly.",
  "spec_ref": "OID4VCI Section 8.2.1.1 / Appendix F.1"
}

2026-06-29 10:47:42 debug /credential Credential configuration resolved ▼

Data:

{
  "config_id": "eu.europa.ec.eudi.pid_mdoc",
  "credential_identifier": null
}

2026-06-29 10:47:42 debug /credential Credential request body ▼

Data:

{
  "credential_configuration_id": "eu.europa.ec.eudi.pid_mdoc",
  "proofs": {
    "jwt": [
      "eyJ0eXAiOiJvcGVuaWQ0dmNpLXByb29mK2p3dCIsImFsZyI6IkVkRFNBIiwia2lkIjoiZGlkOmp3azpleUpyZEhraU9pSlBTMUFpTENKamNuWWlPaUpGWkRJMU5URTVJaXdpZUNJNkluSklkQzFoZEdGc1VrVnJXRFkzYWpsUVNXZzVRM1EwVTJSaFNFeGxTbTQzUVRKblpEZ3dkamRhZUdjaWZRIzAifQ.eyJhdWQiOiJodHRwczovL2FwaS5wbGF5Z3JvdW5kLmZyYW5jZS1pZGVudGl0ZS5nb3V2LmZyL2lncmFudGlvL2lzc3Vlci1iYWNrZW5kIiwiZXhwIjoxNzgyNzMwMzY0LCJpYXQiOjE3ODI3MzAwNjQsIm5vbmNlIjoiS0tBMzRGNktmRUZmVHBrVVlBT2xHWFpySm4tZGFBIn0.A9RczyDb071b-5biNzDFgZF5-dHJk5ittCzXU-wZ-4thiOpBO5XNpV7USvTzHc8HR-kdX4SkHsbwnUEcuHJDDg"
    ]
  }
}

2026-06-29 10:47:42 info /credential Credential request received ▼

Data:

{
  "credential_configuration_id": "eu.europa.ec.eudi.pid_mdoc",
  "credential_identifier": null,
  "headers": {
    "accept-encoding": "gzip",
    "authorization": "Bearer VmwqpapD70A3JVDB3Tbgb3eYlPxRJUtrpKPo4KEOHG0",
    "content-length": "603",
    "content-type": "application/json",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-bae9567b446d5515307aaaf33dea6ddd-8e5857f5c68342de-00",
    "tracestate": "",
    "user-agent": "okhttp/4.12.0",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/credential",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=3cae2264a4f38e9a34a37bb9b05fabb3498a5b52ea8280e2b095dc5ffebe93c0;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "139.47.64.58, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "04130171-8c9d-4218-a71a-5a0741c2d84d"
  },
  "is_dpop": false,
  "proofs_present": true
}

2026-06-29 10:47:41 info /token Access token issued ▼

Data:

{
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_mdoc"
  ],
  "dpop_bound": false,
  "expires_in": 86400,
  "token_type": "Bearer"
}

2026-06-29 10:47:41 debug /token Authorization details resolved ▼

Data:

{
  "auth_details": null,
  "claims_data_present": false,
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_mdoc"
  ]
}

2026-06-29 10:47:41 info /token Token request received (pre-authorized_code) ▼

Data:

{
  "authorization_details_present": false,
  "client_id": null,
  "dpop_present": false,
  "grant_type": "pre-authorized_code",
  "tx_code_present": false
}

2026-06-29 10:47:41 debug /token Token request received ▼

Data:

{
  "form_body": {
    "grant_type": "urn:ietf:params:oauth:grant-type:pre-authorized_code",
    "pre-authorized_code": "1BH9YTeTAdKlAwKha8KJ6dd677g--r0ToaPaNzjQNHw"
  },
  "headers": {
    "accept-encoding": "gzip",
    "content-length": "137",
    "content-type": "application/x-www-form-urlencoded",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-24209fee1f21eab2108be82956145d66-6588b70fc815570b-00",
    "tracestate": "",
    "user-agent": "okhttp/4.12.0",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/token",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=3cae2264a4f38e9a34a37bb9b05fabb3498a5b52ea8280e2b095dc5ffebe93c0;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "139.47.64.58, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "71078419-0158-4ea8-8afb-838c4887e965"
  },
  "require_wallet_attestation": false,
  "wa_provided": false,
  "wa_validated_at_par": false
}

2026-06-29 10:47:40 info /credential_offers Credential offer retrieved by wallet ▼

Data:

{
  "offer_id": "2zA5c8rjrOidiLWZyCiA_w"
}

2026-06-29 10:47:37 info /credential_offers Credential offer created ▼

Data:

{
  "credential_offer": {
    "credential_configuration_ids": [
      "eu.europa.ec.eudi.pid_mdoc"
    ],
    "credential_issuer": "https://api.playground.france-identite.gouv.fr/igrantio/issuer-backend",
    "grants": {
      "urn:ietf:params:oauth:grant-type:pre-authorized_code": {
        "pre-authorized_code": "1BH9YTeTAdKlAwKha8KJ6dd677g--r0ToaPaNzjQNHw"
      }
    }
  },
  "grant_type": "pre-authorized_code",
  "offer_id": "2zA5c8rjrOidiLWZyCiA_w"
}

2026-06-29 10:47:37 info /credential_offers Pre-authorized code created ▼

Data:

{
  "code": "1BH9YTeTAdKlAwKha8KJ6dd677g--r0ToaPaNzjQNHw",
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_mdoc"
  ],
  "tx_code_present": false
}

2026-06-29 10:47:37 info /credential_offers Credential offer requested ▼

Data:

{
  "claims_present": false,
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_mdoc"
  ],
  "grants": {
    "pre_authorized_code": true
  },
  "require_key_attestation": false,
  "require_wallet_attestation": false,
  "subject_id": null
}

Events

3 total

Type	Timestamp	Details
token_exchanged	2026-06-29 10:47:41	{'grant_type': 'pre-authorized_code'}
offer_retrieved	2026-06-29 10:47:40	None
offer_created	2026-06-29 10:47:37	{'credential_configuration_ids': ['eu.europa.ec.eudi.pid_mdoc']}

Session Detail