This environment is intended for testing issuance workflows and conducting interoperability sessions. For enquiries or support, please contact support@igrant.io
Issuer Playground

Session Detail

Inspect a single issuance session

iIOlFVgbqpRbj0FpQ0fiaQ

token_exchanged
pre-authorized_code

eu.europa.ec.eudi.pid_jwt_vc eu.europa.ec.eudi.pid_mdoc eu.europa.ec.av.1

Supply Claims

Submit claims for a credential configuration in this session (for deferred issuance).

Session Logs

20 total
2026-06-11 12:42:56 error /credential Holder proof validation failed ▼
Data:
{
  "expected": "One of: `jwk` (inline JWK), `x5c` (X.509 certificate chain), or `key_attestation` (key attestation JWT with attested_keys)",
  "header_params": [
    "typ",
    "alg",
    "kid"
  ],
  "help": "Include the holder\u0027s public key in the JWT proof header using one of:\n  1. `jwk`: {\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}\n  2. `x5c`: [\"\u003cbase64-DER-encoded-certificate\u003e\"]\n  3. `key_attestation`: \"\u003ckey-attestation-jwt\u003e\" (with kid referencing a key in attested_keys)",
  "proof_type": "jwt",
  "reason": "JWT proof header does not contain a holder public key. Found header parameters: [\u0027typ\u0027, \u0027alg\u0027, \u0027kid\u0027]. The header contains `kid` (\"did:gatc:MjdkYTJmNjVjMTUwNDQxNWE0N2VjZjMz#keys-MjlkZWQxZGFmY2ZkYjQ3ZjNhNzcwNmI5-...\") but `kid` alone is not sufficient \u2014 the issuer cannot resolve external key references. The holder\u0027s public key material must be included directly.",
  "spec_ref": "OID4VCI Section 8.2.1.1 / Appendix F.1"
}
2026-06-11 12:42:56 error /credential Holder proof validation failed ▼
Data:
{
  "expected": "One of: `jwk` (inline JWK), `x5c` (X.509 certificate chain), or `key_attestation` (key attestation JWT with attested_keys)",
  "header_params": [
    "typ",
    "alg",
    "kid"
  ],
  "help": "Include the holder\u0027s public key in the JWT proof header using one of:\n  1. `jwk`: {\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}\n  2. `x5c`: [\"\u003cbase64-DER-encoded-certificate\u003e\"]\n  3. `key_attestation`: \"\u003ckey-attestation-jwt\u003e\" (with kid referencing a key in attested_keys)",
  "proof_type": "jwt",
  "reason": "JWT proof header does not contain a holder public key. Found header parameters: [\u0027typ\u0027, \u0027alg\u0027, \u0027kid\u0027]. The header contains `kid` (\"did:gatc:MjdkYTJmNjVjMTUwNDQxNWE0N2VjZjMz#keys-MjlkZWQxZGFmY2ZkYjQ3ZjNhNzcwNmI5-...\") but `kid` alone is not sufficient \u2014 the issuer cannot resolve external key references. The holder\u0027s public key material must be included directly.",
  "spec_ref": "OID4VCI Section 8.2.1.1 / Appendix F.1"
}
2026-06-11 12:42:56 debug /credential Credential configuration resolved ▼
Data:
{
  "config_id": "eu.europa.ec.eudi.pid_mdoc",
  "credential_identifier": null
}
2026-06-11 12:42:56 debug /credential Credential configuration resolved ▼
Data:
{
  "config_id": "eu.europa.ec.av.1",
  "credential_identifier": null
}
2026-06-11 12:42:56 debug /credential Credential request body ▼
Data:
{
  "credential_configuration_id": "eu.europa.ec.eudi.pid_mdoc",
  "proofs": {
    "jwt": [
      "eyJ0eXAiOiJvcGVuaWQ0dmNpLXByb29mK2p3dCIsImFsZyI6IkVkRFNBIiwia2lkIjoiZGlkOmdhdGM6TWpka1lUSm1OalZqTVRVd05EUXhOV0UwTjJWalpqTXoja2V5cy1NamxrWldReFpHRm1ZMlprWWpRM1pqTmhOemN3Tm1JNS0xIn0.eyJhdWQiOiJodHRwczovL2FwaS5wbGF5Z3JvdW5kLmZyYW5jZS1pZGVudGl0ZS5nb3V2LmZyL2lncmFudGlvL2lzc3Vlci1iYWNrZW5kIiwiZXhwIjoxNzgxMTgyMDc3LCJpYXQiOjE3ODExODE3NzcsIm5vbmNlIjoiMzNxNWZkVC1zdUhJZWNCaTV5a291a2ltNHZhMVBnIn0.hvefKFj-wPS5zxq7PQiuJyFeZALB0skzBoZeVMoq_c4i-7PzPaXY3SciL_y_ILd4oatBVLRnc4ogfKMML-w7CA"
    ]
  }
}
2026-06-11 12:42:56 debug /credential Credential request body ▼
Data:
{
  "credential_configuration_id": "eu.europa.ec.av.1",
  "proofs": {
    "jwt": [
      "eyJ0eXAiOiJvcGVuaWQ0dmNpLXByb29mK2p3dCIsImFsZyI6IkVkRFNBIiwia2lkIjoiZGlkOmdhdGM6TWpka1lUSm1OalZqTVRVd05EUXhOV0UwTjJWalpqTXoja2V5cy1NamxrWldReFpHRm1ZMlprWWpRM1pqTmhOemN3Tm1JNS0xIn0.eyJhdWQiOiJodHRwczovL2FwaS5wbGF5Z3JvdW5kLmZyYW5jZS1pZGVudGl0ZS5nb3V2LmZyL2lncmFudGlvL2lzc3Vlci1iYWNrZW5kIiwiZXhwIjoxNzgxMTgyMDc3LCJpYXQiOjE3ODExODE3NzcsIm5vbmNlIjoiMzNxNWZkVC1zdUhJZWNCaTV5a291a2ltNHZhMVBnIn0.hvefKFj-wPS5zxq7PQiuJyFeZALB0skzBoZeVMoq_c4i-7PzPaXY3SciL_y_ILd4oatBVLRnc4ogfKMML-w7CA"
    ]
  }
}
2026-06-11 12:42:56 info /credential Credential request received ▼
Data:
{
  "credential_configuration_id": "eu.europa.ec.eudi.pid_mdoc",
  "credential_identifier": null,
  "headers": {
    "accept-encoding": "gzip",
    "authorization": "Bearer llwLo_SfF-TOtTnxnrr7wBXoG3rRb8dqMfhxFgSIzR8",
    "content-length": "556",
    "content-type": "application/json",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-4ca3a5c1c9e838e1f98e7d546039c98c-628a77795a200d5e-00",
    "tracestate": "",
    "user-agent": "okhttp/4.12.0",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/credential",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=3b84c6575f62fb5658be4a417feb144d5686d11bf96f64d1d4e9ac765cbf2002;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "83.168.72.10, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "3e59a0b5-8f2c-455c-9d2e-cf2696e525f1"
  },
  "is_dpop": false,
  "proofs_present": true
}
2026-06-11 12:42:56 info /credential Credential request received ▼
Data:
{
  "credential_configuration_id": "eu.europa.ec.av.1",
  "credential_identifier": null,
  "headers": {
    "accept-encoding": "gzip",
    "authorization": "Bearer llwLo_SfF-TOtTnxnrr7wBXoG3rRb8dqMfhxFgSIzR8",
    "content-length": "547",
    "content-type": "application/json",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-4c1b0604c433f441ea660d61dff8a575-901067288f6dd2de-00",
    "tracestate": "",
    "user-agent": "okhttp/4.12.0",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/credential",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=3b84c6575f62fb5658be4a417feb144d5686d11bf96f64d1d4e9ac765cbf2002;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "83.168.72.10, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "098c6748-8f4a-477e-b3c3-dd56d53bc26a"
  },
  "is_dpop": false,
  "proofs_present": true
}
2026-06-11 12:42:56 error /credential Holder proof validation failed ▼
Data:
{
  "expected": "One of: `jwk` (inline JWK), `x5c` (X.509 certificate chain), or `key_attestation` (key attestation JWT with attested_keys)",
  "header_params": [
    "typ",
    "alg",
    "kid"
  ],
  "help": "Include the holder\u0027s public key in the JWT proof header using one of:\n  1. `jwk`: {\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}\n  2. `x5c`: [\"\u003cbase64-DER-encoded-certificate\u003e\"]\n  3. `key_attestation`: \"\u003ckey-attestation-jwt\u003e\" (with kid referencing a key in attested_keys)",
  "proof_type": "jwt",
  "reason": "JWT proof header does not contain a holder public key. Found header parameters: [\u0027typ\u0027, \u0027alg\u0027, \u0027kid\u0027]. The header contains `kid` (\"did:gatc:MjdkYTJmNjVjMTUwNDQxNWE0N2VjZjMz#keys-MjlkZWQxZGFmY2ZkYjQ3ZjNhNzcwNmI5-...\") but `kid` alone is not sufficient \u2014 the issuer cannot resolve external key references. The holder\u0027s public key material must be included directly.",
  "spec_ref": "OID4VCI Section 8.2.1.1 / Appendix F.1"
}
2026-06-11 12:42:56 debug /credential Credential configuration resolved ▼
Data:
{
  "config_id": "eu.europa.ec.eudi.pid_jwt_vc",
  "credential_identifier": null
}
2026-06-11 12:42:56 debug /credential Credential request body ▼
Data:
{
  "credential_configuration_id": "eu.europa.ec.eudi.pid_jwt_vc",
  "proofs": {
    "jwt": [
      "eyJ0eXAiOiJvcGVuaWQ0dmNpLXByb29mK2p3dCIsImFsZyI6IkVkRFNBIiwia2lkIjoiZGlkOmdhdGM6TWpka1lUSm1OalZqTVRVd05EUXhOV0UwTjJWalpqTXoja2V5cy1NamxrWldReFpHRm1ZMlprWWpRM1pqTmhOemN3Tm1JNS0xIn0.eyJhdWQiOiJodHRwczovL2FwaS5wbGF5Z3JvdW5kLmZyYW5jZS1pZGVudGl0ZS5nb3V2LmZyL2lncmFudGlvL2lzc3Vlci1iYWNrZW5kIiwiZXhwIjoxNzgxMTgyMDc3LCJpYXQiOjE3ODExODE3NzcsIm5vbmNlIjoiMzNxNWZkVC1zdUhJZWNCaTV5a291a2ltNHZhMVBnIn0.hvefKFj-wPS5zxq7PQiuJyFeZALB0skzBoZeVMoq_c4i-7PzPaXY3SciL_y_ILd4oatBVLRnc4ogfKMML-w7CA"
    ]
  }
}
2026-06-11 12:42:56 info /credential Credential request received ▼
Data:
{
  "credential_configuration_id": "eu.europa.ec.eudi.pid_jwt_vc",
  "credential_identifier": null,
  "headers": {
    "accept-encoding": "gzip",
    "authorization": "Bearer llwLo_SfF-TOtTnxnrr7wBXoG3rRb8dqMfhxFgSIzR8",
    "content-length": "558",
    "content-type": "application/json",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-9c45fcd6a31fa7abb55e4c74d52b849d-57341709dac96646-00",
    "tracestate": "",
    "user-agent": "okhttp/4.12.0",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/credential",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=3b84c6575f62fb5658be4a417feb144d5686d11bf96f64d1d4e9ac765cbf2002;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "83.168.72.10, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "bf16160c-1639-4fbf-9410-dc2f0887a3d1"
  },
  "is_dpop": false,
  "proofs_present": true
}
2026-06-11 12:42:52 info /token Access token issued ▼
Data:
{
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_jwt_vc",
    "eu.europa.ec.eudi.pid_mdoc",
    "eu.europa.ec.av.1"
  ],
  "dpop_bound": false,
  "expires_in": 86400,
  "token_type": "Bearer"
}
2026-06-11 12:42:52 debug /token Authorization details resolved ▼
Data:
{
  "auth_details": null,
  "claims_data_present": false,
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_jwt_vc",
    "eu.europa.ec.eudi.pid_mdoc",
    "eu.europa.ec.av.1"
  ]
}
2026-06-11 12:42:52 info /token Token request received (pre-authorized_code) ▼
Data:
{
  "authorization_details_present": false,
  "client_id": null,
  "dpop_present": false,
  "grant_type": "pre-authorized_code",
  "tx_code_present": false
}
2026-06-11 12:42:52 debug /token Token request received ▼
Data:
{
  "form_body": {
    "grant_type": "urn:ietf:params:oauth:grant-type:pre-authorized_code",
    "pre-authorized_code": "AWFUC-fug8_S-_JTN2LHI87fR_Rnq313aWQxnUPDU9w"
  },
  "headers": {
    "accept-encoding": "gzip",
    "content-length": "137",
    "content-type": "application/x-www-form-urlencoded",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-dcb85e113ce7026aeb70d35c8b38d4c9-8c77eb2df1e3b580-00",
    "tracestate": "",
    "user-agent": "okhttp/4.12.0",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/token",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=3b84c6575f62fb5658be4a417feb144d5686d11bf96f64d1d4e9ac765cbf2002;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "83.168.72.10, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "829cd1bf-4065-45f7-8f76-cb42b7ca1877"
  },
  "require_wallet_attestation": false,
  "wa_provided": false,
  "wa_validated_at_par": false
}
2026-06-11 12:42:51 info /credential_offers Credential offer retrieved by wallet ▼
Data:
{
  "offer_id": "Ck-5bqyzCxspadSHVWr0uQ"
}
2026-06-11 12:42:46 info /credential_offers Credential offer created ▼
Data:
{
  "credential_offer": {
    "credential_configuration_ids": [
      "eu.europa.ec.eudi.pid_jwt_vc",
      "eu.europa.ec.eudi.pid_mdoc",
      "eu.europa.ec.av.1"
    ],
    "credential_issuer": "https://api.playground.france-identite.gouv.fr/igrantio/issuer-backend",
    "grants": {
      "urn:ietf:params:oauth:grant-type:pre-authorized_code": {
        "pre-authorized_code": "AWFUC-fug8_S-_JTN2LHI87fR_Rnq313aWQxnUPDU9w"
      }
    }
  },
  "grant_type": "pre-authorized_code",
  "offer_id": "Ck-5bqyzCxspadSHVWr0uQ"
}
2026-06-11 12:42:46 info /credential_offers Pre-authorized code created ▼
Data:
{
  "code": "AWFUC-fug8_S-_JTN2LHI87fR_Rnq313aWQxnUPDU9w",
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_jwt_vc",
    "eu.europa.ec.eudi.pid_mdoc",
    "eu.europa.ec.av.1"
  ],
  "tx_code_present": false
}
2026-06-11 12:42:46 info /credential_offers Credential offer requested ▼
Data:
{
  "claims_present": false,
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_jwt_vc",
    "eu.europa.ec.eudi.pid_mdoc",
    "eu.europa.ec.av.1"
  ],
  "grants": {
    "pre_authorized_code": true
  },
  "require_key_attestation": false,
  "require_wallet_attestation": false,
  "subject_id": null
}

Events

3 total
Type Timestamp Details
token_exchanged 2026-06-11 12:42:52 {'grant_type': 'pre-authorized_code'}
offer_retrieved 2026-06-11 12:42:51 None
offer_created 2026-06-11 12:42:46 {'credential_configuration_ids': ['eu.europa.ec.eudi.pid_jwt_vc', 'eu.europa.ec.eudi.pid_mdoc', 'eu.europa.ec.av.1']}