Session mOIY-GSICSRq... - Issuer Playground

Session ID mOIY-GSICSRqGJbrI9OjAQ

Status
token_exchanged

Grant Type

pre-authorized_code

Credential Types
eu.europa.ec.eudi.pid_mdoc

Supply Claims

Submit claims for a credential configuration in this session (for deferred issuance).

Session Logs

12 total

2026-06-12 12:12:54 error /credential Holder proof validation failed ▼

Data:

{
  "expected": "One of: `jwk` (inline JWK), `x5c` (X.509 certificate chain), or `key_attestation` (key attestation JWT with attested_keys)",
  "header_params": [
    "kid",
    "typ",
    "alg"
  ],
  "help": "Include the holder\u0027s public key in the JWT proof header using one of:\n  1. `jwk`: {\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}\n  2. `x5c`: [\"\u003cbase64-DER-encoded-certificate\u003e\"]\n  3. `key_attestation`: \"\u003ckey-attestation-jwt\u003e\" (with kid referencing a key in attested_keys)",
  "proof_type": "jwt",
  "reason": "JWT proof header does not contain a holder public key. Found header parameters: [\u0027kid\u0027, \u0027typ\u0027, \u0027alg\u0027]. The header contains `kid` (\"did:key:z2dmzD81cgPx8Vki7JbuuMmFYrWPgYoytykUZ3eyqht1j9Kbr48qjEiTDNFcv7XK2tPB6QcV...\") but `kid` alone is not sufficient \u2014 the issuer cannot resolve external key references. The holder\u0027s public key material must be included directly.",
  "spec_ref": "OID4VCI Section 8.2.1.1 / Appendix F.1"
}

2026-06-12 12:12:54 debug /credential Credential configuration resolved ▼

Data:

{
  "config_id": "eu.europa.ec.eudi.pid_mdoc",
  "credential_identifier": "0F2boQEojvjx74z6OHQi1A"
}

2026-06-12 12:12:54 debug /credential Credential request body ▼

Data:

{
  "credential_identifier": "0F2boQEojvjx74z6OHQi1A",
  "proofs": {
    "jwt": [
      "eyJraWQiOiJkaWQ6a2V5OnoyZG16RDgxY2dQeDhWa2k3SmJ1dU1tRllyV1BnWW95dHlrVVozZXlxaHQxajlLYnI0OHFqRWlURE5GY3Y3WEsydFBCNlFjVkVBYmtvMXZmNlBpY0FaVnBMU0g5M0xmcUQydUFKWXR2ZFRyTjNzcFNTWFZrVUJLZTJyRTROMWlmMzcxeWRVdkdWVGtMbTdWVDl3MVZXUkg0QkE5TWNDTnpNOFV2c0t6M25kNlZ6bVZqUVkjejJkbXpEODFjZ1B4OFZraTdKYnV1TW1GWXJXUGdZb3l0eWtVWjNleXFodDFqOUticjQ4cWpFaVRETkZjdjdYSzJ0UEI2UWNWRUFia28xdmY2UGljQVpWcExTSDkzTGZxRDJ1QUpZdHZkVHJOM3NwU1NYVmtVQktlMnJFNE4xaWYzNzF5ZFV2R1ZUa0xtN1ZUOXcxVldSSDRCQTlNY0NOek04VXZzS3ozbmQ2VnptVmpRWSIsInR5cCI6Im9wZW5pZDR2Y2ktcHJvb2Yrand0IiwiYWxnIjoiRVMyNTYifQ.eyJhdWQiOiJodHRwczovL2FwaS5wbGF5Z3JvdW5kLmZyYW5jZS1pZGVudGl0ZS5nb3V2LmZyL2lncmFudGlvL2lzc3Vlci1iYWNrZW5kIiwiaXNzIjoiZGlkOmtleTp6MmRtekQ4MWNnUHg4VmtpN0pidXVNbUZZcldQZ1lveXR5a1VaM2V5cWh0MWo5S2JyNDhxakVpVERORmN2N1hLMnRQQjZRY1ZFQWJrbzF2ZjZQaWNBWlZwTFNIOTNMZnFEMnVBSll0dmRUck4zc3BTU1hWa1VCS2UyckU0TjFpZjM3MXlkVXZHVlRrTG03VlQ5dzFWV1JINEJBOU1jQ056TThVdnNLejNuZDZWem1WalFZIiwiaWF0IjoxNzgxMjY2Mzc0LCJub25jZSI6IlVyRzIwZWtZZ2VlY3ZtaFZkeDV4c21TVFFGNlY1QSJ9.OihK6HOB0wSxF5VQEzpV97aLiO31DFVlU7OBAo9-GVMxTBLXuz8UEiM-CsZnlQoLKHIiZ6qBBwJsPEgFQMMiSg"
    ]
  }
}

2026-06-12 12:12:54 info /credential Credential request received ▼

Data:

{
  "credential_configuration_id": null,
  "credential_identifier": "0F2boQEojvjx74z6OHQi1A",
  "headers": {
    "accept-encoding": "gzip",
    "authorization": "Bearer 4izw0nZOMrGp6tCfhltqPEIFjI9o9sX3weWefUeLpjA",
    "content-length": "1162",
    "content-type": "application/json",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-e57bc82c2cd84f4e8d35bbf9f1b78cbb-1fb51699a10d472d-00",
    "tracestate": "",
    "user-agent": "Dart/3.10 (dart:io)",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/credential",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=6f9ee31c83b3484e9fe92a4c0ce049a93462227c9b7d3f18f68795f032420044;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "213.4.19.194, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "7d564911-ecdb-4e10-b4a5-7ba9e0c63995"
  },
  "is_dpop": false,
  "proofs_present": true
}

2026-06-12 12:12:53 info /token Access token issued ▼

Data:

{
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_mdoc"
  ],
  "dpop_bound": false,
  "expires_in": 86400,
  "token_type": "Bearer"
}

2026-06-12 12:12:53 debug /token Authorization details resolved ▼

Data:

{
  "auth_details": [
    {
      "credential_configuration_id": "eu.europa.ec.eudi.pid_mdoc",
      "credential_identifiers": [
        "0F2boQEojvjx74z6OHQi1A"
      ],
      "type": "openid_credential"
    }
  ],
  "claims_data_present": false,
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_mdoc"
  ]
}

2026-06-12 12:12:53 info /token Token request received (pre-authorized_code) ▼

Data:

{
  "authorization_details_present": true,
  "client_id": "wallet-dev",
  "dpop_present": false,
  "grant_type": "pre-authorized_code",
  "tx_code_present": false
}

2026-06-12 12:12:53 debug /token Token request received ▼

Data:

{
  "form_body": {
    "authorization_details": "[{\"type\":\"openid_credential\",\"credential_configuration_id\":\"eu.europa.ec.eudi.pid_mdoc\"}]",
    "client_id": "wallet-dev",
    "grant_type": "urn:ietf:params:oauth:grant-type:pre-authorized_code",
    "pre-authorized_code": "mv84gWQtkDWJVWuHfjnP97-WokWNeiQpLgiqpgjANy8"
  },
  "headers": {
    "accept-encoding": "gzip",
    "content-length": "300",
    "content-type": "application/x-www-form-urlencoded",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-2ff971a22f844a3d960531d6652ccf0b-00529834074b019f-00",
    "tracestate": "",
    "user-agent": "Dart/3.10 (dart:io)",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/token",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=6f9ee31c83b3484e9fe92a4c0ce049a93462227c9b7d3f18f68795f032420044;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "213.4.19.194, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "3c6cb751-57b7-4ace-96ec-dfedee4efdea"
  },
  "require_wallet_attestation": false,
  "wa_provided": false,
  "wa_validated_at_par": false
}

2026-06-12 12:12:51 info /credential_offers Credential offer retrieved by wallet ▼

Data:

{
  "offer_id": "7Zj2W-4xxolaHoIDDjIqEw"
}

2026-06-12 12:12:48 info /credential_offers Credential offer created ▼

Data:

{
  "credential_offer": {
    "credential_configuration_ids": [
      "eu.europa.ec.eudi.pid_mdoc"
    ],
    "credential_issuer": "https://api.playground.france-identite.gouv.fr/igrantio/issuer-backend",
    "grants": {
      "urn:ietf:params:oauth:grant-type:pre-authorized_code": {
        "pre-authorized_code": "mv84gWQtkDWJVWuHfjnP97-WokWNeiQpLgiqpgjANy8"
      }
    }
  },
  "grant_type": "pre-authorized_code",
  "offer_id": "7Zj2W-4xxolaHoIDDjIqEw"
}

2026-06-12 12:12:48 info /credential_offers Pre-authorized code created ▼

Data:

{
  "code": "mv84gWQtkDWJVWuHfjnP97-WokWNeiQpLgiqpgjANy8",
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_mdoc"
  ],
  "tx_code_present": false
}

2026-06-12 12:12:48 info /credential_offers Credential offer requested ▼

Data:

{
  "claims_present": false,
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_mdoc"
  ],
  "grants": {
    "pre_authorized_code": true
  },
  "require_key_attestation": false,
  "require_wallet_attestation": false,
  "subject_id": null
}

Events

3 total

Type	Timestamp	Details
token_exchanged	2026-06-12 12:12:53	{'grant_type': 'pre-authorized_code'}
offer_retrieved	2026-06-12 12:12:51	None
offer_created	2026-06-12 12:12:48	{'credential_configuration_ids': ['eu.europa.ec.eudi.pid_mdoc']}

Session Detail