Session zKjcIoTxr8bP... - Issuer Playground

Session ID zKjcIoTxr8bPevZUNj6rGw

Status
token_exchanged

Grant Type

pre-authorized_code

Credential Types
eu.europa.ec.eudi.pid_jwt_vc

Supply Claims

Submit claims for a credential configuration in this session (for deferred issuance).

Session Logs

12 total

2026-06-10 07:57:17 error /credential Holder proof validation failed ▼

Data:

{
  "expected": "One of: `jwk` (inline JWK), `x5c` (X.509 certificate chain), or `key_attestation` (key attestation JWT with attested_keys)",
  "header_params": [
    "typ",
    "alg",
    "kid"
  ],
  "help": "Include the holder\u0027s public key in the JWT proof header using one of:\n  1. `jwk`: {\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}\n  2. `x5c`: [\"\u003cbase64-DER-encoded-certificate\u003e\"]\n  3. `key_attestation`: \"\u003ckey-attestation-jwt\u003e\" (with kid referencing a key in attested_keys)",
  "proof_type": "jwt",
  "reason": "JWT proof header does not contain a holder public key. Found header parameters: [\u0027typ\u0027, \u0027alg\u0027, \u0027kid\u0027]. The header contains `kid` (\"did:gatc:YjIwMDViOTAxZTE4MmUzYzgyOGZiNjFi#keys-ODNiOWY4Y2MwZTc2NzU0YmUwYjhlNGJk-...\") but `kid` alone is not sufficient \u2014 the issuer cannot resolve external key references. The holder\u0027s public key material must be included directly.",
  "spec_ref": "OID4VCI Section 8.2.1.1 / Appendix F.1"
}

2026-06-10 07:57:17 debug /credential Credential configuration resolved ▼

Data:

{
  "config_id": "eu.europa.ec.eudi.pid_jwt_vc",
  "credential_identifier": null
}

2026-06-10 07:57:17 debug /credential Credential request body ▼

Data:

{
  "credential_configuration_id": "eu.europa.ec.eudi.pid_jwt_vc",
  "proofs": {
    "jwt": [
      "eyJ0eXAiOiJvcGVuaWQ0dmNpLXByb29mK2p3dCIsImFsZyI6IkVkRFNBIiwia2lkIjoiZGlkOmdhdGM6WWpJd01EVmlPVEF4WlRFNE1tVXpZemd5T0daaU5qRmkja2V5cy1PRE5pT1dZNFkyTXdaVGMyTnpVMFltVXdZamhsTkdKay0xIn0.eyJhdWQiOiJodHRwczovL2FwaS5wbGF5Z3JvdW5kLmZyYW5jZS1pZGVudGl0ZS5nb3V2LmZyL2lncmFudGlvL2lzc3Vlci1iYWNrZW5kIiwiZXhwIjoxNzgxMDc4NTM3LCJpYXQiOjE3ODEwNzgyMzcsIm5vbmNlIjoidjhobjlVZ3dvemRReVJUSmhoZkhUckNnMG9LbXlnIn0.mou0F0xIGEiVr5ZWBYDpHiX-SMbeHLeIMhPwptsXPw6g-O4McOeGPGd5LP-iTfN2bmPl3v5MliABjIjimu2gCA"
    ]
  }
}

2026-06-10 07:57:17 info /credential Credential request received ▼

Data:

{
  "credential_configuration_id": "eu.europa.ec.eudi.pid_jwt_vc",
  "credential_identifier": null,
  "headers": {
    "accept-encoding": "gzip",
    "authorization": "Bearer k95ubzpdrjB9ZedTP_oE2-T-aFiUdoDC9sQDDt3YQcs",
    "content-length": "558",
    "content-type": "application/json",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-7253baf67ac46890cd94f8c5306eb017-713fe3864a026047-00",
    "tracestate": "",
    "user-agent": "okhttp/4.12.0",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/credential",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=e1570e682eb6e388bfec8a382cd60b088a13d621cddf45ff0837c210dec7097d;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "23.162.152.6, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "e25113bf-0a48-43dd-b246-b55cb599f069"
  },
  "is_dpop": false,
  "proofs_present": true
}

2026-06-10 07:57:14 info /token Access token issued ▼

Data:

{
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_jwt_vc"
  ],
  "dpop_bound": false,
  "expires_in": 86400,
  "token_type": "Bearer"
}

2026-06-10 07:57:14 debug /token Authorization details resolved ▼

Data:

{
  "auth_details": null,
  "claims_data_present": false,
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_jwt_vc"
  ]
}

2026-06-10 07:57:14 info /token Token request received (pre-authorized_code) ▼

Data:

{
  "authorization_details_present": false,
  "client_id": null,
  "dpop_present": false,
  "grant_type": "pre-authorized_code",
  "tx_code_present": false
}

2026-06-10 07:57:14 debug /token Token request received ▼

Data:

{
  "form_body": {
    "grant_type": "urn:ietf:params:oauth:grant-type:pre-authorized_code",
    "pre-authorized_code": "oVm7kouDWMpg4FGeckSfMB4GMmr_hl4QMaFALI7egtY"
  },
  "headers": {
    "accept-encoding": "gzip",
    "content-length": "137",
    "content-type": "application/x-www-form-urlencoded",
    "host": "api.playground.france-identite.gouv.local:32689",
    "traceparent": "00-614aa205e9d1c0576cb9e20dfe1344b8-ec68d50f3887fe9b-00",
    "tracestate": "",
    "user-agent": "okhttp/4.12.0",
    "via": "1.1 Caddy",
    "x-envoy-attempt-count": "1",
    "x-envoy-external-address": "10.42.7.1",
    "x-envoy-original-path": "/igrantio/issuer-backend/token",
    "x-forwarded-client-cert": "By=spiffe://cluster.local/ns/igrantio/sa/igrantio-playground-unfold;Hash=e1570e682eb6e388bfec8a382cd60b088a13d621cddf45ff0837c210dec7097d;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account",
    "x-forwarded-for": "23.162.152.6, 127.0.0.1,10.42.7.1",
    "x-forwarded-host": "api.playground.france-identite.gouv.fr",
    "x-forwarded-proto": "https",
    "x-forwarded-server": "api.playground.france-identite.gouv.fr",
    "x-request-id": "e0a704ba-9725-4f9c-9efd-789387152164"
  },
  "require_wallet_attestation": false,
  "wa_provided": false,
  "wa_validated_at_par": false
}

2026-06-10 07:57:14 info /credential_offers Credential offer retrieved by wallet ▼

Data:

{
  "offer_id": "q1hwv6-3SIeoYVyZihlFhQ"
}

2026-06-10 07:57:11 info /credential_offers Credential offer created ▼

Data:

{
  "credential_offer": {
    "credential_configuration_ids": [
      "eu.europa.ec.eudi.pid_jwt_vc"
    ],
    "credential_issuer": "https://api.playground.france-identite.gouv.fr/igrantio/issuer-backend",
    "grants": {
      "urn:ietf:params:oauth:grant-type:pre-authorized_code": {
        "pre-authorized_code": "oVm7kouDWMpg4FGeckSfMB4GMmr_hl4QMaFALI7egtY"
      }
    }
  },
  "grant_type": "pre-authorized_code",
  "offer_id": "q1hwv6-3SIeoYVyZihlFhQ"
}

2026-06-10 07:57:11 info /credential_offers Pre-authorized code created ▼

Data:

{
  "code": "oVm7kouDWMpg4FGeckSfMB4GMmr_hl4QMaFALI7egtY",
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_jwt_vc"
  ],
  "tx_code_present": false
}

2026-06-10 07:57:11 info /credential_offers Credential offer requested ▼

Data:

{
  "claims_present": false,
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid_jwt_vc"
  ],
  "grants": {
    "pre_authorized_code": true
  },
  "require_key_attestation": false,
  "require_wallet_attestation": false,
  "subject_id": null
}

Events

3 total

Type	Timestamp	Details
token_exchanged	2026-06-10 07:57:14	{'grant_type': 'pre-authorized_code'}
offer_retrieved	2026-06-10 07:57:14	None
offer_created	2026-06-10 07:57:11	{'credential_configuration_ids': ['eu.europa.ec.eudi.pid_jwt_vc']}

Session Detail