OpenID Provider configuration

Enable required grant types in the provider.yaml file:

definition:
grant_types:
- authorization_code
- urn:ietf:params:oauth:grant-type:pre-authorized_code

Enable rich authorization request options:

definition:
grant_types:
- authorization_code
- urn:ietf:params:oauth:grant-type:pre-authorized_code authorization_details_types_supported:
- type: openid_credential
  strategy: sha512
  script: null 
ignore_unknown_authorization_details_type: false

Set up mapping rules for pre-authorization_code grants:

rules:
mapping:
- name: preauth_userauth
  rule_type: javascript
  content: "@preauth_userauth.js"
- name: preauth_notifytxcode
  rule_type: javascript
  content: "@preauth_notifytxcode.js"

Set up OIDC clients for expected wallets:

- client_id: default_oid4vci_wallet
  client_name: OID4VCI Untrusted Wallets
  enabled: true
  grant_types:
    - authorization_code
    - urn:ietf:params:oauth:grant-type:pre-authorized_code
  response_types:
    - code
  authorization_details_types:
    - openid_credential
  act_as_credential_issuer: true
  redirect_uris:
    - openid-credential-offer://
    - openid-credential-wallet://