Read access point configuration
The public discovery document of the data space endpoints of an organisation. Another organisation reads it to find the authorisation server and the endpoints that start the signing of a data disclosure agreement. No authentication.
Read authorisation server metadata
The public OAuth 2.0 authorisation server metadata (RFC 8414) of the data space endpoints of an organisation. A data using service reads it to find the token endpoint. No authentication.
Get access token
The OAuth 2.0 token endpoint of the data space endpoints of an organisation (the `token_endpoint` of its authorisation server metadata). A party that has an OAuth 2.0 client of the organisation, for example your data marketplace, gets an access token here with the `client_credentials` grant. The token works for 1 hour at `POST .../get-verification-request` and `POST .../post-verification-request` of the same organisation. No API key: the client credentials authenticate the call.
Get verification request
Starts the signing of a data disclosure agreement record at a data source (the `get_verification_request_endpoint` of its access point configuration). The data source makes the record for a published template revision, signs it with its organisation wallet, and answers with an OpenID4VP verification request that has the record as transaction data. The wallet of the data using service answers that request to sign the record as the data using service.
Post verification request
Gives a verification request to the organisation wallet of a data using service (the `post_verification_request_endpoint` of its access point configuration). Use it to pass on the request from `POST .../get-verification-request` of a data source: the organisation wallet receives the OpenID4VP request, and its answer signs the data disclosure agreement record as the data using service. A data source sends the request here itself for a connected organisation (`autoSend: true`).
Validate access token
Checks an access token that a data using service sent to the API of your organisation, the data source, and decides whether the call is allowed. Call it from your API before you answer a data using service.