Authorisation Server

Post verification request

POST/v4/service/consent/data-space/{organisationId}/post-verification-request

Gives a verification request to the organisation wallet of a data using service (the post_verification_request_endpoint of its access point configuration). Use it to pass on the request from POST .../get-verification-request of a data source: the organisation wallet receives the OpenID4VP request, and its answer signs the data disclosure agreement record as the data using service. A data source sends the request here itself for a connected organisation (autoSend: true).

Send an access token from the token endpoint of the same organisation (POST .../token) as Authorization: Bearer <token>. No API key.

The answer is 200 with an empty body when the service accepted the request, also when the wallet then fails to receive it.

Errors:

400: the organisation does not exist, or verificationRequest is missing.
401: the access token is missing, unknown or expired (Bearer access token is not valid).
403: the organisation is suspended (organisation_suspended).

Post verification request

Language of the request sample

curl -X POST 'https://demo-api.igrant.io/v4/service/consent/data-space/{organisationId}/post-verification-request' \
  -H 'Content-Type: application/json' \
  -d '{
  "verificationRequest": "openid4vp://?client_id=x509_hash%3AC3P2NdnE_I-TP7eLZ7Vgqcppm4wK7QvfeogSEmnaK3Y&request_uri=https%3A%2F%2Fdemo-api.igrant.io%2Forganisation%2F60905277-d953-4ef7-aa4c-cec413d00d93%2Fservice%2Fverification%2F5bdac5aa-e77a-4181-8f8d-65507990bef3&request_uri_method=post"
}'

No body.

Authorizations

Public. The operation takes no credentials.

Path parameters

organisationIdstringrequired
The ID of the organisation

Body

application/json

verificationRequeststringrequired
The OpenID4VP verification request URL, the verificationRequest of the data source.

Response

The service accepted the request. The body is empty.

No body.