Wallet provider configuration

Update individual wallet unit configuration

PATCH/v4/config/ows/wallet-provider/individual-wallet-unit-configuration

Changes the wallet provider configuration of the individual wallet units. Send only the members to change: a member that you leave out keeps its value. The configuration of the organisation wallet units does not change.

Set the signing key here before the first Wallet Unit Attestation (WUA): the wallet provider signs only with an EC P-256 key of the organisation with the format x509 and a valid certificate chain. The save refuses a key that is not an active key of the organisation, and a key without a certificate chain. It does not refuse a key because of its certificate: signingKeyWarnings of the answer has the warnings. A WUA request fails while the key cannot sign. keyStorageStatusIndexOption is fixed after the first key attestation of an individual wallet unit.

Language of the request sample

curl -X PATCH 'https://demo-api.igrant.io/v4/config/ows/wallet-provider/individual-wallet-unit-configuration' \
  -H 'Authorization: ApiKey <your-api-key>' \
  -H 'Content-Type: application/json' \
  -d '{
  "walletUnitAttestationRefreshIntervalSeconds": 86400
}'

{
  "signingKeyWarnings": [],
  "globalConfiguration": {
    "id": "0108ca80-51e3-4325-bccf-4a08cb68a5e0",
    "walletUnitAttestationValidityDays": 30,
    "walletUnitAttestationRefreshIntervalSeconds": 86400,
    "walletUnitAttestationSigningConfig": {
      "cryptographicKeyIdentifier": "3eb959f977b941d28c09cf26fbe2a895",
      "cryptographicKeyFormat": "x509"
    },
    "keyStorageStatusIndexOption": "type_shared",
    "isWiaPerIssuerReuseEnabled": false,
    "isKaPerIssuerReuseEnabled": false,
    "createdAt": 1793245044,
    "updatedAt": 1794142497
  }
}

Authorizations

Authorizationstringheaderrequired
Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.
Scope:individual-wallet-units:update

Body

application/json

The settings to change.

walletUnitAttestationValidityDaysinteger
The lifetime of a WUA in days, 1 or more (0 and null are refused). A WUA is valid for at most 12 hours (TS3 section 2.2.1.1).
At least 1.
Example:30
walletUnitAttestationRefreshIntervalSecondsinteger
The refresh interval of the WUAs in seconds, 1 or more (0 and null are refused). It has no effect on the individual wallet units.
At least 1.
Example:86400
walletUnitAttestationSigningConfigobject
The key that signs the WUAs and the key attestations of the individual wallet units. To sign, the wallet provider needs an EC P-256 key with the format x509 and a valid certificate chain.
keyStorageStatusIndexOptionenum<string>
How the key attestations get their status list entry (TS3 section 2.5.2): type_shared or per_ka. You can change it only until the wallet provider issues the first key attestation to an individual wallet unit.
Available options:type_shared,per_ka
maxKeyAttestationBatchSizeinteger
The most keys that one key attestation request of a wallet unit can attest.
From 1 to 100.
Example:10
maxWiaBatchSizeinteger
The most WUAs that one batch WUA request of a wallet unit can get.
From 1 to 50.
Example:10
isWiaPerIssuerReuseEnabledboolean
true: the WUAs of a batch request of a wallet unit for one issuer use the status list entry of that wallet unit and issuer again (TS3 section 2.5.1).
isKaPerIssuerReuseEnabledboolean
true: the key attestations of a wallet unit for one issuer use the status list entry of that wallet unit and issuer again. true needs keyStorageStatusIndexOption per_ka (sent or stored).

Response

application/json

The configuration after the change.

signingKeyWarningsstring[]
The warnings of the signing key, for a key whose certificate preset this use does not accept (also a key with no certificate preset): one text for each rule of this use that its certificate does not fit. Always present; an empty list when there is no warning. The save is not refused.
globalConfigurationobject
The configuration after the change.