Wallet provider configuration

Update organisation wallet unit configuration

PATCH/v4/config/ows/wallet-provider/organisation-wallet-unit-configuration

Changes the wallet provider configuration of the organisation wallet units. Send only the members to change: a member that you leave out keeps its value. The configuration of the individual wallet units does not change.

Set the signing key here before the first pool: the wallet provider signs only with an EC P-256 key of the organisation with the format x509 and a valid certificate chain. The save refuses a key that is not an active key of the organisation, and a key without a certificate chain. It does not refuse a key because of its certificate: signingKeyWarnings of the answer has the warnings. A mint fails while the key cannot sign. A new wiaPoolSize applies to the next mint of each pool. keyStorageStatusIndexOption is fixed after the first key attestation of an organisation wallet unit.

Language of the request sample

curl -X PATCH 'https://demo-api.igrant.io/v4/config/ows/wallet-provider/organisation-wallet-unit-configuration' \
  -H 'Authorization: ApiKey <your-api-key>' \
  -H 'Content-Type: application/json' \
  -d '{
  "walletUnitAttestationRefreshIntervalSeconds": 86400
}'

{
  "signingKeyWarnings": [],
  "globalConfiguration": {
    "id": "36943cea-b91d-4b0d-a697-595940ef43c6",
    "walletUnitAttestationValidityDays": 30,
    "walletUnitAttestationRefreshIntervalSeconds": 86400,
    "walletUnitAttestationSigningConfig": {
      "cryptographicKeyIdentifier": "c19e39f6bc6a40b399d9faf713c0422a",
      "cryptographicKeyFormat": "x509"
    },
    "keyStorageStatusIndexOption": "type_shared",
    "isWiaPerIssuerReuseEnabled": false,
    "isKaPerIssuerReuseEnabled": false,
    "createdAt": 1793245044,
    "updatedAt": 1794142506
  }
}

Authorizations

Authorizationstringheaderrequired
Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.
Scope:organisation-wallet-units:update

Body

application/json

The settings to change.

walletUnitAttestationValidityDaysinteger
The lifetime of a WUA in days, 1 or more (0 and null are refused). A WUA is valid for at most 12 hours (TS3 section 2.2.1.1).
At least 1.
Example:30
walletUnitAttestationRefreshIntervalSecondsinteger
The refresh interval of the WUA pools in seconds, 1 or more (0 and null are refused). The wallet provider uses at most half the WUA lifetime.
At least 1.
Example:86400
walletUnitAttestationSigningConfigobject
The key that signs the WUAs and the key attestations of the organisation wallet units. To sign, the wallet provider needs an EC P-256 key with the format x509 and a valid certificate chain.
keyStorageStatusIndexOptionenum<string>
How the key attestations get their status list entry (TS3 section 2.5.2): type_shared or per_ka. You can change it only until the wallet provider issues the first key attestation to an organisation wallet unit.
Available options:type_shared,per_ka
maxKeyAttestationBatchSizeinteger
The most keys that one key attestation request can attest. The key attestations of the organisation wallet units do not apply it.
From 1 to 100.
Example:10
wiaPoolSizeinteger
The number of WUAs in the pool of each organisation wallet unit, 1 to 10. The next mint of a pool uses the new size.
From 1 to 10.
Example:10
isWiaPerIssuerReuseEnabledboolean
true: a wallet unit uses the status list entry of its WUAs for one issuer again (TS3 section 2.5.1). The WUAs of a pool always get new entries.
isKaPerIssuerReuseEnabledboolean
true: a wallet unit uses the status list entry of its key attestations for one issuer again. true needs keyStorageStatusIndexOption per_ka (sent or stored).

Response

application/json

The configuration after the change.

signingKeyWarningsstring[]
The warnings of the signing key, for a key whose certificate preset this use does not accept (also a key with no certificate preset): one text for each rule of this use that its certificate does not fit. Always present; an empty list when there is no warning. The save is not refused.
globalConfigurationobject
The configuration after the change.