DCQL query requirements

GET 
/auth/dcql-queries

Retrieves the DCQL (Digital Credentials Query Language) query requirements associated with various OpenID Connect (OIDC) scopes, for the OpenID4VP 1.0 (final) grant.

Four scopes (did-registry:invite, ledger:invoke, issuers-registry:invite, track-and-trace:authorise) request a credential of a specific type. The other seven -- every combinable scope -- request the same shared self_attestation_credential: a credential the holder issues to itself (iss/vc.issuer and sub/credentialSubject.id both equal to its own DID, no termsOfUse), purely to satisfy DCQL's requirement that credentials be non-empty.

client_metadata.vp_formats_supported reflects the requested scope(s): most accept a Verifiable Presentation signed with either ES256 or ES256K, but did-registry:invite and track-and-trace:authorise each require one signed with ES256K specifically.

Request

Responses

200

Success

400

Bad Request

405

Method Not Allowed. Returned for any documented path invoked with an HTTP method it doesn't support.

Response Headers

Allow
Comma-separated list of HTTP methods supported by this path.
Example: GET, HEAD

406

Not Acceptable. Returned when the request's Accept header matches none of the content types this operation can produce.

500

Internal Server Error