Problem with DID Auth over CHAPI

[leonfhl]

Hi all, we are trying to implement DID Auth in our own UI, using storeCredentialViaChapiDidAuth(unsignedCredential) to issue to LearnCard works, but when same method is used for Veres Wallet it fails with:

{  success: false,
  reason: 'auth failed verification' }

According to the LearnEconomy SDK docs this means: "the user's wallet software failed the verification challenge". I suspect is related with acceptedCryptosuites o acceptedMethod but didn't know how to debug it and what side failed.

We are currently using @learncard/core": "^7.0.1 Jackson suggested to upgrade, and we are looking forward to other ways to troubleshout this.
Thanks for the help!

[Custard7]

@leonfhl - did upgrading to 8.0 @learncard/core resolve your issues?

https://docs.learncard.com/learn-card-sdk/learncard-core/migration-guide

[leonfhl]

Hi it didn't work, the upgrade worked to 8.0. But it didn't fix the issue. The output is the same.

[Custard7]

@leonfhl - are you able to post a sample of your code, or point to a running version of your issuer? Does DID auth work for other wallets, or are you just having issues with Veres?

Let's hop on a call in the am if you would like to troubleshoot live.

@TaylorBeeston any thoughts on what might be going wrong here?

[Custard7]

@leonfhl the storeCredentialViaChapiDidAuth is just a helper method, you can see it's full definition here:

https://github.com/learningeconomy/LearnCard/blob/main/packages/learn-card-core/src/wallet/plugins/chapi/chapi.ts#L55

You could directly call the methods on your learnCard instance and log the verification errors / log each step of the process to see where the issue is.

[leonfhl]

This helps, the method for us fail with Veres in:

That was the exat step we skip with the manual DID Auth. So we are going to debug that part after Plugfest and keep you posted!

[Custard7]

@leonfhl - I was playing with the issuer you have at https://vc.acreditta.com:3007/

When I look at the DID in the issuer id of the credential payload:

did:key:zz6MktiSzqF9kqwdU8VkdBKx56EYzXfpgnNPUAGznpicNiWfn

This doesn't match the DID of your LearnBridge issuer, found at the following /did discovery endpoint:

did:key:z6Mkv1o2GEgtXjFdEMfLtupcKhGRydM8V7VHzii7Uh4aHoqH

This will cause your issuance to fail! The credential must be issued from the DID of your issuer.

If you are using the initLearnCard with a vcApi url endpoint, you can specify the DID on construction:

// Initializes a LearnCard connected to a custom VC-API, with Issuer DID specified.
const customApi = await initLearnCard({ vcApi: 'https://iaf5yytoj0.execute-api.us-east-1.amazonaws.com', did: 'did:key:z6Mkv1o2GEgtXjFdEMfLtupcKhGRydM8V7VHzii7Uh4aHoqH' });

// Or, if you omit it, it will discover it automatically:
// Initializes a LearnCard connected to a custom VC-API that implements /did discovery endpoint.
const customApiWithDIDDiscovery = await initLearnCard({ vcApi: 'https://iaf5yytoj0.execute-api.us-east-1.amazonaws.com' });

https://docs.learncard.com/learn-card-sdk/learncard-core/plugins/official-plugins/vc-api#initialization

[Custard7]

@leonfhl if I swap out the issuer DID to the correct DID, I get a valid, signed credential in the response:

Also note, I went to validate your JSON of the credential you are signing, and I get the following:

https://www.jsonschemavalidator.net/s/5YExj6uV

This was a common issue among plugfest participants, but the image field needs to be an object, like this:

https://www.jsonschemavalidator.net/s/koDOC4mv

[leonfhl]

Sorry that exact VC was a live attempt to put the JFF example directly in the DB, but we rapidly realized that didn't work so we erased and added manually from the ADD section so the issuer DID was inserted correctly.

We managed to do the DID Auth but we have to do it manually and comment out the storeCredentialviaChapiDidAuth method:

We also found problems to put build instances in a server. Right now we are on vc.acreditta.com (without port) but the backend server is running pnpm development instance. We are going to report those later in other tread.

Thanks for the time!

[Custard7]

@leonfhl great looks like this will work for now - and we can continue to iterate post-plugfest.

Let me know when we should make a video - is it ready?