commit 4dfc9b83812ba2054662c7174416e8a9ed4fc25b
parent b4953b7a5794db1f6a47921797c654af84442cde
Author: Christian Grothoff <grothoff@gnunet.org>
Date: Tue, 14 Oct 2025 14:14:27 +0200
clarify later token-based oauth steps
Diffstat:
1 file changed, 7 insertions(+), 4 deletions(-)
diff --git a/documentation/swiyu_taler_sequence_diagram.txt b/documentation/swiyu_taler_sequence_diagram.txt
@@ -23,18 +23,21 @@ SwiyuVerifier->Oauth2Gateway: Send verification_url
Oauth2Gateway->Browser: Open verification_url QR code and verificationId (in response body)
Browser->SwiyuWallet: Open QR code
SwiyuWallet->SwiyuVerifier: GET /oid4vp/api/request-object/{request_id}
-SwiyuWallezt->SwiyuVerifier: POST /oid4vp/api/request-object/{request_id}/response-data
+SwiyuWallet->SwiyuVerifier: POST /oid4vp/api/request-object/{request_id}/response-data
note over Oauth2Gateway,Exchange: Oauth2Gateway notifies Exchange asynchronously via webhook
-SwiyuVerifier->Oauth2Gateway: Webhook (verification complete)
+SwiyuVerifier->Oauth2Gateway: Webhook (verification complete) [POST /notification/{request_id}/
Oauth2Gateway->Exchange: POST /oauth2gw/kyc/notify (verificationId)
note over Exchange,Oauth2Gateway: Exchange retrieves the final proof (Verifiable Credential)
-Exchange->Oauth2Gateway: GET /kyc/info/{verificationId}
+Exchange->Oauth2Gateway: POST /token
+Oauth2Gateway->Exchange: Access token
+Exchange->Oauth2Gateway: GET /info (with access token)
Oauth2Gateway->SwiyuVerifier: GET /management/api/verifications/{verificationId}
SwiyuVerifier->Oauth2Gateway: Send proof (Verifiable Credential)
Oauth2Gateway->Exchange: Send proof (in response body)
-Exchange->Browser: Notify success
+Exchange->Browser: Notify success (KYC page)
+Exchange->TalerWallet: Notify success
TalerWallet->Exchange: Retry original operation