firmas.io · Vouch interop demo

SD-JWT VC + OpenID4VP, end to end

One click issues a fresh age-attestation SD-JWT VC against an ephemeral device key, renders the wallet-initiated OpenID4VP presentation URI as a QR, and round-trips the vp_token back through Firmas's verifier. Useful for compliance reviews and standards-body conversations.

What this demonstrates

  • Issuance — server signs a 1-year SD-JWT VC against the ephemeral device pubkey embedded in cnf.jwk.
  • Wallet-initiated OpenID4VP — the QR encodes a presentation URI; verifiers resolve it to a vp_token + Presentation Exchange descriptor.
  • Selective disclosure — only age_over_14 and age_over_18 are revealed; raw confidence is never exposed to relying parties.
  • Trust matrix — the green “Trusted issuer” badge proves firmas.io is on the curated allowlist; ETSI Trusted List entries layer on top.