Certificate Generation

[aniket-tarento]

Hi,
I'm trying to generate the certificate using sunbird RC in local. I have created two schemas : user and certificate.
Below is the schema for certificate :

{
	"$schema": "http://json-schema.org/draft-07/schema",
	"type": "object",
	"properties": {
		"Certificate": {
			"$ref": "#/definitions/Certificate"
		}
	},
	"required": [
		"Certificate"
	],
	"title": "Certificate",
	"definitions": {
		"Certificate": {
			"$id": "#/properties/Certificate",
			"type": "object",
			"title": "Certificate Schema",
			"required": [
				"star"
			],
			"properties": {
				"star": {
					"$id": "#/properties/star",
					"$ref": "star.json#/definitions/Star"
				},
				"templateUrl": {
					"type": "string"
				},
                "certificateLabel":{
					"type": "string"
				}

			}
		}
	},
	"_osConfig": {
		"uniqueIndexFields": [],
		"ownershipAttributes": [],
		"roles": [],
		"inviteRoles": [
			"anonymous"
		],
		"systemFields": ["osCreatedAt", "osUpdatedAt", "osCreatedBy", "osUpdatedBy"],
		"enableLogin": false,
		"credentialTemplate": "https://gist.githubusercontent.com/aniket-tarento/f6584603d9e0fc5916f63862ee531925/raw/07b3cab66eee2d62c5f2cec7790fd4222d877e55/diksha_star_credential_template.json"
	}
}

What api I should use to generate and download the certificate? I'm able to create the user in registry.

[tejash-jl]

@aniket-tarento you can check this jupyter notebook link. Here all the APIs are documented from creating schema, generating and downloading certificate

[aniket-tarento]

@tejash-jl getting following error while running code block In[68] :

<Response [200]>
---------------------------------------------------------------------------
IndexError                                Traceback (most recent call last)
Cell In [34], line 11
      9 resp = requests.post("%s%s"%(registryBaseUrl, '/api/v1/Schema/%s/credentialTemplate/documents'%schemaOsid), json={}, headers=headers, files=files)
     10 print(resp)
---> 11 print(resp.json()['documentLocations'][0])
     12 credentialTemplatePath = "minio://" + resp.json()['documentLocations'][0]

IndexError: list index out of range

[tejash-jl]

is the URL pointed to your local instance?

[aniket-tarento]

yes. I have instantiated sunbird RC in my local

[aniket-tarento]

It would be a great help if you could help me convert (Upload Credential Template, Upload certificate template, Update schema with templates) these api calls as postman requests.

[aniket-tarento]

@tejash-jl While calling '/api/v1/Certificate' I'm getting 500 internal server error with following error message :

{
    "id": "sunbird-rc.registry.create",
    "ver": "1.0",
    "ets": 1666270939245,
    "params": {
        "resmsgid": "",
        "msgid": "18eded6b-1f7d-437c-b2bb-6f32f2eb552d",
        "err": "",
        "status": "UNSUCCESSFUL",
        "errmsg": "dev.sunbirdrc.registry.exception.SignatureException$UnreachableException: Unable to reach service: I/O error on POST request for \"http://localhost:8079/sign\": Connect to localhost:8079 [localhost/127.0.0.1] failed: Connection refused (Connection refused); nested exception is org.apache.http.conn.HttpHostConnectException: Connect to localhost:8079 [localhost/127.0.0.1] failed: Connection refused (Connection refused)"
    },
    "responseCode": "OK",
    "result": {}
}

Is something wrong that I'm doing?

[tejash-jl]

@aniket-tarento can you share the docker-compose file,
also please check if you're using the latest release version of registry-cli and the docker images.

[tejash-jl]

@aniket-tarento you need to use URL-W3C-VC

[tejash-jl]

By using this type, the compressed credential will be part of the query params. You can refer to the sample verification implementation provided on how to decompress and verify the data.
https://github.com/Sunbird-RC/sunbird-rc-core/blob/main/services/verification-ui/src/components/VerifyCertificate/index.js#L18

[aniket-tarento]

@tejash-jl After setting the QR_TYPE=URL-W3C-VC, I'm able to get following url on scanning the qr code :

https://dev.sunbirded.org/certs/1-3bdde860-9cba-4143-8e7c-83b873bbd5bf?t=URL-W3C-VC&data=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

how do I enable pointing it to my own specific url? also do we need to write our own verification landing page ui or it is taken care by the certificate service? below is the docker compose file for certificate service :

certificate-api:
    image: dockerhub/sunbird-rc-certificate-api
    environment:
      - PORT=8078
      - QR_TYPE=URL-W3C-VC
      - certDomainUrl=http://localhost:4000
    ports:
      - "8078:8078"

[tejash-jl]

@aniket-tarento you can define custom specific URL via CERTIFICATE_DOMAIN_URL env. The default value is "https://dev.sunbirded.org".
You can use the current verification UI, need to modify the functionality to pick the data from query params after scanning the QR code.