Build a web application that can request and verify credentials via the Digital Credentials API

Add DC API support to your verifier application configuration

Add the dcApiConfiguration block to your verifier application configuration:

PUT /v2/presentations/applications/{applicationId}

{
  // ... your existing configuration
  "dcApiConfiguration": {
    "supportedBrowserPlatforms": {
      "mobile": true,
      "desktop": true
    }
  }
}

• supportedBrowserPlatforms: Specify which platforms should use DC API:
  • mobile: Set to true to enable DC API on mobile browsers.
  • desktop: Set to true to enable DC API on desktop browsers.

Conditionally omit the walletProviderId when calling the requestCredentials method

When requesting credentials via the DC API, the walletProviderId must be omitted (set to undefined) to allow the SDK to use the DC API flow.

You can achieve this by using the SDK's isDigitalCredentialsApiSupported method to check if the user's browser supports DC API and adjusting the request options accordingly (This method returns true if the browser supports DC API, false otherwise):

const options: MATTRVerifierSDK.RequestCredentialsOptions = {
  // The array must contain exactly one query to align with the DC API's single credential requirement.
  credentialQuery: [credentialQuery],
  challenge: MATTRVerifierSDK.utils.generateChallenge(),
  openid4vpConfiguration: {
    redirectUri: window.location.origin,
    walletProviderId: MATTRVerifierSDK.isDigitalCredentialsApiSupported() ? undefined : "your-wallet-provider-id",
  },
};

const results = await MATTRVerifierSDK.requestCredentials(options);

Setup an Apple Business Connect account

Set up an Apple Business Account for your company, and register with Apple. See Apple Business Connect User Guide for more details.

Create a Certificate Signing Request (CSR)

Next you will use MATTR VII to create a Certificate Signing Request (CSR). This will be shared with Apple Business Connect to create a matching certificate.

Currently this action can only be performed via an API request.

Make the following request to your MATTR VII tenant to create a verification request signer:

POST /v2/presentations/certificates/verifier-signers

{
  "emailAddress": "user@example.com",
  "country": "US",
  "stateOrProvinceName": "AL",
  "commonName": "my-verifier.example.com",
  "organizationName": "MATTR Learn",
  "caType": "apple"
}

• emailAddress: The email address of the domain (or IT) administrator.
• country: The two-letter country code (ISO 3166-1 alpha-2) representing your company's location.
• stateOrProvinceName: The company's officially recognized state, province, region, or locale.
• commonName: Fully qualified domain name (FQDN) where the verifier application is hosted.
• organizationName: The official name of your company.
• caType: Set to apple to indicate that this signer is for Apple Wallet verification requests.

Response

A successful 201 response indicates that the verification request signer was created successfully:

{
  "id": "782f1885-c7c2-4459-8426-b6d7c111b0b1", 
  "csrPem": "-----BEGIN CERTIFICATE REQUEST-----\nMIIDXTCCAkWgAwIBAgIJAL5...\n-----END CERTIFICATE REQUEST-----", 
  "active": false,
  "caType": "apple"
}

Make note of the following values:

• id: The verification request signer ID. You will use it later to activate the signer after creating the matching Apple Business Connect certificate.
• csrPem: You will need it in the next step to create a matching Apple Business Connect certificate in your Apple Developer account.

Create an Apple Business Connect certificate

Log into the Apple Business Connect portal and create a new Apple Business Connect certificate using the CSR you obtained in the previous step. For detailed instructions, see Apple's documentation.

Once you create the certificate in Apple Business Connect, download the certificate file in pem format. You will use it in the next step to activate the verification request signer in your MATTR VII verifier tenant.

Activate the verification request signer

To activate the verification request signer you created earlier, make the following request to your MATTR VII tenant to update the verification request signer and activate it:

PUT /v2/presentations/certificates/verifier-signers/{verifierSignerId}

• verifierSignerId: The ID of the verification request signer you created earlier.

{
  "active": true,
  "certificatePem": "-----BEGIN CERTIFICATE-----\nMIIDXTCCAkWgAwIBAgIJAL5...\n-----END CERTIFICATE-----"
}

• active: Set to true to activate the signer.
• certificatePem: The Apple Business Connect certificate you created in the previous step, in pem format.

Once the verification request signer is activated, requests coming from your MATTR VII verifier tenant can be validated, as they are signed using the private key associated with this certificate.