Skip to main content

DC API Sessions

DC API Sessions enable server-to-server verification using the Digital Credentials API.

The thin client architecture keeps credential handling server-side:

  1. Create a session to get encryption keys and request configs
  2. Your frontend uses the Digital Credentials API to request credentials
  3. POST the encrypted response back to verify and extract claims

Benefits:

  • No credential data exposed to frontend JavaScript
  • Cryptographic binding via session transcript
  • Works with Chrome/Android (OpenID4VP) and Safari/iOS (mdoc)

Sessions expire after 5 minutes and are single-use.

Endpoints

GET
/v1/verifier/dc_sessions/{id}/render

Render verified claims as visual credential
GET
/v1/verifier/dc_sessions/{id}

Get DC API session status
POST
/v1/verifier/dc_sessions

Create a DC API session
POST
/v1/verifier/dc_sessions/{id}/verify

Verify a DC API session