Where can I find more information on what and how APIs are used in the Verifiable Credentials sample?

Question

Hi,

I'm curious to know what and how the APIs and communications between apps are being invoked in the sample app. I suppose the following sequence of calls between apps are being taken place for issuing VC:

1. Click Get Credential button -> QR Code is generated -> "issue-request" (in app.js) is invoked.
2. Scan QR Code in Microsoft Authenticator -> Authenticator "GET" "issue-request.jwt" in "app.js"
3. Authenticator access the Verifiable Credentials "rules" and "display" -> Prompt for "Sign-in" according to the "attestations.idTokens.configuration" specified in the rules file.
4. Sign in -> return "SUCCESS" or "FAILURE" to Microsoft Authenticator per the authentication service specified in "configuration". (Is it done through OAuth 2.0?)
5. Display the "Add" button in Microsoft Authenticator if "SUCCESS".
6. Click "Add" -> Verifiable Credential added to the Wallet.

Here are my questions:

1. What type of service is required for Sign In by Microsoft Authenticator for issuing with Verifiable Credential? Any OAuth 2.0?
2. Is there a DID generated by AD Verifiable Credentials and written to ION for the requester? If so, when and how is the DID of the requester being written to the ION network?
3. When and how the Verifiable Credential of the requester is being generated and written to the ION network?
4. Will a new Verifiable Credential generated for each request from the same requester? I suppose not. If not, how the previously generated VC is retrieved and passed to Authenticator? If yes, why?

Could you please help?

Cheers,
Jason

Answer 1

The questions have been addressed here: https://github.com/Azure-Samples/active-directory-verifiable-credentials/issues/34