Update VC IdP in Access to Court Materials realm

bcgov / DITP-DevOps

Digital Identity and Trust Program Team's DevOps Documentation Repository

Apache License 2.0

2 stars 5 forks source link

Update VC IdP in Access to Court Materials realm #118

Closed esune closed 8 months ago

esune commented 11 months ago

This is a follow-up task to #93.

New instances of VC-AuthN have been deployed as part of #93, this task is to:

[ ] switch the Identity Provider configuration in the acces-to-court-materials realms to use the new instance
[x] ensure that backwards-compatibility settings are turned on
[ ] decommission the existing, outdated deployments label app=vc-authn-oidc and app=vc-authn-oidc-rev

esune commented 11 months ago

dev environment has been fully upgraded to use VC-AuthN 2.0. I am still troubleshooting validating issues in the test environment before fully moving it over to the new service.

In particular, I am observing a couple of odd behaviours:

in BC Wallet, after scanning the QR code, the screen to select the credentials to present takes several tens of seconds (sometimes over 30s) to be loaded.
the presented proof request takes minutes to verify and redirect
sometimes, in test, the redirect will fails and after that attempt vc-authn will not recognize the client anymore

esune commented 10 months ago

All instances of VC-AuthN 2.0 have been upgraded to the latest 2.0.0-rc1 release. The dev environmanet has been fully upgraded to use VC-AuthN 2.0, while test and prod have only been upgraded for the (currently unused) Identity Provider that used to only support revocable credentials.

On hold with further upgrades and testing by partners until a new BC Wallet release addressing slowness and issues with revocable credentials is pushed to the app stores (see https://github.com/bcgov/bc-wallet-mobile/issues/1512).

esune commented 8 months ago

Production environments have been migrated to the new version as of December 6th.