Credential Download by Holder

[jjeroch]

Description:

We need to provide the ability for the issuer component to allow users to download credentials via a new API endpoint. The endpoint will be a GET request to /credential. This ticket involves creating the necessary backend functionality to handle the request, authenticate the user, retrieve the credential from the storage, and return it to the user in a secure manner.

Endpoint (new): /api/verifiedCredential/{credentialID}
Description:
The endpoint enables users to download the credential (full json) of their own company.
It is not allowed to fetch unsigned credentials or credentials of any other company.
The credential type inside table documents must be defined (per config) and the status of the credential MUST be ACTIVE or INACTIVE

---

Acceptance Criteria:

1. API Endpoint Creation: A new API endpoint GET /credential must be created.
2. Authentication: The endpoint must require user authentication. Only authenticated users should be able to access the endpoint.
3. Authorization: Proper authorization checks must be in place to ensure that users can only download credentials they are entitled to. Client: Issuer Client
4. Credential Retrieval: The system must retrieve the correct credential from the storage based on the provided parameters (e.g., credential ID).
5. Data Format: The credential should be returned in a standard format (JSON).
6. Error Handling: Proper error handling should be implemented. This includes handling cases where the credential does not exist, the user is not authorized (calling a credential which belongs to a different company), or any other exception occurs.
7. Security: Ensure that the transmission of the credential is done over a secure channel (HTTPS).
8. Unit Tests: Write unit tests covering the new functionality with a focus on the security aspects and the business logic.
9. Documentation: Update the API documentation to include the new endpoint, its parameters, response format, and any error messages. (Swagger)

Tasks:

• Design the API interface for the credential download endpoint.
• Implement authentication and authorization checks for the new endpoint.
• Develop the logic to retrieve the credential from the database or file storage.
• Implement the API endpoint to handle the GET request and return the credential.
• Ensure the credential is returned in the correct format.
• Implement comprehensive error handling for the endpoint.
• Write unit tests for the new functionality.
• Update the API documentation with the new endpoint details.
• Deploy the new endpoint to the dev environment for testing.
• Validate the functionality in the dev environment.