1 of 1

access request to restricted dashboard

(a dashboard is restricted if using a restricted data source)

redirect to a login with QR code �(decodeapp://?sessionId=9876&callback=http://bcnnow.decodeproject.eu/wallet-login&action=login)

scan the QR code, which set a $action=login

display a UI to confirm to share credentials (each of which is associated with a $authorizable_attribute_id) with the dashboard from a list of credentials (also data to then personalize dashboard)

ack

POST request to the callback URL containing (1) the previously created blind proof credentials, (2) the reference $authorizable_attribute_id and� (3) $credential_issuer_endpoint_address, (4) data to personalize dashboard (e.g. district) in a JSON file

get from internal DB the $credential_issuer_public_keys associated with a given $authorizable_attribute_id

execute the Zencode script (08-VERIFIER-verify-blind-proof-credential.zencode), which is able to check that the blind credential is valid.

create new personalized session and �redirect to the requested dashboard.