DCQL query: iGrant.io Authenticator

When to use

Use this template for passwordless login. The query asks the wallet for one claim: the email address that the iGrant.io Authenticator credential holds. Your service reads that address and signs the person in to the matching account.

The template discloses one claim only. It carries no name, no birth date, and no document number.

Prerequisites

• An iGrant.io Organisation Wallet Suite (OWS) API key. Get it from support@igrant.io. Keep it on the server, in an environment variable or a secret manager. The browser never sees it.
• The OWS environment the key belongs to. The default is demo (https://demo-api.igrant.io). Use staging (https://staging-api.igrant.io) only when the integrator asks for it. A key works only in its own environment.