control (1504B)
1 Source: kych 2 Section: net 3 Priority: optional 4 Maintainer: Taler Systems SA <deb@taler.net> 5 Uploaders: Christian Grothoff <grothoff@gnu.org> 6 Rules-Requires-Root: no 7 Build-Depends: 8 debhelper-compat (= 13), 9 cargo, 10 # The crate is edition 2024, which needs rustc 1.85 or newer. Trixie ships 11 # 1.85, so no backport is required. 12 rustc (>= 1.85), 13 # reqwest is built with its default TLS backend (native-tls -> openssl-sys). 14 pkg-config, 15 libssl-dev, 16 # Builds the man pages from documentation/taler-docs/manpages/ using the 17 # minimal configuration in documentation/sphinx-man/. No Sphinx extensions 18 # are needed; keep it that way. 19 python3-sphinx 20 Standards-Version: 4.7.2 21 Vcs-Git: https://git.taler.net/kych.git 22 Homepage: https://taler.net/ 23 24 Package: kych 25 Architecture: any 26 Depends: ${misc:Depends}, ${shlibs:Depends} 27 Recommends: 28 nginx | apache2 | httpd, 29 postgresql (>= 14.0) 30 Description: OAuth 2.0 gateway for SWIYU identity verification 31 KyCH bridges OAuth 2.0 clients -- primarily a GNU Taler exchange performing 32 KYC -- to the Swiss SWIYU e-ID trust infrastructure. The client speaks a 33 plain OAuth 2.0 authorization code flow, while KyCH speaks OpenID4VP to a 34 SWIYU verifier, so that the user's SWIYU wallet presents an SD-JWT verifiable 35 credential with selective disclosure. The OAuth 2.0 scope names the 36 credential claims to be disclosed. 37 . 38 This package provides the gateway daemon, its systemd unit, the database 39 schema and the kych-client-management tool for registering OAuth 2.0 clients.