Demo Edu Registry - Institute affiliation attestation

[pkranga]

I have set up the demo education registry schema locally and using the UI to register and manage the education use cases. When creating an institute it is asking for the affiliation details But when the affiliation details are filled it is going for attestation. As per the schema the attestation would be done by the below

"name": "instituteAffiliation",
"conditions": "(ATTESTOR#$.[*]#.contains('board-cbse'))",
"type": "MANUAL",
"attestorPlugin": "did:internal:ClaimPluginActor?entity=board-cbse",
"attestationProperties": {
"affiliation": "$.affiliation",
"instituteName": "$.instituteName"

How to identify which user can approve this? Should we create default master users who can onboard institutes?

[pkranga]

Without the approval we are not able to onboard teachers and students to that Institute

[tejash-jl]

@pkranga yes in this flow you need to create a user in keycloak to have a role board-cbse. You can use this token to get the claims that are raised and approve the attestations.

[pkranga]

I have an user with that role and still he is not able to see the request for approval in the UI. http://localhost:4200/registry/api/v1//Institute/claims API returns 0 records

The decoded jwt token is below

{
"exp": 1670317702,
"iat": 1670303303,
"auth_time": 1670303302,
"jti": "dd0b0518-5613-493c-827b-31e65b6a7a81",
"iss": "http://keycloak:8080/auth/realms/sunbird-rc",
"aud": "account",
"sub": "5e2e616a-e0ae-4b43-8b47-e47ac0144b33",
"typ": "Bearer",
"azp": "registry-frontend",
"nonce": "538a4916-c35c-4a24-8543-5355a2962686",
"session_state": "27092835-fb1b-48a3-9f2f-c708e097587f",
"acr": "1",
"allowed-origins": [
"https://localhost:4202",
"http://localhost:4202",
"https://localhost:4200",
"https://ndear.xiv.in",
"http://localhost:4200/",
"",
"http://localhost:4200",
"http://ndear.xiv.in",
"http://20.198.64.128"
],
"realm_access": {
"roles": [
"offline_access",
"board-cbse",
"uma_authorization",
"default-roles-ndear"
]
},
"resource_access": {
"account": {
"roles": [
"manage-account",
"manage-account-links",
"view-profile"
]
}
},
"scope": "openid profile email",
"email_verified": false,
"preferred_username": "public@yopmail.com",
"entity": [
"Institute"
],
"email": "public@yopmail.com"
}

[pkranga]

@tejash-jl

[Nijinsha]

Why am I getting notifications on this?

[pkranga]

@Nijinsha You have subscribed to this topic. Please click "Unsubscribe" button to remove from the notification

[tejash-jl]

@pkranga can you check if https://github.com/Sunbird-RC/demo-education-registry/blob/main/docker-compose.yml#L44 is configured

[sajeshkayyath]

thanks @tejash-jl , adding this has fixed the issue
external_entities=board-cbse