fix: support StatusList2021Entry credentials, fetch logo from `.wel…

…l-known/openid-credential-issuer` (#414) * WIP * Add Thuiswinkel verification checkmark * fix: fix logo_url binding, renameto thuiswinkel_validation * Rename `thuiswinkel_waarborg_verification` to `thuiswinkel_verification` in frontend * feat: add `issuance_date` to `ValidationResult` * Change label for domain verification * fix: fix `issuance_date` * Add issuance date and change logo position * chore(deps-dev): bump prettier-plugin-tailwindcss from 0.6.1 to 0.6.5 (#259) Bumps [prettier-plugin-tailwindcss](https://github.com/tailwindlabs/prettier-plugin-tailwindcss) from 0.6.1 to 0.6.5. - [Release notes](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/blob/main/CHANGELOG.md) - [Commits](tailwindlabs/prettier-plugin-tailwindcss@v0.6.1...v0.6.5) --- updated-dependencies: - dependency-name: prettier-plugin-tailwindcss dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump @ianvs/prettier-plugin-sort-imports (#260) Bumps [@ianvs/prettier-plugin-sort-imports](https://github.com/ianvs/prettier-plugin-sort-imports) from 4.2.1 to 4.3.0. - [Release notes](https://github.com/ianvs/prettier-plugin-sort-imports/releases) - [Changelog](https://github.com/IanVS/prettier-plugin-sort-imports/blob/main/CHANGELOG.md) - [Commits](IanVS/prettier-plugin-sort-imports@v4.2.1...v4.3.0) --- updated-dependencies: - dependency-name: "@ianvs/prettier-plugin-sort-imports" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump prettier-plugin-svelte from 3.2.3 to 3.2.5 (#262) Bumps [prettier-plugin-svelte](https://github.com/sveltejs/prettier-plugin-svelte) from 3.2.3 to 3.2.5. - [Changelog](https://github.com/sveltejs/prettier-plugin-svelte/blob/master/CHANGELOG.md) - [Commits](sveltejs/prettier-plugin-svelte@v3.2.3...v3.2.5) --- updated-dependencies: - dependency-name: prettier-plugin-svelte dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Nander Stabel <[email protected]> * chore(deps-dev): bump prettier from 3.3.0 to 3.3.2 (#261) Bumps [prettier](https://github.com/prettier/prettier) from 3.3.0 to 3.3.2. - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.3.0...3.3.2) --- updated-dependencies: - dependency-name: prettier dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Make `imageId` reactive * fix: fix lint errors * add: backend actions-reducers for editable trust list * cargo fmt * add: testing * feat: trusted domains list (first version) (#352) * ci: release version 0.6.8 (#346) * fix: bindings * feat: add default_trust_list.json * test: add testing, not final * feat: enable multiple trust lists * chore: remove comment * refactore: rename actions and reducers * feat: add TrustList level actions * refactor: trustlist owned bool, name to id, reset to default * chore: fix domain name * feat: add trust list management frontend * refactor: implement lists view & domain list * refactor: Wire up Tauri listeners in `onMount` of root layout (#322) * Wire up Tauri state-changed listener in `onMount` of root layout * Wire up Tauri error listener in root layout * Update comments * build: Replace `npm` with `pnpm` (#348) * Swap out `npm` for `pnpm` Fixes #347 * Address review comments * chore: cargo fmt and fix binding naming * feat: prevent edits on imported lists * refactor: remove unused reset functionality * feat: add placeholder when no lists * refactor: trustlist actions * refactor: remove trustlist default impl * refactor: use updated Action names * fix: rename broken bindings * refactor: remove `Default` trait * refactor: show `display_name` instead of `id` * feat: update default trusted domains --------- Co-authored-by: Daniel Mader <[email protected]> Co-authored-by: Thilo Maier <[email protected]> * feat: add `validate_linked_verifiable_presentations` * refactor: apply clippy suggestions * feat: use `ServiceEndpoint::from` * refactor: remove unused variables * refactor: replace icon imports * feat: add alignment & criteria display * chore: pnpm format * chore: eslint failed * feat: filter linked VPs based on trust list * feat: display trusted domains as trusted issuers * chore: try to fix git workflow build fail * chore: try to fix git workflow build fail * chore: add comment to ubuntu version fix * chore: update serde_json dependency, make error messages static for consistency between version updates * chore: cargo fmt * chore: cargo clippy * chore: fix tests * chore: cargo fmt * feat: add achievementType to badge overview display * ci: release version 0.6.13 * fix: disable prerender trust-list * WIP * WIP * WIP * ci: release version 0.6.14 * chore: rename variable * chore: fix log message * chore: fix trusted domain validation * feat: add default trust lists to all profiles at creation * feat: add did:web url validation against trust_list, format * chore: cargo clippy: * feat: add fetching logo from well known endpoint * chore: fix fallback icon, add comments * chore: add credenco to trusted issuers * ci: release version 0.6.15 * fix: set SD-JWT format check back to `VcSdJwt` (#394) * feat: display `alignment` & `criteria` for Open Badges 3.0 (#386) * ci: release version 0.6.12 (#370) * chore(deps-dev): bump globals from 15.9.0 to 15.11.0 (#389) Bumps [globals](https://github.com/sindresorhus/globals) from 15.9.0 to 15.11.0. - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v15.9.0...v15.11.0) --- updated-dependencies: - dependency-name: globals dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump typescript-eslint from 8.2.0 to 8.12.0 (#391) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.2.0 to 8.12.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.12.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: typescript-eslint dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump prettier-plugin-svelte from 3.2.6 to 3.2.7 (#382) Bumps [prettier-plugin-svelte](https://github.com/sveltejs/prettier-plugin-svelte) from 3.2.6 to 3.2.7. - [Changelog](https://github.com/sveltejs/prettier-plugin-svelte/blob/master/CHANGELOG.md) - [Commits](sveltejs/prettier-plugin-svelte@v3.2.6...v3.2.7) --- updated-dependencies: - dependency-name: prettier-plugin-svelte dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump postcss from 8.4.45 to 8.4.47 (#375) Bumps [postcss](https://github.com/postcss/postcss) from 8.4.45 to 8.4.47. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.45...8.4.47) --- updated-dependencies: - dependency-name: postcss dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: resolve PR comments * chore: resole PR comment * chore: resolve PR comment --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: Daniel Mader <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: use hash-based image identifier to prevent caching, use colored background for icon fallback (#396) * fix: use colored background when icon fallback is displayed * fix: use hash-based image identifier to prevent caching * ci: release version 0.7.0 * fix: trusted issuer domain url validation (#397) * fix: url validation for trusted issuers * chore: replace expect() with ok() * Make it more clear how scrolling is done * Define prop `class` for `TopNavBar` to make it more explicit * Remove unneded class * Fix `/me/settings` * Fix `/me/settings/app` * Fix `/me/settings/about` * Fix `/me/settings/app/did` * Fix `/me/settings/app/keys` * Fix `/me/settings/app/language` * Fix `/me/settings/app/theme` * Fix `/me/settings/app/trust-list` * Fix `/me/settings/profile` * Fix `/prompt/accept-connection` * Fix `/prompt/credential-offer` * Fix `/prompt/share-credentials` * fix: adjust UniMe text color in dark mode * feat: add terms & conditions * fix: checkbox tick color in dark mode * feat: update app icon * ci: release version 0.7.1 * feat: update app icon * feat: fix app icon * fix: higher resolution app icon * refactor: remove `Beta` from `productName` * ci: release version 0.7.2 * refactor: update camera usage description * refactor: update camera usage description * Fix layout issues by creating a new stacking context (#410) * ci: release version 0.7.3 * fix: support StatusList2021Entry, add logo fetching from well-known/openid-credential-issuer Credential Configurations Supported * chore: refactor fn get_logo_uri * chore: add domain to default trust list * chore: cargo clippy * chore: merge dev unime/ folder into branch * chore: checkout dev identity-wallet/src/state/trustlist/ * chore: checkout dev into identity-wallet/ files * chore: remove outdated files * chore: remove outdated unime/ files * chore: fix tests * chore: remove outdated domain * chore: add TODO in comment * chore: fix PascalCasing * chore: clarify log message * chore: add spec in comment to alternative property name * chore: remove workaround which should be fixed in frontend, add comments * chore: fix comments * chore: fix default trust list entries check in linked vp flow * chore: fix PR comments * chore : improve log messages * chore: update tests to include logo fetching through wiremock --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: Nander Stabel <[email protected]> Co-authored-by: Thilo Maier <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Daniel Mader <[email protected]>
impierce · Dec 10, 2024 · 41b5519 · 41b5519
1 parent 87e68a4
commit 41b5519
Show file tree

Hide file tree

Showing 5 changed files with 189 additions and 48 deletions.
diff --git a/identity-wallet/resources/default_trust_list.json b/identity-wallet/resources/default_trust_list.json
@@ -1,5 +1,11 @@
 {
   "id": "b01f4a74-3005-4749-a030-c5444bc4dab5",
   "display_name": "Impierce Demos",
-  "entries": ["https://ngdil.com", "https://selv.iota.org", "https://thuiswinkel-agent.dev.impierce.com"]
+  "entries": [
+    "https://ngdil.com",
+    "https://selv.iota.org",
+    "https://thuiswinkel-agent.dev.impierce.com",
+    "https://mijnkvk.acc.credenco.com",
+    "https://agent.wallet.bd.demo.sphereon.com"
+  ]
 }
diff --git a/identity-wallet/src/state/did/validate_domain_linkage.rs b/identity-wallet/src/state/did/validate_domain_linkage.rs
@@ -83,7 +83,7 @@ pub async fn validate_domain_linkage(url: url::Url, did: &str) -> ValidationResu
         Err(e) => {
             return ValidationResult {
                 status: ValidationStatus::Unknown,
-                message: Some(e.to_string()),
+                message: Some(format!("Error while fetching configuration: {}", e)),
                 ..Default::default()
             };
         }
@@ -142,10 +142,15 @@ async fn fetch_configuration(mut url: url::Url) -> Result<DomainLinkageConfigura
     info!("Fetching DID configuration from: {}", url);
 
     // 2. Fetch the resource
-    let response = reqwest::get(url).await.map_err(|e| e.to_string())?;
+    let response = reqwest::get(url.clone())
+        .await
+        .map_err(|_| format!("failed to get response from resource url: {}", url))?;
 
     // 3. Parse to JSON value (mutable)
-    let mut json = response.json::<serde_json::Value>().await.map_err(|e| e.to_string())?;
+    let mut json = response
+        .json::<serde_json::Value>()
+        .await
+        .map_err(|_| "failed to parse response into JSON value".to_string())?;
 
     // 4. Remove all non-string values from `linked_dids` (JSON-LD)
     if let serde_json::Value::Object(ref mut root) = json {
@@ -156,7 +161,8 @@ async fn fetch_configuration(mut url: url::Url) -> Result<DomainLinkageConfigura
     }
 
     // 5. Deserialize to `DomainLinkageConfiguration`
-    let config = DomainLinkageConfiguration::from_json_value(json).map_err(|e| e.to_string())?;
+    let config = DomainLinkageConfiguration::from_json_value(json)
+        .map_err(|_| "failed to deserialize DomainLinkageConfiguration from JSON".to_string())?;
     Ok(config)
 }
 
@@ -240,7 +246,10 @@ mod tests {
             result,
             ValidationResult {
                 status: ValidationStatus::Unknown,
-                message: Some("failed to decode JSON".to_string()),
+                message: Some(
+                    "Error while fetching configuration: failed to deserialize DomainLinkageConfiguration from JSON"
+                        .to_string()
+                ),
                 ..Default::default()
             }
         );

diff --git a/identity-wallet/src/state/did/validate_linked_verifiable_presentations.rs b/identity-wallet/src/state/did/validate_linked_verifiable_presentations.rs
@@ -10,12 +10,16 @@ use futures::{
 };
 use identity_iota::{
     core::{OneOrMany, ToJson},
-    credential::{DecodedJwtPresentation, FailFast, Jwt, JwtCredentialValidator, JwtPresentationValidator, Subject},
+    credential::{
+        DecodedJwtCredential, DecodedJwtPresentation, FailFast, Jwt, JwtCredentialValidationOptions,
+        JwtCredentialValidator, JwtPresentationValidator, StatusCheck, Subject,
+    },
     document::{CoreDocument, Service},
     verification::jws::Decoder,
 };
 use identity_jose::jwt::JwtClaims;
 use log::{info, warn};
+use oid4vc::oid4vci::credential_issuer::credential_issuer_metadata::CredentialIssuerMetadata;
 use serde::{Deserialize, Serialize};
 use serde_json::Value;
 use ts_rs::TS;
@@ -189,15 +193,26 @@ async fn get_validated_linked_credential_data(
             info!("Issuer linked domains: {issuer_linked_domains:#?}");
 
             // Only linked verifiable credentials with at least one successful domain linkage validation are considered
-            let validated_linked_domains = get_validated_linked_domains(&issuer_linked_domains, &issuer_did).await;
+            let mut validated_linked_domains = get_validated_linked_domains(&issuer_linked_domains, &issuer_did).await;
+
+            // TODO: This is a fallback to get the url from a did:web to validate domain linkage. This is useful for companies who haven't implemented domain linkage yet.
+            if validated_linked_domains.is_empty() {
+                if let Some(did_web_url) = extract_url_from_did_web(&issuer_did) {
+                    validated_linked_domains.insert(0, did_web_url);
+                }
+            }
+
             if !validated_linked_domains.is_empty() {
                 let validator = JwtCredentialValidator::with_signature_verifier(Verifier);
 
+                // `SkipUnsupported` allows for custom credential types, such as the StatusList2021Entry (https://www.w3.org/TR/2023/WD-vc-status-list-20230427/#statuslist2021entry)
+                let options = JwtCredentialValidationOptions::new().status_check(StatusCheck::SkipUnsupported);
+
                 // Decode the linked verifiable credential and validate it
                 if let Ok(linked_verifiable_credential) = validator.validate::<_, Value>(
                     &linked_verifiable_credential,
                     &issuer_document,
-                    &Default::default(),
+                    &options,
                     FailFast::FirstError,
                 ) {
                     info!("Validated linked verifiable credential: {linked_verifiable_credential:#?}");
@@ -208,19 +223,23 @@ async fn get_validated_linked_credential_data(
                         OneOrMany::Many(subjects) => subjects.first(),
                     };
 
-                    OptionFuture::from(credential_subject.map(|credential_subject| async {
+                    if let Some(credential_subject) = credential_subject {
                         let name = get_name(credential_subject);
-                        let logo_uri = get_logo_uri(credential_subject).await;
+                        let logo_uri = get_logo_uri(credential_subject, &linked_verifiable_credential, &validated_linked_domains).await;
                         let issuance_date = linked_verifiable_credential.credential.issuance_date.to_rfc3339();
 
-                        LinkedVerifiableCredentialData {
+                        info!("LinkedVerifiableCredentialData: name: {name:?}, logo_uri: {logo_uri:?}, issuance_date: {issuance_date}");
+                        Some(LinkedVerifiableCredentialData {
                             name,
                             logo_uri,
                             issuance_date,
                             issuer_linked_domains: validated_linked_domains,
-                        }
-                    }))
-                    .await
+                        })
+                    }
+                    else {
+                        warn!("Failed to get credential_subject from linked_verifiable_credential: {linked_verifiable_credential:#?}");
+                        None
+                    }
                 } else {
                     warn!("Failed to validate linked verifiable credential: {linked_verifiable_credential:#?}");
                     // TODO: Should we add more fine-grained error handling? `None` here means that the linked verifiable credential is invalid.
@@ -319,30 +338,117 @@ fn get_name(credential_subject: &Subject) -> Option<String> {
         .properties
         .get("name")
         .or_else(|| credential_subject.properties.get("naam")) // TODO: "naam" is expected to be used in Dutch credentials
+        .or_else(|| credential_subject.properties.get("legal_person_name")) // This is another valid property name according to the following spec:
+        // EWC RFC005: Issue Legal Person Identification Data (LPID) - v1.0
+        // https://github.com/EWC-consortium/eudi-wallet-rfcs/blob/49faa8b0ba5e5e79836e247fd07cc0447c1ae98b/ewc-rfc005-issue-legal-person-identification-data.md#51031-lpid-attributes-specification
         .and_then(Value::as_str)
         .map(ToString::to_string)
 }
 
-async fn get_logo_uri(credential_subject: &Subject) -> Option<String> {
-    OptionFuture::from(
-        credential_subject
-            .properties
-            .get("image")
-            .and_then(Value::as_str)
-            .map(|image| async {
-                let _ = download_asset(
-                    image
-                        .parse()
-                        .inspect_err(|err| warn!("Failed to parse logo URI: {:#?}", err))
-                        .ok()?,
-                    &hash(image),
-                )
-                .await;
-                Some(image.to_string())
-            }),
-    )
-    .await
-    .flatten()
+/// First, try to get the logo URI from the credential subject.
+/// If this doesn't succeed, iterate through the validated linked domains and try to fetch it from the well-known/openid-credential-issuer endpoint.
+/// In this endpoint, first we look inside the Display field, at the root.
+/// If we can't find a logo there, we look inside the Credential Configurations Supported field at the root.
+/// We try to match keys inside the Credential Configurations Supported object against the credential `type` array of the linked verifiable credential, in reverse order.
+/// At first success the loop breaks and we download the image.
+/// Otherwise, we use a fallback icon.
+async fn get_logo_uri(
+    credential_subject: &Subject,
+    linked_verifiable_credential: &DecodedJwtCredential<Value>,
+    validated_linked_domains: &[Url],
+) -> Option<String> {
+    let mut logo_uri = credential_subject
+        .properties
+        .get("image")
+        .and_then(Value::as_str)
+        .map(ToString::to_string);
+
+    // Check if logo URI was retrieved, if not then attempt to retrieve from a well-known endpoint
+    if logo_uri.is_none() {
+        for domain in validated_linked_domains.iter() {
+            let well_known_endpoint = format!("{}.well-known/openid-credential-issuer", domain);
+            info!("Trying to fetch image from {well_known_endpoint} endpoint");
+            if let Ok(response) = reqwest::Client::new().get(&well_known_endpoint).send().await {
+                if let Ok(metadata) = response.json::<CredentialIssuerMetadata>().await {
+                    logo_uri = metadata.display.as_deref().and_then(extract_logo_uri_from_display);
+
+                    if logo_uri.is_some() {
+                        break;
+                    }
+                }
+            }
+            // TODO: Due to mixing 2 specs here, the oid4vci and linked verifiable presentation spec, we lose the Credential Issuer Identifier (CII) during the linked vp flow.
+            // The CII tells us where exactly we can add "/.well-known/openid-credential-issuer" to fetch the Credential Issuer Metadata, in which we might find the logo.
+            // For now we assume it's the same domain as the linked domain.
+            // But this is no guarantee and the code below is one such workaround.
+            let well_known_endpoint = format!("{}oid4vci/.well-known/openid-credential-issuer", domain);
+            info!("Trying to fetch image from {well_known_endpoint} endpoint");
+            if let Ok(response) = reqwest::Client::new().get(&well_known_endpoint).send().await {
+                if let Ok(metadata) = response.json::<CredentialIssuerMetadata>().await {
+                    logo_uri = linked_verifiable_credential.credential.types.iter().find_map(|type_| {
+                        info!("Trying to fetch from Credential Configuration Supported: {}", type_);
+                        metadata
+                            .credential_configurations_supported
+                            .get(type_)
+                            .map(|credential_configuration| credential_configuration.display.as_ref())
+                            .and_then(extract_logo_uri_from_display)
+                    });
+
+                    if logo_uri.is_some() {
+                        break;
+                    }
+                }
+            }
+        }
+    }
+
+    if let Some(ref logo_uri_str) = logo_uri {
+        info!("Logo URI: {:?}", logo_uri_str);
+
+        // Parse the logo URI
+        match logo_uri_str.parse() {
+            Ok(parsed_url) => {
+                // Download the asset if parsing succeeded
+                if download_asset(parsed_url, &hash(logo_uri_str)).await.is_err() {
+                    warn!("Failed to download logo URI");
+                    return None;
+                }
+                logo_uri
+            }
+            Err(parse_err) => {
+                // Log parse error if the URI is invalid
+                warn!("Failed to parse logo URI: {:#?}, {}", logo_uri_str, parse_err);
+                None
+            }
+        }
+    } else {
+        warn!("Failed to extract logo URI from well-known endpoints nor credential subject");
+        None
+    }
+}
+
+fn extract_logo_uri_from_display(display: &[Value]) -> Option<String> {
+    display
+        .first()
+        .and_then(|display| display.get("logo"))
+        .and_then(|logo| logo.get("uri").or(logo.get("url")))
+        .and_then(|url| url.as_str())
+        .map(ToString::to_string)
+}
+
+fn extract_url_from_did_web(did_web: &str) -> Option<Url> {
+    if let Some(did) = did_web.strip_prefix("did:web:") {
+        let url_str = if let Some(index_colon) = did.find(':') {
+            &did[..index_colon]
+        } else {
+            did
+        };
+
+        if let Ok(url) = Url::parse(&format!("https://{}", url_str)) {
+            return Some(url);
+        }
+    }
+    None
 }
 
 #[cfg(test)]
@@ -574,13 +680,25 @@ mod tests {
 
             Jwt::from(message)
         }
+
+        async fn add_logo_endpoint(&self) {
+            Mock::given(method("GET"))
+                .and(path("logo.png"))
+                .respond_with(ResponseTemplate::new(200).set_body_raw(
+                    include_bytes!("../../../resources/images/impierce_white.png"),
+                    "image/png",
+                ))
+                .mount(&self.mock_server)
+                .await;
+        }
     }
 
     #[tokio::test]
     async fn validate_linked_verifiable_presentations_successfully_validates_multiple_presentations() {
         let mut holder = TestEntity::new().await;
 
         let mut issuer_a = TestEntity::new().await;
+        issuer_a.add_logo_endpoint().await;
 
         // Add the `/did_configuration.json` and `/did.json` endpoints to the issuer A mock server.
         issuer_a
@@ -589,18 +707,21 @@ mod tests {
         issuer_a.add_well_known_did_json().await;
 
         let mut issuer_b = TestEntity::new().await;
+        issuer_b.add_logo_endpoint().await;
 
         // Add the `/did_configuration.json` and `/did.json` endpoints to the issuer B mock server.
         issuer_b
             .add_well_known_did_configuration_json("linked-domain", &[issuer_b.domain.clone().into()])
             .await;
         issuer_b.add_well_known_did_json().await;
 
+        let logo_uri_a: String = format!("{}logo.png", issuer_a.domain.clone());
+
         let verifiable_credential_jwt = issuer_a
             .issue_credential(
                 holder.did_document.id().to_string().as_str(),
                 "Webshop",
-                "https://webshop.com/logo.jpg".parse().unwrap(),
+                logo_uri_a.parse().unwrap(),
             )
             .await;
 
@@ -618,11 +739,13 @@ mod tests {
             )
             .await;
 
+        let logo_uri_b: String = format!("{}logo.png", issuer_b.domain.clone());
+
         let verifiable_credential_jwt_2 = issuer_b
             .issue_credential(
                 holder.did_document.id().to_string().as_str(),
                 "Webshop",
-                "https://webshop.com/logo.jpg".parse().unwrap(),
+                logo_uri_b.parse().unwrap(),
             )
             .await;
 
@@ -647,13 +770,13 @@ mod tests {
             vec![
                 vec![LinkedVerifiableCredentialData {
                     name: Some("Webshop".to_string()),
-                    logo_uri: Some("https://webshop.com/logo.jpg".to_string()),
+                    logo_uri: Some(logo_uri_a),
                     issuer_linked_domains: vec![issuer_a.domain.clone()],
                     ..Default::default()
                 }],
                 vec![LinkedVerifiableCredentialData {
                     name: Some("Webshop".to_string()),
-                    logo_uri: Some("https://webshop.com/logo.jpg".to_string()),
+                    logo_uri: Some(logo_uri_b),
                     issuer_linked_domains: vec![issuer_b.domain.clone()],
                     ..Default::default()
                 }]
@@ -757,14 +880,17 @@ mod tests {
             .add_well_known_did_configuration_json("linked-domain", &[issuer.domain.clone().into()])
             .await;
         issuer.add_well_known_did_json().await;
+        issuer.add_logo_endpoint().await;
 
         let mut holder = TestEntity::new().await;
 
+        let issuer_logo = format!("{}logo.png", issuer.domain.clone());
+
         let verifiable_credential_jwt = issuer
             .issue_credential(
                 holder.did_document.id().to_string().as_str(),
                 "Webshop",
-                "https://webshop.com/logo.jpg".parse().unwrap(),
+                issuer_logo.parse().unwrap(),
             )
             .await;
 
@@ -795,7 +921,7 @@ mod tests {
             validated_linked_presentation_data,
             Some(vec![LinkedVerifiableCredentialData {
                 name: Some("Webshop".to_string()),
-                logo_uri: Some("https://webshop.com/logo.jpg".to_string()),
+                logo_uri: Some(issuer_logo),
                 issuer_linked_domains: vec![issuer.domain.clone()],
                 ..Default::default()
             }])