Learn digital identity
by building it

A hands-on conformance testing platform for OpenID4VCI, OpenID4VP, and HAIP — aligned with eIDAS 2.0 and the EUDI Architecture Reference Framework.

Access Portal Learn more

Three roles, one platform

Fikua Lab implements the full credential lifecycle — issue, hold, and verify — following the OpenID Foundation specifications.

Issuer

Creates and signs verifiable credentials using OID4VCI. Supports pre-authorization and authorization code flows with SD-JWT VC format.

  • OID4VCI 1.0
  • SD-JWT VC
  • DPoP / PAR / PKCE

Wallet

Stores credentials and presents them selectively. Handles holder binding and selective disclosure following the HAIP profile.

  • Holder binding
  • Selective disclosure
  • HAIP 1.0

Verifier

Validates credential presentations via OID4VP with direct_post response mode. Supports X.509 certificate trust chains.

  • OID4VP 1.0
  • DCQL
  • x509_san_dns / x509_hash

OIDF Conformance Results

Real test results from the OpenID Foundation conformance suite — validated against OID4VCI 1.0 Final / HAIP profile.

Issuer

4/4

Wallet

0/4

Coming soon

Verifier

0/4

Coming soon

4 / 12 test plans passed

Profile-driven architecture

Switch between conformance configurations at runtime — no redeployment needed. Each profile maps to a specific OIDF test.

HAIP Issuer issuer
grant: authorization_code format: sd_jwt_vc dpop: true par: required pkce: S256
Plain Issuer issuer
grant: pre-auth / auth_code format: sd_jwt_vc dpop: false

Minimal, intentional stack

No frameworks, no magic. Every line of code is a learning opportunity.

Java 25 Records, sealed interfaces, virtual threads
Javalin Lightweight HTTP — no annotations, no reflection
PostgreSQL 17 JSONB profiles, Flyway migrations
nimbus-jose-jwt JWT, JWK, SD-JWT, DPoP token handling
Docker Compose Single-command deployment on EU VPS
X.509 PKI eIDAS-aligned certificate chain, no DIDs

Why this exists

I'm Oriol Canadés — a Technical Product Manager specializing in digital identity. I build production identity systems at Altia and actively follow standards at the OpenID Foundation.

Fikua Lab is where I learn by doing. Instead of just reading specs, I implement them — and validate my understanding against the OIDF conformance suite. Every test passed is a concept internalized.

Where product vision meets technical depth.

oriolcanades.com GitHub LinkedIn