Try It Out
The walkthroughs in this section use Wayfinder, a fictional consumer travel-booking app, as the sample. Wayfinder issues John Doe a Sky Pass loyalty credential into his mobile wallet. The Skyline Lounge — a separate relying party — verifies it to grant access by tier. Both run against a local ThunderID.
Cast
The tryout centers on one member. John Doe is the credential subject: he receives the Sky Pass from Wayfinder and presents it at the Skyline Lounge.
Architecture
Decentralized identity forms a trust triangle of three roles: Issuer, Holder, and Verifier. ThunderID powers both the Issuer and the Verifier from the inside — neither Wayfinder nor the Skyline Lounge implement any credential protocol themselves.
In issuance (OpenID4VCI), Wayfinder triggers a credential offer and delegates everything else to ThunderID: it authenticates John, signs the Sky Pass, and delivers it to his wallet.
In verification (OpenID4VP), the Skyline Lounge creates a presentation request and delegates the rest to ThunderID. ThunderID sends the request to the wallet, receives the VP token, validates the credential, and returns the access decision. The wallet holds and presents the credential; it never calls back to the original issuer to check.
Set Up the Sample
Before running any walkthrough, set up the Wayfinder sample. Two paths lead to the same end state:
Walkthroughs
Once the sample is running, do them in order — issue the pass before you verify it:
