fix(openid4vci): align wallet nonce handling with 1.0

Author: szijpeter

waltid-libraries/protocols/waltid-openid4vc-wallet-server/src/main/kotlin/id/walt/wallet2/server/handlers/Wallet2RouteHandler.kt

@@ -119,9 +119,30 @@ object Wallet2RouteHandler {
          */
         getAccountId: (suspend RoutingCall.() -> String?)? = null,
         attestationAssembler: ClientAttestationAssembler? = null,
+    ) = registerWallet2Routes(
+        resolver = resolver,
+        getAccountId = getAccountId,
+        attestationAssembler = attestationAssembler,
+        allowInsecureHttpForTests = false,
+    )
+
+    /**
+     * Test/development variant for local issuer fixtures whose nonce endpoint cannot use HTTPS.
+     * Production callers must use the strict overload above.
+     */
+    fun Route.registerWallet2Routes(
+        resolver: WalletResolver,
+        getAccountId: (suspend RoutingCall.() -> String?)?,
+        attestationAssembler: ClientAttestationAssembler?,
+        allowInsecureHttpForTests: Boolean,
     ) {
         route("/wallet") {
-            registerWalletManagementRoutes(resolver, getAccountId, attestationAssembler)
+            registerWalletManagementRoutes(
+                resolver = resolver,
+                getAccountId = getAccountId,
+                attestationAssembler = attestationAssembler,
+                allowInsecureHttpForTests = allowInsecureHttpForTests,
+            )
         }
         route("/stores", { tags = listOf("Named Store Management") }) {
             registerNamedStoreRoutes(resolver)
@@ -136,6 +157,7 @@ object Wallet2RouteHandler {
         resolver: WalletResolver,
         getAccountId: (suspend RoutingCall.() -> String?)?,
         attestationAssembler: ClientAttestationAssembler?,
+        allowInsecureHttpForTests: Boolean,
     ) {
 
         post("", Wallet2OpenApiDocs.createWallet()) {
@@ -546,6 +568,7 @@ object Wallet2RouteHandler {
                                 wallet = wallet,
                                 request = req,
                                 attestationAssembler = attestationAssembler,
+                                allowInsecureHttpForTests = allowInsecureHttpForTests,
                             )
                             call.respond(result)
                         } catch (e: Exception) {
@@ -585,6 +608,20 @@ object Wallet2RouteHandler {
                         )
                     }
 
+                    post("/request-nonce", {
+                        summary = "Isolated: obtain a fresh credential proof nonce"
+                        request { pathParameter<String>("walletId"); body<RequestNonceRequest>() }
+                        response { HttpStatusCode.OK to { body<RequestNonceResult>() } }
+                    }) {
+                        val req = call.receive<RequestNonceRequest>()
+                        call.respond(
+                            WalletIssuanceHandler.requestNonce(
+                                request = req,
+                                allowInsecureHttpForTests = allowInsecureHttpForTests,
+                            )
+                        )
+                    }
+
                     post("/sign-proof", {
                         summary = "Isolated: sign a proof-of-possession JWT"
                         request { pathParameter<String>("walletId"); body<SignProofRequest>() }