diff --git a/Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/Features/AppOnboarding/GET.feature b/Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/Features/AppOnboarding/GET.feature
index 56dc89b822..9803293b27 100644
--- a/Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/Features/AppOnboarding/GET.feature
+++ b/Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/Features/AppOnboarding/GET.feature
@@ -20,3 +20,8 @@ User requests app onboarding page
When a call is made to the /r/resourceId endpoint for the app "enmeshed"
Then the response contains a link with the domain name "apps.apple.com"
And the response contains a link with the domain name "play.google.com"
+
+ Scenario: User requests app onboarding page and verifier bootstrap is contained on the response page
+ Given an http client with user agent "unknown"
+ When a call is made to the /r/resourceId endpoint for the app "enmeshed"
+ Then the response contains the OpenID4VP verifier bootstrap
diff --git a/Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/StepDefinitions/AppOnboardingStepDefinitions.cs b/Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/StepDefinitions/AppOnboardingStepDefinitions.cs
index 7478473969..4055160033 100644
--- a/Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/StepDefinitions/AppOnboardingStepDefinitions.cs
+++ b/Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/StepDefinitions/AppOnboardingStepDefinitions.cs
@@ -71,5 +71,19 @@ public void ThenTheResponseDoesNotContainALinkContaining(string url)
matches.ShouldNotContain(link => link.Value.Contains(url));
}
+ [Then("the response contains the OpenID4VP verifier bootstrap")]
+ public async Task ThenTheResponseContainsTheOpenId4VpVerifierBootstrap()
+ {
+ _onboardingResponse.ShouldNotBeNull();
+
+ var responseContent = await _onboardingResponse.Content.ReadAsStringAsync();
+
+ responseContent.ShouldContain("id=\"openid4vp-verifier-root\"");
+ responseContent.ShouldContain("data-reference-id=\"tok12345\"");
+ responseContent.ShouldContain("/openid4vp-verifier/assets/verifier.css");
+ responseContent.ShouldContain("/openid4vp-verifier/assets/verifier.js");
+ responseContent.ShouldContain("Der Nachweis
wird geprüft.");
+ }
+
#endregion
}
diff --git a/appsettings.override.json b/appsettings.override.json
index f732a6719c..57428e51b6 100644
--- a/appsettings.override.json
+++ b/appsettings.override.json
@@ -6,7 +6,7 @@
"ApiKey": "test"
},
"Cors": {
- "AllowedOrigins": "http://localhost:8080;https://localhost:8080",
+ "AllowedOrigins": "*",
"AccessControlAllowCredentials": true
},
"Infrastructure": {