🔐 Signa SSC — Dual Mode Test

Tests Architecture A (Anonymous LOA-0), Architecture B (Registered LOA-2 Discovery), and Architecture B (Registered LOA-4 Explicit) signing flows.

Origin:
Target: http://localhost:3000
Timestamp:

=== Signa SSC Test Logs ===

Document

Name: TestContract.pdf

Hash: a3f7c2d8e9b1045f6a8d3c7e1b9f4a2c5d8e7f1b3a6c9d2e5f8a1b4c7d0e3f6

🔑 LOA-4 Credential Status

LOA-4 requires a pre-registered authenticator bound to the test email. The backend resolves the credential internally; the test RP does not need to know it.

Checking credential status for ...

🔓 Architecture A — Anonymous / LOA-0

No token required. WebAuthn discovery mode. User picks their passkey from the browser picker.

TEST A1: No Sandbox

TEST A2: With Sandbox

🏢 Architecture B — Registered / LOA-2

RP authenticated via token. Discovery mode (same as A). Token contains only RP identity + document hash.

Fetching token...

TEST B-LOA2: Discovery Mode

🔒 Architecture B — Registered / LOA-4

KYC-verified RP + credential-bound token. Signa resolves user by email internally. Explicit allowCredentials — no picker, no ambiguity, no fraudster substitution.

Fetching token...

TEST B-LOA4: Explicit Credential (No Picker)

LEGACY: No mode param (defaults to anonymous)