Add includeInactive parameter to GetCredentialsInWallet API

[Copilot]

Applications need visibility into expired/revoked credentials for cleanup and auditing, but the current API filters them out.

Changes

API

• Added includeInactive query parameter (boolean, default false) to GET /internal/vcr/v2/holder/{subjectID}/vc
• When true, returns all credentials including inactive ones (expired/revoked)

Wallet Interface

• Added ListAll(ctx, holderDID) method that bypasses validation
• List(ctx, holderDID) continues to filter expired/revoked credentials
• sqlWallet.ListAll() returns raw database results without verifier checks
• memoryWallet.ListAll() identical to List() (no validation performed)

Example

# Default: only valid credentials
GET /internal/vcr/v2/holder/{subjectID}/vc

# Include inactive (expired/revoked) credentials
GET /internal/vcr/v2/holder/{subjectID}/vc?include_inactive=true

Original prompt

---

This section details on the original issue you should resolve

<issue_title>VCR: Add option to GetCredentialsInWallet API call to skip validation</issue_title>
<issue_description>This allows application to build a listing of all credentials in wallets, regardless of its status (expired/revoked). Otherwise, there's no way to clean up revoked/expired credentials (or even find out about them).</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes VCR: Add option to GetCredentialsInWallet API call to skip validation #4010

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[reinkrul]

@copilot rename from skipValidation to includeInactive (include_inactivate), which is false by default. Inactive means expired or revoked.

[qltysh]

Coverage Impact

This PR will not change total coverage.

Modified Files with Diff Coverage (3)

Rating	File	% Diff	Uncovered Line #s
	vcr/holder/sql_wallet.go	100.0%
	vcr/api/vcr/v2/api.go	100.0%
	vcr/holder/memory_wallet.go	0.0%	82-84
	Total	78.6%

🤖 Increase coverage with AI coding...

In the `copilot/add-option-to-skip-validation` branch, add test coverage for this new code:

- `vcr/holder/memory_wallet.go` -- Line 82-84

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

[Copilot]

@copilot rename from skipValidation to includeInactive (include_inactivate), which is false by default. Inactive means expired or revoked.

Renamed to includeInactive (include_inactive in query params). Updated the OpenAPI spec, implementation, and all tests. Commit: 8600240

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• REDACTED
  • Triggering command: /tmp/go-build2651041030/b883/vcr.test /tmp/go-build2651041030/b883/vcr.test -test.testlogfile=/tmp/go-build2651041030/b883/testlog.txt -test.paniconexit0 -test.timeout=10m0s /tmp/go-build1714839749/b808/vet.cfg .1.5/main.go .1.5/now.go ux-amd64/pkg/tool/linux_amd64/vet --gdwarf-5 o/sdk/azcore/int-atomic mpile ux-amd64/pkg/too-buildtags -W s/util/util.go mpile ux-amd64/pkg/tool/linux_amd64/vet . --gdwarf2 --64 ux-amd64/pkg/too-buildtags (dns block)
• cdn.jsdelivr.net
  • Triggering command: /tmp/go-build2651041030/b926/test.test /tmp/go-build2651041030/b926/test.test -test.testlogfile=/tmp/go-build2651041030/b926/testlog.txt -test.paniconexit0 -test.timeout=10m0s /tmp/go-build2651041030/b957/vet.cfg nuQhrMKF8 mpile ux-amd64/pkg/tool/linux_amd64/compile -p /internal/common-p mpile ux-amd64/pkg/too-trimpath d64.�� om/nats-io/nats--I .cfg ux-amd64/pkg/tool/linux_amd64/asm . /go-redis/v9/int-atomic mpile ux-amd64/pkg/too-buildtags (dns block)
• nuts.nl
  • Triggering command: /tmp/go-build2651041030/b907/openid4vci.test /tmp/go-build2651041030/b907/openid4vci.test -test.testlogfile=/tmp/go-build2651041030/b907/testlog.txt -test.paniconexit0 -test.timeout=10m0s /tmp/go-build1714839749/b855/vet.cfg @v1.40.0/semconv-errorsas 714839749/b389//-ifaceassert ux-amd64/pkg/tool/linux_amd64/vet --gdwarf-5 hentication-libr-atomic 4839749/b389/ ux-amd64/pkg/too-buildtags -W g_.a /tmp/go-build171-ifaceassert ux-amd64/pkg/tool/linux_amd64/vet . /v1.10.0 mpile ux-amd64/pkg/too-buildtags (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)