Canton Validator Tool

Standalone Docker service for Internal Party Onboarding on Canton Network.

Features

• Create Canton-managed parties (Simple Party)
• Create Canton users with auth0| prefix
• Grant CanReadAs/CanActAs rights
• Create Auth0 users
• Onboard to Validator wallet
• Workflow persistence (saved to local volume)

Quick Start

1. Edit docker-compose.yml with your configuration (Auth0 credentials, API endpoints)

2. Start the service:

docker-compose up -d

3. Access UI: http://IP:3000

Configuration

Edit environment variables in docker-compose.yml:

Variable	Description	Default
PORT	Container port	3000
LEDGER_API	Canton Ledger API URL	http://splice-validator-participant-1:7575
LEDGER_API_ENDPOINT	Ledger API path	/api/participant
WALLET_API	Canton Wallet API URL	http://splice-validator-validator-1:5003
WALLET_API_ENDPOINT	Wallet API path	/api/validator
AUTH0_TENANT	Auth0 domain (e.g., your-tenant.auth0.com)	-
AUTH0_CLIENT_ID	Auth0 client ID for JWT	-
AUTH0_CLIENT_SECRET	Auth0 client secret	-
AUTH0_AUDIENCE	Auth0 audience	-
AUTH0_MGMT_CLIENT_ID	Auth0 Management API client	-
AUTH0_MGMT_CLIENT_SECRET	Auth0 Management API secret	-
AUTH0_SCOPE	Auth0 scope	daml_ledger_api

Auth0 Management API Setup

To create Auth0 users (Step 4), you need Management API credentials:

1. Go to Auth0 Dashboard → Applications → APIs

2. Click on Auth0 Management API

3. Go to Machine to Machine Applications tab

4. Either authorize an existing application or create a new one:

   • Click + Authorize or create new app in Applications → Create Application → Machine to Machine

5. Select permissions (scopes) for the application:

   • create:users - required to create users
   • read:users - optional, to verify created users

6. Click Authorize

7. Go to Applications → select your M2M app → Settings:

   • Copy Client ID → AUTH0_MGMT_CLIENT_ID
   • Copy Client Secret → AUTH0_MGMT_CLIENT_SECRET

Note: Management API credentials are different from the regular Auth0 app credentials (AUTH0_CLIENT_ID/AUTH0_CLIENT_SECRET) used for JWT tokens.

Docker Network

The service connects to splice-validator_splice_validator external network to communicate with Canton services.

Workflows

Workflows are persisted in the mounted volume directory.