Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

second attempt to add sd-jwt vcdm #147

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

second attempt to add sd-jwt vcdm #147

wants to merge 1 commit into from

Conversation

Sakurann
Copy link
Contributor

resolves #128

intended as an altenative that supercedes #134

@Sakurann Sakurann marked this pull request as ready for review December 19, 2024 17:31
{
"vct": "https://credentials.example.com/identity_credential",
//W3C VCDM 2.0 compliant claims
"vcdm": {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why?

//W3C VCDM 2.0 compliant claims
"vcdm": {
"@context": ["https://www.w3.org/ns/credentials/v2"],
"type": ["VerifiableCredential", "https://credentials.example.com/identity_credential"],

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should be top level and relationship with vct must be explained

For backward compatibility with JWT processors, the following registered JWT claims MUST be used, instead of their respective counterpart properties in [@!W3C.VCDM1.1] or [@!W3C.VCDM2.0]:

* `exp` Claim MUST represent the `expirationDate` property, encoded as a UNIX timestamp (NumericDate).
* `iss` Claim MUST represent the `issuer` property.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

issuer can be an object; IMO usage of iss/issuer must be properly explained as self-declared and unverifiable claims should not be used.

* `exp` Claim MUST represent the `expirationDate` property, encoded as a UNIX timestamp (NumericDate).
* `iss` Claim MUST represent the `issuer` property.
* `iat` Claim MUST represent `issuanceDate` property, encoded as a UNIX timestamp (NumericDate).
* `status` Claim MUST represent `credentialStatus` property.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you confirm that status and credential status have the same governance model? So, it contains a "type" property that defines which revocation/suspension mechanism is used?

* `iss` Claim MUST represent the `issuer` property.
* `iat` Claim MUST represent `issuanceDate` property, encoded as a UNIX timestamp (NumericDate).
* `status` Claim MUST represent `credentialStatus` property.
* `schema` Claim MUST represent the `credentialSchema` property.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same question as for status; Note: ELM is using 2: JSON schema and SHACL schema.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

add sd-jwt vcdm to HAIP
2 participants