-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
second attempt to add sd-jwt vcdm #147
base: main
Are you sure you want to change the base?
Conversation
{ | ||
"vct": "https://credentials.example.com/identity_credential", | ||
//W3C VCDM 2.0 compliant claims | ||
"vcdm": { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why?
//W3C VCDM 2.0 compliant claims | ||
"vcdm": { | ||
"@context": ["https://www.w3.org/ns/credentials/v2"], | ||
"type": ["VerifiableCredential", "https://credentials.example.com/identity_credential"], |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should be top level and relationship with vct must be explained
For backward compatibility with JWT processors, the following registered JWT claims MUST be used, instead of their respective counterpart properties in [@!W3C.VCDM1.1] or [@!W3C.VCDM2.0]: | ||
|
||
* `exp` Claim MUST represent the `expirationDate` property, encoded as a UNIX timestamp (NumericDate). | ||
* `iss` Claim MUST represent the `issuer` property. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
issuer can be an object; IMO usage of iss/issuer must be properly explained as self-declared and unverifiable claims should not be used.
* `exp` Claim MUST represent the `expirationDate` property, encoded as a UNIX timestamp (NumericDate). | ||
* `iss` Claim MUST represent the `issuer` property. | ||
* `iat` Claim MUST represent `issuanceDate` property, encoded as a UNIX timestamp (NumericDate). | ||
* `status` Claim MUST represent `credentialStatus` property. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do you confirm that status and credential status have the same governance model? So, it contains a "type" property that defines which revocation/suspension mechanism is used?
* `iss` Claim MUST represent the `issuer` property. | ||
* `iat` Claim MUST represent `issuanceDate` property, encoded as a UNIX timestamp (NumericDate). | ||
* `status` Claim MUST represent `credentialStatus` property. | ||
* `schema` Claim MUST represent the `credentialSchema` property. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same question as for status; Note: ELM is using 2: JSON schema and SHACL schema.
resolves #128
intended as an altenative that supercedes #134