ADORSYS-GIS / ADORSYS-GIS/cloud-identity-wallet

[EPIC] Add SD-JWT and ISO mdoc support for credential parsing, validation, and issuance verification

オープン
#208 コメント 1 件 リアクション 0 件 担当者 0 名 GitHub で見る
主要言語
Rust
スター
4
フォーク
0
PR マージ指標
30日以内にマージされた PR はありません

説明

Implement support for additional credential formats in the wallet backend, with priority on **SD-JWT VC** and **ISO mdoc**, including parsing, validation, and issuance-time verification of credentials (format + signature).

This EPIC lays the foundation for multi-format credential interoperability and ensures the wallet can securely process, validate, and later present credentials issued in different formats.

Initial focus is on:
- SD-JWT VC (priority)
- ISO mdoc (ISO/IEC 18013-5)

Future extensions may include additional credential formats.

## Goals

- Add first-class support for SD-JWT VC and ISO mdoc formats
- Ensure secure parsing and validation of credentials
- Ensure signature verification at issuance/storage time
- Provide a unified internal abstraction for credential format handling
- Prepare the system for future credential presentation flows
- Ensure OpenAPI and internal models remain extensible

## Scope

This EPIC includes:

- Specification review and design alignment
- Parsing logic for SD-JWT VC and ISO mdoc
- Signature validation mechanisms per format
- Credential format detection strategy
- Integration into issuance flow validation pipeline
- Preparation for storage-layer enforcement of validity

Out of scope (for now):
- Full credential presentation flows
- Advanced selective disclosure UI logic
- Advanced attestation workflows (postponed)

## Objectives

- SD-JWT VC support designed and implemented (priority)
- ISO mdoc support designed and implemented
- Credentials are validated (format + signature) at issuance/storage time
- Unified internal abstraction exists for credential formats
- System is extensible for future formats
- OpenAPI remains consistent with backend capabilities

## Priority

- SD-JWT VC: HIGH
- ISO mdoc: MEDIUM (but required for completeness)

## References

### SD-JWT VC (Priority)
- RFC 9901:
https://www.rfc-editor.org/rfc/rfc9901.html
- SD-JWT VC Draft 16:
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-selective-disclosure-jwt-16

### ISO mdoc
- ISO/IEC 18013-5 (Mobile Driving License / mdoc standard)
- OpenID4VP / OpenID4VCI mdoc profile references:
https://openid.net/specs/

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。