openid / openid/OpenID4VC-HAIP
cert team query: Use of jwk/kid/x5c in jwt proof type
Nobody has claimed this yet.
- Dominant language
- Makefile
- Stars
- 57
- Forks
- 17
- PR merge metrics
- No merged PRs in 30d
Description
As far as I can see, https://openid.github.io/OpenID4VCI/openid-4-verifiable-credential-issuance-1_1-wg-draft.html#appendix-F.1 says that kid, jwk or x5c may be used to pass the key in a jwt proof (though an attestation must be included as well.
HAIP ( https://openid.github.io/OpenID4VC-HAIP/openid4vc-high-assurance-interoperability-profile-wg-draft.html#section-4.5.1 ) doesn't appear to narrow that any further.
Is the correct interpretation that issuers need to accept whichever of kid/jwk/x5c the wallet uses?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Read OpenID4VCI Appendix F.1 and HAIP section 4.5.1, focusing on the allowed jwt proof key forms and the attestation requirement. Compare the two specifications and document or confirm whether issuers must accept kid, jwk, and x5c, including any stated constraints.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication, security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100