openid / openid/dchp

match inherited vcts with credential_type for SD-JWT VC

Open
#53 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
19
Forks
3
PR merge metrics
No merged PRs in 30d

Description

The SD-JWT VC annex (from #22) currently says a CredentialQuery matches SD-JWT VCs whose vct is identical to credential_type (case-sensitive text comparison). OpenID4VP's vct_values is looser: "The Wallet MAY return Credentials that inherit from any of the specified types, following the inheritance logic defined in SD-JWT VC".

We need to decide whether DCHP:

Related to #46 (making credential_type an array), since both concern what credential_type matches. The annex added for #22 carries an editor's note pointing at this question.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the SD-JWT VC annex added for #22 and its editor’s note, then compare the current exact vct rule with OpenID4VP’s vct_values inheritance wording and the aka_vcts definition in the linked SD-JWT VC draft. Review #46 because it also concerns what credential_type matches; done means reaching and documenting a decision among exact matching, aka_vcts, inherited types, or format-specific behavior.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.