Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat: Add revocation mechanism to sd-jwt-vc #224

Closed
cre8 opened this issue May 6, 2024 · 1 comment · Fixed by #225
Closed

Feat: Add revocation mechanism to sd-jwt-vc #224

cre8 opened this issue May 6, 2024 · 1 comment · Fixed by #225

Comments

@cre8
Copy link
Contributor

cre8 commented May 6, 2024

The spec the referencing a status check when one is provided: https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-01.html#section-3.2.2.2-3.7.1

I implemented a small library that will help to create a statuslist and interact with it and also packs it into a jwt and unpacks it. https://www.npmjs.com/package/jwt-status-list

What is not covered is the validation of the JWT that is providing the status list. For this point I think the user needs to implement a verification function to validate the statuslist+jwt since the public key can be referenced in to many ways.

@lukasjhan
Copy link
Member

I think it makes sense to implenent the validation into the sd-jwt-vc. Since status is mentioned in the sd-jwt vc standard,

cre8 pushed a commit to cre8/sd-jwt-js that referenced this issue May 6, 2024
@cre8 cre8 closed this as completed in #225 May 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants