You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<p>The JWKS in the <code>jwt_vc_issuer</code> property contains information about the keys used to sign Digital Credentials. The JWKS on the root level of the Entity Configuration contains information about the key used to sign the Entity Configuration. In the example, the same key is used, but the keys MAY be different.</p>
<p><strong>Requirement: When the <a class="term-reference" href="#term:issuer">Issuer</a> issues credentials in the <a class="term-reference" href="#term:sd-jwt-vc">SD-JWT VC</a> format, the Issuer MUST place its Entity Identifier in the <code>fed</code> claim of the credential.</strong></p>
430
+
<p><strong>Requirement: When the Issuer issues credentials in the <a class="term-reference" href="#term:sd-jwt-vc">SD-JWT VC</a> format, the Issuer MUST place its Entity Identifier in the <code>fed</code> claim of the credential.</strong></p>
<p>The following non-normative example shows a decoded payload of an <a class="term-reference" href="#term:sd-jwt-vc">SD-JWT VC</a> credential with the <code>fed</code> claim:</p>
<p><strong>Requirement: When the <a class="term-reference" href="#term:issuer">Issuer</a> issues credentials in the <a class="term-reference" href="#term:w3c-vcdm">W3C VCDM</a> format, the Issuer MUST place a <code>termsOfUse</code> property into the credential. The <code>type</code> of this <code>termsOfUse</code> property MUST be the string <code>OpenIDFederation</code> and the <code>policyId</code> MUST be the Issuer’s Entity Identifier.</strong></p>
449
+
<p><strong>Requirement: When the Issuer issues credentials in the <a class="term-reference" href="#term:w3c-vcdm">W3C VCDM</a> format, the Issuer MUST place a <code>termsOfUse</code> property into the credential. The <code>type</code> of this <code>termsOfUse</code> property MUST be the string <code>OpenIDFederation</code> and the <code>policyId</code> MUST be the Issuer’s Entity Identifier.</strong></p>
<p><strong>Requirement: The Verifier MUST place verifier metadata into the Entity Configuration, in the <code>openid_credential_verifier</code> property.</strong></p>
<p><strong>Requirement: To establish trust with the issuer (ensure that the issuer can be trusted), the Verifier MUST resolve the Trust Chain from the issuer’s Entity Configuration until it finds a Federation Entity it trusts.</strong>
483
-
<strong>Requirement: The <a class="term-reference" href="#term:verifier">Verifier</a> MUST verify that the credential is signed with a key included in the <code>jwt_vc_issuer</code> metadata in the Entity Configuration of the <a class="term-reference" href="#term:issuer">Issuer</a>. The <code>jwks</code> property in the <code>jwt_vc_issuer</code> must contain a key with the <code>kid</code> value equal to the <code>kid</code> header in the <a class="term-reference" href="#term:sd-jwt-vc">SD-JWT VC</a> credential.</strong></p>
483
+
<strong>Requirement: The Verifier MUST verify that the credential is signed with a key included in the <code>jwt_vc_issuer</code> metadata in the Entity Configuration of the Issuer. The <code>jwks</code> property in the <code>jwt_vc_issuer</code> must contain a key with the <code>kid</code> value equal to the <code>kid</code> header in the <a class="term-reference" href="#term:sd-jwt-vc">SD-JWT VC</a> credential.</strong></p>
0 commit comments