Learner Credential Issuer - token/DID exchange handling about learner-credential-wallet

[kayaelle]

Thanks for submitting this @jchartrand!

(I asked James to add to this repository because it was related to the wallet but this suggestion could easily be its own repo or in the sign and verify.

Ideas to make the issuing flow easier are worth exploring. Would these remove did auth from the issuing flow which ensures that the issuer is able to verify that the subject does have control of that DID. What are the drawbacks to that?

[jchartrand]

@kayaelle

The holder/subject would still use DIDAuth to submit their DID. In other words, when the LCW submits the subject's DID, it would demonstrate control by signing with the private key.

This part of the flow wouldn't change from what the LCW currently does. In fact, I suspect very few - if any - changes would be needed to the LCW. I think the LCW already accommodates this flow.

The point of this is just to simplify the token/DID exchange on the issuer's side.

[kayaelle]

@jchartrand So the LCI would be the software that does the DID resolution? Would you see the LCI being used predominantly as a service endpoint or one an issuing org would install as a helpful library?

[jchartrand]

@kayaelle I suppose the LCI would have to resolve the submitted holder's DID, so as to know that a valid private key was used to sign the DIDAuth. But, that resolution would be done by some other library/service (e.g., https://github.com/decentralized-identity/universal-resolver).

I could see the LCI being used either way - as an npm library or as a service endpoint. Much like sign-and-verify-core and sign-and-verify. I could also imagine the service endpoint being run either locally by an issuer, or as a DCC hosted endpoint.

[kayaelle]

Thanks @jchartrand Looking forward to discussing it more with @dmitrizagidulin

[alexfigtree]

@jchartrand What would you like to do with this issue?

[jchartrand]

@alexfigtree This has been effectively implemented in the exchange coordinator, so can be closed