Comments (3)
My understanding is that it is valid, additional data is currently sent in the OpenID Connect standard as JWT over the OAUTH2 protocol.
from vc-data-model.
My understanding is that it is valid, additional data is currently sent in the OpenID Connect standard as JWT over the OAUTH2 protocol.
Sorry, I should not have used "valid". What I meant is, from a standardization perspective, is it okay to just include data? I would expect that we should spec out what needs to be included and there may be an RFC publication process that I'm unaware of where it's good practice to publish extensions to JWTs via that extension registry. So, the "validity" had more to do with the process than it did the data format.
The other questions had to do with "best mode" for data format. For example, we're digitally signing JWTs, which means we're forcing JSON, which means that the digital signatures won't work in other data syntaxes. This is not a limitation w/ Linked Data Signatures, you can have multiple representation syntaxes w/ LDS where you can't with JWT. So, the question had to do with whether we should be expressing the data in a unified format (like NQuads) and then doing a JWT signature over that data. At least in that case, we could have a unified signature across all formats. The downside there being that maybe 0.001% of Web developers even know what NQuads are.
I hope that clarifies the question.
from vc-data-model.
No one has worked on this issue. I suggest we close it.
The latest RsaSignature2018 cryptography suite supports JOSE JWS-style signatures: digitalbazaar/jsonld-signatures@f583bd4
Given that no one in the group has written a JWT-based VC implementation, I'm suggesting that we close this issue for the 1.0 work. We can always support JWT-based VCs later if someone decides to write a spec encapsulating VCs in JWTs.
Notice: Closing this issue on or after 2018-2-20.
from vc-data-model.
Related Issues (20)
- Support of SHACL Schema in Version 2.0 HOT 4
- "โฆ" as a term name in the context file? HOT 2
- Unnecessary direction attribute? HOT 12
- EnvelopedVerifiablePresentation missing in data model HOT 5
- first example contains an http url identifying a credential HOT 5
- Remove at risk issue markers for property extension points. HOT 1
- What does the hash values in ยงB.2 mean? HOT 4
- Proposal: remove ambiguity and asymmetry as it relates to subject identifiers HOT 7
- Do we need sha3-512 in the vocabulary tables? HOT 6
- Should we use `Ed25519Signature2020` in the Examples? HOT 3
- Unmatched HTML Tag HOT 3
- Revisit Verifiable Credential media types HOT 19
- consider merging 3.4 and 5.1 as both sections are about the credential lifecycle. HOT 1
- Add issuee definition HOT 17
- Truth (or falsity) is not part of VCDM ecosystem HOT 4
- `credential repository` vs `repository`, and definitions in _1.2 Ecosystem Overview_ vs _2. Terminology_ HOT 3
- Consider explicitly allowing/recommending language maps for use in internationalisation. HOT 3
- Example of Use of renderMethod HOT 2
- Suggest to make explicit reference to the JADES standard HOT 2
- EnvelopedVerifiablePresentation missing in https://www.w3.org/ns/credentials/v2 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vc-data-model.