diff --git a/awoie/fix-229-schema/draft-ietf-oauth-sd-jwt-vc.html b/awoie/fix-229-schema/draft-ietf-oauth-sd-jwt-vc.html index 16d13e6..1b291bb 100644 --- a/awoie/fix-229-schema/draft-ietf-oauth-sd-jwt-vc.html +++ b/awoie/fix-229-schema/draft-ietf-oauth-sd-jwt-vc.html @@ -12,13 +12,13 @@ This specification describes data formats as well as validation and processing rules to express Verifiable Credentials with JSON payloads with and without selective disclosure based on the SD-JWT format. " name="description"> - + @@ -1034,7 +1033,7 @@ Terbu, et al. -Expires 2 January 2025 +Expires 9 January 2025 [Page] @@ -1047,12 +1046,12 @@
draft-ietf-oauth-sd-jwt-vc-latest
Published:
- +
Intended Status:
Standards Track
Expires:
-
+
Authors:
@@ -1106,7 +1105,7 @@

time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."

- This Internet-Draft will expire on 2 January 2025.

+ This Internet-Draft will expire on 9 January 2025.

@@ -2030,8 +2029,8 @@

5UXdMVUs0Il0sICJpc3MiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS9pc3N1ZXIiLCAiaWF 0IjogMTY4MzAwMDAwMCwgImV4cCI6IDE4ODMwMDAwMDAsICJ2Y3QiOiAiaHR0cHM6Ly9 jcmVkZW50aWFscy5leGFtcGxlLmNvbS9pZGVudGl0eV9jcmVkZW50aWFsIiwgIl9zZF9 -hbGciOiAic2hhLTI1NiJ9.YBiC8VoPpa5qnFrQ30KWc5uT0vdTQA6xhOJTjEROlJXARB -3i7WJOEGqWOePItkefF-YD25gH7AN5_r2F9IBk3Q~WyJRZ19PNjR6cUF4ZTQxMmExMDh +hbGciOiAic2hhLTI1NiJ9.uIeWm81iSfu0ON9ZBn0tW0brZJO7lhRq-RmW1PNSeuk2Hi +Bh4br7k1x4l0hQTXncrpO2SkcV5evMnRMjB2zhTA~WyJRZ19PNjR6cUF4ZTQxMmExMDh pcm9BIiwgImFkZHJlc3MiLCB7InN0cmVldF9hZGRyZXNzIjogIjEyMyBNYWluIFN0Iiw gImxvY2FsaXR5IjogIkFueXRvd24iLCAicmVnaW9uIjogIkFueXN0YXRlIiwgImNvdW5 0cnkiOiAiVVMifV0~ @@ -2374,7 +2373,7 @@

6.4. Extending Type Metadata

-

A SD-JWT VC type can extend another type. The extended type is identified by the URI in +

An SD-JWT VC type can extend another type. The extended type is identified by the URI in the extends property. Consumers MUST retrieve and process Type Metadata for the extended type before processing the Type Metadata for the extending type.

@@ -2992,8 +2991,8 @@

6ICJzaGEtMjU2IiwgImNuZiI6IHsiandrIjogeyJrdHkiOiAiRUMiLCAiY3J2IjogIlA tMjU2IiwgIngiOiAiVENBRVIxOVp2dTNPSEY0ajRXNHZmU1ZvSElQMUlMaWxEbHM3dkN lR2VtYyIsICJ5IjogIlp4amlXV2JaTVFHSFZXS1ZRNGhiU0lpcnNWZnVlY0NFNnQ0alQ -5RjJIWlEifX19.U8N3Vea73aPcHYZQsEx7HlfRGHsYlwvZ0Zumzzmhnhd7p3bqr1FOdz -xJb9O7A-rEb1NVjTtdWJxFG1APnISkeg~WyIyR0xDNDJzS1F2ZUNmR2ZyeU5STjl3Iiw +5RjJIWlEifX19.EChqp_Nd-Gi_SHbL61_A2q_HCdFThg-27WsH3YY31s0SpIUMufpeCk +VdNkKda1qz84cuAGL_Byf0OvrwYbnxOw~WyIyR0xDNDJzS1F2ZUNmR2ZyeU5STjl3Iiw gImdpdmVuX25hbWUiLCAiRXJpa2EiXQ~WyJlbHVWNU9nM2dTTklJOEVZbnN4QV9BIiwg ImZhbWlseV9uYW1lIiwgIk11c3Rlcm1hbm4iXQ~WyI2SWo3dE0tYTVpVlBHYm9TNXRtd lZBIiwgImJpcnRoZGF0ZSIsICIxOTYzLTA4LTEyIl0~WyJlSThaV205UW5LUHBOUGVOZ @@ -3348,14 +3347,14 @@

6ICJzaGEtMjU2IiwgImNuZiI6IHsiandrIjogeyJrdHkiOiAiRUMiLCAiY3J2IjogIlA tMjU2IiwgIngiOiAiVENBRVIxOVp2dTNPSEY0ajRXNHZmU1ZvSElQMUlMaWxEbHM3dkN lR2VtYyIsICJ5IjogIlp4amlXV2JaTVFHSFZXS1ZRNGhiU0lpcnNWZnVlY0NFNnQ0alQ -5RjJIWlEifX19.U8N3Vea73aPcHYZQsEx7HlfRGHsYlwvZ0Zumzzmhnhd7p3bqr1FOdz -xJb9O7A-rEb1NVjTtdWJxFG1APnISkeg~WyJuUHVvUW5rUkZxM0JJZUFtN0FuWEZBIiw +5RjJIWlEifX19.EChqp_Nd-Gi_SHbL61_A2q_HCdFThg-27WsH3YY31s0SpIUMufpeCk +VdNkKda1qz84cuAGL_Byf0OvrwYbnxOw~WyJuUHVvUW5rUkZxM0JJZUFtN0FuWEZBIiw gIm5hdGlvbmFsaXRpZXMiLCBbIkRFIl1d~WyJNMEpiNTd0NDF1YnJrU3V5ckRUM3hBIi wgIjE4IiwgdHJ1ZV0~eyJhbGciOiAiRVMyNTYiLCAidHlwIjogImtiK2p3dCJ9.eyJub 25jZSI6ICIxMjM0NTY3ODkwIiwgImF1ZCI6ICJodHRwczovL2V4YW1wbGUuY29tL3Zlc -mlmaWVyIiwgImlhdCI6IDE3MTk4NjI3NzUsICJzZF9oYXNoIjogIlhZcHpHVmFqX1VBe -mNsNVpIS1U4Tk9FR25YNHhZemtHSC1UQW1kUEdNYVEifQ.JKdtgXOYa6-SGCRuUQmZyE -HOLaHTsCiFK18XgZqeg1M5GltegDZyUZT7ZMti8fpVppm04OALvYLawpunZPiGew +mlmaWVyIiwgImlhdCI6IDE3MjA0MjEyMjUsICJzZF9oYXNoIjogIjZyVi1UcXFIZWVYT +3ktY0psMEp1RkowR3luWGtVbktKZWJ6RVFxREVIV2MifQ.-GeeABjHKEA9QsivEsEfTZ +7n0-XxHY3n16IyS-Fb4ks2qNKfltXeHMjEDJR66bn6otx2I_T_JXm0urdgV3pHSQ @@ -3364,8 +3363,8 @@ 

{
   "nonce": "1234567890",
   "aud": "https://example.com/verifier",
-  "iat": 1719862775,
-  "sd_hash": "XYpzGVaj_UAzcl5ZHKU8NOEGnX4xYzkGH-TAmdPGMaQ"
+  "iat": 1720421225,
+  "sd_hash": "6rV-TqqHeeXOy-cJl0JuFJ0GynXkUnKJebzEQqDEHWc"
 }
diff --git a/awoie/fix-229-schema/draft-ietf-oauth-sd-jwt-vc.txt b/awoie/fix-229-schema/draft-ietf-oauth-sd-jwt-vc.txt index a654cab..fb9a91e 100644 --- a/awoie/fix-229-schema/draft-ietf-oauth-sd-jwt-vc.txt +++ b/awoie/fix-229-schema/draft-ietf-oauth-sd-jwt-vc.txt @@ -5,10 +5,10 @@ Web Authorization Protocol O. Terbu Internet-Draft MATTR Intended status: Standards Track D. Fett -Expires: 2 January 2025 Authlete Inc. +Expires: 9 January 2025 Authlete Inc. B. Campbell Ping Identity - 1 July 2024 + 8 July 2024 SD-JWT-based Verifiable Credentials (SD-JWT VC) @@ -47,7 +47,7 @@ Status of This Memo time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." - This Internet-Draft will expire on 2 January 2025. + This Internet-Draft will expire on 9 January 2025. Copyright Notice @@ -539,9 +539,9 @@ Table of Contents LmNvbS9pZGVudGl0eV9jcmVkZW50aWFsIiwgIl9zZF9hbGciOiAic2hhLTI1NiIsICJj bmYiOiB7Imp3ayI6IHsia3R5IjogIkVDIiwgImNydiI6ICJQLTI1NiIsICJ4IjogIlRD QUVSMTladnUzT0hGNGo0VzR2ZlNWb0hJUDFJTGlsRGxzN3ZDZUdlbWMiLCAieSI6ICJa - eGppV1diWk1RR0hWV0tWUTRoYlNJaXJzVmZ1ZWNDRTZ0NGpUOUYySFpRIn19fQ.7Hkdn - edpvTp6V8qjalZqZaoR9MxFruYJ_sZ0RwK0gBnSDPyw_xMTSt5XSL2TPClstkpAJy7HP - WAZXcdc-KBn2w~WyIyR0xDNDJzS1F2ZUNmR2ZyeU5STjl3IiwgImdpdmVuX25hbWUiLC + eGppV1diWk1RR0hWV0tWUTRoYlNJaXJzVmZ1ZWNDRTZ0NGpUOUYySFpRIn19fQ.etNVr + DG7sZ4gaHTSmeqjdgJLKIHYrXh9ulYVPIMzsoYgiC_0ElHcvRVCNU1nE2ulpC27BB8xJ + MZ98BcL1bZ_AA~WyIyR0xDNDJzS1F2ZUNmR2ZyeU5STjl3IiwgImdpdmVuX25hbWUiLC AiSm9obiJd~WyJlbHVWNU9nM2dTTklJOEVZbnN4QV9BIiwgImZhbWlseV9uYW1lIiwgI kRvZSJd~WyI2SWo3dE0tYTVpVlBHYm9TNXRtdlZBIiwgImVtYWlsIiwgImpvaG5kb2VA ZXhhbXBsZS5jb20iXQ~WyJlSThaV205UW5LUHBOUGVOZW5IZGhRIiwgInBob25lX251b @@ -658,16 +658,16 @@ Table of Contents LmNvbS9pZGVudGl0eV9jcmVkZW50aWFsIiwgIl9zZF9hbGciOiAic2hhLTI1NiIsICJj bmYiOiB7Imp3ayI6IHsia3R5IjogIkVDIiwgImNydiI6ICJQLTI1NiIsICJ4IjogIlRD QUVSMTladnUzT0hGNGo0VzR2ZlNWb0hJUDFJTGlsRGxzN3ZDZUdlbWMiLCAieSI6ICJa - eGppV1diWk1RR0hWV0tWUTRoYlNJaXJzVmZ1ZWNDRTZ0NGpUOUYySFpRIn19fQ.7Hkdn - edpvTp6V8qjalZqZaoR9MxFruYJ_sZ0RwK0gBnSDPyw_xMTSt5XSL2TPClstkpAJy7HP - WAZXcdc-KBn2w~WyJRZ19PNjR6cUF4ZTQxMmExMDhpcm9BIiwgImFkZHJlc3MiLCB7In + eGppV1diWk1RR0hWV0tWUTRoYlNJaXJzVmZ1ZWNDRTZ0NGpUOUYySFpRIn19fQ.etNVr + DG7sZ4gaHTSmeqjdgJLKIHYrXh9ulYVPIMzsoYgiC_0ElHcvRVCNU1nE2ulpC27BB8xJ + MZ98BcL1bZ_AA~WyJRZ19PNjR6cUF4ZTQxMmExMDhpcm9BIiwgImFkZHJlc3MiLCB7In N0cmVldF9hZGRyZXNzIjogIjEyMyBNYWluIFN0IiwgImxvY2FsaXR5IjogIkFueXRvd2 4iLCAicmVnaW9uIjogIkFueXN0YXRlIiwgImNvdW50cnkiOiAiVVMifV0~eyJhbGciOi AiRVMyNTYiLCAidHlwIjogImtiK2p3dCJ9.eyJub25jZSI6ICIxMjM0NTY3ODkwIiwgI - mF1ZCI6ICJodHRwczovL2V4YW1wbGUuY29tL3ZlcmlmaWVyIiwgImlhdCI6IDE3MTk4N - jI3NzUsICJzZF9oYXNoIjogIldObzJXRjNoMzlkMksxdGprRXZRYmF6azVfTWxPTk4wN - GNPLWFodWtNZ0EifQ.CEmM84hcyfLU4f1iwurEiGHRbRYyk5LKieTIBkWeGS6WG2C24R - usTODn8lSqPM60PTv4AOEVieiZrrnb1fCnsg + mF1ZCI6ICJodHRwczovL2V4YW1wbGUuY29tL3ZlcmlmaWVyIiwgImlhdCI6IDE3MjA0M + jEyMjUsICJzZF9oYXNoIjogIkwxUThLY0Y1Q0ZlM3Rna0pxZVp3VG5zRlAxdjJFeXNSV + lNxLU5NZXN1ajAifQ.EwIiXOKhuatSTYo9rJDM6AQglSAQ54bjP_8nqG5oHPPtnjxzqO + qp5rmr7lUH2uMZ652DuuJA-2g7dY69OxGs0Q The following example shows a presentation of a (different) SD-JWT without a Key Binding JWT: @@ -684,8 +684,8 @@ Table of Contents 5UXdMVUs0Il0sICJpc3MiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS9pc3N1ZXIiLCAiaWF 0IjogMTY4MzAwMDAwMCwgImV4cCI6IDE4ODMwMDAwMDAsICJ2Y3QiOiAiaHR0cHM6Ly9 jcmVkZW50aWFscy5leGFtcGxlLmNvbS9pZGVudGl0eV9jcmVkZW50aWFsIiwgIl9zZF9 - hbGciOiAic2hhLTI1NiJ9.YBiC8VoPpa5qnFrQ30KWc5uT0vdTQA6xhOJTjEROlJXARB - 3i7WJOEGqWOePItkefF-YD25gH7AN5_r2F9IBk3Q~WyJRZ19PNjR6cUF4ZTQxMmExMDh + hbGciOiAic2hhLTI1NiJ9.uIeWm81iSfu0ON9ZBn0tW0brZJO7lhRq-RmW1PNSeuk2Hi + Bh4br7k1x4l0hQTXncrpO2SkcV5evMnRMjB2zhTA~WyJRZ19PNjR6cUF4ZTQxMmExMDh pcm9BIiwgImFkZHJlc3MiLCB7InN0cmVldF9hZGRyZXNzIjogIjEyMyBNYWluIFN0Iiw gImxvY2FsaXR5IjogIkFueXRvd24iLCAicmVnaW9uIjogIkFueXN0YXRlIiwgImNvdW5 0cnkiOiAiVVMifV0~ @@ -950,7 +950,7 @@ Table of Contents 6.4. Extending Type Metadata - A SD-JWT VC type can extend another type. The extended type is + An SD-JWT VC type can extend another type. The extended type is identified by the URI in the extends property. Consumers MUST retrieve and process Type Metadata for the extended type before processing the Type Metadata for the extending type. @@ -1497,8 +1497,8 @@ B.1. Example 1: Person Identification Data (PID) Credential 6ICJzaGEtMjU2IiwgImNuZiI6IHsiandrIjogeyJrdHkiOiAiRUMiLCAiY3J2IjogIlA tMjU2IiwgIngiOiAiVENBRVIxOVp2dTNPSEY0ajRXNHZmU1ZvSElQMUlMaWxEbHM3dkN lR2VtYyIsICJ5IjogIlp4amlXV2JaTVFHSFZXS1ZRNGhiU0lpcnNWZnVlY0NFNnQ0alQ - 5RjJIWlEifX19.U8N3Vea73aPcHYZQsEx7HlfRGHsYlwvZ0Zumzzmhnhd7p3bqr1FOdz - xJb9O7A-rEb1NVjTtdWJxFG1APnISkeg~WyIyR0xDNDJzS1F2ZUNmR2ZyeU5STjl3Iiw + 5RjJIWlEifX19.EChqp_Nd-Gi_SHbL61_A2q_HCdFThg-27WsH3YY31s0SpIUMufpeCk + VdNkKda1qz84cuAGL_Byf0OvrwYbnxOw~WyIyR0xDNDJzS1F2ZUNmR2ZyeU5STjl3Iiw gImdpdmVuX25hbWUiLCAiRXJpa2EiXQ~WyJlbHVWNU9nM2dTTklJOEVZbnN4QV9BIiwg ImZhbWlseV9uYW1lIiwgIk11c3Rlcm1hbm4iXQ~WyI2SWo3dE0tYTVpVlBHYm9TNXRtd lZBIiwgImJpcnRoZGF0ZSIsICIxOTYzLTA4LTEyIl0~WyJlSThaV205UW5LUHBOUGVOZ @@ -1769,22 +1769,22 @@ B.1. Example 1: Person Identification Data (PID) Credential 6ICJzaGEtMjU2IiwgImNuZiI6IHsiandrIjogeyJrdHkiOiAiRUMiLCAiY3J2IjogIlA tMjU2IiwgIngiOiAiVENBRVIxOVp2dTNPSEY0ajRXNHZmU1ZvSElQMUlMaWxEbHM3dkN lR2VtYyIsICJ5IjogIlp4amlXV2JaTVFHSFZXS1ZRNGhiU0lpcnNWZnVlY0NFNnQ0alQ - 5RjJIWlEifX19.U8N3Vea73aPcHYZQsEx7HlfRGHsYlwvZ0Zumzzmhnhd7p3bqr1FOdz - xJb9O7A-rEb1NVjTtdWJxFG1APnISkeg~WyJuUHVvUW5rUkZxM0JJZUFtN0FuWEZBIiw + 5RjJIWlEifX19.EChqp_Nd-Gi_SHbL61_A2q_HCdFThg-27WsH3YY31s0SpIUMufpeCk + VdNkKda1qz84cuAGL_Byf0OvrwYbnxOw~WyJuUHVvUW5rUkZxM0JJZUFtN0FuWEZBIiw gIm5hdGlvbmFsaXRpZXMiLCBbIkRFIl1d~WyJNMEpiNTd0NDF1YnJrU3V5ckRUM3hBIi wgIjE4IiwgdHJ1ZV0~eyJhbGciOiAiRVMyNTYiLCAidHlwIjogImtiK2p3dCJ9.eyJub 25jZSI6ICIxMjM0NTY3ODkwIiwgImF1ZCI6ICJodHRwczovL2V4YW1wbGUuY29tL3Zlc - mlmaWVyIiwgImlhdCI6IDE3MTk4NjI3NzUsICJzZF9oYXNoIjogIlhZcHpHVmFqX1VBe - mNsNVpIS1U4Tk9FR25YNHhZemtHSC1UQW1kUEdNYVEifQ.JKdtgXOYa6-SGCRuUQmZyE - HOLaHTsCiFK18XgZqeg1M5GltegDZyUZT7ZMti8fpVppm04OALvYLawpunZPiGew + mlmaWVyIiwgImlhdCI6IDE3MjA0MjEyMjUsICJzZF9oYXNoIjogIjZyVi1UcXFIZWVYT + 3ktY0psMEp1RkowR3luWGtVbktKZWJ6RVFxREVIV2MifQ.-GeeABjHKEA9QsivEsEfTZ + 7n0-XxHY3n16IyS-Fb4ks2qNKfltXeHMjEDJR66bn6otx2I_T_JXm0urdgV3pHSQ The following is the payload of a corresponding Key Binding JWT: { "nonce": "1234567890", "aud": "https://example.com/verifier", - "iat": 1719862775, - "sd_hash": "XYpzGVaj_UAzcl5ZHKU8NOEGnX4xYzkGH-TAmdPGMaQ" + "iat": 1720421225, + "sd_hash": "6rV-TqqHeeXOy-cJl0JuFJ0GynXkUnKJebzEQqDEHWc" } After the validation, the Verifier will have the following data for