From 0db7fbe293e60d5c512004fdd049e6c64b498115 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 10 Dec 2023 19:34:57 +0000 Subject: [PATCH] Deploy to GitHub pages --- .../en/.doctrees/environment.pickle | Bin 87795 -> 87795 bytes .../en/.doctrees/revocation-lists.doctree | Bin 150677 -> 150669 bytes .../en/_sources/revocation-lists.rst.txt | 15 ++++--- .../en/revocation-lists.html | 40 +++++++++--------- .../it/.doctrees/environment.pickle | Bin 57407 -> 57407 bytes 5 files changed, 28 insertions(+), 27 deletions(-) diff --git a/credential-revocation/en/.doctrees/environment.pickle b/credential-revocation/en/.doctrees/environment.pickle index ed543d782b4b6bcc471f26b8f545ccd64b9b3358..9183f862f9df071e0dc29482c7e014a5c8416cb8 100644 GIT binary patch delta 4563 zcmb7HdvudU7Vqr?2oGsXEta+v`T$y*K4_uzL7Toy(?|M(f|Qarf##!4YLg%q*eVLg zXpSvTaCQ;b)uVDeE&}^4W?dH)T&o^bTy;eep)X3cfCwsDk=;8p;X7N|v*+v|`R4cg zeRt-&GxyHi$+i7{*Y^7zjEr99Z?&4#CbO->Vz4*cOct}tc}J7Jd855u-C?xaEFDId zb8@o<4NOgT8zb#jqupRJ-`8e!k-5>q^ZZO^gK@LV>ECWLsEvBP+GMrb_2y<~t8d+4 z=`h(^+N|V2^qmm;L>Yumbvad5o8D~DcNnbnUxhF$*6C;Kuv={|=k$B^t*u6z+G=UF z3umSojO$Hiqd{#mcC=aL&=_Bzt^sc^uj1U#8y=sc^GKpP5Zz)c z^sDZuvXx@$!h{a;GY&Ky7mwk}$0^c{XZ8iuTl^EOIrukgQJ$!Liw@|Cdq7 zvnk;)K;B4cCZnkavSo>Z%*5a8DF!lSX%m^7x}G@Fo5{{pBRRIzK;*>+mB$}vCE3-O zLr$hnoUA0Zi}a+gAr*^_BtOkSVzA@I^gJ9sG2=9xA-T&U$$`Q-q%2cIO0%QLfy_qI zyDW;VtxY2OEDiK=i5_1(S+t`hz19I@^}o1&}hi19MpRw$#aOG$%-O3-=0U*xf-HFy(ia1+HkC} zJTu=`(rzCwFP?MK%M7tRlU`$p<(BjgLoA=9e=@{!NE%>>Z6E0yhFD@qHyC2cAgO%u z!4g0UW{AaBieiYZpOnN9+a=O6-za>tEh3dNkp)UxiOBBswON|2u5GRb(tsSF9|vU4 z-T(&eE>u{79DCG)L5UzEx)P%87Q@w6g#eO3xvRPzNVYkgM)*QC#%wd`vk8;2+FU>q zD3`BTB*3nfEx^KAXeKSI9wI9WqGkWp!GIt@PP-f3LO}Mf>4!eKyWvG2^8Q;(_&oOM zH+|ZoPnY_<%zW__u+XOhWp+f+T31@^o3%3mjHKGe0WrIrhH;LB~U6bVD2Ual>B-cDRDqib$umg9Q`aKo3p^;rm~lVZc}*F%{2~r#_bBVSOcY zljUuXS9sXE@Gq`@N*TH8W7GU{v4+80a+k$(um0US5W^v*LjKG!if%4cs zOhyJeUu@xku!#h{gx_Xr!5=X|4D{~zfRY102t{{jlK`Ln3B6%9_CI3~8Mt!TDZpdy z8QxrxU)>;-_}88g;FG^O1h5f-<`zX;AD6jrI#wGqZ zX6Q@lB&*j%CcPO=-tFxrKh<0CNHLR(tD@zecV+?EyCz6J`YwKN?-~)Lh7(#&I}Pi_%l-9Ioru!DT!qiz9OKiMt7j8C_7Kzo8=rhN3&2_ZlEc{T$<@}<+b zBCPB8XQ~9KKPyJ1v9lmi4(j8EfwH0B^Z82y!aI5W&?BOU_wX~`e2l{*JB3pIwa2s5 zqdS1S_q+wq%2;y!QVGdE6d>y^C*m=1NX*auO^zTebPK*M z0_9cT3wiJ+9$xsK{x%3g54S@wWo;%kWwtJ&DFxnXmTu8o12RFe)9Xhb%o_!y;rH%dpRPhv$IEryxJU9>M2 z{M@;Vq0$=$-Mi9Y$Y&C(+h}l}58-xYLYp^S7(ZUuBv!rAXoS9y4P|xgI_u!Ub#Q+i z+#Lt^#=!&Y;Bj^EusV2D9XzNG9#aPose?zDy3&iV%>@^qSg^;KSNkT|bgj6AKR(oG|Td?xTaV}THgnZU1(B|^|Lf!`p@gixsnIw903Lah*1Dnfmz zR|Q+5yA@@PFlkhTbwX%X1cMMZC_;-6HgbVZse}X($T_6P9Zc&gVIEF(Yb9u~IZ_Gg zK<;h3=w%hXZdAfz(Q7{4rGvS&UdNNlse{y1ZogUBZ(;WQn!HsAT}?38psv2BX#GoMLTnF_||f*lpBY4KcCo>mmpF{{1M5>l6^xImPuPRjN+&cX3Y7f0Y8|olL)##x^w5tvltJW#> yNFC(oUuMyq8itPv?C~w5-?7Ja_84Q25%!qQ-i|V)V#tR*eqq!rjOMR^gZ~D@l1lpk delta 4512 zcmbVPYgAKL7H0F(P*gyw@)9(`C*duEASCjNL?9?CSP>(Mk}D)g5^H^wwpQDWSp|B~ z+fk>lRqb?jw03S?nNC}$+Dh%%+IOA$L`1~;*0#3PIZ*iY!$&t=ZzJr>4V~8S7R$o7Bx_yTjIO7XMoakx}jdN3+xJ z=x~QLn^)WFjMRs^!D4sVJIFXy_{g9-o7K^5S>|+@JKO;ltI52E>{Z2uhBR4BYO~R( zw%F}XqqWW~MaBF3wRHLV_!Miut9f#FQ&6gKPG+l=yM)+JtlW@!tFRso!&wkdpqpz9)bG zPSM7e*V-|Ov?t_}z$uf-v4j~oiV~)i&l4t)#p*CJM6Jd#Pv6&%E}iyUnV3p`Rj(pv zrzD`a9LDV02ylt_Y;rjV}^v#3Y3P(wU9l{7{?UJ1j|<%RoP(k-GcjZ+trH&UX= zp{aDS=b6>MluR-$N#z}eZWy)Pom#|(*q0KC)=JWlnvF}P6QP@UpD*%qS`2RG`)PG# zbcTtX#h)_WL=I+}$g9&$nB3nt8R3;N+j)wGTl%&2o=h>MW zay(B-UNtJoX2ipDlw^-}90|(R5I349yQ7IKR|DOo06%l|W zOlq0i1VmF9BgXo}T#VBia!kif`YW}7Bupw@kjg>(!g?UBAK5U3Pm&uKxLL@eQGg^& z%6!Pg0NJ~^3oc5nHLv-RghMtA@=7xF1C^AqEEI_D!!WUJ6!=RubyLHxQI@in z<6J2?uwoSlTFavxd?DQ8;F|^ukn8he$ma_pNSh%Gv&KSN7V??Qu*Cop+@dC269t!7 zp*aQ1?Q1!>PvWR8Gjwy zGF0k)yqc>O8?SO;*p$z~uFVbH&ai2il>9Uf!1w*=?ifH4CiTB+(T&(?9U^b1T5svP~Ym4k+_ zw{kG@+b0;HhhemI;P_E4@Axj4gUcs==HSOu6&zHZ;a=e)yT?OwqR zm-qaM1K-}4eA)2(`!;i>^n35jPF&su;$dH~;YV^ZxpP$~?hArY$#5+RDB?@>T+j0| z8pcUC3ptZoZWVaZH@BO;sQSm-UbN&+g%=(Cc>t;U>%H3ZzxH#)7k==!5bulg_iDT^ zo(qSl{f$uNOAc~eOzK<1Jzorio9wNKJrthPBcPBQr-#C2hRFGQkskd>$mTlE zs+S{-SU*QQ#|${08VSGfUKh(IdTOF!8L*P02Uc(NLs+rV`?5--_hV%S8(L%ZLs@~* zhq3B{mbA3!6|Ao4Ls?P5ezc;XGg?mcqgg4@4`X#iAL4Wm$0AZ|H`iI6jmylejMBd=<;aB!(QJQdXKH?V0(!Tt=ibowPABoToMnXMNJk2im|zn z=4Tczc~CkqVkj-!XwgkA#)w^$A;6=Z2Iaoc<7uA`J$^%Jtb3K-j307hhYII|Uk1x}0K6@u2ErrEY4h!Ce2K^pXkD~n(*HV2Ae z0X7d7!%}Qk7ehTZXNzGIHf9~vVslsrk6@EG8=Qgk_T!EbUns!|9G{J6uSbk80S7kQ zOW;v#BJ{{Eh|lODAGh>NJ(LI1jdaJ7H&s#MtT~VaXT+8{u)dJ)s1P3Iy0T zsg2=66cyNoEt(6lRABeEI4&rua8lHiLJV%w5^M_D#cdLQJ(a#@LIM|(WFeUgX|j;c zh3QNX-!Fw&+`_I>$iVfCE`y0J%uf!t%9FckxR6f;c2g|iLNOKCg;B=^Jr&r!aSj*C zWx>FOd9qN+g@v+E73EV#x9A~RSSV#hg%z?;&xMst5FaRqL>|dF(&iZ@ z&M$`vxYYIKpuy(7a!`k{**5WBcHZl5IZWfdCW`F_7$;U4SR%O%ke<%$*KqrF)Sg|A z*K?tT3hZY57#B8Dp-=q504nGcBPw7KHjWA?!rXYL0@B&H6wlrto_|aqG@+rvX5h$k zMrVWKz%l2HP5{M$W6hY;>2wEL8jUN=_&@ytdsDr|x+c--5Uq0|ekS`zz*3GymtFGN zRi0%oog0rbTN(Q!!FGYIyjT2uE~FGj<9`SIGsgd1{NJvM=0Tz&!|UpjxM3coDKcgH z_B==*kv>3iR&8!Ic`+d|7?UQ?D|d?-l`vJIk*QD#V-p^ZOV5in^C3d9)JyxsmiaJEu~??>&4>K_n>5~j(fCl%M<1n^>EjxG d^wWnAeQ}4PK#GFtV+4KtMztTJ#QX)Y?|*ygBh>%^ diff --git a/credential-revocation/en/.doctrees/revocation-lists.doctree b/credential-revocation/en/.doctrees/revocation-lists.doctree index 9f956da2890b542a93840e5baed044430a278a50..32bfe669764573aaf1d068562eedf30e041f67c1 100644 GIT binary patch delta 2418 zcmZ{keN@zC7RUWQGxPhYr9`|lG{}aIkgPL+VwxezssjpGoxqNrC`7;|bwTaT2+hb= zbkzZFq~=SeR;$SR@{mR%YXoYD*5-jUq1;pXlCgg*9n0)K^BYHP&;B)cKHq!4_j&m} zx4L$~%Gv?ua!Yklz1e&Y1@7{0*Wl=ES4!N(j7f26+3BuScW3wYd!k*Xr3>>*;vOj~ zn43R~g+~XzR8^=yQB~-l^Z$zO{@~+1C#hY*8#5{`98?Z>W{{c;aP5vz!M}-!xGApP)7P0iY9j)3>1-AKs zcdKo~u~-|Xq!y1P7sg;TV3&W7#rx2QD<#z5Sm&3qd_X_O<9TV1LzYR8QDTZ$-0nah zx7z5$RsB9CeD4+7o$SU{Z6@kY;`8c9J!3eLu|`)$qZe`1lZ31IqdYSPk!FmPzdWE0 z&7n*tQ}1~1xx13NyQ39z>DvbpuQ`=m;FBfGy(TSQ(J~*UITQJo6BN_}jZKW2!pmt$ z#Wa(isQ560OXfL(I?`dGwP~nA9@*332-fD9i%M z)c6>#BZV5Xu>`MDat_`^vh2#idSJ4A_HiUw;G(Qj{_a|yM4tue>Q991%7+blmU5mH zOl#Kgd%3#+6>!Vi0(6;?Lko)W3UcI6#b`F+aXL6374EOPcG3@jK`saD=|TxVo|%&E z>V-aAIrR&n-c#&kU4(edHo6uq!Vwb+jjm}gs7EtLnMKIRmvBj-*ieR-BSPS1rC4R| zQoay%e;GESQtnuW|Cq2!u3L_9=&MvhU5LB)h*h3`9e;+t+DrUv0%+z6 zEESa?Jcej8S7I}&*jChEmhkWYJ5XOs`v^#lOneo zi)kLgB73T_3fLs)6F0|ZTJZ*&u|;Ooq64DJ+bDG%Ud1*#x(=QC4&`_-%sAb~^;n9F za>53F4|<(a?hH42&Dg}fcH40;y}uD<`fjC-xTzgMy|iuSqo&C1u!u6R;@HI_D-i|XG_DbwhLuQ}ys(E3avB{F|tdZOG!dM;4$^4{^J186I;SmrHhg4oHH8u0uTsn-c_*kxKMwD4= zQ7-@WsTzIPf?n!q<(e{b9`QcSHZJ2yvI(v7WUDG`Q)T;ZP0(ogr|8v=Dq%c1j~kWb zYR56{n1WB-20e4JM4ml?87A$x(iix2Ir}sCLHktEUwo9_`5f2ub_FAb7+1~2J5Un7 zK)ilJX$giVtG_@9&>?r8#z3K+R8lFGcfmoIJFya{JghkQ`s5lt0L=U*kPYrp#}6pq!Bz=aFX7zfwIGM)CUz zmixX}@2{IqT|^fr?7W1qRD{x!DI$^1IYk%+IzLgLsuOjY97ibR)jTF+D#{WYRZdIb)QO@yR&O z7-#s|Od^1C?ZS^@b8rVWJs_%iPI~tB*YV;c+(x|mL2($JMqH6BPT-=7r_tLJ*lMp4 zFHgA{Kl2dB(%=tIycs8@a(uw>G5txj^E>ePL{4JfqT&p)Oy;F};|nToQ~bQ~lR~6$ zC=hy-@)!ECMpdJ^XoPe`qg=3sRkv4tD;jaKFb1hYAEogB3@lq?Q780qiaZ-^r2jd7 zU?UxIaOkm0detu-!FZW|D@veGP{Mz`!e0_O{HFxm5A~8nM4PD~5f-_@h8WOV8~1)Z z#7J+mqeD+nrQi8M9C_R*lMkk#*reU2w42C2dEj7sQ_-&_D*Ai?{aqS5v?N7ezmfXF zTvJq7vNC)WU>G-@!zL=4LoG7~UXhoMW13CTCe zvALvKy#3}Z++#wDyq<&Sgg#lx&v@knc_>9DMd!oLkD`41QNLZuJzjbA9IlR@jgvqs z{reuc^*fY0Dcs0rRikg`;88BkFF*o6HWpx=mZm)SQpH^U#f&V()65$R@wZW#WhF~X z)@&$UvTD(?wPmZ9Y*@V5cNMBajF(5zrXu`Fo1*H={PkmH?!B-JOqJzxF-0Jq4m^OL z^%=@F#OiG63#HCttkAdkKyz~>JunaDNSCMQ!3AW?wGSf2qR&!>Y^$^HNVq(>2>lj4 z&rhuKbO}ZS1=P0;_1G@AEl0N*#k6V_Z=jfX87fVy(PYAWn*J0V{VVVB97f||6Y>=C`^A2^FLg$7X-*|A%z(stdnkULm z>aFI9a=scC9yg7(JZWAg=)^Wn-n;_~pw+ADT)*~%)}TPCA0$)PU$IJSRJ6iRZ;|D- zsDp5Nd!AN@XRw>xb?Cxt(Q>>;cVaB5(V9KH~P>if&cZCKnu1Gy7wD@i2bUjwr#SgarEV zFt_4yqr;>fRrp6Q?r!7QHU%7XOxQ@8F1mg%OdM#Hh)E^jOsZ diff --git a/credential-revocation/en/_sources/revocation-lists.rst.txt b/credential-revocation/en/_sources/revocation-lists.rst.txt index c4e6b968b..6a46a2372 100644 --- a/credential-revocation/en/_sources/revocation-lists.rst.txt +++ b/credential-revocation/en/_sources/revocation-lists.rst.txt @@ -213,7 +213,7 @@ where a non-normative example of a Credential PoP is given by the following JWT { "alg": "ES256", "typ": "revocation-request+jwt", - "kid": "$WIA-CNF-JWKID" + "kid": $WIA-CNF-JWKID } . @@ -224,7 +224,7 @@ where a non-normative example of a Credential PoP is given by the following JWT "exp": 1698744139, "jti": "6f204f7e-e453-4dfd-814e-9d155319408c", "format": "vc+sd-jwt", - "credential": "$Issuer-Signed-JWT" + "credential": $Issuer-Signed-JWT } **Step 2 (PoP verification)**: The Issuer verifies the signature of the PoP JWTs using the public key that was attested in the Wallet Instance Attestation and the Credential. If the verification is successful, it means that the Wallet Instance owns the private keys associated with the Wallet Instance Attestation and Credential, and therefore is entitled to request its revocation. @@ -253,7 +253,7 @@ The requests to the *Issuer Revocation endpoint* MUST be HTTP with method POST, * - **Claim** - **Description** - **Reference** - * - **Credential_proof** + * - **credential_proof** - It MUST contain a JWT proof of possession of the cryptographic key the Credential to be revoked shall be bound to. - This specification * - **client_assertion_type** @@ -265,6 +265,7 @@ The requests to the *Issuer Revocation endpoint* MUST be HTTP with method POST, The Revocation Endpoint MUST be provided by the Issuer within its Metadata. + The Credential Proof of Possession MUST be a JWT that MUST contain the paramters (JOSE Header and claims) in the following table. .. list-table:: @@ -306,11 +307,11 @@ The Credential Proof of Possession MUST be a JWT that MUST contain the paramters * - **jti** - Unique identifier for the PoP proof JWT. The value SHOULD be set using a *UUID v4* value according to [:rfc:`4122`]. - [:rfc:`7519`. Section 4.1.7]. - * - **Credential_format** + * - **credential_format** - The data format of the Credential to be revoked. It MUST be set to ``vc+sd-jwt`` or ``vc+mdoc`` - This specification. - * - **Credential** - - It MUST contain the Credential to be revoked encoded according to the data format given in the ``Credential_format`` claim. + * - **credential** + - It MUST contain the Credential to be revoked encoded according to the data format given in the ``credential_format`` claim. - [:rfc:`7519`. Section 4.1.7]. @@ -350,7 +351,7 @@ The following diagram shows how the Wallet Instance MUST request a Non-Revocatio Host: pid-provider.example.org Content-Type: application/x-www-form-urlencoded - Credential_proof=$CredentialPoPJWT + credential_proof=$CredentialPoPJWT &client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-client-attestation &client_assertion=$WIA~WIA-PoP diff --git a/credential-revocation/en/revocation-lists.html b/credential-revocation/en/revocation-lists.html index 176cf8d8b..9f9fe8c51 100644 --- a/credential-revocation/en/revocation-lists.html +++ b/credential-revocation/en/revocation-lists.html @@ -1220,22 +1220,22 @@

Privacy Requirements

where a non-normative example of a Credential PoP is given by the following JWT headers and payload

-
{
-    "alg": "ES256",
-    "typ": "revocation-request+jwt",
-    "kid": "$WIA-CNF-JWKID"
+
{
+    "alg": "ES256",
+    "typ": "revocation-request+jwt",
+    "kid": $WIA-CNF-JWKID
 
-}
-.
-{
-    "iss": "0b434530-e151-4c40-98b7-74c75a5ef760",
-    "aud": "https://pid-provider.example.org/revoke",
-    "iat": 1698744039,
-    "exp": 1698744139,
-    "jti": "6f204f7e-e453-4dfd-814e-9d155319408c",
-    "format": "vc+sd-jwt",
-    "credential": "$Issuer-Signed-JWT"
-}
+}
+.
+{
+    "iss": "0b434530-e151-4c40-98b7-74c75a5ef760",
+    "aud": "https://pid-provider.example.org/revoke",
+    "iat": 1698744039,
+    "exp": 1698744139,
+    "jti": "6f204f7e-e453-4dfd-814e-9d155319408c",
+    "format": "vc+sd-jwt",
+    "credential": $Issuer-Signed-JWT
+}
 

 

 
Step 2 (PoP verification): The Issuer verifies the signature of the PoP JWTs using the public key that was attested in the Wallet Instance Attestation and the Credential. If the verification is successful, it means that the Wallet Instance owns the private keys associated with the Wallet Instance Attestation and Credential, and therefore is entitled to request its revocation.

@@ -1262,7 +1262,7 @@ 
Credential Revocation HTTP Request
Credential_proof

+
credential_proof

 
It MUST contain a JWT proof of possession of the cryptographic key the Credential to be revoked shall be bound to.

 
This specification

 
@@ -1338,12 +1338,12 @@ 
Credential Revocation HTTP RequestRFC 4122].

 
[RFC 7519. Section 4.1.7].

 
-
Credential_format

+
credential_format

 
The data format of the Credential to be revoked. It MUST be set to vc+sd-jwt or vc+mdoc

 
This specification.

 
-
Credential

-
It MUST contain the Credential to be revoked encoded according to the data format given in the Credential_format claim.

+
credential

+
It MUST contain the Credential to be revoked encoded according to the data format given in the credential_format claim.

 
[RFC 7519. Section 4.1.7].

 
 
@@ -1373,7 +1373,7 @@ 
Credential Revocation HTTP Response