Skip to content

Commit

Permalink
fix!: alignments according to breaking changes introduced by openid4v…
Browse files Browse the repository at this point in the history
…ci I-D
  • Loading branch information
peppelinux committed Dec 28, 2023
1 parent 120c1f4 commit cd80152
Showing 1 changed file with 20 additions and 24 deletions.
44 changes: 20 additions & 24 deletions docs/en/pid-eaa-issuance.rst
Original file line number Diff line number Diff line change
Expand Up @@ -167,26 +167,23 @@ Below an non-normative example of the signed Request Object without encoding and
}
.
{
"iss": "$thumprint-of-the-jwk-in-the-cnf-wallet-attestation$",
"client_id": "$thumprint-of-the-jwk-in-the-cnf-wallet-attestation$",
"exp": 1672422065,
"iat": 1672418465,
"aud": "https://pid-provider.example.org/authorization-endpoint",
"jti": "ac80df576e7109686717bf50b869e882",
"response_type": "code",
"state": "fyZiOL9Lf2CeKuNT2JzxiLRDink0uPcd",
"code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
"code_challenge_method": "S256",
"authorization_details": [
{
"type": "openid_credential",
"format": "vc+sd-jwt",
"credential_definition": {
"type": ["PersonIdentificationData"]
}
}
],
"redirect_uri": "https://start.wallet.example.org/cb",
"iss":"$thumprint-of-the-jwk-in-the-cnf-wallet-attestation$",
"aud":"https://pid-provider.example.org",
"exp":1672422065,
"iat": 1672418465,
"jti":"ac80df576e7109686717bf50b869e882",
"response_type":"code",
"client_id":"$thumprint-of-the-jwk-in-the-cnf-wallet-attestation$",
"state":"fyZiOL9Lf2CeKuNT2JzxiLRDink0uPcd",
"code_challenge":"E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
"code_challenge_method":"S256",
"authorization_details":[
{
"type": "openid_credential",
"credential_configuration_id": "PersonIdentificationData"
}
],
"redirect_uri":"eudiw://start.wallet.example.org",
}
Expand Down Expand Up @@ -496,8 +493,7 @@ The JWT payload is given by the following parameters:
- Array of JSON Objects. Each JSON Object MUST include the following claims:

- **type**: it MUST be set to ``openid_credential``,
- **format**: it MUST be set to ``vc+sd-jwt``,
- **credential_definition**: JSON Object. It MUST have the **type** claim which MUST be set in accordance to the type of the requested PID/(Q)EAA that is obtained from the metadata of the PID/(Q)EAA Issuer. For example, in the case of the PID, it MUST be set to ``PersonIdentificationData``.
- **credential_configuration_id**: JSON String. String specifying a unique identifier of the Credential being described in the `credential_configurations_supported` map in the Credential Issuer Metadata. For example, in the case of the PID, it MUST be set to ``PersonIdentificationData``.
- See [RAR :rfc:`9396`] and `[OIDC4VCI. Draft 13] <https://openid.bitbucket.io/connect/openid-4-verifiable-credential-issuance-1_0.html>`_.
* - **redirect_uri**
- Redirection URI to which the response is intended to be sent. It MUST be an universal or app link registered with the local operating system, so this latter will provide the response to the Wallet Instance.
Expand Down Expand Up @@ -952,8 +948,8 @@ Below is a non-normative example of an Entity Configuration containing an `openi
"kid": "ff0bded045fe63fe5d1d64dd83b567e0"
}]
}
"credentials_supported": {
"PersonIdentificationData": {
"credential_configurations_supported": [
{
"format": "vc+sd-jwt",
"cryptographic_binding_methods_supported": ["jwk"],
"cryptographic_suites_supported": ["RS256", "RS512", "ES256", "ES512"],
Expand Down

0 comments on commit cd80152

Please sign in to comment.