Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: add recommedation about public key used in the jwt proof #267

Merged
merged 5 commits into from
May 10, 2024
Merged

chore: add recommedation about public key used in the jwt proof #267

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
9c0e6bd
chore: add recommedation about public key used in the jwt proof
peppelinux Apr 16, 2024
0d6aa2f
Update docs/en/pid-eaa-issuance.rst
peppelinux Apr 16, 2024
f866709
Update docs/en/pid-eaa-issuance.rst
peppelinux Apr 16, 2024
2d62c56
fix: remove DPoP / jwt proof binding
peppelinux Apr 19, 2024
82548a2
Mart Aarma added in the acknowledgments section
peppelinux Apr 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions docs/en/pid-eaa-issuance.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -322,6 +322,10 @@ The ``client_assertion`` is signed using the private key that is created during

**PID/(Q)EAA Credential Schema and Status registration:** The PID/(Q)EAA Provider MUST register all the issued Credentials for their later revocation, if needed.

peppelinux marked this conversation as resolved.
Show resolved Hide resolved
.. note::

**It is RECOMMENDED that the public key contained in the ``jwt_proof`` be specifically generated for the requested Credential (fresh cryptographic key) to ensure that different issued Credentials do not share the same public key, thereby remaining unlinkable to each other.
peppelinux marked this conversation as resolved.
Show resolved Hide resolved

.. code-block::

POST /credential HTTP/1.1
Expand Down
Loading