Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Editorial change in Wallet Solution 'alg' HEADER #286

Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
82 changes: 35 additions & 47 deletions docs/en/wallet-solution.rst
Original file line number Diff line number Diff line change
Expand Up @@ -84,56 +84,44 @@ The returning Entity Configuration of the Wallet Provider MUST contain the
attributes listed below:

Header
^^^^^^
+---------+-----------------------------------------------------------------+
| **Key** | **Value** |
+---------+-----------------------------------------------------------------+
| alg | Algorithm used to verify the token signature (e.g., ES256). |
+---------+-----------------------------------------------------------------+
| kid | Thumbprint of the public key used for signing. |
+---------+-----------------------------------------------------------------+
| typ | Media type, set to ``entity-statement+jwt``. |
+---------+-----------------------------------------------------------------+
^^^^^^^
.. list-table::
:widths: 20 80
:header-rows: 1

* - **Key**
- **Value**
* - alg
- Algorithm used to verify the token signature. It MUST be one of the possibile values indicated in this `table <https://italia.github.io/eudi-wallet-it-docs/versione-corrente/en/algorithms.html>`_ (e.g., ES256).
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- Algorithm used to verify the token signature. It MUST be one of the possibile values indicated in this `table <https://italia.github.io/eudi-wallet-it-docs/versione-corrente/en/algorithms.html>`_ (e.g., ES256).
- Algorithm used to verify the token signature. It MUST be one of the values included in this `table <https://italia.github.io/eudi-wallet-it-docs/versione-corrente/en/algorithms.html>`_ (e.g., ES256).

* - kid
- Thumbprint of the public key used for signing, according to :ref:`rfc7638`.
* - typ
- Media type, set to ``entity-statement+jwt``.


Payload
^^^^^^^
+-----------------------------------+-----------------------------------+
| **Key** | **Value** |
+-----------------------------------+-----------------------------------+
| iss | Public URL of the Wallet |
| | Provider. |
+-----------------------------------+-----------------------------------+
| sub | Public URL of the Wallet |
| | Provider. |
+-----------------------------------+-----------------------------------+
| iat | Issuance datetime in |
| | Unix Timestamp format. |
+-----------------------------------+-----------------------------------+
| exp | Expiration datetime |
| | in Unix Timestamp format. |
+-----------------------------------+-----------------------------------+
| authority_hints | Array of URLs (String) containing |
| | the list of URLs of the |
| | immediate superior Entities, such |
| | as the Trust Anchor or an |
| | Intermediate, that MAY issue an |
| | Entity Statement related to this |
| | subject. |
+-----------------------------------+-----------------------------------+
| jwks | A JSON Web Key Set (JWKS) `RFC |
| | 7517 <http://tools.ietf.org/html |
| | rfc7517.html>`_ |
| | that represents the public part |
| | of the signing keys of the Entity |
| | at issue. Each JWK in the JWK set |
| | MUST have a key ID (claim kid). |
+-----------------------------------+-----------------------------------+
| metadata | Contains the |
| | metadata |
| | ``wallet_provider`` |
| | and the |
| | ``federation_entity`` metadata. |
+-----------------------------------+-----------------------------------+
.. list-table::
:widths: 20 80
:header-rows: 1

* - **Key**
- **Value**
* - iss
- Public URL of the Wallet Provider.
* - sub
- Public URL of the Wallet Provider.
* - iat
- Issuance datetime in Unix Timestamp format.
* - exp
- Expiration datetime in Unix Timestamp format.
* - authority_hints
- Array of URLs (String) containing the list of URLs of the immediate superior Entities, such as the Trust Anchor or an Intermediate, that MAY issue an Entity Statement related to this subject.
* - jwks
- A JSON Web Key Set (JWKS) `RFC 7517 <http://tools.ietf.org/html rfc7517.html>`_ that represents the public part of the signing keys of the Entity at issue. Each JWK in the JWK set MUST have a key ID (claim kid).
* - metadata
- Contains the metadata ``wallet_provider`` and the ``federation_entity`` metadata.


`wallet_provider` metadata
~~~~~~~~~~~~~~~~~~~~~~~~~~
Expand Down
Loading