-
Notifications
You must be signed in to change notification settings - Fork 21
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Revocation and Status Assertions flows reviewed #308
Revocation and Status Assertions flows reviewed #308
Conversation
docs/en/revocation-lists.rst
Outdated
"jti": "6f204f7e-e453-4dfd-814e-9d155319408c" | ||
"credential_hash": $CREDENTIAL-HASH, | ||
"credential_hash_alg": "sha-256", | ||
"msg": "Revoked" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
msg?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@SaraConsoliACN please, as discussed during our editor call, provide another parameter name with a good semantic
docs/en/revocation-lists.rst
Outdated
* - **msg** | ||
- Message returned from the Credential Issuer after revocation. It MUST be set with the value "OK". | ||
- This specification. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
????
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this msg is not defined in the status assertion draft.
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
docs/en/revocation-lists.rst
Outdated
* - **credential_pop** | ||
- It MUST contain a JWT proof of possession of the cryptographic key the Credential to be revoked shall be bound to. See Section :ref:`Credential Proof of Possession <sec_revocation_credential_pop>` for more details. | ||
- `[OAuth Status Attestation draft 01] <https://datatracker.ietf.org/doc/draft-demarco-status-attestations/01/>`_ | ||
* - **revocation_assertion_requests** |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this parameter name must be changed
the scope of the request is to request the revocation of credentials or wallet instance attestations
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
the parameter name is changed with revocation_requests
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
this PR must cover the wallet instance revocation request use case and the pid provider revocation request use case |
docs/en/revocation-lists.rst
Outdated
"jti": "6f204f7e-e453-4dfd-814e-9d155319408c" | ||
"credential_hash": $CREDENTIAL-HASH, | ||
"credential_hash_alg": "sha-256", | ||
"msg": "Revoked" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@SaraConsoliACN please, as discussed during our editor call, provide another parameter name with a good semantic
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
@peppelinux @SaraConsoliACN, I made last commits to align with the current draft of status assertion, as a note credential status validity is still in a PR and is not included in the draft 2 yet. |
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
RFC 7519 reference retained only in the standards.rst file.
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
fixes #265 |
Title
Revocation and Status Attestation flows reviewed
Content
Content review based on the new version of the specifications defined in https://github.com/peppelinux/draft-demarco-oauth-status-attestations
resolve #265