diff --git a/index.html b/index.html index 74a2ed47..b45a43b7 100644 --- a/index.html +++ b/index.html @@ -129,7 +129,7 @@
iss
of the JWT signed the contained JWT payload and
+ iss
of the JWT signed the contained JWT Claims Set and
therefore, the proof
property can be omitted.
@@ -391,7 +391,7 @@ { "sub": "did:example:ebfeb1f712ebc6f1c276e12ec21", @@ -469,7 +469,7 @@JWT Decoding
{ "iss": "did:example:ebfeb1f712ebc6f1c276e12ec21", @@ -543,6 +543,112 @@JWT Decoding
++ +Production
+ ++ This section describes how to produce a VC-JWT encoded +
+ +VerifiableCredential
from aCredential
. ++ There are currently 2 competing solutions to this problem described below. It is a goal + of the v2 work to resolve them and + reduce production rules to a single, simple, set of instructions that + any implementer can easily meet if they possess a software library + supporting [[RFC7515]] or [[RFC7519]]. +
+ ++ + +In addition to...
+ ++ There are several members (claims) of the +
+ +Credential
which will need to be translated to their JOSE + form, and included next to thevc
or +vp
member in the JWT Claims Set. + We refer to the JWT Claims Set aspayload
in this section. ++ If a member is not present in the
+ +Credential
it MUST NOT + be present in theVerifiableCredential
as either a claim + in the payload or a claim in thevc
attribute of the + payload. ++ We start with an empty header, and payload objects, and we add members + to the header and the payload based on the content in the +
+ +Credential
. ++ + +issuer -> iss
+ ++ This member MUST be present in the +
+ +payload.vc.issuer
attribute as either a string or an +object
with andid
. +This member MUST be present
+ +payload.iss
.+ In the case that
+ +payload.vc.issuer
is an object, +payload.iss
MUST bepayload.vc.issuer.id
. ++ In the case that +
+payload.vc.issuer
is a string, +payload.iss
must be +payload.vc.issuer
++ + +issuanceDate -> nbf
+ ++ This member MUST be present in the +
+ +payload.vc.issuanceDate
attribute as an XMLDateTime + String. ++ This member MUST be present
+ +payload.nbf
as a unix + timestamp. ++ In the case that the
+issuanceDate
includes leap + seconds, it is not possible to detect them when the date time is + represented innbf
+This section needs to be defined.
+ ++ +issuance
+ ++ The header and payload converted into a JWT, in accorance with the + RFC: + RFC7519 Section 7.1 +
++ +Instead of...
+This section needs to be defined.
+Privacy Considerations