v0.2.2

Added

• (sd-jwt) serialize StatusType (#103)

v0.2.1

Added

• (vc) check status claim of JWT credentials (#94)

Documentation

• state vulnerability response time, test policy and bug reporting (#91)

v0.2.0

Added

• (resolver) [breaking] add KeyReference, KeyRole and generic KeyResolver (#74)
• (vc) [breaking] replace SdJwtStatusCheck with one StatusCheck over CredentialStatus (#73)
• (identity) add Identity trait, IdentityKind, Identifier and KeyStoreIdentity (#71)
• (jose) add ecdsa_signature_from_der and normalize_ecdsa_signature (#64)
• (jose) add Jwk::from_pkcs1_der and to_pkcs1_der (#70)
• (keys) [breaking] make KeySigner generic over store handle, add from_public_jwk (#63)
• (vc) move ClaimPath out of sd-jwt feature, add utoipa schema (#66)
• (jose) move JwtClaims and OneOrMany to jose, add CompactJws::claims (#65)
• (keys) add Pkcs11KeyStore over cryptoki, tested against SoftHSM2 (#48)
• (did) add DidMethod (method name with optional namespace) (#59)
• (methods) add local-network opt-in for ReqwestClient (#47)
• (sd-jwt) [breaking] add VCDM 2.0 credentials secured with SD-JWT (vc+sd-jwt) (#58)
• (linked-vp, domain-linkage) cap URLs fetched and credentials validated per document (#46)
• (domain-linkage) fetch DID configurations through HttpClient (#44)
• (vc) validate VCDM 2.0 presentations (vp+jwt) (#43)
• (linked-vp) add DIF Linked Verifiable Presentation (#42)
• (methods) [breaking] create did:jwk in JCS canonical form (RFC 8785) (#40)
• (did) [breaking] include cause of failed resolution in ResolutionError (#39)

Dependencies

• (deps) [breaking] bump jsonwebtoken to 11, bump base64 to 0.23 (#33)

Documentation

• (jose) ES256 verification accepts high-S signatures (#87)

Fixed

• (vc) refuse SD-JWT payloads in JWT validators (#85)
• (methods) ReqwestClient::new uses no proxy (#84)
• (jose) reject RSA keys shorter than 2048 bits (#83)
• (sd-jwt) limit nesting depth in SdJwt::process (#82)
• (keys) destroy both PKCS#11 objects when delete fails on one (#60)

v0.1.0

Added

• add OpenAPI schemas, preludes and test vectors (#29)
• (sd-jwt) add sd_jwt_vc and domain_linkage modules (#26)
• (vc) add VCDM 1.1 JWT profile, VCDM 2.0 envelopes and validators (#25)
• (methods) add did:key, did:jwk and did:web methods (#24)
• (keys) add KeyStore trait, KeySigner, in-memory and software backends (#21)
• (resolver) add DidResolver, DidProducer, Resolver registry, cache and dereferencing (#22)
• (did) add DidDocument, VerificationMethod, Service and resolution types (#20)
• (jose) add Jwk, JwsAlgorithm, JwsVerifier and compact JWS (#19)
• (did) add Did and DidUrl types (#4)

Documentation

• add feature checklist and move release process to docs/RELEASE.md (#18)

Fixed

• [breaking] add cargo-fuzz targets and fix detected flaws (#27)
• (jose) reject RSA signatures that are not modulus-sized (#23)

Other

• [breaking] raise MSRV to 1.95 under a six-month policy (#31)

v0.0.2

Changed

• identity-kit is now a library crate; 0.0.1 was a placeholder binary

Documentation

• describe release process in README (#3)
• add security policy, contributing guide and code owners