v0.2.0

Added

• (resolver) [breaking] add KeyReference, KeyRole and generic KeyResolver (#74)
• (vc) [breaking] replace SdJwtStatusCheck with one StatusCheck over CredentialStatus (#73)
• (identity) add Identity trait, IdentityKind, Identifier and KeyStoreIdentity (#71)
• (jose) add ecdsa_signature_from_der and normalize_ecdsa_signature (#64)
• (jose) add Jwk::from_pkcs1_der and to_pkcs1_der (#70)
• (keys) [breaking] make KeySigner generic over store handle, add from_public_jwk (#63)
• (vc) move ClaimPath out of sd-jwt feature, add utoipa schema (#66)
• (jose) move JwtClaims and OneOrMany to jose, add CompactJws::claims (#65)
• (keys) add Pkcs11KeyStore over cryptoki, tested against SoftHSM2 (#48)
• (did) add DidMethod (method name with optional namespace) (#59)
• (methods) add local-network opt-in for ReqwestClient (#47)
• (sd-jwt) [breaking] add VCDM 2.0 credentials secured with SD-JWT (vc+sd-jwt) (#58)
• (linked-vp, domain-linkage) cap URLs fetched and credentials validated per document (#46)
• (domain-linkage) fetch DID configurations through HttpClient (#44)
• (vc) validate VCDM 2.0 presentations (vp+jwt) (#43)
• (linked-vp) add DIF Linked Verifiable Presentation (#42)
• (methods) [breaking] create did:jwk in JCS canonical form (RFC 8785) (#40)
• (did) [breaking] include cause of failed resolution in ResolutionError (#39)

Dependencies

• (deps) [breaking] bump jsonwebtoken to 11, bump base64 to 0.23 (#33)

Documentation

• (jose) ES256 verification accepts high-S signatures (#87)

Fixed

• (vc) refuse SD-JWT payloads in JWT validators (#85)
• (methods) ReqwestClient::new uses no proxy (#84)
• (jose) reject RSA keys shorter than 2048 bits (#83)
• (sd-jwt) limit nesting depth in SdJwt::process (#82)
• (keys) destroy both PKCS#11 objects when delete fails on one (#60)