Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Composing JWT documents #2

Closed
msporny opened this issue Nov 28, 2016 · 2 comments
Closed

Composing JWT documents #2

msporny opened this issue Nov 28, 2016 · 2 comments
Labels
security-tracker Group bringing to attention of security, or tracked by the security Group but not needing response.

Comments

@msporny
Copy link
Member

msporny commented Nov 28, 2016

What is the data model for composing JWT documents. For Linked Data Signatures, the approach utilizes a graph-based data model to "merge" the data together. Is this same approach valid for JWT-signed data? Do we assume a graph-based data model and merge using the same rules, ignoring the JSON tree structure? Or do we have to specify how different JWT documents are merged together? We need examples of how this is done.

@msporny msporny added the security-tracker Group bringing to attention of security, or tracked by the security Group but not needing response. label Nov 28, 2016
@dlongley
Copy link
Contributor

Do we assume a graph-based data model and merge using the same rules, ignoring the JSON tree structure?

Yes, I think this is what we do. We define a single point (or JWT claim) as an entry point for placing JSON-LD data. This is the simplest solution.

@msporny
Copy link
Member Author

msporny commented Feb 13, 2018

No one has worked on this issue. I suggest we close it.

The latest RsaSignature2018 cryptography suite supports JOSE JWS-style signatures: digitalbazaar/jsonld-signatures@f583bd4

Given that no one in the group has written a JWT-based VC implementation, I'm suggesting that we close this issue for the 1.0 work. We can always support JWT-based VCs later if someone decides to write a spec encapsulating VCs in JWTs.

Notice: Closing this issue on or after 2018-2-20.

jasonalaw referenced this issue in sovrin-foundation/vc-data-model May 23, 2018
msporny pushed a commit that referenced this issue Dec 12, 2018
Bring my fork up to date
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security-tracker Group bringing to attention of security, or tracked by the security Group but not needing response.
Projects
None yet
Development

No branches or pull requests

2 participants