Skip to content

Commit

Permalink
Merge pull request #88 from peppelinux/fixrefs
Browse files Browse the repository at this point in the history
fix: links and refs updated
  • Loading branch information
Giuseppe De Marco authored Oct 16, 2024
2 parents 839a945 + 6e172ff commit 939a76b
Showing 1 changed file with 10 additions and 15 deletions.
25 changes: 10 additions & 15 deletions draft-demarco-oauth-status-assertions.md
Original file line number Diff line number Diff line change
Expand Up @@ -52,11 +52,6 @@ normative:
org: "IANA"
title: "Media Types"
target: "https://www.iana.org/assignments/media-types/media-types.xhtml"
OpenID4VCI:
author:
org: "OpenID Foundation"
title: "OpenID for Verifiable Credential Issuance"
target: "https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html"
IANA.MediaTypes:
author:
org: "IANA"
Expand Down Expand Up @@ -92,7 +87,10 @@ informative:
GDPR:
title: GDPR
target: https://gdpr-info.eu/
SD-JWT.VC: I-D.ietf-oauth-sd-jwt-vc
SD-JWT.VC:
author:
title: "SD-JWT-based Verifiable Credentials (SD-JWT VC)"
target: "https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-05.html"
ISO.mdoc:
author:
org: "ISO/IEC JTC 1/SC 17"
Expand Down Expand Up @@ -179,7 +177,7 @@ This specification uses the terms "End-User", "Entity" as defined by
OpenID Connect Core [OpenID.Core], the term "JSON Web Token (JWT)"
defined by JSON Web Token (JWT) {{RFC7519}},
the term "CBOR Web Token (CWT)" defined in {{RFC8392}}, "Client" as
defined {{RFC6749}}, "Verifiable Presentation" defined in [@OpenID4VP].
defined {{RFC6749}}, "Verifiable Presentation" defined in [OpenID4VP].

Digital Credential:
: A set of one or more claims about a subject made by a Credential Issuer.
Expand Down Expand Up @@ -299,9 +297,7 @@ related to a specific Credential issued by the same Credential Issuer.

~~~ ascii-art
+-------------------+ +--------------------+
| | | |
| Wallet Instance | | Credential Issuer |
| | | |
+--------+----------+ +----------+---------+
| |
| HTTP POST /status |
Expand All @@ -312,25 +308,24 @@ related to a specific Credential issued by the same Credential Issuer.
<--------------------------------------------------------+
| |
+--------+----------+ +----------+---------+
| | | |
| Wallet Instance | | Credential Issuer |
| | | |
+-------------------+ +--------------------+
~~~

The Wallet Instance sends the Status Assertion request to the
Credential Issuer, where:

- The request MUST contain the base64url encoded hash value of the Digital Credential's
Issuer signed part, such as the Issuer Signed JWT using [@SD-JWT-VC],
or the Mobile Security Object using [@ISO 18013-5],
Issuer signed part, such as the Issuer Signed JWT using [SD-JWT.VC],
or the Mobile Security Object using [ISO.mdoc],
for which the Status Assertion is requested, and enveloped in a signed
Status Assertion Request object.
- The Status Assertion Request object MUST be signed with the private key corresponding
to the confirmation claim assigned by the Issuer and contained within
the Digital Credential.

The Status Assertion Request object MUST contain the parameters defined in the following table.
The Status Assertion Request object MUST contain the parameters defined
in the following table.

| Header | Description | Reference |
| --- | --- | --- |
Expand Down Expand Up @@ -453,7 +448,7 @@ as defined in [the section Status Error](#status-assertion-error).

For each entry in the `status_assertion_responses` array, the following requirements are met:
- Each element in the array MUST match the corresponding element in the request array at
the same position index to which it is related, eg: _[requestAboutA, requestAboutB]_ may produce _[responseAboutA, responseErrorAboutB]_.
the same position index to which it is related, eg: _\[requestAboutA, requestAboutB\]_ may produce _\[responseAboutA, responseErrorAboutB\]_.
- Each element MUST contain the error or the status of the assertion, using the `typ` member
set to "status-assertion+{jwt,cwt}" or "status-assertion-error+{jwt,cwt}", depending by the object type.
- The corresponding entry in the response MUST be of the same data format as requested. For example,
Expand Down

0 comments on commit 939a76b

Please sign in to comment.