-
Notifications
You must be signed in to change notification settings - Fork 14
Pb/all examples #350
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Pb/all examples #350
Changes from all commits
Commits
Show all changes
5 commits
Select commit
Hold shift + click to select a range
2ebffcb
change SD-JWT VC reference to SD-JWT
paulbastian ab43761
Update draft-ietf-oauth-status-list.md
paulbastian 63af06f
removed other mentions of SD-JWT VC
paulbastian e64b990
add references to SD-JWT VC and SD-CWT
paulbastian fda503e
Merge branch 'main' into pb/all_examples
paulbastian File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Some comments aren't visible on the classic Files Changed page.
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||||
|---|---|---|---|---|---|---|---|---|
|
|
@@ -74,6 +74,8 @@ informative: | |||||||
| RFC8414: RFC8414 | ||||||||
| RFC9458: RFC9458 | ||||||||
| RFC9901: RFC9901 | ||||||||
| SD-JWT.VC: I-D.ietf-oauth-sd-jwt-vc | ||||||||
| SD-CWT: I-D.ietf-spice-sd-cwt | ||||||||
| IANA.MediaTypes: | ||||||||
| author: | ||||||||
| org: "IANA" | ||||||||
|
|
@@ -135,7 +137,7 @@ This specification defines a status mechanism called Token Status List (TSL), da | |||||||
|
|
||||||||
| # Introduction | ||||||||
|
|
||||||||
| Token formats secured by JOSE {{RFC7515}} or COSE {{RFC9052}}, such as JWTs {{RFC7519}}, SD-JWTs {{RFC9901}, CWTs {{RFC8392}} and ISO mdoc {{ISO.mdoc}}, have vast possible applications. Some of these applications can involve issuing a token whereby certain semantics about the token or its validity may change over time. Communicating these changes to relying parties in an interoperable manner, such as whether the token is considered invalidated or suspended by its issuer is important for many of these applications. | ||||||||
| Token formats secured by JOSE {{RFC7515}} or COSE {{RFC9052}}, such as JWTs {{RFC7519}}, SD-JWTs {{RFC9901}, SD-JWT VCs {{SD-JWT.VC}}, CWTs {{RFC8392}}, SD-CWTs {{SD-CWT}} and ISO mdoc {{ISO.mdoc}}, have vast possible applications. Some of these applications can involve issuing a token whereby certain semantics about the token or its validity may change over time. Communicating these changes to relying parties in an interoperable manner, such as whether the token is considered invalidated or suspended by its issuer is important for many of these applications. | ||||||||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||
|
|
||||||||
| This document defines a Status List data structure that describes the individual statuses of multiple Referenced Tokens. A Referenced Token may be of any format, but is most commonly a data structure secured by JOSE or COSE. The Referenced Token is referenced by the Status List, which describes the status of the Referenced Token. The statuses of all Referenced Tokens are conveyed via a bit array in the Status List. Each Referenced Token is allocated an index during issuance that represents its position within this bit array. The value of the bit(s) at this index corresponds to the Referenced Token's status. A Status List is provided within a Status List Token protected by cryptographic signature or MAC and this document defines its representations in JWT and CWT format. | ||||||||
|
|
||||||||
|
|
@@ -488,7 +490,7 @@ By including a "status" claim in a Referenced Token, the Issuer is referencing a | |||||||
|
|
||||||||
| ## Referenced Token in JOSE {#referenced-token-jose} | ||||||||
|
|
||||||||
| The Referenced Token MAY be encoded as a "JSON Web Token (JWT)" according to {{RFC7519}} or other formats based on JOSE. | ||||||||
| The Referenced Token MAY be encoded as a "JSON Web Token (JWT)" according to {{RFC7519}}, as an SD-JWTs {{RFC9901}, as an SD-JWT VCs {{SD-JWT.VC}} or other formats based on JOSE. | ||||||||
|
|
||||||||
| The following content applies to the JWT Claims Set: | ||||||||
|
|
||||||||
|
|
@@ -518,7 +520,7 @@ The following is a non-normative example of a decoded header and payload of a Re | |||||||
| } | ||||||||
| ~~~ | ||||||||
|
|
||||||||
| Also SD-JWTs defined in {{RFC9901}} may utilize the status mechanism defined in this section and can be considered a Referenced Token. The following is a non-normative example of a Referenced Token in SD-JWT serialized form as received from an Issuer: | ||||||||
| The following is a non-normative example of a Referenced Token in SD-JWT serialized form as received from an Issuer: | ||||||||
|
|
||||||||
| ~~~ ascii-art | ||||||||
|
|
||||||||
|
|
@@ -565,7 +567,7 @@ The resulting payload of the example above: | |||||||
|
|
||||||||
| ## Referenced Token in COSE {#referenced-token-cose} | ||||||||
|
|
||||||||
| The Referenced Token MAY be encoded as a "CBOR Web Token (CWT)" object according to {{RFC8392}}, as an ISO mdoc according to {{ISO.mdoc}} or other formats based on COSE. Referenced Tokens in CBOR should share the same core data structure for a status list reference: | ||||||||
| The Referenced Token MAY be encoded as a "CBOR Web Token (CWT)" object according to {{RFC8392}}, as an SD-CWTs {{SD-CWT}} or as an ISO mdoc according to {{ISO.mdoc}} or other formats based on COSE. Referenced Tokens in CBOR should share the same core data structure for a status list reference: | ||||||||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||
|
|
||||||||
| * The `Status` CBOR structure is a Map that MUST include at least one data item that refers to a status mechanism. Each data item in the `Status` CBOR structure comprises a key-value pair, where the key must be a CBOR text string (major type 3) specifying the identifier of the status mechanism and the corresponding value defines its contents. | ||||||||
| * `status_list` (status list): REQUIRED when the status mechanism defined in this specification is used. It has the same definition as the `status_list` claim in [](#referenced-token-jose) but MUST be encoded as a `StatusListInfo` CBOR structure with the following fields: | ||||||||
|
|
@@ -1821,6 +1823,10 @@ CBOR encoding: | |||||||
|
|
||||||||
| \[\[ To be removed from the final specification \]\] | ||||||||
|
|
||||||||
| -18 | ||||||||
|
|
||||||||
| * add references to SD-JWT VC and SD-CWT | ||||||||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||
|
|
||||||||
| -17 | ||||||||
|
|
||||||||
| * change SD-JWT VC reference to SD-JWT | ||||||||
|
|
||||||||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.