oauth-wg / oauth-sd-jwt-vc

draft-terbu-sd-jwt-vc

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Presentation should be a plain JWT if no _sd claims are present

awoie opened this issue · comments

If the SD-JWT VC contains no _sd claims and therefore can be represented as a plain JWT, no trailing tilde should be necessary for presentations.

Current direction is to base credentials without Selective Disclosures on SD-JWT VC and not JWT, so it is an SD-JWT without _sd and disclosures, and not a JWT.

Yes, that is the current direction but my point is that we should potentially change that. The reason is that it is awkward if developers cannot use standard JWT libs for verification and creation without adding/removing the tilde first.

My points towards the current approach solving everything with SD-JWT and keeping the tilde:

  • the specification is much cleaner
  • I expect implementations to be much cleaner
  • I don't see confusion with trailing tilde, because typ is not jwt but sd-jwt
  • most interop profiles will require SD support anyway

@paulbastian you don't see a problem with developers not being able to use standard JWT libs for creating and verifying plain JWT VCs?

Current approach is fine but we should speak with SD-JWT spec authors on removing the tilde.