[SIOP] Use references to verification methods instead public keys in DID validation

decentralized-identity / papers

Notes, ideas, and write-ups from DIF members and collaborators

Apache License 2.0

40 stars 7 forks source link

[SIOP] Use references to verification methods instead public keys in DID validation #33

Closed awoie closed 4 years ago

awoie commented 4 years ago

In some sections, the document refers public keys instead of verification methods. While public keys are required to verify a JWS, DID AuthN validation on the request object and the id_token should not have this limitation to support DID methods that don't return public keys in their DID Document.