hyperledger / identus-docs

Documentation website for the Identus Platform
Apache License 2.0
8 stars 1 forks source link

Difference between JWT and 'JWT' #106

Open FabioPinheiro opened 1 month ago

FabioPinheiro commented 1 month ago

JWT is something very specific and well-documented: RFC 7519 - JSON Web Token (JWT)

Although we start talking about verifiable credentials on top of JWT. We call it JWT...

Most of the specifications online call it "Verifiable Credentials JWT" or VC-JWT https://identity.foundation/jwt-vc-presentation-profile/

Now we are adding SD-JWT as another Credential type. Stands for SD selective-disclosure https://datatracker.ietf.org/doc/draft-ietf-oauth-selective-disclosure-jwt/

I was reading the documentation website and saw the term JWT is missing from the glossary, which doesn't help. https://docs.atalaprism.io/docs/concepts/glossary But my main concern is that we are using the 'JWT' with both meanings without being explicit about it. When talking about Keycloak and apikey authentication the term is JWT is referring to the JSON Web Token and not of the verifiable credential (as most of the document). https://docs.atalaprism.io/tutorials/multitenancy/tenant-migration

I would like to ask again to refine those terms. Because I get sometimes confuse knowing all the Lore of the terms in Atala. I can only imagine someone from outside.