mattrglobal / oidc-portable-identities

oidc-portable-identities
https://mattrglobal.github.io/oidc-portable-identities/
3 stars 3 forks source link

sub_jwk when sub is DID #8

Open Sakurann opened 3 years ago

Sakurann commented 3 years ago

Have we agreed to remove sub_jwk? It is not necessary when sub is the DID - would also significantly reduce the complexity of producing the token in that case. But it is needed when sub is jwk thumbprint. Can sub_jwk be must for jwk thumbprint and optional for dids some might want to compare whether verification method from the DID Document matches the kid of sub_jwk, but it's not a must I believe.