search

oauth-wg / oauth-sd-jwt-vc

draft-terbu-sd-jwt-vc
Creative Commons Zero v1.0 Universal
20 stars 12 forks source link

Claim 'vct' is missing in Type Metadata Format #241

Open jtalir opened 4 months ago

jtalir commented 4 months ago

I'm not sure why 'vct' is not (as REQUIRED) in 6.2 Type Metadata Format. Is it bug or is this some sort of implicit? It is in the 6.1. Type Metadata Example and also it is twice referenced in 6.3.5 From Type Metadata Glue Documents: "the Consumer MUST ensure that the vct claim in the credential matches the one in the Type Metadata document" and "the Consumer MUST ensure that the value of the extends property in the Type Metadata document matches that of the vct in the Type Metadata document"

bc-pi commented 3 months ago

This does seem like an oversight but I'll defer to @danielfett to ask if there was a reason behind the omission or if vct needs to be added to that section https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-04.html#name-type-metadata-format