search

oauth-wg / oauth-selective-disclosure-jwt

https://datatracker.ietf.org/doc/draft-ietf-oauth-selective-disclosure-jwt/
Other
57 stars 31 forks source link

Indicate that "claims" refers either to object properties (name/value pairs) and to array elements #483

Closed Denisthemalice closed 2 weeks ago

Denisthemalice commented 2 weeks ago

In the introduction, it is also important to mention that "claims" refers both to object properties (name/value pairs) and to array elements. The current text does not mention it.

Replace by:

When requesting a digital credential to an Issuer, the End-User using his Holder CAN ask the Issuer to include a set of claims while obfuscating other claims. "Claims" here refers both to object properties (name/value pairs) and to array elements. The Issuer then produces two elements:

  • a SD-JWT that contains both regular claims and digests of selectively-disclosable claims,

  • a set of regular claims for the selectively-disclosable claims.

The resulting structure is called: SD-JWT + All. Claims