search

openid / OpenID4VP

47 stars 12 forks source link

`vct` matching in credential queries #193

Open danielfett opened 1 month ago

danielfett commented 1 month ago

This comment highlighted a problem that we have not addressed explicitly in OpenID4VP yet:

The hierarchy idea behind VCTs doesn't translate well into presentation exchange. PE does string matching, but with SD-JWT VC, what we want is that a request for (or offer of) a credential of type X can lead to a response containing type Y if Y inherits from X. PE only does string matching, which is not sufficient here. For the new query language, this can be solved easily - it would just be defined that way for the format vc+sd-jwt.

Another way could be to define this as a processing rule within the SD-JWT VC.

awoie commented 1 month ago

Another way could be to define this as a processing rule within the SD-JWT VC.

I think this is also what was done for ISO mdocs. I would be fine with this.

Sakurann commented 1 month ago

Another way could be to define this as a processing rule within the SD-JWT VC.

I think this is also what was done for ISO mdocs. I would be fine with this.

+1 to Oliver.

c2bo commented 1 month ago

Another way could be to define this as a processing rule within the SD-JWT VC.

I think this is also what was done for ISO mdocs. I would be fine with this.

+1 to Oliver.

Sounds reasonable; +1