openwallet-foundation / sd-jwt-js

A JavaScript implementation of the Selective Disclosure JWT (SD-JWT) spec.
https://sdjwt.js.org/
Apache License 2.0
44 stars 13 forks source link

Not being able to fetch type metadata should not fail verification? #258

Open TimoGlastra opened 4 days ago

TimoGlastra commented 4 days ago

As I understand the SD-JWT VC specification, the vct CAN be used to represent the type metadata URL, but i don't think it's invalid to use https:// uri for vct and not host type metadata?

Also the error message is the response of the VCT, which can be confusing. Instead of using response.text() as the error message, maybe it should be Error fetching type metadata. ${await response.text()}?