search

sebadob / rauthy

OpenID Connect Single Sign-On Identity & Access Management
https://sebadob.github.io/rauthy/
Apache License 2.0
286 stars 14 forks source link

Support W3C DID #511

Closed MarcAntoine-Arnaud closed 4 weeks ago

MarcAntoine-Arnaud commented 1 month ago

Hi,

Do you think it may possible to add support of W3C DID and include DID-Web and if possible DID peer

Thank you,

sebadob commented 1 month ago

Hey,

since I never worked with DIDs before or have any use for them, could you please explain what you mean with support for them, which is pretty generic?
What is your desired outcome, what purpose should something like this serve, so I can understand it better?

MarcAntoine-Arnaud commented 1 month ago

Hi,

That can make sense, it's used for dataspace. I'm quite new into it, but it's relevant for our project as partner of TEMS.

Some documentation is provided by Eclipse foundation here

I have found also relevant information here And a technical page here

So one first question is the valuation of the complexity to handle that standard and be compliant as IdentityHub in a dataspace ecosystem.

Regards, Marc-Antoine

sebadob commented 1 month ago

I took at look at the RFC, but I still don't get it what you want to achieve with them in the combination with Rauthy, what purpose should they fulfill?

Should they serve the current JWKS from the OIDC spec as DID's, or do you want user information as DIDs, kind of like the current webid feature?

I got it what DID's are, but not how you want to use them with Rauthy, in which context. I need to know the bigger picture.

From the RFC:

A DID refers to any subject (e.g., a person, organization, thing, data model, abstract entity, etc.) as determined by the controller of the DID.

So, they can be anything. What do you expect them to be in combination with Rauthy?