transmute-industries / vc-jwt-sd Goto Github PK

Hi.
Thank you for the great work.

Did you check, or do you know, the impact of RDF/normalisation processing?
Should we expect any difference if we strip that away (for pedagogical purposes)?

audience can be an array of strings.

Do iat and exp get checked in the verify process? Afaik. they don't. The proposed verifier uses jose.compactVerify(jws, publicKey); which does not check on the dates. Neither this is done for validFrom and validUntil.

Is the user supposed to do these checks? because i tested expired credentials and they verified.

it should be possible init an holder, issuer, verifier, without setting an algorithm, this supports the case where the algorihm is assigned by a remote signer.

move all the W3C stuff to another repo.

need to fix so it can run in web browser.

When doing import SD from '@transmute/vc-jwt-sd' the default export returns an object like so {default: SD}

the current import into an ES2022 module can only be done like so:

import SD from '@transmute/vc-jwt-sd';
const vcjwtsd = (SD as any).default;