Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for OIDC4VC standards #613

Open
piraces opened this issue Dec 29, 2023 · 0 comments
Open

Support for OIDC4VC standards #613

piraces opened this issue Dec 29, 2023 · 0 comments

Comments

@piraces
Copy link

piraces commented Dec 29, 2023

Is your feature request related to a problem? Please describe.

It's not related to a problem. More related to the set of emergent standards that are being activelly developed for handling Verifiable Credentials.

OpenID Foundation is developing a set of standards for handling verifiable credentials. They are being developed under the name OIDC4VC - OpenId Connect for Verifiable Credentials, and they include standards for issuing and presenting credentials under what is called the issuer-holder-verifier model, which attempts to avoid IDPs auditing every authentication by users.

Those standars are still emergent, but they are likely to get great adoption due to being required for certain use cases by EU eIDAS v2: European Digital Identity Architecture and Reference Framework.

Describe the solution you'd like

Since authlib implements other standards from the OpenID Foundation, facilitating the integration of systems accepting those novel authentication and attestation exchange methods would be ideal.

Describe alternatives you've considered

There are already some implementations listed here. Microsoft is also working in a set of services under its Microsoft Entra Verified Id "product".

In the Ory Hydra project they have also made some related developments and plan to keep going to support this novel standards.

In the demos mentioned above, novel standards are integrated with existing IAMs (Keycloak) via OIDC standard methods, and new services are in charge of issuing and verifying credentials according to novel standards. But that adds an integration step that could be avoided if OIDC implementors (isolated or included in IDPs) implement and accept those standards.

Additional context

N/A

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants