VC-JWT examples are out-of-date

[vincentkelleher]

Hi again 👋

While reading the Verifiable Credentials Data Model v2.0 specification and the Securing Verifiable Credentials using JOSE and COSE specification, I've noticed discrepancies about VC-JWT encoding.

If I understand well (after reading some issues, discussions and PRs) the latter specification is the new reference for VC-JWT encoding. It states the following sentence in the JOSE Header and JWT Claims part:

The JWT Claim Names vc and vp MUST NOT be present.

Looking at Example 3 of the VC Data Model v2.0 specification, I noticed that the vc claim is used.

I imagine this is an outdated example ? If so, here are the parts of the specification that need to be updated:

• https://w3c.github.io/vc-data-model/#example-usage-of-the-id-property
• https://w3c.github.io/vc-data-model/#example-usage-of-the-type-property
• https://w3c.github.io/vc-data-model/#example-usage-of-the-name-and-description-property
• https://w3c.github.io/vc-data-model/#example-usage-of-the-credentialsubject-property
• https://w3c.github.io/vc-data-model/#example-usage-of-issuer-property
• https://w3c.github.io/vc-data-model/#example-usage-of-issuer-expanded-property
• https://w3c.github.io/vc-data-model/#example-usage-of-validfrom-and-validuntil-property
• https://w3c.github.io/vc-data-model/#example-a-simple-credential
• https://w3c.github.io/vc-data-model/#example-usage-of-issuer-properties

[msporny]

Yes, we need to fix this. We finally updated the version of respec-vc to use the new code base, we need to update the vc-jose-cose portions of that code base now.

[decentralgabe]

I will take an action to update respec-vc.

[iherman]

The issue was discussed in a meeting on 2024-05-29

• no resolutions were taken

View the transcript

5.3. VC-JWT examples are out-of-date (issue vc-data-model#1485)

See github issue vc-data-model#1485.

Brent Zundel: VC JWT examples are out of date.

Manu Sporny: good news is we released a new version of respec-vc.
… but the new jose/cose stuff is not in there yet.
… it should be a copy/paste into respec-vc.
… or decentralgabe can send a PR there.

Gabe Cohen: it's on my list.
… and given the update to remove YAML from the jose/cose spec, it should be simpler to do now.

Manu Sporny: just to make sure we're aligned, what are you planning to implement?
… SD-JWT, JOSE, COSE, something else?

Gabe Cohen: I was going to do all 3, but not automatically render them.
… I'll put up a PR.
… I'd prefer to start by fixing what is currently labelled VC-JWT.

Manu Sporny: you can pick which tabs to show per example.

Brent Zundel: with that, we are out of time.
… great consensus building. we love our volunteers.
… bye for now.

---