Skip to content

Signing API based on JWS#527

Merged
sebbader-sap merged 16 commits intoIDTA-01002-3-2_workingfrom
aorzelski/jws
Mar 29, 2026
Merged

Signing API based on JWS#527
sebbader-sap merged 16 commits intoIDTA-01002-3-2_workingfrom
aorzelski/jws

Conversation

@sebbader-sap
Copy link
Copy Markdown
Contributor

@sebbader-sap sebbader-sap commented Feb 5, 2026

Closes #521

@sebbader-sap sebbader-sap changed the title Signature API Signing API Feb 5, 2026
@sebbader-sap sebbader-sap changed the title Signing API Signing API based on JWS Feb 5, 2026
@sebbader-sap
Copy link
Copy Markdown
Contributor Author

Might dublicate #523 ...

@whamm86
Copy link
Copy Markdown

whamm86 commented Mar 4, 2026

Yes, this is a duplicate of #523 Probably created accidentally

@whamm86
Copy link
Copy Markdown

whamm86 commented Mar 4, 2026

Close because duplicate

@whamm86 whamm86 closed this Mar 4, 2026
* Add V3.1.2 Bugfixes into V3.2.0 (#541)

* fix ServiceSpecificationProfileEnum values for 3.0 and 3.1

* remove TREE (#539)

* remove v3.2 profile uris

---------

Co-authored-by: Martin Stemmer <52048213+Martin187187@users.noreply.github.com>

* remove GetAllAssetAdministrationShellDescriptorsByAssetType from openapi (#530)

* added changelog for new signing operations and profiles

* undo changes to the profiles table

* fix typo

---------

Co-authored-by: sebbader-sap <107036549+sebbader-sap@users.noreply.github.com>
Co-authored-by: Martin Stemmer <52048213+Martin187187@users.noreply.github.com>
@sebbader-sap
Copy link
Copy Markdown
Contributor Author

#523 is coming from Andreas' own forked repo, while this one has the source branch here. Looks like this one was the intended one, and #523 the duplicate.

@sebbader-sap sebbader-sap reopened this Mar 29, 2026
@sebbader-sap
Copy link
Copy Markdown
Contributor Author

merging this one as #523 misses the OpenAPI files

@sebbader-sap sebbader-sap merged commit a6963b4 into IDTA-01002-3-2_working Mar 29, 2026
2 checks passed
@sebbader-sap sebbader-sap deleted the aorzelski/jws branch March 29, 2026 15:38
Some use cases of the Asset Administration Shell require the proof that data has not been changed and that it is still the original data of the AAS originator.
An example is a device manufacturer supplying to an integrator supplying to a plant operator. The plant operator wants to check the remained integrity of the device manufacturer's AAS.

The AASX package format includes the possibility of signing an AASX package, but this is rarely used. AASX packages can also not be protected by AAS security and access rules. This is why signatures are needed as part of the API.

Check warning

Code scanning / QDJVMC

Typo Warning documentation

Typo: In word 'AASX'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants