Skip to content

Support for mdl#10

Open
tajang97 wants to merge 9 commits intomainfrom
support-for-mdl
Open

Support for mdl#10
tajang97 wants to merge 9 commits intomainfrom
support-for-mdl

Conversation

@tajang97
Copy link
Contributor

Added support for mDL in heka-identity-service and web-ui

Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
@AlexanderShenshin AlexanderShenshin self-assigned this Mar 11, 2026
@AlexanderShenshin AlexanderShenshin self-requested a review March 11, 2026 09:48
method: 'did',
did: registration.did,
},
dcql: {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's use presentationExchange here (same approach with inputDescriptors as below).

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

updated

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, but I think we can use the same approach with defining inputDescriptors variable and using global return statement?

did: string
didUrl: string
did?: string
didUrl?: string
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think that we may want to continue to use explicit issuer DID for mDoc, but in this case we'll need to create an issuer certificate from publicJwk extracted from DID Document...

See example from Credo tests.
In the example, a new key is created by KMS, but we should be able to get a publicJwk from existing key bound to chosen issuer DID.

Another important factor here is that we shouldn't use the same issuer certificate for each tenant (individual issuer) and should at least have certificate per-tenant...
The ideal scenario would be to use issuer DID of course.

We can discuss this in person, if needed.

Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
Signed-off-by: nodirbek.parpibaev <nodirbek.parpibaev@dsr-corporation.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants