You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While verifying JWT, as per the current implementation it is iterating through all verification methods available in the DID document. Currently, this is not a bug but the implemented solution is not optimal/efficient
According to the current implementation, it will try to verify JWT with both verification methods available in the DID document.
Expected Behavior
It should select the verification method according to the kid of JWT and then verify JWT
If kid it not match with verification method(let's say after key revocation/rotation), it should fail(fast) instead of checking with all verification methods available in the DID document
Steps To Reproduce
Create a Did document one verification methods
Create VC then create VP as JWT with any one kid
Revoke/rotate the key and update the DID document
Verify JWT, it will fail after signature verification. It should fail without signature verification as kid will not match with verification method
Current Behavior
While verifying JWT, as per the current implementation it is iterating through all verification methods available in the DID document. Currently, this is not a bug but the implemented solution is not optimal/efficient
Example:
Consider the JWT header:
and did document:
According to the current implementation, it will try to verify JWT with both verification methods available in the DID document.
Expected Behavior
kid
of JWT and then verify JWTkid
it not match with verification method(let's say after key revocation/rotation), it should fail(fast) instead of checking with all verification methods available in the DID documentSteps To Reproduce
kid
will not match with verification methodRelated to: eclipse-tractusx/managed-identity-wallet#303
The text was updated successfully, but these errors were encountered: