[java-idp-plugin-vci] branch dev/STATUS_LIST updated: Remove explanations
Codeberg
noreply at shibboleth.net
Fri Aug 21 09:44:58 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a commit to branch dev/STATUS_LIST
in repository java-idp-plugin-vci.
View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/6cacb89a0adf0d751febb717ca1f9eac5986ad15
The following commit(s) were added to refs/heads/dev/STATUS_LIST by this push:
new 6cacb89 Remove explanations
6cacb89 is described below
commit 6cacb89a0adf0d751febb717ca1f9eac5986ad15
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Fri Aug 21 12:44:49 2026 +0300
Remove explanations
---
.../plugin/openidvci/conf/openid-vci.properties | 50 ----------------------
1 file changed, 50 deletions(-)
diff --git a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
index 4ee1201..d52d02a 100644
--- a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
+++ b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
@@ -1,54 +1,4 @@
-# Properties for the OpenID for Verifiable Credential Issuance plugin.
-#
-# Installed as conf/openid-vci.properties and read with the rest of conf.
-
-
-# Key that spreads status list indices across a list, so that an issued credential does not tell
-# its place in the issuance order.
-#
-# Change this. The value below is shipped with the plugin and anyone can use it to recover the
-# issuance order of the credentials.
-#
-# After that do not change it again. Indices are derived from this key. With two keys the same
-# status list slot can be issued twice.
oauth.statuslist.indexPermutationKey=change_this_to_secret
-
-
-# How long a published status list may be cached, as the ttl claim of the token.
-#
-# This is also how long a revocation can stay unnoticed. A verifier with a cached list does not see
-# it before the cache expires. A shorter time means lists are asked more often. A list is only a few
-# hundred bytes until something is revoked in it.
oauth.statuslist.ttl=PT1H
-
-
-# How long a record of a status list assignment waits in storage to be collected.
-#
-# A status list cannot be searched back to the credentials it describes, so every issuance writes a
-# record of the slots it took and of the claims issued, in plain text. The record is for a collector
-# outside the IdP, for example an identity management system, which is where the permanent record of
-# issued credentials belongs.
-#
-# This is how long a record survives if no collector comes for it. Long enough that an outage does
-# not leave credentials that cannot be revoked, and no longer than that. The credential itself has
-# only digests of the claims.
-#
-# Failing to write a record fails the issuance.
oauth.statuslist.assignmentRetention=P7D
-
-
-# Issuer identifier of issued credentials and of the status lists published for them.
-#
-# Empty means the issuer is the did:jwk of the signing key. Nothing needs to be published and the
-# two cannot disagree, as a did:jwk identifier is the key itself.
-#
-# A set value is used as it is. This is how a did:web issuer is chosen, for example
-# did:web:example.org:vci. Then a DID document must be published, for this example at
-# https://example.org/vci/did.json, naming the signing key as a verification method, and the kid of
-# the signing credential must be set to that verification method. Nothing here resolves the
-# document, so keeping the document, the key and the kid in agreement is up to the deployer. A
-# mismatch makes every credential unverifiable and there is no local symptom of it.
-#
-# The choice is deployment wide. One status list serves every credential expiring in the same month
-# whatever the configuration, and a status list token names one issuer only.
openidvci.issuer=
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list