[java-idp-plugin-vci] branch main updated: Capabilities updated

Codeberg noreply at shibboleth.net
Thu Oct 8 08:36:20 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/c8931a6013a16d43959a5ec26b0f3be53d019748

The following commit(s) were added to refs/heads/main by this push:
     new c8931a6  Capabilities updated
c8931a6 is described below

commit c8931a6013a16d43959a5ec26b0f3be53d019748
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Thu Oct 8 11:36:06 2026 +0300

    Capabilities updated
---
 README.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index de6b21f..6a260ca 100644
--- a/README.md
+++ b/README.md
@@ -142,7 +142,7 @@ Optional currently not supported features.
 | Batch issuance advertised by `batch_credential_issuance` | Yes |
 | Refresh tokens | No |
 | SD-JWT VC with `exp` and `status` | Yes |
-| Holder key in `cnf` `jwk` member | Partial |
+| Holder key in `cnf` `jwk` member | Yes |
 | Issuer key as `x5c` chain in the SD-JWT VC | Yes |
 | `x5c` in Status List Token | Yes |
 | Unique, unpredictable Status List index | Yes |
@@ -3032,6 +3032,9 @@ Full file: [metadata/verifiable-credentials.json](docs/example/step-5/metadata/v
 
 </details>
 
+`cryptographic_binding_methods_supported` is `jwk`, so the holder key is in the `jwk` member of
+`cnf`. A credential that also lists `did:jwk` keeps a did:jwk `kid` of the proof as it is.
+
 For the values of `key_attestations_required`, see
 [attack potential resistance](https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#name-attack-potential-resistance).
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list