[java-idp-plugin-vci] branch VCDMImprovements updated: Refer only to VCDM spec for content

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch VCDMImprovements
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/3ff7ce48347c5efe44b3a3c17603e97383e2ecbf

The following commit(s) were added to refs/heads/VCDMImprovements by this push:
     new 3ff7ce4  Refer only to VCDM spec for content
3ff7ce4 is described below

commit 3ff7ce48347c5efe44b3a3c17603e97383e2ecbf
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Fri Oct 9 16:51:52 2026 +0300

    Refer only to VCDM spec for content
---
 README.md | 21 +++++----------------
 1 file changed, 5 insertions(+), 16 deletions(-)

diff --git a/README.md b/README.md
index 89df12b..452048c 100644
--- a/README.md
+++ b/README.md
@@ -437,11 +437,9 @@ Full file: [webapps/root/credentials/GeantIncubatorDiploma_W3C.json](docs/exampl
 You publish it at the url that is in `@context`, see [Metadata endpoints](#metadata-endpoints)
 below.
 
-`@context` and [`type`](https://www.w3.org/TR/vc-data-model-2.0/#types) are required, they are published and added to the
-credential. The other members of `credential_definition` below are optional, use any of them or
-none. They are added to the credential only, not published, because OpenID4VCI does not define
-them there. Their content is purely yours: the plugin does not check them and copies them to
-every credential as they are, not selectively disclosable.
+`@context` and [`type`](https://www.w3.org/TR/vc-data-model-2.0/#types) are required and
+published. The members below are optional and go to the credential only. Their content is yours,
+the plugin copies it to every credential as it is.
 
 | Member | Here |
 |---|---|
@@ -449,7 +447,7 @@ every credential as they are, not selectively disclosable.
 | [`description`](https://www.w3.org/TR/vc-data-model-2.0/#names-and-descriptions) | Description in English and Finnish, the same way |
 | [`credentialSchema`](https://www.w3.org/TR/vc-data-model-2.0/#data-schemas) | A [JSON Schema](https://www.w3.org/TR/vc-json-schema/#jsonschema) of the credential, a static file next to the context |
 | [`termsOfUse`](https://www.w3.org/TR/vc-data-model-2.0/#terms-of-use) | An issuer policy |
-| [`relatedResource`](https://www.w3.org/TR/vc-data-model-2.0/#integrity-of-related-resources) | Digests of the context and the schema, so that a verifier sees if they change |
+| [`relatedResource`](https://www.w3.org/TR/vc-data-model-2.0/#integrity-of-related-resources) | Digests of the context and the schema |
 | [`evidence`](https://www.w3.org/TR/vc-data-model-2.0/#evidence) | How the diploma was granted, the same for everyone |
 
 The plugin adds [`id`](https://www.w3.org/TR/vc-data-model-2.0/#identifiers), [`issuer`](https://www.w3.org/TR/vc-data-model-2.0/#issuer),
@@ -460,8 +458,7 @@ the one member both of you can set. When a `vc+sd-jwt` credential is in a federa
 federation entry and your entries go in the same array. See
 [Credential Configuration settings](#credential-configuration-settings) for the full list.
 
-The schema describes the credential as a verifier has it after the disclosures. Nothing in
-`credentialSubject` is required, the holder may leave any of it out:
+The schema of the example:
 
 <details>
 <summary>webapps/root/credentials/GeantIncubatorDiploma_W3C.schema.json</summary>
@@ -497,14 +494,6 @@ Full file: [webapps/root/credentials/GeantIncubatorDiploma_W3C.schema.json](docs
 
 </details>
 
-Jetty serves it as it is, the url has the file name. The `digestSRI` values are
-[Subresource Integrity](https://www.w3.org/TR/SRI/) digests of the two files exactly as
-published. Change either file and its digest changes, compute it again:
-
-```bash
-echo "sha384-$(openssl dgst -sha384 -binary GeantIncubatorDiploma_W3C.json | openssl base64 -A)"
-```
-
 #### Settings of your own, per credential
 
 Member `_issuance_configuration` is not published. It states how long a credential is valid,

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.