Spec compliant SD-JWT type-rich implementation for TypeScript
Overview
Further information
Checkout the documentation regarding SD-JWTs, to find out more.
What is SD-JWT?
This library implements the Selective Disclosure JWT (SD-JWT) specification: draft-ietf-oauth-selective-disclosure-jwt-06.
Features
- Create and sign SD-JWT tokens
- Choose selectively disclosable payload fields (SD fields)
- Create digests for SD fields and insert into JWT body payload
- Create and append encoded disclosure strings for SD fields to JWT token
- Add random or fixed number of decoy digests on each nested object property
- Present SD-JWT tokens
- Selection of fields to be disclosed
- Support for appending optional holder binding
- Full support for nested SD fields and recursive disclosures
- Parse SD-JWT tokens and restore original payload with disclosed fields
- Verify SD-JWT token
- Signature verification
- Hash comparison and tamper check of the appended disclosures
- Support for integration with various crypto libraries and frameworks, to perform the cryptographic operations and key management