[Openid-specs-digital-credentials-protocols] Updates on the new query language

Daniel Fett mail at danielfett.de
Mon Oct 21 14:30:41 UTC 2024


Hi all,

after quite a bit of back and forth, I made changes to PR #266 
<https://github.com/openid/OpenID4VP/pull/266> that hopefully find a 
good compromise between all proposed solutions. Based on Tobias' latest 
proposals, this is what's in the latest PR:

# kept the claim_sets

We discussed the claim_sets syntax on the working group call last 
Thursday and there was a rough consensus in the room to remove it, but 
with the open task to find another solution for the real ID use case 
(previously, the '?!' syntax). I looked into various options, including 
pushing the feature to the credential_sets level (what we discussed on 
the call) and adding a property to the claim descriptors. Both are not 
great. It turns out that the simplest solution is to just keep 
claim_sets. With the rule that was introduced to oblige wallets to send 
the first available combination of claims in claim_sets, the claims can 
just be listed in the right order: `"claim_sets": [ ['a', 'real_id'], 
['a']]` — problem solved.

This syntax is not specific to the real ID use case, but happens to 
generally solve cases where I don't know ahead of time what claims are 
available in a credential.

I'm somewhat convinced that this syntax will come in handy again in the 
future once we talk more about value matching and/or ZKP features.

# removed the '?' and '?!' syntax

We don't need the `?!` anymore as the real ID use case can be solved as 
shown above. We also don't need `?` anymore as we don't have "really" 
optional claims in the claim_sets any longer. This should make 
implementations much simpler.

# introduced `purpose`

As discussed, without prescribing a specific format or content. We can 
figure that out later.

# Examples/Description

I also changed the examples to reflect the new syntax and made some 
changes to the normative language around the new QL.

-Daniel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20241021/f914d7a2/attachment.htm>


More information about the Openid-specs-digital-credentials-protocols mailing list