Skip to content

Difference between JWT and 'JWT' #106

Open
@FabioPinheiro

Description

@FabioPinheiro

JWT is something very specific and well-documented: RFC 7519 - JSON Web Token (JWT)

Although we start talking about verifiable credentials on top of JWT. We call it JWT...

Most of the specifications online call it "Verifiable Credentials JWT" or VC-JWT https://identity.foundation/jwt-vc-presentation-profile/

Now we are adding SD-JWT as another Credential type. Stands for SD selective-disclosure https://datatracker.ietf.org/doc/draft-ietf-oauth-selective-disclosure-jwt/

I was reading the documentation website and saw the term JWT is missing from the glossary, which doesn't help. https://docs.atalaprism.io/docs/concepts/glossary
But my main concern is that we are using the 'JWT' with both meanings without being explicit about it.
When talking about Keycloak and apikey authentication the term is JWT is referring to the JSON Web Token and not of the verifiable credential (as most of the document). https://docs.atalaprism.io/tutorials/multitenancy/tenant-migration

I would like to ask again to refine those terms.
Because I get sometimes confuse knowing all the Lore of the terms in Atala. I can only imagine someone from outside.

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

Status

Planned

Relationships

None yet

Development

No branches or pull requests

Issue actions