feat: sdjwt exclude system keys (#1429)

trustbloc · Sep 18, 2023 · 94cb37d · 94cb37d
1 parent c99658f
commit 94cb37d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/pkg/doc/vc/crypto/crypto.go b/pkg/doc/vc/crypto/crypto.go
@@ -278,6 +278,7 @@ func (c *Crypto) signCredentialJWT(
 		options := []verifiable.MakeSDJWTOption{
 			verifiable.MakeSDJWTWithHash(signerData.SDJWT.HashAlg),
 			verifiable.MakeSDJWTWithVersion(signerData.SDJWT.Version),
+			verifiable.MakeSDJWTWithNonSelectivelyDisclosableClaims([]string{"id", "type", "@type"}),
 		}
 
 		return c.getSDJWTSignedCredential(credential, s, jwsAlgo, method, options...)

diff --git a/pkg/internal/testutil/credential.go b/pkg/internal/testutil/credential.go
@@ -112,7 +112,9 @@ func proveVC(
 
 			joseSigner := jws.NewSigner(didDoc.VerificationMethod[0].ID, jwsAlgName, suite.NewCryptoSigner(customCrypto, kh))
 
-			sdjwtCredential, err := credential.MakeSDJWT(joseSigner, didDoc.VerificationMethod[0].ID)
+			sdjwtCredential, err := credential.MakeSDJWT(joseSigner, didDoc.VerificationMethod[0].ID,
+				verifiable.MakeSDJWTWithNonSelectivelyDisclosableClaims([]string{"id", "type", "@type"}),
+			)
 			require.NoError(t, err)
 
 			vcParsed, err := verifiable.ParseCredential([]byte(sdjwtCredential),