Search by

web-token / jwt-selective-disclosure

Spomky

Selective Disclosure for JWTs (SD-JWT, RFC 9901) for the JWT Framework: Issuer, Holder and Verifier.

Package info

github.com/web-token/jwt-selective-disclosure

Homepage

pkg:composer/web-token/jwt-selective-disclosure

Security

Advisories: 0

Aikido package health analysis

Transparency log

Statistics

Installs: 0

Dependents: 0

Suggesters: 0

Stars: 0

4.3.x-dev 2026-11-09 08:09 UTC

Requires

Requires (Dev)

None

Suggests

None

Provides

None

Conflicts

None

Replaces

None

MIT 371c11e5236fac4836c3c824742ad8b449d0b04b

jwtJWSJOSEJWKJotRFC7515RFC7519Verifiable Credentialssd-jwtrfc9901Selective DisclosureKey Binding

Published on Packagist.org on 2026-11-09 08:09 UTC

This package is auto-updated.

Last update: 2026-11-09 08:09:27 UTC

README

This repository is a sub repository of the JWT Framework project and is READ ONLY.

Please do not submit any Pull Request here. You should go to the main repository instead.

What Is In This Package?

Selective Disclosure for JWTs, as defined by RFC 9901: the SD-JWT and SD-JWT+KB formats, compact or in the JWS JSON serialization, and the three roles of the specification on top of the JWS services of the library.

  • The Issuer signs a JWT whose selectively disclosable claims are replaced by salted digests, with decoy digests.
  • The Holder selects the Disclosures of the claims it presents and binds the presentation to its key with a Key Binding JWT.
  • The Verifier checks the Issuer-signed JWT, the Disclosures and the Key Binding JWT, and returns the claims that were disclosed.

SD-JWT is the credential format of SD-JWT VC, of the EU Digital Identity Wallet and of OpenID for Verifiable Credentials. Those profiles are left to the application.

Documentation

The official documentation is available as https://web-token.spomky-labs.com/

Licence

This software is release under MIT licence.