Skip to content

Handle cnf.jwk binding#75

Merged
rogermiretin2 merged 5 commits intomainfrom
feature/handle-cnf-jwk
Feb 25, 2026
Merged

Handle cnf.jwk binding#75
rogermiretin2 merged 5 commits intomainfrom
feature/handle-cnf-jwk

Conversation

@rogermiretin2
Copy link
Copy Markdown
Contributor

No description provided.

@rogermiretin2 rogermiretin2 marked this pull request as draft February 24, 2026 16:05
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds support for JWK-based cryptographic binding as a fallback mechanism when DID-based holder resolution is not available. The implementation follows RFC 7800 (Proof-of-Possession Key Semantics for JWTs) by comparing JWK thumbprints from the VP holder field against the VC's cnf.jwk claim.

Changes:

  • Added JWK-based validation flow as fallback when DID extraction from VP fails
  • Refactored validation logic into smaller, more maintainable methods
  • Version bump from 2.0.12 to 2.0.13

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 6 comments.

File Description
src/main/java/es/in2/vcverifier/service/impl/VpServiceImpl.java Adds JWK-based binding validation with helper methods for JWK extraction, comparison, and conversion; refactors existing DID-based validation into separate methods
build.gradle Version bump to 2.0.13

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread src/main/java/es/in2/vcverifier/service/impl/VpServiceImpl.java Outdated
Comment thread src/main/java/es/in2/vcverifier/service/impl/VpServiceImpl.java Outdated
Comment thread src/main/java/es/in2/vcverifier/service/impl/VpServiceImpl.java Outdated
Comment thread src/main/java/es/in2/vcverifier/service/impl/VpServiceImpl.java
Comment thread src/main/java/es/in2/vcverifier/service/impl/VpServiceImpl.java
Comment thread src/main/java/es/in2/vcverifier/service/impl/VpServiceImpl.java
@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
34.0% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

@rogermiretin2 rogermiretin2 marked this pull request as ready for review February 25, 2026 13:42
@rogermiretin2 rogermiretin2 merged commit 9a39b2b into main Feb 25, 2026
4 of 5 checks passed
@rogermiretin2 rogermiretin2 deleted the feature/handle-cnf-jwk branch February 25, 2026 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants