Static Policies

Static verification policies are predefined for verifying credentials in standard use cases. The following lists out supported static policies by SSI-Kit along with their arguments

General policies

NameDescriptionArgument

SignaturePolicy

Verifies the signature of the W3C Verifiable credential.

None

JsonSchemaPolicy

Verifies against the associated JSON schema. Note that the attribute credentialSchema must be set and the JSON schema must be accessible by the http URL.

None

ValidFromBeforePolicy

Verifies the credentials based on their valid-from date

None

ExpirationDateAfterPolicy

Verifies the credentials based on their expiration date

None

ChallengePolicy

Verifies challenge

ChallengePolicyArg, which contains specific challenges to check against.

VpTokenClaimPolicy

Verify verifiable presentation by OIDC/SIOPv2 VP token claim.

VpTokenClaim

CredentialStatusPolicy

Verifies credentials based on their status

None

EBIS/ESSIF Specific Policies

NameDescriptionArgument

EbsiTrustedSchemaRegistryPolicy

Verify by EBSI Trusted Schema Registry. Checks performed:

  • credential schema id has the correct format

None

EbsiTrustedIssuerDidPolicy

Verify by trusted issuer did. Checks performed:

  • issuer did is resolvable against EBSI

None

EbsiTrustedIssuerRegistryPolicy

Verify by EBSI Trusted Issuer Registry record. Checks performed:

  • issuer has any record on trusted registry having an authorization claim matching the VC schema

  • issuer's TIR record contains a VerifiableId credential

  • the authorized claim record (from p.1) has the type provided as argument to the policy

  • issuer's accreditation is valid - verifies against EbsiTrustedIssuerAccreditationPolicy

EbsiTrustedIssuerRegistryPolicyArg

EbsiTrustedSubjectDidPolicy

Verify by trusted subject did. Checks performed:

  • subject did is resolvable against EBSI

None

EbsiTrustedIssuerAccreditationPolicy

Verify by issuer's authorized claims. Checks performed:

  • fetches the attribute specified by the termsOfUse property

  • checks whether the credential stored as the attribute body has the required accreditation claims to match the current VC schema

None

IssuedDateBeforePolicy

Verify by issuance date.

None

GAIA-X specific policies

NameDescriptionArgument

GaiaxTrustedPolicy

Verify Gaiax trusted fields.

None

GaiaxSDPolicy

Verify Gaiax SD fields.

None

Last updated