@@ -91,7 +91,10 @@ func encodeVCToJWS(vcBytes []byte, privateKey interface{}) {
9191}
9292
9393func encodeVPToJWS (vpBytes []byte , audience string , privateKey interface {}) {
94- vp , err := verifiable .NewPresentation (vpBytes , verifiable .WithPresSkippedEmbeddedProofCheck ())
94+ vp , err := verifiable .NewPresentation (vpBytes ,
95+ verifiable .WithPresSkippedEmbeddedProofCheck (),
96+ // the public key is used to decode verifiable credentials passed as JWS to the presentation
97+ verifiable .WithPresPublicKeyFetcher (verifiable .SingleKey (getJWTDecodePublicKey ())))
9598 if err != nil {
9699 abort ("failed to decode presentation: %v" , err )
97100 }
@@ -128,9 +131,7 @@ func encodeVCToJWTUnsecured(vcBytes []byte) {
128131func decodeVCJWTToJSON (vcBytes []byte , publicKey interface {}) {
129132 // Asked to decode JWT
130133 credential , _ , err := verifiable .NewCredential (vcBytes ,
131- verifiable .WithPublicKeyFetcher (func (issuerID , keyID string ) (interface {}, error ) {
132- return publicKey , nil
133- }))
134+ verifiable .WithPublicKeyFetcher (verifiable .SingleKey (publicKey )))
134135 if err != nil {
135136 abort ("failed to decode credential: %v" , err )
136137 }
@@ -186,6 +187,39 @@ func parseKeys(packedKeys string) (private, public interface{}) {
186187 return privateKey , publicKey
187188}
188189
190+ func getJWTDecodePublicKey () interface {} {
191+ //nolint:lll
192+ jwkStr := `
193+ {
194+ "kty": "RSA",
195+ "n": "0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbWhM78LhWx4cbbfAAtVT86zwu1RK7aPFFxuhDR1L6tSoc_BJECPebWKRXjBZCiFV4n3oknjhMstn64tZ_2W-5JsGY4Hc5n9yBXArwl93lqt7_RN5w6Cf0h4QyQ5v-65YGjQR0_FDW2QvzqY368QQMicAtaSqzs8KJZgnYb9c7d0zgdAZHzu6qMQvRL5hajrn1n91CbOpbISD08qNLyrdkt-bFTWhAI4vMQFh6WeZu0fM4lFd2NcRwr3XPksINHaQ-G_xBniIqbw0Ls1jF44-csFCur-kEgU8awapJzKnqDKgw",
196+ "e": "AQAB",
197+ "d": "X4cTteJY_gn4FYPsXB8rdXix5vwsg1FLN5E3EaG6RJoVH-HLLKD9M7dx5oo7GURknchnrRweUkC7hT5fJLM0WbFAKNLWY2vv7B6NqXSzUvxT0_YSfqijwp3RTzlBaCxWp4doFk5N2o8Gy_nHNKroADIkJ46pRUohsXywbReAdYaMwFs9tv8d_cPVY3i07a3t8MN6TNwm0dSawm9v47UiCl3Sk5ZiG7xojPLu4sbg1U2jx4IBTNBznbJSzFHK66jT8bgkuqsk0GjskDJk19Z4qwjwbsnn4j2WBii3RL-Us2lGVkY8fkFzme1z0HbIkfz0Y6mqnOYtqc0X4jfcKoAC8Q",
198+ "p": "83i-7IvMGXoMXCskv73TKr8637FiO7Z27zv8oj6pbWUQyLPQBQxtPVnwD20R-60eTDmD2ujnMt5PoqMrm8RfmNhVWDtjjMmCMjOpSXicFHj7XOuVIYQyqVWlWEh6dN36GVZYk93N8Bc9vY41xy8B9RzzOGVQzXvNEvn7O0nVbfs",
199+ "q": "3dfOR9cuYq-0S-mkFLzgItgMEfFzB2q3hWehMuG0oCuqnb3vobLyumqjVZQO1dIrdwgTnCdpYzBcOfW5r370AFXjiWft_NGEiovonizhKpo9VVS78TzFgxkIdrecRezsZ-1kYd_s1qDbxtkDEgfAITAG9LUnADun4vIcb6yelxk",
200+ "dp": "G4sPXkc6Ya9y8oJW9_ILj4xuppu0lzi_H7VTkS8xj5SdX3coE0oimYwxIi2emTAue0UOa5dpgFGyBJ4c8tQ2VF402XRugKDTP8akYhFo5tAA77Qe_NmtuYZc3C3m3I24G2GvR5sSDxUyAN2zq8Lfn9EUms6rY3Ob8YeiKkTiBj0",
201+ "dq": "s9lAH9fggBsoFR8Oac2R_E2gw282rT2kGOAhvIllETE1efrA6huUUvMfBcMpn8lqeW6vzznYY5SSQF7pMdC_agI3nG8Ibp1BUb0JUiraRNqUfLhcQb_d9GF4Dh7e74WbRsobRonujTYN1xCaP6TO61jvWrX-L18txXw494Q_cgk",
202+ "qi": "GyM_p6JrXySiz1toFgKbWV-JdI3jQ4ypu9rbMWx3rQJBfmt0FoYzgUIZEVFEcOqwemRN81zoDAaa-Bk0KWNGDjJHZDdDmFhW3AN7lI-puxk_mHZGJ11rxyR8O55XLSe3SPmRfKwZI6yU24ZxvQKFYItdldUKGzO6Ia6zTKhAVRU",
203+ "alg": "RS256",
204+ "kid": "did:example:0xab#verikey-1"
205+ }
206+ `
207+
208+ jwk := & jose.JSONWebKey {}
209+
210+ err := jwk .UnmarshalJSON ([]byte (jwkStr ))
211+ if err != nil {
212+ abort ("JWK unmarshalling error: %v" , err )
213+ }
214+
215+ privateKey , ok := jwk .Key .(* rsa.PrivateKey )
216+ if ! ok {
217+ abort ("expected to get *rsa.PrivateKey, but got smth different" )
218+ }
219+
220+ return privateKey .Public ()
221+ }
222+
189223func encodeVCToJSON (vcBytes []byte ) {
190224 credential , _ , err := verifiable .NewCredential (vcBytes , verifiable .WithNoCustomSchemaCheck ())
191225 if err != nil {
0 commit comments