Skip to content
Registry StackDocsv0.34.0

Publish JWT VC Issuer Metadata for the SD-JWT VC response format

GET
/.well-known/jwt-vc-issuer
curl --request GET \
--url https://example.com/.well-known/jwt-vc-issuer

Discovery is not a trust anchor. The document republishes the same public keys under the provider identity the assertion names, and resolution is meaningful only when that identity is the HTTPS origin of the deployment.

If-None-Match
string
/^"[a-f0-9]{64}"$/

The exact strong entity tag from a prior response.

Provider identity and public verification keys

Media typeapplication/json
object
issuer
required
string
<= 512 characters
jwks_uri
required
string format: uri
<= 1024 characters
Examplegenerated
{
"issuer": "example",
"jwks_uri": "https://example.com"
}
Cache-Control
string
Allowed values: public, max-age=600

Public metadata may be cached for at most ten minutes.

ETag
string
/^"[a-f0-9]{64}"$/

Strong SHA-256 entity tag over the exact response bytes.

traceparent
string
/^00-(?!0{32}-)[0-9a-f]{32}-(?!0{16}-)[0-9a-f]{16}-[0-9a-f]{2}$/

Effective W3C trace context. One valid inbound traceparent is retained; missing, invalid, or duplicate values are replaced and tracestate is never reflected.

The issuer metadata is unchanged

Cache-Control
string
Allowed values: public, max-age=600

Public metadata may be cached for at most ten minutes.

ETag
string
/^"[a-f0-9]{64}"$/

Strong SHA-256 entity tag over the exact response bytes.

traceparent
string
/^00-(?!0{32}-)[0-9a-f]{32}-(?!0{16}-)[0-9a-f]{16}-[0-9a-f]{2}$/

Effective W3C trace context. One valid inbound traceparent is retained; missing, invalid, or duplicate values are replaced and tracestate is never reflected.