DID

[deliamoreno2295]

Regarding the did documents. The document for did:web has an authentication attribute empty. Is there any easy way to populate the authentication array when the did document is created or published and refering to the existing key?(with #key-1)

[paullatzelsperger]

as per the specification:

The authentication verification relationship is used to specify how the DID subject is expected to be authenticated, for purposes such as logging into a website or engaging in any sort of challenge-response protocol.

We are using DID documents for neither of those purposes, so no, there is not.

[arnauinfante]

We are trying to sign a token so the did of the participant becomes the subject of the credential with a wallet using the did previously created in IH, but wallet requires the authentication to have the reference to the key. Given that the field exists and is empty and would just require to add the id of the key, I don't get why you cannot add the reference.
Are you planning to add this feature in future updates? We are using version 0.10.0 btw.
In the most recent versions swagger, I've seen a field called usage inside the key object which accepts the following enums: "sign_credentials","sign_presentation","sign_token".
Is this planned to be used to add references in did document so it can be used?
If I have a did:web created somewhere else, can I import it into IH for a participant, so this way I can have the fields needed?
Thanks in advance for the response

[paullatzelsperger]

the DID document we are generating is not a general purpose DID document that you can use for whatever, and IdentityHub is not a general purpose web:DID hosting app, we aim to keep things tight and avoid adding unneeded (as per DCP requirements) fields.

the sign_credentials etc. refers to something different, i.e. the intended usage of a KeyPair for internal purposes. However, if a KeyPair is added (via the API) and activated, then its public key will get added to the DID document as verificationMethod.

If I have a did:web created somewhere else, can I import it into IH for a participant

No, you cannot. Like I said, IdentityHub is not a generic DID hosting app, nor is it a general purpose DID:Web generator.

What you could do is implement a custom DidDocumentPublisher, that does one of two things:

1. when publishing a DID document, it injects any fields you may want into the document
2. instead of serving the document from a database, it stores the generated document in, say, a file share or an S3 bucket, and then have another program modify that DID document as per your needs. You will have to do this every time the document is regenerated, and you must not touch fields that IH generates.

Option 1 is likely the easier and less invasive one, you will need additional code to persist the additional fields though.