Auth0 Verifiable Credentials

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com
#Security #Keycloak #JWT #Authentication #Java8

Our great sponsors
  • Sonar - Write Clean Java Code. Always.
  • InfluxDB - Build time-series-based applications quickly and at scale.
  • SaaSHub - Software Alternatives and Reviews
Our great sponsors

  • rwot11-the-hague

    RWOT11 in The Hague, Netherlands (September 2022)

    Anyone with a keypair can issue verifiable credentials, and we work on making this simple[0], starting with developers. However, the ultimate challenge will be to be able to associate that keypair to the entity (or abstracted entity) who is making those statements, which is what Web of Trust tried to do, and there are some adjacent efforts to revitalize SPKI-style[1] trust models that are being discussed at RWoT[2].

    [0] https://www.spruceid.dev/quickstart

    [1] https://en.wikipedia.org/wiki/Simple_public-key_infrastructu...

    [2] https://github.com/WebOfTrustInfo/rwot11-the-hague

  • Keycloak

    Open Source Identity and Access Management For Modern Applications and Services

  • Sonar

    Write Clean Java Code. Always.. Sonar helps you commit clean code every time. With over 600 unique rules to find Java bugs, code smells & vulnerabilities, Sonar finds the issues while you focus on the work.

  • SuperTokens Community

    Open source alternative to Auth0 / Firebase Auth / AWS Cognito

  • fusionauth-jwt

    A simple to use Java 8 JWT Library. Verify, Sign, Encode, Decode all day.

  • jsonld-signatures-bbs

    A linked data proof suite for BBS+ signatures

    This is possible currently with zero knowledge proofs.

    There are mainly two different types one is "selective disclosure", where the verifier require some fields but it is up to the Holder to select which one to disclose.

    The other one allows the Holder to create proofs about claims, like "I am over 18" without disclosing the birthday. The cryptography for this seems sound, but to be honest it is hard to grasp.

    For a working example you could have a look at this:

    https://github.com/mattrglobal/jsonld-signatures-bbs

    Note: Auth0 currently doesn't support neither issuing or verifying this type of credentials.

  • InfluxDB

    Build time-series-based applications quickly and at scale.. InfluxDB is the Time Series Platform where developers build real-time applications for analytics, IoT and cloud-native services. Easy to start, it is available in the cloud or on-premises.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts