The W3C Verifiable Credentials Data Model defines digitally verifiable credentials and presentations: issuers sign claims, wallets store them, and holders present them to verifiers. section 16.7
A verifiable-credential authorization flow connects:
- Issuers, which create and sign credentials using DID-based identifiers. section 16.7
- Holders and wallets, which store credentials and assemble signed presentations in response to requests. section 16.7
- Verifiers, which validate issuer keys, trust, expiration, and revocation before passing normalized claims to a policy decision point. section 16.7
Authorization with a signed presentation
An access-control policy enforcement point requests attributes. The holder returns a signed presentation, the verifier validates it against trusted issuer keys, and the policy decision point evaluates the normalized claims. section 16.7
