ack_verify_credential
Verify a signed credential JWT by checking its signature, expiration, and optionally trusted issuers. Optionally validate controller claims against the subject's DID document to confirm authenticity.
Instructions
Verify a signed credential JWT (from ack_sign_credential). Checks signature, expiration, and optionally trusted issuers. Set verifyControllerClaims to true to also verify the controller relationship against the subject's DID document (requires did:web or similar — did:key does not support this). Returns {valid: true/false}.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| jwt | Yes | The signed credential JWT string | |
| trustedIssuers | No | List of trusted issuer DIDs. If provided, the credential issuer must be in this list. | |
| verifyControllerClaims | No | If true, verify controller claims against the subject's DID document. Requires the subject DID to declare a controller (e.g. did:web). Defaults to false. |