@dewa-id/signed-qr

A Node.js / Web package written in Typescript for decoding and parsing QR codes according to the Digitaliseringsstyrelsen Signed QR[1] and dewa SecureQR[2] specifications, which are commonly used for device-to-device presentations of digital proofs between wallets.

Roadmap

CBOR/mDoc based "Signed QR" (used by AltID)

• [x] Basic QR Frame Decoding - Parse individual QR code frames with parameters
• [x] Multi-QR Assembly - Combine multiple QR codes into complete payload (mDoc as Uint8Array)
• [ ] Documentation - Comprehensive API documentation and usage guides
• [ ] Tests - Unit tests and integration tests
  • [x] Basic unit testing added
• [ ] Examples - Working examples and sample code

Currently out of scope:

• [ ] Signature Verification - Verify cryptographic signatures of decoded payload
• [ ] Trust Anchor Validation - Validate against trusted certificate authorities

SDJWT-based "SecureQR" (used by e-Boks ID)

• [x] Basic QR Frame Decoding - Parse individual QR code frames with parameters
• [x] Multi-QR Assembly - Combine multiple QR codes into complete payload (SD-JWT as string)
• [ ] Documentation - Comprehensive API documentation and usage guides
• [ ] Tests - Unit tests and integration tests
  • [x] Basic unit testing added
• [ ] Examples - Working examples and sample code

Currently out of scope:

• [ ] Signature Verification - Verify cryptographic signatures of decoded payload
• [ ] Trust Anchor Validation - Validate against trusted certificate authorities

References

• [1] Implementing Age Verification With Danish Digital Identity Wallet (DKTB)
• [2] Documentation dewa SecureQR

License

Apache-2.0 requires you to:

• Include Copyright
• Include License
• State Changes
• Include Notice

Apache Version 2.0