support jwt eddsa alg header

lib/boruta/verifiable_credentials.ex

@@ -229,6 +229,18 @@ defmodule Boruta.VerifiableCredentials do
     end
   end
 
+  defp verify_jwt({:jwk, jwk}, "EdDSA", jwt) do
+    signer = Joken.Signer.create("ES256", %{"pem" => jwk |> JOSE.JWK.from_map() |> JOSE.JWK.to_pem()})
+
+    case Token.verify(jwt, signer) do
+      {:ok, claims} ->
+        {:ok, jwk, claims}
+
+      _ ->
+        {:error, "Bad proof signature"}
+    end
+  end
+
   defp verify_jwt({:jwk, jwk}, alg, jwt) do
     signer = Joken.Signer.create(alg, %{"pem" => jwk |> JOSE.JWK.from_map() |> JOSE.JWK.to_pem()})
 
@@ -261,7 +273,7 @@ defmodule Boruta.VerifiableCredentials do
     case Joken.peek_header(jwt) do
       {:ok, %{"alg" => alg, "typ" => typ} = headers} ->
         alg_check =
-          case alg =~ ~r/^(RS|ES)/ do
+          case alg =~ ~r/^(RS|ES|EdDSA)/ do
             true ->
               :ok
 

lib/boruta/verifiable_presentations.ex

@@ -125,8 +125,8 @@ defmodule Boruta.VerifiablePresentations do
 
   defp validate_status_list(%{"vc" => %{"credentialStatus" => status}}) do
     case Finch.build(:get, status["statusListCredential"]) |> Finch.request(OpenIDHttpClient) do
-      {:ok, %Finch.Response{status: 200, body: statuc_credential}} ->
-        case Joken.peek_claims(statuc_credential) do
+      {:ok, %Finch.Response{status: 200, body: status_credential}} ->
+        case Joken.peek_claims(status_credential) do
           {:ok, %{"vc" => %{"credentialSubject" => status_list}}} ->
             bit =
               status_list["encodedList"]
@@ -209,6 +209,9 @@ defmodule Boruta.VerifiablePresentations do
           {:ok, jwk :: map(), claims :: map()} | {:error, reason :: String.t()}
   def validate_signature(jwt) when is_binary(jwt) do
     case Joken.peek_header(jwt) do
+      {:ok, %{"alg" => "EdDSA"} = headers} ->
+        verify_jwt(extract_key(headers), "ES256", jwt)
+
       {:ok, %{"alg" => alg} = headers} ->
         verify_jwt(extract_key(headers), alg, jwt)