Escaping from identity providers : protecting privacy with verifiable credentials in community solid server

This paper investigates how Verifiable Credentials can be incorporated into authentication and authorisation protocols used in Solid as a solution which can enhance user privacy. A VC-based authentication protocol is proven secure as an alternative to Solid-OIDC. The protocol distinguishes clearly between the agent holding a VC and the app accessing resources on behalf of the user. The protocol is integrated into the authorisation server of the open-source Community Solid Server.