> ## Documentation Index
> Fetch the complete documentation index at: https://docs.baselayer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Resolve the credential issuer's DID document

> The W3C DID document for Baselayer's credential issuer. Every credential names its issuer as a `did:web` identifier; verifiers resolve that identifier to this document and match the credential's signing key id against `verificationMethod`. Keys publish ahead of activation and remain published through rotation overlap, so verifier caches stay warm. Unauthenticated; cacheable for one hour.



## OpenAPI

````yaml /api-reference/openapi.json get /.well-known/did.json
openapi: 3.1.0
info:
  title: baselayer-api-service
  version: 0.1.0
servers:
  - url: https://api.baselayer.com/
security: []
paths:
  /.well-known/did.json:
    get:
      tags:
        - Registry
      summary: Resolve the credential issuer's DID document
      description: >-
        The W3C DID document for Baselayer's credential issuer. Every credential
        names its issuer as a `did:web` identifier; verifiers resolve that
        identifier to this document and match the credential's signing key id
        against `verificationMethod`. Keys publish ahead of activation and
        remain published through rotation overlap, so verifier caches stay warm.
        Unauthenticated; cacheable for one hour.
      operationId: get_did_document
      responses:
        '200':
          description: The issuer's DID document (W3C DID core).
          content:
            application/did+json:
              schema:
                properties:
                  '@context':
                    items:
                      type: string
                    type: array
                    title: '@Context'
                  id:
                    type: string
                    title: Id
                  verificationMethod:
                    items:
                      properties:
                        id:
                          type: string
                          title: Id
                        type:
                          type: string
                          const: JsonWebKey2020
                          title: Type
                          default: JsonWebKey2020
                        controller:
                          type: string
                          title: Controller
                        publicKeyJwk:
                          properties:
                            kty:
                              type: string
                              const: OKP
                              title: Kty
                              default: OKP
                            crv:
                              type: string
                              const: Ed25519
                              title: Crv
                              default: Ed25519
                            x:
                              type: string
                              title: X
                            kid:
                              type: string
                              title: Kid
                            alg:
                              type: string
                              const: EdDSA
                              title: Alg
                              default: EdDSA
                            use:
                              type: string
                              const: sig
                              title: Use
                              default: sig
                          additionalProperties: false
                          type: object
                          required:
                            - x
                            - kid
                          title: Ed25519PublicJWK
                          description: >-
                            Public half of a KYA issuer signing key, as an RFC
                            8037 OKP JWK.


                            The wire form the did:web document and JWKS render
                            verbatim, and the

                            shape stored on ``IssuerKey.public_jwk`` — public
                            material only, never

                            the seed. ``kid`` is the RFC 7638 JWK thumbprint of
                            the key, so it is

                            derivable from the key material alone and can never
                            drift from ``x``.
                      additionalProperties: false
                      type: object
                      required:
                        - id
                        - controller
                        - publicKeyJwk
                      title: Ed25519VerificationMethod
                      description: >-
                        One issuer key as a W3C DID core verification method.


                        ``id`` is the controller DID plus the key's ``kid`` as
                        the fragment

                        (``did:web:…#<kid>``), so the bare ``kid`` a JWT header
                        names resolves

                        to exactly one method in the document.
                        ``JsonWebKey2020`` carries the

                        public key verbatim as ``publicKeyJwk``.
                    type: array
                    title: Verificationmethod
                  assertionMethod:
                    items:
                      type: string
                    type: array
                    title: Assertionmethod
                additionalProperties: false
                type: object
                required:
                  - id
                  - verificationMethod
                  - assertionMethod
                title: DIDDocument
                description: >-
                  The issuer's did:web document, resolved at
                  ``/.well-known/did.json``.


                  Renders the published rotation set: one verification method
                  per

                  pending, active, or retiring key, every one referenced from

                  ``assertionMethod`` since counterparties verify credential
                  signatures

                  (assertions) against these keys. Wire names are the W3C forms,
                  hence

                  the aliases.
              example:
                '@context':
                  - https://www.w3.org/ns/did/v1
                  - https://w3id.org/security/suites/jws-2020/v1
                id: did:web:registry.baselayer.com
                verificationMethod:
                  - id: >-
                      did:web:registry.baselayer.com#kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k
                    type: JsonWebKey2020
                    controller: did:web:registry.baselayer.com
                    publicKeyJwk:
                      kty: OKP
                      crv: Ed25519
                      x: 11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo
                      kid: kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k
                      alg: EdDSA
                      use: sig
                assertionMethod:
                  - >-
                    did:web:registry.baselayer.com#kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k

````