DID + ocaps

gistfile1.txt

{
    '@context': 'https://w3id.org/veres-one/v1',
    id: did,
    // implicitly has a type of LinkedDataObjectCapability itself
    authentication: [{
      type: 'RsaSignatureAuthentication2018',
      publicKey: {
        // this key can be used to authenticate as DID entity
        id: did + '#authn-key-1',
        type: 'RsaSigningKey2018',
        owner: did,
        publicKeyPem: '...'
      }
    }],
    grantCapability: [{
      type: 'RsaSignatureCapabilityAuthorization2018',
      publicKey: {
        // this key can be used to grant capabilities as DID entity
        id: did + '#ocap-grant-key-1',
        type: 'RsaSigningKey2018',
        owner: did,
        publicKeyPem: '...'
      }
    }],
    invokeCapability: [{
      type: 'RsaSignatureCapabilityAuthorization2018',
      publicKey: {
        // this key can be used to invoke capabilities as DID entity
        id: did + '#ocap-invoke-key-1',
        type: 'RsaSigningKey2018',
        owner: did,
        publicKeyPem: '...'
      }
    }]
  };