Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New endpoint for nonce for OIDC4VCI draft 14 #3181

Closed
ThierryThevenet opened this issue Dec 10, 2024 · 1 comment
Closed

New endpoint for nonce for OIDC4VCI draft 14 #3181

ThierryThevenet opened this issue Dec 10, 2024 · 1 comment
Assignees
Labels

Comments

@ThierryThevenet
Copy link
Member

ThierryThevenet commented Dec 10, 2024

need before #3180

For OIDC4VCI draft > =14, the token endpoint does not return a c_nonce. So wallet MUST get the nonce for the key proof of ownership jwt from a new nonce endpoint provided by the issuer. This nonce is used to provide the jwt or ldp_vp proof in the credential request

To get the nonce

  1. get the nonce endpoint URL from the credential issuer metadata : nonce_endpoint:
  2. make a POST to this endpoint

Example:


POST /issuer/nonce HTTP/1.1
Host: talao.co
Content-Length: 0

Response from issuer should be :


HTTP/1.1 200 OK
Content-Type: application/json
Cache-Control: no-store

{
  "c_nonce": "wKI4LT17ac15ES9bw8ac4"
}
  1. use the c_nonce to build the proof of key ownership

If nonce endpoint is not available than raise an error message 'invalid_response' with error_description 'Nonce endpoint is not available'

@ThierryThevenet
Copy link
Member Author

You can test it on all OIDC4VCI draft 13 test with the wallet setup with draft 14.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants