-
Notifications
You must be signed in to change notification settings - Fork 15
dpop nonce requirements should be explicit #245
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
an attempt to address #192 This was the least awkward text I could come up with. And the least awkward place I could find to put it.
| * ISO/IEC 18013-5:2021 Personal identification — ISO-compliant driving licence Part 5: Mobile driving licence (mDL) application [@!ISO.18013-5] | ||
|
|
||
| Note that these standards in turn build upon other underlying standards, and requirements in those underlying standards also need to be followed. | ||
| One notable such standard is DPoP [@!RFC9449], which, through its inclusion in OpenID for Verifiable Credential Issuance, requires Wallets to be prepared to handle the `DPoP-Nonce` HTTP response header from the Credential Issuer’s Nonce Endpoint, as well as from other applicable endpoints of the Credential Issuer and Authorization Server. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe this should be moved into the OpenID4VCI section
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think the proposed text itself looks good. agree with Paul that there might be a better location for it
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The least awkward place I could find at the time to put it doesn't make it the best place. I'll find a different awkward place.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
a3084d9 moved it
an attempt to address #192
This was the least awkward text I could come up with. And the least awkward place I could find to put it.