Skip to content

Conversation

@GarethCOliver
Copy link
Contributor

This removes the references to 18013-7, per WG discussion as it is not compatible with the current document.

resolves #519

This approach to be brought up with WG10 this week.

We could specify a session transcript in Invocation via other methods {#non-dc-api-invocation} to resolve #402

as follows:

OpenID4VPVanillaHandover = [
"OpenID4VPVanillaHandover", ; A fixed identifier for this handover type
OpenID4VPVanillaHandoverInfoHash ; A cryptographic hash of OpenID4VPVanillaHandoverInfo
]

; Contains the sha-256 hash of OpenID4VPVanillaHandoverInfoBytes
OpenID4VPVanillaHandoverInfoHash = bstr

; Contains the bytes of OpenID4VPVanillaHandoverInfo encoded as CBOR
OpenID4VPVanillaHandoverInfoBytes = bstr .cbor OpenID4VPVanillaHandoverInfo

OpenID4VPDCAPIHandoverInfo = [
clientId,
responseUri,
nonce,
jwk_thumbprint
] ; Array containing handover parameters

(nonce/jwk_thumbprint as in DC API, clientId/responseUri from request).

This would ~match what is done today for 18013-7, while being inline with what we do in the DC API. However I think it leaves some questions (how do we handle multi-rp auth, do we really need clientId and responseUri) so would rather re-introduce in a follow-up PR, or in 1.1.

This removes the references to 18013-7, per WG discussion as it is not compatible with the current document. 

resolves #519
@Sakurann
Copy link
Collaborator

makes me think if we should also remove references to 23220-4..?

@GarethCOliver
Copy link
Contributor Author

makes me think if we should also remove references to 23220-4..?

The remaining 23220-4 are just to it as the 'building blocks' version of 18013-5. I think this still makes sense (it's only the remote presentation part that is in conflict).

Copy link
Contributor

@awoie awoie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, SessionTranscript for vanilla OID4VP could be done in 1.1.

Copy link
Contributor

@tplooker tplooker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Sakurann
Copy link
Collaborator

because some people asked.. i think what this PR means is..

  • 18013-7 annex B continues to exist until ISO decides otherwise
  • openid4vp only defines how to do mdocs over DC API
  • opendi4vp is silent on how to do mdocs over vanilla openid4vp until dcp wg decides otherwise

@Sakurann
Copy link
Collaborator

wg discussion: ok to merge once @martijnharing forms an opinion

@Sakurann Sakurann added this to the Final 1.0 milestone Apr 16, 2025
@Sakurann Sakurann merged commit e26d7f6 into main Apr 17, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Referencing ISO 18013-7 in OpenID4VP is problematic Define session transcript for OpenID4VP (without DC API) in OpenID4VP

6 participants