eu-digital-identity-wallet / eudi-lib-ios-openid4vci-swift

Implementation of OpenID for Verifiable Credential Issuance protocol (wallet's role) in Swift
Apache License 2.0
6 stars 7 forks source link

[fix] Add resource parameter to pushed authorization code request #56

Closed srosenda closed 1 month ago

srosenda commented 1 month ago

Description of change

The OpenID4VCI specification RECOMMENDs that resource parameter is added to authorization request when _"Credential Issuer metadata contains an authorizationservers property":

If the Credential Issuer metadata contains an authorization_servers property, it is RECOMMENDED to use a resource parameter [RFC8707] whose value is the Credential Issuer's identifier value to allow the Authorization Server to differentiate Credential Issuers.

See https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#section-5.1.2-9.

This PR sets the resource property to the credential issuer identifier (URL) when credential issuer metadata has authorization_servers property and also changes the issuer metadata authorization_servers property to OPTIONAL as specified, see https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#section-11.2.3-2.2.

Fixes #57.

Type of change

Please delete options that are not relevant.

How Has This Been Tested?

Checklist: