According to the spec the body of the Wallet Attestation JWT MUST contain among other claims:
authorization_endpoint
response_types_supported
response_modes_supported
vp_formats_supported
request_object_signing_alg_values_supported
presentation_definition_uri_supported
The only way the wallet provider can have gotten this information is by the attestation request and there the claims above are
not listed as required.
A slight mismatch.
Either the above listed claims should be required in both the request and the assertion or they should be optional.
According to the spec the body of the Wallet Attestation JWT MUST contain among other claims:
The only way the wallet provider can have gotten this information is by the attestation request and there the claims above are not listed as required. A slight mismatch. Either the above listed claims should be required in both the request and the assertion or they should be optional.