Use of Basic authentication in section 6.1

openid / OpenID4VCI

68 stars 20 forks source link

Use of Basic authentication in section 6.1 #297

Closed gffletch closed 5 months ago

gffletch commented 7 months ago

The non-normative example in section 6.1 uses HTTP Basic authentication for client authentication. I'd recommend using a stronger client authentication mechanism in the example.

Sakurann commented 5 months ago

you might be looking at the older version of the specification. that has been fixed in https://github.com/openid/OpenID4VCI/pull/281