Closed bc-pi closed 2 weeks ago
I guess there's the potential to consider two different things here: 1) c_nonce
in a credential error response and 2) c_nonce
in a successful credential response.
But I'm mostly of the mind to treat it as all or nothing.
when/if/after ...
I am in favor of removing the c_nonce option from credential response completely. I don't see any advantage from this optional feature that justifies the extra effort on the wallet side.
In my opinion, there should only be one way to get a nonce.
This only makes sense when/if/after #381 is merged.
Originally posted by @bc-pi in relation to https://github.com/openid/OpenID4VCI/issues/381#issuecomment-2357047069
that is this