openid / openid/OpenID4VC-HAIP

Metadata publication requirements

Open
#379 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Makefile
Stars
57
Forks
17
PR merge metrics
No merged PRs in 30d

Description

Section 4.1 states that:

The Credential Issuer MUST support metadata retrieval according to Section 12.2.2 of [OIDF.OID4VCI]. The Credential Issuer metadata MUST include a scope for every Credential Configuration it supports.

Does this effectively mean that implementing HAIP requires issuers to have public information on all credential types and configurations it supports? Or is there a way to comply with HAIP while making that information only available to authorized entities.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the quoted Section 4.1 requirement and follow its link to Section 12.2.2 of OIDF.OID4VCI. Compare the metadata and authorization requirements, then document whether supported credential configurations must be publicly discoverable or whether an authorized-only approach complies with HAIP.

Written by the indexing model from the issue text.

Assessment

Domain
documentation
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.