Allow providing of proofing data (e.g. selfies / photos of credentials) during issuance without web views
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 125
- Forks
- 41
- PR merge metrics
- No merged PRs in 30d
Description
We should extend presentation during issuance to use https://github.com/openid/OpenID4VCI/pull/509/files to allow further types of things to be requested - e.g. photos of physical mdl.
Also could need to be encrypted as per request from ISO, as TLS may be terminated before the request arrives at the entity that would decrypt.
Various USA states already have this in production today, and popping a web view doesn't really work on companion devices.
Initially this could just be a way to transfer this kind of data in an encrypted way, without specifying the types of data and how the issuer requests them (a mechanism like this is defined in 23220-3 already). 23220-3 already allows the items to be individually encrypted to potentially allow some encrypted by the wallet front end or backend.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing OpenID4VCI pull request 509 and the 23220-3 mechanism referenced in the issue. Clarify the requested proofing-data types, issuer request flow, encryption boundaries, and companion-device constraints before locating implementation entry points. Done should include an agreed protocol design and tests or examples covering encrypted transfer.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100