openid / openid/OpenID4VCI

How does an Issuer communicate a single-use (or similar) policy

Open
#666 4 comments 0 reactions 1 assignee View on GitHub

@GarethCOliver is already working on this.

Since Oct 24, 2025.

ready-for-PR
Dominant language
No language data
Stars
125
Forks
41
PR merge metrics
No merged PRs in 30d

Description

Issuers should signal to the wallet if he assumes/requests a privacy-preserving presentation of its credentials by the wallet. This topic came up during the wg call around openid/OpenID4VC-HAIP#229.

As the main (or only) motivation for batch issuance was to enable such a policy, I had assumed that the presence of the batch issuance parameters in the issuer's metadata is that signal, as we don't have any other options today. We may define more fine-grained policies in the issuer metadata, but that train has passed for VCI 1.0.

Therefore, I propose (or actually @GarethCOliver during wg call) that we use the batch issuance parameters as a signal until we have better mechanisms in 1.0, and assume single use policy unless there is an out-of-band agreement between the issuer and the wallet

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.