Define that `client_id_prefix` value of `origin` is not allowed for IAE?
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 125
- Forks
- 41
- PR merge metrics
- No merged PRs in 30d
Description
The Require presentation section requires that the IAE OpenID4VP request follows DC API requirements with some exceptions. However it does not mention anything about the client_id_prefix. The implied client_id_prefix in DC API is origin if there's no client_id defined, but this is not applicable to IAE I think?
So should there be a note about client_id_prefix with IAE? Since the presentation needs to prefix iae: in the aud (and uses a custom session transcript for mdoc), there's not really any missing behavior as I see it, just a bit confusing, as our logic "implies" the client_id to be origin:<origin> if there's no client_id defined (in DC API, and IAE builds on DC API), and it seems there's a new implied client id with iae: iae:<iae_endpoint>. I think describing this in a similar way to the implied client id with DC makes sense.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the OpenID4VCI “Require presentation” section and compare its stated DC API exceptions with the linked OpenID4VP requirements. Check how the text currently implies client_id_prefix and client_id when no client_id is supplied, then clarify the IAE-specific behavior and verify that the resulting wording matches the existing iae: aud and session-transcript requirements.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 72/100