OID4VCI Pre-Authorized Code
Wallet resolves a credential offer URI, discovers issuer metadata, exchanges a pre-authorized code for an access token with c_nonce, and requests a Verifiable Credential bound to a proof JWT.
OID4VCI Pre-Authorized Code
Wallet resolves a credential offer URI, discovers issuer metadata, exchanges a pre-authorized code for an access token with c_nonce, and requests a Verifiable Credential bound to a proof JWT.
Verifiable CredentialsPre-Authorized CodeProof + c_nonce
Sequence Diagram
Click any step for details
Request
Response
Redirect
Internal
Step-by-Step Breakdown
1
Resolve Credential Offer
Wallet → Credential Issuer
2
Discover Issuer Metadata
Wallet → Credential Issuer
3
Token Request (Pre-Authorized Code)
Wallet → Authorization Server
4
Token Response
Authorization Server → Wallet
5
Credential Request
Wallet → Credential Issuer
6
Credential Response
Credential Issuer → Wallet
Token Inspector
Specs for this flow
Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.