OID4VCI Pre-Authorized Code + tx_code

Pre-authorized credential issuance with mandatory transaction code enforcement at token exchange — the offer's grant block declares a tx_code object requiring wallet to include a user-entered code (OID4VCI §6.1).

Try in Looking Glass
Verifiable Credentialstx_code Required

Sequence Diagram

Click any step for details

WalletIssuerAuth Server1Resolve Credential Offer with tx_code2Discover Issuer Metadata3Token Request with tx_code4Token Response5Credential Request6Credential Response
Request
Response
Redirect
Internal

Step-by-Step Breakdown

1
Resolve Credential Offer with tx_code
WalletCredential Issuer
2
Discover Issuer Metadata
WalletCredential Issuer
3
Token Request with tx_code
WalletAuthorization Server
4
Token Response
Authorization ServerWallet
5
Credential Request
WalletCredential Issuer
6
Credential Response
Credential IssuerWallet

Token Inspector

Specs for this flow

Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.

Core specs

· The specifications that define this protocol.

Security & privacy

· Dedicated security and privacy considerations.