Wallet supports DPoP and handles DPoP-Nonce from issuer endpoints

HAIP 1.0 §4MUSTRoles: wallet

Requirement as recorded in the ProtocolSoup registry

Wallets MUST support DPoP and MUST be prepared to handle DPoP-Nonce from the Nonce Endpoint and other Credential Issuer and Authorization Server endpoints.

Read §4 in HAIP 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestNotifyCredentialAcceptedUsesNotificationBinding
./cmd/walletharness
Pass
TestDoDPoPJSONRequestRefreshesClientAttestationPoPOnNonceRetry
./cmd/walletharness
Pass

Implementation

backend/cmd/walletharness/oid4vci_client.go
backend/cmd/walletharness/haip_issuance.go

Related requirements

Also in §4

CW-H003FAPI 2.0 compliance including PKCE S256, PAR and iss

CW-H003FAPI 2.0 compliance including PKCE S256, PAR and iss CW-H010PAR endpoint authentication matches Token Endpoint rules

All HAIP 1.0 requirements · OID4VCI protocol page