Credential identifiers bound to authorization_details

OID4VCI 1.0 §6.3 and 8.2MUSTRoles: authorization_server, issuer

Requirement as recorded in the ProtocolSoup registry

When authorization_details are used, the Authorization Server returns credential_identifiers for the authorized Credential Configurations and the Credential Issuer authorizes requests by those bound identifiers.

Read §6.3 and 8.2 in OID4VCI 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestAuthorizationDetailsIssuesTokenBoundCredentialIdentifiers
./internal/protocols/oid4vci
Pass
TestCredentialIdentifierRejectsMixedUnknownAndCrossTokenValues
./internal/protocols/oid4vci
Pass
TestAuthorizationCodeGrantReturnsCredentialIdentifiers
./internal/protocols/oid4vci
Pass

Implementation

backend/internal/protocols/oid4vci/handlers.go

Related requirements

CI-016Authorization codes and deferred transaction identifiers accepted once CI-009Nonce endpoint offered when c_nonce is required in proofs

All OID4VCI 1.0 requirements · OID4VCI protocol page