Notification validation, idempotent retry and access token binding
OID4VCI 1.0 §11MUSTRoles: issuer
Requirement as recorded in the ProtocolSoup registry
The Credential Issuer validates the notification_id and event, accepts an exact retry idempotently, and binds the notification to the access token used for issuance.
Read §11 in OID4VCI 1.0Self-test verdict
PassCommit 97df6a8Evaluated
This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.
Tests
- TestNotificationEndpointMutatesStateAndIsIdempotent
./internal/protocols/oid4vci
Pass - TestNotificationEndpointRejectsInvalidRequestsAndCrossTokenID
./internal/protocols/oid4vci
Pass - TestNotificationRejectsConflictingTerminalEvent
./internal/protocols/oid4vci
Pass