Pre-authorized code single use and tx_code error mapping
OID4VCI 1.0 §6.1MUSTRoles: authorization_server
Requirement as recorded in the ProtocolSoup registry
A pre-authorized code is accepted at most once under concurrent exchange, a required missing tx_code is invalid_request, an unexpected tx_code is invalid_request, and a wrong required tx_code is invalid_grant.
Read §6.1 in OID4VCI 1.0Self-test verdict
PassCommit 97df6a8Evaluated
This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.
Tests
- TestPreAuthorizedGrantRejectsUnexpectedTxCode
./internal/protocols/oid4vci
Pass - TestPreAuthorizedGrantDistinguishesMissingAndWrongTxCode
./internal/protocols/oid4vci
Pass - TestPreAuthorizedGrantExchangeIsAtomic
./internal/protocols/oid4vci
Pass