Authorization codes and deferred transaction identifiers accepted once
OID4VCI 1.0 §6.2 and 9MUSTRoles: authorization_server, issuer
Requirement as recorded in the ProtocolSoup registry
Authorization codes and deferred transaction identifiers are accepted at most once, including concurrent redemption attempts.
Read §6.2 and 9 in OID4VCI 1.0Self-test verdict
PassCommit 97df6a8Evaluated
This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.
Tests
- TestAuthorizationCodeRedemptionIsAtomic
./internal/protocols/oid4vci
Pass - TestDeferredIssuanceFlow
./internal/protocols/oid4vci
Pass