Batch credential issuance bound to distinct proof keys

Requirement as recorded in the ProtocolSoup registry

When batch_credential_issuance is advertised, the Credential Issuer accepts multiple JWT proofs up to batch_size, binds each issued Credential to a distinct proof key, rejects duplicate proof keys, rejects proofs exceeding batch_size, and rejects duplicate known request parameters while ignoring unknown extensions.

Self-test verdict

Tests

• TestCredentialIssuesBatchBoundToDistinctProofKeys

  ./internal/protocols/oid4vci

  Pass
• TestCredentialRejectsDuplicateProofKeysInBatch

  ./internal/protocols/oid4vci

  Pass
• TestCredentialRejectsProofsExceedingBatchSize

  ./internal/protocols/oid4vci

  Pass
• TestDeferredRequestIgnoresUnknownParametersAndRejectsDuplicates

  ./internal/protocols/oid4vci

  Pass
• TestDecodeNotificationRequestRejectsDuplicatesAndIgnoresUnknownParameters

  ./internal/protocols/oid4vci

  Pass

Implementation

• backend/internal/protocols/oid4vci/handlers.go
• backend/internal/protocols/oid4vci/plugin.go

Related requirements