Issuer metadata retrieved from /.well-known/openid-credential-issuer

OID4VCI 1.0 §12.2.2MUSTRoles: wallet

Requirement as recorded in the ProtocolSoup registry

To retrieve Credential Issuer Metadata, the Wallet MUST send an HTTP GET request to the Credential Issuer Identifier with path /.well-known/openid-credential-issuer inserted between the host and any path component.

Read §12.2.2 in OID4VCI 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestWellKnownMetadataURLCandidatesWithIssuerPath
./cmd/walletharness
Pass
TestWellKnownMetadataURLCandidatesPreserveCredentialIssuerTrailingSlash
./cmd/walletharness
Pass
TestWellKnownMetadataURLCandidatesStripOAuthASTrailingSlash
./cmd/walletharness
Pass

Implementation

backend/cmd/walletharness/oid4vci_external.go

Related requirements

CI-020HAIP SD-JWT VC certificate-backed signer and status list references CI-018mso_mdoc signing algorithms as numeric COSE algorithm identifiers

All OID4VCI 1.0 requirements · OID4VCI protocol page