Fresh Access Token via Refresh Token to refresh Credentials

OID4VCI 1.0 §14.5MUSTRoles: wallet

Requirement as recorded in the ProtocolSoup registry

When a Refresh Token is issued, the Wallet obtains a fresh Access Token per RFC 6749 Section 6 to refresh Credentials without End-User interaction; otherwise the Wallet restarts issuance.

Read §14.5 in OID4VCI 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestExchangeRefreshTokenRequiresInputs
./cmd/walletharness
Pass
TestExchangeRefreshTokenRedeemsGrant
./cmd/walletharness
Pass

Implementation

backend/cmd/walletharness/oid4vci_client.go

Related requirements

CW-010Credential Offer parameter values treated as not trustworthy CW-100Credentials stored only in encrypted form and no longer than needed

All OID4VCI 1.0 requirements · OID4VCI protocol page