Exact state correlation for redirect response modes

OID4VP 1.0 §8.3MUSTRoles: verifier

Requirement as recorded in the ProtocolSoup registry

Redirect response modes require exact correlation to the state issued in the Authorization Request; a private request_id cannot bypass it. An encrypted response without an outer state is selected only by its ephemeral JWE kid before the decrypted state is compared exactly.

Read §8.3 in OID4VP 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestRedirectWalletResponseRequiresExactStateEvenWithRequestID
./internal/protocols/oid4vp
Pass
TestHAIPDirectPostJWTSDJWTProvisionsECDHESEncryption
./internal/protocols/oid4vp
Pass

Implementation

backend/internal/protocols/oid4vp/handlers.go

Related requirements

VP-008request_uri_method=post binds wallet_nonce into the request object VP-011Error on transaction_data when the wallet does not support it

All OID4VP 1.0 requirements · OID4VP protocol page