request_uri_method=post binds wallet_nonce into the request object

OID4VP 1.0 §5.10.2MUSTRoles: verifier

Requirement as recorded in the ProtocolSoup registry

A request_uri_method=post endpoint binds wallet_nonce into the signed request object, permits exact repeated retrieval, and rejects a changed nonce.

Read §5.10.2 in OID4VP 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestAuthorizationRequestPOSTBindsWalletNonceAndIsSafelyRepeatable
./internal/protocols/oid4vp
Pass

Implementation

backend/internal/protocols/oid4vp/handlers.go

Related requirements

VP-004GET request_uri returns the compact signed authorization request VP-006Exact state correlation for redirect response modes

All OID4VP 1.0 requirements · OID4VP protocol page