OpenID4VCI icon indicating copy to clipboard operation
OpenID4VCI copied to clipboard

Problems in Authorization Code with scope and mutliple Credential Datasets

Open paulbastian opened this issue 8 months ago • 14 comments

Imagine a basic scenario where a Wallet wants to request multiple Credentials with different Credential Datasets, e.g. multiple ePrescriptions. The challenge is how a Wallet knows how many Credential Requests to do.

Within Authorization Code Flow with authorization_details, the Wallet can deduct the number of Credential Datasets from the Token Response with credential_identifiers array size.

Within Authorization Code Flow with scope, this method does not work (as it is specific to authorization_details) and the Wallet may need to send requests until it gets an error, which seems to be insufficient.

Proposal could be to allow credential_identifiers for all flows. Changes discussed in #294 are also relevant.

paulbastian avatar Jun 07 '24 13:06 paulbastian