Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Utilize nonce from server response for subsequent client calls #110

Open
Haza85 opened this issue May 24, 2024 · 1 comment
Open

Utilize nonce from server response for subsequent client calls #110

Haza85 opened this issue May 24, 2024 · 1 comment

Comments

@Haza85
Copy link

Haza85 commented May 24, 2024

Hello, I've observed that the OpenID4VCIClient consistently utilizes the nonce from the access token acquisition response. However, there's a scenario where we need to make multiple sequential calls to the server to retrieve credentials using the same access token. In this case, each request requires a nonce from the preceding server response. Presently, the implementation relies on the same nonce for each request, resulting in the failure of subsequent requests due to nonce invalidity.

@nklomp
Copy link
Contributor

nklomp commented May 24, 2024

Yeah you are correct, this is something we will be fixing after support for Draft 13 lands, of which a first version will land this week

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants