Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

c_nonce and jwt proof #188

Closed
peppelinux opened this issue Jan 9, 2024 · 1 comment · Fixed by #208
Closed

c_nonce and jwt proof #188

peppelinux opened this issue Jan 9, 2024 · 1 comment · Fixed by #208
Assignees
Milestone

Comments

@peppelinux
Copy link
Member

peppelinux commented Jan 9, 2024

in the issuance flow we use c_nonce and jwt proof without a proper definition of them

for instance, the c_nonce is a String containing a nonce to be used when creating a proof of possession of the key proof (see Section 7.2). When received, the Wallet MUST use this nonce value for its subsequent requests until the Credential Issuer provides a fresh nonce.

we have a quick definition here https://github.com/italia/eudi-wallet-it-docs/blob/versione-corrente/docs/en/pid-eaa-issuance.rst#token-response

we could imrpove this by giving more impl guidance about how this nonce is produces and how it can be used/verified with the jwt proof

@peppelinux
Copy link
Member Author

scope
why we use c_nonce and why in italy we bind dpop with jwt proof

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

Successfully merging a pull request may close this issue.

4 participants