Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for a credential denial error #321

Merged
merged 4 commits into from
May 27, 2024
Merged

Add support for a credential denial error #321

merged 4 commits into from
May 27, 2024

Conversation

decentralgabe
Copy link
Contributor

The spec currently does not handle the case where an issuer says "cool request bro, but no"

This text supports an issuer's right to deny a credential request for whatever reason, unrelated to the validity of the request itself

@decentralgabe decentralgabe requested review from Sakurann, tlodderstedt and selfissued and removed request for Sakurann and tlodderstedt May 16, 2024 01:07
@Sakurann
Copy link
Collaborator

why would an issuer deny a credential request without giving the wallet any reason? does not sound like a good user experience.

@decentralgabe
Copy link
Contributor Author

decentralgabe commented May 16, 2024

why would an issuer deny a credential request without giving the wallet any reason? does not sound like a good user experience.

Why wouldn't they give a reason? That's what the error_description field is for.

Copy link
Contributor

@awoie awoie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important PR especially since we are removing authorization_pending.

@@ -1007,7 +1007,7 @@ If the Credential Request does not contain an Access Token that enables issuance

#### Credential Request Errors {#credential-request-errors}

For the errors specific to the payload of the Credential Request such as those caused by `type`, `format`, `proof`, or encryption parameters in the request, the error codes values defined in this section MUST be used instead of a generic `invalid_request` parameter defined in Section 3.1 of [@!RFC6750].
For errors related to the Credential Request's payload, such as issues with `type`, `format`, `proof`, encryption parameters, or if the request is denied, use the specific error codes from this section MUST be used instead of the generic `invalid_request` parameter defined in Section 3.1 of [@!RFC6750].
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

are the purpose of these changes clarification or do they have implication on the introduction of this new error code?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I do believe there's some implications since I'm not sure how implementers have represented such errors today (before this change)

@Sakurann Sakurann merged commit 859ad5b into main May 27, 2024
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants