-
Notifications
You must be signed in to change notification settings - Fork 19
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for a credential denial error #321
Conversation
why would an issuer deny a credential request without giving the wallet any reason? does not sound like a good user experience. |
Why wouldn't they give a reason? That's what the |
Co-authored-by: Giuseppe De Marco <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Important PR especially since we are removing authorization_pending
.
@@ -1007,7 +1007,7 @@ If the Credential Request does not contain an Access Token that enables issuance | |||
|
|||
#### Credential Request Errors {#credential-request-errors} | |||
|
|||
For the errors specific to the payload of the Credential Request such as those caused by `type`, `format`, `proof`, or encryption parameters in the request, the error codes values defined in this section MUST be used instead of a generic `invalid_request` parameter defined in Section 3.1 of [@!RFC6750]. | |||
For errors related to the Credential Request's payload, such as issues with `type`, `format`, `proof`, encryption parameters, or if the request is denied, use the specific error codes from this section MUST be used instead of the generic `invalid_request` parameter defined in Section 3.1 of [@!RFC6750]. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
are the purpose of these changes clarification or do they have implication on the introduction of this new error code?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I do believe there's some implications since I'm not sure how implementers have represented such errors today (before this change)
Co-authored-by: Kristina <[email protected]>
The spec currently does not handle the case where an issuer says "cool request bro, but no"
This text supports an issuer's right to deny a credential request for whatever reason, unrelated to the validity of the request itself