[Openid-specs-ab] Issue #1685: Returning large credentials (openid/connect)

David W Chadwick issues-reply at bitbucket.org
Wed Oct 19 10:12:40 UTC 2022


New issue 1685: Returning large credentials
https://bitbucket.org/openid/connect/issues/1685/returning-large-credentials

David W Chadwick:

Some credentials may be very large e.g. those with embedded images. The OIDC4VPs spec specifies the new response mode `post` for the cross device flow. This will allow any size of credential to be returned. However the same device flow uses http re-directs, and this may limit the size of credential that can be returned. How might this be addressed?

One solution could be to allow the new response mode `post` to be applicable to the same device flow as well.


More information about the Openid-specs-ab mailing list