[Openid-dcp] Latest OID4VC conformance test updates

[Joseph Heenan]

Hi all

We have some more recent updates to the conformance tests to share:

OID4VP

Recap: The tests support the proposed 1.0 final version of VP, along with the current draft of HAIP, for both wallets and verifiers, for both SD-JWT & mdoc. Wallets can also be tested using the w3c digital credentials API. We’ve had a number of wallets and verifiers that have been taking part in the interop events run and pass these tests already, so they should be in a good shape.

Latest: Some small updates to improve clarity of various errors.

OID4VCI

The tests now support the version of VCI that is undergoing public review (currently draft 16, https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0-16.html ) [These show up as ‘final’ in the list of tests, though they are still labelled as ID2 in a lot of places, this will get resolved over the next few days.]

Wallet attestations are now supported as a client authentication method (as required by HAIP).

For wallets, testing issuance over the W3C Digital Credentials API is now supported.

The tests are still a bit unpolished but that’ll get tidied up.

The tests that supported ID2 are no longer present on ‘demo’ - if anyone really needs these please let us know and we’ll roll them out on another environment, but we strongly recommend everyone moves to draft 16 as soon as possible, as this is essentially the version that will be published as ‘final’.

The changes we made to move from draft 15 to draft 16:


  1.  Use 'proofs' instead of 'proof' in credential request
  2.  Stop sending access token to nonce endpoint (as per spec)
  3.  Now requires & returns 200 response from credential endpoint
  4.  credential issuer metadata retrieval/publishing now uses the "IETF way" where .well-known is always at the root of the path
  5.  credential_metadata with a display element is now included in credential_configurations_supported in the credential issuer metadata
  6.  Wallet tests optionally support new signed credential issuer metadata mechanism


We’ve had at least 5 issuers pass the draft 16 tests already.


Instructions for using both sets of tests are available here: https://openid.net/certification/instructions/


Thanks

Joseph

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20250717/d5fc94b4/attachment-0001.htm>