Standards conformance

Independently tested

Tested against the OpenID Foundation Conformance Suite · last run · suite a3892ae · 0 failures across 34 modules

OpenID for Verifiable Credential Issuance 1.0 (Issuer)

9 passed · 4 warning · 2 skipped · 13 not automated · 1 deferred
Pre-authorized code + DPoP + encrypted
  • oid4vci-1_0-issuer-metadata-test
    Warning
  • oid4vci-1_0-issuer-metadata-test-signed
    Warning
  • oid4vci-1_0-issuer-happy-flow
    Passed
  • oid4vci-1_0-issuer-happy-flow-additional-requests

    The suite must open a fresh direct TLS connection to the issuer for the additional-credential request; this is not satisfiable with the local dev self-signed certificate. Environment limitation, not a conformance failure.

    Not automated here
  • oid4vci-1_0-issuer-happy-flow-multiple-clients

    The multiple-client flow requires a browser to drive the second client's authorization redirect; the local curl harness cannot complete it.

    Not automated here
  • oid4vci-1_0-issuer-happy-flow-skip-notification
    Passed
  • oid4vci-1_0-issuer-fail-invalid-nonce
    Passed
  • oid4vci-1_0-issuer-fail-invalid-jwt-proof-signature
    Passed
  • oid4vci-1_0-issuer-fail-invalid-key-attestation-signature

    Not applicable to this configuration.

    Skipped
  • oid4vci-1_0-issuer-fail-missing-proof
    Passed
  • oid4vci-1_0-issuer-fail-unsupported-encryption-algorithm
    Passed
  • oid4vci-1_0-issuer-fail-unknown-credential-configuration
    Passed
  • oid4vci-1_0-issuer-fail-unknown-credential-identifier
    Passed
  • oid4vci-1_0-issuer-fail-on-access-token-in-query
    Passed
Authorization code + DPoP + encrypted
  • oid4vci-1_0-issuer-metadata-test
    Warning
  • oid4vci-1_0-issuer-metadata-test-signed
    Warning
  • oid4vci-1_0-issuer-happy-flow

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-happy-flow-additional-requests

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-happy-flow-multiple-clients

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-happy-flow-skip-notification

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-fail-invalid-nonce

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-fail-invalid-jwt-proof-signature

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-fail-invalid-key-attestation-signature

    Not applicable to this configuration.

    Skipped
  • oid4vci-1_0-issuer-fail-missing-proof

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-fail-unsupported-encryption-algorithm

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-fail-unknown-credential-configuration

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-fail-unknown-credential-identifier

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
  • oid4vci-1_0-issuer-fail-on-access-token-in-query

    The authorization-code flow requires a browser to drive the authorize redirect (login and consent); the local curl harness cannot complete it. Metadata checks run; the interactive flow modules cannot.

    Not automated here
Roadmap (deferred)
  • HAIP profile (x5c, mandatory exp)

    The High Assurance Interoperability Profile is on the roadmap; tracked separately and not yet claimed.

    Deferred

OpenID for Verifiable Presentations 1.0 (Verifier)

1 warning
x509_san_dns + DCQL + SD-JWT
  • oid4vp-id3-verifier-happy-flow
    Warning

OpenID for Verifiable Presentations 1.0 (Wallet)

4 not automated
redirect_uri + DCQL + SD-JWT
  • oid4vp-id3-wallet-happy-flow-no-state

    Requires a holder wallet to consume the openid4vp:// request (QR scan); the local harness cannot drive the PWA.

    Not automated here
  • oid4vp-id3-wallet-happy-flow-with-state-and-redirect

    Requires a holder wallet to consume the openid4vp:// request (QR scan); the local harness cannot drive the PWA.

    Not automated here
  • oid4vp-id3-wallet-negative-test-response-uri-not-client-id

    Requires a holder wallet to consume the openid4vp:// request (QR scan); the local harness cannot drive the PWA.

    Not automated here
  • oid4vp-id3-wallet-negative-test-invalid-request-object-signature

    Requires a holder wallet to consume the openid4vp:// request (QR scan); the local harness cannot drive the PWA.

    Not automated here

Methodology

Passes are real conformance-suite results. Not automated here means our local harness can't drive a browser-redirect or QR flow — not a product failure. Deferred items are on the roadmap. Skipped means not applicable to the tested configuration.