Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to request new copies of a credential #124

Open
cre8 opened this issue Nov 29, 2023 · 3 comments · May be fixed by #452
Open

How to request new copies of a credential #124

cre8 opened this issue Nov 29, 2023 · 3 comments · May be fixed by #452

Comments

@cre8
Copy link

cre8 commented Nov 29, 2023

In section 12.6 the refresh method is described as an update mechanism "when some values have changed".
What is not described is what will happen with the already issued credentials. Will they be revoked? Can the wallet send a value if the old ones should be revoked or not? Will the issuer give information about the handling when issuing the first credential?

Background of the question was the situation when I requested a batch of credentials because I want to use a dedicated JWT for each relying party to avoid linkability during the presentation. But during the issuance process I don't know how many copies I will need in the future so there could be the situation where the wallet asks the issuer for more copies of the credentials. For user experience I don't want the holder to manually start the process, both approaches are already covered by the specification.

So when my wallet is down to 5 credentials and it wants to fill up to 10 credentials again, does it have to query 5 credentials to fill it up or does it have to ask for 10 because all the old ones will be revoked (in case the issuer is supporting some kind of status management). Of course my wallet could check after the reissuance if the old ones are still valid and then start the issuer process again but now with 10 copies. But this seems to be a dirty solution to handle the problem.

@paulbastian
Copy link
Contributor

Related to #91 and #93
Revoking is up to the issuer and not mentioned anywhere in OpenID4VCI.
I guess the simplest and safest solution for credential_instances/copies is to throw away the old ones and only used the new ones.

@Sakurann
Copy link
Collaborator

it is probably worthwhile adding a sentence that "when wallet receives a new batch of the same credential datasets, the wallet SHOULD delete previous credentials" as it seems like that's what most wallets/issuers are doing.

@jogu
Copy link
Contributor

jogu commented Jul 25, 2024

I reviewed this issue given we've removed the batch endpoint now, and I believe the suggestion Kristina made in her last comment is still relevant to the credential endpoint when it returns a batch for unlinkability so we should still make that clarification.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
4 participants