Not a new problem, but the lack of any form of client authentication in this request is slightly disturbing :) _Originally posted by @jogu in https://github.com/openid/OpenID4VCI/pull/509#discussion_r2116503744_