Create an OpenID4VCI credential nonce

POST

/oid4vci/nonce

curl --request POST \
  --url https://example.com/oid4vci/nonce \
  --header 'Content-Type: application/json' \
  --data '{ "credential_configuration_id": "example" }'

Returns a c_nonce for proof-of-possession. Error responses use the OpenID4VCI error envelope, not RFC 9457 Problem Details.

Request Body

Media typeapplication/json

object

credential_configuration_id

string

Example^generated

{
  "credential_configuration_id": "example"
}

Responses

200

Nonce response

Media typeapplication/json

object

c_nonce

required

string

c_nonce_expires_in

required

integer format: uint64

Example

{
  "c_nonce": "b64url-nonce",
  "c_nonce_expires_in": 300
}

400

Invalid nonce request

Media typeapplication/json

object

error

required

string

error_description

string

Example

{
  "error": "invalid_request",
  "error_description": "credential request is invalid"
}

404

OpenID4VCI nonce endpoint is disabled

429

Nonce store is rate limited

Media typeapplication/json

object

error

required

string

error_description

string

Example

{
  "error": "temporarily_unavailable",
  "error_description": "credential request is rate limited"
}

500

OpenID4VCI issuer failed

Media typeapplication/json

object

error

required

string

error_description

string

Example

{
  "error": "server_error",
  "error_description": "credential issuer failed"
}