Skip to content

[OID4VCI] keep credential-offer state reusable and align offer-flow tests#48586

Open
forkimenjeckayang wants to merge 2 commits intokeycloak:mainfrom
adorsys:oid4vci-conformace-4
Open

[OID4VCI] keep credential-offer state reusable and align offer-flow tests#48586
forkimenjeckayang wants to merge 2 commits intokeycloak:mainfrom
adorsys:oid4vci-conformace-4

Conversation

@forkimenjeckayang
Copy link
Copy Markdown
Contributor

Summary

  • Fixes OID4VCI conformance failures caused by credential-offer state being removed too early during issuance.
  • Keeps credential-offer URIs reusable (no one-time nonce consumption behavior), aligned with the intended runtime contract.
  • Updates offer-flow tests to match reusable offer behavior across auth-code and pre-authorized flows.

Problem

Conformance flow oid4vci-1_0-issuer-happy-flow (pre-authorized code variant) failed with:

  • No credential offer state for: <credentials_offer_id>

This happened because offer state could be unavailable when follow-up accesses occurred.

Why

OID4VCI flows may require follow-up accesses after initial interactions. Persisting offer state for normal lifetime (TTL) and keeping offer fetch reusable prevents false invalid_credential_request failures and aligns implementation + tests with expected behavior.

image

see: adorsys#245 (comment)
Depends on : #48528

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant