OpenID4VCI Just Got a Major Upgrade! Here's What You Need to Know

• Enhanced Security: The c_nonce parameter is now explicitly described as a challenge to prevent replay attacks, with clearer guidelines for its use.
• Nonce Endpoint Clarity: The role of the Nonce Endpoint is better defined, emphasizing its importance for freshness checks.
• Algorithm Flexibility: Algorithm identifiers are now case-sensitive and format-specific, supporting a wider range of cryptographic methods.
• Metadata Reorganization: Claims and display properties are now nested under credential_metadata, allowing for format-specific overrides.
• Improved UX: Localization and branding support (logo_uri, background_color) are now more flexible and user-friendly.

OpenID for Verifiable Credential Issuance (OpenID4VCI) is an OAuth 2.0-based protocol designed for issuing tamper-proof digital credentials like mobile driver’s licenses and educational diplomas. It ensures interoperability with existing OAuth and OpenID Connect systems while prioritizing privacy and security. The latest updates refine its technical endpoints, credential formats, and security mechanisms, making it even more robust for real-world applications.