BREAKING: OID4VCI June 2025 Draft Simplifies Credential Issuance & Boosts Security!

• Simplified Credential Identification: The credential_configuration_id is now the sole required parameter for identifying requested credentials, removing the optional format parameter to streamline the process.
• Enhanced Key Attestation: The Wallet can now use a single key attestation for multiple keys, reducing unnecessary user interactions during credential issuance.
• Stricter Metadata Validation: The credential_issuer identifier must now exactly match the well-known URI used to retrieve metadata, ensuring data integrity.
• New ISO 18045 Compliance: Added explicit references to ISO 18045 for key storage and user authentication, standardizing security levels like iso_18045_moderate.
• Removed Redundant Claims: Eliminated optional claims like vct and doctype from authorization details, simplifying the specification.

OID4VCI (OpenID for Verifiable Credential Issuance) is an OAuth 2.0 extension that standardizes the secure issuance of Verifiable Credentials (VCs) like digital IDs, diplomas, and KYC documents. It bridges OAuth 2.0's robustness with decentralized identity flexibility, supporting formats like W3C VCs, ISO mdocs, and SD-JWT VCs. The June 2025 draft refines the standard by simplifying credential identification, enhancing security with key attestations, and aligning with ISO 18045 for standardized security levels.