Sign in
OpenID4VCI Protocol

Issue a c_nonce for the credential proof

OpenID4VCI nonce endpoint. Public, unauthenticated. Mints a fresh single-use c_nonce that the holder must embed in the proof JWT presented to the credential endpoint. The c_nonce is consumed when the proof is verified and expires after 60 seconds. The request body is empty.

post/v1/nonce

Request body

object required

Response

A single-use challenge nonce.

c_noncestring

The challenge nonce. Place it in the nonce claim of the holder proof JWT sent to POST /v1/credential. Single-use — consumed on successful proof verification.

c_nonce_expires_ininteger

Nonce lifetime in seconds. Always 60.

Example response

{
  "c_nonce": "NKQRYXz1aB2cD3eF4gH5",
  "c_nonce_expires_in": 60
}

Changes