Skip to main content

Authorization using Verifiable Credentials

To successfully negotiate an OAuth2 access token, the token issuer (OAuth2 Authorization Server) will ask the client to present Verifiable Credentials. Nuts uses DIF Presentation Exchange for requesting and presenting credentials during authentication. It is specifiedused by OpenID4VPservice-to-service and the (vp_token bearer OAuth2 flow.flow) and user flow (OpenID4VP).

Presentation Definition

The party requesting a presentation, typically during access token negotiation, provides a Presentation Definition to the credential wallet. The Presentation Definition specifies which credentials the wallet must provide. If the wallet can't fulfill the definition, access token negotiation will fail.

An example Presentation DefinitionsDefinition are used for communicating the required credentials forspecifying a certainNutsOrganizationCredential, requestednot scoperestricted duringto accessa tokenspecific negotiationissuer (bothcould service-to-servicelook flowas and user flow). They are also used by Discovery Services (more on that in another chapter).follows:

Scope Policy

The following example requires a

See the DIF Presentation Exchange specification for more information.

Back to top