loadIssuerMetadata

Loads the unsigned IssuerMetadata from credentialIssuer, see WellKnownPaths.CredentialIssuer, asking for application/json (OpenID4VCI 1.0, 12.2.2). Fails if their credential_issuer is not credentialIssuer (12.2.4). To load signed metadata, see the overload with a policy.

Sends CredentialIssuerMetadata.


Loads the metadata of credentialIssuer, see WellKnownPaths.CredentialIssuer, asking for signed metadata (application/jwt) over unsigned ones (application/json), which the credential issuer has to support (OpenID4VCI 1.0, 12.2.2). Takes the media type of the response from its Content-Type:

  • signed metadata are validated with issuerMetadataValidator under policy, see IssuerMetadataValidator.validate, and returned with their report, also if they are rejected, so that the wallet can show why, e.g. that the access certificate of the credential issuer is not trusted;

  • unsigned metadata are returned if their credential_issuer is credentialIssuer (12.2.4), and it is up to the wallet whether to use them: e.g. the EUDI Wallet ecosystem requires signed metadata (ETSI TS 119 472-3 V1.1.1, ISS-MDATA-4.2.1-01).

Sends CredentialIssuerMetadata.