directPostHttpResponse

The answer of the response endpoint, after it has processed an authorization response or authorization error response posted with the response mode direct_post or direct_post.jwt: status 200 with a JSON object, holding redirectUri as redirect_uri if present (OpenID4VP 1.0 8.2), see OpenId4VpSuccess. The header Cache-Control: no-store keeps the redirect_uri out of caches, as it should carry a fresh secret against session fixation (OpenID4VP 1.0 14.2), as in the example of 8.2.