RP_WS_SM_Validity_002¶
Objective¶
Verify that the Relying Party accepts a credential in SD-JWT VC format whose expiration time has passed by less than the declared clock tolerance.
References¶
- [RFC7519] section 4.1.4
- [RFC9901] section 7.1
- [SD-JWT VC] section 2.4
- [OpenID4VP] section 8.6
- [CIR 2024/2982 amended] Annex II
Profile applicability¶
- Relying Party requests credentials in IETF SD-JWT VC format.
- Relying Party applies a clock tolerance greater than zero.
EUDI-wallet relevancy¶
EUDI_generic | EUDI_required
Technology¶
- Presentation of a credential in IETF SD-JWT VC format.
Preconditions¶
- The Relying Party is set to
default_configuration_rp_1. - The test environment publishes
default_trust_configuration_rp, and the Relying Party has loaded it. - Test case
RP_WS_IA_MainInteraction_001apassed in the same environment.
Test Scenario¶
- Perform a presentation for
default_query_pidin which the Conformance Wallet presents, in an otherwise valid Authorization Response, a variant ofdefault_credential_pidthat differs from it only in that its Issuer-signed JWT carries anexpclaim set to the current time minus half ofT_skew.
Expected results¶
- The Relying Party accepts the presentation: its verification result reports success and releases exactly the attributes requested in
default_query_pid, with the values of the presented credential.
Comments¶
Execute this test case once for each presentation flow the Relying Party supports (redirects, W3C Digital Credentials API).