[java-idp-plugin-vci] branch main updated: Remove not needed comment

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/fef1f6e1b3d8b78cc1cdbc8130b5a1cddba0fe14

The following commit(s) were added to refs/heads/main by this push:
     new fef1f6e  Remove not needed comment
fef1f6e is described below

commit fef1f6e1b3d8b78cc1cdbc8130b5a1cddba0fe14
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Tue Oct 27 15:52:29 2026 +0200

    Remove not needed comment
---
 README.md | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/README.md b/README.md
index b1e3380..041ee27 100644
--- a/README.md
+++ b/README.md
@@ -3506,13 +3506,6 @@ authenticates an attested request without checking the attestation:
 
 Full file: [conf/authn/oauth2client-authn-config.xml](docs/example/step-5/conf/authn/oauth2client-authn-config.xml)
 
-The validator follows
-[OAuth 2.0 Attestation-Based Client Authentication, draft 12](https://datatracker.ietf.org/doc/draft-ietf-oauth-attestation-based-client-auth/12/).
-The Wallet Attestation needs `sub`, `exp`, `iat` and `cnf`. The proof of possession needs `aud`,
-`jti` and `iat`; `exp` and `iss` are checked only when present. A proof of possession is accepted
-for `openidvci.attestation.proofLifetime` after its `iat`, and its `jti` is refused for that time.
-Rejections are logged at WARN with the reason.
-
 The VCI endpoints use login flow `OpenIDVCIClient` of this plugin, which knows the method. The
 PAR endpoint is the OP's, and it refuses a client registered with a method its own login flow
 does not know. Give the OAuth endpoints of the OP the same flow in *conf/oidc.properties*:

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.