[java-idp-plugin-vci] branch main updated: Default oauth2 metadata advertize grant types supported

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/9bcf21391f8bffd5b6c962352191cb736f51e0bc

The following commit(s) were added to refs/heads/main by this push:
     new 9bcf213  Default oauth2 metadata advertize grant types supported
9bcf213 is described below

commit 9bcf21391f8bffd5b6c962352191cb736f51e0bc
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Tue Sep 22 14:59:24 2026 +0300

    Default oauth2 metadata advertize grant types supported
---
 README.md                                                | 16 ++++++++++++++++
 .../openidvci/static/oauth-authorization-server.json     |  4 ++++
 2 files changed, 20 insertions(+)

diff --git a/README.md b/README.md
index 0473977..10adc8a 100644
--- a/README.md
+++ b/README.md
@@ -1335,6 +1335,10 @@ See [DID.Document](#diddocument).
    "response_types_supported":[
       "code"
    ],
+   "grant_types_supported":[
+      "authorization_code",
+      "urn:ietf:params:oauth:grant-type:pre-authorized_code"
+   ],
    "code_challenge_methods_supported":[
       "S256"
    ],
@@ -1349,6 +1353,18 @@ See [DID.Document](#diddocument).
 
 </details>
 
+`scopes_supported` is yours to write. A wallet of the code flow names the credential it wants
+as a scope, so every credential configuration id you want requestable that way belongs here.
+With the credentials of this document it reads:
+
+```json
+   "scopes_supported":[
+      "openid",
+      "GeantIncubatorDiploma_SDJWT",
+      "GeantIncubatorDiploma_W3C"
+   ],
+```
+
 `require_pushed_authorization_requests` and `code_challenge_methods_supported` describe the OP,
 they do not configure it. Both are off in the OP by default. Back them on the **OIDC.SSO** bean:
 
diff --git a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/oauth-authorization-server.json b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/oauth-authorization-server.json
index 75267e7..5cc455a 100644
--- a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/oauth-authorization-server.json
+++ b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/static/oauth-authorization-server.json
@@ -14,6 +14,10 @@
    "response_types_supported":[
       "code"
    ],
+   "grant_types_supported":[
+      "authorization_code",
+      "urn:ietf:params:oauth:grant-type:pre-authorized_code"
+   ],
    "code_challenge_methods_supported":[
       "S256"
    ],

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.