Update ewc-rfc002-present-verifiable-credentials.md

Added note that EWC only supports direct_post
spherity · Feb 20, 2024 · 9074105 · 9074105
1 parent 528afbf
commit 9074105
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/ewc-rfc002-present-verifiable-credentials.md b/ewc-rfc002-present-verifiable-credentials.md
@@ -145,6 +145,9 @@ The authorisation request will contain the following fields:
   </tr>
 </table>
 
+> [!NOTE]
+> The authorisation request within EWC context only supports `direct_post` as `response_mode` due to security concerns that come with the alternative method using redirect URIs. 
+
 ## 3.2	Authorisation response
 
 Authorisation response is sent by constructing the `vp_token` and `presentation_submission` values. An example `vp_token` is as given: