Make Pre-Authorized Code short-lived and single-use #240
Description
Description
As discussed here, the Pre-Authorized Code is currently not short-lived and single-use which is a hard requirement as described here.
Motivation
This feature is an important security requirement as described in OPenID4VCI
Resources
- feat: support the OpenID4VCI Authorization Code Flow #203 (comment)
- https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0-15.html#section-4.1.1-5.2.2.1
To-do List
- Make Pre-Authorized Code single use
- Make Pre-Authorized Code short-lived