OID4VP - support for access_denied when user decides not to share credentials

[cvetojevichbojan]

Should the wallet-sdk open an interface to send out error responses to the Verifier in case a user reject sharing requested credentials? (Maybe utilizing oid4vp client)

Looking at the oid4vp specs, section 8.5 Error Response specifies the following:

access_denied:
The Wallet did not have the requested Credentials to satisfy the Authorization Request.
The End-User did not give consent to share the requested Credentials with the Verifier.The Wallet failed to authenticate the End-User.

The wallet may send an error response but it can also chose to stay silent for privacy reasons, but with the given interface wallet implementations can not send an error response themselves at required/desired points.

[mgiakkou]

Dear @cvetojevichbojan,

Thank you for your comment. We are moving this issue to the appropriate repository to process it and get back to you.

Thank you,
Michalis.