feat(auth): [T4] HAIP request signing — x509_hash Client Identifier over a signed JAR (#377 Phases A+B) - #394

Merged

EsTharian merged 4 commits into

mainfrom

feat/377-haip-request-signing

Aug 25, 2026

Commits on Aug 25, 2026

feat(auth): provision the OID4VP verifier's ES256 key and X.509 chain

EsTharian
and
claude
committed
0333a8a
feat(auth): sign OID4VP requests with x509_hash and deliver them by request_uri

EsTharian
and
claude
committed
fd2ccd4
test(auth): exercise the request-object endpoint through real Fastify

EsTharian
and
claude
committed
9955870
fix(auth): decide OID4VP delivery from the request, and normalise the verifier key

EsTharian
and
claude
committed
8e90473