Only check response_type, etc. when no request/request_uri given.

digitalbazaar · Oct 23, 2023 · d818cae · d818cae
1 parent bbdc42e
commit d818cae
Showing 1 changed file with 8 additions and 6 deletions.
diff --git a/lib/oid4vp.js b/lib/oid4vp.js
@@ -750,19 +750,21 @@ function _parseOID4VPUrl({url}) {
   const nonce = _get(searchParams, 'nonce');
   const response_uri = _get(searchParams, 'response_uri');
   const state = _get(searchParams, 'state');
-  if(response_type !== 'vp_token') {
-    throw new Error(`Unsupported "response_type", "${response_type}".`);
-  }
-  if(response_mode !== 'direct_post') {
-    throw new Error(`Unsupported "response_type", "${response_type}".`);
-  }
   if(request && request_uri) {
     const error = new Error(
       'Only one of "request" and "request_uri" may be present.');
     error.name = 'DataError';
     error.url = url;
     throw error;
   }
+  if(!(request || request_uri)) {
+    if(response_type !== 'vp_token') {
+      throw new Error(`Unsupported "response_type", "${response_type}".`);
+    }
+    if(response_mode !== 'direct_post') {
+      throw new Error(`Unsupported "response_type", "${response_type}".`);
+    }
+  }
   const authorizationRequest = {
     request,
     request_uri,