diff --git a/diagrams/request_uri_mode_post.md b/diagrams/request_uri_mode_post.md index 44b7f3d2..424bc02f 100644 --- a/diagrams/request_uri_mode_post.md +++ b/diagrams/request_uri_mode_post.md @@ -16,10 +16,12 @@ r --> u: authorization request\n(client_id, request_uri, request_uri_method=post deactivate r u --> w: authorization request\n(client_id, request_uri, request_uri_method=post, [client_id_scheme]) activate w -[ w --> w optional. Check client_id with trust framework] - -Note that the client_id is self asserted by the verifier. If the client_id is not trusted, then the user should be informed that an untrusted verifier is requesting information and asked if he/she wants to proceed. If the client_id identifies a trusted verifier, then the request_uri that is responded to should be the one that actually belongs to the trusted client_id, as verified by the trust framework. - +w --> w: [optional. Check client_id with trust framework] +note over r,w + Note that the client_id is self asserted by the verifier. If the client_id is not trusted, then the user should be informed that an untrusted + verifier is requesting information and asked if he/she wants to proceed. If the client_id identifies a trusted verifier, then the request_uri + that is responded to should be the one that actually belongs to the trusted client_id, as verified by the trust framework. +end note w --> r: POST **request_uri** ([wallet_metadata][, wallet_nonce]) r -> r: create and sign (and optionally encrypt) request object r --> w: **signed (optionally encrypted) request object** (client_id, client_id_scheme, wallet_nonce, nonce, \nresponse_uri, presentation_definition, state)