Optional Endpoints?

[tlodderstedt]

No description provided.

[bellebaum]

The deferred endpoint could possibly be made obsolete.
Here is how I think it would work (though there are likely reasons against it):

• Serve deferred credential endpoint responses at the "normal" credential endpoint.
• Optionally make the requests similar
  • Serve the acceptance_token in the body, instead of the header. It then replaces type, format, ...

This also makes support for any deferred credential infrastructure optional.
Issuers who do not serve credentials in a deferred manner would simply never issue acceptance_tokens and have no unused deferred credential endpoint.