# Authorization Request

- Note: Look for comments (##) about the payload in the example JSON below

{
  "response_type": "id_token",
  "nonce": "PbX5GNynZHPMM2hPF5blhq2mEa9ROpL1RTCgh_OY7I4",

## needs to be unique. If the client_id is did:jwk the ephemeral public key is to be extracted from the jwk
  "client_id": "did:jwk:eyJrdHkiOiJFQyIsInVzZSI6InNpZyIsImNydiI6InNlY3AyNTZrMSIsIngiOiJIZU5CLV80VUR1RHI4S2xSLUxHWUhoS0QzVVRDYkxXVjlYclFnMGlIZm5RIiwieSI6IjY0ZzRqY2J5NVRXUjRMb2dSMTE4U1V1bVEwVEJVaUotVGw2Z01GQ0VYVDAiLCJhbGciOiJFUzI1NksifQ",
  
## An ephemeral_reader_public_key (COSE Key) will be used if not provided in the client_id
  "ephemeral_reader_public_key": "pAECIAEhWCC4IJY5ZOU68GRobdkhgwNJSlsjoXXDTMVK0dkkTv0LpSJYIAptoK9DfilD8YNvMcZ42JKY6T1-lQV_1NBOjj7Cu6k1" 

## Use "fragment" for same device 
  "response_mode": "post", 
  "nbf": 1669733120,
  "scope": "openid",
  "claims": {
    "vp_token": {
      "presentation_definition": {
        "id": "8c9b590a-1bdc-4f57-86cc-72ff8cdd8ddf",
        "input_descriptors": [
          {
            "id": "DriverLicense",
            "name": "DriverLicense",
            "purpose": "So we know you can drive",
            "schema": [
              {
                "uri": "DriverLicense"
              }
            ]
          }
        ]
      }
    }
  },
  "registration": {
    "client_name": "Ping Identity",
    "client_purpose": "Check Driver License",
    "subject_syntax_types_supported": [
      "did:jwk"
    ],
    
## Format of the response and accepted crypto algorithms
    "vp_formats": {
      "mso_mdoc": {
        "alg": [
        
## Only support ES256
          "ES256" 
        ]
      }
    }
  },
  "state": "c2dbd24d-c1aa-40e6-8c9a-32355dc433b0",
## MUST contain a browser session context in the URI, as a path parameter or a query parameter 
  "redirect_uri": "https://mdlverify.ping-eng.com/response/c2dbd24d-c1aa-40e6-8c9a-32355dc433b0", 
  "exp": 1672325120,
  "iat": 1669733120,
  "jti": "4653d10d-f3e0-4c27-98d0-7f00d0288a0d"
}

## Response

Redirect to: https://mdlverify.ping-eng.com/response/c2dbd24d-c1aa-40e6-8c9a-32355dc433b0#vp_token=<base64url_encoded_mso>

## Verifier site
- Should contain an option for same device (deep link) and cross device (QR code)
- Should display the Authorization Request object for the session and the processing steps and result