https://github.com/a2aproject/experimental-ext-oid4vp-auth

OID4VP In-Task Authorization Extension for A2A.
https://github.com/a2aproject/experimental-ext-oid4vp-auth

Last synced: 16 days ago
JSON representation

OID4VP In-Task Authorization Extension for A2A.

• Host: GitHub
• URL: https://github.com/a2aproject/experimental-ext-oid4vp-auth
• Owner: a2aproject
• License: apache-2.0
• Created: 2026-05-14T06:46:45.000Z (about 1 month ago)
• Default Branch: main
• Last Pushed: 2026-05-14T17:10:09.000Z (about 1 month ago)
• Last Synced: 2026-05-14T19:18:13.139Z (about 1 month ago)
• Size: 88.9 KB
• Stars: 0
• Watchers: 0
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# OID4VP In-Task Authorization Extension

> **Experimental:** This extension currently has experimental status — breaking changes are possible and community feedback is much appreciated. To learn more about the extension lifecycle, please refer to [A2A Extension and Protocol Binding Governance](https://a2a-protocol.org/latest/topics/extension-and-binding-governance/).

This repository contains the specification for the **OID4VP In-Task Authorization Extension** for the Agent2Agent (A2A) protocol.

## Purpose

The OpenID for Verifiable Presentations (OID4VP) In-Task Authorization extension provides an option to use OID4VP protocol for A2A In-Task authorization.

The integration of OID4VP flow allows Server Agents to perform additional authorization by requesting Verifiable Presentations (VPs) from the client.

Such VP-based authorization enables Just-In-Time (JIT) authorization – server can dynamically request specific credentials during a Task execution without breaking the protocol flow.

Suggested integration provides clear protocol boundaries that set minimal restrictions on A2A and OID4VP protocols and allow usage of all features specified by these protocols.

## Specification

The full specification (v1 Draft) can be found [here](./v1/spec.md).

## Sample Implementation

A sample implementation of the OID4VP In-Task Authorization Extension can be found [here](./sample).