# What changed in @openid4vc/openid4vp

> 26 changes in @openid4vc/openid4vp 0.5 to 0.8 from its official release notes, upgrade guides and advisories: 3 breaking, 1 deprecations, 1 security, 11 new APIs and options. Each one cited. Sources checked 2026-10-27. HTML: https://unstale.sh/npm/@openid4vc/openid4vp/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @openid4vc/openid4vp 0.8

### Security

- Indicates whether the client was authenticated; when false, an error can still be sent, but a redirect_uri returned by the response endpoint should not be opened. (0.8.2) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/d617bd9dac6c3ae7b9c478de5bfe310a40850829/packages/openid4vp/CHANGELOG.md#082)

### New APIs and options

- The new Openid4vpAuthorizationRequestError carries the authorization request payload so the wallet can send an error response to the verifier. (0.8.2) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/d617bd9dac6c3ae7b9c478de5bfe310a40850829/packages/openid4vp/CHANGELOG.md#082)
- resolveOpenid4vpAuthorizationRequest throws this error when a request is invalid and its payload is known; it extends Oauth2ServerErrorResponseError and carries the authorizationRequestPayload. (0.8.2) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/d617bd9dac6c3ae7b9c478de5bfe310a40850829/packages/openid4vp/CHANGELOG.md#082)
- Accepts an error payload to submit an OpenID4VP Authorization Error Response. (0.8.2) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/d617bd9dac6c3ae7b9c478de5bfe310a40850829/packages/openid4vp/CHANGELOG.md#082)

### Fixes and other changes

- Accepts an error payload to create an OpenID4VP Authorization Error Response, including without jarm options for a JARM response mode when the wallet cannot encrypt it. (0.8.2) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/d617bd9dac6c3ae7b9c478de5bfe310a40850829/packages/openid4vp/CHANGELOG.md#082)

## @openid4vc/openid4vp 0.5

### Breaking changes

- Authorization error responses now produce this error with the parsed errorResponse. (0.5.5) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#055)
- Node 18 support is dropped; Node.js 20.19 or later is now the lowest supported version. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)
- Callers must now pass a responseMode object identifying the expected response mode group and its specific parameters; this replaces the top-level origin parameter. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)

### Deprecations

- clockSkewSec is deprecated in favor of allowedSkewInSeconds. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)

### New APIs and options

- Type declarations are exposed through the types export condition. (0.5.6) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#056)
- Add an optional callback to resolve authorization server metadata without a request; returning null indicates the metadata definitively does not exist. (0.5.5) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#055)
- Add an optional callback to resolve JWK Sets without a request; returned values are validated with the JWK Set schema. (0.5.5) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#055)
- The second parameter now accepts an object with fetch and the matching resolve callback, as well as the previously accepted Fetch implementation. (0.5.5) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#055)
- The second parameter now accepts an object with fetch and the matching resolve callback, as well as the previously accepted Fetch implementation. (0.5.5) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#055)
- Adds experimental support for the OpenID4VCI 1.1 draft endpoint, allowing presentation during issuance; the feature may change incompatibly in a patch release. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)
- Pass allowedSkewInSeconds to configure the permitted clock skew when verifying an attestation JWT. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)
- Pass allowedSkewInSeconds to configure the permitted clock skew when verifying client attestation. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)

### Behavior and default changes

- The main entry points to the ESM build. (0.5.6) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#056)
- More errors use Oauth2ServerErrorResponseError, enabling better error handling. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)

### Fixes and other changes

- The pre-draft-27 parameter is ignored when the verifier also sends encrypted_response_enc_values_supported, avoiding Invalid authorization_encryption_enc failures when both metadata generations are present. (0.5.6) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#056)
- The pre-draft-27 parameter is ignored when the verifier also sends encrypted_response_enc_values_supported, avoiding Invalid authorization_encryption_enc failures when both metadata generations are present. (0.5.6) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#056)
- The package remains ESM-only; using require to load its ESM build requires Node.js 20.19 or later, or 22.12 or later. (0.5.6) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#056)
- Authorization error responses are parsed and cause an Openid4vpAuthorizationResponseError with the parsed errorResponse, rather than a zod error about missing vp_token. (0.5.5) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#055)
- Authorization error responses are parsed and cause an Openid4vpAuthorizationResponseError with the parsed errorResponse, rather than a zod error about missing vp_token. (0.5.5) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#055)
- Signed OpenID4VP requests without an aud field now set aud to https://self-issued.me/v2. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)
- Node 26 is now supported. (0.5.0) — [release notes](https://github.com/openwallet-foundation-labs/identity-common-ts/blob/4f0b8736a475d2b457d8c7d770df0e65187661d9/packages/openid4vp/CHANGELOG.md#050)