To issue credentials based on documents in the datastore, apigw currently support the authentication providers "oidc" and "openid4vp". Some credentials may however only be issued through pre-authorized credential offers using the datastore API and should thereby not be accessible through other authentication mechanisms.
One way to solve this would be to add an authentication provider called "preauth" or perhaps "none". If a user tries to request such a credential by themselves, a simple HTML page (similar to the "issuance preview") could be returned explaining that the credential may not be requested directly.
To issue credentials based on documents in the datastore, apigw currently support the authentication providers "oidc" and "openid4vp". Some credentials may however only be issued through pre-authorized credential offers using the datastore API and should thereby not be accessible through other authentication mechanisms.
One way to solve this would be to add an authentication provider called "preauth" or perhaps "none". If a user tries to request such a credential by themselves, a simple HTML page (similar to the "issuance preview") could be returned explaining that the credential may not be requested directly.