---
title: "Provide a self-contained nonce in a publicly accessible endpoint."
method: POST
path: "/oid4vci/api/nonce"
tags: ["Issuer OID4VCI API"]
---

# Provide a self-contained nonce in a publicly accessible endpoint.

`POST /oid4vci/api/nonce`

Provide nonces for proof of possessions in a manner not requiring the service to save it.
The nonce should be used only once. The nonce has a (very) limit lifetime.
The response should not be cached.
For more information see <a href="https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#section-7.2">OID4VCI Nonce Endpoint specification</a></br>
Also provides a DPoP nonce. For more details towards demonstrating proof of possession refer to <a href="https://datatracker.ietf.org/doc/html/rfc9449#name-authorization-server-provid">RFC9449</a>

## Response `200`

OK

- NonceResponse
  - `c_nonce` string, required — String containing an unpredictable challenge to be used when creating a proof of possession of the key.

---

[API](https://skmtc.net/swiyu/apis/issuer-service-api.md) · [All operations](https://skmtc.net/swiyu/apis/issuer-service-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/swiyu/issuer-service-api/revisions/6be405de5275/schema)