openid4vc verifiy policy "presentation-definition", why can verified success, with credentials out of list request_credentials.

[thanachot30]

Describe the bug

I am currently testing the verifier using the "presentation-definition" policy. From my understanding, the "presentation-definition" policy works by checking the VP to see if the presented credentials match exactly with the list in request_credentials. If everything matches perfectly, it passes. However, if there are any missing or additional credentials, it results in an error.

But today, I tested it, and it failed.

To Reproduce

useing walt.id v0.9.0
Steps to reproduce the behavior:

1. create Presentation definition for verifier (https://verifier.portal.walt.id)

{
   "vp_policies": [
      "signature",
      "expired",
      "not-before",
      "presentation-definition"
   ],
   "vc_policies": [
      "signature",
      "expired",
      "not-before"
   ],
   "request_credentials": [
      {
         "format": "jwt_vc_json",
         "type": "BankId"
      },
      {
         "format": "jwt_vc_json",
         "type": "PND91Credential"
      }
   ]
}

for get qr
2. go to walt.id wallet (https://wallet.walt.id/login)
and present
this is list vc for present (So, in list is not have "PND91Credential")

and send disclose

4. the result of verifier is 'success', !!!!

why i can verifier success ?,

Expected behavior

i Expected error verifier and throw error "missingCredentialTypes"