indispensable-josef/at.asitplus.signum.indispensable.josef/JsonWebToken

JsonWebToken

@Serializable

data class JsonWebToken(val issuer: String? = null, val subject: String? = null, val audience: String? = null, val nonce: String? = null, val notBefore: Instant? = null, val issuedAt: Instant? = null, val expiration: Instant? = null, val jwtId: String? = null, val confirmationClaim: ConfirmationClaim? = null, val httpMethod: String? = null, val httpTargetUrl: String? = null, val accessTokenHash: String? = null, val authenticationLevel: String? = null)(source)

Content of a JWT (JsonWebToken), with many optional keys, since no claim is strongly required.

See RFC 7519

Constructors

JsonWebToken

constructor(issuer: String? = null, subject: String? = null, audience: String? = null, nonce: String? = null, notBefore: Instant? = null, issuedAt: Instant? = null, expiration: Instant? = null, jwtId: String? = null, confirmationClaim: ConfirmationClaim? = null, httpMethod: String? = null, httpTargetUrl: String? = null, accessTokenHash: String? = null, authenticationLevel: String? = null)

Types

Companion

object Companion

Properties

accessTokenHash

@SerialName(value = "ath")

val accessTokenHash: String? = null

RFC 9449: Hash of the access token. The value MUST be the result of a base64url encoding (as defined in Section 2 of RFC7515 the SHA-256 hash of the ASCII encoding of the associated access token's value.

audience

@SerialName(value = "aud")

val audience: String? = null

authenticationLevel

@SerialName(value = "aal")

val authenticationLevel: String? = null

OID4VC HAIP: String asserting the authentication level of the Wallet and the key as asserted in the cnf claim.

confirmationClaim

@SerialName(value = "cnf")

val confirmationClaim: ConfirmationClaim? = null

OID4VP: This claim contains the confirmation method as defined in RFC7800. It MUST contain a JWK as defined in Section 3.2 of RFC7800. This claim determines the public key for which the corresponding private key the Verifier MUST proof possession of when presenting the Verifier Attestation JWT. This additional security measure allows the Verifier to obtain a Verifier Attestation JWT from a trusted issuer and use it for a long time independent of that issuer without the risk of an adversary impersonating the Verifier by replaying a captured attestation.

expiration