indispensable-josef/at.asitplus.signum.indispensable.josef/JsonWebToken

JsonWebToken

@Serializable

data class JsonWebToken(val issuer: String? = null, val subject: String? = null, val audience: String? = null, val nonce: String? = null, val notBefore: Instant? = null, val issuedAt: Instant? = null, val expiration: Instant? = null, val jwtId: String? = null, val confirmationKey: JsonWebKey? = null)(source)

Content of a JWT (JsonWebToken), with many optional keys, since no claim is strongly required.

See RFC 7519

Constructors

JsonWebToken

constructor(issuer: String? = null, subject: String? = null, audience: String? = null, nonce: String? = null, notBefore: Instant? = null, issuedAt: Instant? = null, expiration: Instant? = null, jwtId: String? = null, confirmationKey: JsonWebKey? = null)

Types

Companion

object Companion

Properties

audience

@SerialName(value = "aud")

val audience: String? = null

confirmationKey

@SerialName(value = "cnf")

val confirmationKey: JsonWebKey? = null

OID4VP: This claim contains the confirmation method as defined in RFC7800. It MUST contain a JWK as defined in Section 3.2 of RFC7800. This claim determines the public key for which the corresponding private key the Verifier MUST proof possession of when presenting the Verifier Attestation JWT. This additional security measure allows the Verifier to obtain a Verifier Attestation JWT from a trusted issuer and use it for a long time independent of that issuer without the risk of an adversary impersonating the Verifier by replaying a captured attestation.

expiration