OID4VP 1.0, 6.3: id: … A string identifying the particular claim. The value MUST be a non-empty string consisting of alphanumeric, underscore (_), or hyphen (-) characters. Within the particular claims array, the same id MUST NOT be present more than once.

DCQLClaimsQueryList

@Serializable

@JvmInline

value class DCQLClaimsQueryList<out DCQLClaimsQueryType : DCQLClaimsQuery>(list: NonEmptyList<DCQLClaimsQueryType>) : List<DCQLClaimsQueryType>

A non-empty array of objects as defined in Section 6.3 that specifies claims in the requested Credential.

DCQLClaimsQueryResult

sealed interface DCQLClaimsQueryResult

DCQLClaimsQuerySerializer

object DCQLClaimsQuerySerializer : JsonContentPolymorphicSerializer<DCQLClaimsQuery>

DCQLCredential

sealed interface DCQLCredential

DCQLCredentialClaimStructure

sealed interface DCQLCredentialClaimStructure

DCQLCredentialMetadataAndValidityConstraints

@Serializable(with = DCQLCredentialMetadataAndValidityConstraintsSerializer::class)

sealed interface DCQLCredentialMetadataAndValidityConstraints

DCQLCredentialMetadataAndValidityConstraintsSerializer

object DCQLCredentialMetadataAndValidityConstraintsSerializer : JsonContentPolymorphicSerializer<DCQLCredentialMetadataAndValidityConstraints>

DCQLCredentialQuery

@Serializable(with = DCQLCredentialQuerySerializer::class)

sealed interface DCQLCredentialQuery

DCQLCredentialQueryIdentifier

@Serializable

@JvmInline

value class DCQLCredentialQueryIdentifier(val string: String)

OID4VP 1.0, 6.1: id: REQUIRED. A string identifying the Credential in the response and, if provided, the constraints in credential_sets. The value MUST be a non-empty string consisting of alphanumeric, underscore (_), or hyphen (-) characters. Within the Authorization Request, the same id MUST NOT be present more than once.

DCQLCredentialQueryList

@Serializable

@JvmInline

value class DCQLCredentialQueryList<out DCQLCredentialQueryType : DCQLCredentialQuery>(list: NonEmptyList<DCQLCredentialQueryType>) : List<DCQLCredentialQueryType>

Relevant references: OID4VP 1.0, 6: credentials: REQUIRED. A non-empty array of Credential Queries as defined in Section 6.1 that specify the requested Credentials.

DCQLCredentialQueryMatchingResult

sealed interface DCQLCredentialQueryMatchingResult

DCQLCredentialQuerySerializer

object DCQLCredentialQuerySerializer : JsonContentPolymorphicSerializer<DCQLCredentialQuery>

DCQLCredentialSetQuery

@Serializable

data class DCQLCredentialSetQuery(val options: NonEmptyList<List<DCQLCredentialQueryIdentifier>>, val required: Boolean = true)

OpenID4VP 1.0, 6.2. Credential Set Query

DCQLCredentialSetQueryPurpose

@Serializable(with = DCQLCredentialSetQueryPurposeSerializer::class)

sealed interface DCQLCredentialSetQueryPurpose

DCQLCredentialSetQueryPurposeSerializer

object DCQLCredentialSetQueryPurposeSerializer : KSerializer<DCQLCredentialSetQueryPurpose>

DCQLCredentialSubmissionOption

@Serializable

data class DCQLCredentialSubmissionOption<Credential : Any>(val credential: Credential, val matchingResult: DCQLCredentialQueryMatchingResult)

DCQLEmptyCredentialMetadataAndValidityConstraints

@Serializable

object DCQLEmptyCredentialMetadataAndValidityConstraints : DCQLCredentialMetadataAndValidityConstraints

Passes an empty constraint object as per https://github.com/openid/OpenID4VP/issues/590

DCQLExpectedClaimValue

@Serializable(with = DCQLExpectedClaimValueSerializer::class)

sealed interface DCQLExpectedClaimValue

DCQLExpectedClaimValueSerializer

object DCQLExpectedClaimValueSerializer : KSerializer<DCQLExpectedClaimValue>

DCQLIsoMdocClaimsQuery

@Serializable

data class DCQLIsoMdocClaimsQuery(val id: DCQLClaimsQueryIdentifier? = null, val values: List<DCQLExpectedClaimValue>? = null, val path: DCQLClaimsPathPointer, val intentToRetain: Boolean? = null) : DCQLClaimsQuery

DCQLIsoMdocCredential

data class DCQLIsoMdocCredential(val claimStructure: DCQLCredentialClaimStructure.IsoMdocStructure, val documentType: String, val satisfiesCryptographicHolderBinding: Boolean, val authorityKeyIdentifiers: Collection<DCQLAuthorityKeyIdentifier>) : DCQLCredential

DCQLIsoMdocCredentialMetadataAndValidityConstraints

@Serializable

data class DCQLIsoMdocCredentialMetadataAndValidityConstraints(val doctypeValue: String) : DCQLCredentialMetadataAndValidityConstraints

DCQLIsoMdocCredentialQuery

@Serializable

data class DCQLIsoMdocCredentialQuery(val id: DCQLCredentialQueryIdentifier, val meta: DCQLIsoMdocCredentialMetadataAndValidityConstraints, val claims: DCQLClaimsQueryList<DCQLIsoMdocClaimsQuery>? = null, val claimSets: NonEmptyList<List<DCQLClaimsQueryIdentifier>>? = null, val multiple: Boolean = DCQLCredentialQuery.Defaults.MULTIPLE, val trustedAuthorities: NonEmptyList<DCQLTrustedAuthorityQueryEntry>? = null, val requireCryptographicHolderBinding: Boolean = DCQLCredentialQuery.Defaults.REQUIRE_CRYPTOGRAPHIC_HOLDER_BINDING, val format: CredentialFormatEnum = CREDENTIAL_FORMAT) : DCQLCredentialQuery

DCQLIsoMdocZkCredentialMetadataAndValidityConstraints

@Serializable

data class DCQLIsoMdocZkCredentialMetadataAndValidityConstraints(val doctypeValue: String, val zkSystemType: DCQLIsoMdocZkSystemType) : DCQLCredentialMetadataAndValidityConstraints

DCQLIsoMdocZkCredentialQuery

@Serializable

data class DCQLIsoMdocZkCredentialQuery(val id: DCQLCredentialQueryIdentifier, val meta: DCQLIsoMdocZkCredentialMetadataAndValidityConstraints, val claims: DCQLClaimsQueryList<DCQLIsoMdocClaimsQuery>? = null, val claimSets: NonEmptyList<List<DCQLClaimsQueryIdentifier>>? = null, val multiple: Boolean = DCQLCredentialQuery.Defaults.MULTIPLE, val trustedAuthorities: NonEmptyList<DCQLTrustedAuthorityQueryEntry>? = null, val requireCryptographicHolderBinding: Boolean = DCQLCredentialQuery.Defaults.REQUIRE_CRYPTOGRAPHIC_HOLDER_BINDING, val format: CredentialFormatEnum = CREDENTIAL_FORMAT) : DCQLCredentialQuery

DCQLIsoMdocZkSystemSpec

@Serializable

data class DCQLIsoMdocZkSystemSpec(val id: String, val system: String, val circuitHash: String, val numAttributes: Long, val version: Long, val blockEncHash: Long? = null, val blockEncSig: Long? = null)

Proposed DCQL ZK System Specification for OpenID4VP requests targeting ISO mDoc zero-knowledge proofs See: https://google.github.io/longfellow-zk/docs/protocols/

DCQLIsoMdocZkSystemType

@Serializable(with = DCQLIsoMdocZkSystemType.Companion.Serializer::class)

data class DCQLIsoMdocZkSystemType(val systemSpecs: List<DCQLIsoMdocZkSystemSpec>, val zkRequired: Boolean = false)

DCQLJsonClaimsQuery

@Serializable

data class DCQLJsonClaimsQuery(val id: DCQLClaimsQueryIdentifier? = null, val values: List<DCQLExpectedClaimValue>? = null, val path: DCQLClaimsPathPointer) : DCQLClaimsQuery

DCQLJwtVcCredentialMetadataAndValidityConstraints

@Serializable

data class DCQLJwtVcCredentialMetadataAndValidityConstraints(val typeValues: NonEmptyList<List<String>>) : DCQLCredentialMetadataAndValidityConstraints

DCQLJwtVcCredentialQuery

@Serializable

data class DCQLJwtVcCredentialQuery(val id: DCQLCredentialQueryIdentifier, val meta: DCQLJwtVcCredentialMetadataAndValidityConstraints, val claims: DCQLClaimsQueryList<DCQLJsonClaimsQuery>? = null, val claimSets: NonEmptyList<List<DCQLClaimsQueryIdentifier>>? = null, val multiple: Boolean = DCQLCredentialQuery.Defaults.MULTIPLE, val trustedAuthorities: NonEmptyList<DCQLTrustedAuthorityQueryEntry>? = null, val requireCryptographicHolderBinding: Boolean = DCQLCredentialQuery.Defaults.REQUIRE_CRYPTOGRAPHIC_HOLDER_BINDING, val format: CredentialFormatEnum = CREDENTIAL_FORMAT) : DCQLCredentialQuery

OpenID4VP 1.0, 6.1. Credential Query

DCQLQuery

@Serializable

data class DCQLQuery(val credentials: DCQLCredentialQueryList<DCQLCredentialQuery>, val credentialSets: NonEmptyList<DCQLCredentialSetQuery>? = null)

DCQLQueryMatchingResult

data class DCQLQueryMatchingResult(val credentialMatchingResults: Map<DCQLCredentialQueryIdentifier, List<KmmResult<DCQLCredentialQueryMatchingResult>>>)

DCQLQueryResponse

data class DCQLQueryResponse<DCQLCredentialQueryResponse : Any>(val submissions: Map<DCQLCredentialQueryIdentifier, List<DCQLCredentialQueryResponse>>)

DCQLSdJwtCredential

data class DCQLSdJwtCredential(val claimStructure: DCQLCredentialClaimStructure.JsonBasedStructure, val type: String, val satisfiesCryptographicHolderBinding: Boolean, val authorityKeyIdentifiers: Collection<DCQLAuthorityKeyIdentifier>) : DCQLCredential

DCQLSdJwtCredentialMetadataAndValidityConstraints

@Serializable

data class DCQLSdJwtCredentialMetadataAndValidityConstraints(val vctValues: List<String>) : DCQLCredentialMetadataAndValidityConstraints

DCQLSdJwtCredentialQuery

@Serializable

data class DCQLSdJwtCredentialQuery(val id: DCQLCredentialQueryIdentifier, val meta: DCQLSdJwtCredentialMetadataAndValidityConstraints, val claims: DCQLClaimsQueryList<DCQLJsonClaimsQuery>? = null, val claimSets: NonEmptyList<List<DCQLClaimsQueryIdentifier>>? = null, val multiple: Boolean = DCQLCredentialQuery.Defaults.MULTIPLE, val trustedAuthorities: NonEmptyList<DCQLTrustedAuthorityQueryEntry>? = null, val requireCryptographicHolderBinding: Boolean = DCQLCredentialQuery.Defaults.REQUIRE_CRYPTOGRAPHIC_HOLDER_BINDING, val format: CredentialFormatEnum = CREDENTIAL_FORMAT) : DCQLCredentialQuery

OpenID4VP 1.0, 6.1. Credential Query

DCQLTrustedAuthority

@Serializable

data class DCQLTrustedAuthority(val type: DCQLTrustedAuthorityType, val values: List<String>)

DCQLTrustedAuthorityQueryEntry

@Serializable(with = DCQLTrustedAuthorityQueryEntrySerializer::class)

sealed interface DCQLTrustedAuthorityQueryEntry

DCQLTrustedAuthorityQueryEntryAuthorityKeyIdentifier

@Serializable

data class DCQLTrustedAuthorityQueryEntryAuthorityKeyIdentifier(val values: NonEmptyList<String>, val type: DCQLTrustedAuthorityType = DCQL_TRUSTED_AUTHORITY_TYPE) : DCQLTrustedAuthorityQueryEntry

DCQLTrustedAuthorityQueryEntryETSITrustedList

@Serializable

data class DCQLTrustedAuthorityQueryEntryETSITrustedList(val values: NonEmptyList<String>, val type: DCQLTrustedAuthorityType = DCQL_TRUSTED_AUTHORITY_TYPE) : DCQLTrustedAuthorityQueryEntry

DCQLTrustedAuthorityQueryEntryOpenIDFederation

@Serializable

data class DCQLTrustedAuthorityQueryEntryOpenIDFederation(val values: NonEmptyList<String>, val type: DCQLTrustedAuthorityType = DCQL_TRUSTED_AUTHORITY_TYPE) : DCQLTrustedAuthorityQueryEntry

DCQLTrustedAuthorityQueryEntrySerializer

class DCQLTrustedAuthorityQueryEntrySerializer : JsonContentPolymorphicSerializer<DCQLTrustedAuthorityQueryEntry>

DCQLTrustedAuthorityType

enum DCQLTrustedAuthorityType : Enum<DCQLTrustedAuthorityType>

DCQLVcJwsCredential

data class DCQLVcJwsCredential(val claimStructure: DCQLCredentialClaimStructure.JsonBasedStructure, val satisfiesCryptographicHolderBinding: Boolean, val authorityKeyIdentifiers: Collection<DCQLAuthorityKeyIdentifier>, val types: Collection<String>) : DCQLCredential

DCQLX509CredentialQuery

@Serializable

data class DCQLX509CredentialQuery(val id: DCQLCredentialQueryIdentifier, val meta: X509MetadataQuery, val claims: DCQLClaimsQueryList<DCQLJsonClaimsQuery>? = null, val claimSets: NonEmptyList<List<DCQLClaimsQueryIdentifier>>? = null, val multiple: Boolean = DCQLCredentialQuery.Defaults.MULTIPLE, val trustedAuthorities: NonEmptyList<DCQLTrustedAuthorityQueryEntry>? = null, val requireCryptographicHolderBinding: Boolean = DCQLCredentialQuery.Defaults.REQUIRE_CRYPTOGRAPHIC_HOLDER_BINDING, val format: CredentialFormatEnum = CREDENTIAL_FORMAT) : DCQLCredentialQuery

ETSI TS 119 432 Annex A.6.3: selects an X.509 signing credential using CSC metadata constraints. Request parsing is supported; X.509 signing and submission validation require a separate QES flow.

X509MetadataQuery

@Serializable

data class X509MetadataQuery(val certificateFingerprints: List<Hash>? = null, val certificatePolicies: List<String> = emptyList(), val keys: List<X509KeyInfo>? = null) : DCQLCredentialMetadataAndValidityConstraints

CSC Data Model Bindings 1.0.0 section 8.1 / ETSI TS 119 432 Annex A.6.3: metadata constraints for an X.509 signing credential in a DCQL query.

Functions

toIso180137AnnexCDeviceRequest

fun DCQLQuery.toIso180137AnnexCDeviceRequest(): DeviceRequest

Renders this DCQL query as an ISO 18013-5 DeviceRequest, to be used for ISO/IEC 18013-7 Annex C flows over the W3C Digital Credentials API.