openid-data-classes/at.asitplus.wallet.lib.data/KeyBindingJws

KeyBindingJws

@Serializable

data class KeyBindingJws(val issuedAt: Instant? = null, val audience: String, val challenge: String, val sdHash: ByteArray, val transactionDataHashes: List<@Serializable(with = ByteArrayBase64UrlSerializer::class) ByteArray>? = null, val transactionDataHashesAlgorithmString: String? = null, val qesApproval: ByteArray? = null)(source)

Key Binding JWT for SD-JWT, per RFC 9901.

Constructors

KeyBindingJws

constructor(issuedAt: Instant? = null, audience: String, challenge: String, sdHash: ByteArray, transactionDataHashes: List<@Serializable(with = ByteArrayBase64UrlSerializer::class) ByteArray>? = null, transactionDataHashesAlgorithmString: String? = null, qesApproval: ByteArray? = null)

Properties

audience

@SerialName(value = "aud")

val audience: String

RFC 9901: REQUIRED. The value MUST be a single string that identifies the intended receiver of the Key Binding JWT. How the value is represented is up to the protocol used and is out of scope for this specification.

challenge

@SerialName(value = "nonce")

val challenge: String

RFC 9901: REQUIRED. Ensures the freshness of the signature or its binding to the given transaction. The value type of this claim MUST be a string. How this value is obtained is up to the protocol used and is out of scope for this specification.

issuedAt

@SerialName(value = "iat")

@Serializable(with = InstantLongSerializer::class)

val issuedAt: Instant?

RFC 9901: REQUIRED. The value of this claim MUST be the time at which the Key Binding JWT was issued using the syntax defined in RFC7519.

qesApproval

@SerialName(value = "org.cloudsignatureconsortium.dm.1.qesApproval")

@Serializable(with = ByteArrayBase64Serializer::class)

val qesApproval: ByteArray?

CSC Data Model Bindings 1.0.0 section 7.2.1.2: CONDITIONAL Base64 digest bound to the original QES approval request.

sdHash

@SerialName(value = "sd_hash")

@Serializable(with = ByteArrayBase64UrlSerializer::class)

val sdHash: ByteArray

RFC 9901: REQUIRED. The base64url-encoded hash value over the Issuer-signed JWT and the selected Disclosures. The hash value in the sd_hash claim binds the KB-JWT to the specific SD-JWT. The sd_hash value MUST be computed over the US-ASCII bytes of the encoded SD-JWT, i.e., the Issuer-signed JWT, a tilde character, and zero or more Disclosures selected for presentation to the Verifier, each followed by a tilde character: <Issuer-signed JWT>~<Disclosure 1>~<Disclosure 2>~...~<Disclosure N>~ The bytes of the digest MUST then be base64url encoded.

transactionDataHashes

@SerialName(value = "transaction_data_hashes")

val transactionDataHashes: List<@Serializable(with = ByteArrayBase64UrlSerializer::class) ByteArray>?

OID4VP: A non-empty array of strings where each element is a base64url-encoded hash. Each of these hashes is calculated using a hash function over the string received in the transaction_data request parameter (base64url decoding is not performed before hashing). Each hash value ensures the integrity of, and maps to, the respective transaction data object. If transaction_data_hashes_alg was specified in the request, the hash function MUST be one of its values. If transaction_data_hashes_alg was not specified in the request, the hash function MUST be sha-256.

transactionDataHashesAlgorithm

@Transient

val transactionDataHashesAlgorithm: Digest

transactionDataHashesAlgorithmString

@SerialName(value = "transaction_data_hashes_alg")

val transactionDataHashesAlgorithmString: String?

OID4VP: REQUIRED when this parameter was present in the transaction_data request parameter. String representing the hash algorithm identifier used to calculate hashes in transactionDataHashes response parameter.

Functions

equals

open operator override fun equals(other: Any?): Boolean

hashCode

open override fun hashCode(): Int