vck-openid/at.asitplus.wallet.lib.oauth2/OAuth2Client/createAuthRequest

createAuthRequest

suspend fun createAuthRequest( state: String, authorizationDetails: Set<AuthorizationDetails>? = null, scope: String? = null, resource: String? = null, issuerState: String? = null, audience: String? = null, wrapAsPar: Boolean = true): AuthenticationRequestParameters(source)

Send the result as parameters to the server at OAuth2AuthorizationServerMetadata.authorizationEndpoint. Use POST if OAuth2AuthorizationServerMetadata.pushedAuthorizationRequestEndpoint is available.

Wraps the actual authorization request in a pushed authorization request (i.e. the request property), if the jwsService is available.

Sample ktor code for GET:

val authnRequest = client.createAuthRequest(...)
httpClient.get(issuerMetadata.authorizationEndpointUrl!!) {
    url {
        authnRequest.encodeToParameters().forEach { parameters.append(it.key, it.value) }
    }
}

Sample ktor code for POST:

val authnRequest = client.createAuthRequest(...)
httpClient.submitForm(
    url = issuerMetadata.pushedAuthorizationRequestEndpoint,
    formParameters = parameters {
        authnRequest.encodeToParameters().forEach { append(it.key, it.value) }
    }
)

Parameters

state

to keep internal state in further requests

scope

in OID4VCI flows the value scope from IssuerMetadata.supportedCredentialConfigurations

authorizationDetails

from RFC 9396 OAuth 2.0 Rich Authorization Requests

resource

from RFC 8707 Resource Indicators for OAuth 2.0, in OID4VCI flows the value of IssuerMetadata.credentialIssuer

issuerState

for OID4VCI flows the value from CredentialOfferGrantsAuthCode.issuerState

audience

for PAR the value of the issuer of the Authorization Server

wrapAsPar

whether to wrap the request as a PAR (i.e. a signed JWS)