vck-openid/at.asitplus.wallet.lib.oauth2/ResponseWithDpopNonce

ResponseWithDpopNonce

data class ResponseWithDpopNonce<T> @JvmOverloads constructor(val response: T, val dpopNonce: String?, val attestationChallenge: String? = null)(source)

Implements RFC 9449 8.2.: Authorization servers may include a fresh DPoP nonce by including values in HTTP 200 responses, and OA-ABCA 6.2 likewise for attestation challenges.

Send it converted with toHttpResponse(), which sets the headers.

Constructors

@JvmOverloads

constructor(response: T, dpopNonce: String?, attestationChallenge: String? = null)

Properties

attestationChallenge

val attestationChallenge: String?

Sent as HTTP header OAuth-Client-Attestation-Challenge, see HttpHeaders.OAuthClientAttestationChallenge

dpopNonce

val dpopNonce: String?

Sent as HTTP header DPoP-Nonce, see HttpHeaders.DPoPNonce

response

val response: T

Functions

toHttpResponse

@JvmName(name = "pushedAuthorizationToHttpResponse")

fun ResponseWithDpopNonce<PushedAuthenticationResponseParameters>.toHttpResponse(): PreparedHttpResponse

Converts the result of the pushed authorization request endpoint to its response: status 201 with the parameters as JSON (RFC 9126 2.2), and the headers DPoP-Nonce and OAuth-Client-Attestation-Challenge, if present.

@JvmName(name = "tokenToHttpResponse")

fun ResponseWithDpopNonce<TokenResponseParameters>.toHttpResponse(): PreparedHttpResponse

Converts the result of the token endpoint to its response: status 200 with the token response as JSON, the headers Cache-Control: no-store and Pragma: no-cache (RFC 6749 5.1), and the headers DPoP-Nonce and OAuth-Client-Attestation-Challenge, if present.

@JvmName(name = "userInfoToHttpResponse")

fun ResponseWithDpopNonce<JsonObject>.toHttpResponse(): PreparedHttpResponse

Converts the result of the userinfo endpoint to its response: status 200 with the user info as JSON (OpenID Connect Core 5.3.2), and the header DPoP-Nonce, if present.