vck-openid/at.asitplus.wallet.lib.oidvci/BuildClientAttestationJwt/invoke

invoke

suspend operator fun invoke(signJwt: SignJwtFun<JsonWebToken>, clientId: String, issuer: String? = null, clientKey: JsonWebKey, walletName: String = clientId, walletVersion: String = "unspecified", walletSolutionCertificationInformation: String = "unspecified", clientStatus: ClientStatus = ClientStatus( status = defaultClientStatus(), expiration = Clock.System.now().truncateToSeconds() + 31.days, ), walletLink: String? = null, lifetime: Duration = 60.minutes, clockSkew: Duration = 3.minutes): JwsCompactTyped<JsonWebToken>(source)

Client attestation JWT, issued by the backend service to a client, which can be sent to an OAuth2 Authorization Server if needed, e.g. as HTTP header OAuth-Client-Attestation, see OAuth 2.0 Attestation-Based Client Authentication

Parameters

clientId

OAuth 2.0 client ID of the wallet

issuer

deprecated and ignored. TS3 WUA 1.5 removes iss; Wallet Provider identity comes from x5c.

clientKey

key to be attested, i.e. included in a ConfirmationClaim

walletName

identifier of the Wallet Solution.

walletVersion

version of the Wallet Solution.

walletSolutionCertificationInformation

certification information for the Wallet Solution.

clientStatus

status information for the Wallet Instance.

walletLink

URL for further information about the Wallet Solution.

lifetime

validity period of the assertion (minus the clockSkew)

clockSkew

duration to subtract from Clock.System.now when setting the creation timestamp