vck-openid/at.asitplus.wallet.lib.oidvci/OpenId4VciClient/KeyAttestationInput

KeyAttestationInput

data class KeyAttestationInput(val credentialIssuer: String?, val clientNonce: String?, val supportedAlgorithms: Collection<String>?, val preferredKeyStorageStatusPeriod: Duration?, val requirements: KeyAttestationRequired?)(source)

What JwtProofCreator and AttestationProofCreator pass to their loadKeyAttestation, to load a key attestation (OpenID4VCI 1.0, Appendix D) that the credential issuer accepts for the requested credential.

Constructors

KeyAttestationInput

constructor(credentialIssuer: String?, clientNonce: String?, supportedAlgorithms: Collection<String>?, preferredKeyStorageStatusPeriod: Duration?, requirements: KeyAttestationRequired?)

Properties

clientNonce

val clientNonce: String?

The c_nonce of the credential issuer, if it has a Nonce Endpoint, which has to be the nonce of the key attestation then (Appendix F.1 and F.3).

credentialIssuer

val credentialIssuer: String?

The Credential Issuer Identifier the proof is created for.

preferredKeyStorageStatusPeriod

val ~~preferredKeyStorageStatusPeriod~~: Duration?

The preferred validity of the key storage status, see KeyAttestationRequired.preferredTtl.

requirements

val requirements: KeyAttestationRequired?

The key_attestations_required of the proof type (12.2.4), i.e. the key_storage and user_authentication values (Appendix D.2) the credential issuer accepts, null if it states none for this proof type.

supportedAlgorithms

val supportedAlgorithms: Collection<String>?

The proof_signing_alg_values_supported of the proof type (12.2.4).