ProofValidator
class ProofValidator @JvmOverloads constructor(publicContext: String = "https://wallet.a-sit.at/credential-issuer", verifyJwsObject: VerifyJwsObjectFun = VerifyJwsObject(), verifyJwsSignatureWithKey: VerifyJwsSignatureWithKeyFun = VerifyJwsSignatureWithKey(), supportedAlgorithms: Collection<JwsAlgorithm.Signature> = SimpleAuthorizationService.DEFAULT_WALLET_ATTESTATION_ALGORITHMS, clock: Clock = Clock.System, timeLeeway: Duration = 5.minutes, verifyAttestationProof: suspend (JwsCompactTyped<KeyAttestationJwt>) -> Boolean = { true }, requireKeyAttestation: Boolean = false, clientNonceService: NonceService = DefaultNonceService(), statusListTokenResolver: StatusListTokenResolver? = null, verifyKeyAttestationSignature: VerifyJwsObjectFun = VerifyJwsObjectFun {
KmmResult.failure(IllegalStateException("No trusted key attestation verifier configured"))
})(source)
Server implementation to issue credentials using OID4VCI.
Implemented from OpenID for Verifiable Credential Issuance 1.0 from 2025-09-16.
Constructors
Link copied to clipboard
constructor(publicContext: String = "https://wallet.a-sit.at/credential-issuer", verifyJwsObject: VerifyJwsObjectFun = VerifyJwsObject(), verifyJwsSignatureWithKey: VerifyJwsSignatureWithKeyFun = VerifyJwsSignatureWithKey(), supportedAlgorithms: Collection<JwsAlgorithm.Signature> = SimpleAuthorizationService.DEFAULT_WALLET_ATTESTATION_ALGORITHMS, clock: Clock = Clock.System, timeLeeway: Duration = 5.minutes, verifyAttestationProof: suspend (JwsCompactTyped<KeyAttestationJwt>) -> Boolean = { true }, requireKeyAttestation: Boolean = false, clientNonceService: NonceService = DefaultNonceService(), statusListTokenResolver: StatusListTokenResolver? = null, verifyKeyAttestationSignature: VerifyJwsObjectFun = VerifyJwsObjectFun {
KmmResult.failure(IllegalStateException("No trusted key attestation verifier configured"))
})
Functions
Link copied to clipboard
Provides a fresh nonce to the clients, for incorporating them into the credential proofs.
Link copied to clipboard
suspend fun validateProofExtractSubjectPublicKeys(params: CredentialRequestParameters): Collection<CryptoPublicKey>
Link copied to clipboard
Valid proof types for SupportedCredentialFormat.supportedProofTypes.