WalletService

class WalletService(val clientId: String = "https://wallet.a-sit.at/app", keyMaterial: KeyMaterial = EphemeralKeyWithoutCert(), remoteResourceRetriever: RemoteResourceRetrieverFunction = { null }, loadKeyAttestation: suspend (WalletService.KeyAttestationInput) -> KmmResult<JwsSigned<KeyAttestationJwt>>? = null, encryptionService: WalletEncryptionService = WalletEncryptionService())(source)

Client service to retrieve credentials using OID4VCI

Constructors

constructor(clientId: String = "https://wallet.a-sit.at/app", keyMaterial: KeyMaterial = EphemeralKeyWithoutCert(), remoteResourceRetriever: RemoteResourceRetrieverFunction = { null }, loadKeyAttestation: suspend (WalletService.KeyAttestationInput) -> KmmResult<JwsSigned<KeyAttestationJwt>>? = null, encryptionService: WalletEncryptionService = WalletEncryptionService())

data class KeyAttestationInput(val clientNonce: String?, val supportedAlgorithms: Collection<String>?)

data class RequestOptions(val credentialScheme: ConstantIndex.CredentialScheme, val representation: ConstantIndex.CredentialRepresentation = PLAIN_JWT, val state: String = uuid4().toString())

Used as the issuer in credential proofs. Must match the client_id of the OAuth client.

fun buildAuthorizationDetails(credentialConfigurationId: String, authorizationServers: Set<String>? = null): Set<OpenIdAuthorizationDetails>

fun buildAuthorizationDetails(credentialConfigurationIds: Set<String>, authorizationServers: Set<String>? = null): Set<OpenIdAuthorizationDetails>

Build authorization details for use in OAuth2Client.createAuthRequest.

suspend fun createCredential(tokenResponse: TokenResponseParameters, metadata: IssuerMetadata, credentialFormat: SupportedCredentialFormat, clientNonce: String? = null, previouslyRequestedScope: String? = null, clock: Clock = Clock.System): KmmResult<Collection<WalletService.CredentialRequest>>

Creates the credential request to be sent to the credential issuer. Also send along the TokenResponseParameters.accessToken from the token response in HTTP header Authorization see TokenResponseParameters.toHttpHeaderValue. Be sure to include a DPoP header if TokenResponseParameters.tokenType is DPoP, see BuildDPoPHeader. For sample ktor code see OpenId4VciClient in vck-openid-ktor.

Pass in the URL provided by the Credential Issuer, which may contain a direct CredentialOffer or a URI pointing to it.

Parses response received from the credential issuer, mapping to Holder.StoreCredentialInput, decrypting the response if required.