vck-openid/at.asitplus.wallet.lib.openid/DcApiVerifier/validateAuthnResponse

validateAuthnResponse

suspend fun validateAuthnResponse(input: String, externalId: String, expectedOrigin: String? = null): KmmResult<DcApiResponseResult>(source)

suspend fun validateAuthnResponse(input: DigitalCredentialInterface, externalId: String, expectedOrigin: String? = null): KmmResult<DcApiResponseResult>(source)

Validates an Authentication Response from the Wallet, where input is a signed or unsigned DC API response.

The externalId will be used to load the corresponding AuthenticationRequestParameters from the store.

For OpenID4VP, succeeds with an AuthnResponseResult if the response has been processed: a presentation (AuthnResponseResult.Success, valid or not) or an authorization error response of the wallet (AuthnResponseResult.Error, carrying only error, see OpenID4VP 1.0, A.4). Either one ends the request, so a second response to it fails. Fails if the response has not been processed, i.e. it is malformed, can't be correlated with a request, comes from an origin not in the expected_origins of a signed request, or violates the protection its request requires.

For ISO/IEC 18013-7 Annex C, succeeds with an Iso180137AnnexCResult: the verified documents (Iso180137AnnexCWrapper), or the error status of the wallet's device response (Iso180137AnnexCError).