QtspAuthorizationServiceStrategy

Implements Authorization for QTSP as necessary for Potential UC5

Constructors

constructor(authorizationServiceStrategy: CredentialAuthorizationServiceStrategy)

Return all valid credential identifiers for all schemes.

Filters the authorization details received in the authorization request to include in the token response.

open override fun filterScope(scope: String): String?

Filter the requested scope in the access token request to ones valid for credential issuance

Reject if authorization details from tokenRequestAuthnDetails do not match 1:1 the ones from authRequest

Validates that the requested authorization details are valid for the given credential configuration ids.

QTSP can be assumed to only know CSC-related authn details (at.asitplus.openid.CscAuthorizationDetails) and rejet all others

open override fun validateScope(scope: String, configurationIds: Set<String>): Boolean

Validates the requested scope are valid for the given credential configuration ids.

Return all valid authorization details for pre-authorized codes, that the client may use in token requests

open override fun validScopes(): String

Return all valid scopes for pre-authorized codes, that the client may use in token requests