vck-openid/at.asitplus.wallet.lib.rqes/RqesWalletService

RqesWalletService

class RqesWalletService(clientId: String = "https://wallet.a-sit.at/app", redirectUrl: String = "/callback", oauth2Client: OAuth2Client = OAuth2Client( clientId = clientId, redirectUrl = redirectUrl, ))(source)

Wallet service that implements generation of all data classes necessary to successfully end-end a remote signature creation request by a driving application This class focuses on the POTENTIAL UC5 wallet use case and as such currently only supports signHash. The originally specified handling of transaction data has been removed and as noted in 'D3.1: UC Specification - v3' has been replaced with the now favored OpenID4VP specification signDoc is out of testing scope for now but may be added later

Constructors

Link copied to clipboard
constructor(clientId: String = "https://wallet.a-sit.at/app", redirectUrl: String = "/callback", oauth2Client: OAuth2Client = OAuth2Client( clientId = clientId, redirectUrl = redirectUrl, ))

Types

Link copied to clipboard
Link copied to clipboard
data class SignatureProperties(val signatureQualifier: SignatureQualifier = SignatureQualifier.EU_EIDAS_QES, val signatureFormat: SignatureFormat = SignatureFormat.PADES, val conformanceLevel: ConformanceLevel = ConformanceLevel.ADESBB, val signedEnvelopeProperty: SignedEnvelopeProperty? = null)
Link copied to clipboard
data class SigningCredential(val credentialId: String, val certificates: List<X509Certificate>, val supportedSigningAlgorithms: List<X509SignatureAlgorithm>)

Functions

Link copied to clipboard
suspend fun createCredentialAuthenticationRequest(signingCredential: RqesWalletService.SigningCredential, documentDigests: Collection<OAuthDocumentDigest>, redirectUrl: String = this.redirectUrl, hashAlgorithm: Digest, optionalParameters: OAuth2RqesParameters.Optional? = null, documentLocation: Collection<DocumentLocation>? = null, signatureProperties: RqesWalletService.SignatureProperties = SignatureProperties()): AuthenticationRequestParameters

CSC API v2.0.0.2 Authorization to access /credentials/signHash and /credentials/signDoc endpoints

Link copied to clipboard
suspend fun createOAuth2TokenRequest(state: String, authorization: OAuth2Client.AuthorizationForToken, authorizationDetails: Set<AuthorizationDetails>? = null): TokenRequestParameters
Link copied to clipboard
suspend fun createServiceAuthenticationRequest(redirectUrl: String = this.redirectUrl, optionalParameters: OAuth2RqesParameters.Optional? = null): AuthenticationRequestParameters

CSC API v2.0.0.2 Authorization to access /credentials/info and /credentials/list endpoints

Link copied to clipboard
suspend fun createSignHashRequestParameters(signingCredential: RqesWalletService.SigningCredential, dtbsr: Hashes, sad: String, signatureAlgorithm: X509SignatureAlgorithm): QtspSignatureRequest
Link copied to clipboard
suspend fun getCscAuthenticationDetails(signingCredential: RqesWalletService.SigningCredential, documentDigests: Collection<OAuthDocumentDigest>, hashAlgorithm: Digest, documentLocation: Collection<DocumentLocation>? = null, signatureProperties: RqesWalletService.SignatureProperties = SignatureProperties()): AuthorizationDetails

Here OAuthDocumentDigest.hash is the DTBS/R and will be hashed again with hashAlgorithmOid

Link copied to clipboard
suspend fun getCscDocumentDigests(documentDigests: Collection<OAuthDocumentDigest>, signatureAlgorithm: X509SignatureAlgorithm, signatureProperties: RqesWalletService.SignatureProperties = SignatureProperties()): DocumentDigest