vck/at.asitplus.wallet.lib.validation/ClientAttestationChecks

ClientAttestationChecks

data class ClientAttestationChecks(val parsing: CheckOutcome, val signature: CheckOutcome, val trust: TrustValidation, val timeliness: CheckOutcome, val status: StatusValidation, val clientId: CheckOutcome, val popSignature: CheckOutcome, val popTime: CheckOutcome, val audience: CheckOutcome, val challenge: CheckOutcome) : ValidationChecks(source)

The checks of a client (wallet instance) attestation and its proof of possession, as used for client authentication.

Constructors

constructor(parsing: CheckOutcome, signature: CheckOutcome, trust: TrustValidation, timeliness: CheckOutcome, status: StatusValidation, clientId: CheckOutcome, popSignature: CheckOutcome, popTime: CheckOutcome, audience: CheckOutcome, challenge: CheckOutcome)

Properties

audience

val audience: CheckOutcome

aud of the proof of possession is this server, not applicable where its identifier is not known.

challenge

val challenge: CheckOutcome

The challenge is valid; it is consumed only once the attestation is accepted. Not applicable to a DPoP proof, whose nonce is validated with the DPoP proof of the request.

clientId

val clientId: CheckOutcome

sub of the attestation is the client identifier of the request, not applicable without one.

parsing

val parsing: CheckOutcome

Media types and required claims of the attestation and its proof of possession.

popSignature

val popSignature: CheckOutcome

The proof of possession is signed with the attestation's cnf key, and its iss, if any, is the attestation's sub; or, with DPoP, the key of the DPoP proof is the cnf key.

popTime

val popTime: CheckOutcome

iat and exp of the proof of possession. Never relaxed by the policy. Not applicable to a DPoP proof, which is validated with the DPoP proof of the request.

signature

val signature: CheckOutcome

The attestation's signature.

status

val status: StatusValidation

The status of client_status.

timeliness

val timeliness: CheckOutcome

iat, exp, the maximum lifetime, and the expiry of client_status.

trust

val trust: TrustValidation

Whether the wallet provider is authorized.