vclib/at.asitplus.wallet.lib.agent/IssuerAgent

IssuerAgent

class IssuerAgent(validator: Validator, issuerCredentialStore: IssuerCredentialStore = InMemoryIssuerCredentialStore(), revocationListBaseUrl: String = "https://wallet.a-sit.at/backend/credentials/status", dataProvider: IssuerCredentialDataProvider = EmptyCredentialDataProvider, zlibService: ZlibService = DefaultZlibService(), revocationListLifetime: Duration = 48.hours, jwsService: JwsService, coseService: CoseService, clock: Clock = Clock.System, val identifier: String, val cryptoAlgorithms: Set<CryptoAlgorithm>, timePeriodProvider: TimePeriodProvider = FixedTimePeriodProvider) : Issuer

An agent that only implements Issuer, i.e. it issues credentials for other agents.

Constructors

IssuerAgent

constructor(validator: Validator, issuerCredentialStore: IssuerCredentialStore = InMemoryIssuerCredentialStore(), revocationListBaseUrl: String = "https://wallet.a-sit.at/backend/credentials/status", dataProvider: IssuerCredentialDataProvider = EmptyCredentialDataProvider, zlibService: ZlibService = DefaultZlibService(), revocationListLifetime: Duration = 48.hours, jwsService: JwsService, coseService: CoseService, clock: Clock = Clock.System, identifier: String, cryptoAlgorithms: Set<CryptoAlgorithm>, timePeriodProvider: TimePeriodProvider = FixedTimePeriodProvider)

Types

Companion

object Companion

Properties

cryptoAlgorithms

open override val cryptoAlgorithms: Set<CryptoAlgorithm>

The cryptographic algorithms supported by this issuer, i.e. the ones from its cryptographic service, used to sign credentials.

identifier

open override val identifier: String

The identifier for this agent, typically the keyId from the cryptographic key, e.g. did:key:mAB... or urn:ietf:params:oauth:jwk-thumbprint:sha256:...

Functions

buildRevocationList

open override fun buildRevocationList(timePeriod: Int?): String?

Returns a Base64-encoded, zlib-compressed bitstring of revoked credentials, where the entry at "revocationListIndex" (of the credential) is true iff it is revoked

compileCurrentRevocationLists

open override fun compileCurrentRevocationLists(): List<String>

issueCredential

suspend fun issueCredential(credential: CredentialToBeIssued, subjectPublicKey: CryptoPublicKey, scheme: ConstantIndex.CredentialScheme): Issuer.IssuedCredentialResult

Wraps the credential-to-be-issued in credential into a single instance of CredentialToBeIssued, according to the representation, i.e. it essentially signs the credential with the issuer key.

open suspend override fun issueCredential(subjectPublicKey: CryptoPublicKey, attributeTypes: Collection<String>, representation: ConstantIndex.CredentialRepresentation, claimNames: Collection<String>?, dataProviderOverride: IssuerCredentialDataProvider?): Issuer.IssuedCredentialResult

Issues credentials for some attributeTypes (i.e. some of at.asitplus.wallet.lib.data.ConstantIndex.CredentialScheme.vcType) to the subject specified with its public key in subjectPublicKey in the format specified by representation. Callers may optionally define some attribute names from ConstantIndex.CredentialScheme.claimNames in claimNames to request only some claims (if supported by the representation).

issueRevocationListCredential

open suspend override fun issueRevocationListCredential(timePeriod: Int?): String?

Wraps the revocation information from issuerCredentialStore into a VC, returns a JWS representation of that.

revokeCredentials

open override fun revokeCredentials(credentialsToRevoke: List<String>): Boolean

Revokes all verifiable credentials from credentialsToRevoke list that parse and validate. It returns true if all revocations was successful.

revokeCredentialsWithId

open override fun revokeCredentialsWithId(credentialIdsToRevoke: Map<String, Instant>): Boolean

Revokes all verifiable credentials with ids from credentialIdsToRevoke It returns true if all revocations was successful.