vclib-openid/at.asitplus.wallet.lib.oidc/OidcSiopVerifier

OidcSiopVerifier

class OidcSiopVerifier(verifier: Verifier, relyingPartyUrl: String, agentPublicKey: CryptoPublicKey, jwsService: JwsService, verifierJwsService: VerifierJwsService, timeLeewaySeconds: Long = 300, clock: Clock = Clock.System, credentialScheme: ConstantIndex.CredentialScheme? = null, requestedAttributes: List<String>? = null)

Combines Verifiable Presentations with OpenId Connect. Implements OIDC for VP (2023-04-21) as well as SIOP V2 (2023-01-01).

This class creates the Authentication Request, verifier verifies the response. See OidcSiopWallet for the holder.

Constructors

OidcSiopVerifier

constructor(verifier: Verifier, relyingPartyUrl: String, agentPublicKey: CryptoPublicKey, jwsService: JwsService, verifierJwsService: VerifierJwsService, timeLeewaySeconds: Long = 300, clock: Clock = Clock.System, credentialScheme: ConstantIndex.CredentialScheme? = null, requestedAttributes: List<String>? = null)

Types

AuthnResponseResult

sealed class AuthnResponseResult

Companion

object Companion

Functions

createAuthnRequest

fun createAuthnRequest(responseMode: String? = null, state: String? = uuid4().toString()): AuthenticationRequestParameters

Creates AuthenticationRequestParameters, to be encoded as query params appended to the URL of the Wallet, e.g. https://example.com?repsonse_type=... (see createAuthnRequestUrl)

createAuthnRequestAsRequestObject

suspend fun createAuthnRequestAsRequestObject(responseMode: String? = null, state: String? = uuid4().toString()): AuthenticationRequestParameters

Creates an JWS Authorization Request (JAR, RFC9101), wrapping the usual AuthenticationRequestParameters.

createAuthnRequestUrl

fun createAuthnRequestUrl(walletUrl: String, responseMode: String? = null, state: String? = uuid4().toString()): String

Creates an OIDC Authentication Request, encoded as query parameters to the walletUrl.

createAuthnRequestUrlWithRequestObject

suspend fun createAuthnRequestUrlWithRequestObject(walletUrl: String, responseMode: String? = null, state: String? = uuid4().toString()): String

Creates an OIDC Authentication Request, encoded as query parameters to the walletUrl, containing a JWS Authorization Request (JAR, RFC9101), containing the request parameters itself.

validateAuthnResponse

fun validateAuthnResponse(params: AuthenticationResponseParameters): OidcSiopVerifier.AuthnResponseResult

Validates AuthenticationResponseParameters from the Wallet

fun validateAuthnResponse(url: String): OidcSiopVerifier.AuthnResponseResult

Validates the OIDC Authentication Response from the Wallet, where url is the whole URL, containing the AuthenticationResponseParameters as the fragment, e.g. https://example.com#id_token=...

validateAuthnResponseFromPost

fun validateAuthnResponseFromPost(content: String): OidcSiopVerifier.AuthnResponseResult

Validates the OIDC Authentication Response from the Wallet, where content are the HTTP POST encoded AuthenticationResponseParameters, e.g. id_token=...&vp_token=...