multipaz/org.multipaz.verification/OpenID4VPPresentmentRecord

OpenID4VPPresentmentRecord

class OpenID4VPPresentmentRecord(val vpToken: String, val vpRequest: String, val mdocSessionTranscript: DataItem?) : PresentmentRecord

PresentmentRecord for OpenID4VP presentations.

Supports both mso_mdoc and dc+sd-jwt credential formats within a single VP token.

Constructors

constructor(vpToken: String, vpRequest: String, mdocSessionTranscript: DataItem?)

Types

Companion

object Companion

Properties

mdocSessionTranscript

val mdocSessionTranscript: DataItem?

CBOR SessionTranscript used for mdoc device authentication; required when any credential uses mso_mdoc format.

vpRequest

val vpRequest: String

raw OpenID4VP request (extracted from signed JWT enveloped if needed).

vpToken

val vpToken: String

JSON-encoded VP token containing the credential responses, structured as a JSON object mapping credential IDs to arrays of credential response strings.

Functions

toCbor

fun OpenID4VPPresentmentRecord.toCbor(): ByteArray

fun PresentmentRecord.toCbor(): ByteArray

toDataItem

fun OpenID4VPPresentmentRecord.toDataItem(): DataItem

fun PresentmentRecord.toDataItem(): DataItem

verify

open suspend override fun verify(atTime: Instant, documentTypeRepository: DocumentTypeRepository?, zkSystemRepository: ZkSystemRepository?): List<VerifiedPresentation>

Verifies the cryptographic validity of the presentment and the issuer trust chain. This includes verifying that the credential holder approved all transactions that apply to the presented credentials, even if no data was sent as a response for a given transaction.

verifyNonce

open suspend override fun verifyNonce(nonce: ByteString)

Verifies that the presentation was bound to the expected nonce.