VerificationUtil

Utility functions for requesting and verifying credentials.

Functions

suspend fun decryptDcResponse(response: JsonObject, nonce: ByteString, origin: String, responseEncryptionKey: AsymmetricKey?): DcResponse

Decrypts a W3C Digital Credentials response.

suspend fun generateDcRequestDcql(exchangeProtocols: List<String>, dcql: JsonObject, nonce: ByteString, origin: String, responseEncryptionKey: EcPublicKey?, verifierIdentities: List<VerifierIdentity>, jsonTransactionData: List<String> = emptyList(), cborTransactionData: Map<String, TransactionsInfo> = emptyMap(), state: String? = null, deviceRequestVersion: String? = null): JsonObject

Utility function to generate a W3C Digital Credentials API request for requesting credentials.

suspend fun generateDcRequestMdoc(exchangeProtocols: List<String>, docType: String, claims: List<MdocRequestedClaim>, nonce: ByteString, origin: String, responseEncryptionKey: EcPublicKey?, verifierIdentities: List<VerifierIdentity>, zkSystemSpecs: List<ZkSystemSpec>, jsonTransactionData: List<String> = emptyList(), cborTransactionData: TransactionsInfo? = null, docRequestOtherInfo: Map<String, DataItem> = emptyMap(), issuerIdentifiers: List<ByteString> = emptyList(), deviceRequestVersion: String? = null): JsonObject

Utility function to generate a W3C Digital Credentials API request for requesting a single ISO mdoc credential.

suspend fun generateDcRequestSdJwt(exchangeProtocols: List<String>, vct: List<String>, claims: List<JsonRequestedClaim>, nonce: ByteString, origin: String, responseEncryptionKey: EcPublicKey?, verifierIdentities: List<VerifierIdentity>, jsonTransactionData: List<String> = emptyList(), cborTransactionData: TransactionsInfo? = null, issuerIdentifiers: List<ByteString> = emptyList(), deviceRequestVersion: String? = null): JsonObject

Utility function to generate a W3C Digital Credentials API request for requesting a single SD-JWT credential.

suspend fun generateVerificationSessionForDcql(requestTypes: Collection<VerificationSession.RequestType>, dcql: String, verifierIdentities: List<VerifierIdentity> = listOf(), origin: String? = null, transactionData: List<String>? = null, nonce: ByteString = ByteString(Crypto.secureRandom.nextBytes(18)), encryptResponse: Boolean = true, responseUri: String? = null, documentTypeRepository: DocumentTypeRepository? = null, deviceEngagement: ByteString? = null, handover: DataItem? = null, eReaderKey: EcPrivateKey? = null, state: String? = null): VerificationSession

Makes a request for credential presentation using W3C Digital Credentials API

fun injectIssuerIdentifiersIntoDcql(dcql: JsonObject, issuerIdentifiers: List<ByteString>): JsonObject

Injects trusted_authorities with the provided issuerIdentifiers into each credential in dcql that does not already have trusted_authorities.

suspend fun verifyMdocDeviceResponse(now: Instant, deviceResponse: DataItem, sessionTranscript: DataItem, eReaderKey: AsymmetricKey?, documentTypeRepository: DocumentTypeRepository?, zkSystemRepository: ZkSystemRepository?, request: DeviceRequest?): List<VerifiedPresentation>

Generates VerifiedPresentation from an ISO 18013-5 response.

suspend fun verifyOpenID4VPResponse(now: Instant, vpToken: JsonObject, sessionTranscript: DataItem?, nonce: String, documentTypeRepository: DocumentTypeRepository?, zkSystemRepository: ZkSystemRepository?, transactionDataMap: Map<String, List<TransactionData<*>>> = emptyMap(), queryData: Map<String, QueryData>): List<VerifiedPresentation>

Generates VerifiedPresentation from an OpenID4VP response.

suspend fun verifySdJwtPresentation(compactSerialization: String, nonce: String, documentTypeRepository: DocumentTypeRepository?, transactionData: List<TransactionData<*>>, identifier: String? = null): VerifiedPresentation

Generates VerifiedPresentation from an SD-JWT / SD-JWT+KB presentation.