Package org.keycloak.protocol.oid4vc.issuance.keybinding

Class JwtProofValidator

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

org.keycloak.protocol.oid4vc.issuance.keybinding.JwtProofValidator

All Implemented Interfaces:

ProofValidator, Provider

public class JwtProofValidator
extends AbstractProofValidator

Validates the conformance and authenticity of presented JWT proofs.

See Also:

• "https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#name-jwt-proof-type"

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PROOF_JWT_TYP

Fields inherited from class org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

keycloakSession

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	JwtProofValidator(KeycloakSession keycloakSession)

Method Summary

Modifier and Type	Method	Description
JWK	validateProof(VCIssuanceContext vcIssuanceContext)	Validates a client-provided key binding proof.

Methods inherited from class org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

getVerifier

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.protocol.oid4vc.issuance.keybinding.ProofValidator

close

Field Details

PROOF_JWT_TYP

public static final String PROOF_JWT_TYP

See Also:

• Constant Field Values

Constructor Details

JwtProofValidator

protected JwtProofValidator(KeycloakSession keycloakSession)

Method Details

validateProof

public JWK validateProof(VCIssuanceContext vcIssuanceContext)
                  throws VCIssuerException

Description copied from interface: ProofValidator

Validates a client-provided key binding proof.

Parameters:

vcIssuanceContext - the issuance context with credential request and config

Returns:

the JWK to bind to the credential

Throws:

VCIssuerException