Package org.keycloak.protocol.oid4vc.issuance.keybinding

Class AttestationProofValidator

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

org.keycloak.protocol.oid4vc.issuance.keybinding.AttestationProofValidator

All Implemented Interfaces:

ProofValidator, Provider

public class AttestationProofValidator
extends AbstractProofValidator

Validates attestation proofs as per OID4VCI specification.

Author:

Rodrick Awambeng

See Also:

• Attestation Proof Type

Field Summary

Fields inherited from class org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

keycloakSession

Constructor Summary

Constructors

Constructor	Description
AttestationProofValidator(KeycloakSession session, AttestationKeyResolver keyResolver)

Method Summary

Modifier and Type	Method	Description
String	getProofType()
List<JWK>	validateProof(VCIssuanceContext vcIssuanceContext)	Validates client-provided key binding proofs.

Methods inherited from class org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

getVerifier

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.protocol.oid4vc.issuance.keybinding.ProofValidator

close

Constructor Details

AttestationProofValidator

public AttestationProofValidator(KeycloakSession session,
 AttestationKeyResolver keyResolver)

Method Details

getProofType

public String getProofType()

validateProof

public List<JWK> validateProof(VCIssuanceContext vcIssuanceContext)
                        throws VCIssuerException

Description copied from interface: ProofValidator

Validates client-provided key binding proofs.

Parameters:

vcIssuanceContext - the issuance context with credential request and config

Returns:

the list of JWKs to bind to credentials (one JWK per credential)

Throws:

VCIssuerException