Package org.keycloak.protocol.oid4vc.issuance.keybinding

Class TrustedAttestationKeyResolver

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.keybinding.TrustedAttestationKeyResolver

All Implemented Interfaces:

AttestationKeyResolver

public class TrustedAttestationKeyResolver
extends Object
implements AttestationKeyResolver

Implementation of AttestationKeyResolver that loads trusted keys for attestation validation from configured trust-material IdPs in the client.

Constructor Summary

Constructors

Constructor	Description
TrustedAttestationKeyResolver(KeycloakSession session)

Method Summary

Modifier and Type	Method	Description
JWK	resolveKey(String kid, Map<String,Object> header, Map<String,Object> payload)	Loads trusted key for attestation validation from configured trust-material IdPs in client.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TrustedAttestationKeyResolver

public TrustedAttestationKeyResolver(KeycloakSession session)

Method Details

resolveKey

public JWK resolveKey(String kid,
 Map<String,Object> header,
 Map<String,Object> payload)

Loads trusted key for attestation validation from configured trust-material IdPs in client. The trust-material IdP aliases are configured via client attribute OID4VCIConstants.OID4VCI_ATTESTER_TRUST_IDPS_ATTR.

Specified by:

resolveKey in interface AttestationKeyResolver

Returns:

JWK for the resolved trusted key, or null if not found.