Package org.keycloak.protocol.oid4vc.issuance.keybinding

Class TrustedAttestationKeyResolver

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.keybinding.TrustedAttestationKeyResolver

All Implemented Interfaces:

AttestationKeyResolver

public class TrustedAttestationKeyResolver
extends Object
implements AttestationKeyResolver

Implementation of AttestationKeyResolver that loads trusted keys for attestation validation from configured trust-material IdPs in the client.

Constructor Summary

Constructors

Constructor	Description
TrustedAttestationKeyResolver(KeycloakSession session)

Method Summary

Modifier and Type	Method	Description
JWK	resolveKey(String kid, Map<String,Object> header, Map<String,Object> payload)	Loads trusted key for attestation validation from configured trust-material IdPs in client.
JWK	resolveX5c(List<String> x5c, Map<String,Object> header, Map<String,Object> payload)	Resolves and validates an attestation certificate chain.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TrustedAttestationKeyResolver

public TrustedAttestationKeyResolver(KeycloakSession session)

Method Details

resolveKey

public JWK resolveKey(String kid,
 Map<String,Object> header,
 Map<String,Object> payload)

Loads trusted key for attestation validation from configured trust-material IdPs in client. The trust-material IdP aliases are configured via client attribute OID4VCIConstants.OID4VCI_ATTESTER_TRUST_IDPS_ATTR.

Specified by:

resolveKey in interface AttestationKeyResolver

Returns:

JWK for the resolved trusted key, or null if not found.

resolveX5c

public JWK resolveX5c(List<String> x5c,
 Map<String,Object> header,
 Map<String,Object> payload)

Description copied from interface: AttestationKeyResolver

Resolves and validates an attestation certificate chain. Returning null means that none of the configured trust sources trusts the chain.

Specified by:

resolveX5c in interface AttestationKeyResolver