Package org.keycloak.sdjwt.consumer

Class SdJwtPresentationConsumer

java.lang.Object

org.keycloak.sdjwt.consumer.SdJwtPresentationConsumer

public class SdJwtPresentationConsumer
extends Object

A component for consuming (verifying) SD-JWT presentations.

The purpose is to streamline SD-JWT VP verification beyond signature and disclosure checks of SdJwtVerificationContext

Author:

Ingrid Kamga

Constructor Summary

Constructors

Constructor	Description
SdJwtPresentationConsumer()

Method Summary

Modifier and Type	Method	Description
SdJwtVpVerificationResult	verifySdJwtPresentation(SdJwtVP sdJwtVP, PresentationRequirements presentationRequirements, List<TrustedSdJwtIssuer> trustedSdJwtIssuers, IssuerSignedJwtVerificationOpts issuerSignedJwtVerificationOpts, KeyBindingJwtVerificationOpts keyBindingJwtVerificationOpts)	Verify SD-JWT presentation against specific requirements.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SdJwtPresentationConsumer

public SdJwtPresentationConsumer()

Method Details

verifySdJwtPresentation

public SdJwtVpVerificationResult verifySdJwtPresentation(SdJwtVP sdJwtVP,
 PresentationRequirements presentationRequirements,
 List<TrustedSdJwtIssuer> trustedSdJwtIssuers,
 IssuerSignedJwtVerificationOpts issuerSignedJwtVerificationOpts,
 KeyBindingJwtVerificationOpts keyBindingJwtVerificationOpts)
                                                  throws VerificationException

Verify SD-JWT presentation against specific requirements.

Parameters:

sdJwtVP - the presentation to verify

presentationRequirements - the requirements on presented claims

trustedSdJwtIssuers - trusted issuers for the verification

issuerSignedJwtVerificationOpts - policy for Issuer-signed JWT verification

keyBindingJwtVerificationOpts - policy for Key-binding JWT verification

Returns:

the verified presentation with its fully disclosed Issuer-signed payload

Throws:

VerificationException - if the verification fails for some reason