Package org.keycloak.protocol.oid4vc.issuance.keybinding

Class JwtProofValidator

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

org.keycloak.protocol.oid4vc.issuance.keybinding.JwtProofValidator

All Implemented Interfaces:

ProofValidator, Provider

public class JwtProofValidator
extends AbstractProofValidator

Validates the conformance and authenticity of presented JWT proofs.

See Also:

• "https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#name-jwt-proof-type"

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PROOF_JWT_TYP

Fields inherited from class org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

keycloakSession

Constructor Summary

Constructors

Constructor	Description
JwtProofValidator(KeycloakSession keycloakSession, AttestationKeyResolver keyResolver)

Method Summary

Modifier and Type	Method	Description
String	getProofType()
List<org.keycloak.jose.jwk.JWK>	validateProof(VCIssuanceContext vcIssuanceContext)	Validates client-provided key binding proofs.

Methods inherited from class org.keycloak.protocol.oid4vc.issuance.keybinding.AbstractProofValidator

getVerifier

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.protocol.oid4vc.issuance.keybinding.ProofValidator

close

Field Details

PROOF_JWT_TYP

public static final String PROOF_JWT_TYP

See Also:

• Constant Field Values

Constructor Details

JwtProofValidator

public JwtProofValidator(KeycloakSession keycloakSession,
 AttestationKeyResolver keyResolver)

Method Details

getProofType

public String getProofType()

validateProof

public List<org.keycloak.jose.jwk.JWK> validateProof(VCIssuanceContext vcIssuanceContext)
                                              throws VCIssuerException

Description copied from interface: ProofValidator

Validates client-provided key binding proofs.

Parameters:

vcIssuanceContext - the issuance context with credential request and config

Returns:

the list of JWKs to bind to credentials (one JWK per credential)

Throws:

VCIssuerException