vclib-openid/at.asitplus.wallet.lib.oidvci/SimpleAuthorizationService

SimpleAuthorizationService

class SimpleAuthorizationService(dataProvider: OAuth2DataProvider, credentialSchemes: Set<ConstantIndex.CredentialScheme>, codeService: CodeService = DefaultCodeService(), tokenService: TokenService = DefaultTokenService(), clientNonceService: NonceService = DefaultNonceService(), val publicContext: String = "https://wallet.a-sit.at/authorization-server", authorizationEndpointPath: String = "/authorize", tokenEndpointPath: String = "/token") : OAuth2AuthorizationServer

Simple authorization server implementation, to be used for CredentialIssuer, when issuing credentials directly from a local dataProvider.

Implemented from OpenID for Verifiable Credential Issuance (https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html), Draft 13, 2024-02-08.

Constructors

constructor(dataProvider: OAuth2DataProvider, credentialSchemes: Set<ConstantIndex.CredentialScheme>, codeService: CodeService = DefaultCodeService(), tokenService: TokenService = DefaultTokenService(), clientNonceService: NonceService = DefaultNonceService(), publicContext: String = "https://wallet.a-sit.at/authorization-server", authorizationEndpointPath: String = "/authorize", tokenEndpointPath: String = "/token")

Properties

metadata

val metadata: IssuerMetadata

Serve this result JSON-serialized under /.well-known/openid-configuration

publicContext

open override val publicContext: String

Used in several fields in IssuerMetadata, to provide endpoint URLs to clients.

Functions

authorize

suspend fun authorize(request: AuthenticationRequestParameters): KmmResult<AuthenticationResponseResult>

Builds the authentication response. Send this result as HTTP Header Location in a 302 response to the client.

getUserInfo

open suspend override fun getUserInfo(accessToken: String): KmmResult<OidcUserInfo>

Get the OidcUserInfo associated with the accessToken, that was created before at the Authorization Server.

providePreAuthorizedCode

open suspend override fun providePreAuthorizedCode(): String

Provide a pre-authorized code (for flow defined in OID4VCI), to be used by the Wallet implementation to load credentials.

token

suspend fun token(params: TokenRequestParameters): KmmResult<TokenResponseParameters>

Verifies the authorization code sent by the client and issues an access token. Send this value JSON-serialized back to the client.

verifyAndRemoveClientNonce

open suspend override fun verifyAndRemoveClientNonce(nonce: String): Boolean