Interface IWalletResponseVerifier
- Namespace
- Tessio.Verifier.AspNetCore
- Assembly
- Tessio.Verifier.AspNetCore.dll
Parses and verifies a wallet authorization response against the session it answers, using the
expectations carried by that session's own request. This is the public multi-tenant seam: one process
verifies callbacks for any number of tenants without reading the process-wide VerifierOptions,
because each session's request already pins the audience (client_id), nonce, response mode and
the requested format / vct / docType.
public interface IWalletResponseVerifierRemarks
Register your own IStateCorrelatingSessionStore, correlate the incoming response to a
session yourself (by state), then hand both here. The implementation is stateless and safe to
resolve as a singleton and call concurrently. It does not complete the session: the host records the
returned VerificationResult.
Methods
VerifyAsync(VerificationSession, WalletResponseData, CancellationToken)
Parses response (picking SD-JWT vs mdoc from the session's request, so mixed-format
tenants share one process) and verifies every presented credential against session.
A malformed or undecryptable response yields an invalid result (error code response_invalid)
rather than throwing, so the caller can always complete the session with the outcome.
Task<VerificationResult> VerifyAsync(VerificationSession session, WalletResponseData response, CancellationToken ct = default)Parameters
sessionVerificationSessionresponseWalletResponseDatactCancellationToken