Class WalletResponseVerifier

Namespace

Tessio.Verifier.AspNetCore

Assembly

Tessio.Verifier.AspNetCore.dll

Default IWalletResponseVerifier. Parses a wallet response format-aware (from the session's request), then verifies each credential with expectations derived from that same request — audience from client_id, nonce, and the requested vct / docType — rather than from the process-wide VerifierOptions. Verifying against the session's own client_id is what makes the seam multi-tenant correct, and it also closes the app-wide-audience gap for the built-in callback endpoint, which routes through VerifyParsedAsync(VerificationSession, ParsedWalletResponse, CancellationToken).

public sealed class WalletResponseVerifier : IWalletResponseVerifier

Inheritance

object

WalletResponseVerifier

Implements

IWalletResponseVerifier

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Constructors

WalletResponseVerifier(ICredentialVerifier, MdocVerifier, ResponseEncryptionKeyStore)

Creates a verifier over the SD-JWT VC and mdoc credential verifiers.

public WalletResponseVerifier(ICredentialVerifier verifier, MdocVerifier mdocVerifier, ResponseEncryptionKeyStore encryptionKeys)

Parameters

verifier ICredentialVerifier

mdocVerifier MdocVerifier

encryptionKeys ResponseEncryptionKeyStore

Methods

VerifyAsync(VerificationSession, WalletResponseData, CancellationToken)

Parses response (picking SD-JWT vs mdoc from the session's request, so mixed-format tenants share one process) and verifies every presented credential against session. A malformed or undecryptable response yields an invalid result (error code response_invalid) rather than throwing, so the caller can always complete the session with the outcome.

public Task<VerificationResult> VerifyAsync(VerificationSession session, WalletResponseData response, CancellationToken ct = default)

Parameters

session VerificationSession

response WalletResponseData

ct CancellationToken

Returns

Task<VerificationResult>