Table of Contents

Class MdocErrorCodes

Namespace
Tessio.Verifier.Core.Mdoc
Assembly
Tessio.Verifier.Core.Mdoc.dll

Stable error codes for mdoc verification failures, alongside the shared codes in ErrorCodes (structure_invalid, signature_invalid, issuer_untrusted, …).

public static class MdocErrorCodes
Inheritance
MdocErrorCodes
Inherited Members

Fields

AlgorithmNotAllowed

The COSE signature algorithm is not on the allowlist (shared with Core).

public const string AlgorithmNotAllowed = "algorithm_not_allowed"

Field Value

string

CredentialExpired

The MSO validity window has passed (shared with Core).

public const string CredentialExpired = "credential_expired"

Field Value

string

CredentialNotYetValid

The MSO validity window has not started (shared with Core).

public const string CredentialNotYetValid = "credential_not_yet_valid"

Field Value

string

DeviceAuthInvalid

The device signature over the session transcript does not verify.

public const string DeviceAuthInvalid = "mdoc_device_auth_invalid"

Field Value

string

DigestMismatch

A disclosed item's digest does not appear in the MSO's valueDigests.

public const string DigestMismatch = "mdoc_digest_mismatch"

Field Value

string

DocTypeMismatch

The document's docType does not match the requested doctype.

public const string DocTypeMismatch = "mdoc_doctype_mismatch"

Field Value

string

FormatUnsupported

The credential is not an mdoc (shared with Core).

public const string FormatUnsupported = "format_unsupported"

Field Value

string

IssuerKeyUnresolvable

The Document Signer key could not be resolved from x5chain (shared with Core).

public const string IssuerKeyUnresolvable = "issuer_key_unresolvable"

Field Value

string

IssuerTrustUnresolvable

The trust seam could not answer, so the issuer was neither trusted nor refused (shared with Core).

public const string IssuerTrustUnresolvable = "issuer_trust_unresolvable"

Field Value

string

IssuerUntrusted

The issuer does not chain to a configured trust anchor (shared with Core).

public const string IssuerUntrusted = "issuer_untrusted"

Field Value

string

MsoInvalid

The MSO is malformed or carries unsupported values.

public const string MsoInvalid = "mdoc_mso_invalid"

Field Value

string

SignatureInvalid

The issuerAuth signature does not verify (shared with Core).

public const string SignatureInvalid = "signature_invalid"

Field Value

string

StructureInvalid

Malformed base64url, CBOR or a missing required element (shared with Core).

public const string StructureInvalid = "structure_invalid"

Field Value

string

TrustListExpired

The trust list that would vouch for the issuer is no longer current (shared with Core).

public const string TrustListExpired = "trust_list_expired"

Field Value

string

ZkCircuitNotAccepted

A zero knowledge presentation names a proof system or circuit the configured IZkProofVerifier does not accept.

public const string ZkCircuitNotAccepted = "mdoc_zk_circuit_not_accepted"

Field Value

string

ZkPresentationUnsupported

The response carries zero knowledge presentations (a nonempty zkDocuments) and no documents, and no ZkProofVerifier is set to check them. The requests this library builds never ask for one, so with those requests this code means a wallet answered with something the request did not ask for.

public const string ZkPresentationUnsupported = "mdoc_zk_presentation_unsupported"

Field Value

string

ZkProofInvalid

A zero knowledge presentation's proof does not verify.

public const string ZkProofInvalid = "mdoc_zk_proof_invalid"

Field Value

string

ZkTimestampOutOfRange

A zero knowledge presentation's timestamp lies outside ClockSkew of the verifier's clock. The proof shows the credential was valid at that timestamp, so a timestamp far from now would prove validity at a time the wallet chose.

public const string ZkTimestampOutOfRange = "mdoc_zk_timestamp_out_of_range"

Field Value

string