Class AvPresentationRequestBuilder

Namespace

Tessio.Verifier.OpenId4Vp

Assembly

Tessio.Verifier.OpenId4Vp.dll

Builds EU Age Verification authorization requests: DCQL in plain query parameters, no request object.

public sealed class AvPresentationRequestBuilder : IAvPresentationRequestBuilder

Inheritance

object

AvPresentationRequestBuilder

Implements

IAvPresentationRequestBuilder

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

Not a relaxed SignedPresentationRequestBuilder. That one always produces a JAR and delivers it as request or request_uri; this one produces no request object at all. Two implementations rather than a flag, because a flag on a signing builder is one misconfiguration away from silently disabling signing on the profile that depends on it.

Why the profile drops JAR, since it reads like a weakening: JAR's integrity protection depends on a trust list of relying parties. The AV solution has none, so an attacker can obtain a valid certificate and substitute their own signed request. Signing would look like protection while providing none. Integrity rests on TLS and the Web PKI instead.

Constructors

AvPresentationRequestBuilder(AvPresentationRequestBuilderOptions)

Creates a builder from the supplied options.

public AvPresentationRequestBuilder(AvPresentationRequestBuilderOptions options)

Parameters

options AvPresentationRequestBuilderOptions

Methods

BuildAsync(PresentationRequestOptions, CancellationToken)

Builds an unsigned, plain-parameter presentation request from the supplied options.

public Task<AvPresentationRequest> BuildAsync(PresentationRequestOptions options, CancellationToken ct = default)

Parameters

options PresentationRequestOptions

Per-request inputs. ResponseMode must be DirectPost, and ClientMetadataJson should be null: this profile encrypts nothing and identifies the verifier by its response URI.

ct CancellationToken

Cancellation token.

Returns

Task<AvPresentationRequest>