Class WalletResponseParserOptions

Namespace

Tessio.Verifier.OpenId4Vp

Assembly

Tessio.Verifier.OpenId4Vp.dll

Configuration for WalletResponseParser.

public sealed class WalletResponseParserOptions

Inheritance

object

WalletResponseParserOptions

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Properties

PresentationFormat

Credential format assigned to string presentations extracted from vp_token. Defaults to dc+sd-jwt, the SD-JWT VC format identifier.

public string PresentationFormat { get; set; }

Property Value

string

ResponseDecryptionKey

Private key used to decrypt direct_post.jwt (JWE) responses. The matching public key is advertised to wallets via client_metadata.jwks. Required to parse encrypted responses; plain direct_post responses need no key.

public SecurityKey? ResponseDecryptionKey { get; set; }

Property Value

SecurityKey

ResponseDecryptionKeyResolver

Resolves the decryption key from the JWE's kid header. Takes precedence over ResponseDecryptionKey when set.

public Func<string?, SecurityKey?>? ResponseDecryptionKeyResolver { get; set; }

Property Value

Func<string, SecurityKey>

Remarks

Needed because response-encryption keys are ephemeral per authorization request (OpenID4VP 1.0 §8.3, HAIP 1.0 §5) and for direct_post.jwt the session correlation handle (state) is inside the encrypted payload, so the key cannot be picked by session. The kid the wallet echoes from our client_metadata.jwks is the way back to the right key.