Namespace Tessio.Verifier.OpenId4Vp
Classes
- AvPresentationRequest
A built EU Age Verification authorization request, ready to be delivered to the Age Verification App. Its parameters ride directly in AuthorizationRequestUri; there is no request object.
- AvPresentationRequestBuilder
Builds EU Age Verification authorization requests: DCQL in plain query parameters, no request object.
- AvPresentationRequestBuilderOptions
Construction-time options for AvPresentationRequestBuilder.
- ClientIdentifier
Builds OpenID4VP
client_idvalues that carry a Client Identifier Prefix.
- ClientMetadata
Builder for the OpenID4VP
client_metadataobject, producing the JSON string expected by ClientMetadataJson.
- Dcql
Builders for OpenID4VP DCQL (Digital Credentials Query Language) queries, producing the JSON string expected by DcqlQueryJson.
- DcqlClaim
One claim in a DCQL Claims Query, addressed by path.
- EcdhEsJweEncryptor
Encrypts a JWE with ECDH-ES Direct Key Agreement and A256GCM, the shape a HAIP wallet uses for a
direct_post.jwtresponse.
- ParsedWalletResponse
A fully parsed wallet authorization response: the presented credentials plus the response metadata the hosting layer needs for session correlation.
- PresentationRequest
A built, JAR-signed OpenID4VP authorization request ready to be delivered to the wallet.
- PresentationRequest.ByReference
Request delivered by reference: the wallet fetches the signed JAR from RequestUri. The hosting layer must serve SignedRequestObject at that URL until ExpiresAt.
- PresentationRequest.ByValue
Request delivered by value: the signed JAR is embedded inline in AuthorizationRequestUri's query string. Suitable for small requests; some wallets and transports cap inline length.
- PresentationRequestBuilderOptions
Configuration for SignedPresentationRequestBuilder.
- PresentationRequestOptions
Inputs the verifier provides to IPresentationRequestBuilder when building a presentation request.
- SignedPresentationRequestBuilder
Builds JAR-signed OpenID4VP 1.0 presentation requests (RFC 9101), delivered by value or by reference per RequestUriBase.
- WalletResponseData
Host-agnostic representation of an inbound wallet response to the verifier's
response_uri. Decouples the protocol parser from any specific HTTP framework.
- WalletResponseException
Thrown when a wallet response cannot be parsed into presented credentials.
- WalletResponseParser
Parses wallet authorization responses —
direct_post(cleartext form) anddirect_post.jwt(encrypted JWE in theresponseform parameter) — and extracts the presented credentials fromvp_token.
- WalletResponseParserOptions
Configuration for WalletResponseParser.
Interfaces
- IAvPresentationRequestBuilder
Builds an EU Age Verification authorization request: DCQL in plain query parameters, no JAR.
- IPresentationRequestBuilder
Builds a signed OpenID4VP 1.0 presentation request (DCQL + JAR per RFC 9101).
- IPresentationResponseParser
Parses an OpenID4VP wallet response (
direct_postordirect_post.jwt) and extracts the presented credentials.
Enums
- ResponseMode
OpenID4VP 1.0 response delivery modes supported by this library.