Package org.keycloak.protocol.oid4vc.issuance.keybinding

Class TrustedAttestationKeyResolver

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.keybinding.TrustedAttestationKeyResolver

All Implemented Interfaces:

AttestationKeyResolver

public class TrustedAttestationKeyResolver
extends Object
implements AttestationKeyResolver

Implementation of AttestationKeyResolver that loads trusted keys for attestation validation from configured trust-material IdPs in the client.

Constructor Summary

Constructors

Constructor	Description
TrustedAttestationKeyResolver(org.keycloak.models.KeycloakSession session)

Method Summary

Modifier and Type	Method	Description
org.keycloak.jose.jwk.JWK	resolveKey(String kid, Map<String,Object> header, Map<String,Object> payload)	Loads trusted key for attestation validation from configured trust-material IdPs in client.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TrustedAttestationKeyResolver

public TrustedAttestationKeyResolver(org.keycloak.models.KeycloakSession session)

Method Details

resolveKey

public org.keycloak.jose.jwk.JWK resolveKey(String kid,
 Map<String,Object> header,
 Map<String,Object> payload)

Loads trusted key for attestation validation from configured trust-material IdPs in client. The trust-material IdP aliases are configured via client attribute OID4VCIConstants.OID4VCI_ATTESTER_TRUST_IDPS_ATTR.

Specified by:

resolveKey in interface AttestationKeyResolver

Returns:

JWK for the resolved trusted key, or null if not found.