Function verifyWalletAttestationJwt

verifyWalletAttestationJwt(
    options: VerifyWalletAttestationJwtOptionsV1_0,
): Promise<
    {
        header: {
            alg: string;
            jwk?: {
                alg?: string;
                crv?: string;
                d?: string;
                dp?: string;
                dq?: string;
                e?: string;
                ext?: boolean;
                k?: string;
                key_ops?: string[];
                kid?: string;
                kty: string;
                n?: string;
                oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                p?: string;
                q?: string;
                qi?: string;
                use?: string;
                x?: string;
                x5c?: string[];
                x5t?: string;
                "x5t#S256"?: string;
                x5u?: string;
                y?: string;
                [key: string]: unknown;
            };
            kid?: string;
            trust_chain: [string, ...string[]];
            typ: "oauth-client-attestation+jwt";
            x5c?: string[];
            [key: string]: unknown;
        };
        payload: {
            aal: string;
            aud?: string;
            cnf: {
                jwk: {
                    alg?: string;
                    crv?: string;
                    d?: string;
                    dp?: string;
                    dq?: string;
                    e?: string;
                    ext?: boolean;
                    k?: string;
                    key_ops?: string[];
                    kid?: string;
                    kty: string;
                    n?: string;
                    oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                    p?: string;
                    q?: string;
                    qi?: string;
                    use?: string;
                    x?: string;
                    x5c?: string[];
                    x5t?: string;
                    "x5t#S256"?: string;
                    x5u?: string;
                    y?: string;
                    [key: string]: unknown;
                };
            };
            exp: number;
            iat: number;
            iss: string;
            jti?: string;
            nbf?: number;
            nonce?: string;
            status?: Record<string, any>;
            sub: string;
            trust_chain?: [string, ...string[]];
            wallet_link?: string;
            wallet_name?: string;
            [key: string]: unknown;
        };
        signer: JwtSignerWithJwk;
    },
>
Verifies a wallet/client attestation JWT according to the configured IT-Wallet version.
Parameters
- options: VerifyWalletAttestationJwtOptionsV1_0
  Version-specific wallet attestation verification options.
Returns Promise<
    {
        header: {
            alg: string;
            jwk?: {
                alg?: string;
                crv?: string;
                d?: string;
                dp?: string;
                dq?: string;
                e?: string;
                ext?: boolean;
                k?: string;
                key_ops?: string[];
                kid?: string;
                kty: string;
                n?: string;
                oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                p?: string;
                q?: string;
                qi?: string;
                use?: string;
                x?: string;
                x5c?: string[];
                x5t?: string;
                "x5t#S256"?: string;
                x5u?: string;
                y?: string;
                [key: string]: unknown;
            };
            kid?: string;
            trust_chain: [string, ...string[]];
            typ: "oauth-client-attestation+jwt";
            x5c?: string[];
            [key: string]: unknown;
        };
        payload: {
            aal: string;
            aud?: string;
            cnf: {
                jwk: {
                    alg?: string;
                    crv?: string;
                    d?: string;
                    dp?: string;
                    dq?: string;
                    e?: string;
                    ext?: boolean;
                    k?: string;
                    key_ops?: string[];
                    kid?: string;
                    kty: string;
                    n?: string;
                    oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                    p?: string;
                    q?: string;
                    qi?: string;
                    use?: string;
                    x?: string;
                    x5c?: string[];
                    x5t?: string;
                    "x5t#S256"?: string;
                    x5u?: string;
                    y?: string;
                    [key: string]: unknown;
                };
            };
            exp: number;
            iat: number;
            iss: string;
            jti?: string;
            nbf?: number;
            nonce?: string;
            status?: Record<string, any>;
            sub: string;
            trust_chain?: [string, ...string[]];
            wallet_link?: string;
            wallet_name?: string;
            [key: string]: unknown;
        };
        signer: JwtSignerWithJwk;
    },
>
Decoded and verified wallet attestation data for the configured version.

Throws
If JWT header or payload validation fails.

Throws
If the attestation JWT cannot be decoded.

Throws
If signature verification fails.

Throws
If the configured version is unsupported.
- Defined in packages/oauth2/src/client-attestation/wallet-attestation.ts:61
verifyWalletAttestationJwt(
    options: VerifyWalletAttestationJwtOptionsV1_3,
): Promise<
    {
        header: {
            alg: string;
            jwk?: {
                alg?: string;
                crv?: string;
                d?: string;
                dp?: string;
                dq?: string;
                e?: string;
                ext?: boolean;
                k?: string;
                key_ops?: string[];
                kid?: string;
                kty: string;
                n?: string;
                oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                p?: string;
                q?: string;
                qi?: string;
                use?: string;
                x?: string;
                x5c?: string[];
                x5t?: string;
                "x5t#S256"?: string;
                x5u?: string;
                y?: string;
                [key: string]: unknown;
            };
            kid?: string;
            trust_chain?: [string, ...string[]];
            typ: "oauth-client-attestation+jwt";
            x5c: string[];
            [key: string]: unknown;
        };
        payload: {
            aud?: string;
            cnf: {
                jwk: {
                    alg?: string;
                    crv?: string;
                    d?: string;
                    dp?: string;
                    dq?: string;
                    e?: string;
                    ext?: boolean;
                    k?: string;
                    key_ops?: string[];
                    kid?: string;
                    kty: string;
                    n?: string;
                    oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                    p?: string;
                    q?: string;
                    qi?: string;
                    use?: string;
                    x?: string;
                    x5c?: string[];
                    x5t?: string;
                    "x5t#S256"?: string;
                    x5u?: string;
                    y?: string;
                    [key: string]: unknown;
                };
            };
            exp: number;
            iat: number;
            iss: string;
            jti?: string;
            nbf?: number;
            nonce?: string;
            status?: { status_list: { idx: number; uri: string } };
            sub: string;
            trust_chain?: [string, ...string[]];
            wallet_link?: string;
            wallet_name?: string;
            [key: string]: unknown;
        };
        signer: JwtSignerWithJwk;
    },
>
Verifies a wallet/client attestation JWT according to the configured IT-Wallet version.
Parameters
- options: VerifyWalletAttestationJwtOptionsV1_3
  Version-specific wallet attestation verification options.
Returns Promise<
    {
        header: {
            alg: string;
            jwk?: {
                alg?: string;
                crv?: string;
                d?: string;
                dp?: string;
                dq?: string;
                e?: string;
                ext?: boolean;
                k?: string;
                key_ops?: string[];
                kid?: string;
                kty: string;
                n?: string;
                oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                p?: string;
                q?: string;
                qi?: string;
                use?: string;
                x?: string;
                x5c?: string[];
                x5t?: string;
                "x5t#S256"?: string;
                x5u?: string;
                y?: string;
                [key: string]: unknown;
            };
            kid?: string;
            trust_chain?: [string, ...string[]];
            typ: "oauth-client-attestation+jwt";
            x5c: string[];
            [key: string]: unknown;
        };
        payload: {
            aud?: string;
            cnf: {
                jwk: {
                    alg?: string;
                    crv?: string;
                    d?: string;
                    dp?: string;
                    dq?: string;
                    e?: string;
                    ext?: boolean;
                    k?: string;
                    key_ops?: string[];
                    kid?: string;
                    kty: string;
                    n?: string;
                    oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                    p?: string;
                    q?: string;
                    qi?: string;
                    use?: string;
                    x?: string;
                    x5c?: string[];
                    x5t?: string;
                    "x5t#S256"?: string;
                    x5u?: string;
                    y?: string;
                    [key: string]: unknown;
                };
            };
            exp: number;
            iat: number;
            iss: string;
            jti?: string;
            nbf?: number;
            nonce?: string;
            status?: { status_list: { idx: number; uri: string } };
            sub: string;
            trust_chain?: [string, ...string[]];
            wallet_link?: string;
            wallet_name?: string;
            [key: string]: unknown;
        };
        signer: JwtSignerWithJwk;
    },
>
Decoded and verified wallet attestation data for the configured version.

Throws
If JWT header or payload validation fails.

Throws
If the attestation JWT cannot be decoded.

Throws
If signature verification fails.

Throws
If the configured version is unsupported.
- Defined in packages/oauth2/src/client-attestation/wallet-attestation.ts:65
verifyWalletAttestationJwt(
    options: VerifyWalletAttestationJwtOptionsV1_4,
): Promise<
    {
        header: {
            alg: string;
            jwk?: {
                alg?: string;
                crv?: string;
                d?: string;
                dp?: string;
                dq?: string;
                e?: string;
                ext?: boolean;
                k?: string;
                key_ops?: string[];
                kid?: string;
                kty: string;
                n?: string;
                oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                p?: string;
                q?: string;
                qi?: string;
                use?: string;
                x?: string;
                x5c?: string[];
                x5t?: string;
                "x5t#S256"?: string;
                x5u?: string;
                y?: string;
                [key: string]: unknown;
            };
            kid: string;
            trust_chain?: [string, ...string[]];
            typ: "oauth-client-attestation+jwt";
            x5c: string[];
            [key: string]: unknown;
        };
        payload: {
            aud?: string;
            cnf: {
                jwk: {
                    alg?: string;
                    crv?: string;
                    d?: string;
                    dp?: string;
                    dq?: string;
                    e?: string;
                    ext?: boolean;
                    k?: string;
                    key_ops?: string[];
                    kid?: string;
                    kty: string;
                    n?: string;
                    oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                    p?: string;
                    q?: string;
                    qi?: string;
                    use?: string;
                    x?: string;
                    x5c?: string[];
                    x5t?: string;
                    "x5t#S256"?: string;
                    x5u?: string;
                    y?: string;
                    [key: string]: unknown;
                };
            };
            exp: number;
            iat: number;
            iss: string;
            jti?: string;
            nbf?: number;
            nonce?: string;
            status?: Record<string, any>;
            sub: string;
            trust_chain?: [string, ...string[]];
            wallet_link: string;
            wallet_name: string;
            [key: string]: unknown;
        };
        signer: JwtSignerWithJwk;
    },
>
Verifies a wallet/client attestation JWT according to the configured IT-Wallet version.
Parameters
- options: VerifyWalletAttestationJwtOptionsV1_4
  Version-specific wallet attestation verification options.
Returns Promise<
    {
        header: {
            alg: string;
            jwk?: {
                alg?: string;
                crv?: string;
                d?: string;
                dp?: string;
                dq?: string;
                e?: string;
                ext?: boolean;
                k?: string;
                key_ops?: string[];
                kid?: string;
                kty: string;
                n?: string;
                oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                p?: string;
                q?: string;
                qi?: string;
                use?: string;
                x?: string;
                x5c?: string[];
                x5t?: string;
                "x5t#S256"?: string;
                x5u?: string;
                y?: string;
                [key: string]: unknown;
            };
            kid: string;
            trust_chain?: [string, ...string[]];
            typ: "oauth-client-attestation+jwt";
            x5c: string[];
            [key: string]: unknown;
        };
        payload: {
            aud?: string;
            cnf: {
                jwk: {
                    alg?: string;
                    crv?: string;
                    d?: string;
                    dp?: string;
                    dq?: string;
                    e?: string;
                    ext?: boolean;
                    k?: string;
                    key_ops?: string[];
                    kid?: string;
                    kty: string;
                    n?: string;
                    oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
                    p?: string;
                    q?: string;
                    qi?: string;
                    use?: string;
                    x?: string;
                    x5c?: string[];
                    x5t?: string;
                    "x5t#S256"?: string;
                    x5u?: string;
                    y?: string;
                    [key: string]: unknown;
                };
            };
            exp: number;
            iat: number;
            iss: string;
            jti?: string;
            nbf?: number;
            nonce?: string;
            status?: Record<string, any>;
            sub: string;
            trust_chain?: [string, ...string[]];
            wallet_link: string;
            wallet_name: string;
            [key: string]: unknown;
        };
        signer: JwtSignerWithJwk;
    },
>
Decoded and verified wallet attestation data for the configured version.

Throws
If JWT header or payload validation fails.

Throws
If the attestation JWT cannot be decoded.

Throws
If signature verification fails.

Throws
If the configured version is unsupported.
- Defined in packages/oauth2/src/client-attestation/wallet-attestation.ts:69

Function verifyWalletAttestationJwt

Parameters

Throws

Throws

Throws

Throws

Parameters

Throws

Throws

Throws

Throws

Parameters

Throws

Throws

Throws

Throws

Settings