Function verifyCredentialRequestJwtProof

verifyCredentialRequestJwtProof(
options: VerifyCredentialRequestJwtProofOptionsV1_0,
): Promise<VerifyCredentialRequestJwtProofResultV1_0>
Verifies a credential request JWT proof according to the configured IT-Wallet specification version.

Performs the following checks:
1. Validates nonce expiry (if nonceExpiresAt is provided)
2. Decodes and validates the JWT header and payload using version-specific schemas
3. Validates proof iat freshness (max 5 minutes old, max 60 seconds in the future)
4. Verifies the JWT signature via the verifyJwt callback
5. (v1.3 only) Verifies the key_attestation JWT and checks that the proof signer key is present in the key attestation's attested_keys
6. (v1.3 only) Ensures key attestation iss belongs to trustedWalletProviderIssuers
Parameters
- options: VerifyCredentialRequestJwtProofOptionsV1_0
  Verification options and callbacks.
Returns Promise<VerifyCredentialRequestJwtProofResultV1_0>
Decoded header, payload, signer, and (v1.3) key attestation result.

Throws
If nonce is expired, proof iat is outside freshness bounds, signature is invalid, or the signer key is not in the attested keys.

Throws
If JWT header or payload schema validation fails.

Throws
If JWT decoding fails.
- Defined in packages/oid4vci/src/credential-request/verify-credential-request-jwt-proof.ts:304
verifyCredentialRequestJwtProof(
    options:
        | VerifyCredentialRequestJwtProofOptionsV1_3
        | VerifyCredentialRequestJwtProofOptionsV1_4,
): Promise<VerifyCredentialRequestJwtProofResultV1_3>
Verifies a credential request JWT proof according to the configured IT-Wallet specification version.

Performs the following checks:
1. Validates nonce expiry (if nonceExpiresAt is provided)
2. Decodes and validates the JWT header and payload using version-specific schemas
3. Validates proof iat freshness (max 5 minutes old, max 60 seconds in the future)
4. Verifies the JWT signature via the verifyJwt callback
5. (v1.3 only) Verifies the key_attestation JWT and checks that the proof signer key is present in the key attestation's attested_keys
6. (v1.3 only) Ensures key attestation iss belongs to trustedWalletProviderIssuers
Parameters
- options:
  | VerifyCredentialRequestJwtProofOptionsV1_3
  | VerifyCredentialRequestJwtProofOptionsV1_4
  Verification options and callbacks.
Returns Promise<VerifyCredentialRequestJwtProofResultV1_3>
Decoded header, payload, signer, and (v1.3) key attestation result.

Throws
If nonce is expired, proof iat is outside freshness bounds, signature is invalid, or the signer key is not in the attested keys.

Throws
If JWT header or payload schema validation fails.

Throws
If JWT decoding fails.
- Defined in packages/oid4vci/src/credential-request/verify-credential-request-jwt-proof.ts:308
verifyCredentialRequestJwtProof(
options: VerifyCredentialRequestJwtProofOptions,
): Promise<VerifyCredentialRequestJwtProofResult>
Verifies a credential request JWT proof according to the configured IT-Wallet specification version.

Performs the following checks:
1. Validates nonce expiry (if nonceExpiresAt is provided)
2. Decodes and validates the JWT header and payload using version-specific schemas
3. Validates proof iat freshness (max 5 minutes old, max 60 seconds in the future)
4. Verifies the JWT signature via the verifyJwt callback
5. (v1.3 only) Verifies the key_attestation JWT and checks that the proof signer key is present in the key attestation's attested_keys
6. (v1.3 only) Ensures key attestation iss belongs to trustedWalletProviderIssuers
Parameters
- options: VerifyCredentialRequestJwtProofOptions
  Verification options and callbacks.
Returns Promise<VerifyCredentialRequestJwtProofResult>
Decoded header, payload, signer, and (v1.3) key attestation result.

Throws
If nonce is expired, proof iat is outside freshness bounds, signature is invalid, or the signer key is not in the attested keys.

Throws
If JWT header or payload schema validation fails.

Throws
If JWT decoding fails.
- Defined in packages/oid4vci/src/credential-request/verify-credential-request-jwt-proof.ts:314

Function verifyCredentialRequestJwtProof

Parameters

Returns Promise<VerifyCredentialRequestJwtProofResultV1_0>

Throws

Throws

Throws

Parameters

Returns Promise<VerifyCredentialRequestJwtProofResultV1_3>

Throws

Throws

Throws

Parameters

Returns Promise<VerifyCredentialRequestJwtProofResult>

Throws

Throws

Throws

Settings