IO Wallet SDK
    Preparing search index...

    Interface CreatePushedAuthorizationRequestOptionsV1_0

    interface CreatePushedAuthorizationRequestOptionsV1_0 {
        audience: string;
        authorization_details?: (
            | { credential_configuration_id: string; type: "openid_credential" }
            | {
                challenge_method: "mrtd+ias";
                challenge_redirect_uri: string;
                idphinting: string;
                type: "it_l2+document_proof";
            }
        )[];
        authorizationServerMetadata?: { require_signed_request_object?: boolean };
        callbacks: Pick<CallbackContext, "generateRandom" | "hash" | "signJwt">;
        clientId: string;
        codeChallengeMethodsSupported: string[];
        config: IoWalletSdkConfig<V1_0>;
        dpop?: RequestDpopOptions;
        expiresAt?: Date;
        issuedAt?: Date;
        issuerState?: string;
        jti?: string;
        pkceCodeVerifier?: string;
        redirectUri: string;
        responseMode: string;
        scope?: string;
        state?: string;
    }

    Hierarchy

    • BaseCreatePushedAuthorizationRequestOptions<ItWalletSpecsVersion.V1_0>
      • CreatePushedAuthorizationRequestOptionsV1_0
    Index

    Properties

    audience authorization_details? authorizationServerMetadata? callbacks clientId codeChallengeMethodsSupported config dpop? expiresAt? issuedAt? issuerState? jti? pkceCodeVerifier? redirectUri responseMode scope? state?

    Properties

    audience: string

    It MUST be set to the identifier of the Credential Issuer.

    authorization_details?: (
        | { credential_configuration_id: string; type: "openid_credential" }
        | {
            challenge_method: "mrtd+ias";
            challenge_redirect_uri: string;
            idphinting: string;
            type: "it_l2+document_proof";
        }
    )[]

    Allows clients to specify their fine-grained authorization requirements using the expressiveness of JSON data structures

    authorizationServerMetadata?: { require_signed_request_object?: boolean }

    Authorization Server metadata for conditional JAR signing. When require_signed_request_object is true, creates a signed JWT (JAR). When require_signed_request_object is false, creates an unsigned authorization request. Defaults to false (unsigned) if not provided.

    RFC 9101 Section 10.5

    callbacks: Pick<CallbackContext, "generateRandom" | "hash" | "signJwt">

    Callback context mostly for crypto related functionality

    clientId: string

    MUST be set to the thumbprint of the jwk value in the cnf parameter inside the Wallet Attestation.

    codeChallengeMethodsSupported: string[]
    config: IoWalletSdkConfig<V1_0>
    dpop?: RequestDpopOptions

    DPoP options. Required when require_signed_request_object is true (enforced at the type level via function overloads). Not used in the unsigned path and can be omitted.

    expiresAt?: Date

    Expiration time of the JWT. If not provided 1 hour will be added to the issuedAt

    issuedAt?: Date

    Creation time of the JWT. If not provided the current date will be used

    issuerState?: string

    Optional issuer state from the Credential Offer authorization_code grant. Serialized as issuer_state in the authorization request.

    jti?: string

    jti parameter to use for PAR. If not provided a value will generated automatically

    pkceCodeVerifier?: string

    Code verifier to use for pkce. If not provided a value will generated when pkce is supported

    redirectUri: string

    Redirect uri to include in the authorization request

    responseMode: string

    It MUST be one of the supported values (response_modes_supported) provided in the metadata of the Credential Issuer.

    scope?: string

    Scope to request for the authorization request

    state?: string

    state parameter to use for PAR. If not provided a value will generated automatically

    Settings

    Member Visibility

    On This Page

    Properties