IO Wallet SDK
    Preparing search index...

    Interface VerifyAccessTokenRequestDpop

    interface VerifyAccessTokenRequestDpop {
        allowedSigningAlgs?: string[];
        expectedNonce?: string;
        jwt: string;
    }
    Index

    Properties

    allowedSigningAlgs? expectedNonce? jwt

    Properties

    allowedSigningAlgs?: string[]

    Allowed dpop signing alg values. If not provided any alg values are allowed and it's up to the verifyJwtCallback to handle the alg.

    expectedNonce?: string

    The expected DPoP nonce value that must appear in the nonce claim of the DPoP proof JWT.

    AS implementations SHOULD issue server-provided nonces (via the DPoP-Nonce response header) and pass the expected value here to prevent pre-generated DPoP proofs from being reused across requests within the iat window.

    See RFC 9449 §8 for the full nonce issuance flow.

    jwt: string

    The dpop jwt from the access token request

    Settings

    Member Visibility

    On This Page

    Properties