OptionalclientThe client id of the wallet requesting the credential.
If provided, it will be matched against the iss claim.
SDK configuration that determines the IT-Wallet specification version. Controls which header schema is used and whether key attestation is verified.
The credential issuer identifier. Matched against the aud claim.
Expected nonce value (c_nonce) previously shared with the wallet
via the Nonce Endpoint.
OptionalfetchOptional callback used to fetch and evaluate key attestation revocation.
When omitted and itWalletSpecsVersion is v1.3, key attestation revocation
is not checked by this function.
The compact JWT proof to verify.
OptionalnonceDate at which the nonce expires. If the current time exceeds this value, verification fails before signature checking.
OptionalnowCurrent time override. If not provided, Date.now() is used.
Trusted key attestation issuers (wallet provider entity identifiers).
The key attestation iss claim must exactly match one of these values.
Callbacks required for JWT signature verification and JWK thumbprint hashing.