Variable zMetadataResponseConst
zMetadataResponse: ZodUnion<
readonly [
ZodObject<
{
discoveredVia: ZodEnum<{ federation: "federation" }>;
metadata: ZodObject<
{
federation_entity: ZodOptional<
ZodObject<
{
contacts: ZodOptional<ZodArray<(...)>>;
federation_fetch_endpoint: ZodOptional<ZodURL>;
federation_historical_keys_endpoint: ZodOptional<ZodURL>;
federation_list_endpoint: ZodOptional<ZodURL>;
federation_resolve_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_list_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_status_endpoint: ZodOptional<ZodURL>;
homepage_uri: ZodOptional<ZodURL>;
jwks: ZodOptional<ZodObject<(...), (...)>>;
jwks_uri: ZodOptional<ZodURL>;
logo_uri: ZodOptional<ZodURL>;
organization_name: ZodOptional<ZodString>;
policy_uri: ZodOptional<ZodURL>;
signed_jwks_uri: ZodOptional<ZodURL>;
tos_uri: ZodOptional<ZodURL>;
},
$loose,
>,
>;
oauth_authorization_server: ZodOptional<
ZodObject<
{
acr_values_supported: ZodArray<ZodString>;
authorization_endpoint: ZodURL;
authorization_signing_alg_values_supported: ZodArray<ZodString>;
client_registration_types_supported: ZodArray<ZodUnion<(...)>>;
code_challenge_methods_supported: ZodArray<ZodString>;
grant_types_supported: ZodArray<ZodString>;
issuer: ZodURL;
jwks: ZodObject<{ keys: ... }, $strip>;
pushed_authorization_request_endpoint: ZodURL;
request_object_signing_alg_values_supported: ZodArray<ZodString>;
require_signed_request_object: ZodOptional<ZodBoolean>;
response_modes_supported: ZodArray<ZodUnion<(...)>>;
response_types_supported: ZodArray<ZodString>;
scopes_supported: ZodArray<ZodString>;
token_endpoint: ZodURL;
token_endpoint_auth_methods_supported: ZodArray<ZodString>;
token_endpoint_auth_signing_alg_values_supported: ZodArray<
ZodString,
>;
},
$loose,
>,
>;
openid_credential_issuer: ZodOptional<
ZodObject<
{
authorization_servers: ZodOptional<ZodTuple<(...), (...)>>;
batch_credential_issuance: ZodObject<{ batch_size: ... }, $strip>;
credential_configurations_supported: ZodRecord<
ZodString,
ZodIntersection<(...), (...)>,
>;
credential_endpoint: ZodURL;
credential_hash_alg_supported: ZodString;
credential_issuer: ZodURL;
deferred_credential_endpoint: ZodURL;
display: ZodArray<ZodObject<(...), (...)>>;
evidence_supported: ZodArray<ZodString>;
jwks: ZodObject<{ keys: ... }, $strip>;
nonce_endpoint: ZodURL;
notification_endpoint: ZodURL;
revocation_endpoint: ZodURL;
status_assertion_endpoint: ZodURL;
status_attestation_endpoint: ZodURL;
trust_frameworks_supported: ZodArray<ZodUnion<(...)>>;
},
$loose,
>,
>;
openid_credential_verifier: ZodOptional<
ZodObject<
{
application_type: ZodLiteral<"web">;
authorization_encrypted_response_alg: ZodString;
authorization_encrypted_response_enc: ZodString;
authorization_signed_response_alg: ZodString;
client_id: ZodURL;
client_name: ZodString;
erasure_endpoint: ZodOptional<ZodURL>;
jwks: ZodObject<{ keys: ... }, $strip>;
redirect_uris: ZodOptional<ZodArray<(...)>>;
request_uris: ZodArray<ZodURL>;
response_uris: ZodArray<ZodURL>;
vp_formats: ZodRecord<ZodString, ZodObject<(...), (...)>>;
},
$loose,
>,
>;
wallet_provider: ZodOptional<
ZodObject<
{
jwks: ZodOptional<ZodObject<(...), (...)>>;
jwks_uri: ZodOptional<ZodURL>;
signed_jwks_uri: ZodOptional<ZodURL>;
},
$loose,
>,
>;
},
$strict,
>;
openid_federation_claims: ZodType<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: {
excluded?: (...)
| (...);
permitted?: (...) | (...);
};
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: (...)[];
kid: string;
kty: string;
use?: string;
x5c?: (...)[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_modes_supported: ...;
response_types_supported: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_types_supported?: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object?: (...) | (...) | (...);
response_modes_supported: (...)[];
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: (...)[];
evidence_supported: (...)[];
jwks: { keys: ... };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: (...)
| (...);
jwks: { keys: ... };
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
Record<string, (...) & (...)>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: (...)[] }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: {
excluded?: (...)
| (...);
permitted?: (...) | (...);
};
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: (...)[];
kid: string;
kty: string;
use?: string;
x5c?: (...)[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_modes_supported: ...;
response_types_supported: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_types_supported?: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object?: (...) | (...) | (...);
response_modes_supported: (...)[];
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: (...)[];
evidence_supported: (...)[];
jwks: { keys: ... };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: (...)
| (...);
jwks: { keys: ... };
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
Record<string, (...) & (...)>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: (...)[] }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
$ZodTypeInternals<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
>,
>;
},
$strip,
>,
ZodObject<
{
authorization_server_federation_claims: ZodOptional<
ZodType<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
$ZodTypeInternals<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)
| (...);
max_path_length?: (...) | (...);
naming_constraints?: (...) | (...);
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
metadata?: | {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_provider?: (...) | (...);
};
metadata_policy?: Record<string, (...) | (...)>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, (...)[]>;
trust_mark_owners?: Record<string, { jwks: ...; sub: ... }>;
trust_marks?: { trust_mark: ...; trust_mark_type: ... }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)
| (...);
max_path_length?: (...) | (...);
naming_constraints?: (...) | (...);
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
metadata?: | {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_provider?: (...) | (...);
};
metadata_policy?: Record<string, (...) | (...)>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, (...)[]>;
trust_mark_owners?: Record<string, { jwks: ...; sub: ... }>;
trust_marks?: { trust_mark: ...; trust_mark_type: ... }[];
},
>,
>,
>;
discoveredVia: ZodEnum<{ federation: "federation"; oid4vci: "oid4vci" }>;
metadata: ZodObject<
{
federation_entity: ZodOptional<
ZodObject<
{
contacts: ZodOptional<ZodArray<(...)>>;
federation_fetch_endpoint: ZodOptional<ZodURL>;
federation_historical_keys_endpoint: ZodOptional<ZodURL>;
federation_list_endpoint: ZodOptional<ZodURL>;
federation_resolve_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_list_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_status_endpoint: ZodOptional<ZodURL>;
homepage_uri: ZodOptional<ZodURL>;
jwks: ZodOptional<ZodObject<(...), (...)>>;
jwks_uri: ZodOptional<ZodURL>;
logo_uri: ZodOptional<ZodURL>;
organization_name: ZodOptional<ZodString>;
policy_uri: ZodOptional<ZodURL>;
signed_jwks_uri: ZodOptional<ZodURL>;
tos_uri: ZodOptional<ZodURL>;
},
$loose,
>,
>;
oauth_authorization_server: ZodOptional<
ZodObject<
{
acr_values_supported: ZodArray<ZodString>;
authorization_endpoint: ZodURL;
authorization_signing_alg_values_supported: ZodArray<ZodString>;
client_attestation_pop_signing_alg_values_supported: ZodArray<
ZodString,
>;
client_attestation_signing_alg_values_supported: ZodArray<
ZodString,
>;
client_registration_types_supported: ZodArray<ZodUnion<(...)>>;
code_challenge_methods_supported: ZodArray<ZodString>;
dpop_signing_alg_values_supported: ZodArray<ZodString>;
grant_types_supported: ZodArray<ZodString>;
issuer: ZodURL;
jwks: ZodObject<{ keys: ... }, $strip>;
pushed_authorization_request_endpoint: ZodURL;
request_object_signing_alg_values_supported: ZodArray<ZodString>;
require_signed_request_object: ZodLiteral<true>;
response_types_supported: ZodArray<ZodString>;
scopes_supported: ZodArray<ZodString>;
token_endpoint: ZodURL;
token_endpoint_auth_methods_supported: ZodArray<ZodString>;
token_endpoint_auth_signing_alg_values_supported: ZodArray<
ZodString,
>;
},
$loose,
>,
>;
openid_credential_issuer: ZodOptional<
ZodObject<
{
authorization_servers: ZodOptional<ZodTuple<(...), (...)>>;
batch_credential_issuance: ZodOptional<ZodObject<(...), (...)>>;
credential_configurations_supported: ZodRecord<
ZodString,
ZodIntersection<(...), (...)>,
>;
credential_endpoint: ZodURL;
credential_issuer: ZodURL;
deferred_credential_endpoint: ZodOptional<ZodURL>;
display: ZodOptional<ZodArray<(...)>>;
jwks: ZodObject<{ keys: ... }, $strip>;
nonce_endpoint: ZodOptional<ZodURL>;
notification_endpoint: ZodOptional<ZodURL>;
status_list_aggregation_endpoint: ZodOptional<ZodURL>;
trust_frameworks_supported: ZodArray<ZodUnion<(...)>>;
},
$loose,
>,
>;
openid_credential_verifier: ZodOptional<
ZodObject<
{
application_type: ZodLiteral<"web">;
client_id: ZodURL;
client_name: ZodString;
encrypted_response_enc_values_supported: ZodArray<ZodString>;
erasure_endpoint: ZodOptional<ZodURL>;
jwks: ZodObject<{ keys: ... }, $strip>;
logo_uri: ZodURL;
redirect_uris: ZodOptional<ZodArray<(...)>>;
request_uris: ZodArray<ZodURL>;
response_uris: ZodArray<ZodURL>;
vp_formats_supported: ZodRecord<ZodString, ZodObject<(...), (...)>>;
},
$loose,
>,
>;
wallet_solution: ZodOptional<
ZodObject<
{
jwks: ZodOptional<ZodObject<(...), (...)>>;
jwks_uri: ZodOptional<ZodURL>;
logo_uri: ZodURL;
signed_jwks_uri: ZodOptional<ZodURL>;
wallet_metadata: ZodObject<
{
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_modes_supported: ...;
response_types_supported: ...;
vp_formats_supported: ...;
wallet_name: ...;
},
$loose,
>;
},
$loose,
>,
>;
},
$strict,
>;
openid_federation_claims: ZodOptional<
ZodType<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
$ZodTypeInternals<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)
| (...);
max_path_length?: (...) | (...);
naming_constraints?: (...) | (...);
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
metadata?: | {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_provider?: (...) | (...);
};
metadata_policy?: Record<string, (...) | (...)>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, (...)[]>;
trust_mark_owners?: Record<string, { jwks: ...; sub: ... }>;
trust_marks?: { trust_mark: ...; trust_mark_type: ... }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)
| (...);
max_path_length?: (...) | (...);
naming_constraints?: (...) | (...);
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
metadata?: | {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_provider?: (...) | (...);
};
metadata_policy?: Record<string, (...) | (...)>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, (...)[]>;
trust_mark_owners?: Record<string, { jwks: ...; sub: ... }>;
trust_marks?: { trust_mark: ...; trust_mark_type: ... }[];
},
>,
>,
>;
},
$strip,
>,
ZodObject<
{
authorization_server_federation_claims: ZodOptional<
ZodType<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
$ZodTypeInternals<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)
| (...);
max_path_length?: (...) | (...);
naming_constraints?: (...) | (...);
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
metadata?: | {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_provider?: (...) | (...);
};
metadata_policy?: Record<string, (...) | (...)>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, (...)[]>;
trust_mark_owners?: Record<string, { jwks: ...; sub: ... }>;
trust_marks?: { trust_mark: ...; trust_mark_type: ... }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)
| (...);
max_path_length?: (...) | (...);
naming_constraints?: (...) | (...);
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
metadata?: | {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_provider?: (...) | (...);
};
metadata_policy?: Record<string, (...) | (...)>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, (...)[]>;
trust_mark_owners?: Record<string, { jwks: ...; sub: ... }>;
trust_marks?: { trust_mark: ...; trust_mark_type: ... }[];
},
>,
>,
>;
discoveredVia: ZodEnum<{ federation: "federation"; oid4vci: "oid4vci" }>;
metadata: ZodObject<
{
federation_entity: ZodOptional<
ZodObject<
{
contacts: ZodOptional<ZodArray<(...)>>;
federation_fetch_endpoint: ZodOptional<ZodURL>;
federation_historical_keys_endpoint: ZodOptional<ZodURL>;
federation_list_endpoint: ZodOptional<ZodURL>;
federation_resolve_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_list_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_status_endpoint: ZodOptional<ZodURL>;
homepage_uri: ZodOptional<ZodURL>;
jwks: ZodOptional<ZodObject<(...), (...)>>;
jwks_uri: ZodOptional<ZodURL>;
logo_uri: ZodOptional<ZodURL>;
organization_name: ZodOptional<ZodString>;
policy_uri: ZodOptional<ZodURL>;
signed_jwks_uri: ZodOptional<ZodURL>;
tos_uri: ZodOptional<ZodURL>;
},
$loose,
>,
>;
oauth_authorization_server: ZodOptional<
ZodObject<
{
acr_values_supported: ZodArray<ZodString>;
authorization_endpoint: ZodURL;
authorization_signing_alg_values_supported: ZodArray<ZodString>;
client_attestation_pop_signing_alg_values_supported: ZodArray<
ZodString,
>;
client_attestation_signing_alg_values_supported: ZodArray<
ZodString,
>;
client_registration_types_supported: ZodArray<ZodUnion<(...)>>;
code_challenge_methods_supported: ZodArray<ZodString>;
dpop_signing_alg_values_supported: ZodArray<ZodString>;
grant_types_supported: ZodArray<ZodString>;
issuer: ZodURL;
jwks: ZodObject<{ keys: ... }, $strip>;
pushed_authorization_request_endpoint: ZodURL;
request_object_signing_alg_values_supported: ZodArray<ZodString>;
require_signed_request_object: ZodLiteral<true>;
response_types_supported: ZodArray<ZodString>;
scopes_supported: ZodArray<ZodString>;
token_endpoint: ZodURL;
token_endpoint_auth_methods_supported: ZodArray<ZodString>;
token_endpoint_auth_signing_alg_values_supported: ZodArray<
ZodString,
>;
},
$loose,
>,
>;
openid_credential_issuer: ZodOptional<
ZodObject<
{
authorization_servers: ZodOptional<ZodTuple<(...), (...)>>;
batch_credential_issuance: ZodOptional<ZodObject<(...), (...)>>;
credential_configurations_supported: ZodRecord<
ZodString,
ZodIntersection<(...), (...)>,
>;
credential_endpoint: ZodURL;
credential_issuer: ZodURL;
deferred_credential_endpoint: ZodOptional<ZodURL>;
display: ZodOptional<ZodArray<(...)>>;
jwks: ZodObject<{ keys: ... }, $strip>;
nonce_endpoint: ZodOptional<ZodURL>;
notification_endpoint: ZodOptional<ZodURL>;
status_list_aggregation_endpoint: ZodOptional<ZodURL>;
trust_frameworks_supported: ZodArray<ZodUnion<(...)>>;
},
$loose,
>,
>;
openid_credential_verifier: ZodOptional<
ZodObject<
{
application_type: ZodLiteral<"web">;
client_id: ZodURL;
client_name: ZodString;
encrypted_response_enc_values_supported: ZodArray<ZodString>;
erasure_endpoint: ZodOptional<ZodURL>;
jwks: ZodObject<{ keys: ... }, $strip>;
logo_uri: ZodURL;
redirect_uris: ZodOptional<ZodArray<(...)>>;
request_uris: ZodArray<ZodURL>;
response_uris: ZodArray<ZodURL>;
vp_formats_supported: ZodRecord<ZodString, ZodObject<(...), (...)>>;
},
$loose,
>,
>;
wallet_solution: ZodOptional<
ZodObject<
{
jwks: ZodOptional<ZodObject<(...), (...)>>;
jwks_uri: ZodOptional<ZodURL>;
logo_uri: ZodURL;
signed_jwks_uri: ZodOptional<ZodURL>;
wallet_metadata: ZodObject<
{
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_types_supported: ...;
vp_formats_supported: ...;
wallet_name: ...;
},
$loose,
>;
},
$loose,
>,
>;
},
$strict,
>;
openid_federation_claims: ZodOptional<
ZodType<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)[];
max_path_length?: number;
naming_constraints?: { excluded?: ...; permitted?: ... };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: (...)
| (...);
key_ops?: (...) | (...);
kid: string;
kty: string;
use?: (...) | (...);
x5c?: (...) | (...);
x5t?: (...) | (...);
"x5t#S256"?: (...) | (...);
x5u?: (...) | (...);
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_attestation_pop_signing_alg_values_supported: ...;
client_attestation_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
dpop_signing_alg_values_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance?: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_issuer: ...;
deferred_credential_endpoint?: ...;
display?: ...;
jwks: ...;
nonce_endpoint?: ...;
notification_endpoint?: ...;
status_list_aggregation_endpoint?: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
client_id: ...;
client_name: ...;
encrypted_response_enc_values_supported: ...;
erasure_endpoint?: ...;
jwks: ...;
logo_uri: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats_supported: ...;
[key: ...]: ...;
};
wallet_solution?: {
jwks?: ...;
jwks_uri?: ...;
logo_uri: ...;
signed_jwks_uri?: ...;
wallet_metadata: ...;
[key: ...]: ...;
};
}
| {
federation_entity?: {
contacts?: ...;
federation_fetch_endpoint?: ...;
federation_historical_keys_endpoint?: ...;
federation_list_endpoint?: ...;
federation_resolve_endpoint?: ...;
federation_trust_mark_endpoint?: ...;
federation_trust_mark_list_endpoint?: ...;
federation_trust_mark_status_endpoint?: ...;
homepage_uri?: ...;
jwks?: ...;
jwks_uri?: ...;
logo_uri?: ...;
organization_name?: ...;
policy_uri?: ...;
signed_jwks_uri?: ...;
tos_uri?: ...;
[key: ...]: ...;
};
oauth_authorization_server?: {
acr_values_supported: ...;
authorization_endpoint: ...;
authorization_signing_alg_values_supported: ...;
client_registration_types_supported: ...;
code_challenge_methods_supported: ...;
grant_types_supported: ...;
issuer: ...;
jwks: ...;
pushed_authorization_request_endpoint: ...;
request_object_signing_alg_values_supported: ...;
require_signed_request_object?: ...;
response_modes_supported: ...;
response_types_supported: ...;
scopes_supported: ...;
token_endpoint: ...;
token_endpoint_auth_methods_supported: ...;
token_endpoint_auth_signing_alg_values_supported: ...;
[key: ...]: ...;
};
openid_credential_issuer?: {
authorization_servers?: ...;
batch_credential_issuance: ...;
credential_configurations_supported: ...;
credential_endpoint: ...;
credential_hash_alg_supported: ...;
credential_issuer: ...;
deferred_credential_endpoint: ...;
display: ...;
evidence_supported: ...;
jwks: ...;
nonce_endpoint: ...;
notification_endpoint: ...;
revocation_endpoint: ...;
status_assertion_endpoint: ...;
status_attestation_endpoint: ...;
trust_frameworks_supported: ...;
[key: ...]: ...;
};
openid_credential_verifier?: {
application_type: ...;
authorization_encrypted_response_alg: ...;
authorization_encrypted_response_enc: ...;
authorization_signed_response_alg: ...;
client_id: ...;
client_name: ...;
erasure_endpoint?: ...;
jwks: ...;
redirect_uris?: ...;
request_uris: ...;
response_uris: ...;
vp_formats: ...;
[key: ...]: ...;
};
wallet_provider?: {
jwks?: ...;
jwks_uri?: ...;
signed_jwks_uri?: ...;
[key: ...]: ...;
};
};
metadata_policy?: Record<string, Record<(...), (...)> | undefined>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: ... }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
$ZodTypeInternals<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)
| (...);
max_path_length?: (...) | (...);
naming_constraints?: (...) | (...);
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
metadata?: | {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_provider?: (...) | (...);
};
metadata_policy?: Record<string, (...) | (...)>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, (...)[]>;
trust_mark_owners?: Record<string, { jwks: ...; sub: ... }>;
trust_marks?: { trust_mark: ...; trust_mark_type: ... }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: (...)
| (...);
max_path_length?: (...) | (...);
naming_constraints?: (...) | (...);
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
metadata?: | {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_solution?: (...) | (...);
}
| {
federation_entity?: (...)
| (...);
oauth_authorization_server?: (...) | (...);
openid_credential_issuer?: (...) | (...);
openid_credential_verifier?: (...) | (...);
wallet_provider?: (...) | (...);
};
metadata_policy?: Record<string, (...) | (...)>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, (...)[]>;
trust_mark_owners?: Record<string, { jwks: ...; sub: ... }>;
trust_marks?: { trust_mark: ...; trust_mark_type: ... }[];
},
>,
>,
>;
},
$strip,
>,
],
> = ...