Variable zMetadataResponseV1_3Const
zMetadataResponseV1_3: ZodObject<
{
authorization_server_federation_claims: ZodOptional<
ZodType<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: { excluded?: (...)[]; permitted?: (...)[] };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: string[];
kid: string;
kty: string;
use?: string;
x5c?: string[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_attestation_pop_signing_alg_values_supported: string[];
client_attestation_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
dpop_signing_alg_values_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object: true;
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance?: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: string;
display?: (...)[];
jwks: { keys: (...)[] };
nonce_endpoint?: string;
notification_endpoint?: string;
status_list_aggregation_endpoint?: string;
trust_frameworks_supported: ((...) | (...) | (...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: string[];
erasure_endpoint?: string;
jwks: { keys: (...)[] };
logo_uri: string;
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats_supported: z.ZodRecord<
z.ZodString,
z.ZodObject<(...), (...)>,
>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri: string;
signed_jwks_uri?: string;
wallet_metadata: {
authorization_endpoint: string;
client_id_prefixes_supported: (...)[];
credential_offer_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
response_modes_supported: (...)[];
response_types_supported: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
wallet_name: string;
[key: string]: unknown;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_attestation_pop_signing_alg_values_supported: string[];
client_attestation_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
dpop_signing_alg_values_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object: true;
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance?: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: string;
display?: (...)[];
jwks: { keys: (...)[] };
nonce_endpoint?: string;
notification_endpoint?: string;
status_list_aggregation_endpoint?: string;
trust_frameworks_supported: ((...) | (...) | (...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: string[];
erasure_endpoint?: string;
jwks: { keys: (...)[] };
logo_uri: string;
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats_supported: z.ZodRecord<
z.ZodString,
z.ZodObject<(...), (...)>,
>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri: string;
signed_jwks_uri?: string;
wallet_metadata: {
authorization_endpoint: string;
client_id_prefixes_supported: (...)[];
credential_offer_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
response_types_supported?: (...) | (...);
vp_formats_supported: z.ZodRecord<(...), (...)>;
wallet_name: string;
[key: string]: unknown;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object?: boolean;
response_modes_supported: ((...) | (...))[];
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance: { batch_size: number };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: { locale: ...; name: ... }[];
evidence_supported: string[];
jwks: { keys: (...)[] };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: ((...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: string;
jwks: { keys: (...)[] };
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats: z.ZodRecord<z.ZodString, z.ZodObject<(...), (...)>>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: { keys: ... };
jwks_uri?: string;
signed_jwks_uri?: string;
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
| Record<
string,
{
add?: ...;
default?: ...;
essential?: ...;
one_of?: ...;
subset_of?: ...;
superset_of?: ...;
value?: ...;
} & Record<(...), (...)>,
>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
sub: string;
},
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: { excluded?: (...)[]; permitted?: (...)[] };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: string[];
kid: string;
kty: string;
use?: string;
x5c?: string[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_attestation_pop_signing_alg_values_supported: string[];
client_attestation_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
dpop_signing_alg_values_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object: true;
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance?: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: string;
display?: (...)[];
jwks: { keys: (...)[] };
nonce_endpoint?: string;
notification_endpoint?: string;
status_list_aggregation_endpoint?: string;
trust_frameworks_supported: ((...) | (...) | (...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: string[];
erasure_endpoint?: string;
jwks: { keys: (...)[] };
logo_uri: string;
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats_supported: z.ZodRecord<
z.ZodString,
z.ZodObject<(...), (...)>,
>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri: string;
signed_jwks_uri?: string;
wallet_metadata: {
authorization_endpoint: string;
client_id_prefixes_supported: (...)[];
credential_offer_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
response_modes_supported: (...)[];
response_types_supported: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
wallet_name: string;
[key: string]: unknown;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_attestation_pop_signing_alg_values_supported: string[];
client_attestation_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
dpop_signing_alg_values_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object: true;
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance?: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: string;
display?: (...)[];
jwks: { keys: (...)[] };
nonce_endpoint?: string;
notification_endpoint?: string;
status_list_aggregation_endpoint?: string;
trust_frameworks_supported: ((...) | (...) | (...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: string[];
erasure_endpoint?: string;
jwks: { keys: (...)[] };
logo_uri: string;
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats_supported: z.ZodRecord<
z.ZodString,
z.ZodObject<(...), (...)>,
>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri: string;
signed_jwks_uri?: string;
wallet_metadata: {
authorization_endpoint: string;
client_id_prefixes_supported: (...)[];
credential_offer_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
response_types_supported?: (...) | (...);
vp_formats_supported: z.ZodRecord<(...), (...)>;
wallet_name: string;
[key: string]: unknown;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object?: boolean;
response_modes_supported: ((...) | (...))[];
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance: { batch_size: number };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: { locale: ...; name: ... }[];
evidence_supported: string[];
jwks: { keys: (...)[] };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: ((...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: string;
jwks: { keys: (...)[] };
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats: z.ZodRecord<z.ZodString, z.ZodObject<(...), (...)>>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: { keys: ... };
jwks_uri?: string;
signed_jwks_uri?: string;
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
| Record<
string,
{
add?: ...;
default?: ...;
essential?: ...;
one_of?: ...;
subset_of?: ...;
superset_of?: ...;
value?: ...;
} & Record<(...), (...)>,
>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
sub: string;
},
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
$ZodTypeInternals<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: {
excluded?: (...)
| (...);
permitted?: (...) | (...);
};
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: (...)[];
kid: string;
kty: string;
use?: string;
x5c?: (...)[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_modes_supported: ...;
response_types_supported: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_types_supported?: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object?: (...) | (...) | (...);
response_modes_supported: (...)[];
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: (...)[];
evidence_supported: (...)[];
jwks: { keys: ... };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: (...)
| (...);
jwks: { keys: ... };
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
Record<string, (...) & (...)>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: (...)[] }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: {
excluded?: (...)
| (...);
permitted?: (...) | (...);
};
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: (...)[];
kid: string;
kty: string;
use?: string;
x5c?: (...)[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_modes_supported: ...;
response_types_supported: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_types_supported?: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object?: (...) | (...) | (...);
response_modes_supported: (...)[];
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: (...)[];
evidence_supported: (...)[];
jwks: { keys: ... };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: (...)
| (...);
jwks: { keys: ... };
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
Record<string, (...) & (...)>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: (...)[] }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
>,
>,
>;
discoveredVia: ZodEnum<{ federation: "federation"; oid4vci: "oid4vci" }>;
metadata: ZodObject<
{
federation_entity: ZodOptional<
ZodObject<
{
contacts: ZodOptional<ZodArray<ZodString>>;
federation_fetch_endpoint: ZodOptional<ZodURL>;
federation_historical_keys_endpoint: ZodOptional<ZodURL>;
federation_list_endpoint: ZodOptional<ZodURL>;
federation_resolve_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_list_endpoint: ZodOptional<ZodURL>;
federation_trust_mark_status_endpoint: ZodOptional<ZodURL>;
homepage_uri: ZodOptional<ZodURL>;
jwks: ZodOptional<ZodObject<{ keys: ZodArray<(...)> }, $strip>>;
jwks_uri: ZodOptional<ZodURL>;
logo_uri: ZodOptional<ZodURL>;
organization_name: ZodOptional<ZodString>;
policy_uri: ZodOptional<ZodURL>;
signed_jwks_uri: ZodOptional<ZodURL>;
tos_uri: ZodOptional<ZodURL>;
},
$loose,
>,
>;
oauth_authorization_server: ZodOptional<
ZodObject<
{
acr_values_supported: ZodArray<ZodString>;
authorization_endpoint: ZodURL;
authorization_signing_alg_values_supported: ZodArray<ZodString>;
client_attestation_pop_signing_alg_values_supported: ZodArray<
ZodString,
>;
client_attestation_signing_alg_values_supported: ZodArray<ZodString>;
client_registration_types_supported: ZodArray<
ZodUnion<readonly [ZodLiteral<(...)>, ZodLiteral<(...)>]>,
>;
code_challenge_methods_supported: ZodArray<ZodString>;
dpop_signing_alg_values_supported: ZodArray<ZodString>;
grant_types_supported: ZodArray<ZodString>;
issuer: ZodURL;
jwks: ZodObject<{ keys: ZodArray<ZodObject<(...), (...)>> }, $strip>;
pushed_authorization_request_endpoint: ZodURL;
request_object_signing_alg_values_supported: ZodArray<ZodString>;
require_signed_request_object: ZodLiteral<true>;
response_types_supported: ZodArray<ZodString>;
scopes_supported: ZodArray<ZodString>;
token_endpoint: ZodURL;
token_endpoint_auth_methods_supported: ZodArray<ZodString>;
token_endpoint_auth_signing_alg_values_supported: ZodArray<ZodString>;
},
$loose,
>,
>;
openid_credential_issuer: ZodOptional<
ZodObject<
{
authorization_servers: ZodOptional<ZodTuple<[ZodURL], ZodURL>>;
batch_credential_issuance: ZodOptional<
ZodObject<{ batch_size: ZodNumber }, $strip>,
>;
credential_configurations_supported: ZodRecord<
ZodString,
ZodIntersection<
ZodDiscriminatedUnion<[(...), (...)], "format">,
ZodObject<
{
authentic_sources: ...;
credential_metadata: ...;
cryptographic_binding_methods_supported: ...;
proof_types_supported: ...;
schema_id: ...;
scope: ...;
},
$strip,
>,
>,
>;
credential_endpoint: ZodURL;
credential_issuer: ZodURL;
deferred_credential_endpoint: ZodOptional<ZodURL>;
display: ZodOptional<
ZodArray<
ZodObject<
{
background_color: ...;
background_image: ...;
description: ...;
locale: ...;
logo: ...;
name: ...;
watermark_image: ...;
},
$strip,
>,
>,
>;
jwks: ZodObject<{ keys: ZodArray<ZodObject<(...), (...)>> }, $strip>;
nonce_endpoint: ZodOptional<ZodURL>;
notification_endpoint: ZodOptional<ZodURL>;
status_list_aggregation_endpoint: ZodOptional<ZodURL>;
trust_frameworks_supported: ZodArray<
ZodUnion<
readonly [
ZodLiteral<(...)>,
ZodLiteral<(...)>,
ZodLiteral<(...)>,
ZodLiteral<(...)>,
ZodLiteral<(...)>,
],
>,
>;
},
$loose,
>,
>;
openid_credential_verifier: ZodOptional<
ZodObject<
{
application_type: ZodLiteral<"web">;
client_id: ZodURL;
client_name: ZodString;
encrypted_response_enc_values_supported: ZodArray<ZodString>;
erasure_endpoint: ZodOptional<ZodURL>;
jwks: ZodObject<{ keys: ZodArray<ZodObject<(...), (...)>> }, $strip>;
logo_uri: ZodURL;
redirect_uris: ZodOptional<ZodArray<ZodURL>>;
request_uris: ZodArray<ZodURL>;
response_uris: ZodArray<ZodURL>;
vp_formats_supported: ZodRecord<
ZodString,
ZodObject<
{
alg: ZodOptional<(...)>;
deviceauth_alg_values: ZodOptional<(...)>;
issuerauth_alg_values: ZodOptional<(...)>;
"kb-jwt_alg_values": ZodOptional<(...)>;
"sd-jwt_alg_values": ZodOptional<(...)>;
},
$strip,
>,
>;
},
$loose,
>,
>;
wallet_solution: ZodOptional<
ZodObject<
{
jwks: ZodOptional<ZodObject<{ keys: ZodArray<(...)> }, $strip>>;
jwks_uri: ZodOptional<ZodURL>;
logo_uri: ZodURL;
signed_jwks_uri: ZodOptional<ZodURL>;
wallet_metadata: ZodObject<
{
authorization_endpoint: ZodURL;
client_id_prefixes_supported: ZodArray<ZodEnum<(...)>>;
credential_offer_endpoint: ZodURL;
request_object_signing_alg_values_supported: ZodArray<ZodString>;
response_modes_supported: ZodArray<ZodLiteral<(...)>>;
response_types_supported: ZodArray<ZodString>;
vp_formats_supported: ZodRecord<ZodString, ZodObject<(...), (...)>>;
wallet_name: ZodString;
},
$loose,
>;
},
$loose,
>,
>;
},
$strict,
>;
openid_federation_claims: ZodOptional<
ZodType<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: { excluded?: (...)[]; permitted?: (...)[] };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: string[];
kid: string;
kty: string;
use?: string;
x5c?: string[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_attestation_pop_signing_alg_values_supported: string[];
client_attestation_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
dpop_signing_alg_values_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object: true;
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance?: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: string;
display?: (...)[];
jwks: { keys: (...)[] };
nonce_endpoint?: string;
notification_endpoint?: string;
status_list_aggregation_endpoint?: string;
trust_frameworks_supported: ((...) | (...) | (...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: string[];
erasure_endpoint?: string;
jwks: { keys: (...)[] };
logo_uri: string;
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats_supported: z.ZodRecord<
z.ZodString,
z.ZodObject<(...), (...)>,
>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri: string;
signed_jwks_uri?: string;
wallet_metadata: {
authorization_endpoint: string;
client_id_prefixes_supported: (...)[];
credential_offer_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
response_modes_supported: (...)[];
response_types_supported: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
wallet_name: string;
[key: string]: unknown;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_attestation_pop_signing_alg_values_supported: string[];
client_attestation_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
dpop_signing_alg_values_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object: true;
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance?: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: string;
display?: (...)[];
jwks: { keys: (...)[] };
nonce_endpoint?: string;
notification_endpoint?: string;
status_list_aggregation_endpoint?: string;
trust_frameworks_supported: ((...) | (...) | (...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: string[];
erasure_endpoint?: string;
jwks: { keys: (...)[] };
logo_uri: string;
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats_supported: z.ZodRecord<
z.ZodString,
z.ZodObject<(...), (...)>,
>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri: string;
signed_jwks_uri?: string;
wallet_metadata: {
authorization_endpoint: string;
client_id_prefixes_supported: (...)[];
credential_offer_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
response_types_supported?: (...) | (...);
vp_formats_supported: z.ZodRecord<(...), (...)>;
wallet_name: string;
[key: string]: unknown;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object?: boolean;
response_modes_supported: ((...) | (...))[];
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance: { batch_size: number };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: { locale: ...; name: ... }[];
evidence_supported: string[];
jwks: { keys: (...)[] };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: ((...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: string;
jwks: { keys: (...)[] };
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats: z.ZodRecord<z.ZodString, z.ZodObject<(...), (...)>>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: { keys: ... };
jwks_uri?: string;
signed_jwks_uri?: string;
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
| Record<
string,
{
add?: ...;
default?: ...;
essential?: ...;
one_of?: ...;
subset_of?: ...;
superset_of?: ...;
value?: ...;
} & Record<(...), (...)>,
>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
sub: string;
},
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: { excluded?: (...)[]; permitted?: (...)[] };
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: string[];
kid: string;
kty: string;
use?: string;
x5c?: string[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_attestation_pop_signing_alg_values_supported: string[];
client_attestation_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
dpop_signing_alg_values_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object: true;
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance?: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: string;
display?: (...)[];
jwks: { keys: (...)[] };
nonce_endpoint?: string;
notification_endpoint?: string;
status_list_aggregation_endpoint?: string;
trust_frameworks_supported: ((...) | (...) | (...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: string[];
erasure_endpoint?: string;
jwks: { keys: (...)[] };
logo_uri: string;
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats_supported: z.ZodRecord<
z.ZodString,
z.ZodObject<(...), (...)>,
>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri: string;
signed_jwks_uri?: string;
wallet_metadata: {
authorization_endpoint: string;
client_id_prefixes_supported: (...)[];
credential_offer_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
response_modes_supported: (...)[];
response_types_supported: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
wallet_name: string;
[key: string]: unknown;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_attestation_pop_signing_alg_values_supported: string[];
client_attestation_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
dpop_signing_alg_values_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object: true;
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance?: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: string;
display?: (...)[];
jwks: { keys: (...)[] };
nonce_endpoint?: string;
notification_endpoint?: string;
status_list_aggregation_endpoint?: string;
trust_frameworks_supported: ((...) | (...) | (...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: string[];
erasure_endpoint?: string;
jwks: { keys: (...)[] };
logo_uri: string;
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats_supported: z.ZodRecord<
z.ZodString,
z.ZodObject<(...), (...)>,
>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri: string;
signed_jwks_uri?: string;
wallet_metadata: {
authorization_endpoint: string;
client_id_prefixes_supported: (...)[];
credential_offer_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
response_types_supported?: (...) | (...);
vp_formats_supported: z.ZodRecord<(...), (...)>;
wallet_name: string;
[key: string]: unknown;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)[];
federation_fetch_endpoint?: string;
federation_historical_keys_endpoint?: string;
federation_list_endpoint?: string;
federation_resolve_endpoint?: string;
federation_trust_mark_endpoint?: string;
federation_trust_mark_list_endpoint?: string;
federation_trust_mark_status_endpoint?: string;
homepage_uri?: string;
jwks?: { keys: ... };
jwks_uri?: string;
logo_uri?: string;
organization_name?: string;
policy_uri?: string;
signed_jwks_uri?: string;
tos_uri?: string;
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: string[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: string[];
client_registration_types_supported: ((...) | (...))[];
code_challenge_methods_supported: string[];
grant_types_supported: string[];
issuer: string;
jwks: { keys: (...)[] };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: string[];
require_signed_request_object?: boolean;
response_modes_supported: ((...) | (...))[];
response_types_supported: string[];
scopes_supported: string[];
token_endpoint: string;
token_endpoint_auth_methods_supported: string[];
token_endpoint_auth_signing_alg_values_supported: string[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: [(...), ...(...)[]];
batch_credential_issuance: { batch_size: number };
credential_configurations_supported: z.ZodRecord<
z.ZodString,
z.ZodIntersection<(...), (...)>,
>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: { locale: ...; name: ... }[];
evidence_supported: string[];
jwks: { keys: (...)[] };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: ((...) | (...) | (...))[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: string;
jwks: { keys: (...)[] };
redirect_uris?: (...)[];
request_uris: string[];
response_uris: string[];
vp_formats: z.ZodRecord<z.ZodString, z.ZodObject<(...), (...)>>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: { keys: ... };
jwks_uri?: string;
signed_jwks_uri?: string;
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
| Record<
string,
{
add?: ...;
default?: ...;
essential?: ...;
one_of?: ...;
subset_of?: ...;
superset_of?: ...;
value?: ...;
} & Record<(...), (...)>,
>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{
jwks: {
keys: {
alg?: ...;
key_ops?: ...;
kid: ...;
kty: ...;
use?: ...;
x5c?: ...;
x5t?: ...;
"x5t#S256"?: ...;
x5u?: ...;
[key: ...]: ...;
}[];
};
sub: string;
},
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
$ZodTypeInternals<
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: {
excluded?: (...)
| (...);
permitted?: (...) | (...);
};
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: (...)[];
kid: string;
kty: string;
use?: string;
x5c?: (...)[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_modes_supported: ...;
response_types_supported: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_types_supported?: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object?: (...) | (...) | (...);
response_modes_supported: (...)[];
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: (...)[];
evidence_supported: (...)[];
jwks: { keys: ... };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: (...)
| (...);
jwks: { keys: ... };
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
Record<string, (...) & (...)>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: (...)[] }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
{
authority_hints?: string[];
constraints?: {
allowed_entity_types?: string[];
max_path_length?: number;
naming_constraints?: {
excluded?: (...)
| (...);
permitted?: (...) | (...);
};
};
crit?: string[];
exp: number;
iat: number;
iss: string;
jwks: {
keys: {
alg?: string;
key_ops?: (...)[];
kid: string;
kty: string;
use?: string;
x5c?: (...)[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
[key: string]: unknown;
}[];
};
metadata?: | {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_modes_supported: ...;
response_types_supported: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_attestation_pop_signing_alg_values_supported: (...)[];
client_attestation_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
dpop_signing_alg_values_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object: true;
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance?: (...) | (...);
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_issuer: string;
deferred_credential_endpoint?: (...) | (...);
display?: (...) | (...);
jwks: { keys: ... };
nonce_endpoint?: (...) | (...);
notification_endpoint?: (...) | (...);
status_list_aggregation_endpoint?: (...) | (...);
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
client_id: string;
client_name: string;
encrypted_response_enc_values_supported: (...)[];
erasure_endpoint?: (...) | (...);
jwks: { keys: ... };
logo_uri: string;
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats_supported: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_solution?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
logo_uri: string;
signed_jwks_uri?: (...) | (...);
wallet_metadata: {
authorization_endpoint: ...;
client_id_prefixes_supported: ...;
credential_offer_endpoint: ...;
request_object_signing_alg_values_supported: ...;
response_types_supported?: ...;
vp_formats_supported: ...;
wallet_name: ...;
[key: ...]: ...;
};
[key: string]: unknown;
};
}
| {
federation_entity?: {
contacts?: (...)
| (...);
federation_fetch_endpoint?: (...) | (...);
federation_historical_keys_endpoint?: (...) | (...);
federation_list_endpoint?: (...) | (...);
federation_resolve_endpoint?: (...) | (...);
federation_trust_mark_endpoint?: (...) | (...);
federation_trust_mark_list_endpoint?: (...) | (...);
federation_trust_mark_status_endpoint?: (...) | (...);
homepage_uri?: (...) | (...);
jwks?: (...) | (...);
jwks_uri?: (...) | (...);
logo_uri?: (...) | (...);
organization_name?: (...) | (...);
policy_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
tos_uri?: (...) | (...);
[key: string]: unknown;
};
oauth_authorization_server?: {
acr_values_supported: (...)[];
authorization_endpoint: string;
authorization_signing_alg_values_supported: (...)[];
client_registration_types_supported: (...)[];
code_challenge_methods_supported: (...)[];
grant_types_supported: (...)[];
issuer: string;
jwks: { keys: ... };
pushed_authorization_request_endpoint: string;
request_object_signing_alg_values_supported: (...)[];
require_signed_request_object?: (...) | (...) | (...);
response_modes_supported: (...)[];
response_types_supported: (...)[];
scopes_supported: (...)[];
token_endpoint: string;
token_endpoint_auth_methods_supported: (...)[];
token_endpoint_auth_signing_alg_values_supported: (...)[];
[key: string]: unknown;
};
openid_credential_issuer?: {
authorization_servers?: (...)
| (...);
batch_credential_issuance: { batch_size: ... };
credential_configurations_supported: z.ZodRecord<(...), (...)>;
credential_endpoint: string;
credential_hash_alg_supported: string;
credential_issuer: string;
deferred_credential_endpoint: string;
display: (...)[];
evidence_supported: (...)[];
jwks: { keys: ... };
nonce_endpoint: string;
notification_endpoint: string;
revocation_endpoint: string;
status_assertion_endpoint: string;
status_attestation_endpoint: string;
trust_frameworks_supported: (...)[];
[key: string]: unknown;
};
openid_credential_verifier?: {
application_type: "web";
authorization_encrypted_response_alg: string;
authorization_encrypted_response_enc: string;
authorization_signed_response_alg: string;
client_id: string;
client_name: string;
erasure_endpoint?: (...)
| (...);
jwks: { keys: ... };
redirect_uris?: (...) | (...);
request_uris: (...)[];
response_uris: (...)[];
vp_formats: z.ZodRecord<(...), (...)>;
[key: string]: unknown;
};
wallet_provider?: {
jwks?: (...)
| (...);
jwks_uri?: (...) | (...);
signed_jwks_uri?: (...) | (...);
[key: string]: unknown;
};
};
metadata_policy?: Record<
string,
Record<string, (...) & (...)>
| undefined,
>;
metadata_policy_crit?: string[];
source_endpoint?: string;
sub: string;
trust_mark_issuers?: Record<string, string[]>;
trust_mark_owners?: Record<
string,
{ jwks: { keys: (...)[] }; sub: string },
>;
trust_marks?: { trust_mark: string; trust_mark_type: string }[];
},
>,
>,
>;
},
$strip,
> = ...