MobileWalletReaderTrust

sealed interface MobileWalletReaderTrust

Reader authentication state. Only MobileWalletReaderTrust.Trusted means a reader was identified, and reaching it requires both a valid signature and an accepting application trust policy.

A request whose reader authentication fails cryptographic verification is rejected and produces no state at all, so every state here describes a still-processable request.

Inheritors

Types

Link copied to clipboard

The protocol carries no reader authentication, as with the OpenID4VP Digital Credentials API.

Link copied to clipboard

The request supports reader authentication but carried none, so the reader is anonymous.

Link copied to clipboard

Reader authentication has not been checked yet because the platform withholds the raw request until the user consents.

Link copied to clipboard
data class Trusted(val certificateSubject: String) : MobileWalletReaderTrustDecision

Reader authentication is cryptographically valid and an application trust policy accepted it.

Link copied to clipboard

The reader's signature is cryptographically valid, but no application trust policy accepts it.