AltIdReplayGuard

Guards against replay of AltID mdocGeneratedNonce values (validation step 13).

A verifier calls registerIfFresh once per credential; a false return means the nonce has already been presented and the credential must be rejected.

Inheritors

Types

Link copied to clipboard

No-op guard that accepts every nonce. Useful for tests or stateless callers.

Link copied to clipboard

Process-wide in-memory guard. Suitable for a single verifier app instance.

Functions

Link copied to clipboard
abstract fun registerIfFresh(nonce: String): Boolean

Records nonce and returns true if it had not been seen before.