walletsdk/com.dewa.walletsdk/WalletSdkOptions

WalletSdkOptions

data class WalletSdkOptions(val issuerUrl: String, val clientId: String, val verifiers: List<ClientConfig> = emptyList(), val dbFileName: String = "main.db", val secureAreaIdentifier: String = AndroidKeystoreSecureArea.IDENTIFIER, val useStrongBoxForKeys: Boolean = true, val userAuthenticationRequired: Boolean = false, val userAuthenticationTimeoutMillis: Duration = 30000.milliseconds, val trustedTypeMetadataRegistries: List<String> = emptyList(), val trustedVPScheme: String, val authFlowRedirectionUri: String = "openid-credential-offer", val requirePar: Boolean = false, val transactionLogger: WalletTransactionLogger? = null, val expectedSigningSha256: Set<String> = emptySet())

Configuration options for bootstrapping the EUDI wallet and document manager.

The hosting app decides:

which issuer / client ID to use (issuerUrl, clientId),
which verifiers are preregistered (verifiers),
how the local DB is named (dbFileName),
how keys are created in Android Keystore (useStrongBoxForKeys, userAuthenticationRequired, userAuthenticationTimeoutMillis).

This keeps "environments" (staging/prod/etc.) as an app-level concern.

Constructors

WalletSdkOptions

constructor(issuerUrl: String, clientId: String, verifiers: List<ClientConfig> = emptyList(), dbFileName: String = "main.db", secureAreaIdentifier: String = AndroidKeystoreSecureArea.IDENTIFIER, useStrongBoxForKeys: Boolean = true, userAuthenticationRequired: Boolean = false, userAuthenticationTimeoutMillis: Duration = 30000.milliseconds, trustedTypeMetadataRegistries: List<String> = emptyList(), trustedVPScheme: String, authFlowRedirectionUri: String = "openid-credential-offer", requirePar: Boolean = false, transactionLogger: WalletTransactionLogger? = null, expectedSigningSha256: Set<String> = emptySet())

Properties

authFlowRedirectionUri

val authFlowRedirectionUri: String

OpenID4VCI authorization-code redirect URI.

clientId

val clientId: String

OAuth2/OpenID client_id used for issuance.

dbFileName

val dbFileName: String

Name of the file where the wallet DB will be stored, under context.noBackupFilesDir.

expectedSigningSha256

val expectedSigningSha256: Set<String>

Allow-list of expected app signing-certificate SHA-256 hashes (:/space-separated and case-insensitive accepted). Used by the device-integrity capture (gated by a verifier's transaction_data) to evaluate the repackaging signal. When empty (the default), repackaging is reported as INCONCLUSIVE and only the observed signing hashes are surfaced for out-of-band comparison by the backend/PSP.

issuerUrl

val issuerUrl: String

Issuer URL for OpenID4VCI (e.g. https://eboks.add-id.eu).

requirePar

val requirePar: Boolean

Whether Pushed Authorization Requests (PAR) are mandatory for issuance.

secureAreaIdentifier

val secureAreaIdentifier: String

Secure area implementation identifier used for document keys.

transactionLogger

val transactionLogger: WalletTransactionLogger?

Optional sink for wallet transaction events (issuance, presentation, signing, deletion).