DpopPolicy

Access-token policy for OpenID4VCI issuance.

The SDK's issuance client always sends DPoP-bound tokens (RFC 9449, required by the HAIP profile). Some OID4VCI 1.0-compliant issuers only accept Bearer tokens and reject DPoP (typically with 401 access_token_missing).

Entries

Link copied to clipboard

Use DPoP when the issuer advertises it (dpop_signing_alg_values_supported in its /.well-known/oauth-authorization-server); otherwise downgrade to a Bearer token for that issuer only. ⚠️ While downgraded, a leaked access token is not sender-constrained: anyone who obtains it can redeem it. Switches back to DPoP automatically once the issuer advertises it.

Link copied to clipboard

HAIP-strict: never downgrade. Issuers without DPoP support fail with a clear ISSUANCE error.

Properties

Link copied to clipboard

Returns a representation of an immutable list of all enum entries, in the order they're declared.

Functions

Link copied to clipboard

Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)

Link copied to clipboard

Returns an array containing the constants of this enum type, in the order they're declared.