sessions/proof-of-possession API

Source-derived exports, parameter and result types, public methods and source links.

This reference is generated from the checked-out TypeScript exports. Types and signatures describe the package contract; source presence does not establish deployment or service availability. Error expressions below are direct throws, not an exhaustive list of failures from dependencies.

Source module. See the reference index for package import boundaries and verification scope.

createRequestBodyCommitment

Import from @trustlink/tsn-sdk or @trustlink/tsn-sdk/sessions/proof-of-possession. Implementation, line 44.

createRequestBodyCommitment(body: Uint8Array): Promise<string>

serializeSessionProof

Import from @trustlink/tsn-sdk or @trustlink/tsn-sdk/sessions/proof-of-possession. Implementation, line 26.

serializeSessionProof(claims: SessionProofClaims): Uint8Array

SessionProofClaims

Import from @trustlink/tsn-sdk or @trustlink/tsn-sdk/sessions/proof-of-possession. Implementation, line 6.

SessionProofClaims.protocolVersion

Source, line 7.

protocolVersion: "tsn-session-proof-v1"

SessionProofClaims.domain

Source, line 8.

domain: "TSN_PRIVATE_REQUEST_PROOF"

SessionProofClaims.sessionId

Source, line 9.

sessionId: string

SessionProofClaims.deviceId

Source, line 10.

deviceId: string

SessionProofClaims.deviceSigningKeyFingerprint

Source, line 11.

deviceSigningKeyFingerprint: string

SessionProofClaims.permission

Source, line 12.

permission: string

SessionProofClaims.method

Source, line 13.

method: string

SessionProofClaims.resource

Source, line 14.

resource: string

SessionProofClaims.bodyCommitment

Source, line 15.

bodyCommitment: string

SessionProofClaims.nonce

Source, line 16.

nonce: string

SessionProofClaims.issuedAt

Source, line 17.

issuedAt: string

SessionProofClaims.expiresAt

Source, line 18.

expiresAt: string

SessionProofClaims.audience

Source, line 19.

audience: string

SignedSessionProof

Import from @trustlink/tsn-sdk or @trustlink/tsn-sdk/sessions/proof-of-possession. Implementation, line 22.

SignedSessionProof.signatureBase64Url

Source, line 23.

signatureBase64Url: string

SignedSessionProof.protocolVersion

Source, line 7.

protocolVersion: "tsn-session-proof-v1"

SignedSessionProof.domain

Source, line 8.

domain: "TSN_PRIVATE_REQUEST_PROOF"

SignedSessionProof.sessionId

Source, line 9.

sessionId: string

SignedSessionProof.deviceId

Source, line 10.

deviceId: string

SignedSessionProof.deviceSigningKeyFingerprint

Source, line 11.

deviceSigningKeyFingerprint: string

SignedSessionProof.permission

Source, line 12.

permission: string

SignedSessionProof.method

Source, line 13.

method: string

SignedSessionProof.resource

Source, line 14.

resource: string

SignedSessionProof.bodyCommitment

Source, line 15.

bodyCommitment: string

SignedSessionProof.nonce

Source, line 16.

nonce: string

SignedSessionProof.issuedAt

Source, line 17.

issuedAt: string

SignedSessionProof.expiresAt

Source, line 18.

expiresAt: string

SignedSessionProof.audience

Source, line 19.

audience: string

signSessionProof

Import from @trustlink/tsn-sdk or @trustlink/tsn-sdk/sessions/proof-of-possession. Implementation, line 48.

signSessionProof(claims: SessionProofClaims, deviceSigningPrivateKey: CryptoKey): Promise<SignedSessionProof>

TSN_SESSION_PROOF_DOMAIN

Import from @trustlink/tsn-sdk or @trustlink/tsn-sdk/sessions/proof-of-possession. Implementation, line 4.

"TSN_PRIVATE_REQUEST_PROOF"

TSN_SESSION_PROOF_VERSION

Import from @trustlink/tsn-sdk or @trustlink/tsn-sdk/sessions/proof-of-possession. Implementation, line 3.

"tsn-session-proof-v1"

verifySessionProof

Import from @trustlink/tsn-sdk or @trustlink/tsn-sdk/sessions/proof-of-possession. Implementation, line 60.

verifySessionProof(params: { proof: SignedSessionProof; deviceSigningPublicKey: JsonWebKey; expectedSessionId: string; expectedDeviceId: string; expectedPermission: string; expectedMethod: string; expectedResource: string; expectedBodyCommitment: string; expectedAudience: string; sessionExpiresAt: string; deviceStatus: "active" | "revoked" | "expired"; now?: Date; consumeNonce: (nonce: string) => boolean; }): Promise<{ valid: true; } | { valid: false; reason: string; }>