sessions/server/private-request-verifier API

Source-derived exports, parameter and result types, public methods and source links.

This reference is generated from the checked-out TypeScript exports. Types and signatures describe the package contract; source presence does not establish deployment or service availability. Error expressions below are direct throws, not an exhaustive list of failures from dependencies.

Source module. See the reference index for package import boundaries and verification scope.

TsnAuthorizedDeviceVerificationRecord

Import from @trustlink/tsn-sdk/sessions/server. Implementation, line 10.

TsnAuthorizedDeviceVerificationRecord.deviceId

Source, line 11.

deviceId: string

TsnAuthorizedDeviceVerificationRecord.tinCommitment

Source, line 12.

tinCommitment: string

TsnAuthorizedDeviceVerificationRecord.signingKeyFingerprint

Source, line 13.

signingKeyFingerprint: string

TsnAuthorizedDeviceVerificationRecord.signingPublicKey

Source, line 14.

signingPublicKey: JsonWebKey

TsnAuthorizedDeviceVerificationRecord.encryptionKeyFingerprint

Source, line 15.

encryptionKeyFingerprint: string

TsnAuthorizedDeviceVerificationRecord.permissions

Source, line 16.

permissions: string[]

TsnAuthorizedDeviceVerificationRecord.status

Source, line 17.

status: "expired" | "revoked" | "active"

TsnPrivateSessionVerificationRecord

Import from @trustlink/tsn-sdk/sessions/server. Implementation, line 20.

TsnPrivateSessionVerificationRecord.sessionId

Source, line 21.

sessionId: string

TsnPrivateSessionVerificationRecord.tinCommitment

Source, line 22.

tinCommitment: string

TsnPrivateSessionVerificationRecord.deviceId

Source, line 23.

deviceId: string

TsnPrivateSessionVerificationRecord.permissions

Source, line 24.

permissions: string[]

TsnPrivateSessionVerificationRecord.audience

Source, line 25.

audience: string

TsnPrivateSessionVerificationRecord.expiresAt

Source, line 26.

expiresAt: string

TsnPrivateSessionVerificationRecord.status

Source, line 27.

status: "expired" | "revoked" | "active"

verifyTsnAuthorizedPrivateRequest

Import from @trustlink/tsn-sdk/sessions/server. Implementation, line 111.

verifyTsnAuthorizedPrivateRequest(params: { sessionToken: string; proof: SignedSessionProof; permission: string; method: string; resource: string; bodyCommitment: string; expectedAudience: string; findSessionByToken: (token: string) => Promise<TsnPrivateSessionVerificationRecord | null>; findDevice: (deviceId: string) => Promise<TsnAuthorizedDeviceVerificationRecord | null>; consumeNonce: (params: { nonce: string; deviceId: string; sessionId: string; purpose: string; expiresAt: string; }) => Promise<boolean>; }): Promise<{ session: TsnPrivateSessionVerificationRecord; device: TsnAuthorizedDeviceVerificationRecord; }>

Direct failure expressions:

new Error("Private session is invalid or expired")
new Error("Private session audience mismatch")
new Error("Private session permission denied")
new Error("Authorized device was not found")
new Error("Authorized device permission denied")
new Error("Private session TIN binding mismatch")
new Error("Private request uses an unregistered signing key")
new Error(`Private request rejected: ${verification.reason}`)
new Error("Private request nonce has already been consumed")

verifyTsnPrivateSessionCreation

Import from @trustlink/tsn-sdk/sessions/server. Implementation, line 30.

verifyTsnPrivateSessionCreation(params: { request: PrivateSessionCreationRequest; proof: SignedSessionProof; device: TsnAuthorizedDeviceVerificationRecord; expectedAudience: string; expectedResource: string; maxTtlMs?: number; now?: Date; consumeNonce: (params: { nonce: string; deviceId: string; sessionId: string; purpose: string; expiresAt: string; }) => Promise<boolean>; }): Promise<{ permissions: string[]; }>

Direct failure expressions:

new Error("Authorized device is not active")
new Error("Device is not permitted to create private sessions")
new Error("Private session device mismatch")
new Error("Private session audience mismatch")
new Error("Private session proof uses an unregistered signing key")
new Error("Private session requests a permission not granted to this device")
new Error("Private session timing is invalid")
new Error(`Private session rejected: ${verification.reason}`)
new Error("Private session proof nonce has already been consumed")