PomVerifyOptions

@mandaitor/sdk

---

@mandaitor/sdk / PomVerifyOptions

Interface: PomVerifyOptions

Defined in: @mandaitor/sdk/dist/pom-verifier.d.ts:47

Options for verifyProofOfMandate: audience, clock skew, issuer allowlist, and a custom DID resolver.

Properties

allowedIssuers?

optional allowedIssuers?: string[]

Defined in: @mandaitor/sdk/dist/pom-verifier.d.ts:63

Optional allowlist of acceptable issuer DIDs/URLs. When provided, the credential's iss must be an EXACT member or the PoM is rejected before any DID resolution (defence against SSRF / issuer spoofing). When omitted, any syntactically-valid issuer is accepted (subject to the DID-resolution SSRF checks below).

---

audience?

optional audience?: string

Defined in: @mandaitor/sdk/dist/pom-verifier.d.ts:49

Expected audience claim (optional)

---

clockSkewSeconds?

optional clockSkewSeconds?: number

Defined in: @mandaitor/sdk/dist/pom-verifier.d.ts:51

Clock skew tolerance in seconds (default: 60)

---

currentTime?

optional currentTime?: number

Defined in: @mandaitor/sdk/dist/pom-verifier.d.ts:55

Current time override for testing (Unix seconds)

---

didResolver?

optional didResolver?: (did) => Promise<DidDocument | null>

Defined in: @mandaitor/sdk/dist/pom-verifier.d.ts:53

Custom DID document resolver (overrides default HTTP resolution)

Parameters

did

string

Returns

Promise<DidDocument | null>