oauth/io.github.kikin81.atproto.oauth/DpopSigner/Companion

Companion

object Companion

Functions

Link copied to clipboard
fun accessTokenHash(accessToken: String): String

Computes the ath (access token hash) claim value: base64url(SHA-256(access_token)). Same algorithm as PKCE S256.

Link copied to clipboard
fun fromExported(exported: DpopSigner.ExportedKeyPair): DpopSigner

Restores a DpopSigner from a previously exported keypair.

Link copied to clipboard
fun generate(): DpopSigner

Generates a fresh EC P-256 keypair for a new OAuth session. Call this once per login; persist the keypair via exportKeyPair.

Link copied to clipboard
fun jwkThumbprint(publicKey: ECPublicKey): String

Computes a JWK Thumbprint (RFC 7638) for the signer's public key. Used by the authorization server to bind the DPoP key to the access token. The thumbprint is SHA-256 of the canonical JWK representation with only the required members, sorted lexically.