SigningIdentity

@Serializable
data class SigningIdentity(val id: String, val keyId: String, val did: String, val publicJwk: String, val storage: SigningIdentityKeyStorage, val authorization: KeyUseAuthorizationPolicy, val keyFacts: PlatformKeyFacts, val recovery: SigningIdentityRecoveryState = SigningIdentityRecoveryState.Disabled, val custody: List<IdentityCustodyReference> = emptyList())

Public identity details. Never contains a seed, private key or database encryption key.

Constructors

Link copied to clipboard
constructor(id: String, keyId: String, did: String, publicJwk: String, storage: SigningIdentityKeyStorage, authorization: KeyUseAuthorizationPolicy, keyFacts: PlatformKeyFacts, recovery: SigningIdentityRecoveryState = SigningIdentityRecoveryState.Disabled, custody: List<IdentityCustodyReference> = emptyList())

Properties

Link copied to clipboard
val authorization: KeyUseAuthorizationPolicy

Private-key use policy, separate from app authentication.

Link copied to clipboard

Additional private-key custodians, independent of recovery.

Link copied to clipboard
val did: String

Exact DID bound to this signing key.

Link copied to clipboard
val id: String

Stable identity identifier, preserved across recovery.

Link copied to clipboard
val keyFacts: PlatformKeyFacts

Observed native origin, protection and evidence.

Link copied to clipboard

Logical signing-key identifier, independent of the installation's native alias.

Link copied to clipboard

Public P-256 JWK, without private material.

Link copied to clipboard

Latest known backup or restoration state.

Link copied to clipboard

Configured signing backend; hardware claims are in keyFacts.