waltid-openid4vc-wallet-persistence-mobile/id.walt.wallet2.persistence.keys/AndroidPlatformKeyProvider

AndroidPlatformKeyProvider

class AndroidPlatformKeyProvider(context: Context, interactionContextProvider: () -> FragmentActivity? = { null }) : PlatformManagedKeyProvider

Managed-key provider backed by Android KeyStore.

Protected Signum operations resolve a current resumed FragmentActivity through interactionContextProvider at operation time; the provider does not retain an activity.

Constructors

constructor(context: Context, interactionContextProvider: () -> FragmentActivity? = { null })

Functions

deleteManagedKey

open suspend override fun deleteManagedKey(stored: StoredKey.Managed)

Deletes a platform key using its descriptor without restoring the alias first.

deleteUncommittedKey

open suspend override fun deleteUncommittedKey(request: WalletKeyCreationRequest, imported: Boolean)

Cleans up an alias reserved by an interrupted, uncommitted identity operation.

generateManagedKey

open suspend override fun generateManagedKey(request: WalletKeyCreationRequest): ManagedKey

Generates a managed key in the platform key store.

importManagedKey

open suspend override fun importManagedKey(request: WalletKeyCreationRequest, material: EncodedKey.Jwk): ManagedKey

Imports private material into native storage. Implementations must verify the public key.

keyFacts

open suspend override fun keyFacts(stored: StoredKey.Managed): PlatformKeyFacts

Inspects actual key origin and protection without claiming certification.

keyUseAuthorizationPolicy

open override fun keyUseAuthorizationPolicy(stored: StoredKey.Managed): KeyUseAuthorizationPolicy

Reads the immutable wallet authorization policy encoded in a managed-key descriptor.

preflight

open suspend override fun preflight(requirements: WalletKeyRequirements): KeyUseAuthorizationSupport

Checks whether the requested requirements are supported without fallback.

restoreManagedKey

open suspend override fun restoreManagedKey(stored: StoredKey.Managed): PlatformManagedKeyRestoration

Restores a platform key from its persisted descriptor.

supportsPrivateKeyImport

open override fun supportsPrivateKeyImport(requirements: WalletKeyRequirements): Boolean

Whether this native backend supports importing a private key with these requirements.