E11 from PASSporT 200 437 “typ” header is not “passport” credential E12 from PASSporT 200 437 “alg” header is not “ES256” credential E13 from PASSporT 200 438 Invalid “ppt” header is not Identity “shaken” Header E14 200 438 Invalid Identity Header from in PASSporT 200 403 Stale Date E15 “iat” payload is not “fresh” E16 200 438 Invalid Identity Header E17 Failed to authenticate CA 400 437 credential Signature validation failed 200 438 Invalid E18 Identity Header E19 Missing SHAKEN 200 438 Invalid extension claim in Identity “attest” the decrypted PASSporT Header E20 Missing SHAKEN 200 438 Invalid extension in Identity Failed “origid” the decrypted PASSporT Header E21 200 438 Invalid Identity Failed Header E22 claim from decrypted 200 438 Invalid “iat” payload doesn’t match the Identity from PASSporT Header “iat” payload. E23 Successful verification 200 - - Response Sample (Success + Successful Validation) HTTP/1.1 200 Ok X-RequestID: AA97B177-9383-4934-8543-0F91A7A02836 Content-Type : application/json Content-Length : … { "verificationResponse": {
E11 “typ” from PASSporT header is not “passport” 200 437 credential E12 “alg” from PASSporT header is not “ES256” 200 437 credential E13 “ppt” from PASSporT header is not “shaken” 200 438 Invalid Identity Header E14 200 438 Invalid Identity Header E15 “iat” from in PASSporT payload is not “fresh” 200 403 Stale Date E16 200 438 Invalid Identity Header E17 Failed to authenticate CA 400 437 credential E18 Signature validation failed 200 438 Invalid Identity Header E19 Missing SHAKEN extension “attest” claim in the decrypted PASSporT 200 438 Invalid Identity Header E20 Missing SHAKEN extension “origid” in the decrypted PASSporT 200 438 Invalid Identity Header E21 200 438 Invalid Identity Header E22 “iat” claim from decrypted payload doesn’t match the “iat” from PASSporT payload. 200 438 Invalid Identity Header E23 Successful verification 200 - - Response Sample (Success + Successful Validation) HTTP/1.1 200 Ok X-RequestID: AA97B177-9383-4934-8543-0F91A7A02836 Content-Type : application/json Content-Length : … { "verificationResponse": { Failed Failed
IPNNI-2017-00054R001.docx