CallbackSignatureVerifier

constructor(signingKey: String, registeredCallbackUrl: String, freshnessSeconds: Long = DEFAULT_FRESHNESS_SECONDS, clock: Clock = Clock.System)

Constructs a verifier for callbacks delivered to registeredCallbackUrl.

Parameters

signingKey

The anchor's SIGNING_KEY from its stellar.toml (G... Ed25519 address).

registeredCallbackUrl

The HTTPS URL that the consumer previously registered with the anchor as the callback destination. The verifier derives the canonical host from this URL (port stripped). HTTP is allowed only when the host is a loopback authority.

freshnessSeconds

Maximum tolerated |now - signedTimestamp| in seconds. Must be in 1..600. Defaults to 120 to match the SEP-31 specification recommendation. Values above 120 deviate from the spec and should only be used to absorb test-environment clock skew.

clock

Clock used to read the current time. Defaults to Clock.System. Tests can inject a fixed-time clock to verify freshness boundaries deterministically.

Throws

if signingKey is malformed, registeredCallbackUrl is malformed or uses an unsupported scheme, or freshnessSeconds is out of range.