validate
suspend fun validateChallenge(authEntries: List<SorobanAuthorizationEntryXdr>, clientAccountId: String, homeDomain: String? = null, clientDomainAccountId: String? = null)
Validates the authorization entries from the challenge response.
This performs the security validation checks required by SEP-45:
No sub-invocations in any entry
Contract address matches WEB_AUTH_CONTRACT_ID
Function name is "web_auth_verify"
Arguments validation (account, home_domain, web_auth_domain, nonce, etc.)
Server entry exists with valid signature
Client entry exists
Client domain entry exists (if client domain provided)
Parameters
auth
Entries to validate
client
Expected client contract account
home
Expected home domain. Defaults to server home domain.
client
Expected client domain account (if using client domain)
Throws
If any validation check fails