WalletPasses.Google.CallbackVerifier (wallet_passes v0.8.0)

Verifies Google Wallet callback envelopes per the ECv2SigningOnly protocol.

Pure-OTP implementation using :public_key and :crypto — no Tink dependency. Fetches Google's published root keys from https://pay.google.com/gp/m/issuer/keys (overridable via :wallet_passes, :google_keys_url) and caches them via WalletPasses.TokenCache. See Google Wallet.

Summary

Functions

verify(envelope, issuer_id)

Functions

verify(envelope, issuer_id)

@spec verify(map(), String.t()) :: {:ok, String.t()} | {:error, atom()}