openid4vp 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (119) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +39 -0
  3. data/LICENSE.txt +21 -0
  4. data/README.md +278 -0
  5. data/lib/openid4vp/authorization_request/validator.rb +177 -0
  6. data/lib/openid4vp/authorization_request.rb +302 -0
  7. data/lib/openid4vp/authorization_response.rb +151 -0
  8. data/lib/openid4vp/client_id.rb +90 -0
  9. data/lib/openid4vp/credential.rb +51 -0
  10. data/lib/openid4vp/dc_api.rb +116 -0
  11. data/lib/openid4vp/dcql/claims_path_pointer.rb +109 -0
  12. data/lib/openid4vp/dcql/claims_query.rb +76 -0
  13. data/lib/openid4vp/dcql/credential_query.rb +178 -0
  14. data/lib/openid4vp/dcql/credential_set_query.rb +49 -0
  15. data/lib/openid4vp/dcql/evaluator.rb +228 -0
  16. data/lib/openid4vp/dcql/matcher.rb +79 -0
  17. data/lib/openid4vp/dcql/meta.rb +99 -0
  18. data/lib/openid4vp/dcql/query.rb +93 -0
  19. data/lib/openid4vp/dcql/selection.rb +45 -0
  20. data/lib/openid4vp/dcql/trusted_authorities_query.rb +48 -0
  21. data/lib/openid4vp/dcql.rb +10 -0
  22. data/lib/openid4vp/encoded_response.rb +10 -0
  23. data/lib/openid4vp/error_response.rb +82 -0
  24. data/lib/openid4vp/errors.rb +73 -0
  25. data/lib/openid4vp/formats/base.rb +74 -0
  26. data/lib/openid4vp/formats/context.rb +56 -0
  27. data/lib/openid4vp/formats/jwt_vc_json.rb +274 -0
  28. data/lib/openid4vp/formats/ldp_vc.rb +160 -0
  29. data/lib/openid4vp/formats/mso_mdoc.rb +204 -0
  30. data/lib/openid4vp/formats/registry.rb +53 -0
  31. data/lib/openid4vp/formats/sd_jwt_vc.rb +132 -0
  32. data/lib/openid4vp/formats/verified_presentation.rb +45 -0
  33. data/lib/openid4vp/formats.rb +12 -0
  34. data/lib/openid4vp/jose/algorithms.rb +46 -0
  35. data/lib/openid4vp/jose/jwe.rb +184 -0
  36. data/lib/openid4vp/jose/jwk.rb +253 -0
  37. data/lib/openid4vp/jose/jwk_set.rb +57 -0
  38. data/lib/openid4vp/jose/jws.rb +225 -0
  39. data/lib/openid4vp/jose.rb +8 -0
  40. data/lib/openid4vp/mdoc/builder.rb +132 -0
  41. data/lib/openid4vp/mdoc/cbor_values.rb +32 -0
  42. data/lib/openid4vp/mdoc/cose_key.rb +71 -0
  43. data/lib/openid4vp/mdoc/device_authentication.rb +32 -0
  44. data/lib/openid4vp/mdoc/device_response.rb +77 -0
  45. data/lib/openid4vp/mdoc/device_signed.rb +111 -0
  46. data/lib/openid4vp/mdoc/document.rb +44 -0
  47. data/lib/openid4vp/mdoc/handover.rb +51 -0
  48. data/lib/openid4vp/mdoc/issuer_signed.rb +157 -0
  49. data/lib/openid4vp/mdoc/mso.rb +133 -0
  50. data/lib/openid4vp/mdoc/session_transcript.rb +49 -0
  51. data/lib/openid4vp/mdoc/sign1_decoder.rb +60 -0
  52. data/lib/openid4vp/mdoc/verifier.rb +169 -0
  53. data/lib/openid4vp/mdoc.rb +9 -0
  54. data/lib/openid4vp/metadata/verifier_metadata.rb +109 -0
  55. data/lib/openid4vp/metadata/vp_formats.rb +112 -0
  56. data/lib/openid4vp/metadata/wallet_metadata.rb +139 -0
  57. data/lib/openid4vp/metadata.rb +10 -0
  58. data/lib/openid4vp/request_object.rb +152 -0
  59. data/lib/openid4vp/request_verification/base.rb +63 -0
  60. data/lib/openid4vp/request_verification/config.rb +65 -0
  61. data/lib/openid4vp/request_verification/decentralized_identifier.rb +56 -0
  62. data/lib/openid4vp/request_verification/openid_federation.rb +52 -0
  63. data/lib/openid4vp/request_verification/pre_registered.rb +54 -0
  64. data/lib/openid4vp/request_verification/redirect_uri.rb +29 -0
  65. data/lib/openid4vp/request_verification/resolver.rb +76 -0
  66. data/lib/openid4vp/request_verification/verified_request.rb +12 -0
  67. data/lib/openid4vp/request_verification/verifier_attestation.rb +54 -0
  68. data/lib/openid4vp/request_verification/x509_hash.rb +40 -0
  69. data/lib/openid4vp/request_verification/x509_san_dns.rb +60 -0
  70. data/lib/openid4vp/request_verification.rb +10 -0
  71. data/lib/openid4vp/response_encryption.rb +51 -0
  72. data/lib/openid4vp/response_endpoint_result.rb +33 -0
  73. data/lib/openid4vp/response_mode.rb +44 -0
  74. data/lib/openid4vp/response_type.rb +7 -0
  75. data/lib/openid4vp/sd_jwt/digest.rb +30 -0
  76. data/lib/openid4vp/sd_jwt/disclosure.rb +104 -0
  77. data/lib/openid4vp/sd_jwt/issuer.rb +132 -0
  78. data/lib/openid4vp/sd_jwt/kb_jwt.rb +82 -0
  79. data/lib/openid4vp/sd_jwt/parser.rb +48 -0
  80. data/lib/openid4vp/sd_jwt/presentation.rb +333 -0
  81. data/lib/openid4vp/sd_jwt/reconstruct.rb +132 -0
  82. data/lib/openid4vp/sd_jwt.rb +10 -0
  83. data/lib/openid4vp/transaction_data/registry.rb +42 -0
  84. data/lib/openid4vp/transaction_data/sd_jwt_hashes.rb +124 -0
  85. data/lib/openid4vp/transaction_data.rb +138 -0
  86. data/lib/openid4vp/util/base64url.rb +44 -0
  87. data/lib/openid4vp/util/form.rb +24 -0
  88. data/lib/openid4vp/util/random.rb +29 -0
  89. data/lib/openid4vp/util/uri.rb +48 -0
  90. data/lib/openid4vp/util.rb +23 -0
  91. data/lib/openid4vp/verifier/config.rb +216 -0
  92. data/lib/openid4vp/verifier/created_request.rb +25 -0
  93. data/lib/openid4vp/verifier/http_result.rb +34 -0
  94. data/lib/openid4vp/verifier/memory_session_store.rb +102 -0
  95. data/lib/openid4vp/verifier/request_builder.rb +216 -0
  96. data/lib/openid4vp/verifier/request_signer.rb +59 -0
  97. data/lib/openid4vp/verifier/request_uri_endpoint.rb +151 -0
  98. data/lib/openid4vp/verifier/response_endpoint.rb +197 -0
  99. data/lib/openid4vp/verifier/response_validator.rb +258 -0
  100. data/lib/openid4vp/verifier/session.rb +109 -0
  101. data/lib/openid4vp/verifier/session_store.rb +48 -0
  102. data/lib/openid4vp/verifier/verified_response.rb +53 -0
  103. data/lib/openid4vp/verifier.rb +155 -0
  104. data/lib/openid4vp/verifier_attestation.rb +130 -0
  105. data/lib/openid4vp/verifier_info.rb +102 -0
  106. data/lib/openid4vp/version.rb +5 -0
  107. data/lib/openid4vp/vp_token.rb +81 -0
  108. data/lib/openid4vp/wallet/config.rb +49 -0
  109. data/lib/openid4vp/wallet/http_client.rb +73 -0
  110. data/lib/openid4vp/wallet/presenter.rb +90 -0
  111. data/lib/openid4vp/wallet/processed_request.rb +14 -0
  112. data/lib/openid4vp/wallet/request_processor.rb +237 -0
  113. data/lib/openid4vp/wallet/response_builder.rb +44 -0
  114. data/lib/openid4vp/wallet/submission.rb +68 -0
  115. data/lib/openid4vp/wallet.rb +142 -0
  116. data/lib/openid4vp/x509/chain_validator.rb +42 -0
  117. data/lib/openid4vp/x509.rb +103 -0
  118. data/lib/openid4vp.rb +18 -0
  119. metadata +233 -0
metadata ADDED
@@ -0,0 +1,233 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: openid4vp
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.1.0
5
+ platform: ruby
6
+ authors:
7
+ - Braulio Martinez
8
+ bindir: bin
9
+ cert_chain: []
10
+ date: 1980-01-02 00:00:00.000000000 Z
11
+ dependencies:
12
+ - !ruby/object:Gem::Dependency
13
+ name: cbor
14
+ requirement: !ruby/object:Gem::Requirement
15
+ requirements:
16
+ - - "~>"
17
+ - !ruby/object:Gem::Version
18
+ version: '0.5'
19
+ type: :runtime
20
+ prerelease: false
21
+ version_requirements: !ruby/object:Gem::Requirement
22
+ requirements:
23
+ - - "~>"
24
+ - !ruby/object:Gem::Version
25
+ version: '0.5'
26
+ - !ruby/object:Gem::Dependency
27
+ name: cose
28
+ requirement: !ruby/object:Gem::Requirement
29
+ requirements:
30
+ - - "~>"
31
+ - !ruby/object:Gem::Version
32
+ version: '1.4'
33
+ type: :runtime
34
+ prerelease: false
35
+ version_requirements: !ruby/object:Gem::Requirement
36
+ requirements:
37
+ - - "~>"
38
+ - !ruby/object:Gem::Version
39
+ version: '1.4'
40
+ - !ruby/object:Gem::Dependency
41
+ name: jose
42
+ requirement: !ruby/object:Gem::Requirement
43
+ requirements:
44
+ - - "~>"
45
+ - !ruby/object:Gem::Version
46
+ version: '1.2'
47
+ type: :runtime
48
+ prerelease: false
49
+ version_requirements: !ruby/object:Gem::Requirement
50
+ requirements:
51
+ - - "~>"
52
+ - !ruby/object:Gem::Version
53
+ version: '1.2'
54
+ - !ruby/object:Gem::Dependency
55
+ name: jwt
56
+ requirement: !ruby/object:Gem::Requirement
57
+ requirements:
58
+ - - "~>"
59
+ - !ruby/object:Gem::Version
60
+ version: '3.3'
61
+ type: :runtime
62
+ prerelease: false
63
+ version_requirements: !ruby/object:Gem::Requirement
64
+ requirements:
65
+ - - "~>"
66
+ - !ruby/object:Gem::Version
67
+ version: '3.3'
68
+ - !ruby/object:Gem::Dependency
69
+ name: jwt-eddsa
70
+ requirement: !ruby/object:Gem::Requirement
71
+ requirements:
72
+ - - "~>"
73
+ - !ruby/object:Gem::Version
74
+ version: '1.0'
75
+ type: :runtime
76
+ prerelease: false
77
+ version_requirements: !ruby/object:Gem::Requirement
78
+ requirements:
79
+ - - "~>"
80
+ - !ruby/object:Gem::Version
81
+ version: '1.0'
82
+ description: 'Verifier and Wallet implementation of OpenID4VP 1.0: DCQL, JAR request
83
+ objects, client identifier prefixes, direct_post/direct_post.jwt/DC API response
84
+ modes, encrypted responses and dc+sd-jwt, jwt_vc_json, mso_mdoc, ldp_vc formats.'
85
+ email:
86
+ - braulio@cedarcode.com
87
+ executables: []
88
+ extensions: []
89
+ extra_rdoc_files: []
90
+ files:
91
+ - CHANGELOG.md
92
+ - LICENSE.txt
93
+ - README.md
94
+ - lib/openid4vp.rb
95
+ - lib/openid4vp/authorization_request.rb
96
+ - lib/openid4vp/authorization_request/validator.rb
97
+ - lib/openid4vp/authorization_response.rb
98
+ - lib/openid4vp/client_id.rb
99
+ - lib/openid4vp/credential.rb
100
+ - lib/openid4vp/dc_api.rb
101
+ - lib/openid4vp/dcql.rb
102
+ - lib/openid4vp/dcql/claims_path_pointer.rb
103
+ - lib/openid4vp/dcql/claims_query.rb
104
+ - lib/openid4vp/dcql/credential_query.rb
105
+ - lib/openid4vp/dcql/credential_set_query.rb
106
+ - lib/openid4vp/dcql/evaluator.rb
107
+ - lib/openid4vp/dcql/matcher.rb
108
+ - lib/openid4vp/dcql/meta.rb
109
+ - lib/openid4vp/dcql/query.rb
110
+ - lib/openid4vp/dcql/selection.rb
111
+ - lib/openid4vp/dcql/trusted_authorities_query.rb
112
+ - lib/openid4vp/encoded_response.rb
113
+ - lib/openid4vp/error_response.rb
114
+ - lib/openid4vp/errors.rb
115
+ - lib/openid4vp/formats.rb
116
+ - lib/openid4vp/formats/base.rb
117
+ - lib/openid4vp/formats/context.rb
118
+ - lib/openid4vp/formats/jwt_vc_json.rb
119
+ - lib/openid4vp/formats/ldp_vc.rb
120
+ - lib/openid4vp/formats/mso_mdoc.rb
121
+ - lib/openid4vp/formats/registry.rb
122
+ - lib/openid4vp/formats/sd_jwt_vc.rb
123
+ - lib/openid4vp/formats/verified_presentation.rb
124
+ - lib/openid4vp/jose.rb
125
+ - lib/openid4vp/jose/algorithms.rb
126
+ - lib/openid4vp/jose/jwe.rb
127
+ - lib/openid4vp/jose/jwk.rb
128
+ - lib/openid4vp/jose/jwk_set.rb
129
+ - lib/openid4vp/jose/jws.rb
130
+ - lib/openid4vp/mdoc.rb
131
+ - lib/openid4vp/mdoc/builder.rb
132
+ - lib/openid4vp/mdoc/cbor_values.rb
133
+ - lib/openid4vp/mdoc/cose_key.rb
134
+ - lib/openid4vp/mdoc/device_authentication.rb
135
+ - lib/openid4vp/mdoc/device_response.rb
136
+ - lib/openid4vp/mdoc/device_signed.rb
137
+ - lib/openid4vp/mdoc/document.rb
138
+ - lib/openid4vp/mdoc/handover.rb
139
+ - lib/openid4vp/mdoc/issuer_signed.rb
140
+ - lib/openid4vp/mdoc/mso.rb
141
+ - lib/openid4vp/mdoc/session_transcript.rb
142
+ - lib/openid4vp/mdoc/sign1_decoder.rb
143
+ - lib/openid4vp/mdoc/verifier.rb
144
+ - lib/openid4vp/metadata.rb
145
+ - lib/openid4vp/metadata/verifier_metadata.rb
146
+ - lib/openid4vp/metadata/vp_formats.rb
147
+ - lib/openid4vp/metadata/wallet_metadata.rb
148
+ - lib/openid4vp/request_object.rb
149
+ - lib/openid4vp/request_verification.rb
150
+ - lib/openid4vp/request_verification/base.rb
151
+ - lib/openid4vp/request_verification/config.rb
152
+ - lib/openid4vp/request_verification/decentralized_identifier.rb
153
+ - lib/openid4vp/request_verification/openid_federation.rb
154
+ - lib/openid4vp/request_verification/pre_registered.rb
155
+ - lib/openid4vp/request_verification/redirect_uri.rb
156
+ - lib/openid4vp/request_verification/resolver.rb
157
+ - lib/openid4vp/request_verification/verified_request.rb
158
+ - lib/openid4vp/request_verification/verifier_attestation.rb
159
+ - lib/openid4vp/request_verification/x509_hash.rb
160
+ - lib/openid4vp/request_verification/x509_san_dns.rb
161
+ - lib/openid4vp/response_encryption.rb
162
+ - lib/openid4vp/response_endpoint_result.rb
163
+ - lib/openid4vp/response_mode.rb
164
+ - lib/openid4vp/response_type.rb
165
+ - lib/openid4vp/sd_jwt.rb
166
+ - lib/openid4vp/sd_jwt/digest.rb
167
+ - lib/openid4vp/sd_jwt/disclosure.rb
168
+ - lib/openid4vp/sd_jwt/issuer.rb
169
+ - lib/openid4vp/sd_jwt/kb_jwt.rb
170
+ - lib/openid4vp/sd_jwt/parser.rb
171
+ - lib/openid4vp/sd_jwt/presentation.rb
172
+ - lib/openid4vp/sd_jwt/reconstruct.rb
173
+ - lib/openid4vp/transaction_data.rb
174
+ - lib/openid4vp/transaction_data/registry.rb
175
+ - lib/openid4vp/transaction_data/sd_jwt_hashes.rb
176
+ - lib/openid4vp/util.rb
177
+ - lib/openid4vp/util/base64url.rb
178
+ - lib/openid4vp/util/form.rb
179
+ - lib/openid4vp/util/random.rb
180
+ - lib/openid4vp/util/uri.rb
181
+ - lib/openid4vp/verifier.rb
182
+ - lib/openid4vp/verifier/config.rb
183
+ - lib/openid4vp/verifier/created_request.rb
184
+ - lib/openid4vp/verifier/http_result.rb
185
+ - lib/openid4vp/verifier/memory_session_store.rb
186
+ - lib/openid4vp/verifier/request_builder.rb
187
+ - lib/openid4vp/verifier/request_signer.rb
188
+ - lib/openid4vp/verifier/request_uri_endpoint.rb
189
+ - lib/openid4vp/verifier/response_endpoint.rb
190
+ - lib/openid4vp/verifier/response_validator.rb
191
+ - lib/openid4vp/verifier/session.rb
192
+ - lib/openid4vp/verifier/session_store.rb
193
+ - lib/openid4vp/verifier/verified_response.rb
194
+ - lib/openid4vp/verifier_attestation.rb
195
+ - lib/openid4vp/verifier_info.rb
196
+ - lib/openid4vp/version.rb
197
+ - lib/openid4vp/vp_token.rb
198
+ - lib/openid4vp/wallet.rb
199
+ - lib/openid4vp/wallet/config.rb
200
+ - lib/openid4vp/wallet/http_client.rb
201
+ - lib/openid4vp/wallet/presenter.rb
202
+ - lib/openid4vp/wallet/processed_request.rb
203
+ - lib/openid4vp/wallet/request_processor.rb
204
+ - lib/openid4vp/wallet/response_builder.rb
205
+ - lib/openid4vp/wallet/submission.rb
206
+ - lib/openid4vp/x509.rb
207
+ - lib/openid4vp/x509/chain_validator.rb
208
+ homepage: https://github.com/cedarcode/openid4vp
209
+ licenses:
210
+ - MIT
211
+ metadata:
212
+ rubygems_mfa_required: 'true'
213
+ source_code_uri: https://github.com/cedarcode/openid4vp
214
+ changelog_uri: https://github.com/cedarcode/openid4vp/blob/main/CHANGELOG.md
215
+ bug_tracker_uri: https://github.com/cedarcode/openid4vp/issues
216
+ rdoc_options: []
217
+ require_paths:
218
+ - lib
219
+ required_ruby_version: !ruby/object:Gem::Requirement
220
+ requirements:
221
+ - - ">="
222
+ - !ruby/object:Gem::Version
223
+ version: '3.2'
224
+ required_rubygems_version: !ruby/object:Gem::Requirement
225
+ requirements:
226
+ - - ">="
227
+ - !ruby/object:Gem::Version
228
+ version: '0'
229
+ requirements: []
230
+ rubygems_version: 3.6.9
231
+ specification_version: 4
232
+ summary: OpenID for Verifiable Presentations 1.0 for Ruby
233
+ test_files: []