@0xpolygonid/js-sdk 1.7.1 → 1.7.3

package/dist/browser/umd/index.js

@@ -33705,6 +33705,9 @@ var PolygonIdSdk = (function (exports, crypto$4) {
                 throw new Error('signature proof: invalid tree state of the issuer while checking credential status of singing key');
             }
             const revocationNonce = BigInt(proof.issuerData.credentialStatus.revocationNonce || 0);
+            if (revocationNonce !== proof.issuerData.authCoreClaim.getRevocationNonce()) {
+                throw new Error(`revocation nonce mismatch: revocation nonce from core representation of auth credential is not the same as in its credential`);
+            }
             const proofValid = await Mt$1(V$1.fromHex(credStatus.issuer.revocationTreeRoot), credStatus.mtp, revocationNonce, BigInt(0));
             if (!proofValid) {
                 throw new Error(`proof validation failed. revNonce=${revocationNonce}`);
@@ -84279,6 +84282,7 @@ var PolygonIdSdk = (function (exports, crypto$4) {
                 }
                 const credWithRevStatus = groupedCredentialsCache.get(groupId);
                 const zkpRes = await this._proofService.generateProof(proofReq, did, {
+                    verifierDid: W$2.parse(authRequest.from),
                     skipRevocation: Boolean(query.skipClaimRevocationCheck),
                     credential: credWithRevStatus?.cred,
                     credentialRevocationStatus: credWithRevStatus?.revStatus,
@@ -84314,8 +84318,9 @@ var PolygonIdSdk = (function (exports, crypto$4) {
          * Creates an instance of FetchHandler.
          * @param {IPackageManager} _packerMgr - package manager to unpack message envelope
          */
-        constructor(_packerMgr) {
+        constructor(_packerMgr, opts) {
             this._packerMgr = _packerMgr;
+            this.opts = opts;
         }
         /**
          * Handles only messages with credentials/1.0/offer type
@@ -84335,11 +84340,7 @@ var PolygonIdSdk = (function (exports, crypto$4) {
             if (opts.mediaType === MediaType.SignedMessage && !opts.packerOptions) {
                 throw new Error(`jws packer options are required for ${MediaType.SignedMessage}`);
             }
-            const { unpackedMessage: message } = await this._packerMgr.unpack(offer);
-            const offerMessage = message;
-            if (message.type !== PROTOCOL_MESSAGE_TYPE.CREDENTIAL_OFFER_MESSAGE_TYPE) {
-                throw new Error('Invalid media type');
-            }
+            const offerMessage = await FetchHandler.unpackMessage(this._packerMgr, offer, PROTOCOL_MESSAGE_TYPE.CREDENTIAL_OFFER_MESSAGE_TYPE);
             const credentials = [];
             for (let index = 0; index < offerMessage.body.credentials.length; index++) {
                 const credentialInfo = offerMessage.body.credentials[index];
@@ -84391,6 +84392,69 @@ var PolygonIdSdk = (function (exports, crypto$4) {
             }
             return credentials;
         }
+        /**
+         * @inheritdoc IFetchHandler#handleCredentialFetchRequest
+         */
+        async handleCredentialFetchRequest(envelope) {
+            const msgRequest = await FetchHandler.unpackMessage(this._packerMgr, envelope, PROTOCOL_MESSAGE_TYPE.CREDENTIAL_FETCH_REQUEST_MESSAGE_TYPE);
+            if (!msgRequest.to) {
+                throw new Error("failed request. empty 'to' field");
+            }
+            if (!msgRequest.from) {
+                throw new Error("failed request. empty 'from' field");
+            }
+            const issuerDID = W$2.parse(msgRequest.to);
+            const userDID = W$2.parse(msgRequest.from);
+            const credId = msgRequest.body?.id;
+            if (!credId) {
+                throw new Error('nvalid credential id in fetch request body');
+            }
+            if (!this.opts?.credentialWallet) {
+                throw new Error('please, provide credential wallet in options');
+            }
+            const cred = await this.opts.credentialWallet.findById(credId);
+            if (!cred) {
+                throw new Error('credential not found');
+            }
+            const userToVerifyDID = getUserDIDFromCredential(issuerDID, cred);
+            if (userToVerifyDID.string() !== userDID.string()) {
+                throw new Error('credential subject is not a sender DID');
+            }
+            return this._packerMgr.pack(MediaType.PlainMessage, byteEncoder.encode(JSON.stringify({
+                id: v4(),
+                type: PROTOCOL_MESSAGE_TYPE.CREDENTIAL_ISSUANCE_RESPONSE_MESSAGE_TYPE,
+                typ: msgRequest.typ ?? MediaType.PlainMessage,
+                thid: msgRequest.thid ?? v4(),
+                body: { credential: cred },
+                from: msgRequest.to,
+                to: msgRequest.from
+            })), {});
+        }
+        /**
+         * @inheritdoc IFetchHandler#handleIssuanceResponseMessage
+         */
+        async handleIssuanceResponseMessage(envelop) {
+            const issuanceMsg = await FetchHandler.unpackMessage(this._packerMgr, envelop, PROTOCOL_MESSAGE_TYPE.CREDENTIAL_ISSUANCE_RESPONSE_MESSAGE_TYPE);
+            if (!this.opts?.credentialWallet) {
+                throw new Error('please provide credential wallet in options');
+            }
+            if (!issuanceMsg.body?.credential) {
+                throw new Error('credential is missing in issuance response message');
+            }
+            await this.opts.credentialWallet.save(W3CCredential.fromJSON(issuanceMsg.body.credential));
+            return Promise.resolve(Uint8Array.from([]));
+        }
+        /**
+         * @inheritdoc IFetchHandler#unpackMessage
+         */
+        static async unpackMessage(packerMgr, envelope, messageType) {
+            const { unpackedMessage: message } = await packerMgr.unpack(envelope);
+            const msgRequest = message;
+            if (message.type !== messageType) {
+                throw new Error('Invalid message type');
+            }
+            return msgRequest;
+        }
     }
 
     /**