@0xpolygonid/js-sdk 1.7.2 → 1.7.3

package/dist/node/cjs/iden3comm/handlers/fetch.js

@@ -26,11 +26,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.FetchHandler = void 0;
 const constants_1 = require("../constants");
 const constants_2 = require("../constants");
-const uuid = __importStar(require("uuid"));
 const verifiable_1 = require("../../verifiable");
+const credentials_1 = require("../../credentials");
 const utils_1 = require("../../utils");
 const js_jwz_1 = require("@iden3/js-jwz");
 const js_iden3_core_1 = require("@iden3/js-iden3-core");
+const uuid = __importStar(require("uuid"));
 /**
  *
  * Allows to handle Credential offer protocol message and return fetched credential
@@ -45,8 +46,9 @@ class FetchHandler {
      * Creates an instance of FetchHandler.
      * @param {IPackageManager} _packerMgr - package manager to unpack message envelope
      */
-    constructor(_packerMgr) {
+    constructor(_packerMgr, opts) {
         this._packerMgr = _packerMgr;
+        this.opts = opts;
     }
     /**
      * Handles only messages with credentials/1.0/offer type
@@ -66,11 +68,7 @@ class FetchHandler {
         if (opts.mediaType === constants_1.MediaType.SignedMessage && !opts.packerOptions) {
             throw new Error(`jws packer options are required for ${constants_1.MediaType.SignedMessage}`);
         }
-        const { unpackedMessage: message } = await this._packerMgr.unpack(offer);
-        const offerMessage = message;
-        if (message.type !== constants_2.PROTOCOL_MESSAGE_TYPE.CREDENTIAL_OFFER_MESSAGE_TYPE) {
-            throw new Error('Invalid media type');
-        }
+        const offerMessage = await FetchHandler.unpackMessage(this._packerMgr, offer, constants_2.PROTOCOL_MESSAGE_TYPE.CREDENTIAL_OFFER_MESSAGE_TYPE);
         const credentials = [];
         for (let index = 0; index < offerMessage.body.credentials.length; index++) {
             const credentialInfo = offerMessage.body.credentials[index];
@@ -122,5 +120,68 @@ class FetchHandler {
         }
         return credentials;
     }
+    /**
+     * @inheritdoc IFetchHandler#handleCredentialFetchRequest
+     */
+    async handleCredentialFetchRequest(envelope) {
+        const msgRequest = await FetchHandler.unpackMessage(this._packerMgr, envelope, constants_2.PROTOCOL_MESSAGE_TYPE.CREDENTIAL_FETCH_REQUEST_MESSAGE_TYPE);
+        if (!msgRequest.to) {
+            throw new Error("failed request. empty 'to' field");
+        }
+        if (!msgRequest.from) {
+            throw new Error("failed request. empty 'from' field");
+        }
+        const issuerDID = js_iden3_core_1.DID.parse(msgRequest.to);
+        const userDID = js_iden3_core_1.DID.parse(msgRequest.from);
+        const credId = msgRequest.body?.id;
+        if (!credId) {
+            throw new Error('nvalid credential id in fetch request body');
+        }
+        if (!this.opts?.credentialWallet) {
+            throw new Error('please, provide credential wallet in options');
+        }
+        const cred = await this.opts.credentialWallet.findById(credId);
+        if (!cred) {
+            throw new Error('credential not found');
+        }
+        const userToVerifyDID = (0, credentials_1.getUserDIDFromCredential)(issuerDID, cred);
+        if (userToVerifyDID.string() !== userDID.string()) {
+            throw new Error('credential subject is not a sender DID');
+        }
+        return this._packerMgr.pack(constants_1.MediaType.PlainMessage, utils_1.byteEncoder.encode(JSON.stringify({
+            id: uuid.v4(),
+            type: constants_2.PROTOCOL_MESSAGE_TYPE.CREDENTIAL_ISSUANCE_RESPONSE_MESSAGE_TYPE,
+            typ: msgRequest.typ ?? constants_1.MediaType.PlainMessage,
+            thid: msgRequest.thid ?? uuid.v4(),
+            body: { credential: cred },
+            from: msgRequest.to,
+            to: msgRequest.from
+        })), {});
+    }
+    /**
+     * @inheritdoc IFetchHandler#handleIssuanceResponseMessage
+     */
+    async handleIssuanceResponseMessage(envelop) {
+        const issuanceMsg = await FetchHandler.unpackMessage(this._packerMgr, envelop, constants_2.PROTOCOL_MESSAGE_TYPE.CREDENTIAL_ISSUANCE_RESPONSE_MESSAGE_TYPE);
+        if (!this.opts?.credentialWallet) {
+            throw new Error('please provide credential wallet in options');
+        }
+        if (!issuanceMsg.body?.credential) {
+            throw new Error('credential is missing in issuance response message');
+        }
+        await this.opts.credentialWallet.save(verifiable_1.W3CCredential.fromJSON(issuanceMsg.body.credential));
+        return Promise.resolve(Uint8Array.from([]));
+    }
+    /**
+     * @inheritdoc IFetchHandler#unpackMessage
+     */
+    static async unpackMessage(packerMgr, envelope, messageType) {
+        const { unpackedMessage: message } = await packerMgr.unpack(envelope);
+        const msgRequest = message;
+        if (message.type !== messageType) {
+            throw new Error('Invalid message type');
+        }
+        return msgRequest;
+    }
 }
 exports.FetchHandler = FetchHandler;

package/dist/node/cjs/verifiable/credential.js

@@ -171,6 +171,9 @@ class W3CCredential {
             throw new Error('signature proof: invalid tree state of the issuer while checking credential status of singing key');
         }
         const revocationNonce = BigInt(proof.issuerData.credentialStatus.revocationNonce || 0);
+        if (revocationNonce !== proof.issuerData.authCoreClaim.getRevocationNonce()) {
+            throw new Error(`revocation nonce mismatch: revocation nonce from core representation of auth credential is not the same as in its credential`);
+        }
         const proofValid = await (0, js_merkletree_1.verifyProof)(js_merkletree_1.Hash.fromHex(credStatus.issuer.revocationTreeRoot), credStatus.mtp, revocationNonce, BigInt(0));
         if (!proofValid) {
             throw new Error(`proof validation failed. revNonce=${revocationNonce}`);

package/dist/node/esm/iden3comm/handlers/fetch.js

@@ -1,10 +1,11 @@
 import { MediaType } from '../constants';
 import { PROTOCOL_MESSAGE_TYPE } from '../constants';
-import * as uuid from 'uuid';
 import { W3CCredential } from '../../verifiable';
+import { getUserDIDFromCredential } from '../../credentials';
 import { byteDecoder, byteEncoder } from '../../utils';
 import { proving } from '@iden3/js-jwz';
 import { DID } from '@iden3/js-iden3-core';
+import * as uuid from 'uuid';
 /**
  *
  * Allows to handle Credential offer protocol message and return fetched credential
@@ -19,8 +20,9 @@ export class FetchHandler {
      * Creates an instance of FetchHandler.
      * @param {IPackageManager} _packerMgr - package manager to unpack message envelope
      */
-    constructor(_packerMgr) {
+    constructor(_packerMgr, opts) {
         this._packerMgr = _packerMgr;
+        this.opts = opts;
     }
     /**
      * Handles only messages with credentials/1.0/offer type
@@ -40,11 +42,7 @@ export class FetchHandler {
         if (opts.mediaType === MediaType.SignedMessage && !opts.packerOptions) {
             throw new Error(`jws packer options are required for ${MediaType.SignedMessage}`);
         }
-        const { unpackedMessage: message } = await this._packerMgr.unpack(offer);
-        const offerMessage = message;
-        if (message.type !== PROTOCOL_MESSAGE_TYPE.CREDENTIAL_OFFER_MESSAGE_TYPE) {
-            throw new Error('Invalid media type');
-        }
+        const offerMessage = await FetchHandler.unpackMessage(this._packerMgr, offer, PROTOCOL_MESSAGE_TYPE.CREDENTIAL_OFFER_MESSAGE_TYPE);
         const credentials = [];
         for (let index = 0; index < offerMessage.body.credentials.length; index++) {
             const credentialInfo = offerMessage.body.credentials[index];
@@ -96,4 +94,67 @@ export class FetchHandler {
         }
         return credentials;
     }
+    /**
+     * @inheritdoc IFetchHandler#handleCredentialFetchRequest
+     */
+    async handleCredentialFetchRequest(envelope) {
+        const msgRequest = await FetchHandler.unpackMessage(this._packerMgr, envelope, PROTOCOL_MESSAGE_TYPE.CREDENTIAL_FETCH_REQUEST_MESSAGE_TYPE);
+        if (!msgRequest.to) {
+            throw new Error("failed request. empty 'to' field");
+        }
+        if (!msgRequest.from) {
+            throw new Error("failed request. empty 'from' field");
+        }
+        const issuerDID = DID.parse(msgRequest.to);
+        const userDID = DID.parse(msgRequest.from);
+        const credId = msgRequest.body?.id;
+        if (!credId) {
+            throw new Error('nvalid credential id in fetch request body');
+        }
+        if (!this.opts?.credentialWallet) {
+            throw new Error('please, provide credential wallet in options');
+        }
+        const cred = await this.opts.credentialWallet.findById(credId);
+        if (!cred) {
+            throw new Error('credential not found');
+        }
+        const userToVerifyDID = getUserDIDFromCredential(issuerDID, cred);
+        if (userToVerifyDID.string() !== userDID.string()) {
+            throw new Error('credential subject is not a sender DID');
+        }
+        return this._packerMgr.pack(MediaType.PlainMessage, byteEncoder.encode(JSON.stringify({
+            id: uuid.v4(),
+            type: PROTOCOL_MESSAGE_TYPE.CREDENTIAL_ISSUANCE_RESPONSE_MESSAGE_TYPE,
+            typ: msgRequest.typ ?? MediaType.PlainMessage,
+            thid: msgRequest.thid ?? uuid.v4(),
+            body: { credential: cred },
+            from: msgRequest.to,
+            to: msgRequest.from
+        })), {});
+    }
+    /**
+     * @inheritdoc IFetchHandler#handleIssuanceResponseMessage
+     */
+    async handleIssuanceResponseMessage(envelop) {
+        const issuanceMsg = await FetchHandler.unpackMessage(this._packerMgr, envelop, PROTOCOL_MESSAGE_TYPE.CREDENTIAL_ISSUANCE_RESPONSE_MESSAGE_TYPE);
+        if (!this.opts?.credentialWallet) {
+            throw new Error('please provide credential wallet in options');
+        }
+        if (!issuanceMsg.body?.credential) {
+            throw new Error('credential is missing in issuance response message');
+        }
+        await this.opts.credentialWallet.save(W3CCredential.fromJSON(issuanceMsg.body.credential));
+        return Promise.resolve(Uint8Array.from([]));
+    }
+    /**
+     * @inheritdoc IFetchHandler#unpackMessage
+     */
+    static async unpackMessage(packerMgr, envelope, messageType) {
+        const { unpackedMessage: message } = await packerMgr.unpack(envelope);
+        const msgRequest = message;
+        if (message.type !== messageType) {
+            throw new Error('Invalid message type');
+        }
+        return msgRequest;
+    }
 }

package/dist/node/esm/verifiable/credential.js

@@ -168,6 +168,9 @@ export class W3CCredential {
             throw new Error('signature proof: invalid tree state of the issuer while checking credential status of singing key');
         }
         const revocationNonce = BigInt(proof.issuerData.credentialStatus.revocationNonce || 0);
+        if (revocationNonce !== proof.issuerData.authCoreClaim.getRevocationNonce()) {
+            throw new Error(`revocation nonce mismatch: revocation nonce from core representation of auth credential is not the same as in its credential`);
+        }
         const proofValid = await verifyProof(Hash.fromHex(credStatus.issuer.revocationTreeRoot), credStatus.mtp, revocationNonce, BigInt(0));
         if (!proofValid) {
             throw new Error(`proof validation failed. revNonce=${revocationNonce}`);

package/dist/types/iden3comm/handlers/fetch.d.ts

@@ -1,6 +1,7 @@
 import { MediaType } from '../constants';
 import { IPackageManager, JWSPackerParams } from '../types';
 import { W3CCredential } from '../../verifiable';
+import { ICredentialWallet } from '../../credentials';
 /**
  *
  * Options to pass to fetch handler
@@ -34,6 +35,22 @@ export interface IFetchHandler {
     }>`
      */
     handleCredentialOffer(offer: Uint8Array, opts?: FetchHandlerOptions): Promise<W3CCredential[]>;
+    /**
+     * Handles a credential fetch request.
+     *
+     * @param basicMessage - The basic message containing the fetch request.
+     * @returns A promise that resolves to the response message.
+     * @throws An error if the request is invalid or if the credential is not found.
+     */
+    handleCredentialFetchRequest(basicMessage: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Handles the issuance response message.
+     *
+     * @param basicMessage - The basic message containing the issuance response.
+     * @returns A promise that resolves to a Uint8Array.
+     * @throws An error if the credential wallet is not provided in the options or if the credential is missing in the issuance response message.
+     */
+    handleIssuanceResponseMessage(basicMessage: Uint8Array): Promise<Uint8Array>;
 }
 /**
  *
@@ -46,11 +63,14 @@ export interface IFetchHandler {
  */
 export declare class FetchHandler implements IFetchHandler {
     private readonly _packerMgr;
+    private readonly opts?;
     /**
      * Creates an instance of FetchHandler.
      * @param {IPackageManager} _packerMgr - package manager to unpack message envelope
      */
-    constructor(_packerMgr: IPackageManager);
+    constructor(_packerMgr: IPackageManager, opts?: {
+        credentialWallet: ICredentialWallet;
+    } | undefined);
     /**
      * Handles only messages with credentials/1.0/offer type
      *
@@ -61,4 +81,16 @@ export declare class FetchHandler implements IFetchHandler {
      * @returns `Promise<W3CCredential[]>`
      */
     handleCredentialOffer(offer: Uint8Array, opts?: FetchHandlerOptions): Promise<W3CCredential[]>;
+    /**
+     * @inheritdoc IFetchHandler#handleCredentialFetchRequest
+     */
+    handleCredentialFetchRequest(envelope: Uint8Array): Promise<Uint8Array>;
+    /**
+     * @inheritdoc IFetchHandler#handleIssuanceResponseMessage
+     */
+    handleIssuanceResponseMessage(envelop: Uint8Array): Promise<Uint8Array>;
+    /**
+     * @inheritdoc IFetchHandler#unpackMessage
+     */
+    static unpackMessage<T>(packerMgr: IPackageManager, envelope: Uint8Array, messageType: string): Promise<T>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@0xpolygonid/js-sdk",
-  "version": "1.7.2",
+  "version": "1.7.3",
   "description": "SDK to work with Polygon ID",
   "main": "dist/node/cjs/index.js",
   "module": "dist/node/esm/index.js",