@ajna-inc/openbadges 0.1.0

package/build/http/middleware/auth.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bearerAuth = bearerAuth;
+exports.requireScopes = requireScopes;
+const router_1 = require("../router");
+const OpenBadgesTokenRepository_1 = require("../../repository/OpenBadgesTokenRepository");
+function bearerAuth(module) {
+    return async function (req, res, next) {
+        const header = req.headers['authorization'] || '';
+        if (!header || typeof header !== 'string' || !header.startsWith('Bearer ')) {
+            return (0, router_1.sendError)(res, 401, 'unauthorized', 'Missing bearer token');
+        }
+        const token = header.slice('Bearer '.length);
+        try {
+            const { agentContext } = (0, router_1.getRequestContext)(req);
+            const repo = agentContext.dependencyManager.resolve(OpenBadgesTokenRepository_1.OpenBadgesTokenRepository);
+            const tokenEntry = await repo.findByToken(agentContext, token);
+            if (!tokenEntry || tokenEntry.tokenType !== 'access' || tokenEntry.expiresAt.getTime() < Date.now()) {
+                return (0, router_1.sendError)(res, 401, 'unauthorized', 'Invalid or expired token');
+            }
+            ;
+            req.requestContext.auth = {
+                subject: tokenEntry.subject,
+                scope: tokenEntry.scope,
+                clientId: tokenEntry.clientId,
+                scopes: new Set(String(tokenEntry.scope || '').split(/\s+/).filter(Boolean)),
+            };
+            return next();
+        }
+        catch (_e) {
+            return (0, router_1.sendError)(res, 401, 'unauthorized', 'Invalid or expired token');
+        }
+    };
+}
+function requireScopes(required) {
+    return function (req, res, next) {
+        const auth = req.requestContext?.auth;
+        const scopes = auth?.scopes;
+        if (!scopes)
+            return (0, router_1.sendError)(res, 403, 'insufficient_scope', 'No scopes present');
+        for (const s of required) {
+            if (!scopes.has(s))
+                return (0, router_1.sendError)(res, 403, 'insufficient_scope', `Missing scope: ${s}`);
+        }
+        next();
+    };
+}
+//# sourceMappingURL=auth.js.map

package/build/http/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/http/middleware/auth.ts"],"names":[],"mappings":";;AAOA,gCAyBC;AAED,sCAUC;AAxCD,sCAAwD;AACxD,0FAAsF;AAEtF,SAAgB,UAAU,CAAC,MAA4B;IACrD,OAAO,KAAK,WAAW,GAAc,EAAE,GAAa,EAAE,IAAkB;QACtE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAA;QACjD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAA,kBAAS,EAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,sBAAsB,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,0BAAiB,EAAC,GAAG,CAAC,CAAA;YAC/C,MAAM,IAAI,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,qDAAyB,CAAC,CAAA;YAC9E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;YAC9D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpG,OAAO,IAAA,kBAAS,EAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAA;YACxE,CAAC;YACD,CAAC;YAAC,GAAG,CAAC,cAAsB,CAAC,IAAI,GAAG;gBAClC,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;aAC7E,CAAA;YACD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACZ,OAAO,IAAA,kBAAS,EAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAA;QACxE,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,QAAkB;IAC9C,OAAO,UAAU,GAAc,EAAE,GAAa,EAAE,IAAkB;QAChE,MAAM,IAAI,GAAI,GAAG,CAAC,cAAsB,EAAE,IAAI,CAAA;QAC9C,MAAM,MAAM,GAA4B,IAAI,EAAE,MAAM,CAAA;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAA,kBAAS,EAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAA;QAClF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAA,kBAAS,EAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC7F,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}

package/build/http/router.d.ts

@@ -0,0 +1,13 @@
+import type { Request, Response, NextFunction } from 'express';
+import type { AgentContext } from '@credo-ts/core';
+export declare function importExpress(): typeof import("express");
+export type RequestContext = {
+    agentContext: AgentContext;
+};
+export interface ObRequest<T = Record<string, unknown>> extends Request {
+    requestContext?: RequestContext & T;
+}
+export declare function setRequestContext(agentContext: AgentContext): (req: ObRequest, _res: Response, next: NextFunction) => void;
+export declare function getRequestContext<T extends ObRequest<any>>(request: T): any;
+export declare function sendJson(res: Response, body: unknown, status?: number, contentType?: string): void;
+export declare function sendError(res: Response, status: number, error: string, error_description?: string): void;

package/build/http/router.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.importExpress = importExpress;
+exports.setRequestContext = setRequestContext;
+exports.getRequestContext = getRequestContext;
+exports.sendJson = sendJson;
+exports.sendError = sendError;
+function importExpress() {
+    try {
+        // 'express' is a peer dependency; required by the host app
+        const express = require('express');
+        return express;
+    }
+    catch {
+        throw new Error('Express must be installed as a dependency to use OpenBadges HTTP module');
+    }
+}
+function setRequestContext(agentContext) {
+    return function (req, _res, next) {
+        req.requestContext = { agentContext };
+        next();
+    };
+}
+function getRequestContext(request) {
+    const ctx = request.requestContext;
+    if (!ctx)
+        throw new Error('Request context not set');
+    return ctx;
+}
+function sendJson(res, body, status = 200, contentType = 'application/json') {
+    res.setHeader('Content-Type', contentType).status(status).send(JSON.stringify(body));
+}
+function sendError(res, status, error, error_description) {
+    sendJson(res, { error, error_description }, status);
+}
+//# sourceMappingURL=router.js.map

package/build/http/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/http/router.ts"],"names":[],"mappings":";;AAGA,sCAQC;AAQD,8CAKC;AAED,8CAIC;AAED,4BAEC;AAED,8BAEC;AAnCD,SAAgB,aAAa;IAC3B,IAAI,CAAC;QACH,2DAA2D;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAA6B,CAAA;QAC9D,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;AACH,CAAC;AAQD,SAAgB,iBAAiB,CAAC,YAA0B;IAC1D,OAAO,UAAU,GAAc,EAAE,IAAc,EAAE,IAAkB;QACjE,GAAG,CAAC,cAAc,GAAG,EAAE,YAAY,EAAE,CAAA;QACrC,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,SAAgB,iBAAiB,CAA2B,OAAU;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IACpD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,QAAQ,CAAC,GAAa,EAAE,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,WAAW,GAAG,kBAAkB;IACnG,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;AACtF,CAAC;AAED,SAAgB,SAAS,CAAC,GAAa,EAAE,MAAc,EAAE,KAAa,EAAE,iBAA0B;IAChG,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAA;AACrD,CAAC"}

package/build/http/tenants.d.ts

@@ -0,0 +1,2 @@
+import type { AgentContext } from '@credo-ts/core';
+export declare function getAgentContextForActorId(rootAgentContext: AgentContext, actorId: string): Promise<AgentContext>;

package/build/http/tenants.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAgentContextForActorId = getAgentContextForActorId;
+const core_1 = require("@credo-ts/core");
+const OPENID4VC_ACTOR_IDS_METADATA_KEY = '_openid4vc/openId4VcActorIds';
+async function getAgentContextForActorId(rootAgentContext, actorId) {
+    // Try to use TenantsModule if available; map actor id to tenant
+    const tenantsApi = (0, core_1.getApiForModuleByName)(rootAgentContext, 'TenantsModule');
+    if (tenantsApi) {
+        const [tenant] = await tenantsApi.findTenantsByQuery({
+            [OPENID4VC_ACTOR_IDS_METADATA_KEY]: [actorId],
+        });
+        if (tenant) {
+            const agentContextProvider = rootAgentContext.dependencyManager.resolve(core_1.InjectionSymbols.AgentContextProvider);
+            return agentContextProvider.getAgentContextForContextCorrelationId(`tenant-${tenant.id}`);
+        }
+    }
+    return rootAgentContext;
+}
+//# sourceMappingURL=tenants.js.map

package/build/http/tenants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.js","sourceRoot":"","sources":["../../src/http/tenants.ts"],"names":[],"mappings":";;AAKA,8DAiBC;AArBD,yCAAwE;AAExE,MAAM,gCAAgC,GAAG,8BAA8B,CAAA;AAEhE,KAAK,UAAU,yBAAyB,CAAC,gBAA8B,EAAE,OAAe;IAC7F,gEAAgE;IAChE,MAAM,UAAU,GAAG,IAAA,4BAAqB,EAAM,gBAAgB,EAAE,eAAe,CAAC,CAAA;IAChF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC;YACnD,CAAC,gCAAgC,CAAC,EAAE,CAAC,OAAO,CAAC;SAC9C,CAAC,CAAA;QAEF,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,iBAAiB,CAAC,OAAO,CACrE,uBAAgB,CAAC,oBAAoB,CACtC,CAAA;YACD,OAAO,oBAAoB,CAAC,sCAAsC,CAAC,UAAU,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;IAED,OAAO,gBAAgB,CAAA;AACzB,CAAC"}

package/build/http/util/auth.d.ts

@@ -0,0 +1,8 @@
+import type { ObRequest } from '../router';
+export type BasicAuth = {
+    clientId: string;
+    clientSecret: string;
+};
+export declare function parseBasicAuth(req: ObRequest): BasicAuth | null;
+export declare function parseBodyClientAuth(req: ObRequest): BasicAuth | null;
+export declare function isScopeSubset(requested: string | undefined, allowed: string | undefined): boolean;

package/build/http/util/auth.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseBasicAuth = parseBasicAuth;
+exports.parseBodyClientAuth = parseBodyClientAuth;
+exports.isScopeSubset = isScopeSubset;
+function parseBasicAuth(req) {
+    const header = req.headers['authorization'];
+    if (!header || typeof header !== 'string')
+        return null;
+    const [scheme, value] = header.split(' ');
+    if (!scheme || scheme.toLowerCase() !== 'basic' || !value)
+        return null;
+    try {
+        const decoded = Buffer.from(value, 'base64').toString('utf8');
+        const idx = decoded.indexOf(':');
+        if (idx === -1)
+            return null;
+        const clientId = decoded.slice(0, idx);
+        const clientSecret = decoded.slice(idx + 1);
+        return { clientId, clientSecret };
+    }
+    catch {
+        return null;
+    }
+}
+function parseBodyClientAuth(req) {
+    const clientId = req.body?.client_id;
+    const clientSecret = req.body?.client_secret;
+    if (typeof clientId === 'string' && typeof clientSecret === 'string')
+        return { clientId, clientSecret };
+    return null;
+}
+function isScopeSubset(requested, allowed) {
+    if (!requested)
+        return true;
+    const reqSet = new Set(requested.split(/\s+/).filter(Boolean));
+    const allowSet = new Set((allowed ?? '').split(/\s+/).filter(Boolean));
+    for (const s of reqSet)
+        if (!allowSet.has(s))
+            return false;
+    return true;
+}
+//# sourceMappingURL=auth.js.map

package/build/http/util/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/http/util/auth.ts"],"names":[],"mappings":";;AAIA,wCAeC;AAED,kDAKC;AAED,sCAMC;AA9BD,SAAgB,cAAc,CAAC,GAAc;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACtD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACtE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACtC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;QAC3C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAC,GAAc;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAA;IACpC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;IACvG,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAgB,aAAa,CAAC,SAA6B,EAAE,OAA2B;IACtF,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IACtE,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;IAC1D,OAAO,IAAI,CAAA;AACb,CAAC"}

package/build/index.d.ts

@@ -0,0 +1,46 @@
+export * from './OpenBadgesModule';
+export * from './OpenBadgesModuleConfig';
+export * from './constants';
+export * from './models';
+export * from './cryptosuites';
+export * from './api/OpenBadgesApi';
+export * from './repository/OpenBadgeCredentialRecord';
+export * from './repository/OpenBadgeCredentialRepository';
+export * from './repository/OpenBadgesProfileRecord';
+export * from './repository/OpenBadgesProfileRepository';
+export * from './repository/OpenBadgesServiceDescriptionRecord';
+export * from './repository/OpenBadgesServiceDescriptionRepository';
+export * from './repository/OpenBadgesOAuthRecord';
+export * from './repository/OpenBadgesOAuthRepository';
+export * from './repository/OpenBadgesRevocationCacheRecord';
+export * from './repository/OpenBadgesRevocationCacheRepository';
+export * from './repository/OpenBadgesAuthCodeRecord';
+export * from './repository/OpenBadgesAuthCodeRepository';
+export * from './repository/OpenBadgesTokenRecord';
+export * from './repository/OpenBadgesTokenRepository';
+export * from './repository/OpenBadgesConsentRecord';
+export * from './repository/OpenBadgesConsentRepository';
+export * from './repository/OpenBadgesKeyBindingRecord';
+export * from './repository/OpenBadgesKeyBindingRepository';
+export * from './repository/StatusListRecord';
+export * from './repository/StatusListRepository';
+export * from './services/IssuerService';
+export * from './services/VerifyService';
+export * from './services/ConsumerService';
+export * from './services/OAuthClient';
+export * from './services/DidCommLinkService';
+export * from './services/DisplayMapper';
+export * from './services/RevocationService';
+export * from './services/JwtService';
+export * from './services/ProofService';
+export * from './services/KeyService';
+export * from './services/ContextService';
+export * from './services/DataIntegrityService';
+export * from './services/AchievementValidator';
+export * from './services/crypto/CryptoDriver';
+export * from './services/crypto/JsonLdCryptoDriver';
+export * from './services/crypto/JwtCryptoDriver';
+export * from './http/OpenBadgesHttpModule';
+export * from './http/OpenBadgesHttpModuleConfig';
+export * from './http/router';
+export * from './utils/validate';

package/build/index.js

@@ -0,0 +1,71 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// OpenBadges Module - Main exports
+__exportStar(require("./OpenBadgesModule"), exports);
+__exportStar(require("./OpenBadgesModuleConfig"), exports);
+__exportStar(require("./constants"), exports);
+// Models (credential types)
+__exportStar(require("./models"), exports);
+// Cryptosuites (OBv3 certification required)
+__exportStar(require("./cryptosuites"), exports);
+// API
+__exportStar(require("./api/OpenBadgesApi"), exports);
+// Repository - Records
+__exportStar(require("./repository/OpenBadgeCredentialRecord"), exports);
+__exportStar(require("./repository/OpenBadgeCredentialRepository"), exports);
+__exportStar(require("./repository/OpenBadgesProfileRecord"), exports);
+__exportStar(require("./repository/OpenBadgesProfileRepository"), exports);
+__exportStar(require("./repository/OpenBadgesServiceDescriptionRecord"), exports);
+__exportStar(require("./repository/OpenBadgesServiceDescriptionRepository"), exports);
+__exportStar(require("./repository/OpenBadgesOAuthRecord"), exports);
+__exportStar(require("./repository/OpenBadgesOAuthRepository"), exports);
+__exportStar(require("./repository/OpenBadgesRevocationCacheRecord"), exports);
+__exportStar(require("./repository/OpenBadgesRevocationCacheRepository"), exports);
+__exportStar(require("./repository/OpenBadgesAuthCodeRecord"), exports);
+__exportStar(require("./repository/OpenBadgesAuthCodeRepository"), exports);
+__exportStar(require("./repository/OpenBadgesTokenRecord"), exports);
+__exportStar(require("./repository/OpenBadgesTokenRepository"), exports);
+__exportStar(require("./repository/OpenBadgesConsentRecord"), exports);
+__exportStar(require("./repository/OpenBadgesConsentRepository"), exports);
+__exportStar(require("./repository/OpenBadgesKeyBindingRecord"), exports);
+__exportStar(require("./repository/OpenBadgesKeyBindingRepository"), exports);
+__exportStar(require("./repository/StatusListRecord"), exports);
+__exportStar(require("./repository/StatusListRepository"), exports);
+// Services
+__exportStar(require("./services/IssuerService"), exports);
+__exportStar(require("./services/VerifyService"), exports);
+__exportStar(require("./services/ConsumerService"), exports);
+__exportStar(require("./services/OAuthClient"), exports);
+__exportStar(require("./services/DidCommLinkService"), exports);
+__exportStar(require("./services/DisplayMapper"), exports);
+__exportStar(require("./services/RevocationService"), exports);
+__exportStar(require("./services/JwtService"), exports);
+__exportStar(require("./services/ProofService"), exports);
+__exportStar(require("./services/KeyService"), exports);
+__exportStar(require("./services/ContextService"), exports);
+__exportStar(require("./services/DataIntegrityService"), exports);
+__exportStar(require("./services/AchievementValidator"), exports);
+__exportStar(require("./services/crypto/CryptoDriver"), exports);
+__exportStar(require("./services/crypto/JsonLdCryptoDriver"), exports);
+__exportStar(require("./services/crypto/JwtCryptoDriver"), exports);
+// HTTP Module
+__exportStar(require("./http/OpenBadgesHttpModule"), exports);
+__exportStar(require("./http/OpenBadgesHttpModuleConfig"), exports);
+__exportStar(require("./http/router"), exports);
+// Utils
+__exportStar(require("./utils/validate"), exports);
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mCAAmC;AACnC,qDAAkC;AAClC,2DAAwC;AACxC,8CAA2B;AAE3B,4BAA4B;AAC5B,2CAAwB;AAExB,6CAA6C;AAC7C,iDAA8B;AAE9B,MAAM;AACN,sDAAmC;AAEnC,uBAAuB;AACvB,yEAAsD;AACtD,6EAA0D;AAC1D,uEAAoD;AACpD,2EAAwD;AACxD,kFAA+D;AAC/D,sFAAmE;AACnE,qEAAkD;AAClD,yEAAsD;AACtD,+EAA4D;AAC5D,mFAAgE;AAChE,wEAAqD;AACrD,4EAAyD;AACzD,qEAAkD;AAClD,yEAAsD;AACtD,uEAAoD;AACpD,2EAAwD;AACxD,0EAAuD;AACvD,8EAA2D;AAC3D,gEAA6C;AAC7C,oEAAiD;AAEjD,WAAW;AACX,2DAAwC;AACxC,2DAAwC;AACxC,6DAA0C;AAC1C,yDAAsC;AACtC,gEAA6C;AAC7C,2DAAwC;AACxC,+DAA4C;AAC5C,wDAAqC;AACrC,0DAAuC;AACvC,wDAAqC;AACrC,4DAAyC;AACzC,kEAA+C;AAC/C,kEAA+C;AAC/C,iEAA8C;AAC9C,uEAAoD;AACpD,oEAAiD;AAEjD,cAAc;AACd,8DAA2C;AAC3C,oEAAiD;AACjD,gDAA6B;AAE7B,QAAQ;AACR,mDAAgC"}

package/build/models/ClrCredential.d.ts

@@ -0,0 +1,112 @@
+/**
+ * CLR 2.0 (Comprehensive Learner Record) Credential Types
+ *
+ * A ClrCredential bundles multiple OpenBadgeCredentials into a single
+ * verifiable credential representing a learner's complete achievement record.
+ *
+ * Spec: https://www.imsglobal.org/spec/clr/v2p0
+ */
+/**
+ * The subject of a CLR credential - represents the learner
+ */
+export interface ClrSubject {
+    id: string;
+    type: 'ClrSubject';
+    verifiableCredential: VerifiableCredentialReference[];
+    achievement?: AchievementReference[];
+    association?: Association[];
+}
+/**
+ * A reference to or embedded verifiable credential
+ */
+export interface VerifiableCredentialReference {
+    '@context'?: string | string[];
+    type: string[];
+    id?: string;
+    issuer: string | {
+        id: string;
+        [key: string]: unknown;
+    };
+    validFrom?: string;
+    validUntil?: string;
+    credentialSubject: Record<string, unknown>;
+    proof?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+/**
+ * Summary reference to an achievement
+ */
+export interface AchievementReference {
+    id: string;
+    type: 'Achievement';
+    name: string;
+    description?: string;
+    achievementType?: string;
+}
+/**
+ * Association between credentials in a CLR
+ */
+export interface Association {
+    type: 'Association';
+    associationType: AssociationType;
+    sourceCredentialId: string;
+    targetCredentialId: string;
+}
+export type AssociationType = 'isChildOf' | 'isParentOf' | 'isRelatedTo' | 'replacedBy' | 'precedes' | 'isEqualTo';
+/**
+ * Input for creating a CLR credential
+ */
+export interface ClrCredentialInput {
+    /** Optional credential ID (auto-generated if not provided) */
+    id?: string;
+    /** The learner's identifier (DID or URL) */
+    learnerId: string;
+    /** The issuer's profile (DID or profile object) */
+    issuerProfile: string | {
+        id: string;
+        type?: 'Profile';
+        name?: string;
+        description?: string;
+        url?: string;
+        image?: string;
+    };
+    /** Array of OpenBadgeCredentials to include */
+    verifiableCredentials: VerifiableCredentialReference[];
+    /** Optional associations between credentials */
+    associations?: Association[];
+    /** Verification method for signing */
+    verificationMethod: string;
+    /** Optional validity dates */
+    validFrom?: string;
+    validUntil?: string;
+    /** Optional name for the CLR */
+    name?: string;
+    /** Optional description */
+    description?: string;
+}
+/**
+ * The full CLR credential structure
+ */
+export interface ClrCredential {
+    '@context': string[];
+    type: ['VerifiableCredential', 'ClrCredential'];
+    id: string;
+    issuer: string | {
+        id: string;
+        [key: string]: unknown;
+    };
+    validFrom: string;
+    validUntil?: string;
+    name?: string;
+    description?: string;
+    credentialSubject: ClrSubject;
+    proof?: Record<string, unknown>;
+}
+/**
+ * Build the @context array for a CLR credential
+ */
+export declare function buildClrContexts(): string[];
+/**
+ * Validate a CLR credential structure
+ */
+export declare function validateClrCredential(credential: Partial<ClrCredential>): string[];

package/build/models/ClrCredential.js

@@ -0,0 +1,52 @@
+"use strict";
+/**
+ * CLR 2.0 (Comprehensive Learner Record) Credential Types
+ *
+ * A ClrCredential bundles multiple OpenBadgeCredentials into a single
+ * verifiable credential representing a learner's complete achievement record.
+ *
+ * Spec: https://www.imsglobal.org/spec/clr/v2p0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildClrContexts = buildClrContexts;
+exports.validateClrCredential = validateClrCredential;
+const constants_1 = require("../constants");
+/**
+ * Build the @context array for a CLR credential
+ */
+function buildClrContexts() {
+    return [constants_1.VC_V2_CONTEXT, constants_1.CLR_V2_CONTEXT];
+}
+/**
+ * Validate a CLR credential structure
+ */
+function validateClrCredential(credential) {
+    const errors = [];
+    // Check required fields
+    if (!credential['@context']) {
+        errors.push('Missing @context');
+    }
+    if (!credential.type?.includes('ClrCredential')) {
+        errors.push('type must include ClrCredential');
+    }
+    if (!credential.issuer) {
+        errors.push('Missing issuer');
+    }
+    if (!credential.credentialSubject) {
+        errors.push('Missing credentialSubject');
+    }
+    else {
+        const subject = credential.credentialSubject;
+        if (!subject.id) {
+            errors.push('credentialSubject.id is required');
+        }
+        if (subject.type !== 'ClrSubject') {
+            errors.push('credentialSubject.type must be ClrSubject');
+        }
+        if (!Array.isArray(subject.verifiableCredential) || subject.verifiableCredential.length === 0) {
+            errors.push('credentialSubject.verifiableCredential must be a non-empty array');
+        }
+    }
+    return errors;
+}
+//# sourceMappingURL=ClrCredential.js.map

package/build/models/ClrCredential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClrCredential.js","sourceRoot":"","sources":["../../src/models/ClrCredential.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AA8GH,4CAEC;AAKD,sDAmCC;AAtJD,4CAA4D;AAyG5D;;GAEG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,CAAC,yBAAa,EAAE,0BAAc,CAAC,CAAA;AACxC,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CAAC,UAAkC;IACtE,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,wBAAwB;IACxB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACjC,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAChD,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAC/B,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAwC,CAAA;QAEnE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;QACjD,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAA;QAC1D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9F,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAA;QACjF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/build/models/EndorsementCredential.d.ts

@@ -0,0 +1,89 @@
+/**
+ * EndorsementCredential Types
+ *
+ * EndorsementCredentials are third-party validation credentials used in OpenBadges 3.0
+ * to provide external endorsement of achievements, profiles, or other credentials.
+ *
+ * @see https://www.imsglobal.org/spec/ob/v3p0/#endorsementcredential
+ */
+/**
+ * The subject of an endorsement - what is being endorsed
+ */
+export interface EndorsementSubject {
+    /** The ID of the entity being endorsed (DID or URL) */
+    id: string;
+    /** Must be 'EndorsementSubject' */
+    type: 'EndorsementSubject';
+    /** Optional comment explaining the endorsement */
+    endorsementComment?: string;
+}
+/**
+ * Profile information for the endorser (issuer of the endorsement)
+ */
+export interface EndorserProfile {
+    /** DID or URL identifying the endorser */
+    id: string;
+    /** Must include 'Profile' */
+    type?: 'Profile' | ['Profile', ...string[]];
+    /** Name of the endorsing organization/individual */
+    name?: string;
+    /** Description of the endorser */
+    description?: string;
+    /** URL to the endorser's website */
+    url?: string;
+    /** Image representing the endorser */
+    image?: string | {
+        id: string;
+        type?: 'Image';
+    };
+    /** Email of the endorser */
+    email?: string;
+    /** Phone number of the endorser */
+    phone?: string;
+}
+/**
+ * Input for creating an EndorsementCredential
+ */
+export interface EndorsementCredentialInput {
+    /** The entity being endorsed (DID or URL) - becomes credentialSubject.id */
+    endorsedEntity: string;
+    /** Optional comment explaining the endorsement */
+    endorsementComment?: string;
+    /** Profile information for the endorser (becomes the issuer) */
+    issuerProfile: EndorserProfile;
+    /** Verification method ID for signing */
+    verificationMethod: string;
+    /** ISO 8601 date string when the endorsement becomes valid */
+    validFrom?: string;
+    /** ISO 8601 date string when the endorsement expires */
+    validUntil?: string;
+    /** Optional credential ID (auto-generated if not provided) */
+    id?: string;
+}
+/**
+ * Full EndorsementCredential structure (unsigned)
+ */
+export interface EndorsementCredential {
+    '@context': string[];
+    type: ['VerifiableCredential', 'EndorsementCredential'];
+    id: string;
+    issuer: EndorserProfile;
+    validFrom: string;
+    validUntil?: string;
+    credentialSubject: EndorsementSubject;
+}
+/**
+ * Signed EndorsementCredential with proof
+ */
+export interface SignedEndorsementCredential extends EndorsementCredential {
+    proof: {
+        type: string;
+        cryptosuite?: string;
+        created: string;
+        verificationMethod: string;
+        proofPurpose: string;
+        proofValue: string;
+        challenge?: string;
+        domain?: string;
+    };
+}

package/build/models/EndorsementCredential.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * EndorsementCredential Types
+ *
+ * EndorsementCredentials are third-party validation credentials used in OpenBadges 3.0
+ * to provide external endorsement of achievements, profiles, or other credentials.
+ *
+ * @see https://www.imsglobal.org/spec/ob/v3p0/#endorsementcredential
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=EndorsementCredential.js.map

package/build/models/EndorsementCredential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EndorsementCredential.js","sourceRoot":"","sources":["../../src/models/EndorsementCredential.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG"}