@bedrock/vc-delivery 5.1.0 → 5.2.0

package/lib/oid4/http.js

@@ -54,6 +54,7 @@ export async function createRoutes({
     ciMetadata2: `${exchangeRoute}/.well-known/openid-credential-issuer`,
     batchCredential: `${openIdRoute}/batch_credential`,
     credential: `${openIdRoute}/credential`,
+    credentialOffer: `${openIdRoute}/credential-offer`,
     token: `${openIdRoute}/token`,
     jwks: `${openIdRoute}/jwks`,
     // OID4VP routes
@@ -217,6 +218,18 @@ export async function createRoutes({
       });
     }));
 
+  // a credential delivery server endpoint
+  // serves the credential offer for all possible credentials in the exchange
+  app.get(
+    routes.credentialOffer,
+    cors(),
+    getConfigMiddleware,
+    getExchange,
+    asyncHandler(async (req, res) => {
+      const offer = await oid4vci.getCredentialOffer({req});
+      res.json(offer);
+    }));
+
   // a batch credential delivery server endpoint
   // receives N credential requests and returns N VCs
   app.options(routes.batchCredential, cors());

package/lib/oid4/oid4vci.js

@@ -30,22 +30,8 @@ export async function getCredentialIssuerConfig({req}) {
   const {exchange} = await req.getExchange();
   _assertOID4VCISupported({exchange});
 
-  // build `credential_configurations_supported`...
-  const {openId: {expectedCredentialRequests}} = exchange;
-  const supportedFormats = [..._getSupportedFormats({workflow})];
-
-  // for every expected credential definition, set `format` default to
-  // `supportedFormats` and for every format, generate a new supported
-  // credential configuration
-  const credential_configurations_supported = {};
-  for(const credentialRequest of expectedCredentialRequests) {
-    const configurations = _createCredentialConfigurations({
-      credentialRequest, supportedFormats
-    });
-    for(const {id, configuration} of configurations) {
-      credential_configurations_supported[id] = configuration;
-    }
-  }
+  const credential_configurations_supported =
+    _createCredentialConfigurationsSupported({workflow, exchange});
 
   const exchangeId = `${workflow.id}/exchanges/${exchange.id}`;
   return {
@@ -60,6 +46,35 @@ export async function getCredentialIssuerConfig({req}) {
   };
 }
 
+export async function getCredentialOffer({req}) {
+  const {config: workflow} = req.serviceObject;
+  const {exchange} = await req.getExchange();
+  _assertOID4VCISupported({exchange});
+
+  // start building OID4VCI credential offer
+  const exchangeId = `${workflow.id}/exchanges/${exchange.id}`;
+  const offer = {
+    credential_issuer: exchangeId,
+    grants: {
+      'urn:ietf:params:oauth:grant-type:pre-authorized_code': {
+        'pre-authorized_code': exchange.openId.preAuthorizedCode
+      }
+    }
+  };
+
+  const supported = _createCredentialConfigurationsSupported({
+    workflow, exchange
+  });
+
+  // offer all configuration IDs and support both spec version ID-1 with
+  // `credentials` and draft 14 with `credential_configuration_ids`
+  const configurationIds = Object.keys(supported);
+  offer.credentials = configurationIds;
+  offer.credential_configuration_ids = configurationIds;
+
+  return offer;
+}
+
 export async function getJwks({req}) {
   const {exchange} = await req.getExchange();
   _assertOID4VCISupported({exchange});
@@ -411,6 +426,27 @@ function _createCredentialConfigurations({
   return configurations;
 }
 
+function _createCredentialConfigurationsSupported({workflow, exchange}) {
+  // build `credential_configurations_supported`...
+  const {openId: {expectedCredentialRequests}} = exchange;
+  const supportedFormats = [..._getSupportedFormats({workflow})];
+
+  // for every expected credential definition, set `format` default to
+  // `supportedFormats` and for every format, generate a new supported
+  // credential configuration
+  const credential_configurations_supported = {};
+  for(const credentialRequest of expectedCredentialRequests) {
+    const configurations = _createCredentialConfigurations({
+      credentialRequest, supportedFormats
+    });
+    for(const {id, configuration} of configurations) {
+      credential_configurations_supported[id] = configuration;
+    }
+  }
+
+  return credential_configurations_supported;
+}
+
 function _getAlgFromPrivateKey({privateKeyJwk}) {
   if(privateKeyJwk.alg) {
     return privateKeyJwk.alg;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-delivery",
-  "version": "5.1.0",
+  "version": "5.2.0",
   "type": "module",
   "description": "Bedrock Verifiable Credential Delivery",
   "main": "./lib/index.js",