@bedrock/vc-delivery 5.3.5 → 5.4.0

package/lib/oid4/http.js

@@ -203,28 +203,33 @@ export async function createRoutes({
         return;
       }
 
-      /* Note: The `/credential` route only supports sending a single VC;
-      assume here that this workflow is configured for a single VC and an
-      error code would have been sent to the client to use the batch
-      endpoint if there was more than one VC to deliver. */
-      const {response, format} = result;
-      const {verifiablePresentation: {verifiableCredential: [vc]}} = response;
+      // send VC(s)
+      const {
+        response: {verifiablePresentation: {verifiableCredential}},
+        format
+      } = result;
+      // FIXME: "format" doesn't seem to be in the spec anymore (draft 14+)...
+      const credentials = verifiableCredential.map(vc => {
+        // parse any enveloped VC
+        let credential;
+        if(vc.type === 'EnvelopedVerifiableCredential' &&
+          vc.id?.startsWith('data:application/jwt,')) {
+          credential = vc.id.slice('data:application/jwt,'.length);
+        } else {
+          credential = vc;
+        }
+        return credential;
+      });
 
-      // parse any enveloped VC
-      let credential;
-      if(vc.type === 'EnvelopedVerifiableCredential' &&
-        vc.id?.startsWith('data:application/jwt,')) {
-        credential = vc.id.slice('data:application/jwt,'.length);
-      } else {
-        credential = vc;
-      }
+      /* Note: The `/credential` route only supports sending VCs of the same
+      type, but there can be more than one of them. The above `isBatchRequest`
+      check will ensure that the workflow used here only allows a single
+      credential request, indicating a single type. */
 
       // send OID4VCI response
-      res.json({
-        // FIXME: this doesn't seem to be in the spec anymore (draft 14+)...
-        format,
-        credential
-      });
+      const response = credentials.length === 1 ?
+        {format, credential: credentials[0]} : {format, credentials};
+      res.json(response);
     }));
 
   // a credential delivery server endpoint

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-delivery",
-  "version": "5.3.5",
+  "version": "5.4.0",
   "type": "module",
   "description": "Bedrock Verifiable Credential Delivery",
   "main": "./lib/index.js",