@bedrock/vc-delivery 6.3.0 → 6.4.0

package/lib/http.js

@@ -158,7 +158,7 @@ export async function addRoutes({app, service} = {}) {
           client_id: `${openIdRoute}/client/authorization/response`,
           request_uri: `${openIdRoute}/client/authorization/request`
         });
-        protocols.OID4VP = `openid4vp://authorize?${searchParams}`;
+        protocols.OID4VP = `openid4vp://?${searchParams}`;
       }
       res.json({protocols});
     }));

package/lib/oid4/http.js

@@ -60,6 +60,7 @@ export async function createRoutes({
     batchCredential: `${openIdRoute}/batch_credential`,
     credential: `${openIdRoute}/credential`,
     credentialOffer: `${openIdRoute}/credential-offer`,
+    nonce: `${openIdRoute}/nonce`,
     token: `${openIdRoute}/token`,
     jwks: `${openIdRoute}/jwks`,
     // OID4VP routes
@@ -264,6 +265,20 @@ export async function createRoutes({
       res.json(result);
     }));
 
+  // a credential delivery server endpoint
+  // serves a nonce to be used in OID4VCI proofs (if required)
+  app.options(routes.nonce, cors());
+  app.post(
+    routes.nonce,
+    cors(),
+    getExchange,
+    asyncHandler(async (req, res) => {
+      // serve exchange ID as nonce
+      const exchangeRecord = await req.getExchange();
+      const {exchange} = exchangeRecord;
+      res.json({c_nonce: exchange.id});
+    }));
+
   // a batch credential delivery server endpoint
   // receives N credential requests and returns N VCs
   app.options(routes.batchCredential, cors());

package/lib/oid4/oid4vci.js

@@ -36,14 +36,15 @@ export async function getCredentialIssuerConfig({req}) {
 
   const exchangeId = `${workflow.id}/exchanges/${exchange.id}`;
   return {
+    batch_credential_endpoint: `${exchangeId}/openid/batch_credential`,
+    credential_configurations_supported,
+    credential_endpoint: `${exchangeId}/openid/credential`,
     credential_issuer: exchangeId,
     issuer: exchangeId,
     jwks_uri: `${exchangeId}/openid/jwks`,
-    token_endpoint: `${exchangeId}/openid/token`,
-    credential_endpoint: `${exchangeId}/openid/credential`,
-    batch_credential_endpoint: `${exchangeId}/openid/batch_credential`,
     'pre-authorized_grant_anonymous_access_supported': true,
-    credential_configurations_supported
+    nonce_endpoint: `${exchangeId}/openid/nonce`,
+    token_endpoint: `${exchangeId}/openid/token`
   };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-delivery",
-  "version": "6.3.0",
+  "version": "6.4.0",
   "type": "module",
   "description": "Bedrock Verifiable Credential Delivery",
   "main": "./lib/index.js",