@bedrock/vc-delivery 6.3.1 → 6.4.1

package/lib/oid4/http.js

@@ -60,6 +60,7 @@ export async function createRoutes({
     batchCredential: `${openIdRoute}/batch_credential`,
     credential: `${openIdRoute}/credential`,
     credentialOffer: `${openIdRoute}/credential-offer`,
+    nonce: `${openIdRoute}/nonce`,
     token: `${openIdRoute}/token`,
     jwks: `${openIdRoute}/jwks`,
     // OID4VP routes
@@ -264,6 +265,20 @@ export async function createRoutes({
       res.json(result);
     }));
 
+  // a credential delivery server endpoint
+  // serves a nonce to be used in OID4VCI proofs (if required)
+  app.options(routes.nonce, cors());
+  app.post(
+    routes.nonce,
+    cors(),
+    getExchange,
+    asyncHandler(async (req, res) => {
+      // serve exchange ID as nonce
+      const exchangeRecord = await req.getExchange();
+      const {exchange} = exchangeRecord;
+      res.json({c_nonce: exchange.id});
+    }));
+
   // a batch credential delivery server endpoint
   // receives N credential requests and returns N VCs
   app.options(routes.batchCredential, cors());

package/lib/oid4/oid4vci.js

@@ -36,14 +36,15 @@ export async function getCredentialIssuerConfig({req}) {
 
   const exchangeId = `${workflow.id}/exchanges/${exchange.id}`;
   return {
+    batch_credential_endpoint: `${exchangeId}/openid/batch_credential`,
+    credential_configurations_supported,
+    credential_endpoint: `${exchangeId}/openid/credential`,
     credential_issuer: exchangeId,
     issuer: exchangeId,
     jwks_uri: `${exchangeId}/openid/jwks`,
-    token_endpoint: `${exchangeId}/openid/token`,
-    credential_endpoint: `${exchangeId}/openid/credential`,
-    batch_credential_endpoint: `${exchangeId}/openid/batch_credential`,
     'pre-authorized_grant_anonymous_access_supported': true,
-    credential_configurations_supported
+    nonce_endpoint: `${exchangeId}/openid/nonce`,
+    token_endpoint: `${exchangeId}/openid/token`
   };
 }
 

package/lib/vcapi.js

@@ -223,9 +223,20 @@ export async function processExchange({req, res, workflow, exchangeRecord}) {
           break;
         }
 
+        // FIXME: remove this once the other FIXME below is implemented
+        // and provides support for issuance in non-last step
+        if(step.issueRequests?.length > 0) {
+          throw new BedrockError(
+            'Invalid step detected; continuing exchanges currently must ' +
+            'only issue in the final step.', {
+              name: 'DataError',
+              details: {httpStatusCode: 500, public: true}
+            });
+        }
+
         // update the exchange to go to the next step, then loop to send
         // next VPR
-        currentStep = exchange.step = step.nextStep;
+        exchange.step = step.nextStep;
         // ensure exchange state is active
         if(exchange.state === 'pending') {
           exchange.state = 'active';
@@ -249,6 +260,7 @@ export async function processExchange({req, res, workflow, exchangeRecord}) {
             details: {httpStatusCode: 500, public: true}
           });
       }
+      currentStep = step.nextStep;
     }
 
     // mark exchange complete

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-delivery",
-  "version": "6.3.1",
+  "version": "6.4.1",
   "type": "module",
   "description": "Bedrock Verifiable Credential Delivery",
   "main": "./lib/index.js",