@bedrock/vc-delivery 7.11.0 → 7.11.2

package/lib/oid4/authorizationRequest.js

@@ -3,7 +3,7 @@
  */
 import * as bedrock from '@bedrock/core';
 import {AsymmetricKey, KmsClient} from '@digitalbazaar/webkms-client';
-import {exportJWK, generateKeyPair, UnsecuredJWT} from 'jose';
+import {exportJWK, generateKeyPair} from 'jose';
 import {oid4vp, signJWT} from '@digitalbazaar/oid4-client';
 import {getClientBaseUrl} from './clientProfiles.js';
 import {getZcapClient} from '../helpers.js';
@@ -12,6 +12,9 @@ import {randomUUID} from 'node:crypto';
 
 const {util: {BedrockError}} = bedrock;
 
+const OID4VP_JWT_TYP = 'oauth-authz-req+jwt';
+const TEXT_ENCODER = new TextEncoder();
+
 export async function create({
   workflow, exchange,
   clientProfile, clientProfileId,
@@ -92,8 +95,18 @@ export async function encode({
     return _createJwt({workflow, clientProfile, authorizationRequest});
   }
 
-  // construct authz request as unsecured JWT
-  return new UnsecuredJWT(authorizationRequest).encode();
+  // construct authz request as unsecured JWT with `typ` header set
+  // to `OID4VP_JWT_TYP` value; note that the `UnsecuredJWT` API from `jose`
+  // cannot be used because it does not allow customization of the JWT header
+  // which is required to comply with OID4VP 1.0
+  const header = Buffer
+    .from(JSON.stringify({alg: 'none', typ: OID4VP_JWT_TYP}), 'utf8')
+    .toString('base64url');
+  const payload = Buffer
+    .from(TEXT_ENCODER.encode(JSON.stringify(authorizationRequest)))
+    .toString('base64url');
+  const jwt = `${header}.${payload}.`;
+  return jwt;
 }
 
 async function _createClientMetaData({
@@ -229,7 +242,7 @@ async function _createJwt({workflow, clientProfile, authorizationRequest}) {
     const payload = {
       ...authorizationRequest
     };
-    const protectedHeader = {typ: 'JWT', alg: 'ES256', kid, x5c};
+    const protectedHeader = {typ: OID4VP_JWT_TYP, alg: 'ES256', kid, x5c};
 
     // create the JWT
     return signJWT({payload, protectedHeader, signer});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-delivery",
-  "version": "7.11.0",
+  "version": "7.11.2",
   "type": "module",
   "description": "Bedrock Verifiable Credential Delivery",
   "main": "./lib/index.js",