@bedrock/vc-delivery 7.17.1 → 7.18.0

package/lib/oid4/http.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2022-2026 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2022-2026 Digital Bazaar, Inc.
  */
 import * as oid4vci from './oid4vci.js';
 import * as oid4vp from './oid4vp.js';
@@ -439,6 +439,19 @@ function _normalizeCredentials({verifiablePresentation}) {
       vc.id?.startsWith('data:application/jwt,')) {
       return vc.id.slice('data:application/jwt,'.length);
     }
+    // parse any mdoc into its non-VC format (includes base64 => base64url)
+    if(vc.type === 'EnvelopedVerifiableCredential') {
+      if(vc.id?.startsWith('data:application/mdoc;base64,')) {
+        const buffer = Buffer.from(
+          vc.id.slice('data:application/mdoc;base64,'.length), 'base64');
+        return buffer.toString('base64url');
+      } else if(vc.id?.startsWith('data:application/mdl;base64,')) {
+        // deprecated `mdl` media type
+        const buffer = Buffer.from(
+          vc.id.slice('data:application/mdl;base64,'.length), 'base64');
+        return buffer.toString('base64url');
+      }
+    }
     return vc;
   });
 }

package/lib/oid4/oid4vp.js

@@ -199,8 +199,10 @@ export async function processAuthorizationResponse({req, clientProfileId}) {
       expectedDomain = verifyPresentationOptions.domain;
 
       const {envelope} = parseResponseResult;
-      if(envelope?.mediaType === 'application/mdl-vp-token') {
-        // generate `handover` for mDL verification
+      if(envelope?.mediaType === 'application/mdoc-vp-token' ||
+        // deprecated
+        envelope?.mediaType === 'application/mdl-vp-token') {
+        // generate `handover` for mdoc verification
         let handover;
 
         // common `handover` parameters:
@@ -244,11 +246,15 @@ export async function processAuthorizationResponse({req, clientProfileId}) {
           };
         }
 
-        verifyPresentationOptions.mdl = {
-          ...verifyPresentationOptions.mdl,
-          // send encoded mDL `sessionTranscript`
+        // handle deprecated `mdl` option; `mdoc` is preferred
+        const mdocKey = envelope.mediaType === 'application/mdoc-vp-token' ?
+          'mdoc' : 'mdl';
+
+        verifyPresentationOptions[mdocKey] = {
+          ...verifyPresentationOptions[mdocKey],
+          // send encoded mdoc `sessionTranscript`
           sessionTranscript: Buffer
-            .from(await oid4vp.mdl.encodeSessionTranscript({handover}))
+            .from(await oid4vp.mdoc.encodeSessionTranscript({handover}))
             .toString('base64url')
         };
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-delivery",
-  "version": "7.17.1",
+  "version": "7.18.0",
   "type": "module",
   "description": "Bedrock Verifiable Credential Delivery",
   "main": "./lib/index.js",
@@ -39,8 +39,8 @@
     "@digitalbazaar/ed25519-multikey": "^1.3.1",
     "@digitalbazaar/ed25519-signature-2020": "^5.4.0",
     "@digitalbazaar/ezcap": "^4.1.0",
-    "@digitalbazaar/http-client": "^4.2.0",
-    "@digitalbazaar/oid4-client": "^5.12.1",
+    "@digitalbazaar/http-client": "^4.4.0",
+    "@digitalbazaar/oid4-client": "^5.14.0",
     "@digitalbazaar/vc": "^7.2.0",
     "@digitalbazaar/webkms-client": "^14.2.0",
     "assert-plus": "^1.0.0",
@@ -48,7 +48,7 @@
     "body-parser": "^1.20.3",
     "cors": "^2.8.5",
     "delay": "^7.0.0",
-    "jose": "^6.1.0",
+    "jose": "^6.2.10",
     "json-pointer": "^0.6.2",
     "jsonata": "^2.0.6",
     "serialize-error": "^12.0.0"