@bifold/core 1.0.0

package/lib/module/modules/openid/offerResolve.js

@@ -0,0 +1,179 @@
+import { OpenId4VciCredentialFormatProfile } from '@credo-ts/openid4vc';
+import { DidJwk, DidKey, getJwkFromKey, JwaSignatureAlgorithm, KeyBackend, Mdoc, MdocRecord, SdJwtVcRecord, W3cCredentialRecord } from '@credo-ts/core';
+import { extractOpenId4VcCredentialMetadata, setOpenId4VcCredentialMetadata } from './metadata';
+export const resolveOpenId4VciOffer = async ({
+  agent,
+  data,
+  uri,
+  authorization
+}) => {
+  let offerUri = uri;
+  if (!offerUri && data) {
+    // FIXME: Credo only support credential offer string, but we already parsed it before. So we construct an offer here
+    // but in the future we need to support the parsed offer in Credo directly
+    offerUri = `openid-credential-offer://credential_offer=${encodeURIComponent(JSON.stringify(data))}`;
+  } else if (!offerUri) {
+    throw new Error('either data or uri must be provided');
+  }
+  agent.config.logger.info(`Receiving openid uri ${offerUri}`, {
+    offerUri,
+    data: data,
+    uri: offerUri
+  });
+  const resolvedCredentialOffer = await agent.modules.openId4VcHolder.resolveCredentialOffer(offerUri);
+  if (authorization) {
+    throw new Error('Authorization flow is not supported yet as of Credo 0.5.13');
+  }
+  return resolvedCredentialOffer;
+};
+export async function acquirePreAuthorizedAccessToken({
+  agent,
+  resolvedCredentialOffer,
+  txCode
+}) {
+  return await agent.modules.openId4VcHolder.requestToken({
+    resolvedCredentialOffer,
+    txCode
+  });
+}
+export const customCredentialBindingResolver = async ({
+  agent,
+  supportedDidMethods,
+  keyType,
+  supportsAllDidMethods,
+  supportsJwk,
+  credentialFormat,
+  supportedCredentialId,
+  resolvedCredentialOffer,
+  pidSchemes
+}) => {
+  // First, we try to pick a did method
+  // Prefer did:jwk, otherwise use did:key, otherwise use undefined
+  let didMethod = supportsAllDidMethods || supportedDidMethods !== null && supportedDidMethods !== void 0 && supportedDidMethods.includes('did:jwk') ? 'jwk' : supportedDidMethods !== null && supportedDidMethods !== void 0 && supportedDidMethods.includes('did:key') ? 'key' : undefined;
+
+  // If supportedDidMethods is undefined, and supportsJwk is false, we will default to did:key
+  // this is important as part of MATTR launchpad support which MUST use did:key but doesn't
+  // define which did methods they support
+  if (!supportedDidMethods && !supportsJwk) {
+    didMethod = 'key';
+  }
+  const offeredCredentialConfiguration = supportedCredentialId ? resolvedCredentialOffer.offeredCredentialConfigurations[supportedCredentialId] : undefined;
+  const shouldKeyBeHardwareBackedForMsoMdoc = (offeredCredentialConfiguration === null || offeredCredentialConfiguration === void 0 ? void 0 : offeredCredentialConfiguration.format) === OpenId4VciCredentialFormatProfile.MsoMdoc && (pidSchemes === null || pidSchemes === void 0 ? void 0 : pidSchemes.msoMdocDoctypes.includes(offeredCredentialConfiguration.doctype));
+  const shouldKeyBeHardwareBackedForSdJwtVc = (offeredCredentialConfiguration === null || offeredCredentialConfiguration === void 0 ? void 0 : offeredCredentialConfiguration.format) === 'vc+sd-jwt' && (pidSchemes === null || pidSchemes === void 0 ? void 0 : pidSchemes.sdJwtVcVcts.includes(offeredCredentialConfiguration.vct));
+  const shouldKeyBeHardwareBacked = shouldKeyBeHardwareBackedForSdJwtVc || shouldKeyBeHardwareBackedForMsoMdoc;
+  if (!keyType) {
+    throw new Error('keyType is required!');
+  }
+  const key = await agent.wallet.createKey({
+    keyType,
+    keyBackend: shouldKeyBeHardwareBacked ? KeyBackend.SecureElement : KeyBackend.Software
+  });
+  if (didMethod) {
+    const didResult = await agent.dids.create({
+      method: didMethod,
+      options: {
+        key
+      }
+    });
+    if (didResult.didState.state !== 'finished') {
+      throw new Error('DID creation failed.');
+    }
+    let verificationMethodId;
+    if (didMethod === 'jwk') {
+      const didJwk = DidJwk.fromDid(didResult.didState.did);
+      verificationMethodId = didJwk.verificationMethodId;
+    } else {
+      const didKey = DidKey.fromDid(didResult.didState.did);
+      verificationMethodId = `${didKey.did}#${didKey.key.fingerprint}`;
+    }
+    return {
+      didUrl: verificationMethodId,
+      method: 'did'
+    };
+  }
+
+  // Otherwise we also support plain jwk for sd-jwt only
+  if (supportsJwk && (credentialFormat === OpenId4VciCredentialFormatProfile.SdJwtVc || credentialFormat === OpenId4VciCredentialFormatProfile.MsoMdoc)) {
+    return {
+      method: 'jwk',
+      jwk: getJwkFromKey(key)
+    };
+  }
+  throw new Error(`No supported binding method could be found. Supported methods are did:key and did:jwk, or plain jwk for sd-jwt/mdoc. Issuer supports ${supportsJwk ? 'jwk, ' : ''}${(supportedDidMethods === null || supportedDidMethods === void 0 ? void 0 : supportedDidMethods.join(', ')) ?? 'Unknown'}`);
+};
+export const receiveCredentialFromOpenId4VciOffer = async ({
+  agent,
+  resolvedCredentialOffer,
+  accessToken,
+  credentialConfigurationIdsToRequest,
+  clientId,
+  pidSchemes
+}) => {
+  const offeredCredentialsToRequest = credentialConfigurationIdsToRequest ? resolvedCredentialOffer.offeredCredentials.filter(offered => credentialConfigurationIdsToRequest.includes(offered.id)) : [resolvedCredentialOffer.offeredCredentials[0]];
+  if (offeredCredentialsToRequest.length === 0) {
+    throw new Error(`Parameter 'credentialConfigurationIdsToRequest' with values ${credentialConfigurationIdsToRequest} is not a credential_configuration_id in the credential offer.`);
+  }
+  const credentials = await agent.modules.openId4VcHolder.requestCredentials({
+    resolvedCredentialOffer,
+    ...accessToken,
+    clientId,
+    credentialsToRequest: credentialConfigurationIdsToRequest,
+    verifyCredentialStatus: false,
+    allowedProofOfPossessionSignatureAlgorithms: [
+    // NOTE: MATTR launchpad for JFF MUST use EdDSA. So it is important that the default (first allowed one)
+    // is EdDSA. The list is ordered by preference, so if no suites are defined by the issuer, the first one
+    // will be used
+    JwaSignatureAlgorithm.EdDSA, JwaSignatureAlgorithm.ES256],
+    credentialBindingResolver: async ({
+      supportedDidMethods,
+      keyType,
+      supportsAllDidMethods,
+      supportsJwk,
+      credentialFormat,
+      supportedCredentialId
+    }) => {
+      return customCredentialBindingResolver({
+        agent,
+        supportedDidMethods,
+        keyType,
+        supportsAllDidMethods,
+        supportsJwk,
+        credentialFormat,
+        supportedCredentialId,
+        resolvedCredentialOffer,
+        pidSchemes
+      });
+    }
+  });
+
+  // We only support one credential for now
+  const [firstCredential] = credentials;
+  if (!firstCredential) throw new Error('Error retrieving credential using pre authorized flow: firstCredential undefined!.');
+  let record;
+  if (typeof firstCredential === 'string') {
+    throw new Error('Error retrieving credential using pre authorized flow: firstCredential is string.');
+  }
+  if ('compact' in firstCredential.credential) {
+    // TODO: add claimFormat to SdJwtVc
+    record = new SdJwtVcRecord({
+      compactSdJwtVc: firstCredential.credential.compact
+    });
+  } else if (firstCredential.credential instanceof Mdoc) {
+    record = new MdocRecord({
+      mdoc: firstCredential.credential
+    });
+  } else {
+    record = new W3cCredentialRecord({
+      credential: firstCredential.credential,
+      // We don't support expanded types right now, but would become problem when we support JSON-LD
+      tags: {}
+    });
+  }
+  const openId4VcMetadata = extractOpenId4VcCredentialMetadata(resolvedCredentialOffer.offeredCredentials[0], {
+    id: resolvedCredentialOffer.metadata.issuer,
+    display: resolvedCredentialOffer.metadata.credentialIssuerMetadata.display
+  });
+  setOpenId4VcCredentialMetadata(record, openId4VcMetadata);
+  return record;
+};
+//# sourceMappingURL=offerResolve.js.map

package/lib/module/modules/openid/offerResolve.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["OpenId4VciCredentialFormatProfile","DidJwk","DidKey","getJwkFromKey","JwaSignatureAlgorithm","KeyBackend","Mdoc","MdocRecord","SdJwtVcRecord","W3cCredentialRecord","extractOpenId4VcCredentialMetadata","setOpenId4VcCredentialMetadata","resolveOpenId4VciOffer","agent","data","uri","authorization","offerUri","encodeURIComponent","JSON","stringify","Error","config","logger","info","resolvedCredentialOffer","modules","openId4VcHolder","resolveCredentialOffer","acquirePreAuthorizedAccessToken","txCode","requestToken","customCredentialBindingResolver","supportedDidMethods","keyType","supportsAllDidMethods","supportsJwk","credentialFormat","supportedCredentialId","pidSchemes","didMethod","includes","undefined","offeredCredentialConfiguration","offeredCredentialConfigurations","shouldKeyBeHardwareBackedForMsoMdoc","format","MsoMdoc","msoMdocDoctypes","doctype","shouldKeyBeHardwareBackedForSdJwtVc","sdJwtVcVcts","vct","shouldKeyBeHardwareBacked","key","wallet","createKey","keyBackend","SecureElement","Software","didResult","dids","create","method","options","didState","state","verificationMethodId","didJwk","fromDid","did","didKey","fingerprint","didUrl","SdJwtVc","jwk","join","receiveCredentialFromOpenId4VciOffer","accessToken","credentialConfigurationIdsToRequest","clientId","offeredCredentialsToRequest","offeredCredentials","filter","offered","id","length","credentials","requestCredentials","credentialsToRequest","verifyCredentialStatus","allowedProofOfPossessionSignatureAlgorithms","EdDSA","ES256","credentialBindingResolver","firstCredential","record","credential","compactSdJwtVc","compact","mdoc","tags","openId4VcMetadata","metadata","issuer","display","credentialIssuerMetadata"],"sourceRoot":"../../../../src","sources":["modules/openid/offerResolve.tsx"],"mappings":"AAAA,SAGEA,iCAAiC,QAI5B,qBAAqB;AAC5B,SAEEC,MAAM,EACNC,MAAM,EACNC,aAAa,EACbC,qBAAqB,EAErBC,UAAU,EAEVC,IAAI,EACJC,UAAU,EACVC,aAAa,EACbC,mBAAmB,QAGd,gBAAgB;AACvB,SAASC,kCAAkC,EAAEC,8BAA8B,QAAQ,YAAY;AAE/F,OAAO,MAAMC,sBAAsB,GAAG,MAAAA,CAAO;EAC3CC,KAAK;EACLC,IAAI;EACJC,GAAG;EACHC;AAQF,CAAC,KAAiD;EAChD,IAAIC,QAAQ,GAAGF,GAAG;EAElB,IAAI,CAACE,QAAQ,IAAIH,IAAI,EAAE;IACrB;IACA;IACAG,QAAQ,GAAG,8CAA8CC,kBAAkB,CAACC,IAAI,CAACC,SAAS,CAACN,IAAI,CAAC,CAAC,EAAE;EACrG,CAAC,MAAM,IAAI,CAACG,QAAQ,EAAE;IACpB,MAAM,IAAII,KAAK,CAAC,qCAAqC,CAAC;EACxD;EAEAR,KAAK,CAACS,MAAM,CAACC,MAAM,CAACC,IAAI,CAAC,wBAAwBP,QAAQ,EAAE,EAAE;IAC3DA,QAAQ;IACRH,IAAI,EAAEA,IAAI;IACVC,GAAG,EAAEE;EACP,CAAC,CAAC;EAEF,MAAMQ,uBAAuB,GAAG,MAAMZ,KAAK,CAACa,OAAO,CAACC,eAAe,CAACC,sBAAsB,CAACX,QAAQ,CAAC;EAEpG,IAAID,aAAa,EAAE;IACjB,MAAM,IAAIK,KAAK,CAAC,4DAA4D,CAAC;EAC/E;EAEA,OAAOI,uBAAuB;AAChC,CAAC;AAED,OAAO,eAAeI,+BAA+BA,CAAC;EACpDhB,KAAK;EACLY,uBAAuB;EACvBK;AAKF,CAAC,EAAE;EACD,OAAO,MAAMjB,KAAK,CAACa,OAAO,CAACC,eAAe,CAACI,YAAY,CAAC;IACtDN,uBAAuB;IACvBK;EACF,CAAC,CAAC;AACJ;AAEA,OAAO,MAAME,+BAA+B,GAAG,MAAAA,CAAO;EACpDnB,KAAK;EACLoB,mBAAmB;EACnBC,OAAO;EACPC,qBAAqB;EACrBC,WAAW;EACXC,gBAAgB;EAChBC,qBAAqB;EACrBb,uBAAuB;EACvBc;AAKF,CAAC,KAAgD;EAC/C;EACA;EACA,IAAIC,SAAoC,GACtCL,qBAAqB,IAAIF,mBAAmB,aAAnBA,mBAAmB,eAAnBA,mBAAmB,CAAEQ,QAAQ,CAAC,SAAS,CAAC,GAC7D,KAAK,GACLR,mBAAmB,aAAnBA,mBAAmB,eAAnBA,mBAAmB,CAAEQ,QAAQ,CAAC,SAAS,CAAC,GACxC,KAAK,GACLC,SAAS;;EAEf;EACA;EACA;EACA,IAAI,CAACT,mBAAmB,IAAI,CAACG,WAAW,EAAE;IACxCI,SAAS,GAAG,KAAK;EACnB;EAEA,MAAMG,8BAA8B,GAAGL,qBAAqB,GACxDb,uBAAuB,CAACmB,+BAA+B,CAACN,qBAAqB,CAAC,GAC9EI,SAAS;EAEb,MAAMG,mCAAmC,GACvC,CAAAF,8BAA8B,aAA9BA,8BAA8B,uBAA9BA,8BAA8B,CAAEG,MAAM,MAAK9C,iCAAiC,CAAC+C,OAAO,KACpFR,UAAU,aAAVA,UAAU,uBAAVA,UAAU,CAAES,eAAe,CAACP,QAAQ,CAACE,8BAA8B,CAACM,OAAO,CAAC;EAE9E,MAAMC,mCAAmC,GACvC,CAAAP,8BAA8B,aAA9BA,8BAA8B,uBAA9BA,8BAA8B,CAAEG,MAAM,MAAK,WAAW,KACtDP,UAAU,aAAVA,UAAU,uBAAVA,UAAU,CAAEY,WAAW,CAACV,QAAQ,CAACE,8BAA8B,CAACS,GAAG,CAAC;EAEtE,MAAMC,yBAAyB,GAAGH,mCAAmC,IAAIL,mCAAmC;EAE5G,IAAI,CAACX,OAAO,EAAE;IACZ,MAAM,IAAIb,KAAK,CAAC,sBAAsB,CAAC;EACzC;EAEA,MAAMiC,GAAG,GAAG,MAAMzC,KAAK,CAAC0C,MAAM,CAACC,SAAS,CAAC;IACvCtB,OAAO;IACPuB,UAAU,EAAEJ,yBAAyB,GAAGhD,UAAU,CAACqD,aAAa,GAAGrD,UAAU,CAACsD;EAChF,CAAC,CAAC;EAEF,IAAInB,SAAS,EAAE;IACb,MAAMoB,SAAS,GAAG,MAAM/C,KAAK,CAACgD,IAAI,CAACC,MAAM,CAA4C;MACnFC,MAAM,EAAEvB,SAAS;MACjBwB,OAAO,EAAE;QACPV;MACF;IACF,CAAC,CAAC;IAEF,IAAIM,SAAS,CAACK,QAAQ,CAACC,KAAK,KAAK,UAAU,EAAE;MAC3C,MAAM,IAAI7C,KAAK,CAAC,sBAAsB,CAAC;IACzC;IAEA,IAAI8C,oBAA4B;IAChC,IAAI3B,SAAS,KAAK,KAAK,EAAE;MACvB,MAAM4B,MAAM,GAAGnE,MAAM,CAACoE,OAAO,CAACT,SAAS,CAACK,QAAQ,CAACK,GAAG,CAAC;MACrDH,oBAAoB,GAAGC,MAAM,CAACD,oBAAoB;IACpD,CAAC,MAAM;MACL,MAAMI,MAAM,GAAGrE,MAAM,CAACmE,OAAO,CAACT,SAAS,CAACK,QAAQ,CAACK,GAAG,CAAC;MACrDH,oBAAoB,GAAG,GAAGI,MAAM,CAACD,GAAG,IAAIC,MAAM,CAACjB,GAAG,CAACkB,WAAW,EAAE;IAClE;IAEA,OAAO;MACLC,MAAM,EAAEN,oBAAoB;MAC5BJ,MAAM,EAAE;IACV,CAAC;EACH;;EAEA;EACA,IACE3B,WAAW,KACVC,gBAAgB,KAAKrC,iCAAiC,CAAC0E,OAAO,IAC7DrC,gBAAgB,KAAKrC,iCAAiC,CAAC+C,OAAO,CAAC,EACjE;IACA,OAAO;MACLgB,MAAM,EAAE,KAAK;MACbY,GAAG,EAAExE,aAAa,CAACmD,GAAG;IACxB,CAAC;EACH;EAEA,MAAM,IAAIjC,KAAK,CACb,wIACEe,WAAW,GAAG,OAAO,GAAG,EAAE,GACzB,CAAAH,mBAAmB,aAAnBA,mBAAmB,uBAAnBA,mBAAmB,CAAE2C,IAAI,CAAC,IAAI,CAAC,KAAI,SAAS,EACjD,CAAC;AACH,CAAC;AAED,OAAO,MAAMC,oCAAoC,GAAG,MAAAA,CAAO;EACzDhE,KAAK;EACLY,uBAAuB;EACvBqD,WAAW;EACXC,mCAAmC;EACnCC,QAAQ;EACRzC;AAQF,CAAC,KAAK;EACJ,MAAM0C,2BAA2B,GAAGF,mCAAmC,GACnEtD,uBAAuB,CAACyD,kBAAkB,CAACC,MAAM,CAAEC,OAAO,IACxDL,mCAAmC,CAACtC,QAAQ,CAAC2C,OAAO,CAACC,EAAE,CACzD,CAAC,GACD,CAAC5D,uBAAuB,CAACyD,kBAAkB,CAAC,CAAC,CAAC,CAAC;EAEnD,IAAID,2BAA2B,CAACK,MAAM,KAAK,CAAC,EAAE;IAC5C,MAAM,IAAIjE,KAAK,CACb,+DAA+D0D,mCAAmC,gEACpG,CAAC;EACH;EAEA,MAAMQ,WAAW,GAAG,MAAM1E,KAAK,CAACa,OAAO,CAACC,eAAe,CAAC6D,kBAAkB,CAAC;IACzE/D,uBAAuB;IACvB,GAAGqD,WAAW;IACdE,QAAQ;IACRS,oBAAoB,EAAEV,mCAAmC;IACzDW,sBAAsB,EAAE,KAAK;IAC7BC,2CAA2C,EAAE;IAC3C;IACA;IACA;IACAvF,qBAAqB,CAACwF,KAAK,EAC3BxF,qBAAqB,CAACyF,KAAK,CAC5B;IACDC,yBAAyB,EAAE,MAAAA,CAAO;MAChC7D,mBAAmB;MACnBC,OAAO;MACPC,qBAAqB;MACrBC,WAAW;MACXC,gBAAgB;MAChBC;IACkC,CAAC,KAAK;MACxC,OAAON,+BAA+B,CAAC;QACrCnB,KAAK;QACLoB,mBAAmB;QACnBC,OAAO;QACPC,qBAAqB;QACrBC,WAAW;QACXC,gBAAgB;QAChBC,qBAAqB;QACrBb,uBAAuB;QACvBc;MACF,CAAC,CAAC;IACJ;EACF,CAAC,CAAC;;EAEF;EACA,MAAM,CAACwD,eAAe,CAAC,GAAGR,WAAW;EACrC,IAAI,CAACQ,eAAe,EAClB,MAAM,IAAI1E,KAAK,CAAC,oFAAoF,CAAC;EAEvG,IAAI2E,MAAwD;EAE5D,IAAI,OAAOD,eAAe,KAAK,QAAQ,EAAE;IACvC,MAAM,IAAI1E,KAAK,CAAC,mFAAmF,CAAC;EACtG;EAEA,IAAI,SAAS,IAAI0E,eAAe,CAACE,UAAU,EAAE;IAC3C;IACAD,MAAM,GAAG,IAAIxF,aAAa,CAAC;MACzB0F,cAAc,EAAEH,eAAe,CAACE,UAAU,CAACE;IAC7C,CAAC,CAAC;EACJ,CAAC,MAAM,IAAIJ,eAAe,CAACE,UAAU,YAAY3F,IAAI,EAAE;IACrD0F,MAAM,GAAG,IAAIzF,UAAU,CAAC;MACtB6F,IAAI,EAAEL,eAAe,CAACE;IACxB,CAAC,CAAC;EACJ,CAAC,MAAM;IACLD,MAAM,GAAG,IAAIvF,mBAAmB,CAAC;MAC/BwF,UAAU,EAAEF,eAAe,CAACE,UAAwE;MACpG;MACAI,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;EACJ;EAEA,MAAMC,iBAAiB,GAAG5F,kCAAkC,CAC1De,uBAAuB,CAACyD,kBAAkB,CAAC,CAAC,CAAC,EAC7C;IACEG,EAAE,EAAE5D,uBAAuB,CAAC8E,QAAQ,CAACC,MAAM;IAC3CC,OAAO,EAAEhF,uBAAuB,CAAC8E,QAAQ,CAACG,wBAAwB,CAACD;EACrE,CACF,CAAC;EAED9F,8BAA8B,CAACqF,MAAM,EAAEM,iBAAiB,CAAC;EAEzD,OAAON,MAAM;AACf,CAAC","ignoreList":[]}

package/lib/module/modules/openid/resolverProof.js

@@ -0,0 +1,233 @@
+import { Jwt, X509ModuleConfig } from '@credo-ts/core';
+import q from 'query-string';
+import { getHostNameFromUrl } from './utils/utils';
+import { Linking } from 'react-native';
+function handleTextResponse(text) {
+  // If the text starts with 'ey' we assume it's a JWT and thus an OpenID authorization request
+  if (text.startsWith('ey')) {
+    return {
+      success: true,
+      result: {
+        format: 'parsed',
+        type: 'openid-authorization-request',
+        data: text
+      }
+    };
+  }
+
+  // Otherwise we still try to parse it as JSON
+  try {
+    const json = JSON.parse(text);
+    return handleJsonResponse(json);
+
+    // handel like above
+  } catch (error) {
+    throw new Error(`[handleTextResponse] Error:${error}`);
+  }
+}
+function handleJsonResponse(json) {
+  // We expect a JSON object
+  if (!json || typeof json !== 'object' || Array.isArray(json)) {
+    throw new Error('[handleJsonResponse] Invitation not recognized.');
+  }
+  if ('@type' in json) {
+    return {
+      success: true,
+      result: {
+        format: 'parsed',
+        type: 'didcomm',
+        data: json
+      }
+    };
+  }
+  if ('credential_issuer' in json) {
+    return {
+      success: true,
+      result: {
+        format: 'parsed',
+        type: 'openid-credential-offer',
+        data: json
+      }
+    };
+  }
+  throw new Error('[handleJsonResponse] Invitation not recognized.');
+}
+export async function fetchInvitationDataUrl(dataUrl) {
+  // If we haven't had a response after 10 seconds, we will handle as if the invitation is not valid.
+  const abortController = new AbortController();
+  const timeout = setTimeout(() => abortController.abort(), 10000);
+  try {
+    // If we still don't know what type of invitation it is, we assume it is a URL that we need to fetch to retrieve the invitation.
+    const response = await fetch(dataUrl, {
+      headers: {
+        // for DIDComm out of band invitations we should include application/json
+        // but we are flexible and also want to support other types of invitations
+        // as e.g. the OpenID SIOP request is a signed encoded JWT string
+        Accept: 'application/json, text/plain, */*'
+      }
+    });
+    clearTimeout(timeout);
+    if (!response.ok) {
+      throw new Error('[retrieve_invitation_error] Unable to retrieve invitation.');
+    }
+    const contentType = response.headers.get('content-type');
+    if (contentType !== null && contentType !== void 0 && contentType.includes('application/json')) {
+      const json = await response.json();
+      return handleJsonResponse(json);
+    }
+    const text = await response.text();
+    return handleTextResponse(text);
+  } catch (error) {
+    clearTimeout(timeout);
+    throw new Error(`[retrieve_invitation_error] Unable to retrieve invitation: ${error}`);
+  }
+}
+const extractCertificateFromJwt = jwt => {
+  const jwtHeader = Jwt.fromSerializedJwt(jwt).header;
+  return Array.isArray(jwtHeader.x5c) && typeof jwtHeader.x5c[0] === 'string' ? jwtHeader.x5c[0] : null;
+};
+
+/**
+ * This is a temp method to allow for untrusted certificates to still work with the wallet.
+ */
+export const extractCertificateFromAuthorizationRequest = async ({
+  data,
+  uri
+}) => {
+  try {
+    if (data) {
+      return {
+        data,
+        certificate: extractCertificateFromJwt(data)
+      };
+    }
+    if (uri) {
+      const query = q.parseUrl(uri).query;
+      if (query.request_uri && typeof query.request_uri === 'string') {
+        const result = await fetchInvitationDataUrl(query.request_uri);
+        if (result.success && result.result.type === 'openid-authorization-request' && typeof result.result.data === 'string') {
+          return {
+            data: result.result.data,
+            certificate: extractCertificateFromJwt(result.result.data)
+          };
+        }
+      } else if (query.request && typeof query.request === 'string') {
+        const _res = {
+          data: query.request,
+          certificate: extractCertificateFromJwt(query.request)
+        };
+        return _res;
+      }
+    }
+    return {
+      data: null,
+      certificate: null
+    };
+  } catch (error) {
+    return {
+      data: null,
+      certificate: null
+    };
+  }
+};
+export async function withTrustedCertificate(agent, certificate, method) {
+  const x509ModuleConfig = agent.dependencyManager.resolve(X509ModuleConfig);
+  const currentTrustedCertificates = x509ModuleConfig.trustedCertificates ? [...x509ModuleConfig.trustedCertificates] : [];
+  try {
+    if (certificate) agent.x509.addTrustedCertificate(certificate);
+    return await method();
+  } finally {
+    if (certificate) x509ModuleConfig.setTrustedCertificates(currentTrustedCertificates);
+  }
+}
+
+//This settings should be moved to an injectable config
+const allowUntrustedCertificates = false;
+export const getCredentialsForProofRequest = async ({
+  agent,
+  data,
+  uri
+}) => {
+  let requestUri = uri;
+  try {
+    const {
+      certificate = null,
+      data: newData = null
+    } = allowUntrustedCertificates ? await extractCertificateFromAuthorizationRequest({
+      data,
+      uri
+    }) : {};
+    if (newData) {
+      // FIXME: Credo only support request string, but we already parsed it before. So we construct an request here
+      // but in the future we need to support the parsed request in Credo directly
+      requestUri = `openid://?request=${encodeURIComponent(newData)}`;
+    } else if (uri) {
+      requestUri = uri;
+    } else {
+      throw new Error('Either data or uri must be provided');
+    }
+    agent.config.logger.info(`$$Receiving openid uri ${requestUri}`);
+
+    // Temp solution to add and remove the trusted certificate
+    const resolved = await withTrustedCertificate(agent, certificate, () => {
+      return agent.modules.openId4VcHolder.resolveSiopAuthorizationRequest(requestUri);
+    });
+    if (!resolved.presentationExchange) {
+      throw new Error('No presentation exchange found in authorization request.');
+    }
+    return {
+      ...resolved.presentationExchange,
+      authorizationRequest: resolved.authorizationRequest,
+      verifierHostName: resolved.authorizationRequest.responseURI ? getHostNameFromUrl(resolved.authorizationRequest.responseURI) : undefined,
+      createdAt: new Date(),
+      type: 'OpenId4VPRequestRecord'
+    };
+  } catch (err) {
+    agent.config.logger.error(`Parsing presentation request:  ${(err === null || err === void 0 ? void 0 : err.message) ?? err}`);
+    throw err;
+  }
+};
+export const shareProof = async ({
+  agent,
+  authorizationRequest,
+  credentialsForRequest,
+  selectedCredentials,
+  allowUntrustedCertificate = false
+}) => {
+  if (!credentialsForRequest.areRequirementsSatisfied) {
+    throw new Error('Requirements from proof request are not satisfied');
+  }
+
+  // Map all requirements and entries to a credential record. If a credential record for an
+  // input descriptor has been provided in `selectedCredentials` we will use that. Otherwise
+  // it will pick the first available credential.
+  const credentials = Object.fromEntries(credentialsForRequest.requirements.flatMap(requirement => requirement.submissionEntry.map(entry => {
+    const credentialId = selectedCredentials[entry.inputDescriptorId].id;
+    const credential = entry.verifiableCredentials.find(vc => vc.credentialRecord.id === credentialId) ?? entry.verifiableCredentials[0];
+    return [entry.inputDescriptorId, [credential.credentialRecord]];
+  })));
+  try {
+    // Temp solution to add and remove the trusted certicaite
+    const certificate = authorizationRequest.jwt && allowUntrustedCertificate ? extractCertificateFromJwt(authorizationRequest.jwt) : null;
+    const result = await withTrustedCertificate(agent, certificate, () => agent.modules.openId4VcHolder.acceptSiopAuthorizationRequest({
+      authorizationRequest,
+      presentationExchange: {
+        credentials
+      }
+    }));
+
+    // if redirect_uri is provided, open it in the browser
+    // Even if the response returned an error, we must open this uri
+    if (typeof result.serverResponse.body === 'object' && typeof result.serverResponse.body.redirect_uri === 'string') {
+      await Linking.openURL(result.serverResponse.body.redirect_uri);
+    }
+    if (result.serverResponse.status < 200 || result.serverResponse.status > 299) {
+      throw new Error(`Error while accepting authorization request. ${result.serverResponse.body}`);
+    }
+    return result;
+  } catch (error) {
+    // Handle biometric authentication errors
+    throw new Error(`Error accepting proof request. ${(error === null || error === void 0 ? void 0 : error.message) ?? error}`);
+  }
+};
+//# sourceMappingURL=resolverProof.js.map

package/lib/module/modules/openid/resolverProof.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Jwt","X509ModuleConfig","q","getHostNameFromUrl","Linking","handleTextResponse","text","startsWith","success","result","format","type","data","json","JSON","parse","handleJsonResponse","error","Error","Array","isArray","fetchInvitationDataUrl","dataUrl","abortController","AbortController","timeout","setTimeout","abort","response","fetch","headers","Accept","clearTimeout","ok","contentType","get","includes","extractCertificateFromJwt","jwt","jwtHeader","fromSerializedJwt","header","x5c","extractCertificateFromAuthorizationRequest","uri","certificate","query","parseUrl","request_uri","request","_res","withTrustedCertificate","agent","method","x509ModuleConfig","dependencyManager","resolve","currentTrustedCertificates","trustedCertificates","x509","addTrustedCertificate","setTrustedCertificates","allowUntrustedCertificates","getCredentialsForProofRequest","requestUri","newData","encodeURIComponent","config","logger","info","resolved","modules","openId4VcHolder","resolveSiopAuthorizationRequest","presentationExchange","authorizationRequest","verifierHostName","responseURI","undefined","createdAt","Date","err","message","shareProof","credentialsForRequest","selectedCredentials","allowUntrustedCertificate","areRequirementsSatisfied","credentials","Object","fromEntries","requirements","flatMap","requirement","submissionEntry","map","entry","credentialId","inputDescriptorId","id","credential","verifiableCredentials","find","vc","credentialRecord","acceptSiopAuthorizationRequest","serverResponse","body","redirect_uri","openURL","status"],"sourceRoot":"../../../../src","sources":["modules/openid/resolverProof.tsx"],"mappings":"AAAA,SAA6CA,GAAG,EAAEC,gBAAgB,QAAQ,gBAAgB;AAE1F,OAAOC,CAAC,MAAM,cAAc;AAE5B,SAASC,kBAAkB,QAAQ,eAAe;AAElD,SAASC,OAAO,QAAQ,cAAc;AAEtC,SAASC,kBAAkBA,CAACC,IAAY,EAAyB;EAC/D;EACA,IAAIA,IAAI,CAACC,UAAU,CAAC,IAAI,CAAC,EAAE;IACzB,OAAO;MACLC,OAAO,EAAE,IAAI;MACbC,MAAM,EAAE;QACNC,MAAM,EAAE,QAAQ;QAChBC,IAAI,EAAE,8BAA8B;QACpCC,IAAI,EAAEN;MACR;IACF,CAAC;EACH;;EAEA;EACA,IAAI;IACF,MAAMO,IAAa,GAAGC,IAAI,CAACC,KAAK,CAACT,IAAI,CAAC;IACtC,OAAOU,kBAAkB,CAACH,IAAI,CAAC;;IAE/B;EACF,CAAC,CAAC,OAAOI,KAAK,EAAE;IACd,MAAM,IAAIC,KAAK,CAAC,8BAA8BD,KAAK,EAAE,CAAC;EACxD;AACF;AAEA,SAASD,kBAAkBA,CAACH,IAAa,EAAyB;EAChE;EACA,IAAI,CAACA,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAIM,KAAK,CAACC,OAAO,CAACP,IAAI,CAAC,EAAE;IAC5D,MAAM,IAAIK,KAAK,CAAC,iDAAiD,CAAC;EACpE;EAEA,IAAI,OAAO,IAAIL,IAAI,EAAE;IACnB,OAAO;MACLL,OAAO,EAAE,IAAI;MACbC,MAAM,EAAE;QACNC,MAAM,EAAE,QAAQ;QAChBC,IAAI,EAAE,SAAS;QACfC,IAAI,EAAEC;MACR;IACF,CAAC;EACH;EAEA,IAAI,mBAAmB,IAAIA,IAAI,EAAE;IAC/B,OAAO;MACLL,OAAO,EAAE,IAAI;MACbC,MAAM,EAAE;QACNC,MAAM,EAAE,QAAQ;QAChBC,IAAI,EAAE,yBAAyB;QAC/BC,IAAI,EAAEC;MACR;IACF,CAAC;EACH;EAEA,MAAM,IAAIK,KAAK,CAAC,iDAAiD,CAAC;AACpE;AAEA,OAAO,eAAeG,sBAAsBA,CAACC,OAAe,EAAkC;EAC5F;EACA,MAAMC,eAAe,GAAG,IAAIC,eAAe,CAAC,CAAC;EAC7C,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAMH,eAAe,CAACI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;EAEhE,IAAI;IACF;IACA,MAAMC,QAAQ,GAAG,MAAMC,KAAK,CAACP,OAAO,EAAE;MACpCQ,OAAO,EAAE;QACP;QACA;QACA;QACAC,MAAM,EAAE;MACV;IACF,CAAC,CAAC;IACFC,YAAY,CAACP,OAAO,CAAC;IACrB,IAAI,CAACG,QAAQ,CAACK,EAAE,EAAE;MAChB,MAAM,IAAIf,KAAK,CAAC,4DAA4D,CAAC;IAC/E;IAEA,MAAMgB,WAAW,GAAGN,QAAQ,CAACE,OAAO,CAACK,GAAG,CAAC,cAAc,CAAC;IACxD,IAAID,WAAW,aAAXA,WAAW,eAAXA,WAAW,CAAEE,QAAQ,CAAC,kBAAkB,CAAC,EAAE;MAC7C,MAAMvB,IAAa,GAAG,MAAMe,QAAQ,CAACf,IAAI,CAAC,CAAC;MAC3C,OAAOG,kBAAkB,CAACH,IAAI,CAAC;IACjC;IACA,MAAMP,IAAI,GAAG,MAAMsB,QAAQ,CAACtB,IAAI,CAAC,CAAC;IAClC,OAAOD,kBAAkB,CAACC,IAAI,CAAC;EACjC,CAAC,CAAC,OAAOW,KAAK,EAAE;IACde,YAAY,CAACP,OAAO,CAAC;IACrB,MAAM,IAAIP,KAAK,CAAC,8DAA8DD,KAAK,EAAE,CAAC;EACxF;AACF;AAEA,MAAMoB,yBAAyB,GAAIC,GAAW,IAAK;EACjD,MAAMC,SAAS,GAAGvC,GAAG,CAACwC,iBAAiB,CAACF,GAAG,CAAC,CAACG,MAAM;EACnD,OAAOtB,KAAK,CAACC,OAAO,CAACmB,SAAS,CAACG,GAAG,CAAC,IAAI,OAAOH,SAAS,CAACG,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAGH,SAAS,CAACG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI;AACvG,CAAC;;AAED;AACA;AACA;AACA,OAAO,MAAMC,0CAA0C,GAAG,MAAAA,CAAO;EAC/D/B,IAAI;EACJgC;AAIF,CAAC,KAAmE;EAClE,IAAI;IACF,IAAIhC,IAAI,EAAE;MACR,OAAO;QACLA,IAAI;QACJiC,WAAW,EAAER,yBAAyB,CAACzB,IAAI;MAC7C,CAAC;IACH;IAEA,IAAIgC,GAAG,EAAE;MACP,MAAME,KAAK,GAAG5C,CAAC,CAAC6C,QAAQ,CAACH,GAAG,CAAC,CAACE,KAAK;MACnC,IAAIA,KAAK,CAACE,WAAW,IAAI,OAAOF,KAAK,CAACE,WAAW,KAAK,QAAQ,EAAE;QAC9D,MAAMvC,MAAM,GAAG,MAAMY,sBAAsB,CAACyB,KAAK,CAACE,WAAW,CAAC;QAC9D,IACEvC,MAAM,CAACD,OAAO,IACdC,MAAM,CAACA,MAAM,CAACE,IAAI,KAAK,8BAA8B,IACrD,OAAOF,MAAM,CAACA,MAAM,CAACG,IAAI,KAAK,QAAQ,EACtC;UACA,OAAO;YACLA,IAAI,EAAEH,MAAM,CAACA,MAAM,CAACG,IAAI;YACxBiC,WAAW,EAAER,yBAAyB,CAAC5B,MAAM,CAACA,MAAM,CAACG,IAAI;UAC3D,CAAC;QACH;MACF,CAAC,MAAM,IAAIkC,KAAK,CAACG,OAAO,IAAI,OAAOH,KAAK,CAACG,OAAO,KAAK,QAAQ,EAAE;QAC7D,MAAMC,IAAI,GAAG;UACXtC,IAAI,EAAEkC,KAAK,CAACG,OAAO;UACnBJ,WAAW,EAAER,yBAAyB,CAACS,KAAK,CAACG,OAAO;QACtD,CAAC;QACD,OAAOC,IAAI;MACb;IACF;IACA,OAAO;MAAEtC,IAAI,EAAE,IAAI;MAAEiC,WAAW,EAAE;IAAK,CAAC;EAC1C,CAAC,CAAC,OAAO5B,KAAK,EAAE;IACd,OAAO;MAAEL,IAAI,EAAE,IAAI;MAAEiC,WAAW,EAAE;IAAK,CAAC;EAC1C;AACF,CAAC;AAED,OAAO,eAAeM,sBAAsBA,CAC1CC,KAAY,EACZP,WAA0B,EAC1BQ,MAA4B,EAChB;EACZ,MAAMC,gBAAgB,GAAGF,KAAK,CAACG,iBAAiB,CAACC,OAAO,CAACvD,gBAAgB,CAAC;EAC1E,MAAMwD,0BAA0B,GAAGH,gBAAgB,CAACI,mBAAmB,GACnE,CAAC,GAAGJ,gBAAgB,CAACI,mBAAmB,CAAC,GACzC,EAAE;EAEN,IAAI;IACF,IAAIb,WAAW,EAAEO,KAAK,CAACO,IAAI,CAACC,qBAAqB,CAACf,WAAW,CAAC;IAC9D,OAAO,MAAMQ,MAAM,CAAC,CAAC;EACvB,CAAC,SAAS;IACR,IAAIR,WAAW,EAAES,gBAAgB,CAACO,sBAAsB,CAACJ,0BAAsC,CAAC;EAClG;AACF;;AAEA;AACA,MAAMK,0BAA0B,GAAG,KAAK;AAExC,OAAO,MAAMC,6BAA6B,GAAG,MAAAA,CAAO;EAClDX,KAAK;EACLxC,IAAI;EACJgC;AAQF,CAAC,KAAkD;EACjD,IAAIoB,UAAU,GAAGpB,GAAG;EAEpB,IAAI;IACF,MAAM;MAAEC,WAAW,GAAG,IAAI;MAAEjC,IAAI,EAAEqD,OAAO,GAAG;IAAK,CAAC,GAAGH,0BAA0B,GAC3E,MAAMnB,0CAA0C,CAAC;MAAE/B,IAAI;MAAEgC;IAAI,CAAC,CAAC,GAC/D,CAAC,CAAC;IAEN,IAAIqB,OAAO,EAAE;MACX;MACA;MACAD,UAAU,GAAG,qBAAqBE,kBAAkB,CAACD,OAAO,CAAC,EAAE;IACjE,CAAC,MAAM,IAAIrB,GAAG,EAAE;MACdoB,UAAU,GAAGpB,GAAG;IAClB,CAAC,MAAM;MACL,MAAM,IAAI1B,KAAK,CAAC,qCAAqC,CAAC;IACxD;IAEAkC,KAAK,CAACe,MAAM,CAACC,MAAM,CAACC,IAAI,CAAC,0BAA0BL,UAAU,EAAE,CAAC;;IAEhE;IACA,MAAMM,QAAQ,GAAG,MAAMnB,sBAAsB,CAACC,KAAK,EAAEP,WAAW,EAAE,MAAM;MACtE,OAAOO,KAAK,CAACmB,OAAO,CAACC,eAAe,CAACC,+BAA+B,CAACT,UAAU,CAAC;IAClF,CAAC,CAAC;IAEF,IAAI,CAACM,QAAQ,CAACI,oBAAoB,EAAE;MAClC,MAAM,IAAIxD,KAAK,CAAC,0DAA0D,CAAC;IAC7E;IAEA,OAAO;MACL,GAAGoD,QAAQ,CAACI,oBAAoB;MAChCC,oBAAoB,EAAEL,QAAQ,CAACK,oBAAoB;MACnDC,gBAAgB,EAAEN,QAAQ,CAACK,oBAAoB,CAACE,WAAW,GACvD1E,kBAAkB,CAACmE,QAAQ,CAACK,oBAAoB,CAACE,WAAW,CAAC,GAC7DC,SAAS;MACbC,SAAS,EAAE,IAAIC,IAAI,CAAC,CAAC;MACrBrE,IAAI,EAAE;IACR,CAAC;EACH,CAAC,CAAC,OAAOsE,GAAG,EAAE;IACZ7B,KAAK,CAACe,MAAM,CAACC,MAAM,CAACnD,KAAK,CAAC,kCAAkC,CAACgE,GAAG,aAAHA,GAAG,uBAAHA,GAAG,CAAYC,OAAO,KAAID,GAAG,EAAE,CAAC;IAC7F,MAAMA,GAAG;EACX;AACF,CAAC;AAED,OAAO,MAAME,UAAU,GAAG,MAAAA,CAAO;EAC/B/B,KAAK;EACLuB,oBAAoB;EACpBS,qBAAqB;EACrBC,mBAAmB;EACnBC,yBAAyB,GAAG;AAO9B,CAAC,KAAK;EACJ,IAAI,CAACF,qBAAqB,CAACG,wBAAwB,EAAE;IACnD,MAAM,IAAIrE,KAAK,CAAC,mDAAmD,CAAC;EACtE;;EAEA;EACA;EACA;EACA,MAAMsE,WAAW,GAAGC,MAAM,CAACC,WAAW,CACpCN,qBAAqB,CAACO,YAAY,CAACC,OAAO,CAAEC,WAAW,IACrDA,WAAW,CAACC,eAAe,CAACC,GAAG,CAAEC,KAAK,IAAK;IACzC,MAAMC,YAAY,GAAGZ,mBAAmB,CAACW,KAAK,CAACE,iBAAiB,CAAC,CAACC,EAAE;IACpE,MAAMC,UAAU,GACdJ,KAAK,CAACK,qBAAqB,CAACC,IAAI,CAAEC,EAAE,IAAKA,EAAE,CAACC,gBAAgB,CAACL,EAAE,KAAKF,YAAY,CAAC,IACjFD,KAAK,CAACK,qBAAqB,CAAC,CAAC,CAAC;IAEhC,OAAO,CAACL,KAAK,CAACE,iBAAiB,EAAE,CAACE,UAAU,CAACI,gBAAgB,CAAC,CAAC;EACjE,CAAC,CACH,CACF,CAAC;EAED,IAAI;IACF;IACA,MAAM3D,WAAW,GACf8B,oBAAoB,CAACrC,GAAG,IAAIgD,yBAAyB,GAAGjD,yBAAyB,CAACsC,oBAAoB,CAACrC,GAAG,CAAC,GAAG,IAAI;IAEpH,MAAM7B,MAAM,GAAG,MAAM0C,sBAAsB,CAACC,KAAK,EAAEP,WAAW,EAAE,MAC9DO,KAAK,CAACmB,OAAO,CAACC,eAAe,CAACiC,8BAA8B,CAAC;MAC3D9B,oBAAoB;MACpBD,oBAAoB,EAAE;QACpBc;MACF;IACF,CAAC,CACH,CAAC;;IAED;IACA;IACA,IAAI,OAAO/E,MAAM,CAACiG,cAAc,CAACC,IAAI,KAAK,QAAQ,IAAI,OAAOlG,MAAM,CAACiG,cAAc,CAACC,IAAI,CAACC,YAAY,KAAK,QAAQ,EAAE;MACjH,MAAMxG,OAAO,CAACyG,OAAO,CAACpG,MAAM,CAACiG,cAAc,CAACC,IAAI,CAACC,YAAY,CAAC;IAChE;IAEA,IAAInG,MAAM,CAACiG,cAAc,CAACI,MAAM,GAAG,GAAG,IAAIrG,MAAM,CAACiG,cAAc,CAACI,MAAM,GAAG,GAAG,EAAE;MAC5E,MAAM,IAAI5F,KAAK,CAAC,gDAAgDT,MAAM,CAACiG,cAAc,CAACC,IAAI,EAAY,CAAC;IACzG;IAEA,OAAOlG,MAAM;EACf,CAAC,CAAC,OAAOQ,KAAK,EAAE;IACd;IACA,MAAM,IAAIC,KAAK,CAAC,kCAAkC,CAACD,KAAK,aAALA,KAAK,uBAALA,KAAK,CAAYiE,OAAO,KAAIjE,KAAK,EAAE,CAAC;EACzF;AACF,CAAC","ignoreList":[]}

package/lib/module/modules/openid/screens/OpenIDCredentialDetails.js

@@ -0,0 +1,206 @@
+import React, { useEffect, useState } from 'react';
+import { Screens } from '../../../types/navigators';
+import { getCredentialForDisplay } from '../display';
+import CommonRemoveModal from '../../../components/modals/CommonRemoveModal';
+import { ModalUsage } from '../../../types/remove';
+import { DeviceEventEmitter, StyleSheet, Text, View } from 'react-native';
+import { useTranslation } from 'react-i18next';
+import { testIdWithKey } from '../../../utils/testable';
+import { useTheme } from '../../../contexts/theme';
+import { BifoldError } from '../../../types/error';
+import { EventTypes } from '../../../constants';
+import { useAgent } from '@credo-ts/react-hooks';
+import RecordRemove from '../../../components/record/RecordRemove';
+import { useOpenIDCredentials } from '../context/OpenIDCredentialRecordProvider';
+import { OpenIDCredentialType } from '../types';
+import { TOKENS, useServices } from '../../../container-api';
+import Record from '../../../components/record/Record';
+import { buildOverlayFromW3cCredential } from '../../../utils/oca';
+import CredentialDetailSecondaryHeader from '../../../components/views/CredentialDetailSecondaryHeader';
+import CredentialCardLogo from '../../../components/views/CredentialCardLogo';
+import CredentialDetailPrimaryHeader from '../../../components/views/CredentialDetailPrimaryHeader';
+import ScreenLayout from '../../../layout/ScreenLayout';
+import OpenIDCredentialCard from '../components/OpenIDCredentialCard';
+export let OpenIDCredScreenMode = /*#__PURE__*/function (OpenIDCredScreenMode) {
+  OpenIDCredScreenMode[OpenIDCredScreenMode["offer"] = 0] = "offer";
+  OpenIDCredScreenMode[OpenIDCredScreenMode["details"] = 1] = "details";
+  return OpenIDCredScreenMode;
+}({});
+const paddingHorizontal = 24;
+const paddingVertical = 16;
+const OpenIDCredentialDetails = ({
+  navigation,
+  route
+}) => {
+  var _overlay$brandingOver;
+  const {
+    credentialId,
+    type
+  } = route.params;
+  const [credential, setCredential] = useState(undefined);
+  const [credentialDisplay, setCredentialDisplay] = useState();
+  const {
+    t,
+    i18n
+  } = useTranslation();
+  const {
+    ColorPallet,
+    TextTheme
+  } = useTheme();
+  const {
+    agent
+  } = useAgent();
+  const {
+    removeCredential,
+    getW3CCredentialById,
+    getSdJwtCredentialById
+  } = useOpenIDCredentials();
+  const [bundleResolver] = useServices([TOKENS.UTIL_OCA_RESOLVER]);
+  const [isRemoveModalDisplayed, setIsRemoveModalDisplayed] = useState(false);
+  const [credentialRemoved, setCredentialRemoved] = useState(false);
+  const [overlay, setOverlay] = useState({
+    bundle: undefined,
+    presentationFields: [],
+    metaOverlay: undefined,
+    brandingOverlay: undefined
+  });
+  const styles = StyleSheet.create({
+    container: {
+      backgroundColor: (_overlay$brandingOver = overlay.brandingOverlay) === null || _overlay$brandingOver === void 0 ? void 0 : _overlay$brandingOver.primaryBackgroundColor,
+      display: 'flex'
+    },
+    cardContainer: {
+      paddingHorizontal: 10,
+      paddingVertical: 30
+    }
+  });
+  useEffect(() => {
+    if (!agent) return;
+    const fetchCredential = async () => {
+      if (credentialRemoved) return;
+      try {
+        let record;
+        if (type === OpenIDCredentialType.SdJwtVc) {
+          record = await getSdJwtCredentialById(credentialId);
+        } else {
+          record = await getW3CCredentialById(credentialId);
+        }
+        setCredential(record);
+      } catch (error) {
+        // credential not found for id, display an error
+        DeviceEventEmitter.emit(EventTypes.ERROR_ADDED, new BifoldError(t('Error.Title1033'), t('Error.Message1033'), t('CredentialDetails.CredentialNotFound'), 1035));
+      }
+    };
+    fetchCredential();
+  }, [credentialId, type, getSdJwtCredentialById, getW3CCredentialById, agent, t, credentialRemoved]);
+  useEffect(() => {
+    if (!credential) return;
+    try {
+      const credDisplay = getCredentialForDisplay(credential);
+      setCredentialDisplay(credDisplay);
+    } catch (error) {
+      DeviceEventEmitter.emit(EventTypes.ERROR_ADDED, new BifoldError(t('Error.Title1033'), t('Error.Message1033'), t('CredentialDetails.CredentialNotFound'), 1034));
+    }
+  }, [credential, t]);
+  useEffect(() => {
+    if (!credentialDisplay || !bundleResolver || !i18n || !credentialDisplay.display) {
+      return;
+    }
+    const resolveOverlay = async () => {
+      const resolvedOverlay = await buildOverlayFromW3cCredential({
+        credentialDisplay,
+        language: i18n.language,
+        resolver: bundleResolver
+      });
+      setOverlay(resolvedOverlay);
+    };
+    resolveOverlay();
+  }, [credentialDisplay, bundleResolver, i18n]);
+  const toggleDeclineModalVisible = () => {
+    if (credentialRemoved) {
+      return;
+    }
+    setIsRemoveModalDisplayed(!isRemoveModalDisplayed);
+  };
+  const handleDeclineTouched = async () => {
+    setCredentialRemoved(true);
+    setIsRemoveModalDisplayed(false);
+    await new Promise(resolve => setTimeout(resolve, 500));
+    handleRemove();
+  };
+  const handleRemove = async () => {
+    if (!credential) return;
+    try {
+      await removeCredential(credential, type);
+      navigation.pop();
+    } catch (err) {
+      const error = new BifoldError(t('Error.Title1025'), t('Error.Message1025'), (err === null || err === void 0 ? void 0 : err.message) ?? err, 1025);
+      DeviceEventEmitter.emit(EventTypes.ERROR_ADDED, error);
+    }
+  };
+
+  //To be used only in specific cases where consistency with anoncreds needed
+  // eslint-disable-next-line @typescript-eslint/no-unused-vars
+  const legacyHeader = () => {
+    if (!credentialDisplay) return null;
+    return /*#__PURE__*/React.createElement(View, {
+      style: styles.container
+    }, /*#__PURE__*/React.createElement(CredentialDetailSecondaryHeader, {
+      overlay: overlay
+    }), /*#__PURE__*/React.createElement(CredentialCardLogo, {
+      overlay: overlay
+    }), /*#__PURE__*/React.createElement(CredentialDetailPrimaryHeader, {
+      overlay: overlay
+    }));
+  };
+  const renderOpenIdCard = () => {
+    if (!credentialDisplay) return null;
+    return /*#__PURE__*/React.createElement(OpenIDCredentialCard, {
+      credentialDisplay: credentialDisplay,
+      credentialRecord: credential
+    });
+  };
+  const header = () => {
+    return /*#__PURE__*/React.createElement(View, {
+      style: styles.cardContainer
+    }, renderOpenIdCard());
+  };
+  const footer = () => {
+    if (!credentialDisplay) return null;
+    return /*#__PURE__*/React.createElement(View, {
+      style: {
+        marginBottom: 50
+      }
+    }, /*#__PURE__*/React.createElement(View, {
+      style: {
+        backgroundColor: ColorPallet.brand.secondaryBackground,
+        marginTop: paddingVertical,
+        paddingHorizontal,
+        paddingVertical
+      }
+    }, /*#__PURE__*/React.createElement(Text, {
+      testID: testIdWithKey('IssuerName')
+    }, /*#__PURE__*/React.createElement(Text, {
+      style: [TextTheme.title]
+    }, t('CredentialDetails.IssuedBy') + ' '), /*#__PURE__*/React.createElement(Text, {
+      style: [TextTheme.normal]
+    }, credentialDisplay.display.issuer.name || t('ContactDetails.AContact')))), /*#__PURE__*/React.createElement(RecordRemove, {
+      onRemove: toggleDeclineModalVisible
+    }));
+  };
+  return /*#__PURE__*/React.createElement(ScreenLayout, {
+    screen: Screens.OpenIDCredentialDetails
+  }, /*#__PURE__*/React.createElement(Record, {
+    fields: overlay.presentationFields || [],
+    hideFieldValues: true,
+    header: header,
+    footer: footer
+  }), /*#__PURE__*/React.createElement(CommonRemoveModal, {
+    usage: ModalUsage.CredentialRemove,
+    visible: isRemoveModalDisplayed,
+    onSubmit: handleDeclineTouched,
+    onCancel: toggleDeclineModalVisible
+  }));
+};
+export default OpenIDCredentialDetails;
+//# sourceMappingURL=OpenIDCredentialDetails.js.map