@credo-ts/core 0.4.1-alpha.157

package/build/modules/vc/jwt-vc/W3cJwtCredentialService.js

@@ -0,0 +1,432 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.W3cJwtCredentialService = void 0;
+const crypto_1 = require("../../../crypto");
+const jwk_1 = require("../../../crypto/jose/jwk");
+const error_1 = require("../../../error");
+const plugins_1 = require("../../../plugins");
+const utils_1 = require("../../../utils");
+const dids_1 = require("../../dids");
+const data_integrity_1 = require("../data-integrity");
+const W3cJwtVerifiableCredential_1 = require("./W3cJwtVerifiableCredential");
+const W3cJwtVerifiablePresentation_1 = require("./W3cJwtVerifiablePresentation");
+const credentialTransformer_1 = require("./credentialTransformer");
+const presentationTransformer_1 = require("./presentationTransformer");
+/**
+ * Supports signing and verification of credentials according to the [Verifiable Credential Data Model](https://www.w3.org/TR/vc-data-model)
+ * using [Json Web Tokens](https://www.w3.org/TR/vc-data-model/#json-web-token).
+ */
+let W3cJwtCredentialService = class W3cJwtCredentialService {
+    constructor(jwsService) {
+        this.jwsService = jwsService;
+    }
+    /**
+     * Signs a credential
+     */
+    async signCredential(agentContext, options) {
+        // Validate the instance
+        utils_1.MessageValidator.validateSync(options.credential);
+        // Get the JWT payload for the JWT based on the JWT Encoding rules form the VC-DATA-MODEL
+        // https://www.w3.org/TR/vc-data-model/#jwt-encoding
+        const jwtPayload = (0, credentialTransformer_1.getJwtPayloadFromCredential)(options.credential);
+        if (!(0, utils_1.isDid)(options.verificationMethod)) {
+            throw new error_1.CredoError(`Only did identifiers are supported as verification method`);
+        }
+        const verificationMethod = await this.resolveVerificationMethod(agentContext, options.verificationMethod, [
+            'assertionMethod',
+        ]);
+        const key = (0, dids_1.getKeyFromVerificationMethod)(verificationMethod);
+        const jwt = await this.jwsService.createJwsCompact(agentContext, {
+            payload: jwtPayload,
+            key,
+            protectedHeaderOptions: {
+                typ: 'JWT',
+                alg: options.alg,
+                kid: options.verificationMethod,
+            },
+        });
+        // TODO: this re-parses and validates the credential in the JWT, which is not necessary.
+        // We should somehow create an instance of W3cJwtVerifiableCredential directly from the JWT
+        const jwtVc = W3cJwtVerifiableCredential_1.W3cJwtVerifiableCredential.fromSerializedJwt(jwt);
+        return jwtVc;
+    }
+    /**
+     * Verifies the signature(s) of a credential
+     *
+     * @param credential the credential to be verified
+     * @returns the verification result
+     */
+    async verifyCredential(agentContext, options) {
+        var _a;
+        // NOTE: this is mostly from the JSON-LD service that adds this option. Once we support
+        // the same granular validation results, we can remove this and the user could just check
+        // which of the validations failed. Supporting for consistency with the JSON-LD service for now.
+        const verifyCredentialStatus = (_a = options.verifyCredentialStatus) !== null && _a !== void 0 ? _a : true;
+        const validationResults = {
+            isValid: false,
+            validations: {},
+        };
+        try {
+            let credential;
+            try {
+                // If instance is provided as input, we want to validate the credential (otherwise it's done in the fromSerializedJwt method below)
+                if (options.credential instanceof W3cJwtVerifiableCredential_1.W3cJwtVerifiableCredential) {
+                    utils_1.MessageValidator.validateSync(options.credential.credential);
+                }
+                credential =
+                    options.credential instanceof W3cJwtVerifiableCredential_1.W3cJwtVerifiableCredential
+                        ? options.credential
+                        : W3cJwtVerifiableCredential_1.W3cJwtVerifiableCredential.fromSerializedJwt(options.credential);
+                // Verify the JWT payload (verifies whether it's not expired, etc...)
+                credential.jwt.payload.validate();
+                validationResults.validations.dataModel = {
+                    isValid: true,
+                };
+            }
+            catch (error) {
+                validationResults.validations.dataModel = {
+                    isValid: false,
+                    error,
+                };
+                return validationResults;
+            }
+            const issuerVerificationMethod = await this.getVerificationMethodForJwtCredential(agentContext, {
+                credential,
+                purpose: ['assertionMethod'],
+            });
+            const issuerPublicKey = (0, dids_1.getKeyFromVerificationMethod)(issuerVerificationMethod);
+            const issuerPublicJwk = (0, jwk_1.getJwkFromKey)(issuerPublicKey);
+            let signatureResult = undefined;
+            try {
+                // Verify the JWS signature
+                signatureResult = await this.jwsService.verifyJws(agentContext, {
+                    jws: credential.jwt.serializedJwt,
+                    // We have pre-fetched the key based on the issuer/signer of the credential
+                    jwkResolver: () => issuerPublicJwk,
+                });
+                if (!signatureResult.isValid) {
+                    validationResults.validations.signature = {
+                        isValid: false,
+                        error: new error_1.CredoError('Invalid JWS signature'),
+                    };
+                }
+                else {
+                    validationResults.validations.signature = {
+                        isValid: true,
+                    };
+                }
+            }
+            catch (error) {
+                validationResults.validations.signature = {
+                    isValid: false,
+                    error,
+                };
+            }
+            // Validate whether the credential is signed with the 'issuer' id
+            // NOTE: this uses the verificationMethod.controller. We may want to use the verificationMethod.id?
+            if (credential.issuerId !== issuerVerificationMethod.controller) {
+                validationResults.validations.issuerIsSigner = {
+                    isValid: false,
+                    error: new error_1.CredoError(`Credential is signed using verification method ${issuerVerificationMethod.id}, while the issuer of the credential is '${credential.issuerId}'`),
+                };
+            }
+            else {
+                validationResults.validations.issuerIsSigner = {
+                    isValid: true,
+                };
+            }
+            // Validate whether the `issuer` of the credential is also the signer
+            const issuerIsSigner = signatureResult === null || signatureResult === void 0 ? void 0 : signatureResult.signerKeys.some((signerKey) => signerKey.fingerprint === issuerPublicKey.fingerprint);
+            if (!issuerIsSigner) {
+                validationResults.validations.issuerIsSigner = {
+                    isValid: false,
+                    error: new error_1.CredoError('Credential is not signed by the issuer of the credential'),
+                };
+            }
+            else {
+                validationResults.validations.issuerIsSigner = {
+                    isValid: true,
+                };
+            }
+            // Validate credentialStatus
+            if (verifyCredentialStatus && !credential.credentialStatus) {
+                validationResults.validations.credentialStatus = {
+                    isValid: true,
+                };
+            }
+            else if (verifyCredentialStatus && credential.credentialStatus) {
+                validationResults.validations.credentialStatus = {
+                    isValid: false,
+                    error: new error_1.CredoError('Verifying credential status is not supported for JWT VCs'),
+                };
+            }
+            validationResults.isValid = Object.values(validationResults.validations).every((v) => v.isValid);
+            return validationResults;
+        }
+        catch (error) {
+            validationResults.error = error;
+            return validationResults;
+        }
+    }
+    /**
+     * Signs a presentation including the credentials it includes
+     *
+     * @param presentation the presentation to be signed
+     * @returns the signed presentation
+     */
+    async signPresentation(agentContext, options) {
+        // Validate the instance
+        utils_1.MessageValidator.validateSync(options.presentation);
+        // Get the JWT payload for the JWT based on the JWT Encoding rules form the VC-DATA-MODEL
+        // https://www.w3.org/TR/vc-data-model/#jwt-encoding
+        const jwtPayload = (0, presentationTransformer_1.getJwtPayloadFromPresentation)(options.presentation);
+        // Set the nonce so it's included in the signature
+        jwtPayload.additionalClaims.nonce = options.challenge;
+        jwtPayload.aud = options.domain;
+        const verificationMethod = await this.resolveVerificationMethod(agentContext, options.verificationMethod, [
+            'authentication',
+        ]);
+        const jwt = await this.jwsService.createJwsCompact(agentContext, {
+            payload: jwtPayload,
+            key: (0, dids_1.getKeyFromVerificationMethod)(verificationMethod),
+            protectedHeaderOptions: {
+                typ: 'JWT',
+                alg: options.alg,
+                kid: options.verificationMethod,
+            },
+        });
+        // TODO: this re-parses and validates the presentation in the JWT, which is not necessary.
+        // We should somehow create an instance of W3cJwtVerifiablePresentation directly from the JWT
+        const jwtVp = W3cJwtVerifiablePresentation_1.W3cJwtVerifiablePresentation.fromSerializedJwt(jwt);
+        return jwtVp;
+    }
+    /**
+     * Verifies a presentation including the credentials it includes
+     *
+     * @param presentation the presentation to be verified
+     * @returns the verification result
+     */
+    async verifyPresentation(agentContext, options) {
+        const validationResults = {
+            isValid: false,
+            validations: {},
+        };
+        try {
+            let presentation;
+            try {
+                // If instance is provided as input, we want to validate the presentation
+                if (options.presentation instanceof W3cJwtVerifiablePresentation_1.W3cJwtVerifiablePresentation) {
+                    utils_1.MessageValidator.validateSync(options.presentation.presentation);
+                }
+                presentation =
+                    options.presentation instanceof W3cJwtVerifiablePresentation_1.W3cJwtVerifiablePresentation
+                        ? options.presentation
+                        : W3cJwtVerifiablePresentation_1.W3cJwtVerifiablePresentation.fromSerializedJwt(options.presentation);
+                // Verify the JWT payload (verifies whether it's not expired, etc...)
+                presentation.jwt.payload.validate();
+                // Make sure challenge matches nonce
+                if (options.challenge !== presentation.jwt.payload.additionalClaims.nonce) {
+                    throw new error_1.CredoError(`JWT payload 'nonce' does not match challenge '${options.challenge}'`);
+                }
+                const audArray = (0, utils_1.asArray)(presentation.jwt.payload.aud);
+                if (options.domain && !audArray.includes(options.domain)) {
+                    throw new error_1.CredoError(`JWT payload 'aud' does not include domain '${options.domain}'`);
+                }
+                validationResults.validations.dataModel = {
+                    isValid: true,
+                };
+            }
+            catch (error) {
+                validationResults.validations.dataModel = {
+                    isValid: false,
+                    error,
+                };
+                return validationResults;
+            }
+            const proverVerificationMethod = await this.getVerificationMethodForJwtCredential(agentContext, {
+                credential: presentation,
+                purpose: ['authentication'],
+            });
+            const proverPublicKey = (0, dids_1.getKeyFromVerificationMethod)(proverVerificationMethod);
+            const proverPublicJwk = (0, jwk_1.getJwkFromKey)(proverPublicKey);
+            let signatureResult = undefined;
+            try {
+                // Verify the JWS signature
+                signatureResult = await this.jwsService.verifyJws(agentContext, {
+                    jws: presentation.jwt.serializedJwt,
+                    // We have pre-fetched the key based on the singer/holder of the presentation
+                    jwkResolver: () => proverPublicJwk,
+                });
+                if (!signatureResult.isValid) {
+                    validationResults.validations.presentationSignature = {
+                        isValid: false,
+                        error: new error_1.CredoError('Invalid JWS signature on presentation'),
+                    };
+                }
+                else {
+                    validationResults.validations.presentationSignature = {
+                        isValid: true,
+                    };
+                }
+            }
+            catch (error) {
+                validationResults.validations.presentationSignature = {
+                    isValid: false,
+                    error,
+                };
+            }
+            // Validate whether the presentation is signed with the 'holder' id
+            // NOTE: this uses the verificationMethod.controller. We may want to use the verificationMethod.id?
+            if (presentation.holderId && proverVerificationMethod.controller !== presentation.holderId) {
+                validationResults.validations.holderIsSigner = {
+                    isValid: false,
+                    error: new error_1.CredoError(`Presentation is signed using verification method ${proverVerificationMethod.id}, while the holder of the presentation is '${presentation.holderId}'`),
+                };
+            }
+            else {
+                // If no holderId is present, this validation passes by default as there can't be
+                // a mismatch between the 'holder' property and the signer of the presentation.
+                validationResults.validations.holderIsSigner = {
+                    isValid: true,
+                };
+            }
+            // To keep things simple, we only support JWT VCs in JWT VPs for now
+            const credentials = (0, utils_1.asArray)(presentation.presentation.verifiableCredential);
+            // Verify all credentials in parallel, and await the result
+            validationResults.validations.credentials = await Promise.all(credentials.map(async (credential) => {
+                if (credential instanceof data_integrity_1.W3cJsonLdVerifiableCredential) {
+                    return {
+                        isValid: false,
+                        error: new error_1.CredoError('Credential is of format ldp_vc. presentations in jwp_vp format can only contain credentials in jwt_vc format'),
+                        validations: {},
+                    };
+                }
+                const credentialResult = await this.verifyCredential(agentContext, {
+                    credential,
+                    verifyCredentialStatus: options.verifyCredentialStatus,
+                });
+                let credentialSubjectAuthentication;
+                // Check whether any of the credentialSubjectIds for each credential is the same as the controller of the verificationMethod
+                // This authenticates the presentation creator controls one of the credentialSubject ids.
+                // NOTE: this doesn't take into account the case where the credentialSubject is no the holder. In the
+                // future we can add support for other flows, but for now this is the most common use case.
+                // TODO: should this be handled on a higher level? I don't really see it being handled in the jsonld lib
+                // or in the did-jwt-vc lib (it seems they don't even verify the credentials itself), but we probably need some
+                // more experience on the use cases before we loosen the restrictions (as it means we need to handle it on a higher layer).
+                const credentialSubjectIds = credential.credentialSubjectIds;
+                const presentationAuthenticatesCredentialSubject = credentialSubjectIds.some((subjectId) => proverVerificationMethod.controller === subjectId);
+                if (credentialSubjectIds.length > 0 && !presentationAuthenticatesCredentialSubject) {
+                    credentialSubjectAuthentication = {
+                        isValid: false,
+                        error: new error_1.CredoError('Credential has one or more credentialSubject ids, but presentation does not authenticate credential subject'),
+                    };
+                }
+                else {
+                    credentialSubjectAuthentication = {
+                        isValid: true,
+                    };
+                }
+                return Object.assign(Object.assign({}, credentialResult), { isValid: credentialResult.isValid && credentialSubjectAuthentication.isValid, validations: Object.assign(Object.assign({}, credentialResult.validations), { credentialSubjectAuthentication }) });
+            }));
+            // Deeply nested check whether all validations have passed
+            validationResults.isValid = Object.values(validationResults.validations).every((v) => Array.isArray(v) ? v.every((vv) => vv.isValid) : v.isValid);
+            return validationResults;
+        }
+        catch (error) {
+            validationResults.error = error;
+            return validationResults;
+        }
+    }
+    async resolveVerificationMethod(agentContext, verificationMethod, allowsPurposes) {
+        const didResolver = agentContext.dependencyManager.resolve(dids_1.DidResolverService);
+        const didDocument = await didResolver.resolveDidDocument(agentContext, verificationMethod);
+        return didDocument.dereferenceKey(verificationMethod, allowsPurposes);
+    }
+    /**
+     * This method tries to find the verification method associated with the JWT credential or presentation.
+     * This verification method can then be used to verify the credential or presentation signature.
+     *
+     * The following methods are used to extract the verification method:
+     *  - verification method is resolved based on the `kid` in the protected header
+     *    - either as absolute reference (e.g. `did:example:123#key-1`)
+     *    - or as relative reference to the `iss` of the JWT (e.g. `iss` is `did:example:123` and `kid` is `#key-1`)
+     *  - the did document is resolved based on the `iss` field, after which the verification method is extracted based on the `alg`
+     *    used to sign the JWT and the specified `purpose`. Only a single verification method may be present, and in all other cases,
+     *    an error is thrown.
+     *
+     * The signer (`iss`) of the JWT is verified against the `controller` of the verificationMethod resolved in the did
+     * document. This means if the `iss` of a credential is `did:example:123` and the controller of the verificationMethod
+     * is `did:example:456`, an error is thrown to prevent the JWT from successfully being verified.
+     *
+     * In addition the JWT must conform to one of the following rules:
+     *   - MUST be a credential and have an `iss` field and MAY have an absolute or relative `kid`
+     *   - MUST not be a credential AND ONE of the following:
+     *      - have an `iss` field and MAY have an absolute or relative `kid`
+     *      - does not have an `iss` field and MUST have an absolute `kid`
+     */
+    async getVerificationMethodForJwtCredential(agentContext, options) {
+        var _a, _b;
+        const { credential, purpose } = options;
+        const kid = credential.jwt.header.kid;
+        const didResolver = agentContext.dependencyManager.resolve(dids_1.DidResolverService);
+        // The signerId is the `holder` of the presentation or the `issuer` of the credential
+        // For a credential only the `iss` COULD be enough to resolve the signer key (see method comments)
+        const signerId = credential.jwt.payload.iss;
+        let verificationMethod;
+        // If the kid starts with # we assume it is a relative did url, and we resolve it based on the `iss` and the `kid`
+        if (kid === null || kid === void 0 ? void 0 : kid.startsWith('#')) {
+            if (!signerId) {
+                throw new error_1.CredoError(`JWT 'kid' MUST be absolute when when no 'iss' is present in JWT payload`);
+            }
+            const didDocument = await didResolver.resolveDidDocument(agentContext, signerId);
+            verificationMethod = didDocument.dereferenceKey(`${signerId}${kid}`, purpose);
+        }
+        // this is a full did url (todo check if it contains a #)
+        else if (kid && (0, utils_1.isDid)(kid)) {
+            const didDocument = await didResolver.resolveDidDocument(agentContext, kid);
+            verificationMethod = didDocument.dereferenceKey(kid, purpose);
+            if (signerId && didDocument.id !== signerId) {
+                throw new error_1.CredoError(`kid '${kid}' does not match id of signer (holder/issuer) '${signerId}'`);
+            }
+        }
+        else {
+            if (!signerId) {
+                throw new error_1.CredoError(`JWT 'iss' MUST be present in payload when no 'kid' is specified`);
+            }
+            // Find the verificationMethod in the did document based on the alg and proofPurpose
+            const jwkClass = (0, jwk_1.getJwkClassFromJwaSignatureAlgorithm)(credential.jwt.header.alg);
+            if (!jwkClass)
+                throw new error_1.CredoError(`Unsupported JWT alg '${credential.jwt.header.alg}'`);
+            const { supportedVerificationMethodTypes } = (0, dids_1.getKeyDidMappingByKeyType)(jwkClass.keyType);
+            const didDocument = await didResolver.resolveDidDocument(agentContext, signerId);
+            const verificationMethods = (_b = (_a = didDocument.assertionMethod) === null || _a === void 0 ? void 0 : _a.map((v) => (typeof v === 'string' ? didDocument.dereferenceVerificationMethod(v) : v)).filter((v) => supportedVerificationMethodTypes.includes(v.type))) !== null && _b !== void 0 ? _b : [];
+            if (verificationMethods.length === 0) {
+                throw new error_1.CredoError(`No verification methods found for signer '${signerId}' and key type '${jwkClass.keyType}' for alg '${credential.jwt.header.alg}'. Unable to determine which public key is associated with the credential.`);
+            }
+            else if (verificationMethods.length > 1) {
+                throw new error_1.CredoError(`Multiple verification methods found for signer '${signerId}' and key type '${jwkClass.keyType}' for alg '${credential.jwt.header.alg}'. Unable to determine which public key is associated with the credential.`);
+            }
+            verificationMethod = verificationMethods[0];
+        }
+        // Verify the controller of the verificationMethod matches the signer of the credential
+        if (signerId && verificationMethod.controller !== signerId) {
+            throw new error_1.CredoError(`Verification method controller '${verificationMethod.controller}' does not match the signer '${signerId}'`);
+        }
+        return verificationMethod;
+    }
+};
+W3cJwtCredentialService = __decorate([
+    (0, plugins_1.injectable)(),
+    __metadata("design:paramtypes", [crypto_1.JwsService])
+], W3cJwtCredentialService);
+exports.W3cJwtCredentialService = W3cJwtCredentialService;
+//# sourceMappingURL=W3cJwtCredentialService.js.map

package/build/modules/vc/jwt-vc/W3cJwtCredentialService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cJwtCredentialService.js","sourceRoot":"","sources":["../../../../src/modules/vc/jwt-vc/W3cJwtCredentialService.ts"],"names":[],"mappings":";;;;;;;;;;;;AAWA,4CAA4C;AAC5C,kDAA8F;AAC9F,0CAA2C;AAC3C,8CAA6C;AAC7C,0CAAiE;AACjE,qCAAwG;AACxG,sDAAiE;AAEjE,6EAAyE;AACzE,iFAA6E;AAC7E,mEAAqE;AACrE,uEAAyE;AAEzE;;;GAGG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAGlC,YAAmB,UAAsB;QACvC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,cAAc,CACzB,YAA0B,EAC1B,OAAoC;QAEpC,wBAAwB;QACxB,wBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAEjD,yFAAyF;QACzF,oDAAoD;QACpD,MAAM,UAAU,GAAG,IAAA,mDAA2B,EAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAElE,IAAI,CAAC,IAAA,aAAK,EAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;YACtC,MAAM,IAAI,kBAAU,CAAC,2DAA2D,CAAC,CAAA;SAClF;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,YAAY,EAAE,OAAO,CAAC,kBAAkB,EAAE;YACxG,iBAAiB;SAClB,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,IAAA,mCAA4B,EAAC,kBAAkB,CAAC,CAAA;QAE5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,YAAY,EAAE;YAC/D,OAAO,EAAE,UAAU;YACnB,GAAG;YACH,sBAAsB,EAAE;gBACtB,GAAG,EAAE,KAAK;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,kBAAkB;aAChC;SACF,CAAC,CAAA;QAEF,wFAAwF;QACxF,2FAA2F;QAC3F,MAAM,KAAK,GAAG,uDAA0B,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAE/D,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,gBAAgB,CAC3B,YAA0B,EAC1B,OAAsC;;QAEtC,uFAAuF;QACvF,yFAAyF;QACzF,gGAAgG;QAChG,MAAM,sBAAsB,GAAG,MAAA,OAAO,CAAC,sBAAsB,mCAAI,IAAI,CAAA;QAErE,MAAM,iBAAiB,GAA8B;YACnD,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,EAAE;SAChB,CAAA;QAED,IAAI;YACF,IAAI,UAAsC,CAAA;YAC1C,IAAI;gBACF,mIAAmI;gBACnI,IAAI,OAAO,CAAC,UAAU,YAAY,uDAA0B,EAAE;oBAC5D,wBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;iBAC7D;gBAED,UAAU;oBACR,OAAO,CAAC,UAAU,YAAY,uDAA0B;wBACtD,CAAC,CAAC,OAAO,CAAC,UAAU;wBACpB,CAAC,CAAC,uDAA0B,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;gBAEtE,qEAAqE;gBACrE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;gBAEjC,iBAAiB,CAAC,WAAW,CAAC,SAAS,GAAG;oBACxC,OAAO,EAAE,IAAI;iBACd,CAAA;aACF;YAAC,OAAO,KAAK,EAAE;gBACd,iBAAiB,CAAC,WAAW,CAAC,SAAS,GAAG;oBACxC,OAAO,EAAE,KAAK;oBACd,KAAK;iBACN,CAAA;gBAED,OAAO,iBAAiB,CAAA;aACzB;YAED,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,YAAY,EAAE;gBAC9F,UAAU;gBACV,OAAO,EAAE,CAAC,iBAAiB,CAAC;aAC7B,CAAC,CAAA;YACF,MAAM,eAAe,GAAG,IAAA,mCAA4B,EAAC,wBAAwB,CAAC,CAAA;YAC9E,MAAM,eAAe,GAAG,IAAA,mBAAa,EAAC,eAAe,CAAC,CAAA;YAEtD,IAAI,eAAe,GAAgC,SAAS,CAAA;YAC5D,IAAI;gBACF,2BAA2B;gBAC3B,eAAe,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE;oBAC9D,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,aAAa;oBACjC,2EAA2E;oBAC3E,WAAW,EAAE,GAAG,EAAE,CAAC,eAAe;iBACnC,CAAC,CAAA;gBAEF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;oBAC5B,iBAAiB,CAAC,WAAW,CAAC,SAAS,GAAG;wBACxC,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,IAAI,kBAAU,CAAC,uBAAuB,CAAC;qBAC/C,CAAA;iBACF;qBAAM;oBACL,iBAAiB,CAAC,WAAW,CAAC,SAAS,GAAG;wBACxC,OAAO,EAAE,IAAI;qBACd,CAAA;iBACF;aACF;YAAC,OAAO,KAAK,EAAE;gBACd,iBAAiB,CAAC,WAAW,CAAC,SAAS,GAAG;oBACxC,OAAO,EAAE,KAAK;oBACd,KAAK;iBACN,CAAA;aACF;YAED,iEAAiE;YACjE,mGAAmG;YACnG,IAAI,UAAU,CAAC,QAAQ,KAAK,wBAAwB,CAAC,UAAU,EAAE;gBAC/D,iBAAiB,CAAC,WAAW,CAAC,cAAc,GAAG;oBAC7C,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,kBAAU,CACnB,kDAAkD,wBAAwB,CAAC,EAAE,4CAA4C,UAAU,CAAC,QAAQ,GAAG,CAChJ;iBACF,CAAA;aACF;iBAAM;gBACL,iBAAiB,CAAC,WAAW,CAAC,cAAc,GAAG;oBAC7C,OAAO,EAAE,IAAI;iBACd,CAAA;aACF;YAED,qEAAqE;YACrE,MAAM,cAAc,GAAG,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,UAAU,CAAC,IAAI,CACrD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,eAAe,CAAC,WAAW,CACrE,CAAA;YACD,IAAI,CAAC,cAAc,EAAE;gBACnB,iBAAiB,CAAC,WAAW,CAAC,cAAc,GAAG;oBAC7C,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,kBAAU,CAAC,0DAA0D,CAAC;iBAClF,CAAA;aACF;iBAAM;gBACL,iBAAiB,CAAC,WAAW,CAAC,cAAc,GAAG;oBAC7C,OAAO,EAAE,IAAI;iBACd,CAAA;aACF;YAED,4BAA4B;YAC5B,IAAI,sBAAsB,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE;gBAC1D,iBAAiB,CAAC,WAAW,CAAC,gBAAgB,GAAG;oBAC/C,OAAO,EAAE,IAAI;iBACd,CAAA;aACF;iBAAM,IAAI,sBAAsB,IAAI,UAAU,CAAC,gBAAgB,EAAE;gBAChE,iBAAiB,CAAC,WAAW,CAAC,gBAAgB,GAAG;oBAC/C,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,kBAAU,CAAC,0DAA0D,CAAC;iBAClF,CAAA;aACF;YAED,iBAAiB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;YAEhG,OAAO,iBAAiB,CAAA;SACzB;QAAC,OAAO,KAAK,EAAE;YACd,iBAAiB,CAAC,KAAK,GAAG,KAAK,CAAA;YAC/B,OAAO,iBAAiB,CAAA;SACzB;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,gBAAgB,CAC3B,YAA0B,EAC1B,OAAsC;QAEtC,wBAAwB;QACxB,wBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAEnD,yFAAyF;QACzF,oDAAoD;QACpD,MAAM,UAAU,GAAG,IAAA,uDAA6B,EAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAEtE,kDAAkD;QAClD,UAAU,CAAC,gBAAgB,CAAC,KAAK,GAAG,OAAO,CAAC,SAAS,CAAA;QACrD,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAA;QAE/B,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,YAAY,EAAE,OAAO,CAAC,kBAAkB,EAAE;YACxG,gBAAgB;SACjB,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,YAAY,EAAE;YAC/D,OAAO,EAAE,UAAU;YACnB,GAAG,EAAE,IAAA,mCAA4B,EAAC,kBAAkB,CAAC;YACrD,sBAAsB,EAAE;gBACtB,GAAG,EAAE,KAAK;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,kBAAkB;aAChC;SACF,CAAC,CAAA;QAEF,0FAA0F;QAC1F,6FAA6F;QAC7F,MAAM,KAAK,GAAG,2DAA4B,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAEjE,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,kBAAkB,CAC7B,YAA0B,EAC1B,OAAwC;QAExC,MAAM,iBAAiB,GAAgC;YACrD,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,EAAE;SAChB,CAAA;QAED,IAAI;YACF,IAAI,YAA0C,CAAA;YAC9C,IAAI;gBACF,yEAAyE;gBACzE,IAAI,OAAO,CAAC,YAAY,YAAY,2DAA4B,EAAE;oBAChE,wBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;iBACjE;gBAED,YAAY;oBACV,OAAO,CAAC,YAAY,YAAY,2DAA4B;wBAC1D,CAAC,CAAC,OAAO,CAAC,YAAY;wBACtB,CAAC,CAAC,2DAA4B,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;gBAE1E,qEAAqE;gBACrE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;gBAEnC,oCAAoC;gBACpC,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE;oBACzE,MAAM,IAAI,kBAAU,CAAC,iDAAiD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAA;iBAC5F;gBAED,MAAM,QAAQ,GAAG,IAAA,eAAO,EAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACtD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;oBACxD,MAAM,IAAI,kBAAU,CAAC,8CAA8C,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA;iBACtF;gBAED,iBAAiB,CAAC,WAAW,CAAC,SAAS,GAAG;oBACxC,OAAO,EAAE,IAAI;iBACd,CAAA;aACF;YAAC,OAAO,KAAK,EAAE;gBACd,iBAAiB,CAAC,WAAW,CAAC,SAAS,GAAG;oBACxC,OAAO,EAAE,KAAK;oBACd,KAAK;iBACN,CAAA;gBAED,OAAO,iBAAiB,CAAA;aACzB;YAED,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,YAAY,EAAE;gBAC9F,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,CAAC,gBAAgB,CAAC;aAC5B,CAAC,CAAA;YACF,MAAM,eAAe,GAAG,IAAA,mCAA4B,EAAC,wBAAwB,CAAC,CAAA;YAC9E,MAAM,eAAe,GAAG,IAAA,mBAAa,EAAC,eAAe,CAAC,CAAA;YAEtD,IAAI,eAAe,GAAgC,SAAS,CAAA;YAC5D,IAAI;gBACF,2BAA2B;gBAC3B,eAAe,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE;oBAC9D,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,aAAa;oBACnC,6EAA6E;oBAC7E,WAAW,EAAE,GAAG,EAAE,CAAC,eAAe;iBACnC,CAAC,CAAA;gBAEF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;oBAC5B,iBAAiB,CAAC,WAAW,CAAC,qBAAqB,GAAG;wBACpD,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,IAAI,kBAAU,CAAC,uCAAuC,CAAC;qBAC/D,CAAA;iBACF;qBAAM;oBACL,iBAAiB,CAAC,WAAW,CAAC,qBAAqB,GAAG;wBACpD,OAAO,EAAE,IAAI;qBACd,CAAA;iBACF;aACF;YAAC,OAAO,KAAK,EAAE;gBACd,iBAAiB,CAAC,WAAW,CAAC,qBAAqB,GAAG;oBACpD,OAAO,EAAE,KAAK;oBACd,KAAK;iBACN,CAAA;aACF;YAED,mEAAmE;YACnE,mGAAmG;YACnG,IAAI,YAAY,CAAC,QAAQ,IAAI,wBAAwB,CAAC,UAAU,KAAK,YAAY,CAAC,QAAQ,EAAE;gBAC1F,iBAAiB,CAAC,WAAW,CAAC,cAAc,GAAG;oBAC7C,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,kBAAU,CACnB,oDAAoD,wBAAwB,CAAC,EAAE,8CAA8C,YAAY,CAAC,QAAQ,GAAG,CACtJ;iBACF,CAAA;aACF;iBAAM;gBACL,iFAAiF;gBACjF,+EAA+E;gBAC/E,iBAAiB,CAAC,WAAW,CAAC,cAAc,GAAG;oBAC7C,OAAO,EAAE,IAAI;iBACd,CAAA;aACF;YAED,oEAAoE;YACpE,MAAM,WAAW,GAAG,IAAA,eAAO,EAAC,YAAY,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAA;YAE3E,2DAA2D;YAC3D,iBAAiB,CAAC,WAAW,CAAC,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3D,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;gBACnC,IAAI,UAAU,YAAY,8CAA6B,EAAE;oBACvD,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,IAAI,kBAAU,CACnB,8GAA8G,CAC/G;wBACD,WAAW,EAAE,EAAE;qBAChB,CAAA;iBACF;gBAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE;oBACjE,UAAU;oBACV,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;iBACvD,CAAC,CAAA;gBAEF,IAAI,+BAAuD,CAAA;gBAE3D,4HAA4H;gBAC5H,yFAAyF;gBACzF,qGAAqG;gBACrG,2FAA2F;gBAC3F,wGAAwG;gBACxG,+GAA+G;gBAC/G,2HAA2H;gBAC3H,MAAM,oBAAoB,GAAG,UAAU,CAAC,oBAAoB,CAAA;gBAC5D,MAAM,0CAA0C,GAAG,oBAAoB,CAAC,IAAI,CAC1E,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,CAAC,UAAU,KAAK,SAAS,CACjE,CAAA;gBAED,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBAClF,+BAA+B,GAAG;wBAChC,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,IAAI,kBAAU,CACnB,6GAA6G,CAC9G;qBACF,CAAA;iBACF;qBAAM;oBACL,+BAA+B,GAAG;wBAChC,OAAO,EAAE,IAAI;qBACd,CAAA;iBACF;gBAED,uCACK,gBAAgB,KACnB,OAAO,EAAE,gBAAgB,CAAC,OAAO,IAAI,+BAA+B,CAAC,OAAO,EAC5E,WAAW,kCACN,gBAAgB,CAAC,WAAW,KAC/B,+BAA+B,OAElC;YACH,CAAC,CAAC,CACH,CAAA;YAED,0DAA0D;YAC1D,iBAAiB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACnF,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAC3D,CAAA;YAED,OAAO,iBAAiB,CAAA;SACzB;QAAC,OAAO,KAAK,EAAE;YACd,iBAAiB,CAAC,KAAK,GAAG,KAAK,CAAA;YAC/B,OAAO,iBAAiB,CAAA;SACzB;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,YAA0B,EAC1B,kBAA0B,EAC1B,cAA6B;QAE7B,MAAM,WAAW,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yBAAkB,CAAC,CAAA;QAC9E,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAA;QAE1F,OAAO,WAAW,CAAC,cAAc,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACvE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACK,KAAK,CAAC,qCAAqC,CACjD,YAA0B,EAC1B,OAGC;;QAED,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;QACvC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAA;QAErC,MAAM,WAAW,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yBAAkB,CAAC,CAAA;QAE9E,qFAAqF;QACrF,kGAAkG;QAClG,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAA;QAE3C,IAAI,kBAAsC,CAAA;QAE1C,kHAAkH;QAClH,IAAI,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,UAAU,CAAC,GAAG,CAAC,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE;gBACb,MAAM,IAAI,kBAAU,CAAC,yEAAyE,CAAC,CAAA;aAChG;YAED,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;YAChF,kBAAkB,GAAG,WAAW,CAAC,cAAc,CAAC,GAAG,QAAQ,GAAG,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;SAC9E;QACD,yDAAyD;aACpD,IAAI,GAAG,IAAI,IAAA,aAAK,EAAC,GAAG,CAAC,EAAE;YAC1B,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;YAE3E,kBAAkB,GAAG,WAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAE7D,IAAI,QAAQ,IAAI,WAAW,CAAC,EAAE,KAAK,QAAQ,EAAE;gBAC3C,MAAM,IAAI,kBAAU,CAAC,QAAQ,GAAG,kDAAkD,QAAQ,GAAG,CAAC,CAAA;aAC/F;SACF;aAAM;YACL,IAAI,CAAC,QAAQ,EAAE;gBACb,MAAM,IAAI,kBAAU,CAAC,iEAAiE,CAAC,CAAA;aACxF;YAED,oFAAoF;YACpF,MAAM,QAAQ,GAAG,IAAA,0CAAoC,EAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChF,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,kBAAU,CAAC,wBAAwB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAA;YAEzF,MAAM,EAAE,gCAAgC,EAAE,GAAG,IAAA,gCAAyB,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAExF,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;YAChF,MAAM,mBAAmB,GACvB,MAAA,MAAA,WAAW,CAAC,eAAe,0CACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACtF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,mCAAI,EAAE,CAAA;YAE3E,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE;gBACpC,MAAM,IAAI,kBAAU,CAClB,6CAA6C,QAAQ,mBAAmB,QAAQ,CAAC,OAAO,cAAc,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,4EAA4E,CAC5M,CAAA;aACF;iBAAM,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE;gBACzC,MAAM,IAAI,kBAAU,CAClB,mDAAmD,QAAQ,mBAAmB,QAAQ,CAAC,OAAO,cAAc,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,4EAA4E,CAClN,CAAA;aACF;YAED,kBAAkB,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;SAC5C;QAED,uFAAuF;QACvF,IAAI,QAAQ,IAAI,kBAAkB,CAAC,UAAU,KAAK,QAAQ,EAAE;YAC1D,MAAM,IAAI,kBAAU,CAClB,mCAAmC,kBAAkB,CAAC,UAAU,gCAAgC,QAAQ,GAAG,CAC5G,CAAA;SACF;QAED,OAAO,kBAAkB,CAAA;IAC3B,CAAC;CACF,CAAA;AAvfY,uBAAuB;IADnC,IAAA,oBAAU,GAAE;qCAIoB,mBAAU;GAH9B,uBAAuB,CAufnC;AAvfY,0DAAuB"}

package/build/modules/vc/jwt-vc/W3cJwtVerifiableCredential.d.ts

@@ -0,0 +1,46 @@
+import type { W3cCredential } from '../models/credential/W3cCredential';
+import type { W3cJsonCredential } from '../models/credential/W3cJsonCredential';
+import { Jwt } from '../../../crypto/jose/jwt/Jwt';
+import { ClaimFormat } from '../models/ClaimFormat';
+export interface W3cJwtVerifiableCredentialOptions {
+    jwt: Jwt;
+}
+export declare class W3cJwtVerifiableCredential {
+    readonly jwt: Jwt;
+    private _credential;
+    constructor(options: W3cJwtVerifiableCredentialOptions);
+    static fromSerializedJwt(serializedJwt: string): W3cJwtVerifiableCredential;
+    /**
+     * Get the W3cCredential from the JWT payload. This does not include the JWT wrapper,
+     * and thus is not suitable for sharing. If you need a JWT, use the `serializedJwt` property.
+     *
+     * All properties and getters from the `W3cCredential` interface are implemented as getters
+     * on the `W3cJwtVerifiableCredential` class itself, so you can also use this directly
+     * instead of accessing the inner `credential` property.
+     */
+    get credential(): W3cCredential;
+    get serializedJwt(): string;
+    get context(): (string | import("../../..").JsonObject)[];
+    get id(): string | undefined;
+    get type(): string[];
+    get issuer(): string | import("..").W3cIssuer;
+    get issuanceDate(): string;
+    get expirationDate(): string | undefined;
+    get credentialSubject(): import("../../../utils").SingleOrArray<import("..").W3cCredentialSubject>;
+    get credentialSchema(): import("../../../utils").SingleOrArray<import("..").W3cCredentialSchema> | undefined;
+    get credentialStatus(): import("../models/credential/W3cCredentialStatus").W3cCredentialStatus | undefined;
+    get issuerId(): string;
+    get credentialSchemaIds(): string[];
+    get credentialSubjectIds(): string[];
+    get contexts(): (string | import("../../..").JsonObject)[];
+    /**
+     * The {@link ClaimFormat} of the credential. For JWT credentials this is always `jwt_vc`.
+     */
+    get claimFormat(): ClaimFormat.JwtVc;
+    /**
+     * Get the encoded variant of the W3C Verifiable Credential. For JWT credentials this is
+     * a JWT string.
+     */
+    get encoded(): string;
+    get jsonCredential(): W3cJsonCredential;
+}

package/build/modules/vc/jwt-vc/W3cJwtVerifiableCredential.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.W3cJwtVerifiableCredential = void 0;
+const Jwt_1 = require("../../../crypto/jose/jwt/Jwt");
+const utils_1 = require("../../../utils");
+const ClaimFormat_1 = require("../models/ClaimFormat");
+const credentialTransformer_1 = require("./credentialTransformer");
+class W3cJwtVerifiableCredential {
+    constructor(options) {
+        this.jwt = options.jwt;
+        this._credential = (0, credentialTransformer_1.getCredentialFromJwtPayload)(this.jwt.payload);
+    }
+    static fromSerializedJwt(serializedJwt) {
+        const jwt = Jwt_1.Jwt.fromSerializedJwt(serializedJwt);
+        return new W3cJwtVerifiableCredential({
+            jwt,
+        });
+    }
+    /**
+     * Get the W3cCredential from the JWT payload. This does not include the JWT wrapper,
+     * and thus is not suitable for sharing. If you need a JWT, use the `serializedJwt` property.
+     *
+     * All properties and getters from the `W3cCredential` interface are implemented as getters
+     * on the `W3cJwtVerifiableCredential` class itself, so you can also use this directly
+     * instead of accessing the inner `credential` property.
+     */
+    get credential() {
+        return this._credential;
+    }
+    get serializedJwt() {
+        return this.jwt.serializedJwt;
+    }
+    //
+    // Below all properties from the `W3cCredential` interface are implemented as getters
+    // this is to make the interface compatible with the W3cJsonLdVerifiableCredential interface
+    // which makes using the different classes interchangeably from a user point of view.
+    // This is 'easier' than extending the W3cCredential class as it means we have to create the
+    // instance based on JSON, but also add custom properties.
+    //
+    get context() {
+        return this.credential.context;
+    }
+    get id() {
+        return this.credential.id;
+    }
+    get type() {
+        return this.credential.type;
+    }
+    get issuer() {
+        return this.credential.issuer;
+    }
+    get issuanceDate() {
+        return this.credential.issuanceDate;
+    }
+    get expirationDate() {
+        return this.credential.expirationDate;
+    }
+    get credentialSubject() {
+        return this.credential.credentialSubject;
+    }
+    get credentialSchema() {
+        return this.credential.credentialSchema;
+    }
+    get credentialStatus() {
+        return this.credential.credentialStatus;
+    }
+    get issuerId() {
+        return this.credential.issuerId;
+    }
+    get credentialSchemaIds() {
+        return this.credential.credentialSchemaIds;
+    }
+    get credentialSubjectIds() {
+        return this.credential.credentialSubjectIds;
+    }
+    get contexts() {
+        return this.credential.contexts;
+    }
+    /**
+     * The {@link ClaimFormat} of the credential. For JWT credentials this is always `jwt_vc`.
+     */
+    get claimFormat() {
+        return ClaimFormat_1.ClaimFormat.JwtVc;
+    }
+    /**
+     * Get the encoded variant of the W3C Verifiable Credential. For JWT credentials this is
+     * a JWT string.
+     */
+    get encoded() {
+        return this.serializedJwt;
+    }
+    get jsonCredential() {
+        return utils_1.JsonTransformer.toJSON(this.credential);
+    }
+}
+exports.W3cJwtVerifiableCredential = W3cJwtVerifiableCredential;
+//# sourceMappingURL=W3cJwtVerifiableCredential.js.map

package/build/modules/vc/jwt-vc/W3cJwtVerifiableCredential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cJwtVerifiableCredential.js","sourceRoot":"","sources":["../../../../src/modules/vc/jwt-vc/W3cJwtVerifiableCredential.ts"],"names":[],"mappings":";;;AAGA,sDAAkD;AAClD,0CAAgD;AAChD,uDAAmD;AAEnD,mEAAqE;AAMrE,MAAa,0BAA0B;IAIrC,YAAmB,OAA0C;QAC3D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;QAEtB,IAAI,CAAC,WAAW,GAAG,IAAA,mDAA2B,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClE,CAAC;IAEM,MAAM,CAAC,iBAAiB,CAAC,aAAqB;QACnD,MAAM,GAAG,GAAG,SAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;QAEhD,OAAO,IAAI,0BAA0B,CAAC;YACpC,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,IAAW,UAAU;QACnB,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,IAAW,aAAa;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAA;IAC/B,CAAC;IAED,EAAE;IACF,qFAAqF;IACrF,4FAA4F;IAC5F,qFAAqF;IACrF,4FAA4F;IAC5F,0DAA0D;IAC1D,EAAE;IAEF,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAA;IAChC,CAAC;IAED,IAAW,EAAE;QACX,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAA;IAC3B,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAA;IAC7B,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAA;IAC/B,CAAC;IAED,IAAW,YAAY;QACrB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAA;IACrC,CAAC;IAED,IAAW,cAAc;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAA;IACvC,CAAC;IAED,IAAW,iBAAiB;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAA;IAC1C,CAAC;IAED,IAAW,gBAAgB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAA;IACzC,CAAC;IAED,IAAW,gBAAgB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAA;IACzC,CAAC;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAA;IACjC,CAAC;IAED,IAAW,mBAAmB;QAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAA;IAC5C,CAAC;IAED,IAAW,oBAAoB;QAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAA;IAC7C,CAAC;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAA;IACjC,CAAC;IAED;;OAEG;IACH,IAAW,WAAW;QACpB,OAAO,yBAAW,CAAC,KAAK,CAAA;IAC1B,CAAC;IAED;;;OAGG;IACH,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,aAAa,CAAA;IAC3B,CAAC;IAED,IAAW,cAAc;QACvB,OAAO,uBAAe,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAsB,CAAA;IACrE,CAAC;CACF;AAhHD,gEAgHC"}

package/build/modules/vc/jwt-vc/W3cJwtVerifiablePresentation.d.ts

@@ -0,0 +1,37 @@
+import type { W3cPresentation } from '../models';
+import { Jwt } from '../../../crypto/jose/jwt/Jwt';
+import { ClaimFormat } from '../models';
+export interface W3cJwtVerifiablePresentationOptions {
+    jwt: Jwt;
+}
+export declare class W3cJwtVerifiablePresentation {
+    readonly jwt: Jwt;
+    private _presentation;
+    constructor(options: W3cJwtVerifiablePresentationOptions);
+    static fromSerializedJwt(serializedJwt: string): W3cJwtVerifiablePresentation;
+    /**
+     * Get the W3cPresentation from the JWT payload. This does not include the JWT wrapper,
+     * and thus is not suitable for sharing. If you need a JWT, use the `serializedJwt` property.
+     *
+     * All properties and getters from the `W3cPresentation` interface are implemented as getters
+     * on the `W3cJwtVerifiablePresentation` class itself, so you can also use this directly
+     * instead of accessing the inner `presentation` property.
+     */
+    get presentation(): W3cPresentation;
+    get serializedJwt(): string;
+    get context(): (string | import("../../..").JsonObject)[];
+    get id(): string | undefined;
+    get type(): string[];
+    get holder(): string | import("../models/presentation/W3cHolder").W3cHolder | undefined;
+    get verifiableCredential(): import("../../../utils").SingleOrArray<import("..").W3cJsonLdVerifiableCredential | import("./W3cJwtVerifiableCredential").W3cJwtVerifiableCredential>;
+    get holderId(): string | null;
+    /**
+     * The {@link ClaimFormat} of the presentation. For JWT presentations this is always `jwt_vp`.
+     */
+    get claimFormat(): ClaimFormat.JwtVp;
+    /**
+     * Get the encoded variant of the W3C Verifiable Presentation. For JWT presentations this is
+     * a JWT string.
+     */
+    get encoded(): string;
+}