@credo-ts/core 0.6.2-alpha-20251211125344 → 0.6.2-alpha-20260108172346

package/build/modules/x509/X509ServiceOptions.d.mts

@@ -68,6 +68,7 @@ type X509CertificateExtensionsOptions = AddMarkAsCritical<{
     urls: Array<string>;
   };
 }>;
+type X509CertificateSigningRequestExtensionsOptions = Pick<X509CertificateExtensionsOptions, 'subjectKeyIdentifier' | 'keyUsage' | 'extendedKeyUsage' | 'subjectAlternativeName'>;
 interface X509CertificateIssuerAndSubjectOptions {
   countryName?: string;
   stateOrProvinceName?: string;
@@ -137,6 +138,26 @@ interface X509CreateCertificateOptions {
    */
   extensions?: X509CertificateExtensionsOptions;
 }
+interface X509CreateCertificateSigningRequestOptions {
+  /**
+   * The key that is the subject of the certificate signing request.
+   *
+   * If you want to influence the specific signature algorithm to use
+   * make sure to set the `alg` on the jwk.
+   */
+  subjectPublicKey: PublicJwk;
+  /**
+   * The subject information of the certificate signing request
+   */
+  subject: string | X509CertificateIssuerAndSubjectOptions;
+  /**
+   * X.509 v3 Extensions to be added to the certificate signing request
+   */
+  extensions?: X509CertificateSigningRequestExtensionsOptions;
+}
+interface X509ParseCertificateSigningRequestOptions {
+  encodedCertificateSigningRequest: string;
+}
 //#endregion
-export { EncodedX509Certificate, X509CertificateExtensionsOptions, X509CertificateIssuerAndSubjectOptions, X509CreateCertificateChainOptions, X509CreateCertificateOptions, X509GetLeafCertificateOptions, X509ParseCertificateOptions, X509ValidateCertificateChainOptions };
+export { EncodedX509Certificate, X509CertificateExtensionsOptions, X509CertificateIssuerAndSubjectOptions, X509CertificateSigningRequestExtensionsOptions, X509CreateCertificateChainOptions, X509CreateCertificateOptions, X509CreateCertificateSigningRequestOptions, X509GetLeafCertificateOptions, X509ParseCertificateOptions, X509ParseCertificateSigningRequestOptions, X509ValidateCertificateChainOptions };
 //# sourceMappingURL=X509ServiceOptions.d.mts.map

package/build/modules/x509/X509ServiceOptions.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"X509ServiceOptions.d.mts","names":[],"sources":["../../../src/modules/x509/X509ServiceOptions.ts"],"sourcesContent":[],"mappings":";;;;;;KAIK,4BAA4B,eAAe,4BAA4B,kBAC9D,IAAI,EAAE;;;AAHwE;;;AAEhB,KAShE,sBAAA,GATgE,MAAA;AAC9D,UAUG,mCAAA,CAVH;EAAI,gBAAA,EAWE,KAXF,CAWQ,sBAXR,CAAA;EAAE,WAAA,CAAA,EAaJ,sBAbI;EAAC;AAQrB;AAEA;;;;;;EAewB,gBAAA,CAAA,EAFH,IAEG;EAAK,mBAAA,CAAA,EAAL,KAAK,CAAC,sBAAD,CAAA;AAG7B;AAIiB,UAJA,6BAAA,CAI2B;EAI3B,gBAAA,EAPG,KAOH,CAAA,MAAA,CAAA;AAKjB;AAKkB,UAdD,2BAAA,CAcC;EAAN,kBAAA,EAAA,MAAA;;AAGA,UAbK,iCAAA,CAaL;EAMY,YAAA,EAlBR,KAkBQ,CAlBF,eAkBE,GAAA,MAAA,CAAA;EAAd,YAAA,CAAA,EAAA,KAAA,GAAA,QAAA;;AAGA,KAjBE,gCAAA,GAAmC,iBAiBrC,CAAA;EAOA,oBAAA,CAAA,EAAA;IAxBqC,OAAA,EAAA,OAAA;EAAiB,CAAA;EA4B/C,QAAA,CAAA,EAAA;IAOA,MAAA,EA9BL,KA8BK,CA9BC,YA8BD,CAA4B;EAa7B,CAAA;EAUK,gBAAA,CAAA,EAAA;IAOF,MAAA,EAzDP,KAyDO,CAzDD,oBAyDC,CAAA;EAUE,CAAA;EAaL,sBAAA,CAAA,EAAA;IAOD,OAAA,EAAA,OAAA;EAQA,CAAA;EAAgC,qBAAA,CAAA,EAAA;UAzFrC;YAAc;;;;;UAGd;YAAc;;;;;;;;;UAOd;;;UAIO,sCAAA;;;;;;UAOA,4BAAA;;;;;;;;;;;;gBAaD;;;;;;;;;qBAUK;;;;;;mBAOF;;;;;;;;;qBAUE;;;;;;;;;;;;gBAaL;;;;;;eAOD;;;;;;;eAQA"}
+{"version":3,"file":"X509ServiceOptions.d.mts","names":[],"sources":["../../../src/modules/x509/X509ServiceOptions.ts"],"sourcesContent":[],"mappings":";;;;;;KAIK,4BAA4B,eAAe,4BAA4B,kBAC9D,IAAI,EAAE;;;AAHwE;;;AAEhB,KAShE,sBAAA,GATgE,MAAA;AAC9D,UAUG,mCAAA,CAVH;EAAI,gBAAA,EAWE,KAXF,CAWQ,sBAXR,CAAA;EAAE,WAAA,CAAA,EAaJ,sBAbI;EAAC;AAQrB;AAEA;;;;;;EAewB,gBAAA,CAAA,EAFH,IAEG;EAAK,mBAAA,CAAA,EAAL,KAAK,CAAC,sBAAD,CAAA;AAG7B;AAIiB,UAJA,6BAAA,CAI2B;EAI3B,gBAAA,EAPG,KAOH,CAAA,MAAA,CAAA;AAKjB;AAKkB,UAdD,2BAAA,CAcC;EAAN,kBAAA,EAAA,MAAA;;AAGA,UAbK,iCAAA,CAaL;EAMY,YAAA,EAlBR,KAkBQ,CAlBF,eAkBE,GAAA,MAAA,CAAA;EAAd,YAAA,CAAA,EAAA,KAAA,GAAA,QAAA;;AAGA,KAjBE,gCAAA,GAAmC,iBAiBrC,CAAA;EAOA,oBAAA,CAAA,EAAA;IAxBqC,OAAA,EAAA,OAAA;EAAiB,CAAA;EA4BpD,QAAA,CAAA,EAAA;IAKK,MAAA,EA5BL,KA4BK,CA5BC,YA4BD,CAAA;EAOA,CAAA;EAaD,gBAAA,CAAA,EAAA;IAUK,MAAA,EAvDT,KAuDS,CAvDH,oBAuDG,CAAA;EAOF,CAAA;EAUE,sBAAA,CAAA,EAAA;IAaL,OAAA,EAAA,OAAA;EAOD,CAAA;EAQA,qBAAA,CAAA,EAAA;IAAgC,IAAA,EA9FrC,KA8FqC,CAAA;MAG9B,IAAA,EAjGO,eAiGP;MAOG,KAAA,EAAA,MAAA;IAKA,CAAA,CAAA;EAKL,CAAA;EAA8C,sBAAA,CAAA,EAAA;IAG5C,IAAA,EAlHP,KAkHO,CAAA;YAlHO;;;;;;;;;UAOd;;;KAIE,8CAAA,GAAiD,KAC3D;UAIe,sCAAA;;;;;;UAOA,4BAAA;;;;;;;;;;;;gBAaD;;;;;;;;;qBAUK;;;;;;mBAOF;;;;;;;;;qBAUE;;;;;;;;;;;;gBAaL;;;;;;eAOD;;;;;;;eAQA;;UAGE,0CAAA;;;;;;;oBAOG;;;;oBAKA;;;;eAKL;;UAGE,yCAAA"}

package/build/modules/x509/index.d.mts

@@ -1,5 +1,6 @@
-import { EncodedX509Certificate, X509CertificateExtensionsOptions, X509CertificateIssuerAndSubjectOptions, X509CreateCertificateChainOptions, X509CreateCertificateOptions, X509GetLeafCertificateOptions, X509ParseCertificateOptions, X509ValidateCertificateChainOptions } from "./X509ServiceOptions.mjs";
+import { EncodedX509Certificate, X509CertificateExtensionsOptions, X509CertificateIssuerAndSubjectOptions, X509CertificateSigningRequestExtensionsOptions, X509CreateCertificateChainOptions, X509CreateCertificateOptions, X509CreateCertificateSigningRequestOptions, X509GetLeafCertificateOptions, X509ParseCertificateOptions, X509ParseCertificateSigningRequestOptions, X509ValidateCertificateChainOptions } from "./X509ServiceOptions.mjs";
 import { X509Certificate, X509CertificateOptions, X509ExtendedKeyUsage, X509KeyUsage } from "./X509Certificate.mjs";
+import { CertificateSigningRequest, CertificateSigningRequestOptions } from "./CertificateSigningRequest.mjs";
 import { extractX509CertificatesFromJwt } from "./extraction.mjs";
 import { createAuthorityKeyIdentifierExtension, createBasicConstraintsExtension, createCrlDistributionPointsExtension, createExtendedKeyUsagesExtension, createIssuerAlternativeNameExtension, createKeyUsagesExtension, createSubjectAlternativeNameExtension, createSubjectKeyIdentifierExtension } from "./utils/extensions.mjs";
 import { convertName } from "./utils/nameConversion.mjs";

package/build/modules/x509/index.mjs

@@ -5,6 +5,7 @@ import { X509Error } from "./X509Error.mjs";
 import { convertName } from "./utils/nameConversion.mjs";
 import "./utils/index.mjs";
 import { X509Certificate, X509ExtendedKeyUsage, X509KeyUsage } from "./X509Certificate.mjs";
+import { CertificateSigningRequest } from "./CertificateSigningRequest.mjs";
 import { extractX509CertificatesFromJwt } from "./extraction.mjs";
 import { X509ModuleConfig } from "./X509ModuleConfig.mjs";
 import { X509Service } from "./X509Service.mjs";

package/build/modules/x509/utils/nameConversion.mjs

@@ -9,7 +9,7 @@ const convertName = (name) => {
 	if (name.commonName) nameBuilder = nameBuilder.concat(`CN=${name.commonName}, `);
 	if (name.countryName) nameBuilder = nameBuilder.concat(`C=${name.countryName}, `);
 	if (name.organizationalUnit) nameBuilder = nameBuilder.concat(`OU=${name.organizationalUnit}, `);
-	if (name.stateOrProvinceName) nameBuilder = nameBuilder.concat(`S=${name.stateOrProvinceName}, `);
+	if (name.stateOrProvinceName) nameBuilder = nameBuilder.concat(`ST=${name.stateOrProvinceName}, `);
 	if (nameBuilder.length === 0) throw new X509Error("Provided name object has no entries. Could not generate an issuer/subject name");
 	return nameBuilder.slice(0, nameBuilder.length - 2);
 };

package/build/modules/x509/utils/nameConversion.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"nameConversion.mjs","names":[],"sources":["../../../../src/modules/x509/utils/nameConversion.ts"],"sourcesContent":["import { X509Error } from '../X509Error'\nimport type { X509CertificateIssuerAndSubjectOptions } from '../X509ServiceOptions'\n\nexport const convertName = (name: string | X509CertificateIssuerAndSubjectOptions) => {\n  if (typeof name === 'string') return name\n\n  let nameBuilder = ''\n\n  if (name.commonName) nameBuilder = nameBuilder.concat(`CN=${name.commonName}, `)\n  if (name.countryName) nameBuilder = nameBuilder.concat(`C=${name.countryName}, `)\n  if (name.organizationalUnit) nameBuilder = nameBuilder.concat(`OU=${name.organizationalUnit}, `)\n  if (name.stateOrProvinceName) nameBuilder = nameBuilder.concat(`S=${name.stateOrProvinceName}, `)\n\n  if (nameBuilder.length === 0) {\n    throw new X509Error('Provided name object has no entries. Could not generate an issuer/subject name')\n  }\n\n  // Remove the trailing `, `\n  return nameBuilder.slice(0, nameBuilder.length - 2)\n}\n"],"mappings":";;;;;AAGA,MAAa,eAAe,SAA0D;AACpF,KAAI,OAAO,SAAS,SAAU,QAAO;CAErC,IAAI,cAAc;AAElB,KAAI,KAAK,WAAY,eAAc,YAAY,OAAO,MAAM,KAAK,WAAW,IAAI;AAChF,KAAI,KAAK,YAAa,eAAc,YAAY,OAAO,KAAK,KAAK,YAAY,IAAI;AACjF,KAAI,KAAK,mBAAoB,eAAc,YAAY,OAAO,MAAM,KAAK,mBAAmB,IAAI;AAChG,KAAI,KAAK,oBAAqB,eAAc,YAAY,OAAO,KAAK,KAAK,oBAAoB,IAAI;AAEjG,KAAI,YAAY,WAAW,EACzB,OAAM,IAAI,UAAU,iFAAiF;AAIvG,QAAO,YAAY,MAAM,GAAG,YAAY,SAAS,EAAE"}
+{"version":3,"file":"nameConversion.mjs","names":[],"sources":["../../../../src/modules/x509/utils/nameConversion.ts"],"sourcesContent":["import { X509Error } from '../X509Error'\nimport type { X509CertificateIssuerAndSubjectOptions } from '../X509ServiceOptions'\n\nexport const convertName = (name: string | X509CertificateIssuerAndSubjectOptions) => {\n  if (typeof name === 'string') return name\n\n  let nameBuilder = ''\n\n  if (name.commonName) nameBuilder = nameBuilder.concat(`CN=${name.commonName}, `)\n  if (name.countryName) nameBuilder = nameBuilder.concat(`C=${name.countryName}, `)\n  if (name.organizationalUnit) nameBuilder = nameBuilder.concat(`OU=${name.organizationalUnit}, `)\n  if (name.stateOrProvinceName) nameBuilder = nameBuilder.concat(`ST=${name.stateOrProvinceName}, `)\n\n  if (nameBuilder.length === 0) {\n    throw new X509Error('Provided name object has no entries. Could not generate an issuer/subject name')\n  }\n\n  // Remove the trailing `, `\n  return nameBuilder.slice(0, nameBuilder.length - 2)\n}\n"],"mappings":";;;;;AAGA,MAAa,eAAe,SAA0D;AACpF,KAAI,OAAO,SAAS,SAAU,QAAO;CAErC,IAAI,cAAc;AAElB,KAAI,KAAK,WAAY,eAAc,YAAY,OAAO,MAAM,KAAK,WAAW,IAAI;AAChF,KAAI,KAAK,YAAa,eAAc,YAAY,OAAO,KAAK,KAAK,YAAY,IAAI;AACjF,KAAI,KAAK,mBAAoB,eAAc,YAAY,OAAO,MAAM,KAAK,mBAAmB,IAAI;AAChG,KAAI,KAAK,oBAAqB,eAAc,YAAY,OAAO,MAAM,KAAK,oBAAoB,IAAI;AAElG,KAAI,YAAY,WAAW,EACzB,OAAM,IAAI,UAAU,iFAAiF;AAIvG,QAAO,YAAY,MAAM,GAAG,YAAY,SAAS,EAAE"}

package/build/utils/IntegrityVerifier.d.mts

@@ -0,0 +1,44 @@
+//#region src/utils/IntegrityVerifier.d.ts
+/**
+ * Verifies Subresource Integrity (SRI) metadata according to W3C specification.
+ *
+ * This class implements the verification logic for integrity metadata strings
+ * as defined in the W3C Subresource Integrity specification.
+ *
+ * @see https://www.w3.org/TR/SRI/
+ */
+declare class IntegrityVerifier {
+  /**
+   * Verifies the integrity of raw data against provided integrity metadata.
+   *
+   * @param data - The data to verify
+   * @param integrityMetadata - The integrity metadata string (e.g., "sha256-...")
+   * @throws {CredoError} if verification fails
+   */
+  static verifyIntegrity(data: Uint8Array, integrityMetadata: string): void;
+  /**
+   * Parses integrity metadata string into structured format.
+   *
+   * @param metadata - The integrity metadata string
+   * @returns Array of parsed metadata objects
+   */
+  private static parseIntegrityMetadata;
+  /**
+   * Returns the metadata for the strongest algorithm(s) in the set.
+   *
+   * @param metadataSet - Array of parsed metadata
+   * @returns Array containing only the strongest algorithm's metadata
+   */
+  private static getStrongestMetadata;
+  /**
+   * Applies the specified hash algorithm to the given bytes.
+   *
+   * @param bytes - The bytes to hash
+   * @param algorithm - The hash algorithm name
+   * @returns Base64-encoded hash value
+   */
+  private static applyAlgorithmToBytes;
+}
+//#endregion
+export { IntegrityVerifier };
+//# sourceMappingURL=IntegrityVerifier.d.mts.map

package/build/utils/IntegrityVerifier.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IntegrityVerifier.d.mts","names":[],"sources":["../../src/utils/IntegrityVerifier.ts"],"sourcesContent":[],"mappings":";;;;AAaA;;;;;cAAa,iBAAA;;;;;;;;+BAQyB"}

package/build/utils/index.d.mts

@@ -2,6 +2,7 @@ import { Buffer } from "./buffer.mjs";
 import { asArray } from "./array.mjs";
 import { deepEquality, equalsIgnoreOrder, equalsWithOrder } from "./deepEquality.mjs";
 import { indyDidFromPublicKeyBase58, isDid } from "./did.mjs";
+import { IntegrityVerifier } from "./IntegrityVerifier.mjs";
 import { JsonEncoder } from "./JsonEncoder.mjs";
 import { JsonTransformer } from "./JsonTransformer.mjs";
 import { MessageValidator } from "./MessageValidator.mjs";

package/package.json

@@ -4,7 +4,7 @@
     ".": "./build/index.mjs",
     "./package.json": "./package.json"
   },
-  "version": "0.6.2-alpha-20251211125344",
+  "version": "0.6.2-alpha-20260108172346",
   "files": [
     "build"
   ],