@credo-ts/openid4vc 0.5.0-alpha.115

package/build/openid4vc-issuer/OpenId4VcIssuerApi.js

@@ -0,0 +1,111 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcIssuerApi = void 0;
+const core_1 = require("@credo-ts/core");
+const OpenId4VcIssuerModuleConfig_1 = require("./OpenId4VcIssuerModuleConfig");
+const OpenId4VcIssuerService_1 = require("./OpenId4VcIssuerService");
+/**
+ * @public
+ * This class represents the API for interacting with the OpenID4VC Issuer service.
+ * It provides methods for creating a credential offer, creating a response to a credential issuance request,
+ * and retrieving a credential offer from a URI.
+ */
+let OpenId4VcIssuerApi = class OpenId4VcIssuerApi {
+    constructor(config, agentContext, openId4VcIssuerService) {
+        this.config = config;
+        this.agentContext = agentContext;
+        this.openId4VcIssuerService = openId4VcIssuerService;
+    }
+    async getAllIssuers() {
+        return this.openId4VcIssuerService.getAllIssuers(this.agentContext);
+    }
+    async getByIssuerId(issuerId) {
+        return this.openId4VcIssuerService.getByIssuerId(this.agentContext, issuerId);
+    }
+    /**
+     * Creates an issuer and stores the corresponding issuer metadata. Multiple issuers can be created, to allow different sets of
+     * credentials to be issued with each issuer.
+     */
+    async createIssuer(options) {
+        return this.openId4VcIssuerService.createIssuer(this.agentContext, options);
+    }
+    /**
+     * Rotate the key used for signing access tokens for the issuer with the given issuerId.
+     */
+    async rotateAccessTokenSigningKey(issuerId) {
+        const issuer = await this.openId4VcIssuerService.getByIssuerId(this.agentContext, issuerId);
+        return this.openId4VcIssuerService.rotateAccessTokenSigningKey(this.agentContext, issuer);
+    }
+    async getIssuerMetadata(issuerId) {
+        const issuer = await this.openId4VcIssuerService.getByIssuerId(this.agentContext, issuerId);
+        return this.openId4VcIssuerService.getIssuerMetadata(this.agentContext, issuer);
+    }
+    async updateIssuerMetadata(options) {
+        const issuer = await this.openId4VcIssuerService.getByIssuerId(this.agentContext, options.issuerId);
+        issuer.credentialsSupported = options.credentialsSupported;
+        issuer.display = options.display;
+        return this.openId4VcIssuerService.updateIssuer(this.agentContext, issuer);
+    }
+    /**
+     * Creates a credential offer. Either the preAuthorizedCodeFlowConfig or the authorizationCodeFlowConfig must be provided.
+     *
+     * @returns Object containing the payload of the credential offer and the credential offer request, which can be sent to the wallet.
+     */
+    async createCredentialOffer(options) {
+        const { issuerId } = options, rest = __rest(options, ["issuerId"]);
+        const issuer = await this.openId4VcIssuerService.getByIssuerId(this.agentContext, issuerId);
+        return await this.openId4VcIssuerService.createCredentialOffer(this.agentContext, Object.assign(Object.assign({}, rest), { issuer }));
+    }
+    /**
+     * This function retrieves the credential offer referenced by the given URI.
+     * Retrieving a credential offer from a URI is possible after a credential offer was created with
+     * @see createCredentialOffer and the credentialOfferUri option.
+     *
+     * @throws if no credential offer can found for the given URI.
+     * @param uri - The URI referencing the credential offer.
+     * @returns The credential offer payload associated with the given URI.
+     */
+    async getCredentialOfferFromUri(uri) {
+        return await this.openId4VcIssuerService.getCredentialOfferFromUri(this.agentContext, uri);
+    }
+    /**
+     * This function creates a response which can be send to the holder after receiving a credential issuance request.
+     *
+     * @param options.credentialRequest - The credential request, for which to create a response.
+     * @param options.credential - The credential to be issued.
+     * @param options.verificationMethod - The verification method used for signing the credential.
+     */
+    async createCredentialResponse(options) {
+        const { issuerId } = options, rest = __rest(options, ["issuerId"]);
+        const issuer = await this.openId4VcIssuerService.getByIssuerId(this.agentContext, issuerId);
+        return await this.openId4VcIssuerService.createCredentialResponse(this.agentContext, Object.assign(Object.assign({}, rest), { issuer }));
+    }
+};
+OpenId4VcIssuerApi = __decorate([
+    (0, core_1.injectable)(),
+    __metadata("design:paramtypes", [OpenId4VcIssuerModuleConfig_1.OpenId4VcIssuerModuleConfig,
+        core_1.AgentContext,
+        OpenId4VcIssuerService_1.OpenId4VcIssuerService])
+], OpenId4VcIssuerApi);
+exports.OpenId4VcIssuerApi = OpenId4VcIssuerApi;
+//# sourceMappingURL=OpenId4VcIssuerApi.js.map

package/build/openid4vc-issuer/OpenId4VcIssuerApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerApi.js","sourceRoot":"","sources":["../../src/openid4vc-issuer/OpenId4VcIssuerApi.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAQA,yCAAyD;AAEzD,+EAA2E;AAC3E,qEAAiE;AAEjE;;;;;GAKG;AAEI,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YACkB,MAAmC,EAC3C,YAA0B,EAC1B,sBAA8C;QAFtC,WAAM,GAAN,MAAM,CAA6B;QAC3C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,2BAAsB,GAAtB,sBAAsB,CAAwB;IACrD,CAAC;IAEG,KAAK,CAAC,aAAa;QACxB,OAAO,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACrE,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,QAAgB;QACzC,OAAO,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IAC/E,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,YAAY,CAAC,OAAsC;QAC9D,OAAO,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC7E,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,2BAA2B,CAAC,QAAgB;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QAC3F,OAAO,IAAI,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAC3F,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QAC3F,OAAO,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IACjF,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAC/B,OAA0F;QAE1F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAEnG,MAAM,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAA;QAC1D,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAEhC,OAAO,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAC5E,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,qBAAqB,CAAC,OAAsE;QACvG,MAAM,EAAE,QAAQ,KAAc,OAAO,EAAhB,IAAI,UAAK,OAAO,EAA/B,YAAqB,CAAU,CAAA;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QAC3F,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,kCAAO,IAAI,KAAE,MAAM,IAAG,CAAA;IACxG,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,yBAAyB,CAAC,GAAW;QAChD,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IAC5F,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,wBAAwB,CAAC,OAAyE;QAC7G,MAAM,EAAE,QAAQ,KAAc,OAAO,EAAhB,IAAI,UAAK,OAAO,EAA/B,YAAqB,CAAU,CAAA;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QAC3F,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,IAAI,CAAC,YAAY,kCAAO,IAAI,KAAE,MAAM,IAAG,CAAA;IAC3G,CAAC;CACF,CAAA;AAnFY,kBAAkB;IAD9B,IAAA,iBAAU,GAAE;qCAGe,yDAA2B;QAC7B,mBAAY;QACF,+CAAsB;GAJ7C,kBAAkB,CAmF9B;AAnFY,gDAAkB"}

package/build/openid4vc-issuer/OpenId4VcIssuerModule.d.ts

@@ -0,0 +1,21 @@
+import type { OpenId4VcIssuerModuleConfigOptions } from './OpenId4VcIssuerModuleConfig';
+import type { AgentContext, DependencyManager, Module } from '@credo-ts/core';
+import { OpenId4VcIssuerApi } from './OpenId4VcIssuerApi';
+import { OpenId4VcIssuerModuleConfig } from './OpenId4VcIssuerModuleConfig';
+/**
+ * @public
+ */
+export declare class OpenId4VcIssuerModule implements Module {
+    readonly api: typeof OpenId4VcIssuerApi;
+    readonly config: OpenId4VcIssuerModuleConfig;
+    constructor(options: OpenId4VcIssuerModuleConfigOptions);
+    /**
+     * Registers the dependencies of the question answer module on the dependency manager.
+     */
+    register(dependencyManager: DependencyManager): void;
+    initialize(rootAgentContext: AgentContext): Promise<void>;
+    /**
+     * Registers the endpoints on the router passed to this module.
+     */
+    private configureRouter;
+}

package/build/openid4vc-issuer/OpenId4VcIssuerModule.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcIssuerModule = void 0;
+const core_1 = require("@credo-ts/core");
+const router_1 = require("../shared/router");
+const OpenId4VcIssuerApi_1 = require("./OpenId4VcIssuerApi");
+const OpenId4VcIssuerModuleConfig_1 = require("./OpenId4VcIssuerModuleConfig");
+const OpenId4VcIssuerService_1 = require("./OpenId4VcIssuerService");
+const OpenId4VcIssuerRepository_1 = require("./repository/OpenId4VcIssuerRepository");
+const router_2 = require("./router");
+/**
+ * @public
+ */
+class OpenId4VcIssuerModule {
+    constructor(options) {
+        this.api = OpenId4VcIssuerApi_1.OpenId4VcIssuerApi;
+        this.config = new OpenId4VcIssuerModuleConfig_1.OpenId4VcIssuerModuleConfig(options);
+    }
+    /**
+     * Registers the dependencies of the question answer module on the dependency manager.
+     */
+    register(dependencyManager) {
+        // Warn about experimental module
+        dependencyManager
+            .resolve(core_1.AgentConfig)
+            .logger.warn("The '@credo-ts/openid4vc' Issuer module is experimental and could have unexpected breaking changes. When using this module, make sure to use strict versions for all @credo-ts packages.");
+        // Register config
+        dependencyManager.registerInstance(OpenId4VcIssuerModuleConfig_1.OpenId4VcIssuerModuleConfig, this.config);
+        // Services
+        dependencyManager.registerSingleton(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
+        // Repository
+        dependencyManager.registerSingleton(OpenId4VcIssuerRepository_1.OpenId4VcIssuerRepository);
+    }
+    async initialize(rootAgentContext) {
+        this.configureRouter(rootAgentContext);
+    }
+    /**
+     * Registers the endpoints on the router passed to this module.
+     */
+    configureRouter(rootAgentContext) {
+        const { Router, json, urlencoded } = (0, router_1.importExpress)();
+        // TODO: it is currently not possible to initialize an agent
+        // shut it down, and then start it again, as the
+        // express router is configured with a specific `AgentContext` instance
+        // and dependency manager. One option is to always create a new router
+        // but then users cannot pass their own router implementation.
+        // We need to find a proper way to fix this.
+        // We use separate context router and endpoint router. Context router handles the linking of the request
+        // to a specific agent context. Endpoint router only knows about a single context
+        const endpointRouter = Router();
+        const contextRouter = this.config.router;
+        // parse application/x-www-form-urlencoded
+        contextRouter.use(urlencoded({ extended: false }));
+        // parse application/json
+        contextRouter.use(json());
+        contextRouter.param('issuerId', async (req, _res, next, issuerId) => {
+            if (!issuerId) {
+                rootAgentContext.config.logger.debug('No issuerId provided for incoming oid4vci request, returning 404');
+                _res.status(404).send('Not found');
+            }
+            let agentContext = undefined;
+            try {
+                // FIXME: should we create combined openId actor record?
+                agentContext = await (0, router_1.getAgentContextForActorId)(rootAgentContext, issuerId);
+                const issuerApi = agentContext.dependencyManager.resolve(OpenId4VcIssuerApi_1.OpenId4VcIssuerApi);
+                const issuer = await issuerApi.getByIssuerId(issuerId);
+                req.requestContext = {
+                    agentContext,
+                    issuer,
+                };
+            }
+            catch (error) {
+                agentContext === null || agentContext === void 0 ? void 0 : agentContext.config.logger.error('Failed to correlate incoming oid4vci request to existing tenant and issuer', {
+                    error,
+                });
+                // If the opening failed
+                await (agentContext === null || agentContext === void 0 ? void 0 : agentContext.endSession());
+                return _res.status(404).send('Not found');
+            }
+            next();
+        });
+        contextRouter.use('/:issuerId', endpointRouter);
+        // Configure endpoints
+        (0, router_2.configureIssuerMetadataEndpoint)(endpointRouter);
+        (0, router_2.configureAccessTokenEndpoint)(endpointRouter, this.config.accessTokenEndpoint);
+        (0, router_2.configureCredentialEndpoint)(endpointRouter, this.config.credentialEndpoint);
+        // First one will be called for all requests (when next is called)
+        contextRouter.use(async (req, _res, next) => {
+            const { agentContext } = (0, router_1.getRequestContext)(req);
+            await agentContext.endSession();
+            next();
+        });
+        // This one will be called for all errors that are thrown
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        contextRouter.use(async (_error, req, _res, next) => {
+            const { agentContext } = (0, router_1.getRequestContext)(req);
+            await agentContext.endSession();
+            next();
+        });
+    }
+}
+exports.OpenId4VcIssuerModule = OpenId4VcIssuerModule;
+//# sourceMappingURL=OpenId4VcIssuerModule.js.map

package/build/openid4vc-issuer/OpenId4VcIssuerModule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerModule.js","sourceRoot":"","sources":["../../src/openid4vc-issuer/OpenId4VcIssuerModule.ts"],"names":[],"mappings":";;;AAIA,yCAA4C;AAE5C,6CAA8F;AAE9F,6DAAyD;AACzD,+EAA2E;AAC3E,qEAAiE;AACjE,sFAAkF;AAClF,qCAAqH;AAErH;;GAEG;AACH,MAAa,qBAAqB;IAIhC,YAAmB,OAA2C;QAH9C,QAAG,GAAG,uCAAkB,CAAA;QAItC,IAAI,CAAC,MAAM,GAAG,IAAI,yDAA2B,CAAC,OAAO,CAAC,CAAA;IACxD,CAAC;IAED;;OAEG;IACI,QAAQ,CAAC,iBAAoC;QAClD,iCAAiC;QACjC,iBAAiB;aACd,OAAO,CAAC,kBAAW,CAAC;aACpB,MAAM,CAAC,IAAI,CACV,0LAA0L,CAC3L,CAAA;QAEH,kBAAkB;QAClB,iBAAiB,CAAC,gBAAgB,CAAC,yDAA2B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAE5E,WAAW;QACX,iBAAiB,CAAC,iBAAiB,CAAC,+CAAsB,CAAC,CAAA;QAE3D,aAAa;QACb,iBAAiB,CAAC,iBAAiB,CAAC,qDAAyB,CAAC,CAAA;IAChE,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,gBAA8B;QACpD,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAA;IACxC,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,gBAA8B;QACpD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAA,sBAAa,GAAE,CAAA;QAEpD,4DAA4D;QAC5D,gDAAgD;QAChD,uEAAuE;QACvE,sEAAsE;QACtE,8DAA8D;QAC9D,4CAA4C;QAE5C,wGAAwG;QACxG,iFAAiF;QACjF,MAAM,cAAc,GAAG,MAAM,EAAE,CAAA;QAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA;QAExC,0CAA0C;QAC1C,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QAClD,yBAAyB;QACzB,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QAEzB,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,GAA6B,EAAE,IAAI,EAAE,IAAI,EAAE,QAAgB,EAAE,EAAE;YACpG,IAAI,CAAC,QAAQ,EAAE;gBACb,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAA;gBACxG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;aACnC;YAED,IAAI,YAAY,GAA6B,SAAS,CAAA;YAEtD,IAAI;gBACF,wDAAwD;gBACxD,YAAY,GAAG,MAAM,IAAA,kCAAyB,EAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;gBAC1E,MAAM,SAAS,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,uCAAkB,CAAC,CAAA;gBAC5E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;gBAEtD,GAAG,CAAC,cAAc,GAAG;oBACnB,YAAY;oBACZ,MAAM;iBACP,CAAA;aACF;YAAC,OAAO,KAAK,EAAE;gBACd,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/B,4EAA4E,EAC5E;oBACE,KAAK;iBACN,CACF,CAAA;gBACD,wBAAwB;gBACxB,MAAM,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,UAAU,EAAE,CAAA,CAAA;gBAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;aAC1C;YAED,IAAI,EAAE,CAAA;QACR,CAAC,CAAC,CAAA;QAEF,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;QAE/C,sBAAsB;QACtB,IAAA,wCAA+B,EAAC,cAAc,CAAC,CAAA;QAC/C,IAAA,qCAA4B,EAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC7E,IAAA,oCAA2B,EAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAE3E,kEAAkE;QAClE,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAA6B,EAAE,IAAa,EAAE,IAAI,EAAE,EAAE;YAC7E,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,0BAAiB,EAAC,GAAG,CAAC,CAAA;YAC/C,MAAM,YAAY,CAAC,UAAU,EAAE,CAAA;YAC/B,IAAI,EAAE,CAAA;QACR,CAAC,CAAC,CAAA;QAEF,yDAAyD;QACzD,8DAA8D;QAC9D,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAe,EAAE,GAA6B,EAAE,IAAa,EAAE,IAAS,EAAE,EAAE;YACnG,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,0BAAiB,EAAC,GAAG,CAAC,CAAA;YAC/C,MAAM,YAAY,CAAC,UAAU,EAAE,CAAA;YAC/B,IAAI,EAAE,CAAA;QACR,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAhHD,sDAgHC"}

package/build/openid4vc-issuer/OpenId4VcIssuerModuleConfig.d.ts

@@ -0,0 +1,43 @@
+import type { OpenId4VciAccessTokenEndpointConfig, OpenId4VciCredentialEndpointConfig } from './router';
+import type { AgentContext, Optional } from '@credo-ts/core';
+import type { CNonceState, CredentialOfferSession, IStateManager, URIState } from '@sphereon/oid4vci-common';
+import type { Router } from 'express';
+export interface OpenId4VcIssuerModuleConfigOptions {
+    /**
+     * Base url at which the issuer endpoints will be hosted. All endpoints will be exposed with
+     * this path as prefix.
+     */
+    baseUrl: string;
+    /**
+     * Express router on which the openid4vci endpoints will be registered. If
+     * no router is provided, a new one will be created.
+     *
+     * NOTE: you must manually register the router on your express app and
+     * expose this on a public url that is reachable when `baseUrl` is called.
+     */
+    router?: Router;
+    endpoints: {
+        credential: Optional<OpenId4VciCredentialEndpointConfig, 'endpointPath'>;
+        accessToken?: Optional<OpenId4VciAccessTokenEndpointConfig, 'cNonceExpiresInSeconds' | 'endpointPath' | 'preAuthorizedCodeExpirationInSeconds' | 'tokenExpiresInSeconds'>;
+    };
+}
+export declare class OpenId4VcIssuerModuleConfig {
+    private options;
+    readonly router: Router;
+    private credentialOfferSessionManagerMap;
+    private uriStateManagerMap;
+    private cNonceStateManagerMap;
+    constructor(options: OpenId4VcIssuerModuleConfigOptions);
+    get baseUrl(): string;
+    /**
+     * Get the credential endpoint config, with default values set
+     */
+    get credentialEndpoint(): OpenId4VciCredentialEndpointConfig;
+    /**
+     * Get the access token endpoint config, with default values set
+     */
+    get accessTokenEndpoint(): OpenId4VciAccessTokenEndpointConfig;
+    getUriStateManager(agentContext: AgentContext): IStateManager<URIState>;
+    getCredentialOfferSessionStateManager(agentContext: AgentContext): IStateManager<CredentialOfferSession>;
+    getCNonceStateManager(agentContext: AgentContext): IStateManager<CNonceState>;
+}

package/build/openid4vc-issuer/OpenId4VcIssuerModuleConfig.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcIssuerModuleConfig = void 0;
+const oid4vci_issuer_1 = require("@sphereon/oid4vci-issuer");
+const router_1 = require("../shared/router");
+const DEFAULT_C_NONCE_EXPIRES_IN = 5 * 60 * 1000; // 5 minutes
+const DEFAULT_TOKEN_EXPIRES_IN = 3 * 60 * 1000; // 3 minutes
+const DEFAULT_PRE_AUTH_CODE_EXPIRES_IN = 3 * 60 * 1000; // 3 minutes
+class OpenId4VcIssuerModuleConfig {
+    constructor(options) {
+        var _a;
+        this.uriStateManagerMap = new Map();
+        this.credentialOfferSessionManagerMap = new Map();
+        this.cNonceStateManagerMap = new Map();
+        this.options = options;
+        this.router = (_a = options.router) !== null && _a !== void 0 ? _a : (0, router_1.importExpress)().Router();
+    }
+    get baseUrl() {
+        return this.options.baseUrl;
+    }
+    /**
+     * Get the credential endpoint config, with default values set
+     */
+    get credentialEndpoint() {
+        var _a;
+        // Use user supplied options, or return defaults.
+        const userOptions = this.options.endpoints.credential;
+        return Object.assign(Object.assign({}, userOptions), { endpointPath: (_a = userOptions.endpointPath) !== null && _a !== void 0 ? _a : '/credential' });
+    }
+    /**
+     * Get the access token endpoint config, with default values set
+     */
+    get accessTokenEndpoint() {
+        var _a, _b, _c, _d, _e;
+        // Use user supplied options, or return defaults.
+        const userOptions = (_a = this.options.endpoints.accessToken) !== null && _a !== void 0 ? _a : {};
+        return Object.assign(Object.assign({}, userOptions), { endpointPath: (_b = userOptions.endpointPath) !== null && _b !== void 0 ? _b : '/token', cNonceExpiresInSeconds: (_c = userOptions.cNonceExpiresInSeconds) !== null && _c !== void 0 ? _c : DEFAULT_C_NONCE_EXPIRES_IN, preAuthorizedCodeExpirationInSeconds: (_d = userOptions.preAuthorizedCodeExpirationInSeconds) !== null && _d !== void 0 ? _d : DEFAULT_PRE_AUTH_CODE_EXPIRES_IN, tokenExpiresInSeconds: (_e = userOptions.tokenExpiresInSeconds) !== null && _e !== void 0 ? _e : DEFAULT_TOKEN_EXPIRES_IN });
+    }
+    // FIXME: rework (no in-memory)
+    getUriStateManager(agentContext) {
+        const value = this.uriStateManagerMap.get(agentContext.contextCorrelationId);
+        if (value)
+            return value;
+        const newValue = new oid4vci_issuer_1.MemoryStates();
+        this.uriStateManagerMap.set(agentContext.contextCorrelationId, newValue);
+        return newValue;
+    }
+    // FIXME: rework (no in-memory)
+    getCredentialOfferSessionStateManager(agentContext) {
+        const value = this.credentialOfferSessionManagerMap.get(agentContext.contextCorrelationId);
+        if (value)
+            return value;
+        const newValue = new oid4vci_issuer_1.MemoryStates();
+        this.credentialOfferSessionManagerMap.set(agentContext.contextCorrelationId, newValue);
+        return newValue;
+    }
+    // FIXME: rework (no in-memory)
+    getCNonceStateManager(agentContext) {
+        const value = this.cNonceStateManagerMap.get(agentContext.contextCorrelationId);
+        if (value)
+            return value;
+        const newValue = new oid4vci_issuer_1.MemoryStates();
+        this.cNonceStateManagerMap.set(agentContext.contextCorrelationId, newValue);
+        return newValue;
+    }
+}
+exports.OpenId4VcIssuerModuleConfig = OpenId4VcIssuerModuleConfig;
+//# sourceMappingURL=OpenId4VcIssuerModuleConfig.js.map

package/build/openid4vc-issuer/OpenId4VcIssuerModuleConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerModuleConfig.js","sourceRoot":"","sources":["../../src/openid4vc-issuer/OpenId4VcIssuerModuleConfig.ts"],"names":[],"mappings":";;;AAKA,6DAAuD;AAEvD,6CAAgD;AAEhD,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,YAAY;AAC7D,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,YAAY;AAC3D,MAAM,gCAAgC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,YAAY;AA2BnE,MAAa,2BAA2B;IAQtC,YAAmB,OAA2C;;QAC5D,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,EAAE,CAAA;QACnC,IAAI,CAAC,gCAAgC,GAAG,IAAI,GAAG,EAAE,CAAA;QACjD,IAAI,CAAC,qBAAqB,GAAG,IAAI,GAAG,EAAE,CAAA;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QAEtB,IAAI,CAAC,MAAM,GAAG,MAAA,OAAO,CAAC,MAAM,mCAAI,IAAA,sBAAa,GAAE,CAAC,MAAM,EAAE,CAAA;IAC1D,CAAC;IAED,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAA;IAC7B,CAAC;IAED;;OAEG;IACH,IAAW,kBAAkB;;QAC3B,iDAAiD;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAA;QAErD,uCACK,WAAW,KACd,YAAY,EAAE,MAAA,WAAW,CAAC,YAAY,mCAAI,aAAa,IACxD;IACH,CAAC;IAED;;OAEG;IACH,IAAW,mBAAmB;;QAC5B,iDAAiD;QACjD,MAAM,WAAW,GAAG,MAAA,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,mCAAI,EAAE,CAAA;QAE5D,uCACK,WAAW,KACd,YAAY,EAAE,MAAA,WAAW,CAAC,YAAY,mCAAI,QAAQ,EAClD,sBAAsB,EAAE,MAAA,WAAW,CAAC,sBAAsB,mCAAI,0BAA0B,EACxF,oCAAoC,EAClC,MAAA,WAAW,CAAC,oCAAoC,mCAAI,gCAAgC,EACtF,qBAAqB,EAAE,MAAA,WAAW,CAAC,qBAAqB,mCAAI,wBAAwB,IACrF;IACH,CAAC;IAED,+BAA+B;IACxB,kBAAkB,CAAC,YAA0B;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAA;QAC5E,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,QAAQ,GAAG,IAAI,6BAAY,EAAY,CAAA;QAC7C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA;QACxE,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,+BAA+B;IACxB,qCAAqC,CAAC,YAA0B;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,gCAAgC,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAA;QAC1F,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,QAAQ,GAAG,IAAI,6BAAY,EAA0B,CAAA;QAC3D,IAAI,CAAC,gCAAgC,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA;QACtF,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,+BAA+B;IACxB,qBAAqB,CAAC,YAA0B;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAA;QAC/E,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,QAAQ,GAAG,IAAI,6BAAY,EAAe,CAAA;QAChD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA;QAC3E,OAAO,QAAQ,CAAA;IACjB,CAAC;CACF;AAhFD,kEAgFC"}

package/build/openid4vc-issuer/OpenId4VcIssuerService.d.ts

@@ -0,0 +1,40 @@
+import type { OpenId4VciCreateCredentialResponseOptions, OpenId4VciCreateCredentialOfferOptions, OpenId4VciCreateIssuerOptions, OpenId4VcIssuerMetadata } from './OpenId4VcIssuerServiceOptions';
+import type { AgentContext } from '@credo-ts/core';
+import { JwsService, W3cCredentialService } from '@credo-ts/core';
+import { OpenId4VcIssuerModuleConfig } from './OpenId4VcIssuerModuleConfig';
+import { OpenId4VcIssuerRepository, OpenId4VcIssuerRecord } from './repository';
+/**
+ * @internal
+ */
+export declare class OpenId4VcIssuerService {
+    private w3cCredentialService;
+    private jwsService;
+    private openId4VcIssuerConfig;
+    private openId4VcIssuerRepository;
+    constructor(w3cCredentialService: W3cCredentialService, jwsService: JwsService, openId4VcIssuerConfig: OpenId4VcIssuerModuleConfig, openId4VcIssuerRepository: OpenId4VcIssuerRepository);
+    getIssuerMetadata(agentContext: AgentContext, issuerRecord: OpenId4VcIssuerRecord): OpenId4VcIssuerMetadata;
+    createCredentialOffer(agentContext: AgentContext, options: OpenId4VciCreateCredentialOfferOptions & {
+        issuer: OpenId4VcIssuerRecord;
+    }): Promise<{
+        credentialOfferPayload: import("@sphereon/oid4vci-common").CredentialOfferPayloadV1_0_11;
+        credentialOffer: string;
+    }>;
+    getCredentialOfferFromUri(agentContext: AgentContext, uri: string): Promise<import("@sphereon/oid4vci-common").CredentialOfferPayloadV1_0_11>;
+    createCredentialResponse(agentContext: AgentContext, options: OpenId4VciCreateCredentialResponseOptions & {
+        issuer: OpenId4VcIssuerRecord;
+    }): Promise<import("@sphereon/oid4vci-common").CredentialResponse>;
+    getAllIssuers(agentContext: AgentContext): Promise<OpenId4VcIssuerRecord[]>;
+    getByIssuerId(agentContext: AgentContext, issuerId: string): Promise<OpenId4VcIssuerRecord>;
+    updateIssuer(agentContext: AgentContext, issuer: OpenId4VcIssuerRecord): Promise<void>;
+    createIssuer(agentContext: AgentContext, options: OpenId4VciCreateIssuerOptions): Promise<OpenId4VcIssuerRecord>;
+    rotateAccessTokenSigningKey(agentContext: AgentContext, issuer: OpenId4VcIssuerRecord): Promise<void>;
+    private getCredentialOfferSessionFromUri;
+    private getJwtVerifyCallback;
+    private getVcIssuer;
+    private getGrantsFromConfig;
+    private findOfferedCredentialsMatchingRequest;
+    private getSdJwtVcCredentialSigningCallback;
+    private getW3cCredentialSigningCallback;
+    private getHolderBindingFromRequest;
+    private getCredentialDataSupplier;
+}