@credo-ts/openid4vc 0.5.0-alpha.153 → 0.5.0-alpha.155

package/build/openid4vc-issuer/repository/OpenId4VcCredentialOfferSessionStateManager.js

@@ -0,0 +1,182 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcCredentialOfferSessionStateManager = void 0;
+const core_1 = require("@credo-ts/core");
+const oid4vci_common_1 = require("@sphereon/oid4vci-common");
+const OpenId4VcIssuanceSessionState_1 = require("../OpenId4VcIssuanceSessionState");
+const OpenId4VcIssuerEvents_1 = require("../OpenId4VcIssuerEvents");
+const OpenId4VcIssuanceSessionRecord_1 = require("./OpenId4VcIssuanceSessionRecord");
+const OpenId4VcIssuanceSessionRepository_1 = require("./OpenId4VcIssuanceSessionRepository");
+class OpenId4VcCredentialOfferSessionStateManager {
+    constructor(agentContext, issuerId) {
+        this.agentContext = agentContext;
+        this.issuerId = issuerId;
+        this.openId4VcIssuanceSessionRepository = agentContext.dependencyManager.resolve(OpenId4VcIssuanceSessionRepository_1.OpenId4VcIssuanceSessionRepository);
+        this.eventEmitter = agentContext.dependencyManager.resolve(core_1.EventEmitter);
+    }
+    async set(preAuthorizedCode, stateValue) {
+        var _a;
+        // Just to make sure that the preAuthorizedCode is the same as the id as that's what we use to query
+        // NOTE: once we support authorized flow, we need to also allow the id to be equal to issuer state
+        if (preAuthorizedCode !== stateValue.preAuthorizedCode) {
+            throw new core_1.CredoError('Expected the id of the credential offer state to be equal to the preAuthorizedCode');
+        }
+        if (!stateValue.preAuthorizedCode) {
+            throw new core_1.CredoError("Expected the stateValue to have a 'preAuthorizedCode' property");
+        }
+        // Record may already exist
+        let record = await this.openId4VcIssuanceSessionRepository.findSingleByQuery(this.agentContext, {
+            issuerId: this.issuerId,
+            preAuthorizedCode: stateValue.preAuthorizedCode,
+        });
+        const previousState = (_a = record === null || record === void 0 ? void 0 : record.state) !== null && _a !== void 0 ? _a : null;
+        let credentialOfferUri = stateValue.credentialOffer.credential_offer_uri;
+        if (!credentialOfferUri) {
+            throw new core_1.CredoError("Expected the stateValue to have a 'credentialOfferUri' property");
+        }
+        if (credentialOfferUri.includes('credential_offer_uri=')) {
+            // NOTE: it's a bit cumbersome, but the credential_offer_uri is the encoded uri. This seems
+            // odd to me, as this is the offer payload, which should only contain the hosted URI (I think
+            // this is a bug in OID4VCI). But for now we have to extract the uri from the payload.
+            credentialOfferUri = decodeURIComponent(credentialOfferUri.split('credential_offer_uri=')[1].split('=')[0]);
+        }
+        // NOTE: we don't use clientId at the moment, will become relevant when doing the authorized flow
+        if (record) {
+            record.issuanceMetadata = stateValue.credentialDataSupplierInput;
+            record.credentialOfferPayload = stateValue.credentialOffer.credential_offer;
+            record.userPin = stateValue.userPin;
+            record.preAuthorizedCode = stateValue.preAuthorizedCode;
+            record.errorMessage = stateValue.error;
+            record.credentialOfferUri = credentialOfferUri;
+            record.state = openId4VcIssuanceStateFromSphereon(stateValue.status);
+            await this.openId4VcIssuanceSessionRepository.update(this.agentContext, record);
+        }
+        else {
+            record = new OpenId4VcIssuanceSessionRecord_1.OpenId4VcIssuanceSessionRecord({
+                issuerId: this.issuerId,
+                preAuthorizedCode: stateValue.preAuthorizedCode,
+                issuanceMetadata: stateValue.credentialDataSupplierInput,
+                credentialOfferPayload: stateValue.credentialOffer.credential_offer,
+                credentialOfferUri,
+                userPin: stateValue.userPin,
+                errorMessage: stateValue.error,
+                state: openId4VcIssuanceStateFromSphereon(stateValue.status),
+            });
+            await this.openId4VcIssuanceSessionRepository.save(this.agentContext, record);
+        }
+        this.emitStateChangedEvent(this.agentContext, record, previousState);
+    }
+    async get(preAuthorizedCode) {
+        var _a, _b;
+        const record = await this.openId4VcIssuanceSessionRepository.findSingleByQuery(this.agentContext, {
+            issuerId: this.issuerId,
+            preAuthorizedCode,
+        });
+        if (!record)
+            return undefined;
+        // NOTE: This should not happen as we query by the preAuthorizedCode
+        // so it's mostly to make TS happy
+        if (!record.preAuthorizedCode) {
+            throw new core_1.CredoError("No 'preAuthorizedCode' found on record.");
+        }
+        if (!record.credentialOfferPayload) {
+            throw new core_1.CredoError("No 'credentialOfferPayload' found on record.");
+        }
+        return {
+            credentialOffer: {
+                credential_offer: record.credentialOfferPayload,
+                credential_offer_uri: record.credentialOfferUri,
+            },
+            status: sphereonIssueStatusFromOpenId4VcIssuanceState(record.state),
+            preAuthorizedCode: record.preAuthorizedCode,
+            credentialDataSupplierInput: record.issuanceMetadata,
+            error: record.errorMessage,
+            userPin: record.userPin,
+            createdAt: record.createdAt.getTime(),
+            lastUpdatedAt: (_b = (_a = record.updatedAt) === null || _a === void 0 ? void 0 : _a.getTime()) !== null && _b !== void 0 ? _b : record.createdAt.getTime(),
+        };
+    }
+    async has(preAuthorizedCode) {
+        const record = await this.openId4VcIssuanceSessionRepository.findSingleByQuery(this.agentContext, {
+            issuerId: this.issuerId,
+            preAuthorizedCode,
+        });
+        return record !== undefined;
+    }
+    async delete(preAuthorizedCode) {
+        const record = await this.openId4VcIssuanceSessionRepository.findSingleByQuery(this.agentContext, {
+            issuerId: this.issuerId,
+            preAuthorizedCode,
+        });
+        if (!record)
+            return false;
+        await this.openId4VcIssuanceSessionRepository.deleteById(this.agentContext, record.id);
+        return true;
+    }
+    async clearExpired() {
+        // FIXME: we should have a way to remove expired records
+        // or just not return the value in the get if the record is expired
+        throw new Error('Method not implemented.');
+    }
+    async clearAll() {
+        throw new Error('Method not implemented.');
+    }
+    async getAsserted(preAuthorizedCode) {
+        const state = await this.get(preAuthorizedCode);
+        if (!state) {
+            throw new core_1.CredoError(`No cNonce state found for id ${preAuthorizedCode}`);
+        }
+        return state;
+    }
+    async startCleanupRoutine() {
+        throw new Error('Method not implemented.');
+    }
+    async stopCleanupRoutine() {
+        throw new Error('Method not implemented.');
+    }
+    emitStateChangedEvent(agentContext, issuanceSession, previousState) {
+        this.eventEmitter.emit(agentContext, {
+            type: OpenId4VcIssuerEvents_1.OpenId4VcIssuerEvents.IssuanceSessionStateChanged,
+            payload: {
+                issuanceSession: issuanceSession.clone(),
+                previousState,
+            },
+        });
+    }
+}
+exports.OpenId4VcCredentialOfferSessionStateManager = OpenId4VcCredentialOfferSessionStateManager;
+function openId4VcIssuanceStateFromSphereon(stateValue) {
+    if (stateValue === oid4vci_common_1.IssueStatus.OFFER_CREATED)
+        return OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferCreated;
+    if (stateValue === oid4vci_common_1.IssueStatus.OFFER_URI_RETRIEVED)
+        return OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferUriRetrieved;
+    if (stateValue === oid4vci_common_1.IssueStatus.ACCESS_TOKEN_REQUESTED)
+        return OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.AccessTokenRequested;
+    if (stateValue === oid4vci_common_1.IssueStatus.ACCESS_TOKEN_CREATED)
+        return OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.AccessTokenCreated;
+    if (stateValue === oid4vci_common_1.IssueStatus.CREDENTIAL_REQUEST_RECEIVED)
+        return OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.CredentialRequestReceived;
+    if (stateValue === oid4vci_common_1.IssueStatus.CREDENTIAL_ISSUED)
+        return OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.CredentialIssued;
+    if (stateValue === oid4vci_common_1.IssueStatus.ERROR)
+        return OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.Error;
+    throw new core_1.CredoError(`Unknown state value: ${stateValue}`);
+}
+function sphereonIssueStatusFromOpenId4VcIssuanceState(state) {
+    if (state === OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferCreated)
+        return oid4vci_common_1.IssueStatus.OFFER_CREATED;
+    if (state === OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferUriRetrieved)
+        return oid4vci_common_1.IssueStatus.OFFER_URI_RETRIEVED;
+    if (state === OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.AccessTokenRequested)
+        return oid4vci_common_1.IssueStatus.ACCESS_TOKEN_REQUESTED;
+    if (state === OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.AccessTokenCreated)
+        return oid4vci_common_1.IssueStatus.ACCESS_TOKEN_CREATED;
+    if (state === OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.CredentialRequestReceived)
+        return oid4vci_common_1.IssueStatus.CREDENTIAL_REQUEST_RECEIVED;
+    if (state === OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.CredentialIssued)
+        return oid4vci_common_1.IssueStatus.CREDENTIAL_ISSUED;
+    if (state === OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.Error)
+        return oid4vci_common_1.IssueStatus.ERROR;
+    throw new core_1.CredoError(`Unknown state value: ${state}`);
+}
+//# sourceMappingURL=OpenId4VcCredentialOfferSessionStateManager.js.map

package/build/openid4vc-issuer/repository/OpenId4VcCredentialOfferSessionStateManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcCredentialOfferSessionStateManager.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/repository/OpenId4VcCredentialOfferSessionStateManager.ts"],"names":[],"mappings":";;;AAIA,yCAAyD;AACzD,6DAAsD;AAEtD,oFAAgF;AAChF,oEAAgE;AAEhE,qFAAiF;AACjF,6FAAyF;AAEzF,MAAa,2CAA2C;IAItD,YAA2B,YAA0B,EAAU,QAAgB;QAApD,iBAAY,GAAZ,YAAY,CAAc;QAAU,aAAQ,GAAR,QAAQ,CAAQ;QAC7E,IAAI,CAAC,kCAAkC,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,uEAAkC,CAAC,CAAA;QACpH,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,mBAAY,CAAC,CAAA;IAC1E,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,iBAAyB,EAAE,UAAkC;;QAC5E,oGAAoG;QACpG,kGAAkG;QAClG,IAAI,iBAAiB,KAAK,UAAU,CAAC,iBAAiB,EAAE;YACtD,MAAM,IAAI,iBAAU,CAAC,oFAAoF,CAAC,CAAA;SAC3G;QAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE;YACjC,MAAM,IAAI,iBAAU,CAAC,gEAAgE,CAAC,CAAA;SACvF;QAED,2BAA2B;QAC3B,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YAC9F,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;SAChD,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,IAAI,CAAA;QAE3C,IAAI,kBAAkB,GAAG,UAAU,CAAC,eAAe,CAAC,oBAAoB,CAAA;QACxE,IAAI,CAAC,kBAAkB,EAAE;YACvB,MAAM,IAAI,iBAAU,CAAC,iEAAiE,CAAC,CAAA;SACxF;QAED,IAAI,kBAAkB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE;YACxD,2FAA2F;YAC3F,6FAA6F;YAC7F,sFAAsF;YACtF,kBAAkB,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;SAC5G;QAED,iGAAiG;QACjG,IAAI,MAAM,EAAE;YACV,MAAM,CAAC,gBAAgB,GAAG,UAAU,CAAC,2BAA2B,CAAA;YAChE,MAAM,CAAC,sBAAsB,GAAG,UAAU,CAAC,eAAe,CAAC,gBAAgB,CAAA;YAC3E,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;YACnC,MAAM,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAA;YACvD,MAAM,CAAC,YAAY,GAAG,UAAU,CAAC,KAAK,CAAA;YACtC,MAAM,CAAC,kBAAkB,GAAG,kBAAkB,CAAA;YAC9C,MAAM,CAAC,KAAK,GAAG,kCAAkC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACpE,MAAM,IAAI,CAAC,kCAAkC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;SAChF;aAAM;YACL,MAAM,GAAG,IAAI,+DAA8B,CAAC;gBAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;gBAC/C,gBAAgB,EAAE,UAAU,CAAC,2BAA2B;gBACxD,sBAAsB,EAAE,UAAU,CAAC,eAAe,CAAC,gBAAgB;gBACnE,kBAAkB;gBAClB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,YAAY,EAAE,UAAU,CAAC,KAAK;gBAC9B,KAAK,EAAE,kCAAkC,CAAC,UAAU,CAAC,MAAM,CAAC;aAC7D,CAAC,CAAA;YAEF,MAAM,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;SAC9E;QAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,CAAA;IACtE,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,iBAAyB;;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YAChG,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,iBAAiB;SAClB,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QAE7B,oEAAoE;QACpE,kCAAkC;QAClC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC7B,MAAM,IAAI,iBAAU,CAAC,yCAAyC,CAAC,CAAA;SAChE;QAED,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;YAClC,MAAM,IAAI,iBAAU,CAAC,8CAA8C,CAAC,CAAA;SACrE;QAED,OAAO;YACL,eAAe,EAAE;gBACf,gBAAgB,EAAE,MAAM,CAAC,sBAAsB;gBAC/C,oBAAoB,EAAE,MAAM,CAAC,kBAAkB;aAChD;YACD,MAAM,EAAE,6CAA6C,CAAC,MAAM,CAAC,KAAK,CAAC;YACnE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,2BAA2B,EAAE,MAAM,CAAC,gBAAgB;YACpD,KAAK,EAAE,MAAM,CAAC,YAAY;YAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;YACrC,aAAa,EAAE,MAAA,MAAA,MAAM,CAAC,SAAS,0CAAE,OAAO,EAAE,mCAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;SACzE,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,iBAAyB;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YAChG,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,iBAAiB;SAClB,CAAC,CAAA;QAEF,OAAO,MAAM,KAAK,SAAS,CAAA;IAC7B,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,iBAAyB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YAChG,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,iBAAiB;SAClB,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEzB,MAAM,IAAI,CAAC,kCAAkC,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QACtF,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,YAAY;QACvB,wDAAwD;QACxD,mEAAmE;QACnE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,iBAAyB;QAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;QAE/C,IAAI,CAAC,KAAK,EAAE;YACV,MAAM,IAAI,iBAAU,CAAC,gCAAgC,iBAAiB,EAAE,CAAC,CAAA;SAC1E;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEM,KAAK,CAAC,mBAAmB;QAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAEM,KAAK,CAAC,kBAAkB;QAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAES,qBAAqB,CAC7B,YAA0B,EAC1B,eAA+C,EAC/C,aAAmD;QAEnD,IAAI,CAAC,YAAY,CAAC,IAAI,CAA4C,YAAY,EAAE;YAC9E,IAAI,EAAE,6CAAqB,CAAC,2BAA2B;YACvD,OAAO,EAAE;gBACP,eAAe,EAAE,eAAe,CAAC,KAAK,EAAE;gBACxC,aAAa;aACd;SACF,CAAC,CAAA;IACJ,CAAC;CACF;AAnKD,kGAmKC;AAED,SAAS,kCAAkC,CAAC,UAAuB;IACjE,IAAI,UAAU,KAAK,4BAAW,CAAC,aAAa;QAAE,OAAO,6DAA6B,CAAC,YAAY,CAAA;IAC/F,IAAI,UAAU,KAAK,4BAAW,CAAC,mBAAmB;QAAE,OAAO,6DAA6B,CAAC,iBAAiB,CAAA;IAC1G,IAAI,UAAU,KAAK,4BAAW,CAAC,sBAAsB;QAAE,OAAO,6DAA6B,CAAC,oBAAoB,CAAA;IAChH,IAAI,UAAU,KAAK,4BAAW,CAAC,oBAAoB;QAAE,OAAO,6DAA6B,CAAC,kBAAkB,CAAA;IAC5G,IAAI,UAAU,KAAK,4BAAW,CAAC,2BAA2B;QACxD,OAAO,6DAA6B,CAAC,yBAAyB,CAAA;IAChE,IAAI,UAAU,KAAK,4BAAW,CAAC,iBAAiB;QAAE,OAAO,6DAA6B,CAAC,gBAAgB,CAAA;IACvG,IAAI,UAAU,KAAK,4BAAW,CAAC,KAAK;QAAE,OAAO,6DAA6B,CAAC,KAAK,CAAA;IAEhF,MAAM,IAAI,iBAAU,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,6CAA6C,CAAC,KAAoC;IACzF,IAAI,KAAK,KAAK,6DAA6B,CAAC,YAAY;QAAE,OAAO,4BAAW,CAAC,aAAa,CAAA;IAC1F,IAAI,KAAK,KAAK,6DAA6B,CAAC,iBAAiB;QAAE,OAAO,4BAAW,CAAC,mBAAmB,CAAA;IACrG,IAAI,KAAK,KAAK,6DAA6B,CAAC,oBAAoB;QAAE,OAAO,4BAAW,CAAC,sBAAsB,CAAA;IAC3G,IAAI,KAAK,KAAK,6DAA6B,CAAC,kBAAkB;QAAE,OAAO,4BAAW,CAAC,oBAAoB,CAAA;IACvG,IAAI,KAAK,KAAK,6DAA6B,CAAC,yBAAyB;QAAE,OAAO,4BAAW,CAAC,2BAA2B,CAAA;IACrH,IAAI,KAAK,KAAK,6DAA6B,CAAC,gBAAgB;QAAE,OAAO,4BAAW,CAAC,iBAAiB,CAAA;IAClG,IAAI,KAAK,KAAK,6DAA6B,CAAC,KAAK;QAAE,OAAO,4BAAW,CAAC,KAAK,CAAA;IAE3E,MAAM,IAAI,iBAAU,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAA;AACvD,CAAC"}

package/build/openid4vc-issuer/repository/OpenId4VcCredentialOfferUriStateManager.d.ts

@@ -0,0 +1,17 @@
+import type { AgentContext } from '@credo-ts/core';
+import type { IStateManager, URIState } from '@sphereon/oid4vci-common';
+export declare class OpenId4VcCredentialOfferUriStateManager implements IStateManager<URIState> {
+    private agentContext;
+    private issuerId;
+    private openId4VcIssuanceSessionRepository;
+    constructor(agentContext: AgentContext, issuerId: string);
+    set(uri: string, stateValue: URIState): Promise<void>;
+    get(uri: string): Promise<URIState | undefined>;
+    has(uri: string): Promise<boolean>;
+    delete(): Promise<boolean>;
+    clearExpired(): Promise<void>;
+    clearAll(): Promise<void>;
+    getAsserted(id: string): Promise<URIState>;
+    startCleanupRoutine(): Promise<void>;
+    stopCleanupRoutine(): Promise<void>;
+}

package/build/openid4vc-issuer/repository/OpenId4VcCredentialOfferUriStateManager.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcCredentialOfferUriStateManager = void 0;
+const core_1 = require("@credo-ts/core");
+const OpenId4VcIssuanceSessionRepository_1 = require("./OpenId4VcIssuanceSessionRepository");
+class OpenId4VcCredentialOfferUriStateManager {
+    constructor(agentContext, issuerId) {
+        this.agentContext = agentContext;
+        this.issuerId = issuerId;
+        this.openId4VcIssuanceSessionRepository = agentContext.dependencyManager.resolve(OpenId4VcIssuanceSessionRepository_1.OpenId4VcIssuanceSessionRepository);
+    }
+    async set(uri, stateValue) {
+        // Just to make sure that the uri is the same as the id as that's what we use to query
+        if (uri !== stateValue.uri) {
+            throw new core_1.CredoError('Expected the uri of the uri state to be equal to the id');
+        }
+        // NOTE: we're currently not ding anything here, as we store the uri in the record
+        // when the credential offer session is stored.
+    }
+    async get(uri) {
+        const record = await this.openId4VcIssuanceSessionRepository.findSingleByQuery(this.agentContext, {
+            issuerId: this.issuerId,
+            credentialOfferUri: uri,
+        });
+        if (!record)
+            return undefined;
+        return {
+            preAuthorizedCode: record.preAuthorizedCode,
+            uri: record.credentialOfferUri,
+            createdAt: record.createdAt.getTime(),
+        };
+    }
+    async has(uri) {
+        const record = await this.openId4VcIssuanceSessionRepository.findSingleByQuery(this.agentContext, {
+            issuerId: this.issuerId,
+            credentialOfferUri: uri,
+        });
+        return record !== undefined;
+    }
+    async delete() {
+        // NOTE: we're not doing anything here as the uri is stored in the credential offer session
+        // Not sure how to best handle this, but for now we just don't delete it
+        return false;
+    }
+    async clearExpired() {
+        // FIXME: we should have a way to remove expired records
+        // or just not return the value in the get if the record is expired
+        throw new Error('Method not implemented.');
+    }
+    async clearAll() {
+        throw new Error('Method not implemented.');
+    }
+    async getAsserted(id) {
+        const state = await this.get(id);
+        if (!state) {
+            throw new core_1.CredoError(`No uri state found for id ${id}`);
+        }
+        return state;
+    }
+    async startCleanupRoutine() {
+        throw new Error('Method not implemented.');
+    }
+    async stopCleanupRoutine() {
+        throw new Error('Method not implemented.');
+    }
+}
+exports.OpenId4VcCredentialOfferUriStateManager = OpenId4VcCredentialOfferUriStateManager;
+//# sourceMappingURL=OpenId4VcCredentialOfferUriStateManager.js.map

package/build/openid4vc-issuer/repository/OpenId4VcCredentialOfferUriStateManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcCredentialOfferUriStateManager.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/repository/OpenId4VcCredentialOfferUriStateManager.ts"],"names":[],"mappings":";;;AAGA,yCAA2C;AAE3C,6FAAyF;AAEzF,MAAa,uCAAuC;IAGlD,YAA2B,YAA0B,EAAU,QAAgB;QAApD,iBAAY,GAAZ,YAAY,CAAc;QAAU,aAAQ,GAAR,QAAQ,CAAQ;QAC7E,IAAI,CAAC,kCAAkC,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,uEAAkC,CAAC,CAAA;IACtH,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,UAAoB;QAChD,sFAAsF;QACtF,IAAI,GAAG,KAAK,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,IAAI,iBAAU,CAAC,yDAAyD,CAAC,CAAA;SAChF;QAED,kFAAkF;QAClF,+CAA+C;IACjD,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,GAAW;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YAChG,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,GAAG;SACxB,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QAE7B,OAAO;YACL,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,GAAG,EAAE,MAAM,CAAC,kBAAkB;YAC9B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;SACtC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,GAAW;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YAChG,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,GAAG;SACxB,CAAC,CAAA;QAEF,OAAO,MAAM,KAAK,SAAS,CAAA;IAC7B,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,2FAA2F;QAC3F,wEAAwE;QACxE,OAAO,KAAK,CAAA;IACd,CAAC;IAEM,KAAK,CAAC,YAAY;QACvB,wDAAwD;QACxD,mEAAmE;QACnE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,EAAU;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEhC,IAAI,CAAC,KAAK,EAAE;YACV,MAAM,IAAI,iBAAU,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAA;SACxD;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEM,KAAK,CAAC,mBAAmB;QAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAEM,KAAK,CAAC,kBAAkB;QAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;CACF;AA1ED,0FA0EC"}

package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.d.ts

@@ -0,0 +1,79 @@
+import type { OpenId4VciCredentialOfferPayload } from '../../shared';
+import type { OpenId4VcIssuanceSessionState } from '../OpenId4VcIssuanceSessionState';
+import type { RecordTags, TagsBase } from '@credo-ts/core';
+import { BaseRecord } from '@credo-ts/core';
+export type OpenId4VcIssuanceSessionRecordTags = RecordTags<OpenId4VcIssuanceSessionRecord>;
+export type DefaultOpenId4VcIssuanceSessionRecordTags = {
+    issuerId: string;
+    cNonce?: string;
+    preAuthorizedCode?: string;
+    state: OpenId4VcIssuanceSessionState;
+    credentialOfferUri: string;
+};
+export interface OpenId4VcIssuanceSessionRecordProps {
+    id?: string;
+    createdAt?: Date;
+    tags?: TagsBase;
+    issuerId: string;
+    cNonce?: string;
+    preAuthorizedCode?: string;
+    userPin?: string;
+    credentialOfferUri: string;
+    credentialOfferPayload: OpenId4VciCredentialOfferPayload;
+    issuanceMetadata?: Record<string, unknown>;
+    state: OpenId4VcIssuanceSessionState;
+    errorMessage?: string;
+}
+export declare class OpenId4VcIssuanceSessionRecord extends BaseRecord<DefaultOpenId4VcIssuanceSessionRecordTags> {
+    static readonly type = "OpenId4VcIssuanceSessionRecord";
+    readonly type = "OpenId4VcIssuanceSessionRecord";
+    /**
+     * The id of the issuer that this session is for.
+     */
+    issuerId: string;
+    /**
+     * The state of the issuance session.
+     */
+    state: OpenId4VcIssuanceSessionState;
+    /**
+     * cNonce that should be used in the credential request by the holder.
+     */
+    cNonce?: string;
+    /**
+     * Pre authorized code used for the issuance session. Only used when a pre-authorized credential
+     * offer is created.
+     */
+    preAuthorizedCode?: string;
+    /**
+     * Optional user pin that needs to be provided by the user in the access token request.
+     */
+    userPin?: string;
+    /**
+     * User-defined metadata that will be provided to the credential request to credential mapper
+     * to allow to retrieve the needed credential input data. Can be the credential data itself,
+     * or some other data that is needed to retrieve the credential data.
+     */
+    issuanceMetadata?: Record<string, unknown>;
+    /**
+     * The credential offer that was used to create the issuance session.
+     */
+    credentialOfferPayload: OpenId4VciCredentialOfferPayload;
+    /**
+     * URI of the credential offer. This is the url that cn can be used to retrieve
+     * the credential offer
+     */
+    credentialOfferUri: string;
+    /**
+     * Optional error message of the error that occurred during the issuance session. Will be set when state is {@link OpenId4VcIssuanceSessionState.Error}
+     */
+    errorMessage?: string;
+    constructor(props: OpenId4VcIssuanceSessionRecordProps);
+    assertState(expectedStates: OpenId4VcIssuanceSessionState | OpenId4VcIssuanceSessionState[]): void;
+    getTags(): {
+        issuerId: string;
+        cNonce: string | undefined;
+        credentialOfferUri: string;
+        preAuthorizedCode: string | undefined;
+        state: OpenId4VcIssuanceSessionState;
+    };
+}

package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcIssuanceSessionRecord = void 0;
+const core_1 = require("@credo-ts/core");
+class OpenId4VcIssuanceSessionRecord extends core_1.BaseRecord {
+    constructor(props) {
+        var _a, _b, _c;
+        super();
+        this.type = OpenId4VcIssuanceSessionRecord.type;
+        if (props) {
+            this.id = (_a = props.id) !== null && _a !== void 0 ? _a : core_1.utils.uuid();
+            this.createdAt = (_b = props.createdAt) !== null && _b !== void 0 ? _b : new Date();
+            this._tags = (_c = props.tags) !== null && _c !== void 0 ? _c : {};
+            this.issuerId = props.issuerId;
+            this.cNonce = props.cNonce;
+            this.userPin = props.userPin;
+            this.preAuthorizedCode = props.preAuthorizedCode;
+            this.credentialOfferUri = props.credentialOfferUri;
+            this.credentialOfferPayload = props.credentialOfferPayload;
+            this.issuanceMetadata = props.issuanceMetadata;
+            this.state = props.state;
+            this.errorMessage = props.errorMessage;
+        }
+    }
+    assertState(expectedStates) {
+        if (!Array.isArray(expectedStates)) {
+            expectedStates = [expectedStates];
+        }
+        if (!expectedStates.includes(this.state)) {
+            throw new core_1.CredoError(`OpenId4VcIssuanceSessionRecord is in invalid state ${this.state}. Valid states are: ${expectedStates.join(', ')}.`);
+        }
+    }
+    getTags() {
+        return Object.assign(Object.assign({}, this._tags), { issuerId: this.issuerId, cNonce: this.cNonce, credentialOfferUri: this.credentialOfferUri, preAuthorizedCode: this.preAuthorizedCode, state: this.state });
+    }
+}
+exports.OpenId4VcIssuanceSessionRecord = OpenId4VcIssuanceSessionRecord;
+OpenId4VcIssuanceSessionRecord.type = 'OpenId4VcIssuanceSessionRecord';
+//# sourceMappingURL=OpenId4VcIssuanceSessionRecord.js.map

package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuanceSessionRecord.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.ts"],"names":[],"mappings":";;;AAIA,yCAA8D;AA+B9D,MAAa,8BAA+B,SAAQ,iBAAqD;IAqDvG,YAAmB,KAA0C;;QAC3D,KAAK,EAAE,CAAA;QApDO,SAAI,GAAG,8BAA8B,CAAC,IAAI,CAAA;QAsDxD,IAAI,KAAK,EAAE;YACT,IAAI,CAAC,EAAE,GAAG,MAAA,KAAK,CAAC,EAAE,mCAAI,YAAK,CAAC,IAAI,EAAE,CAAA;YAClC,IAAI,CAAC,SAAS,GAAG,MAAA,KAAK,CAAC,SAAS,mCAAI,IAAI,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,KAAK,GAAG,MAAA,KAAK,CAAC,IAAI,mCAAI,EAAE,CAAA;YAE7B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;YAC1B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;YAC5B,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAA;YAChD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAA;YAClD,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAA;YAC1D,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAA;YAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACxB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;SACvC;IACH,CAAC;IAEM,WAAW,CAAC,cAA+E;QAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;YAClC,cAAc,GAAG,CAAC,cAAc,CAAC,CAAA;SAClC;QAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACxC,MAAM,IAAI,iBAAU,CAClB,sDAAsD,IAAI,CAAC,KAAK,uBAAuB,cAAc,CAAC,IAAI,CACxG,IAAI,CACL,GAAG,CACL,CAAA;SACF;IACH,CAAC;IAEM,OAAO;QACZ,uCACK,IAAI,CAAC,KAAK,KACb,QAAQ,EAAE,IAAI,CAAC,QAAQ,EACvB,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAC3C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EACzC,KAAK,EAAE,IAAI,CAAC,KAAK,IAClB;IACH,CAAC;;AAhGH,wEAiGC;AAhGwB,mCAAI,GAAG,gCAAgC,CAAA"}

package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRepository.d.ts

@@ -0,0 +1,5 @@
+import { Repository, StorageService, EventEmitter } from '@credo-ts/core';
+import { OpenId4VcIssuanceSessionRecord } from './OpenId4VcIssuanceSessionRecord';
+export declare class OpenId4VcIssuanceSessionRepository extends Repository<OpenId4VcIssuanceSessionRecord> {
+    constructor(storageService: StorageService<OpenId4VcIssuanceSessionRecord>, eventEmitter: EventEmitter);
+}

package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRepository.js

@@ -0,0 +1,29 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcIssuanceSessionRepository = void 0;
+const core_1 = require("@credo-ts/core");
+const OpenId4VcIssuanceSessionRecord_1 = require("./OpenId4VcIssuanceSessionRecord");
+let OpenId4VcIssuanceSessionRepository = class OpenId4VcIssuanceSessionRepository extends core_1.Repository {
+    constructor(storageService, eventEmitter) {
+        super(OpenId4VcIssuanceSessionRecord_1.OpenId4VcIssuanceSessionRecord, storageService, eventEmitter);
+    }
+};
+OpenId4VcIssuanceSessionRepository = __decorate([
+    (0, core_1.injectable)(),
+    __param(0, (0, core_1.inject)(core_1.InjectionSymbols.StorageService)),
+    __metadata("design:paramtypes", [Object, core_1.EventEmitter])
+], OpenId4VcIssuanceSessionRepository);
+exports.OpenId4VcIssuanceSessionRepository = OpenId4VcIssuanceSessionRepository;
+//# sourceMappingURL=OpenId4VcIssuanceSessionRepository.js.map

package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuanceSessionRepository.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRepository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,yCAA+G;AAE/G,qFAAiF;AAG1E,IAAM,kCAAkC,GAAxC,MAAM,kCAAmC,SAAQ,iBAA0C;IAChG,YAC2C,cAA8D,EACvG,YAA0B;QAE1B,KAAK,CAAC,+DAA8B,EAAE,cAAc,EAAE,YAAY,CAAC,CAAA;IACrE,CAAC;CACF,CAAA;AAPY,kCAAkC;IAD9C,IAAA,iBAAU,GAAE;IAGR,WAAA,IAAA,aAAM,EAAC,uBAAgB,CAAC,cAAc,CAAC,CAAA;6CAC1B,mBAAY;GAHjB,kCAAkC,CAO9C;AAPY,gFAAkC"}

package/build/openid4vc-issuer/repository/index.d.ts

@@ -1,2 +1,4 @@
 export * from './OpenId4VcIssuerRecord';
 export * from './OpenId4VcIssuerRepository';
+export * from './OpenId4VcIssuanceSessionRecord';
+export * from './OpenId4VcIssuanceSessionRepository';

package/build/openid4vc-issuer/repository/index.js

@@ -16,4 +16,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./OpenId4VcIssuerRecord"), exports);
 __exportStar(require("./OpenId4VcIssuerRepository"), exports);
+__exportStar(require("./OpenId4VcIssuanceSessionRecord"), exports);
+__exportStar(require("./OpenId4VcIssuanceSessionRepository"), exports);
 //# sourceMappingURL=index.js.map

package/build/openid4vc-issuer/repository/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/repository/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAuC;AACvC,8DAA2C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/repository/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAuC;AACvC,8DAA2C;AAC3C,mEAAgD;AAChD,uEAAoD"}

package/build/openid4vc-issuer/router/accessTokenEndpoint.js

@@ -5,13 +5,14 @@ const core_1 = require("@credo-ts/core");
 const oid4vci_common_1 = require("@sphereon/oid4vci-common");
 const oid4vci_issuer_1 = require("@sphereon/oid4vci-issuer");
 const router_1 = require("../../shared/router");
-const OpenId4VcIssuerModuleConfig_1 = require("../OpenId4VcIssuerModuleConfig");
 const OpenId4VcIssuerService_1 = require("../OpenId4VcIssuerService");
+const OpenId4VcCNonceStateManager_1 = require("../repository/OpenId4VcCNonceStateManager");
+const OpenId4VcCredentialOfferSessionStateManager_1 = require("../repository/OpenId4VcCredentialOfferSessionStateManager");
 function configureAccessTokenEndpoint(router, config) {
     router.post(config.endpointPath, verifyTokenRequest({ preAuthorizedCodeExpirationInSeconds: config.preAuthorizedCodeExpirationInSeconds }), handleTokenRequest(config));
 }
 exports.configureAccessTokenEndpoint = configureAccessTokenEndpoint;
-function getJwtSignerCallback(agentContext, signerPublicKey) {
+function getJwtSignerCallback(agentContext, signerPublicKey, config) {
     return async (jwt, _kid) => {
         var _a;
         if (_kid) {
@@ -25,6 +26,12 @@ function getJwtSignerCallback(agentContext, signerPublicKey) {
         if (!alg) {
             throw new core_1.CredoError(`No supported signature algorithms for key type: ${signerPublicKey.keyType}`);
         }
+        // FIXME: the iat and exp implementation in OID4VCI is incorrect so we override the values here
+        // https://github.com/Sphereon-Opensource/OID4VCI/pull/99
+        // https://github.com/Sphereon-Opensource/OID4VCI/pull/101
+        const iat = Math.floor(new Date().getTime() / 1000);
+        jwt.payload.iat = iat;
+        jwt.payload.exp = iat + config.tokenExpiresInSeconds;
         const jwk = (0, core_1.getJwkFromKey)(signerPublicKey);
         const signedJwt = await jwsService.createJwsCompact(agentContext, {
             protectedHeaderOptions: Object.assign(Object.assign({}, jwt.header), { jwk, alg }),
@@ -46,19 +53,18 @@ function handleTokenRequest(config) {
                 error_description: oid4vci_common_1.PRE_AUTHORIZED_CODE_REQUIRED_ERROR,
             });
         }
-        const openId4VcIssuerConfig = agentContext.dependencyManager.resolve(OpenId4VcIssuerModuleConfig_1.OpenId4VcIssuerModuleConfig);
         const openId4VcIssuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
         const issuerMetadata = openId4VcIssuerService.getIssuerMetadata(agentContext, issuer);
         const accessTokenSigningKey = core_1.Key.fromFingerprint(issuer.accessTokenPublicKeyFingerprint);
         try {
             const accessTokenResponse = await (0, oid4vci_issuer_1.createAccessTokenResponse)(request.body, {
-                credentialOfferSessions: openId4VcIssuerConfig.getCredentialOfferSessionStateManager(agentContext),
-                tokenExpiresIn: tokenExpiresInSeconds,
+                credentialOfferSessions: new OpenId4VcCredentialOfferSessionStateManager_1.OpenId4VcCredentialOfferSessionStateManager(agentContext, issuer.issuerId),
+                tokenExpiresIn: tokenExpiresInSeconds * 1000,
                 accessTokenIssuer: issuerMetadata.issuerUrl,
                 cNonce: await agentContext.wallet.generateNonce(),
                 cNonceExpiresIn: cNonceExpiresInSeconds,
-                cNonces: openId4VcIssuerConfig.getCNonceStateManager(agentContext),
-                accessTokenSignerCallback: getJwtSignerCallback(agentContext, accessTokenSigningKey),
+                cNonces: new OpenId4VcCNonceStateManager_1.OpenId4VcCNonceStateManager(agentContext, issuer.issuerId),
+                accessTokenSignerCallback: getJwtSignerCallback(agentContext, accessTokenSigningKey, config),
             });
             response.status(200).json(accessTokenResponse);
         }
@@ -72,13 +78,12 @@ function handleTokenRequest(config) {
 exports.handleTokenRequest = handleTokenRequest;
 function verifyTokenRequest(options) {
     return async (request, response, next) => {
-        const { agentContext } = (0, router_1.getRequestContext)(request);
+        const { agentContext, issuer } = (0, router_1.getRequestContext)(request);
         try {
-            const openId4VcIssuerConfig = agentContext.dependencyManager.resolve(OpenId4VcIssuerModuleConfig_1.OpenId4VcIssuerModuleConfig);
             await (0, oid4vci_issuer_1.assertValidAccessTokenRequest)(request.body, {
                 // we use seconds instead of milliseconds for consistency
                 expirationDuration: options.preAuthorizedCodeExpirationInSeconds * 1000,
-                credentialOfferSessions: openId4VcIssuerConfig.getCredentialOfferSessionStateManager(agentContext),
+                credentialOfferSessions: new OpenId4VcCredentialOfferSessionStateManager_1.OpenId4VcCredentialOfferSessionStateManager(agentContext, issuer.issuerId),
             });
         }
         catch (error) {

package/build/openid4vc-issuer/router/accessTokenEndpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"accessTokenEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/accessTokenEndpoint.ts"],"names":[],"mappings":";;;AAKA,yCAA+G;AAC/G,6DAKiC;AACjC,6DAAmG;AAEnG,gDAA0E;AAC1E,gFAA4E;AAC5E,sEAAkE;AAiClE,SAAgB,4BAA4B,CAAC,MAAc,EAAE,MAA2C;IACtG,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,YAAY,EACnB,kBAAkB,CAAC,EAAE,oCAAoC,EAAE,MAAM,CAAC,oCAAoC,EAAE,CAAC,EACzG,kBAAkB,CAAC,MAAM,CAAC,CAC3B,CAAA;AACH,CAAC;AAND,oEAMC;AAED,SAAS,oBAAoB,CAAC,YAA0B,EAAE,eAAoB;IAC5E,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;;QACzB,IAAI,IAAI,EAAE;YACR,MAAM,IAAI,iBAAU,CAAC,wCAAwC,CAAC,CAAA;SAC/D;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACpC,MAAM,IAAI,iBAAU,CAAC,wEAAwE,CAAC,CAAA;SAC/F;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;QAErE,MAAM,GAAG,GAAG,MAAA,IAAA,6BAAsB,EAAC,eAAe,CAAC,OAAO,CAAC,0CAAE,4BAA4B,CAAC,CAAC,CAAC,CAAA;QAC5F,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,IAAI,iBAAU,CAAC,mDAAmD,eAAe,CAAC,OAAO,EAAE,CAAC,CAAA;SACnG;QAED,MAAM,GAAG,GAAG,IAAA,oBAAa,EAAC,eAAe,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,YAAY,EAAE;YAChE,sBAAsB,kCAAO,GAAG,CAAC,MAAM,KAAE,GAAG,EAAE,GAAG,GAAE;YACnD,OAAO,EAAE,IAAI,iBAAU,CAAC,GAAG,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,eAAe;SACrB,CAAC,CAAA;QAEF,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAA2C;IAC5E,MAAM,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,GAAG,MAAM,CAAA;IAEhE,OAAO,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAkB,EAAE,EAAE;QACzF,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QAEjE,MAAM,cAAc,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QACjD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,cAAc,CAAA;QAE/C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,2BAAU,CAAC,mBAAmB,EAAE;YAC9D,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC/B,KAAK,EAAE,mCAAkB,CAAC,eAAe;gBACzC,iBAAiB,EAAE,mDAAkC;aACtD,CAAC,CAAA;SACH;QAED,MAAM,qBAAqB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yDAA2B,CAAC,CAAA;QACjG,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;QAC7F,MAAM,cAAc,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QACrF,MAAM,qBAAqB,GAAG,UAAG,CAAC,eAAe,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAA;QAEzF,IAAI;YACF,MAAM,mBAAmB,GAAG,MAAM,IAAA,0CAAyB,EAAC,OAAO,CAAC,IAAI,EAAE;gBACxE,uBAAuB,EAAE,qBAAqB,CAAC,qCAAqC,CAAC,YAAY,CAAC;gBAClG,cAAc,EAAE,qBAAqB;gBACrC,iBAAiB,EAAE,cAAc,CAAC,SAAS;gBAC3C,MAAM,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE;gBACjD,eAAe,EAAE,sBAAsB;gBACvC,OAAO,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,YAAY,CAAC;gBAClE,yBAAyB,EAAE,oBAAoB,CAAC,YAAY,EAAE,qBAAqB,CAAC;aACrF,CAAC,CAAA;YACF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;SAC/C;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,mCAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;SACxG;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAvCD,gDAuCC;AAED,SAAgB,kBAAkB,CAAC,OAAyD;IAC1F,OAAO,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAkB,EAAE,EAAE;QACzF,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAEnD,IAAI;YACF,MAAM,qBAAqB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yDAA2B,CAAC,CAAA;YACjG,MAAM,IAAA,8CAA6B,EAAC,OAAO,CAAC,IAAI,EAAE;gBAChD,yDAAyD;gBACzD,kBAAkB,EAAE,OAAO,CAAC,oCAAoC,GAAG,IAAI;gBACvE,uBAAuB,EAAE,qBAAqB,CAAC,qCAAqC,CAAC,YAAY,CAAC;aACnG,CAAC,CAAA;SACH;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,2BAAU,EAAE;gBAC/B,IAAA,0BAAiB,EACf,QAAQ,EACR,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,cAAc,EAAE,EAC5C,KAAK,CACN,CAAA;aACF;iBAAM;gBACL,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,mCAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;aACxG;SACF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AA5BD,gDA4BC"}
+{"version":3,"file":"accessTokenEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/accessTokenEndpoint.ts"],"names":[],"mappings":";;;AAKA,yCAA+G;AAC/G,6DAKiC;AACjC,6DAAmG;AAEnG,gDAA0E;AAC1E,sEAAkE;AAClE,2FAAuF;AACvF,2HAAuH;AAiCvH,SAAgB,4BAA4B,CAAC,MAAc,EAAE,MAA2C;IACtG,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,YAAY,EACnB,kBAAkB,CAAC,EAAE,oCAAoC,EAAE,MAAM,CAAC,oCAAoC,EAAE,CAAC,EACzG,kBAAkB,CAAC,MAAM,CAAC,CAC3B,CAAA;AACH,CAAC;AAND,oEAMC;AAED,SAAS,oBAAoB,CAC3B,YAA0B,EAC1B,eAAoB,EACpB,MAA2C;IAE3C,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;;QACzB,IAAI,IAAI,EAAE;YACR,MAAM,IAAI,iBAAU,CAAC,wCAAwC,CAAC,CAAA;SAC/D;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACpC,MAAM,IAAI,iBAAU,CAAC,wEAAwE,CAAC,CAAA;SAC/F;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;QAErE,MAAM,GAAG,GAAG,MAAA,IAAA,6BAAsB,EAAC,eAAe,CAAC,OAAO,CAAC,0CAAE,4BAA4B,CAAC,CAAC,CAAC,CAAA;QAC5F,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,IAAI,iBAAU,CAAC,mDAAmD,eAAe,CAAC,OAAO,EAAE,CAAC,CAAA;SACnG;QAED,+FAA+F;QAC/F,yDAAyD;QACzD,0DAA0D;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;QACnD,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,CAAA;QACrB,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,qBAAqB,CAAA;QAEpD,MAAM,GAAG,GAAG,IAAA,oBAAa,EAAC,eAAe,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,YAAY,EAAE;YAChE,sBAAsB,kCAAO,GAAG,CAAC,MAAM,KAAE,GAAG,EAAE,GAAG,GAAE;YACnD,OAAO,EAAE,IAAI,iBAAU,CAAC,GAAG,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,eAAe;SACrB,CAAC,CAAA;QAEF,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAA2C;IAC5E,MAAM,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,GAAG,MAAM,CAAA;IAEhE,OAAO,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAkB,EAAE,EAAE;QACzF,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QAEjE,MAAM,cAAc,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QACjD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,cAAc,CAAA;QAE/C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,2BAAU,CAAC,mBAAmB,EAAE;YAC9D,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC/B,KAAK,EAAE,mCAAkB,CAAC,eAAe;gBACzC,iBAAiB,EAAE,mDAAkC;aACtD,CAAC,CAAA;SACH;QAED,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;QAC7F,MAAM,cAAc,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QACrF,MAAM,qBAAqB,GAAG,UAAG,CAAC,eAAe,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAA;QAEzF,IAAI;YACF,MAAM,mBAAmB,GAAG,MAAM,IAAA,0CAAyB,EAAC,OAAO,CAAC,IAAI,EAAE;gBACxE,uBAAuB,EAAE,IAAI,yFAA2C,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACvG,cAAc,EAAE,qBAAqB,GAAG,IAAI;gBAC5C,iBAAiB,EAAE,cAAc,CAAC,SAAS;gBAC3C,MAAM,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE;gBACjD,eAAe,EAAE,sBAAsB;gBACvC,OAAO,EAAE,IAAI,yDAA2B,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACvE,yBAAyB,EAAE,oBAAoB,CAAC,YAAY,EAAE,qBAAqB,EAAE,MAAM,CAAC;aAC7F,CAAC,CAAA;YACF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;SAC/C;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,mCAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;SACxG;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAtCD,gDAsCC;AAED,SAAgB,kBAAkB,CAAC,OAAyD;IAC1F,OAAO,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAkB,EAAE,EAAE;QACzF,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE3D,IAAI;YACF,MAAM,IAAA,8CAA6B,EAAC,OAAO,CAAC,IAAI,EAAE;gBAChD,yDAAyD;gBACzD,kBAAkB,EAAE,OAAO,CAAC,oCAAoC,GAAG,IAAI;gBACvE,uBAAuB,EAAE,IAAI,yFAA2C,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC;aACxG,CAAC,CAAA;SACH;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,2BAAU,EAAE;gBAC/B,IAAA,0BAAiB,EACf,QAAQ,EACR,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,cAAc,EAAE,EAC5C,KAAK,CACN,CAAA;aACF;iBAAM;gBACL,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,mCAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;aACxG;SACF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AA3BD,gDA2BC"}

package/build/openid4vc-issuer/router/credentialEndpoint.js

@@ -3,17 +3,35 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.configureCredentialEndpoint = void 0;
 const router_1 = require("../../shared/router");
 const OpenId4VcIssuerService_1 = require("../OpenId4VcIssuerService");
+const credentialRequest_1 = require("../util/credentialRequest");
+const verifyAccessToken_1 = require("./verifyAccessToken");
 function configureCredentialEndpoint(router, config) {
     router.post(config.endpointPath, async (request, response, next) => {
         const { agentContext, issuer } = (0, router_1.getRequestContext)(request);
+        const openId4VcIssuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
+        // Verify the access token (should at some point be moved to a middleware function or something)
+        try {
+            await (0, verifyAccessToken_1.verifyAccessToken)(agentContext, issuer, request.headers.authorization);
+        }
+        catch (error) {
+            return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 401, 'unauthorized', error);
+        }
         try {
-            const openId4VcIssuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
             const credentialRequest = request.body;
-            const issueCredentialResponse = await openId4VcIssuerService.createCredentialResponse(agentContext, {
-                issuer,
+            const issuanceSession = await openId4VcIssuerService.findIssuanceSessionForCredentialRequest(agentContext, {
+                issuerId: issuer.issuerId,
+                credentialRequest,
+            });
+            if (!issuanceSession) {
+                const cNonce = (0, credentialRequest_1.getCNonceFromCredentialRequest)(credentialRequest);
+                agentContext.config.logger.warn(`No issuance session found for incoming credential request with cNonce ${cNonce} and issuer ${issuer.issuerId}`);
+                return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 404, 'invalid_request', null);
+            }
+            const { credentialResponse } = await openId4VcIssuerService.createCredentialResponse(agentContext, {
+                issuanceSession,
                 credentialRequest,
             });
-            response.json(issueCredentialResponse);
+            response.json(credentialResponse);
         }
         catch (error) {
             (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 500, 'invalid_request', error);

package/build/openid4vc-issuer/router/credentialEndpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentialEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/credentialEndpoint.ts"],"names":[],"mappings":";;;AAKA,gDAA0E;AAC1E,sEAAkE;AAiBlE,SAAgB,2BAA2B,CAAC,MAAc,EAAE,MAA0C;IACpG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACrG,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE3D,IAAI;YACF,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;YAC7F,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAmC,CAAA;YACrE,MAAM,uBAAuB,GAAG,MAAM,sBAAsB,CAAC,wBAAwB,CAAC,YAAY,EAAE;gBAClG,MAAM;gBACN,iBAAiB;aAClB,CAAC,CAAA;YAEF,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;SACvC;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;SACvF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;AACJ,CAAC;AApBD,kEAoBC"}
+{"version":3,"file":"credentialEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/credentialEndpoint.ts"],"names":[],"mappings":";;;AAOA,gDAA0E;AAC1E,sEAAkE;AAClE,iEAA0E;AAE1E,2DAAuD;AAiBvD,SAAgB,2BAA2B,CAAC,MAAc,EAAE,MAA0C;IACpG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACrG,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAC3D,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;QAE7F,gGAAgG;QAChG,IAAI;YACF,MAAM,IAAA,qCAAiB,EAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;SAC7E;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAA;SAC3F;QAED,IAAI;YACF,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAmC,CAAA;YAErE,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,uCAAuC,CAAC,YAAY,EAAE;gBACzG,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,iBAAiB;aAClB,CAAC,CAAA;YAEF,IAAI,CAAC,eAAe,EAAE;gBACpB,MAAM,MAAM,GAAG,IAAA,kDAA8B,EAAC,iBAAiB,CAAC,CAAA;gBAChE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC7B,yEAAyE,MAAM,eAAe,MAAM,CAAC,QAAQ,EAAE,CAChH,CAAA;gBACD,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAA;aAC7F;YAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,sBAAsB,CAAC,wBAAwB,CAAC,YAAY,EAAE;gBACjG,eAAe;gBACf,iBAAiB;aAClB,CAAC,CAAA;YAEF,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;SAClC;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;SACvF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;AACJ,CAAC;AAzCD,kEAyCC"}

package/build/openid4vc-issuer/router/credentialOfferEndpoint.d.ts

@@ -0,0 +1,11 @@
+import type { Router } from 'express';
+export interface OpenId4VciCredentialOfferEndpointConfig {
+    /**
+     * The path at which the credential offer should should be made available. Note that it will be
+     * hosted at a subpath to take into account multiple tenants and issuers.
+     *
+     * @default /offers
+     */
+    endpointPath: string;
+}
+export declare function configureCredentialOfferEndpoint(router: Router, config: OpenId4VciCredentialOfferEndpointConfig): void;