@credo-ts/openid4vc 0.5.0-alpha.153 → 0.5.0-alpha.155

package/build/openid4vc-issuer/router/credentialOfferEndpoint.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureCredentialOfferEndpoint = void 0;
+const core_1 = require("@credo-ts/core");
+const router_1 = require("../../shared/router");
+const OpenId4VcIssuanceSessionState_1 = require("../OpenId4VcIssuanceSessionState");
+const OpenId4VcIssuerEvents_1 = require("../OpenId4VcIssuerEvents");
+const OpenId4VcIssuerModuleConfig_1 = require("../OpenId4VcIssuerModuleConfig");
+const repository_1 = require("../repository");
+function configureCredentialOfferEndpoint(router, config) {
+    router.get((0, core_1.joinUriParts)(config.endpointPath, [':credentialOfferId']), async (request, response, next) => {
+        const { agentContext, issuer } = (0, router_1.getRequestContext)(request);
+        try {
+            const openId4VcIssuanceSessionRepository = agentContext.dependencyManager.resolve(repository_1.OpenId4VcIssuanceSessionRepository);
+            const issuerConfig = agentContext.dependencyManager.resolve(OpenId4VcIssuerModuleConfig_1.OpenId4VcIssuerModuleConfig);
+            // TODO: is there a cleaner way to get the host (including port)?
+            const [, , host] = issuerConfig.baseUrl.split('/');
+            const credentialOfferUri = `${request.protocol}://${host}${request.originalUrl}`;
+            const openId4VcIssuanceSession = await openId4VcIssuanceSessionRepository.findSingleByQuery(agentContext, {
+                issuerId: issuer.issuerId,
+                credentialOfferUri,
+            });
+            if (!openId4VcIssuanceSession || !openId4VcIssuanceSession.credentialOfferPayload) {
+                return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 404, 'not_found', 'Credential offer not found');
+            }
+            if (![OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferCreated, OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferUriRetrieved].includes(openId4VcIssuanceSession.state)) {
+                return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 400, 'invalid_request', 'Invalid state for credential offer');
+            }
+            // It's okay to retrieve the offer multiple times. So we only update the state if it's not already retrieved
+            if (openId4VcIssuanceSession.state !== OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferUriRetrieved) {
+                const previousState = openId4VcIssuanceSession.state;
+                openId4VcIssuanceSession.state = OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferUriRetrieved;
+                await openId4VcIssuanceSessionRepository.update(agentContext, openId4VcIssuanceSession);
+                agentContext.dependencyManager
+                    .resolve(core_1.EventEmitter)
+                    .emit(agentContext, {
+                    type: OpenId4VcIssuerEvents_1.OpenId4VcIssuerEvents.IssuanceSessionStateChanged,
+                    payload: {
+                        issuanceSession: openId4VcIssuanceSession.clone(),
+                        previousState,
+                    },
+                });
+            }
+            response.json(openId4VcIssuanceSession.credentialOfferPayload);
+        }
+        catch (error) {
+            (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 500, 'invalid_request', error);
+        }
+        // NOTE: if we don't call next, the agentContext session handler will NOT be called
+        next();
+    });
+}
+exports.configureCredentialOfferEndpoint = configureCredentialOfferEndpoint;
+//# sourceMappingURL=credentialOfferEndpoint.js.map

package/build/openid4vc-issuer/router/credentialOfferEndpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialOfferEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/credentialOfferEndpoint.ts"],"names":[],"mappings":";;;AAIA,yCAA2D;AAE3D,gDAA0E;AAC1E,oFAAgF;AAChF,oEAAgE;AAChE,gFAA4E;AAC5E,8CAAkE;AAYlE,SAAgB,gCAAgC,CAAC,MAAc,EAAE,MAA+C;IAC9G,MAAM,CAAC,GAAG,CACR,IAAA,mBAAY,EAAC,MAAM,CAAC,YAAY,EAAE,CAAC,oBAAoB,CAAC,CAAC,EACzD,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACpE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE3D,IAAI;YACF,MAAM,kCAAkC,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAC/E,+CAAkC,CACnC,CAAA;YACD,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yDAA2B,CAAC,CAAA;YAExF,iEAAiE;YACjE,MAAM,CAAC,EAAE,AAAD,EAAG,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAElD,MAAM,kBAAkB,GAAG,GAAG,OAAO,CAAC,QAAQ,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;YAChF,MAAM,wBAAwB,GAAG,MAAM,kCAAkC,CAAC,iBAAiB,CAAC,YAAY,EAAE;gBACxG,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,kBAAkB;aACnB,CAAC,CAAA;YAEF,IAAI,CAAC,wBAAwB,IAAI,CAAC,wBAAwB,CAAC,sBAAsB,EAAE;gBACjF,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,CAAC,CAAA;aAC/G;YAED,IACE,CAAC,CAAC,6DAA6B,CAAC,YAAY,EAAE,6DAA6B,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CACrG,wBAAwB,CAAC,KAAK,CAC/B,EACD;gBACA,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,iBAAiB,EACjB,oCAAoC,CACrC,CAAA;aACF;YAED,4GAA4G;YAC5G,IAAI,wBAAwB,CAAC,KAAK,KAAK,6DAA6B,CAAC,iBAAiB,EAAE;gBACtF,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAA;gBAEpD,wBAAwB,CAAC,KAAK,GAAG,6DAA6B,CAAC,iBAAiB,CAAA;gBAChF,MAAM,kCAAkC,CAAC,MAAM,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAA;gBAEvF,YAAY,CAAC,iBAAiB;qBAC3B,OAAO,CAAC,mBAAY,CAAC;qBACrB,IAAI,CAA4C,YAAY,EAAE;oBAC7D,IAAI,EAAE,6CAAqB,CAAC,2BAA2B;oBACvD,OAAO,EAAE;wBACP,eAAe,EAAE,wBAAwB,CAAC,KAAK,EAAE;wBACjD,aAAa;qBACd;iBACF,CAAC,CAAA;aACL;YAED,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,CAAA;SAC/D;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;SACvF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CACF,CAAA;AACH,CAAC;AAlED,4EAkEC"}

package/build/openid4vc-issuer/router/index.d.ts

@@ -1,4 +1,5 @@
 export { configureAccessTokenEndpoint, OpenId4VciAccessTokenEndpointConfig } from './accessTokenEndpoint';
 export { configureCredentialEndpoint, OpenId4VciCredentialEndpointConfig } from './credentialEndpoint';
 export { configureIssuerMetadataEndpoint } from './metadataEndpoint';
+export { configureCredentialOfferEndpoint, OpenId4VciCredentialOfferEndpointConfig } from './credentialOfferEndpoint';
 export { OpenId4VcIssuanceRequest } from './requestContext';

package/build/openid4vc-issuer/router/index.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.configureIssuerMetadataEndpoint = exports.configureCredentialEndpoint = exports.configureAccessTokenEndpoint = void 0;
+exports.configureCredentialOfferEndpoint = exports.configureIssuerMetadataEndpoint = exports.configureCredentialEndpoint = exports.configureAccessTokenEndpoint = void 0;
 var accessTokenEndpoint_1 = require("./accessTokenEndpoint");
 Object.defineProperty(exports, "configureAccessTokenEndpoint", { enumerable: true, get: function () { return accessTokenEndpoint_1.configureAccessTokenEndpoint; } });
 var credentialEndpoint_1 = require("./credentialEndpoint");
 Object.defineProperty(exports, "configureCredentialEndpoint", { enumerable: true, get: function () { return credentialEndpoint_1.configureCredentialEndpoint; } });
 var metadataEndpoint_1 = require("./metadataEndpoint");
 Object.defineProperty(exports, "configureIssuerMetadataEndpoint", { enumerable: true, get: function () { return metadataEndpoint_1.configureIssuerMetadataEndpoint; } });
+var credentialOfferEndpoint_1 = require("./credentialOfferEndpoint");
+Object.defineProperty(exports, "configureCredentialOfferEndpoint", { enumerable: true, get: function () { return credentialOfferEndpoint_1.configureCredentialOfferEndpoint; } });
 //# sourceMappingURL=index.js.map

package/build/openid4vc-issuer/router/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/index.ts"],"names":[],"mappings":";;;AAAA,6DAAyG;AAAhG,mIAAA,4BAA4B,OAAA;AACrC,2DAAsG;AAA7F,iIAAA,2BAA2B,OAAA;AACpC,uDAAoE;AAA3D,mIAAA,+BAA+B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/index.ts"],"names":[],"mappings":";;;AAAA,6DAAyG;AAAhG,mIAAA,4BAA4B,OAAA;AACrC,2DAAsG;AAA7F,iIAAA,2BAA2B,OAAA;AACpC,uDAAoE;AAA3D,mIAAA,+BAA+B,OAAA;AACxC,qEAAqH;AAA5G,2IAAA,gCAAgC,OAAA"}

package/build/openid4vc-issuer/router/verifyAccessToken.d.ts

@@ -0,0 +1,3 @@
+import type { OpenId4VcIssuerRecord } from '../repository';
+import type { AgentContext } from '@credo-ts/core';
+export declare function verifyAccessToken(agentContext: AgentContext, issuer: OpenId4VcIssuerRecord, authorizationHeader?: string): Promise<void>;

package/build/openid4vc-issuer/router/verifyAccessToken.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAccessToken = void 0;
+const core_1 = require("@credo-ts/core");
+const OpenId4VcIssuerService_1 = require("../OpenId4VcIssuerService");
+async function verifyAccessToken(agentContext, issuer, authorizationHeader) {
+    const openId4VcIssuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
+    if (!authorizationHeader || !authorizationHeader.startsWith('Bearer ')) {
+        throw new core_1.CredoError('No access token provided in the authorization header');
+    }
+    const issuerMetadata = openId4VcIssuerService.getIssuerMetadata(agentContext, issuer);
+    const accessToken = core_1.Jwt.fromSerializedJwt(authorizationHeader.replace('Bearer ', ''));
+    const jwsService = agentContext.dependencyManager.resolve(core_1.JwsService);
+    const { isValid, signerKeys } = await jwsService.verifyJws(agentContext, {
+        jws: accessToken.serializedJwt,
+        jwkResolver: () => {
+            throw new Error('No JWK resolver available for access token verification');
+        },
+    });
+    if (!isValid) {
+        throw new core_1.CredoError('Signature on access token is invalid');
+    }
+    if (!signerKeys.map((key) => key.fingerprint).includes(issuer.accessTokenPublicKeyFingerprint)) {
+        throw new core_1.CredoError('Access token was not signed by the expected issuer');
+    }
+    // Finally validate the JWT payload (expiry etc..)
+    accessToken.payload.validate();
+    if (accessToken.payload.iss !== issuerMetadata.issuerUrl) {
+        throw new core_1.CredoError('Access token was not issued by the expected issuer');
+    }
+}
+exports.verifyAccessToken = verifyAccessToken;
+//# sourceMappingURL=verifyAccessToken.js.map

package/build/openid4vc-issuer/router/verifyAccessToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyAccessToken.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/verifyAccessToken.ts"],"names":[],"mappings":";;;AAGA,yCAA4D;AAE5D,sEAAkE;AAE3D,KAAK,UAAU,iBAAiB,CACrC,YAA0B,EAC1B,MAA6B,EAC7B,mBAA4B;IAE5B,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;IAE7F,IAAI,CAAC,mBAAmB,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE;QACtE,MAAM,IAAI,iBAAU,CAAC,sDAAsD,CAAC,CAAA;KAC7E;IAED,MAAM,cAAc,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IACrF,MAAM,WAAW,GAAG,UAAG,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAA;IACrF,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;IAErE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE;QACvE,GAAG,EAAE,WAAW,CAAC,aAAa;QAC9B,WAAW,EAAE,GAAG,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC5E,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,CAAC,OAAO,EAAE;QACZ,MAAM,IAAI,iBAAU,CAAC,sCAAsC,CAAC,CAAA;KAC7D;IAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,+BAA+B,CAAC,EAAE;QAC9F,MAAM,IAAI,iBAAU,CAAC,oDAAoD,CAAC,CAAA;KAC3E;IAED,kDAAkD;IAClD,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;IAE9B,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,KAAK,cAAc,CAAC,SAAS,EAAE;QACxD,MAAM,IAAI,iBAAU,CAAC,oDAAoD,CAAC,CAAA;KAC3E;AACH,CAAC;AApCD,8CAoCC"}

package/build/openid4vc-issuer/util/credentialRequest.d.ts

@@ -0,0 +1,5 @@
+import type { OpenId4VciCredentialRequest } from '../../shared';
+/**
+ * Extract the 'nonce' parameter from the JWT payload of the credential request.
+ */
+export declare function getCNonceFromCredentialRequest(credentialRequest: OpenId4VciCredentialRequest): string;

package/build/openid4vc-issuer/util/credentialRequest.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCNonceFromCredentialRequest = void 0;
+const core_1 = require("@credo-ts/core");
+/**
+ * Extract the 'nonce' parameter from the JWT payload of the credential request.
+ */
+function getCNonceFromCredentialRequest(credentialRequest) {
+    var _a;
+    if (!((_a = credentialRequest.proof) === null || _a === void 0 ? void 0 : _a.jwt))
+        throw new core_1.CredoError('No jwt in the credentialRequest proof.');
+    const jwt = core_1.Jwt.fromSerializedJwt(credentialRequest.proof.jwt);
+    if (!jwt.payload.additionalClaims.nonce || typeof jwt.payload.additionalClaims.nonce !== 'string')
+        throw new core_1.CredoError('No nonce in the credentialRequest JWT proof payload.');
+    return jwt.payload.additionalClaims.nonce;
+}
+exports.getCNonceFromCredentialRequest = getCNonceFromCredentialRequest;
+//# sourceMappingURL=credentialRequest.js.map

package/build/openid4vc-issuer/util/credentialRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialRequest.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/util/credentialRequest.ts"],"names":[],"mappings":";;;AAEA,yCAAgD;AAEhD;;GAEG;AACH,SAAgB,8BAA8B,CAAC,iBAA8C;;IAC3F,IAAI,CAAC,CAAA,MAAA,iBAAiB,CAAC,KAAK,0CAAE,GAAG,CAAA;QAAE,MAAM,IAAI,iBAAU,CAAC,wCAAwC,CAAC,CAAA;IACjG,MAAM,GAAG,GAAG,UAAG,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,KAAK,QAAQ;QAC/F,MAAM,IAAI,iBAAU,CAAC,sDAAsD,CAAC,CAAA;IAC9E,OAAO,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAA;AAC3C,CAAC;AAND,wEAMC"}

package/build/openid4vc-verifier/OpenId4VcSiopVerifierService.d.ts

@@ -1,8 +1,10 @@
 import type { OpenId4VcSiopCreateAuthorizationRequestOptions, OpenId4VcSiopCreateAuthorizationRequestReturn, OpenId4VcSiopCreateVerifierOptions, OpenId4VcSiopVerifiedAuthorizationResponse, OpenId4VcSiopVerifyAuthorizationResponseOptions } from './OpenId4VcSiopVerifierServiceOptions';
-import type { AgentContext } from '@credo-ts/core';
+import type { OpenId4VcVerificationSessionRecord } from './repository';
+import type { OpenId4VcSiopAuthorizationResponsePayload } from '../shared';
+import type { AgentContext, Query } from '@credo-ts/core';
 import { Logger, W3cCredentialService } from '@credo-ts/core';
 import { OpenId4VcVerifierModuleConfig } from './OpenId4VcVerifierModuleConfig';
-import { OpenId4VcVerifierRecord, OpenId4VcVerifierRepository } from './repository';
+import { OpenId4VcVerificationSessionRepository, OpenId4VcVerifierRecord, OpenId4VcVerifierRepository } from './repository';
 /**
  * @internal
  */
@@ -11,17 +13,31 @@ export declare class OpenId4VcSiopVerifierService {
     private w3cCredentialService;
     private openId4VcVerifierRepository;
     private config;
-    constructor(logger: Logger, w3cCredentialService: W3cCredentialService, openId4VcVerifierRepository: OpenId4VcVerifierRepository, config: OpenId4VcVerifierModuleConfig);
+    private openId4VcVerificationSessionRepository;
+    constructor(logger: Logger, w3cCredentialService: W3cCredentialService, openId4VcVerifierRepository: OpenId4VcVerifierRepository, config: OpenId4VcVerifierModuleConfig, openId4VcVerificationSessionRepository: OpenId4VcVerificationSessionRepository);
     createAuthorizationRequest(agentContext: AgentContext, options: OpenId4VcSiopCreateAuthorizationRequestOptions & {
         verifier: OpenId4VcVerifierRecord;
     }): Promise<OpenId4VcSiopCreateAuthorizationRequestReturn>;
     verifyAuthorizationResponse(agentContext: AgentContext, options: OpenId4VcSiopVerifyAuthorizationResponseOptions & {
-        verifier: OpenId4VcVerifierRecord;
-    }): Promise<OpenId4VcSiopVerifiedAuthorizationResponse>;
+        verificationSession: OpenId4VcVerificationSessionRecord;
+    }): Promise<OpenId4VcSiopVerifiedAuthorizationResponse & {
+        verificationSession: OpenId4VcVerificationSessionRecord;
+    }>;
+    getVerifiedAuthorizationResponse(verificationSession: OpenId4VcVerificationSessionRecord): Promise<OpenId4VcSiopVerifiedAuthorizationResponse>;
+    /**
+     * Find the verification session associated with an authorization response. You can optionally provide a verifier id
+     * if the verifier that the response is associated with is already known.
+     */
+    findVerificationSessionForAuthorizationResponse(agentContext: AgentContext, { authorizationResponse, verifierId, }: {
+        authorizationResponse: OpenId4VcSiopAuthorizationResponsePayload;
+        verifierId?: string;
+    }): Promise<OpenId4VcVerificationSessionRecord | null>;
     getAllVerifiers(agentContext: AgentContext): Promise<OpenId4VcVerifierRecord[]>;
-    getByVerifierId(agentContext: AgentContext, verifierId: string): Promise<OpenId4VcVerifierRecord>;
+    getVerifierByVerifierId(agentContext: AgentContext, verifierId: string): Promise<OpenId4VcVerifierRecord>;
     updateVerifier(agentContext: AgentContext, verifier: OpenId4VcVerifierRecord): Promise<void>;
     createVerifier(agentContext: AgentContext, options?: OpenId4VcSiopCreateVerifierOptions): Promise<OpenId4VcVerifierRecord>;
+    findVerificationSessionsByQuery(agentContext: AgentContext, query: Query<OpenId4VcVerificationSessionRecord>): Promise<OpenId4VcVerificationSessionRecord[]>;
+    getVerificationSessionById(agentContext: AgentContext, verificationSessionId: string): Promise<OpenId4VcVerificationSessionRecord>;
     private getRelyingParty;
     private getPresentationVerificationCallback;
 }

package/build/openid4vc-verifier/OpenId4VcSiopVerifierService.js

@@ -15,79 +15,107 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.OpenId4VcSiopVerifierService = void 0;
 const core_1 = require("@credo-ts/core");
 const did_auth_siop_1 = require("@sphereon/did-auth-siop");
+const OpenID4VP_1 = require("@sphereon/did-auth-siop/dist/authorization-response/OpenID4VP");
+const rxjs_1 = require("rxjs");
 const router_1 = require("../shared/router");
 const transform_1 = require("../shared/transform");
 const utils_1 = require("../shared/utils");
+const OpenId4VcVerificationSessionState_1 = require("./OpenId4VcVerificationSessionState");
 const OpenId4VcVerifierModuleConfig_1 = require("./OpenId4VcVerifierModuleConfig");
 const repository_1 = require("./repository");
+const OpenId4VcRelyingPartyEventEmitter_1 = require("./repository/OpenId4VcRelyingPartyEventEmitter");
+const OpenId4VcRelyingPartySessionManager_1 = require("./repository/OpenId4VcRelyingPartySessionManager");
 /**
  * @internal
  */
 let OpenId4VcSiopVerifierService = class OpenId4VcSiopVerifierService {
-    constructor(logger, w3cCredentialService, openId4VcVerifierRepository, config) {
+    constructor(logger, w3cCredentialService, openId4VcVerifierRepository, config, openId4VcVerificationSessionRepository) {
         this.logger = logger;
         this.w3cCredentialService = w3cCredentialService;
         this.openId4VcVerifierRepository = openId4VcVerifierRepository;
         this.config = config;
+        this.openId4VcVerificationSessionRepository = openId4VcVerificationSessionRepository;
     }
     async createAuthorizationRequest(agentContext, options) {
         var _a;
         const nonce = await agentContext.wallet.generateNonce();
         const state = await agentContext.wallet.generateNonce();
+        // Correlation id will be the id of the verification session record
         const correlationId = core_1.utils.uuid();
-        const relyingParty = await this.getRelyingParty(agentContext, options.verifier, {
+        const relyingParty = await this.getRelyingParty(agentContext, options.verifier.verifierId, {
             presentationDefinition: (_a = options.presentationExchange) === null || _a === void 0 ? void 0 : _a.definition,
             requestSigner: options.requestSigner,
         });
+        // We always use shortened URIs currently
+        const hostedAuthorizationRequestUri = (0, core_1.joinUriParts)(this.config.baseUrl, [
+            options.verifier.verifierId,
+            this.config.authorizationRequestEndpoint.endpointPath,
+            // It doesn't really matter what the url is, as long as it's unique
+            core_1.utils.uuid(),
+        ]);
+        // This is very unfortunate, but storing state in sphereon's SiOP-OID4VP library
+        // is done async, so we can't be certain yet that the verification session record
+        // is created already when we have created the authorization request. So we need to
+        // wait for a short while before we can be certain that the verification session record
+        // is created. To not use arbitrary timeouts, we wait for the specific RecordSavedEvent
+        // that is emitted when the verification session record is created.
+        const eventEmitter = agentContext.dependencyManager.resolve(core_1.EventEmitter);
+        const verificationSessionCreatedPromise = (0, rxjs_1.firstValueFrom)(eventEmitter
+            .observable(core_1.RepositoryEventTypes.RecordSaved)
+            .pipe((0, rxjs_1.filter)((e) => e.metadata.contextCorrelationId === agentContext.contextCorrelationId), (0, rxjs_1.filter)((e) => e.payload.record.id === correlationId && e.payload.record.verifierId === options.verifier.verifierId), (0, rxjs_1.first)(), (0, rxjs_1.timeout)({
+            first: 10000,
+            meta: 'OpenId4VcSiopVerifierService.createAuthorizationRequest',
+        }), (0, rxjs_1.map)((e) => e.payload.record)));
         const authorizationRequest = await relyingParty.createAuthorizationRequest({
             correlationId,
             nonce,
             state,
+            requestByReferenceURI: hostedAuthorizationRequestUri,
         });
         const authorizationRequestUri = await authorizationRequest.uri();
+        const verificationSession = await verificationSessionCreatedPromise;
         return {
-            authorizationRequestUri: authorizationRequestUri.encodedUri,
-            authorizationRequestPayload: authorizationRequest.payload,
+            authorizationRequest: authorizationRequestUri.encodedUri,
+            verificationSession,
         };
     }
     async verifyAuthorizationResponse(agentContext, options) {
-        var _a, _b, _c, _d;
-        const authorizationResponse = await did_auth_siop_1.AuthorizationResponse.fromPayload(options.authorizationResponse).catch(() => {
-            throw new core_1.CredoError(`Unable to parse authorization response payload. ${JSON.stringify(options.authorizationResponse)}`);
-        });
-        const responseNonce = await authorizationResponse.getMergedProperty('nonce', {
-            hasher: core_1.Hasher.hash,
-        });
-        const responseState = await authorizationResponse.getMergedProperty('state', {
-            hasher: core_1.Hasher.hash,
-        });
-        const sessionManager = this.config.getSessionManager(agentContext);
-        const correlationId = responseNonce
-            ? await sessionManager.getCorrelationIdByNonce(responseNonce, false)
-            : responseState
-                ? await sessionManager.getCorrelationIdByState(responseState, false)
-                : undefined;
-        if (!correlationId) {
-            throw new core_1.CredoError(`Unable to find correlationId for nonce '${responseNonce}' or state '${responseState}'`);
-        }
-        const requestSessionState = await sessionManager.getRequestStateByCorrelationId(correlationId);
-        if (!requestSessionState) {
-            throw new core_1.CredoError(`Unable to find request state for correlationId '${correlationId}'`);
-        }
-        const requestClientId = await requestSessionState.request.getMergedProperty('client_id');
-        const requestNonce = await requestSessionState.request.getMergedProperty('nonce');
-        const requestState = await requestSessionState.request.getMergedProperty('state');
-        const presentationDefinitionsWithLocation = await requestSessionState.request.getPresentationDefinitions();
+        var _a;
+        // Assert state
+        options.verificationSession.assertState([
+            OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.RequestUriRetrieved,
+            OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.RequestCreated,
+        ]);
+        const authorizationRequest = await did_auth_siop_1.AuthorizationRequest.fromUriOrJwt(options.verificationSession.authorizationRequestJwt);
+        const requestClientId = await authorizationRequest.getMergedProperty('client_id');
+        const requestNonce = await authorizationRequest.getMergedProperty('nonce');
+        const requestState = await authorizationRequest.getMergedProperty('state');
+        const presentationDefinitionsWithLocation = await authorizationRequest.getPresentationDefinitions();
         if (!requestNonce || !requestClientId || !requestState) {
-            throw new core_1.CredoError(`Unable to find nonce, state, or client_id in authorization request for correlationId '${correlationId}'`);
+            throw new core_1.CredoError(`Unable to find nonce, state, or client_id in authorization request for verification session '${options.verificationSession.id}'`);
         }
-        const relyingParty = await this.getRelyingParty(agentContext, options.verifier, {
+        const relyingParty = await this.getRelyingParty(agentContext, options.verificationSession.verifierId, {
             presentationDefinition: (_a = presentationDefinitionsWithLocation === null || presentationDefinitionsWithLocation === void 0 ? void 0 : presentationDefinitionsWithLocation[0]) === null || _a === void 0 ? void 0 : _a.definition,
             clientId: requestClientId,
         });
-        const response = await relyingParty.verifyAuthorizationResponse(authorizationResponse.payload, {
+        // This is very unfortunate, but storing state in sphereon's SiOP-OID4VP library
+        // is done async, so we can't be certain yet that the verification session record
+        // is updated already when we have verified the authorization response. So we need to
+        // wait for a short while before we can be certain that the verification session record
+        // is updated. To not use arbitrary timeouts, we wait for the specific RecordUpdatedEvent
+        // that is emitted when the verification session record is updated.
+        const eventEmitter = agentContext.dependencyManager.resolve(core_1.EventEmitter);
+        const verificationSessionUpdatedPromise = (0, rxjs_1.firstValueFrom)(eventEmitter
+            .observable(core_1.RepositoryEventTypes.RecordUpdated)
+            .pipe((0, rxjs_1.filter)((e) => e.metadata.contextCorrelationId === agentContext.contextCorrelationId), (0, rxjs_1.filter)((e) => e.payload.record.id === options.verificationSession.id &&
+            e.payload.record.verifierId === options.verificationSession.verifierId &&
+            e.payload.record.state === OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.ResponseVerified), (0, rxjs_1.first)(), (0, rxjs_1.timeout)({
+            first: 10000,
+            meta: 'OpenId4VcSiopVerifierService.verifyAuthorizationResponse',
+        }), (0, rxjs_1.map)((e) => e.payload.record)));
+        await relyingParty.verifyAuthorizationResponse(options.authorizationResponse, {
             audience: requestClientId,
-            correlationId,
+            correlationId: options.verificationSession.id,
             state: requestState,
             presentationDefinitions: presentationDefinitionsWithLocation,
             verification: {
@@ -101,31 +129,73 @@ let OpenId4VcSiopVerifierService = class OpenId4VcSiopVerifierService {
                 resolveOpts: { noUniversalResolverFallback: true, resolver: (0, utils_1.getSphereonDidResolver)(agentContext) },
             },
         });
-        const presentationExchange = ((_b = response.oid4vpSubmission) === null || _b === void 0 ? void 0 : _b.submissionData)
-            ? {
-                submission: response.oid4vpSubmission.submissionData,
-                definition: (_c = response.oid4vpSubmission.presentationDefinitions[0]) === null || _c === void 0 ? void 0 : _c.definition,
-                presentations: (_d = response.oid4vpSubmission) === null || _d === void 0 ? void 0 : _d.presentations.map(transform_1.getVerifiablePresentationFromSphereonWrapped),
-            }
+        const verificationSession = await verificationSessionUpdatedPromise;
+        const verifiedAuthorizationResponse = await this.getVerifiedAuthorizationResponse(verificationSession);
+        return Object.assign(Object.assign({}, verifiedAuthorizationResponse), { verificationSession: await verificationSessionUpdatedPromise });
+    }
+    // TODO: we can also choose to store this in the verification session, however we can easily derive it
+    // so it's probably easier to make changes in the future if we just store the raw payload.
+    async getVerifiedAuthorizationResponse(verificationSession) {
+        var _a, _b, _c, _d;
+        verificationSession.assertState(OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.ResponseVerified);
+        if (!verificationSession.authorizationResponsePayload) {
+            throw new core_1.CredoError('No authorization response payload found in the verification session.');
+        }
+        const authorizationResponse = await did_auth_siop_1.AuthorizationResponse.fromPayload(verificationSession.authorizationResponsePayload);
+        const authorizationRequest = await did_auth_siop_1.AuthorizationRequest.fromUriOrJwt(verificationSession.authorizationRequestJwt);
+        const idToken = authorizationResponse.idToken
+            ? { payload: await ((_a = authorizationResponse.idToken) === null || _a === void 0 ? void 0 : _a.payload()) }
             : undefined;
-        const idToken = response.authorizationResponse.idToken
-            ? {
-                payload: await response.authorizationResponse.idToken.payload(),
+        let presentationExchange = undefined;
+        const presentationDefinitions = await authorizationRequest.getPresentationDefinitions();
+        if (presentationDefinitions && presentationDefinitions.length > 0) {
+            const presentations = await (0, OpenID4VP_1.extractPresentationsFromAuthorizationResponse)(authorizationResponse, {
+                hasher: core_1.Hasher.hash,
+            });
+            // TODO: Probably wise to check against request for the location of the submission_data
+            const submission = (_d = (_c = (_b = idToken === null || idToken === void 0 ? void 0 : idToken.payload) === null || _b === void 0 ? void 0 : _b._vp_token) === null || _c === void 0 ? void 0 : _c.presentation_submission) !== null && _d !== void 0 ? _d : authorizationResponse.payload.presentation_submission;
+            if (!submission) {
+                throw new core_1.CredoError('Unable to extract submission from the response.');
             }
-            : undefined;
-        // TODO: do we need to verify whether idToken or vpToken is present?
-        // Or is that properly handled by sphereon's library?
+            presentationExchange = {
+                definition: presentationDefinitions[0].definition,
+                presentations: presentations.map(transform_1.getVerifiablePresentationFromSphereonWrapped),
+                submission,
+            };
+        }
+        if (!idToken && !presentationExchange) {
+            throw new core_1.CredoError('No idToken or presentationExchange found in the response.');
+        }
         return {
-            // Parameters related to ID Token.
             idToken,
-            // Parameters related to DIF Presentation Exchange
             presentationExchange,
         };
     }
+    /**
+     * Find the verification session associated with an authorization response. You can optionally provide a verifier id
+     * if the verifier that the response is associated with is already known.
+     */
+    async findVerificationSessionForAuthorizationResponse(agentContext, { authorizationResponse, verifierId, }) {
+        const authorizationResponseInstance = await did_auth_siop_1.AuthorizationResponse.fromPayload(authorizationResponse).catch(() => {
+            throw new core_1.CredoError(`Unable to parse authorization response payload. ${JSON.stringify(authorizationResponse)}`);
+        });
+        const responseNonce = await authorizationResponseInstance.getMergedProperty('nonce', {
+            hasher: core_1.Hasher.hash,
+        });
+        const responseState = await authorizationResponseInstance.getMergedProperty('state', {
+            hasher: core_1.Hasher.hash,
+        });
+        const verificationSession = await this.openId4VcVerificationSessionRepository.findSingleByQuery(agentContext, {
+            nonce: responseNonce,
+            payloadState: responseState,
+            verifierId,
+        });
+        return verificationSession;
+    }
     async getAllVerifiers(agentContext) {
         return this.openId4VcVerifierRepository.getAll(agentContext);
     }
-    async getByVerifierId(agentContext, verifierId) {
+    async getVerifierByVerifierId(agentContext, verifierId) {
         return this.openId4VcVerifierRepository.getByVerifierId(agentContext, verifierId);
     }
     async updateVerifier(agentContext, verifier) {
@@ -140,9 +210,15 @@ let OpenId4VcSiopVerifierService = class OpenId4VcSiopVerifierService {
         await (0, router_1.storeActorIdForContextCorrelationId)(agentContext, openId4VcVerifier.verifierId);
         return openId4VcVerifier;
     }
-    async getRelyingParty(agentContext, verifier, { presentationDefinition, requestSigner, clientId, }) {
+    async findVerificationSessionsByQuery(agentContext, query) {
+        return this.openId4VcVerificationSessionRepository.findByQuery(agentContext, query);
+    }
+    async getVerificationSessionById(agentContext, verificationSessionId) {
+        return this.openId4VcVerificationSessionRepository.getById(agentContext, verificationSessionId);
+    }
+    async getRelyingParty(agentContext, verifierId, { presentationDefinition, requestSigner, clientId, }) {
         const authorizationResponseUrl = (0, core_1.joinUriParts)(this.config.baseUrl, [
-            verifier.verifierId,
+            verifierId,
             this.config.authorizationEndpoint.endpointPath,
         ]);
         const signatureSuiteRegistry = agentContext.dependencyManager.resolve(core_1.SignatureSuiteRegistry);
@@ -163,6 +239,11 @@ let OpenId4VcSiopVerifierService = class OpenId4VcSiopVerifierService {
         const supportedDidMethods = agentContext.dependencyManager
             .resolve(core_1.DidsApi)
             .supportedResolverMethods.filter((m) => m !== 'peer');
+        // The OpenId4VcRelyingPartyEventHandler is a global event handler that makes sure that
+        // all the events are handled, and that the correct context is used for the events.
+        const sphereonEventEmitter = agentContext.dependencyManager
+            .resolve(OpenId4VcRelyingPartyEventEmitter_1.OpenId4VcRelyingPartyEventHandler)
+            .getEventEmitterForVerifier(agentContext.contextCorrelationId, verifierId);
         builder
             .withRedirectUri(authorizationResponseUrl)
             .withIssuer(did_auth_siop_1.ResponseIss.SELF_ISSUED_V2)
@@ -201,14 +282,12 @@ let OpenId4VcSiopVerifierService = class OpenId4VcSiopVerifierService {
             .withResponseType(presentationDefinition ? [did_auth_siop_1.ResponseType.ID_TOKEN, did_auth_siop_1.ResponseType.VP_TOKEN] : did_auth_siop_1.ResponseType.ID_TOKEN)
             .withScope('openid')
             .withHasher(core_1.Hasher.hash)
-            // TODO: support hosting requests within AFJ and passing it by reference
-            .withRequestBy(did_auth_siop_1.PassBy.VALUE)
             .withCheckLinkedDomain(did_auth_siop_1.CheckLinkedDomain.NEVER)
             // FIXME: should allow verification of revocation
             // .withRevocationVerificationCallback()
             .withRevocationVerification(did_auth_siop_1.RevocationVerification.NEVER)
-            .withSessionManager(this.config.getSessionManager(agentContext))
-            .withEventEmitter(this.config.getEventEmitter(agentContext));
+            .withSessionManager(new OpenId4VcRelyingPartySessionManager_1.OpenId4VcRelyingPartySessionManager(agentContext, verifierId))
+            .withEventEmitter(sphereonEventEmitter);
         if (presentationDefinition) {
             builder.withPresentationDefinition({ definition: presentationDefinition }, [did_auth_siop_1.PropertyTarget.REQUEST_OBJECT]);
         }
@@ -271,7 +350,8 @@ OpenId4VcSiopVerifierService = __decorate([
     __param(0, (0, core_1.inject)(core_1.InjectionSymbols.Logger)),
     __metadata("design:paramtypes", [Object, core_1.W3cCredentialService,
         repository_1.OpenId4VcVerifierRepository,
-        OpenId4VcVerifierModuleConfig_1.OpenId4VcVerifierModuleConfig])
+        OpenId4VcVerifierModuleConfig_1.OpenId4VcVerifierModuleConfig,
+        repository_1.OpenId4VcVerificationSessionRepository])
 ], OpenId4VcSiopVerifierService);
 exports.OpenId4VcSiopVerifierService = OpenId4VcSiopVerifierService;
 //# sourceMappingURL=OpenId4VcSiopVerifierService.js.map

package/build/openid4vc-verifier/OpenId4VcSiopVerifierService.js.map

@@ -1 +1 @@
-{"version":3,"file":"OpenId4VcSiopVerifierService.js","sourceRoot":"","sources":["../../src/openid4vc-verifier/OpenId4VcSiopVerifierService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAWA,yCAeuB;AACvB,2DAYgC;AAEhC,6CAAsE;AACtE,mDAAkF;AAClF,2CAIwB;AAExB,mFAA+E;AAC/E,6CAAmF;AAEnF;;GAEG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACvC,YAC2C,MAAc,EAC/C,oBAA0C,EAC1C,2BAAwD,EACxD,MAAqC;QAHJ,WAAM,GAAN,MAAM,CAAQ;QAC/C,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,gCAA2B,GAA3B,2BAA2B,CAA6B;QACxD,WAAM,GAAN,MAAM,CAA+B;IAC5C,CAAC;IAEG,KAAK,CAAC,0BAA0B,CACrC,YAA0B,EAC1B,OAA+F;;QAE/F,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,CAAA;QACvD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,CAAA;QACvD,MAAM,aAAa,GAAG,YAAK,CAAC,IAAI,EAAE,CAAA;QAElC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC9E,sBAAsB,EAAE,MAAA,OAAO,CAAC,oBAAoB,0CAAE,UAAU;YAChE,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAA;QAEF,MAAM,oBAAoB,GAAG,MAAM,YAAY,CAAC,0BAA0B,CAAC;YACzE,aAAa;YACb,KAAK;YACL,KAAK;SACN,CAAC,CAAA;QAEF,MAAM,uBAAuB,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAAA;QAEhE,OAAO;YACL,uBAAuB,EAAE,uBAAuB,CAAC,UAAU;YAC3D,2BAA2B,EAAE,oBAAoB,CAAC,OAAO;SAC1D,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,2BAA2B,CACtC,YAA0B,EAC1B,OAAgG;;QAEhG,MAAM,qBAAqB,GAAG,MAAM,qCAAqB,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC9G,MAAM,IAAI,iBAAU,CAClB,mDAAmD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CACnG,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,iBAAiB,CAAS,OAAO,EAAE;YACnF,MAAM,EAAE,aAAM,CAAC,IAAI;SACpB,CAAC,CAAA;QACF,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,iBAAiB,CAAS,OAAO,EAAE;YACnF,MAAM,EAAE,aAAM,CAAC,IAAI;SACpB,CAAC,CAAA;QACF,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAA;QAElE,MAAM,aAAa,GAAG,aAAa;YACjC,CAAC,CAAC,MAAM,cAAc,CAAC,uBAAuB,CAAC,aAAa,EAAE,KAAK,CAAC;YACpE,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,MAAM,cAAc,CAAC,uBAAuB,CAAC,aAAa,EAAE,KAAK,CAAC;gBACpE,CAAC,CAAC,SAAS,CAAA;QAEb,IAAI,CAAC,aAAa,EAAE;YAClB,MAAM,IAAI,iBAAU,CAAC,2CAA2C,aAAa,eAAe,aAAa,GAAG,CAAC,CAAA;SAC9G;QAED,MAAM,mBAAmB,GAAG,MAAM,cAAc,CAAC,8BAA8B,CAAC,aAAa,CAAC,CAAA;QAC9F,IAAI,CAAC,mBAAmB,EAAE;YACxB,MAAM,IAAI,iBAAU,CAAC,mDAAmD,aAAa,GAAG,CAAC,CAAA;SAC1F;QAED,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAS,WAAW,CAAC,CAAA;QAChG,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAS,OAAO,CAAC,CAAA;QACzF,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAS,OAAO,CAAC,CAAA;QACzF,MAAM,mCAAmC,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAA;QAE1G,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,EAAE;YACtD,MAAM,IAAI,iBAAU,CAClB,yFAAyF,aAAa,GAAG,CAC1G,CAAA;SACF;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC9E,sBAAsB,EAAE,MAAA,mCAAmC,aAAnC,mCAAmC,uBAAnC,mCAAmC,CAAG,CAAC,CAAC,0CAAE,UAAU;YAC5E,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,OAAO,EAAE;YAC7F,QAAQ,EAAE,eAAe;YACzB,aAAa;YACb,KAAK,EAAE,YAAY;YACnB,uBAAuB,EAAE,mCAAmC;YAC5D,YAAY,EAAE;gBACZ,gCAAgC,EAAE,IAAI,CAAC,mCAAmC,CAAC,YAAY,EAAE;oBACvF,KAAK,EAAE,YAAY;oBACnB,QAAQ,EAAE,eAAe;iBAC1B,CAAC;gBACF,2CAA2C;gBAC3C,mEAAmE;gBACnE,IAAI,EAAE,gCAAgB,CAAC,QAAQ;gBAC/B,WAAW,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAA,8BAAsB,EAAC,YAAY,CAAC,EAAE;aACnG;SACF,CAAC,CAAA;QAEF,MAAM,oBAAoB,GAAG,CAAA,MAAA,QAAQ,CAAC,gBAAgB,0CAAE,cAAc;YACpE,CAAC,CAAC;gBACE,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,cAAc;gBACpD,UAAU,EAAE,MAAA,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC,CAAC,0CAAE,UAAU;gBAC5E,aAAa,EAAE,MAAA,QAAQ,CAAC,gBAAgB,0CAAE,aAAa,CAAC,GAAG,CAAC,wDAA4C,CAAC;aAC1G;YACH,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,CAAC,OAAO;YACpD,CAAC,CAAC;gBACE,OAAO,EAAE,MAAM,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE;aAChE;YACH,CAAC,CAAC,SAAS,CAAA;QAEb,oEAAoE;QACpE,qDAAqD;QACrD,OAAO;YACL,kCAAkC;YAClC,OAAO;YAEP,kDAAkD;YAClD,oBAAoB;SACrB,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,YAA0B;QACrD,OAAO,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC9D,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,YAA0B,EAAE,UAAkB;QACzE,OAAO,IAAI,CAAC,2BAA2B,CAAC,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IACnF,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,YAA0B,EAAE,QAAiC;QACvF,OAAO,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IACxE,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,YAA0B,EAAE,OAA4C;;QAClG,MAAM,iBAAiB,GAAG,IAAI,oCAAuB,CAAC;YACpD,UAAU,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,mCAAI,YAAK,CAAC,IAAI,EAAE;SAChD,CAAC,CAAA;QAEF,MAAM,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAA;QAC5E,MAAM,IAAA,4CAAmC,EAAC,YAAY,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAA;QACrF,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,YAA0B,EAC1B,QAAiC,EACjC,EACE,sBAAsB,EACtB,aAAa,EACb,QAAQ,GAKT;QAED,MAAM,wBAAwB,GAAG,IAAA,mBAAY,EAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACjE,QAAQ,CAAC,UAAU;YACnB,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,YAAY;SAC/C,CAAC,CAAA;QAEF,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,6BAAsB,CAAC,CAAA;QAE7F,MAAM,aAAa,GAAG,IAAA,0CAAkC,EAAC,YAAY,CAAa,CAAA;QAClF,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,mBAAmB,CAAA;QAEtE,2FAA2F;QAC3F,MAAM,OAAO,GAAG,kBAAE,CAAC,OAAO,EAAE,CAAA;QAE5B,IAAI,SAAS,GAAG,QAAQ,CAAA;QACxB,IAAI,aAAa,EAAE;YACjB,MAAM,iBAAiB,GAAG,MAAM,IAAA,iDAAyC,EAAC,YAAY,EAAE,aAAa,CAAC,CAAA;YACtG,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAA;YAExC,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAA;SAClC;QAED,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,iBAAU,CAAC,wDAAwD,CAAC,CAAA;SAC/E;QAED,8FAA8F;QAC9F,MAAM,mBAAmB,GAAG,YAAY,CAAC,iBAAiB;aACvD,OAAO,CAAC,cAAO,CAAC;aAChB,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAA;QAEvD,OAAO;aACJ,eAAe,CAAC,wBAAwB,CAAC;aACzC,UAAU,CAAC,2BAAW,CAAC,cAAc,CAAC;aACtC,qBAAqB,CAAC,CAAC,gCAAgB,CAAC,UAAU,EAAE,gCAAgB,CAAC,qBAAqB,CAAC,CAAC;YAC7F,0DAA0D;aACzD,kBAAkB,CAAC;YAClB,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,sBAAM,CAAC,KAAK;YACpB,gCAAgC,EAAE,aAA8B;YAChE,sBAAsB,EAAE,CAAC,4BAAY,CAAC,QAAQ,EAAE,4BAAY,CAAC,QAAQ,CAAC;YACtE,8BAA8B,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,kBAAkB,EAAE;gBAClB,MAAM,EAAE;oBACN,GAAG,EAAE,aAAa;iBACnB;gBACD,WAAW,EAAE;oBACX,GAAG,EAAE,aAAa;iBACnB;gBACD,MAAM,EAAE;oBACN,GAAG,EAAE,aAAa;iBACnB;gBACD,MAAM,EAAE;oBACN,UAAU,EAAE,mBAAmB;iBAChC;gBACD,MAAM,EAAE;oBACN,UAAU,EAAE,mBAAmB;iBAChC;gBACD,WAAW,EAAE;oBACX,iBAAiB,EAAE,aAAa;oBAChC,iBAAiB,EAAE,aAAa;iBACjC;aACF;SACF,CAAC;aACD,kBAAkB,CAAC,IAAA,8BAAsB,EAAC,YAAY,CAAC,CAAC;aACxD,gBAAgB,CAAC,4BAAY,CAAC,IAAI,CAAC;aACnC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,4BAAY,CAAC,QAAQ,EAAE,4BAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,4BAAY,CAAC,QAAQ,CAAC;aACjH,SAAS,CAAC,QAAQ,CAAC;aACnB,UAAU,CAAC,aAAM,CAAC,IAAI,CAAC;YACxB,wEAAwE;aACvE,aAAa,CAAC,sBAAM,CAAC,KAAK,CAAC;aAC3B,qBAAqB,CAAC,iCAAiB,CAAC,KAAK,CAAC;YAC/C,iDAAiD;YACjD,wCAAwC;aACvC,0BAA0B,CAAC,sCAAsB,CAAC,KAAK,CAAC;aACxD,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;aAC/D,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAA;QAE9D,IAAI,sBAAsB,EAAE;YAC1B,OAAO,CAAC,0BAA0B,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,CAAC,8BAAc,CAAC,cAAc,CAAC,CAAC,CAAA;SAC5G;QAED,KAAK,MAAM,kBAAkB,IAAI,mBAAmB,EAAE;YACpD,OAAO,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAA;SACzC;QAED,OAAO,OAAO,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;IAEO,mCAAmC,CACzC,YAA0B,EAC1B,OAA4C;QAE5C,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,EAAE;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,sBAAe,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAA;YACvF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,sBAAsB,CAAC,CAAA;YAEpE,IAAI,CAAC,mBAAmB;gBAAE,MAAM,IAAI,iBAAU,CAAC,kDAAkD,CAAC,CAAA;YAElG,IAAI,OAAgB,CAAA;YAEpB,+EAA+E;YAC/E,4DAA4D;YAC5D,IAAI,OAAO,mBAAmB,KAAK,QAAQ,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;gBAChF,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;gBAErE,MAAM,kBAAkB,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC;oBACjD,cAAc,EAAE,mBAAmB;oBACnC,UAAU,EAAE;wBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;qBACrB;iBACF,CAAC,CAAA;gBAEF,OAAO,GAAG,kBAAkB,CAAC,YAAY,CAAC,OAAO,CAAA;aAClD;iBAAM,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE;gBAClD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,YAAY,EAAE;oBAC1F,YAAY,EAAE,mBAAmB;oBACjC,SAAS,EAAE,OAAO,CAAC,KAAK;oBACxB,MAAM,EAAE,OAAO,CAAC,QAAQ;iBACzB,CAAC,CAAA;gBAEF,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAA;aACrC;iBAAM;gBACL,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,YAAY,EAAE;oBAC1F,YAAY,EAAE,sBAAe,CAAC,QAAQ,CAAC,mBAAmB,EAAE,sCAA+B,CAAC;oBAC5F,SAAS,EAAE,OAAO,CAAC,KAAK;oBACxB,MAAM,EAAE,OAAO,CAAC,QAAQ;iBACzB,CAAC,CAAA;gBAEF,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAA;aACrC;YAED,gFAAgF;YAChF,6EAA6E;YAC7E,+EAA+E;YAC/E,mBAAmB;YACnB,IAAI,CAAC,OAAO,EAAE;gBACZ,MAAM,IAAI,iBAAU,CAAC,mCAAmC,CAAC,CAAA;aAC1D;YAED,OAAO;gBACL,QAAQ,EAAE,OAAO;aAClB,CAAA;QACH,CAAC,CAAA;IACH,CAAC;CACF,CAAA;AAlTY,4BAA4B;IADxC,IAAA,iBAAU,GAAE;IAGR,WAAA,IAAA,aAAM,EAAC,uBAAgB,CAAC,MAAM,CAAC,CAAA;6CACF,2BAAoB;QACb,wCAA2B;QAChD,6DAA6B;GALpC,4BAA4B,CAkTxC;AAlTY,oEAA4B"}
+{"version":3,"file":"OpenId4VcSiopVerifierService.js","sourceRoot":"","sources":["../../src/openid4vc-verifier/OpenId4VcSiopVerifierService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAkBA,yCAiBuB;AACvB,2DAagC;AAChC,6FAA6H;AAC7H,+BAAkE;AAElE,6CAAsE;AACtE,mDAAkF;AAClF,2CAIwB;AAExB,2FAAuF;AACvF,mFAA+E;AAC/E,6CAIqB;AACrB,sGAAkG;AAClG,0GAAsG;AAEtG;;GAEG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACvC,YAC2C,MAAc,EAC/C,oBAA0C,EAC1C,2BAAwD,EACxD,MAAqC,EACrC,sCAA8E;QAJ7C,WAAM,GAAN,MAAM,CAAQ;QAC/C,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,gCAA2B,GAA3B,2BAA2B,CAA6B;QACxD,WAAM,GAAN,MAAM,CAA+B;QACrC,2CAAsC,GAAtC,sCAAsC,CAAwC;IACrF,CAAC;IAEG,KAAK,CAAC,0BAA0B,CACrC,YAA0B,EAC1B,OAA+F;;QAE/F,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,CAAA;QACvD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,CAAA;QAEvD,mEAAmE;QACnE,MAAM,aAAa,GAAG,YAAK,CAAC,IAAI,EAAE,CAAA;QAElC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE;YACzF,sBAAsB,EAAE,MAAA,OAAO,CAAC,oBAAoB,0CAAE,UAAU;YAChE,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAA;QAEF,yCAAyC;QACzC,MAAM,6BAA6B,GAAG,IAAA,mBAAY,EAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACtE,OAAO,CAAC,QAAQ,CAAC,UAAU;YAC3B,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,YAAY;YACrD,mEAAmE;YACnE,YAAK,CAAC,IAAI,EAAE;SACb,CAAC,CAAA;QAEF,gFAAgF;QAChF,iFAAiF;QACjF,mFAAmF;QACnF,uFAAuF;QACvF,uFAAuF;QACvF,mEAAmE;QACnE,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,mBAAY,CAAC,CAAA;QACzE,MAAM,iCAAiC,GAAG,IAAA,qBAAc,EACtD,YAAY;aACT,UAAU,CAAuD,2BAAoB,CAAC,WAAW,CAAC;aAClG,IAAI,CACH,IAAA,aAAM,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,KAAK,YAAY,CAAC,oBAAoB,CAAC,EACpF,IAAA,aAAM,EACJ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,aAAa,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,UAAU,CAC5G,EACD,IAAA,YAAK,GAAE,EACP,IAAA,cAAO,EAAC;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,yDAAyD;SAChE,CAAC,EACF,IAAA,UAAG,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAC7B,CACJ,CAAA;QAED,MAAM,oBAAoB,GAAG,MAAM,YAAY,CAAC,0BAA0B,CAAC;YACzE,aAAa;YACb,KAAK;YACL,KAAK;YACL,qBAAqB,EAAE,6BAA6B;SACrD,CAAC,CAAA;QAEF,MAAM,uBAAuB,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAAA;QAChE,MAAM,mBAAmB,GAAG,MAAM,iCAAiC,CAAA;QAEnE,OAAO;YACL,oBAAoB,EAAE,uBAAuB,CAAC,UAAU;YACxD,mBAAmB;SACpB,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,2BAA2B,CACtC,YAA0B,EAC1B,OAEC;;QAED,eAAe;QACf,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC;YACtC,qEAAiC,CAAC,mBAAmB;YACrD,qEAAiC,CAAC,cAAc;SACjD,CAAC,CAAA;QAEF,MAAM,oBAAoB,GAAG,MAAM,oCAAoB,CAAC,YAAY,CAClE,OAAO,CAAC,mBAAmB,CAAC,uBAAuB,CACpD,CAAA;QAED,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,iBAAiB,CAAS,WAAW,CAAC,CAAA;QACzF,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,iBAAiB,CAAS,OAAO,CAAC,CAAA;QAClF,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,iBAAiB,CAAS,OAAO,CAAC,CAAA;QAClF,MAAM,mCAAmC,GAAG,MAAM,oBAAoB,CAAC,0BAA0B,EAAE,CAAA;QAEnG,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,EAAE;YACtD,MAAM,IAAI,iBAAU,CAClB,gGAAgG,OAAO,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAClI,CAAA;SACF;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,mBAAmB,CAAC,UAAU,EAAE;YACpG,sBAAsB,EAAE,MAAA,mCAAmC,aAAnC,mCAAmC,uBAAnC,mCAAmC,CAAG,CAAC,CAAC,0CAAE,UAAU;YAC5E,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAA;QAEF,gFAAgF;QAChF,iFAAiF;QACjF,qFAAqF;QACrF,uFAAuF;QACvF,yFAAyF;QACzF,mEAAmE;QACnE,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,mBAAY,CAAC,CAAA;QACzE,MAAM,iCAAiC,GAAG,IAAA,qBAAc,EACtD,YAAY;aACT,UAAU,CAAyD,2BAAoB,CAAC,aAAa,CAAC;aACtG,IAAI,CACH,IAAA,aAAM,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,KAAK,YAAY,CAAC,oBAAoB,CAAC,EACpF,IAAA,aAAM,EACJ,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,mBAAmB,CAAC,EAAE;YACtD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,mBAAmB,CAAC,UAAU;YACtE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,qEAAiC,CAAC,gBAAgB,CAChF,EACD,IAAA,YAAK,GAAE,EACP,IAAA,cAAO,EAAC;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,0DAA0D;SACjE,CAAC,EACF,IAAA,UAAG,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAC7B,CACJ,CAAA;QAED,MAAM,YAAY,CAAC,2BAA2B,CAAC,OAAO,CAAC,qBAAqB,EAAE;YAC5E,QAAQ,EAAE,eAAe;YACzB,aAAa,EAAE,OAAO,CAAC,mBAAmB,CAAC,EAAE;YAC7C,KAAK,EAAE,YAAY;YACnB,uBAAuB,EAAE,mCAAmC;YAC5D,YAAY,EAAE;gBACZ,gCAAgC,EAAE,IAAI,CAAC,mCAAmC,CAAC,YAAY,EAAE;oBACvF,KAAK,EAAE,YAAY;oBACnB,QAAQ,EAAE,eAAe;iBAC1B,CAAC;gBACF,2CAA2C;gBAC3C,mEAAmE;gBACnE,IAAI,EAAE,gCAAgB,CAAC,QAAQ;gBAC/B,WAAW,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAA,8BAAsB,EAAC,YAAY,CAAC,EAAE;aACnG;SACF,CAAC,CAAA;QAEF,MAAM,mBAAmB,GAAG,MAAM,iCAAiC,CAAA;QACnE,MAAM,6BAA6B,GAAG,MAAM,IAAI,CAAC,gCAAgC,CAAC,mBAAmB,CAAC,CAAA;QAEtG,uCACK,6BAA6B,KAEhC,mBAAmB,EAAE,MAAM,iCAAiC,IAC7D;IACH,CAAC;IAED,sGAAsG;IACtG,0FAA0F;IACnF,KAAK,CAAC,gCAAgC,CAC3C,mBAAuD;;QAEvD,mBAAmB,CAAC,WAAW,CAAC,qEAAiC,CAAC,gBAAgB,CAAC,CAAA;QAEnF,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,EAAE;YACrD,MAAM,IAAI,iBAAU,CAAC,sEAAsE,CAAC,CAAA;SAC7F;QAED,MAAM,qBAAqB,GAAG,MAAM,qCAAqB,CAAC,WAAW,CACnE,mBAAmB,CAAC,4BAA4B,CACjD,CAAA;QACD,MAAM,oBAAoB,GAAG,MAAM,oCAAoB,CAAC,YAAY,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;QAEjH,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO;YAC3C,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAA,MAAA,qBAAqB,CAAC,OAAO,0CAAE,OAAO,EAAE,CAAA,EAAE;YAC7D,CAAC,CAAC,SAAS,CAAA;QACb,IAAI,oBAAoB,GAAmF,SAAS,CAAA;QAEpH,MAAM,uBAAuB,GAAG,MAAM,oBAAoB,CAAC,0BAA0B,EAAE,CAAA;QACvF,IAAI,uBAAuB,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE;YACjE,MAAM,aAAa,GAAG,MAAM,IAAA,yDAA6C,EAAC,qBAAqB,EAAE;gBAC/F,MAAM,EAAE,aAAM,CAAC,IAAI;aACpB,CAAC,CAAA;YAEF,uFAAuF;YACvF,MAAM,UAAU,GACd,MAAA,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,0CAAE,SAAS,0CAAE,uBAAuB,mCAAI,qBAAqB,CAAC,OAAO,CAAC,uBAAuB,CAAA;YAC/G,IAAI,CAAC,UAAU,EAAE;gBACf,MAAM,IAAI,iBAAU,CAAC,iDAAiD,CAAC,CAAA;aACxE;YAED,oBAAoB,GAAG;gBACrB,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,UAAU;gBACjD,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,wDAA4C,CAAC;gBAC9E,UAAU;aACX,CAAA;SACF;QAED,IAAI,CAAC,OAAO,IAAI,CAAC,oBAAoB,EAAE;YACrC,MAAM,IAAI,iBAAU,CAAC,2DAA2D,CAAC,CAAA;SAClF;QAED,OAAO;YACL,OAAO;YACP,oBAAoB;SACrB,CAAA;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,+CAA+C,CAC1D,YAA0B,EAC1B,EACE,qBAAqB,EACrB,UAAU,GAIX;QAED,MAAM,6BAA6B,GAAG,MAAM,qCAAqB,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC9G,MAAM,IAAI,iBAAU,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAA;QAClH,CAAC,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,iBAAiB,CAAS,OAAO,EAAE;YAC3F,MAAM,EAAE,aAAM,CAAC,IAAI;SACpB,CAAC,CAAA;QACF,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,iBAAiB,CAAS,OAAO,EAAE;YAC3F,MAAM,EAAE,aAAM,CAAC,IAAI;SACpB,CAAC,CAAA;QAEF,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,iBAAiB,CAAC,YAAY,EAAE;YAC5G,KAAK,EAAE,aAAa;YACpB,YAAY,EAAE,aAAa;YAC3B,UAAU;SACX,CAAC,CAAA;QAEF,OAAO,mBAAmB,CAAA;IAC5B,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,YAA0B;QACrD,OAAO,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC9D,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,YAA0B,EAAE,UAAkB;QACjF,OAAO,IAAI,CAAC,2BAA2B,CAAC,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IACnF,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,YAA0B,EAAE,QAAiC;QACvF,OAAO,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IACxE,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,YAA0B,EAAE,OAA4C;;QAClG,MAAM,iBAAiB,GAAG,IAAI,oCAAuB,CAAC;YACpD,UAAU,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,mCAAI,YAAK,CAAC,IAAI,EAAE;SAChD,CAAC,CAAA;QAEF,MAAM,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAA;QAC5E,MAAM,IAAA,4CAAmC,EAAC,YAAY,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAA;QACrF,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IAEM,KAAK,CAAC,+BAA+B,CAC1C,YAA0B,EAC1B,KAAgD;QAEhD,OAAO,IAAI,CAAC,sCAAsC,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IACrF,CAAC;IAEM,KAAK,CAAC,0BAA0B,CAAC,YAA0B,EAAE,qBAA6B;QAC/F,OAAO,IAAI,CAAC,sCAAsC,CAAC,OAAO,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAA;IACjG,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,YAA0B,EAC1B,UAAkB,EAClB,EACE,sBAAsB,EACtB,aAAa,EACb,QAAQ,GAKT;QAED,MAAM,wBAAwB,GAAG,IAAA,mBAAY,EAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACjE,UAAU;YACV,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,YAAY;SAC/C,CAAC,CAAA;QAEF,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,6BAAsB,CAAC,CAAA;QAE7F,MAAM,aAAa,GAAG,IAAA,0CAAkC,EAAC,YAAY,CAAa,CAAA;QAClF,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,mBAAmB,CAAA;QAEtE,2FAA2F;QAC3F,MAAM,OAAO,GAAG,kBAAE,CAAC,OAAO,EAAE,CAAA;QAE5B,IAAI,SAAS,GAAG,QAAQ,CAAA;QACxB,IAAI,aAAa,EAAE;YACjB,MAAM,iBAAiB,GAAG,MAAM,IAAA,iDAAyC,EAAC,YAAY,EAAE,aAAa,CAAC,CAAA;YACtG,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAA;YAExC,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAA;SAClC;QAED,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,iBAAU,CAAC,wDAAwD,CAAC,CAAA;SAC/E;QAED,8FAA8F;QAC9F,MAAM,mBAAmB,GAAG,YAAY,CAAC,iBAAiB;aACvD,OAAO,CAAC,cAAO,CAAC;aAChB,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAA;QAEvD,uFAAuF;QACvF,mFAAmF;QACnF,MAAM,oBAAoB,GAAG,YAAY,CAAC,iBAAiB;aACxD,OAAO,CAAC,qEAAiC,CAAC;aAC1C,0BAA0B,CAAC,YAAY,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAA;QAE5E,OAAO;aACJ,eAAe,CAAC,wBAAwB,CAAC;aACzC,UAAU,CAAC,2BAAW,CAAC,cAAc,CAAC;aACtC,qBAAqB,CAAC,CAAC,gCAAgB,CAAC,UAAU,EAAE,gCAAgB,CAAC,qBAAqB,CAAC,CAAC;YAC7F,0DAA0D;aACzD,kBAAkB,CAAC;YAClB,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,sBAAM,CAAC,KAAK;YACpB,gCAAgC,EAAE,aAA8B;YAChE,sBAAsB,EAAE,CAAC,4BAAY,CAAC,QAAQ,EAAE,4BAAY,CAAC,QAAQ,CAAC;YACtE,8BAA8B,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,kBAAkB,EAAE;gBAClB,MAAM,EAAE;oBACN,GAAG,EAAE,aAAa;iBACnB;gBACD,WAAW,EAAE;oBACX,GAAG,EAAE,aAAa;iBACnB;gBACD,MAAM,EAAE;oBACN,GAAG,EAAE,aAAa;iBACnB;gBACD,MAAM,EAAE;oBACN,UAAU,EAAE,mBAAmB;iBAChC;gBACD,MAAM,EAAE;oBACN,UAAU,EAAE,mBAAmB;iBAChC;gBACD,WAAW,EAAE;oBACX,iBAAiB,EAAE,aAAa;oBAChC,iBAAiB,EAAE,aAAa;iBACjC;aACF;SACF,CAAC;aACD,kBAAkB,CAAC,IAAA,8BAAsB,EAAC,YAAY,CAAC,CAAC;aACxD,gBAAgB,CAAC,4BAAY,CAAC,IAAI,CAAC;aACnC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,4BAAY,CAAC,QAAQ,EAAE,4BAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,4BAAY,CAAC,QAAQ,CAAC;aACjH,SAAS,CAAC,QAAQ,CAAC;aACnB,UAAU,CAAC,aAAM,CAAC,IAAI,CAAC;aACvB,qBAAqB,CAAC,iCAAiB,CAAC,KAAK,CAAC;YAC/C,iDAAiD;YACjD,wCAAwC;aACvC,0BAA0B,CAAC,sCAAsB,CAAC,KAAK,CAAC;aACxD,kBAAkB,CAAC,IAAI,yEAAmC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;aACrF,gBAAgB,CAAC,oBAAoB,CAAC,CAAA;QAEzC,IAAI,sBAAsB,EAAE;YAC1B,OAAO,CAAC,0BAA0B,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,CAAC,8BAAc,CAAC,cAAc,CAAC,CAAC,CAAA;SAC5G;QAED,KAAK,MAAM,kBAAkB,IAAI,mBAAmB,EAAE;YACpD,OAAO,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAA;SACzC;QAED,OAAO,OAAO,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;IAEO,mCAAmC,CACzC,YAA0B,EAC1B,OAA4C;QAE5C,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,EAAE;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,sBAAe,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAA;YACvF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,sBAAsB,CAAC,CAAA;YAEpE,IAAI,CAAC,mBAAmB;gBAAE,MAAM,IAAI,iBAAU,CAAC,kDAAkD,CAAC,CAAA;YAElG,IAAI,OAAgB,CAAA;YAEpB,+EAA+E;YAC/E,4DAA4D;YAC5D,IAAI,OAAO,mBAAmB,KAAK,QAAQ,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;gBAChF,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;gBAErE,MAAM,kBAAkB,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC;oBACjD,cAAc,EAAE,mBAAmB;oBACnC,UAAU,EAAE;wBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;qBACrB;iBACF,CAAC,CAAA;gBAEF,OAAO,GAAG,kBAAkB,CAAC,YAAY,CAAC,OAAO,CAAA;aAClD;iBAAM,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE;gBAClD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,YAAY,EAAE;oBAC1F,YAAY,EAAE,mBAAmB;oBACjC,SAAS,EAAE,OAAO,CAAC,KAAK;oBACxB,MAAM,EAAE,OAAO,CAAC,QAAQ;iBACzB,CAAC,CAAA;gBAEF,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAA;aACrC;iBAAM;gBACL,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,YAAY,EAAE;oBAC1F,YAAY,EAAE,sBAAe,CAAC,QAAQ,CAAC,mBAAmB,EAAE,sCAA+B,CAAC;oBAC5F,SAAS,EAAE,OAAO,CAAC,KAAK;oBACxB,MAAM,EAAE,OAAO,CAAC,QAAQ;iBACzB,CAAC,CAAA;gBAEF,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAA;aACrC;YAED,gFAAgF;YAChF,6EAA6E;YAC7E,+EAA+E;YAC/E,mBAAmB;YACnB,IAAI,CAAC,OAAO,EAAE;gBACZ,MAAM,IAAI,iBAAU,CAAC,mCAAmC,CAAC,CAAA;aAC1D;YAED,OAAO;gBACL,QAAQ,EAAE,OAAO;aAClB,CAAA;QACH,CAAC,CAAA;IACH,CAAC;CACF,CAAA;AAtbY,4BAA4B;IADxC,IAAA,iBAAU,GAAE;IAGR,WAAA,IAAA,aAAM,EAAC,uBAAgB,CAAC,MAAM,CAAC,CAAA;6CACF,2BAAoB;QACb,wCAA2B;QAChD,6DAA6B;QACG,mDAAsC;GAN7E,4BAA4B,CAsbxC;AAtbY,oEAA4B"}

package/build/openid4vc-verifier/OpenId4VcSiopVerifierServiceOptions.d.ts

@@ -1,4 +1,5 @@
-import type { OpenId4VcJwtIssuer, OpenId4VcSiopAuthorizationRequestPayload, OpenId4VcSiopAuthorizationResponsePayload, OpenId4VcSiopIdTokenPayload } from '../shared';
+import type { OpenId4VcVerificationSessionRecord } from './repository';
+import type { OpenId4VcJwtIssuer, OpenId4VcSiopAuthorizationResponsePayload, OpenId4VcSiopIdTokenPayload } from '../shared';
 import type { DifPresentationExchangeDefinition, DifPresentationExchangeSubmission, DifPresentationExchangeDefinitionV2, VerifiablePresentation } from '@credo-ts/core';
 export interface OpenId4VcSiopCreateAuthorizationRequestOptions {
     /**
@@ -20,8 +21,8 @@ export interface OpenId4VcSiopVerifyAuthorizationResponseOptions {
     authorizationResponse: OpenId4VcSiopAuthorizationResponsePayload;
 }
 export interface OpenId4VcSiopCreateAuthorizationRequestReturn {
-    authorizationRequestUri: string;
-    authorizationRequestPayload: OpenId4VcSiopAuthorizationRequestPayload;
+    authorizationRequest: string;
+    verificationSession: OpenId4VcVerificationSessionRecord;
 }
 /**
  * Either `idToken` and/or `presentationExchange` will be present, but not none.
@@ -38,7 +39,7 @@ export interface OpenId4VcSiopVerifiedAuthorizationResponse {
 }
 export interface OpenId4VcSiopCreateVerifierOptions {
     /**
-     * Id of the verifier, not the id of the verified record. Will be exposed publicly
+     * Id of the verifier, not the id of the verifier record. Will be exposed publicly
      */
     verifierId?: string;
 }

package/build/openid4vc-verifier/OpenId4VcVerificationSessionState.d.ts

@@ -0,0 +1,6 @@
+export declare enum OpenId4VcVerificationSessionState {
+    RequestCreated = "RequestCreated",
+    RequestUriRetrieved = "RequestUriRetrieved",
+    ResponseVerified = "ResponseVerified",
+    Error = "Error"
+}

package/build/openid4vc-verifier/OpenId4VcVerificationSessionState.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcVerificationSessionState = void 0;
+var OpenId4VcVerificationSessionState;
+(function (OpenId4VcVerificationSessionState) {
+    OpenId4VcVerificationSessionState["RequestCreated"] = "RequestCreated";
+    OpenId4VcVerificationSessionState["RequestUriRetrieved"] = "RequestUriRetrieved";
+    OpenId4VcVerificationSessionState["ResponseVerified"] = "ResponseVerified";
+    OpenId4VcVerificationSessionState["Error"] = "Error";
+})(OpenId4VcVerificationSessionState = exports.OpenId4VcVerificationSessionState || (exports.OpenId4VcVerificationSessionState = {}));
+//# sourceMappingURL=OpenId4VcVerificationSessionState.js.map

package/build/openid4vc-verifier/OpenId4VcVerificationSessionState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcVerificationSessionState.js","sourceRoot":"","sources":["../../src/openid4vc-verifier/OpenId4VcVerificationSessionState.ts"],"names":[],"mappings":";;;AAAA,IAAY,iCAKX;AALD,WAAY,iCAAiC;IAC3C,sEAAiC,CAAA;IACjC,gFAA2C,CAAA;IAC3C,0EAAqC,CAAA;IACrC,oDAAe,CAAA;AACjB,CAAC,EALW,iCAAiC,GAAjC,yCAAiC,KAAjC,yCAAiC,QAK5C"}