@credo-ts/openid4vc 0.5.3 → 0.5.4

package/build/openid4vc-issuer/repository/OpenId4VcIssuerRepository.js

@@ -1,35 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OpenId4VcIssuerRepository = void 0;
-const core_1 = require("@credo-ts/core");
-const OpenId4VcIssuerRecord_1 = require("./OpenId4VcIssuerRecord");
-let OpenId4VcIssuerRepository = class OpenId4VcIssuerRepository extends core_1.Repository {
-    constructor(storageService, eventEmitter) {
-        super(OpenId4VcIssuerRecord_1.OpenId4VcIssuerRecord, storageService, eventEmitter);
-    }
-    findByIssuerId(agentContext, issuerId) {
-        return this.findSingleByQuery(agentContext, { issuerId });
-    }
-    getByIssuerId(agentContext, issuerId) {
-        return this.getSingleByQuery(agentContext, { issuerId });
-    }
-};
-OpenId4VcIssuerRepository = __decorate([
-    (0, core_1.injectable)(),
-    __param(0, (0, core_1.inject)(core_1.InjectionSymbols.StorageService)),
-    __metadata("design:paramtypes", [Object, core_1.EventEmitter])
-], OpenId4VcIssuerRepository);
-exports.OpenId4VcIssuerRepository = OpenId4VcIssuerRepository;
-//# sourceMappingURL=OpenId4VcIssuerRepository.js.map

package/build/openid4vc-issuer/repository/OpenId4VcIssuerRepository.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"OpenId4VcIssuerRepository.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/repository/OpenId4VcIssuerRepository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAEA,yCAA+G;AAE/G,mEAA+D;AAGxD,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,iBAAiC;IAC9E,YAC2C,cAAqD,EAC9F,YAA0B;QAE1B,KAAK,CAAC,6CAAqB,EAAE,cAAc,EAAE,YAAY,CAAC,CAAA;IAC5D,CAAC;IAEM,cAAc,CAAC,YAA0B,EAAE,QAAgB;QAChE,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3D,CAAC;IAEM,aAAa,CAAC,YAA0B,EAAE,QAAgB;QAC/D,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC1D,CAAC;CACF,CAAA;AAfY,yBAAyB;IADrC,IAAA,iBAAU,GAAE;IAGR,WAAA,IAAA,aAAM,EAAC,uBAAgB,CAAC,cAAc,CAAC,CAAA;6CAC1B,mBAAY;GAHjB,yBAAyB,CAerC;AAfY,8DAAyB"}

package/build/openid4vc-issuer/repository/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/repository/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAuC;AACvC,8DAA2C;AAC3C,mEAAgD;AAChD,uEAAoD"}

package/build/openid4vc-issuer/router/accessTokenEndpoint.js

@@ -1,114 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyTokenRequest = exports.handleTokenRequest = exports.configureAccessTokenEndpoint = void 0;
-const core_1 = require("@credo-ts/core");
-const oid4vci_common_1 = require("@sphereon/oid4vci-common");
-const oid4vci_issuer_1 = require("@sphereon/oid4vci-issuer");
-const router_1 = require("../../shared/router");
-const OpenId4VcIssuerService_1 = require("../OpenId4VcIssuerService");
-const OpenId4VcCNonceStateManager_1 = require("../repository/OpenId4VcCNonceStateManager");
-const OpenId4VcCredentialOfferSessionStateManager_1 = require("../repository/OpenId4VcCredentialOfferSessionStateManager");
-function configureAccessTokenEndpoint(router, config) {
-    router.post(config.endpointPath, verifyTokenRequest({ preAuthorizedCodeExpirationInSeconds: config.preAuthorizedCodeExpirationInSeconds }), handleTokenRequest(config));
-}
-exports.configureAccessTokenEndpoint = configureAccessTokenEndpoint;
-function getJwtSignerCallback(agentContext, signerPublicKey, config) {
-    return async (jwt, _kid) => {
-        var _a;
-        if (_kid) {
-            throw new core_1.CredoError('Kid should not be supplied externally.');
-        }
-        if (jwt.header.kid || jwt.header.jwk) {
-            throw new core_1.CredoError('kid or jwk should not be present in access token header before signing');
-        }
-        const jwsService = agentContext.dependencyManager.resolve(core_1.JwsService);
-        const alg = (_a = (0, core_1.getJwkClassFromKeyType)(signerPublicKey.keyType)) === null || _a === void 0 ? void 0 : _a.supportedSignatureAlgorithms[0];
-        if (!alg) {
-            throw new core_1.CredoError(`No supported signature algorithms for key type: ${signerPublicKey.keyType}`);
-        }
-        // FIXME: the iat and exp implementation in OID4VCI is incorrect so we override the values here
-        // https://github.com/Sphereon-Opensource/OID4VCI/pull/99
-        // https://github.com/Sphereon-Opensource/OID4VCI/pull/101
-        const iat = Math.floor(new Date().getTime() / 1000);
-        jwt.payload.iat = iat;
-        jwt.payload.exp = iat + config.tokenExpiresInSeconds;
-        const jwk = (0, core_1.getJwkFromKey)(signerPublicKey);
-        const signedJwt = await jwsService.createJwsCompact(agentContext, {
-            protectedHeaderOptions: Object.assign(Object.assign({}, jwt.header), { jwk, alg }),
-            payload: core_1.JwtPayload.fromJson(jwt.payload),
-            key: signerPublicKey,
-        });
-        return signedJwt;
-    };
-}
-function handleTokenRequest(config) {
-    const { tokenExpiresInSeconds, cNonceExpiresInSeconds } = config;
-    return async (request, response, next) => {
-        response.set({ 'Cache-Control': 'no-store', Pragma: 'no-cache' });
-        const requestContext = (0, router_1.getRequestContext)(request);
-        const { agentContext, issuer } = requestContext;
-        const body = request.body;
-        if (body.grant_type !== oid4vci_common_1.GrantTypes.PRE_AUTHORIZED_CODE) {
-            return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 400, oid4vci_common_1.TokenErrorResponse.invalid_request, oid4vci_common_1.PRE_AUTHORIZED_CODE_REQUIRED_ERROR);
-        }
-        const openId4VcIssuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
-        const issuerMetadata = openId4VcIssuerService.getIssuerMetadata(agentContext, issuer);
-        const accessTokenSigningKey = core_1.Key.fromFingerprint(issuer.accessTokenPublicKeyFingerprint);
-        try {
-            const accessTokenResponse = await (0, oid4vci_issuer_1.createAccessTokenResponse)(request.body, {
-                credentialOfferSessions: new OpenId4VcCredentialOfferSessionStateManager_1.OpenId4VcCredentialOfferSessionStateManager(agentContext, issuer.issuerId),
-                tokenExpiresIn: tokenExpiresInSeconds,
-                accessTokenIssuer: issuerMetadata.issuerUrl,
-                cNonce: await agentContext.wallet.generateNonce(),
-                cNonceExpiresIn: cNonceExpiresInSeconds,
-                cNonces: new OpenId4VcCNonceStateManager_1.OpenId4VcCNonceStateManager(agentContext, issuer.issuerId),
-                accessTokenSignerCallback: getJwtSignerCallback(agentContext, accessTokenSigningKey, config),
-            });
-            response.status(200).json(accessTokenResponse);
-        }
-        catch (error) {
-            (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 400, oid4vci_common_1.TokenErrorResponse.invalid_request, error);
-        }
-        // NOTE: if we don't call next, the agentContext session handler will NOT be called
-        next();
-    };
-}
-exports.handleTokenRequest = handleTokenRequest;
-function verifyTokenRequest(options) {
-    return async (request, response, next) => {
-        const { agentContext, issuer } = (0, router_1.getRequestContext)(request);
-        try {
-            const credentialOfferSessions = new OpenId4VcCredentialOfferSessionStateManager_1.OpenId4VcCredentialOfferSessionStateManager(agentContext, issuer.issuerId);
-            const credentialOfferSession = await credentialOfferSessions.getAsserted(request.body[oid4vci_common_1.PRE_AUTH_CODE_LITERAL]);
-            if (![oid4vci_common_1.IssueStatus.OFFER_CREATED, oid4vci_common_1.IssueStatus.OFFER_URI_RETRIEVED].includes(credentialOfferSession.status)) {
-                throw new oid4vci_common_1.TokenError(400, oid4vci_common_1.TokenErrorResponse.invalid_request, 'Access token has already been retrieved');
-            }
-            const { preAuthSession } = await (0, oid4vci_issuer_1.assertValidAccessTokenRequest)(request.body, {
-                // It should actually be in seconds. but the oid4vci library has some bugs related
-                // to seconds vs milliseconds. We pass it as ms for now, but once the fix is released
-                // we should pass it as seconds. We have an extra check below, so that we won't have
-                // an security issue once the fix is released.
-                // FIXME: https://github.com/Sphereon-Opensource/OID4VCI/pull/104
-                expirationDuration: options.preAuthorizedCodeExpirationInSeconds * 1000,
-                credentialOfferSessions,
-            });
-            // TODO: remove once above PR is merged and released
-            const expiresAt = preAuthSession.createdAt + options.preAuthorizedCodeExpirationInSeconds * 1000;
-            if (Date.now() > expiresAt) {
-                throw new oid4vci_common_1.TokenError(400, oid4vci_common_1.TokenErrorResponse.invalid_grant, 'Pre-authorized code has expired');
-            }
-        }
-        catch (error) {
-            if (error instanceof oid4vci_common_1.TokenError) {
-                (0, router_1.sendErrorResponse)(response, agentContext.config.logger, error.statusCode, error.responseError, error.getDescription());
-            }
-            else {
-                (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 400, oid4vci_common_1.TokenErrorResponse.invalid_request, error);
-            }
-        }
-        // NOTE: if we don't call next, the agentContext session handler will NOT be called
-        next();
-    };
-}
-exports.verifyTokenRequest = verifyTokenRequest;
-//# sourceMappingURL=accessTokenEndpoint.js.map

package/build/openid4vc-issuer/router/accessTokenEndpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"accessTokenEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/accessTokenEndpoint.ts"],"names":[],"mappings":";;;AAKA,yCAA+G;AAC/G,6DAOiC;AACjC,6DAAmG;AAEnG,gDAA0E;AAC1E,sEAAkE;AAClE,2FAAuF;AACvF,2HAAuH;AAiCvH,SAAgB,4BAA4B,CAAC,MAAc,EAAE,MAA2C;IACtG,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,YAAY,EACnB,kBAAkB,CAAC,EAAE,oCAAoC,EAAE,MAAM,CAAC,oCAAoC,EAAE,CAAC,EACzG,kBAAkB,CAAC,MAAM,CAAC,CAC3B,CAAA;AACH,CAAC;AAND,oEAMC;AAED,SAAS,oBAAoB,CAC3B,YAA0B,EAC1B,eAAoB,EACpB,MAA2C;IAE3C,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;;QACzB,IAAI,IAAI,EAAE;YACR,MAAM,IAAI,iBAAU,CAAC,wCAAwC,CAAC,CAAA;SAC/D;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACpC,MAAM,IAAI,iBAAU,CAAC,wEAAwE,CAAC,CAAA;SAC/F;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;QAErE,MAAM,GAAG,GAAG,MAAA,IAAA,6BAAsB,EAAC,eAAe,CAAC,OAAO,CAAC,0CAAE,4BAA4B,CAAC,CAAC,CAAC,CAAA;QAC5F,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,IAAI,iBAAU,CAAC,mDAAmD,eAAe,CAAC,OAAO,EAAE,CAAC,CAAA;SACnG;QAED,+FAA+F;QAC/F,yDAAyD;QACzD,0DAA0D;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;QACnD,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,CAAA;QACrB,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,qBAAqB,CAAA;QAEpD,MAAM,GAAG,GAAG,IAAA,oBAAa,EAAC,eAAe,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,YAAY,EAAE;YAChE,sBAAsB,kCAAO,GAAG,CAAC,MAAM,KAAE,GAAG,EAAE,GAAG,GAAE;YACnD,OAAO,EAAE,iBAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YACzC,GAAG,EAAE,eAAe;SACrB,CAAC,CAAA;QAEF,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAA2C;IAC5E,MAAM,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,GAAG,MAAM,CAAA;IAEhE,OAAO,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAkB,EAAE,EAAE;QACzF,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QAEjE,MAAM,cAAc,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QACjD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,cAAc,CAAA;QAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAA0B,CAAA;QAC/C,IAAI,IAAI,CAAC,UAAU,KAAK,2BAAU,CAAC,mBAAmB,EAAE;YACtD,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,mCAAkB,CAAC,eAAe,EAClC,mDAAkC,CACnC,CAAA;SACF;QAED,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;QAC7F,MAAM,cAAc,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QACrF,MAAM,qBAAqB,GAAG,UAAG,CAAC,eAAe,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAA;QAEzF,IAAI;YACF,MAAM,mBAAmB,GAAG,MAAM,IAAA,0CAAyB,EAAC,OAAO,CAAC,IAAI,EAAE;gBACxE,uBAAuB,EAAE,IAAI,yFAA2C,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACvG,cAAc,EAAE,qBAAqB;gBACrC,iBAAiB,EAAE,cAAc,CAAC,SAAS;gBAC3C,MAAM,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE;gBACjD,eAAe,EAAE,sBAAsB;gBACvC,OAAO,EAAE,IAAI,yDAA2B,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACvE,yBAAyB,EAAE,oBAAoB,CAAC,YAAY,EAAE,qBAAqB,EAAE,MAAM,CAAC;aAC7F,CAAC,CAAA;YACF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;SAC/C;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,mCAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;SACxG;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AA1CD,gDA0CC;AAED,SAAgB,kBAAkB,CAAC,OAAyD;IAC1F,OAAO,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAkB,EAAE,EAAE;QACzF,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE3D,IAAI;YACF,MAAM,uBAAuB,GAAG,IAAI,yFAA2C,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC9G,MAAM,sBAAsB,GAAG,MAAM,uBAAuB,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,sCAAqB,CAAC,CAAC,CAAA;YAC7G,IAAI,CAAC,CAAC,4BAAW,CAAC,aAAa,EAAE,4BAAW,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE;gBACzG,MAAM,IAAI,2BAAU,CAAC,GAAG,EAAE,mCAAkB,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAA;aACzG;YACD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,IAAA,8CAA6B,EAAC,OAAO,CAAC,IAAI,EAAE;gBAC3E,kFAAkF;gBAClF,qFAAqF;gBACrF,oFAAoF;gBACpF,8CAA8C;gBAC9C,iEAAiE;gBACjE,kBAAkB,EAAE,OAAO,CAAC,oCAAoC,GAAG,IAAI;gBACvE,uBAAuB;aACxB,CAAC,CAAA;YAEF,oDAAoD;YACpD,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,GAAG,OAAO,CAAC,oCAAoC,GAAG,IAAI,CAAA;YAChG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;gBAC1B,MAAM,IAAI,2BAAU,CAAC,GAAG,EAAE,mCAAkB,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAA;aAC/F;SACF;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,2BAAU,EAAE;gBAC/B,IAAA,0BAAiB,EACf,QAAQ,EACR,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,cAAc,EAAE,CACvB,CAAA;aACF;iBAAM;gBACL,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,mCAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;aACxG;SACF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AA1CD,gDA0CC"}

package/build/openid4vc-issuer/router/credentialEndpoint.js

@@ -1,50 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.configureCredentialEndpoint = void 0;
-const router_1 = require("../../shared/router");
-const OpenId4VcIssuerService_1 = require("../OpenId4VcIssuerService");
-const credentialRequest_1 = require("../util/credentialRequest");
-const verifyAccessToken_1 = require("./verifyAccessToken");
-function configureCredentialEndpoint(router, config) {
-    router.post(config.endpointPath, async (request, response, next) => {
-        const { agentContext, issuer } = (0, router_1.getRequestContext)(request);
-        const openId4VcIssuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
-        let preAuthorizedCode;
-        // Verify the access token (should at some point be moved to a middleware function or something)
-        try {
-            preAuthorizedCode = (await (0, verifyAccessToken_1.verifyAccessToken)(agentContext, issuer, request.headers.authorization))
-                .preAuthorizedCode;
-        }
-        catch (error) {
-            return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 401, 'unauthorized', error);
-        }
-        try {
-            const credentialRequest = request.body;
-            const issuanceSession = await openId4VcIssuerService.findIssuanceSessionForCredentialRequest(agentContext, {
-                issuerId: issuer.issuerId,
-                credentialRequest,
-            });
-            if ((issuanceSession === null || issuanceSession === void 0 ? void 0 : issuanceSession.preAuthorizedCode) !== preAuthorizedCode) {
-                agentContext.config.logger.warn(`Credential request used access token with for credential offer with different pre-authorized code than was used for the issuance session ${issuanceSession === null || issuanceSession === void 0 ? void 0 : issuanceSession.id}`);
-                return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 401, 'unauthorized', 'Access token is not valid for this credential request');
-            }
-            if (!issuanceSession) {
-                const cNonce = (0, credentialRequest_1.getCNonceFromCredentialRequest)(credentialRequest);
-                agentContext.config.logger.warn(`No issuance session found for incoming credential request with cNonce ${cNonce} and issuer ${issuer.issuerId}`);
-                return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 404, 'invalid_request', null);
-            }
-            const { credentialResponse } = await openId4VcIssuerService.createCredentialResponse(agentContext, {
-                issuanceSession,
-                credentialRequest,
-            });
-            response.json(credentialResponse);
-        }
-        catch (error) {
-            (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 500, 'invalid_request', error);
-        }
-        // NOTE: if we don't call next, the agentContext session handler will NOT be called
-        next();
-    });
-}
-exports.configureCredentialEndpoint = configureCredentialEndpoint;
-//# sourceMappingURL=credentialEndpoint.js.map

package/build/openid4vc-issuer/router/credentialEndpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentialEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/credentialEndpoint.ts"],"names":[],"mappings":";;;AAKA,gDAA0E;AAC1E,sEAAkE;AAClE,iEAA0E;AAE1E,2DAAuD;AAiBvD,SAAgB,2BAA2B,CAAC,MAAc,EAAE,MAA0C;IACpG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACrG,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAC3D,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;QAE7F,IAAI,iBAAyB,CAAA;QAE7B,gGAAgG;QAChG,IAAI;YACF,iBAAiB,GAAG,CAAC,MAAM,IAAA,qCAAiB,EAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;iBAC/F,iBAAiB,CAAA;SACrB;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAA;SAC3F;QAED,IAAI;YACF,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAmC,CAAA;YAErE,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,uCAAuC,CAAC,YAAY,EAAE;gBACzG,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,iBAAiB;aAClB,CAAC,CAAA;YAEF,IAAI,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,iBAAiB,MAAK,iBAAiB,EAAE;gBAC5D,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC7B,4IAA4I,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,EAAE,EAAE,CAClK,CAAA;gBACD,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,cAAc,EACd,uDAAuD,CACxD,CAAA;aACF;YAED,IAAI,CAAC,eAAe,EAAE;gBACpB,MAAM,MAAM,GAAG,IAAA,kDAA8B,EAAC,iBAAiB,CAAC,CAAA;gBAChE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC7B,yEAAyE,MAAM,eAAe,MAAM,CAAC,QAAQ,EAAE,CAChH,CAAA;gBACD,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAA;aAC7F;YAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,sBAAsB,CAAC,wBAAwB,CAAC,YAAY,EAAE;gBACjG,eAAe;gBACf,iBAAiB;aAClB,CAAC,CAAA;YAEF,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;SAClC;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;SACvF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;AACJ,CAAC;AAzDD,kEAyDC"}

package/build/openid4vc-issuer/router/credentialOfferEndpoint.js

@@ -1,61 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.configureCredentialOfferEndpoint = void 0;
-const core_1 = require("@credo-ts/core");
-const router_1 = require("../../shared/router");
-const OpenId4VcIssuanceSessionState_1 = require("../OpenId4VcIssuanceSessionState");
-const OpenId4VcIssuerEvents_1 = require("../OpenId4VcIssuerEvents");
-const OpenId4VcIssuerModuleConfig_1 = require("../OpenId4VcIssuerModuleConfig");
-const OpenId4VcIssuerService_1 = require("../OpenId4VcIssuerService");
-const repository_1 = require("../repository");
-function configureCredentialOfferEndpoint(router, config) {
-    router.get((0, core_1.joinUriParts)(config.endpointPath, [':credentialOfferId']), async (request, response, next) => {
-        const { agentContext, issuer } = (0, router_1.getRequestContext)(request);
-        if (!request.params.credentialOfferId || typeof request.params.credentialOfferId !== 'string') {
-            return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 400, 'invalid_request', 'Invalid credential offer url');
-        }
-        try {
-            const issuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
-            const issuerMetadata = issuerService.getIssuerMetadata(agentContext, issuer);
-            const openId4VcIssuanceSessionRepository = agentContext.dependencyManager.resolve(repository_1.OpenId4VcIssuanceSessionRepository);
-            const issuerConfig = agentContext.dependencyManager.resolve(OpenId4VcIssuerModuleConfig_1.OpenId4VcIssuerModuleConfig);
-            const fullCredentialOfferUri = (0, core_1.joinUriParts)(issuerMetadata.issuerUrl, [
-                issuerConfig.credentialOfferEndpoint.endpointPath,
-                request.params.credentialOfferId,
-            ]);
-            const openId4VcIssuanceSession = await openId4VcIssuanceSessionRepository.findSingleByQuery(agentContext, {
-                issuerId: issuer.issuerId,
-                credentialOfferUri: fullCredentialOfferUri,
-            });
-            if (!openId4VcIssuanceSession || !openId4VcIssuanceSession.credentialOfferPayload) {
-                return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 404, 'not_found', 'Credential offer not found');
-            }
-            if (![OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferCreated, OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferUriRetrieved].includes(openId4VcIssuanceSession.state)) {
-                return (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 400, 'invalid_request', 'Invalid state for credential offer');
-            }
-            // It's okay to retrieve the offer multiple times. So we only update the state if it's not already retrieved
-            if (openId4VcIssuanceSession.state !== OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferUriRetrieved) {
-                const previousState = openId4VcIssuanceSession.state;
-                openId4VcIssuanceSession.state = OpenId4VcIssuanceSessionState_1.OpenId4VcIssuanceSessionState.OfferUriRetrieved;
-                await openId4VcIssuanceSessionRepository.update(agentContext, openId4VcIssuanceSession);
-                agentContext.dependencyManager
-                    .resolve(core_1.EventEmitter)
-                    .emit(agentContext, {
-                    type: OpenId4VcIssuerEvents_1.OpenId4VcIssuerEvents.IssuanceSessionStateChanged,
-                    payload: {
-                        issuanceSession: openId4VcIssuanceSession.clone(),
-                        previousState,
-                    },
-                });
-            }
-            response.json(openId4VcIssuanceSession.credentialOfferPayload);
-        }
-        catch (error) {
-            (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 500, 'invalid_request', error);
-        }
-        // NOTE: if we don't call next, the agentContext session handler will NOT be called
-        next();
-    });
-}
-exports.configureCredentialOfferEndpoint = configureCredentialOfferEndpoint;
-//# sourceMappingURL=credentialOfferEndpoint.js.map

package/build/openid4vc-issuer/router/credentialOfferEndpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentialOfferEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/credentialOfferEndpoint.ts"],"names":[],"mappings":";;;AAIA,yCAA2D;AAE3D,gDAA0E;AAC1E,oFAAgF;AAChF,oEAAgE;AAChE,gFAA4E;AAC5E,sEAAkE;AAClE,8CAAkE;AAYlE,SAAgB,gCAAgC,CAAC,MAAc,EAAE,MAA+C;IAC9G,MAAM,CAAC,GAAG,CACR,IAAA,mBAAY,EAAC,MAAM,CAAC,YAAY,EAAE,CAAC,oBAAoB,CAAC,CAAC,EACzD,KAAK,EAAE,OAAiC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACpE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE3D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,KAAK,QAAQ,EAAE;YAC7F,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,iBAAiB,EACjB,8BAA8B,CAC/B,CAAA;SACF;QAED,IAAI;YACF,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;YACpF,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;YAC5E,MAAM,kCAAkC,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAC/E,+CAAkC,CACnC,CAAA;YACD,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yDAA2B,CAAC,CAAA;YAExF,MAAM,sBAAsB,GAAG,IAAA,mBAAY,EAAC,cAAc,CAAC,SAAS,EAAE;gBACpE,YAAY,CAAC,uBAAuB,CAAC,YAAY;gBACjD,OAAO,CAAC,MAAM,CAAC,iBAAiB;aACjC,CAAC,CAAA;YAEF,MAAM,wBAAwB,GAAG,MAAM,kCAAkC,CAAC,iBAAiB,CAAC,YAAY,EAAE;gBACxG,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,kBAAkB,EAAE,sBAAsB;aAC3C,CAAC,CAAA;YAEF,IAAI,CAAC,wBAAwB,IAAI,CAAC,wBAAwB,CAAC,sBAAsB,EAAE;gBACjF,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,CAAC,CAAA;aAC/G;YAED,IACE,CAAC,CAAC,6DAA6B,CAAC,YAAY,EAAE,6DAA6B,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CACrG,wBAAwB,CAAC,KAAK,CAC/B,EACD;gBACA,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,iBAAiB,EACjB,oCAAoC,CACrC,CAAA;aACF;YAED,4GAA4G;YAC5G,IAAI,wBAAwB,CAAC,KAAK,KAAK,6DAA6B,CAAC,iBAAiB,EAAE;gBACtF,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAA;gBAEpD,wBAAwB,CAAC,KAAK,GAAG,6DAA6B,CAAC,iBAAiB,CAAA;gBAChF,MAAM,kCAAkC,CAAC,MAAM,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAA;gBAEvF,YAAY,CAAC,iBAAiB;qBAC3B,OAAO,CAAC,mBAAY,CAAC;qBACrB,IAAI,CAA4C,YAAY,EAAE;oBAC7D,IAAI,EAAE,6CAAqB,CAAC,2BAA2B;oBACvD,OAAO,EAAE;wBACP,eAAe,EAAE,wBAAwB,CAAC,KAAK,EAAE;wBACjD,aAAa;qBACd;iBACF,CAAC,CAAA;aACL;YAED,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,CAAA;SAC/D;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;SACvF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CACF,CAAA;AACH,CAAC;AA/ED,4EA+EC"}

package/build/openid4vc-issuer/router/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/index.ts"],"names":[],"mappings":";;;AAAA,6DAAyG;AAAhG,mIAAA,4BAA4B,OAAA;AACrC,2DAAsG;AAA7F,iIAAA,2BAA2B,OAAA;AACpC,uDAAoE;AAA3D,mIAAA,+BAA+B,OAAA;AACxC,qEAAqH;AAA5G,2IAAA,gCAAgC,OAAA"}

package/build/openid4vc-issuer/router/metadataEndpoint.js

@@ -1,30 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.configureIssuerMetadataEndpoint = void 0;
-const router_1 = require("../../shared/router");
-const OpenId4VcIssuerService_1 = require("../OpenId4VcIssuerService");
-function configureIssuerMetadataEndpoint(router) {
-    router.get('/.well-known/openid-credential-issuer', (_request, response, next) => {
-        const { agentContext, issuer } = (0, router_1.getRequestContext)(_request);
-        try {
-            const openId4VcIssuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
-            const issuerMetadata = openId4VcIssuerService.getIssuerMetadata(agentContext, issuer);
-            const transformedMetadata = {
-                credential_issuer: issuerMetadata.issuerUrl,
-                token_endpoint: issuerMetadata.tokenEndpoint,
-                credential_endpoint: issuerMetadata.credentialEndpoint,
-                authorization_server: issuerMetadata.authorizationServer,
-                credentials_supported: issuerMetadata.credentialsSupported,
-                display: issuerMetadata.issuerDisplay,
-            };
-            response.status(200).json(transformedMetadata);
-        }
-        catch (e) {
-            (0, router_1.sendErrorResponse)(response, agentContext.config.logger, 500, 'invalid_request', e);
-        }
-        // NOTE: if we don't call next, the agentContext session handler will NOT be called
-        next();
-    });
-}
-exports.configureIssuerMetadataEndpoint = configureIssuerMetadataEndpoint;
-//# sourceMappingURL=metadataEndpoint.js.map

package/build/openid4vc-issuer/router/metadataEndpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"metadataEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/metadataEndpoint.ts"],"names":[],"mappings":";;;AAIA,gDAA0E;AAC1E,sEAAkE;AAElE,SAAgB,+BAA+B,CAAC,MAAc;IAC5D,MAAM,CAAC,GAAG,CACR,uCAAuC,EACvC,CAAC,QAAkC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QAC/D,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAiB,EAAC,QAAQ,CAAC,CAAA;QAE5D,IAAI;YACF,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;YAC7F,MAAM,cAAc,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;YACrF,MAAM,mBAAmB,GAAG;gBAC1B,iBAAiB,EAAE,cAAc,CAAC,SAAS;gBAC3C,cAAc,EAAE,cAAc,CAAC,aAAa;gBAC5C,mBAAmB,EAAE,cAAc,CAAC,kBAAkB;gBACtD,oBAAoB,EAAE,cAAc,CAAC,mBAAmB;gBACxD,qBAAqB,EAAE,cAAc,CAAC,oBAAoB;gBAC1D,OAAO,EAAE,cAAc,CAAC,aAAa;aACH,CAAA;YAEpC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;SAC/C;QAAC,OAAO,CAAC,EAAE;YACV,IAAA,0BAAiB,EAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAA;SACnF;QAED,mFAAmF;QACnF,IAAI,EAAE,CAAA;IACR,CAAC,CACF,CAAA;AACH,CAAC;AA3BD,0EA2BC"}

package/build/openid4vc-issuer/router/requestContext.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"requestContext.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/requestContext.ts"],"names":[],"mappings":""}

package/build/openid4vc-issuer/router/verifyAccessToken.js

@@ -1,39 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyAccessToken = void 0;
-const core_1 = require("@credo-ts/core");
-const OpenId4VcIssuerService_1 = require("../OpenId4VcIssuerService");
-async function verifyAccessToken(agentContext, issuer, authorizationHeader) {
-    const openId4VcIssuerService = agentContext.dependencyManager.resolve(OpenId4VcIssuerService_1.OpenId4VcIssuerService);
-    if (!authorizationHeader || !authorizationHeader.startsWith('Bearer ')) {
-        throw new core_1.CredoError('No access token provided in the authorization header');
-    }
-    const issuerMetadata = openId4VcIssuerService.getIssuerMetadata(agentContext, issuer);
-    const accessToken = core_1.Jwt.fromSerializedJwt(authorizationHeader.replace('Bearer ', ''));
-    const jwsService = agentContext.dependencyManager.resolve(core_1.JwsService);
-    const { isValid, signerKeys } = await jwsService.verifyJws(agentContext, {
-        jws: accessToken.serializedJwt,
-        jwkResolver: () => {
-            throw new Error('No JWK resolver available for access token verification');
-        },
-    });
-    if (!isValid) {
-        throw new core_1.CredoError('Signature on access token is invalid');
-    }
-    if (!signerKeys.map((key) => key.fingerprint).includes(issuer.accessTokenPublicKeyFingerprint)) {
-        throw new core_1.CredoError('Access token was not signed by the expected issuer');
-    }
-    // Finally validate the JWT payload (expiry etc..)
-    accessToken.payload.validate();
-    if (accessToken.payload.iss !== issuerMetadata.issuerUrl) {
-        throw new core_1.CredoError('Access token was not issued by the expected issuer');
-    }
-    if (typeof accessToken.payload.additionalClaims.preAuthorizedCode !== 'string') {
-        throw new core_1.CredoError('No preAuthorizedCode present in access token');
-    }
-    return {
-        preAuthorizedCode: accessToken.payload.additionalClaims.preAuthorizedCode,
-    };
-}
-exports.verifyAccessToken = verifyAccessToken;
-//# sourceMappingURL=verifyAccessToken.js.map

package/build/openid4vc-issuer/router/verifyAccessToken.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifyAccessToken.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/router/verifyAccessToken.ts"],"names":[],"mappings":";;;AAGA,yCAA4D;AAE5D,sEAAkE;AAE3D,KAAK,UAAU,iBAAiB,CACrC,YAA0B,EAC1B,MAA6B,EAC7B,mBAA4B;IAE5B,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,+CAAsB,CAAC,CAAA;IAE7F,IAAI,CAAC,mBAAmB,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE;QACtE,MAAM,IAAI,iBAAU,CAAC,sDAAsD,CAAC,CAAA;KAC7E;IAED,MAAM,cAAc,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IACrF,MAAM,WAAW,GAAG,UAAG,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAA;IACrF,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;IAErE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE;QACvE,GAAG,EAAE,WAAW,CAAC,aAAa;QAC9B,WAAW,EAAE,GAAG,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC5E,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,CAAC,OAAO,EAAE;QACZ,MAAM,IAAI,iBAAU,CAAC,sCAAsC,CAAC,CAAA;KAC7D;IAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,+BAA+B,CAAC,EAAE;QAC9F,MAAM,IAAI,iBAAU,CAAC,oDAAoD,CAAC,CAAA;KAC3E;IAED,kDAAkD;IAClD,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;IAE9B,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,KAAK,cAAc,CAAC,SAAS,EAAE;QACxD,MAAM,IAAI,iBAAU,CAAC,oDAAoD,CAAC,CAAA;KAC3E;IAED,IAAI,OAAO,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,KAAK,QAAQ,EAAE;QAC9E,MAAM,IAAI,iBAAU,CAAC,8CAA8C,CAAC,CAAA;KACrE;IAED,OAAO;QACL,iBAAiB,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,iBAAiB;KAC1E,CAAA;AACH,CAAC;AA5CD,8CA4CC"}

package/build/openid4vc-issuer/util/credentialRequest.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getCNonceFromCredentialRequest = void 0;
-const core_1 = require("@credo-ts/core");
-/**
- * Extract the 'nonce' parameter from the JWT payload of the credential request.
- */
-function getCNonceFromCredentialRequest(credentialRequest) {
-    var _a;
-    if (!((_a = credentialRequest.proof) === null || _a === void 0 ? void 0 : _a.jwt))
-        throw new core_1.CredoError('No jwt in the credentialRequest proof.');
-    const jwt = core_1.Jwt.fromSerializedJwt(credentialRequest.proof.jwt);
-    if (!jwt.payload.additionalClaims.nonce || typeof jwt.payload.additionalClaims.nonce !== 'string')
-        throw new core_1.CredoError('No nonce in the credentialRequest JWT proof payload.');
-    return jwt.payload.additionalClaims.nonce;
-}
-exports.getCNonceFromCredentialRequest = getCNonceFromCredentialRequest;
-//# sourceMappingURL=credentialRequest.js.map

package/build/openid4vc-issuer/util/credentialRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentialRequest.js","sourceRoot":"","sources":["../../../src/openid4vc-issuer/util/credentialRequest.ts"],"names":[],"mappings":";;;AAEA,yCAAgD;AAEhD;;GAEG;AACH,SAAgB,8BAA8B,CAAC,iBAA8C;;IAC3F,IAAI,CAAC,CAAA,MAAA,iBAAiB,CAAC,KAAK,0CAAE,GAAG,CAAA;QAAE,MAAM,IAAI,iBAAU,CAAC,wCAAwC,CAAC,CAAA;IACjG,MAAM,GAAG,GAAG,UAAG,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,KAAK,QAAQ;QAC/F,MAAM,IAAI,iBAAU,CAAC,sDAAsD,CAAC,CAAA;IAC9E,OAAO,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAA;AAC3C,CAAC;AAND,wEAMC"}

package/build/openid4vc-verifier/OpenId4VcSiopVerifierService.d.ts

@@ -1,43 +0,0 @@
-import type { OpenId4VcSiopCreateAuthorizationRequestOptions, OpenId4VcSiopCreateAuthorizationRequestReturn, OpenId4VcSiopCreateVerifierOptions, OpenId4VcSiopVerifiedAuthorizationResponse, OpenId4VcSiopVerifyAuthorizationResponseOptions } from './OpenId4VcSiopVerifierServiceOptions';
-import type { OpenId4VcVerificationSessionRecord } from './repository';
-import type { OpenId4VcSiopAuthorizationResponsePayload } from '../shared';
-import type { AgentContext, Query } from '@credo-ts/core';
-import { Logger, W3cCredentialService } from '@credo-ts/core';
-import { OpenId4VcVerifierModuleConfig } from './OpenId4VcVerifierModuleConfig';
-import { OpenId4VcVerificationSessionRepository, OpenId4VcVerifierRecord, OpenId4VcVerifierRepository } from './repository';
-/**
- * @internal
- */
-export declare class OpenId4VcSiopVerifierService {
-    private logger;
-    private w3cCredentialService;
-    private openId4VcVerifierRepository;
-    private config;
-    private openId4VcVerificationSessionRepository;
-    constructor(logger: Logger, w3cCredentialService: W3cCredentialService, openId4VcVerifierRepository: OpenId4VcVerifierRepository, config: OpenId4VcVerifierModuleConfig, openId4VcVerificationSessionRepository: OpenId4VcVerificationSessionRepository);
-    createAuthorizationRequest(agentContext: AgentContext, options: OpenId4VcSiopCreateAuthorizationRequestOptions & {
-        verifier: OpenId4VcVerifierRecord;
-    }): Promise<OpenId4VcSiopCreateAuthorizationRequestReturn>;
-    verifyAuthorizationResponse(agentContext: AgentContext, options: OpenId4VcSiopVerifyAuthorizationResponseOptions & {
-        verificationSession: OpenId4VcVerificationSessionRecord;
-    }): Promise<OpenId4VcSiopVerifiedAuthorizationResponse & {
-        verificationSession: OpenId4VcVerificationSessionRecord;
-    }>;
-    getVerifiedAuthorizationResponse(verificationSession: OpenId4VcVerificationSessionRecord): Promise<OpenId4VcSiopVerifiedAuthorizationResponse>;
-    /**
-     * Find the verification session associated with an authorization response. You can optionally provide a verifier id
-     * if the verifier that the response is associated with is already known.
-     */
-    findVerificationSessionForAuthorizationResponse(agentContext: AgentContext, { authorizationResponse, verifierId, }: {
-        authorizationResponse: OpenId4VcSiopAuthorizationResponsePayload;
-        verifierId?: string;
-    }): Promise<OpenId4VcVerificationSessionRecord | null>;
-    getAllVerifiers(agentContext: AgentContext): Promise<OpenId4VcVerifierRecord[]>;
-    getVerifierByVerifierId(agentContext: AgentContext, verifierId: string): Promise<OpenId4VcVerifierRecord>;
-    updateVerifier(agentContext: AgentContext, verifier: OpenId4VcVerifierRecord): Promise<void>;
-    createVerifier(agentContext: AgentContext, options?: OpenId4VcSiopCreateVerifierOptions): Promise<OpenId4VcVerifierRecord>;
-    findVerificationSessionsByQuery(agentContext: AgentContext, query: Query<OpenId4VcVerificationSessionRecord>): Promise<OpenId4VcVerificationSessionRecord[]>;
-    getVerificationSessionById(agentContext: AgentContext, verificationSessionId: string): Promise<OpenId4VcVerificationSessionRecord>;
-    private getRelyingParty;
-    private getPresentationVerificationCallback;
-}