@credo-ts/openid4vc 0.6.0-pr-2195-20250226092707 → 0.6.0-pr-2209-20250321171013

package/build/openid4vc-verifier/repository/OpenId4VcRelyingPartySessionManager.d.ts

@@ -0,0 +1,19 @@
+import type { AgentContext } from '@credo-ts/core';
+import type { AuthorizationRequestState, AuthorizationResponseState, IRPSessionManager } from '@sphereon/did-auth-siop';
+export declare class OpenId4VcRelyingPartySessionManager implements IRPSessionManager {
+    private agentContext;
+    private verifierId;
+    private openId4VcVerificationSessionRepository;
+    constructor(agentContext: AgentContext, verifierId: string);
+    getRequestStateByCorrelationId(correlationId: string, errorOnNotFound?: boolean): Promise<AuthorizationRequestState | undefined>;
+    getRequestStateByNonce(nonce: string, errorOnNotFound?: boolean): Promise<AuthorizationRequestState | undefined>;
+    getRequestStateByState(state: string, errorOnNotFound?: boolean): Promise<AuthorizationRequestState | undefined>;
+    getResponseStateByCorrelationId(correlationId: string, errorOnNotFound?: boolean): Promise<AuthorizationResponseState | undefined>;
+    getResponseStateByNonce(nonce: string, errorOnNotFound?: boolean): Promise<AuthorizationResponseState | undefined>;
+    getResponseStateByState(state: string, errorOnNotFound?: boolean): Promise<AuthorizationResponseState | undefined>;
+    getCorrelationIdByNonce(nonce: string, errorOnNotFound?: boolean): Promise<string | undefined>;
+    getCorrelationIdByState(state: string, errorOnNotFound?: boolean): Promise<string | undefined>;
+    deleteStateForCorrelationId(): Promise<void>;
+    private getRequestStateFromSessionRecord;
+    private getResponseStateFromSessionRecord;
+}

package/build/openid4vc-verifier/repository/OpenId4VcRelyingPartySessionManager.js

@@ -0,0 +1,144 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenId4VcRelyingPartySessionManager = void 0;
+const core_1 = require("@credo-ts/core");
+const did_auth_siop_1 = require("@sphereon/did-auth-siop");
+const OpenId4VcVerificationSessionState_1 = require("../OpenId4VcVerificationSessionState");
+const OpenId4VcVerificationSessionRepository_1 = require("./OpenId4VcVerificationSessionRepository");
+class OpenId4VcRelyingPartySessionManager {
+    constructor(agentContext, verifierId) {
+        this.agentContext = agentContext;
+        this.verifierId = verifierId;
+        this.openId4VcVerificationSessionRepository = agentContext.dependencyManager.resolve(OpenId4VcVerificationSessionRepository_1.OpenId4VcVerificationSessionRepository);
+    }
+    async getRequestStateByCorrelationId(correlationId, errorOnNotFound) {
+        const verificationSession = await this.openId4VcVerificationSessionRepository.findById(this.agentContext, correlationId);
+        if (!verificationSession) {
+            if (errorOnNotFound)
+                throw new core_1.CredoError(`OpenID4VC Authorization request state for correlation id ${correlationId} not found`);
+            return undefined;
+        }
+        return this.getRequestStateFromSessionRecord(verificationSession);
+    }
+    async getRequestStateByNonce(nonce, errorOnNotFound) {
+        const verificationSession = await this.openId4VcVerificationSessionRepository.findSingleByQuery(this.agentContext, {
+            verifierId: this.verifierId,
+            nonce: nonce,
+        });
+        if (!verificationSession) {
+            if (errorOnNotFound)
+                throw new core_1.CredoError(`OpenID4VC Authorization request state for nonce ${nonce} not found`);
+            return undefined;
+        }
+        return this.getRequestStateFromSessionRecord(verificationSession);
+    }
+    async getRequestStateByState(state, errorOnNotFound) {
+        const verificationSession = await this.openId4VcVerificationSessionRepository.findSingleByQuery(this.agentContext, {
+            verifierId: this.verifierId,
+            payloadState: state,
+        });
+        if (!verificationSession) {
+            if (errorOnNotFound)
+                throw new core_1.CredoError(`OpenID4VC Authorization request state for state ${state} not found`);
+            return undefined;
+        }
+        return this.getRequestStateFromSessionRecord(verificationSession);
+    }
+    async getResponseStateByCorrelationId(correlationId, errorOnNotFound) {
+        const verificationSession = await this.openId4VcVerificationSessionRepository.findById(this.agentContext, correlationId);
+        const responseState = await this.getResponseStateFromSessionRecord(verificationSession);
+        if (!responseState) {
+            if (errorOnNotFound)
+                throw new core_1.CredoError(`OpenID4VC Authorization response state for correlation id ${correlationId} not found`);
+            return undefined;
+        }
+        return responseState;
+    }
+    async getResponseStateByNonce(nonce, errorOnNotFound) {
+        const verificationSession = await this.openId4VcVerificationSessionRepository.findSingleByQuery(this.agentContext, {
+            verifierId: this.verifierId,
+            nonce,
+        });
+        const responseState = await this.getResponseStateFromSessionRecord(verificationSession);
+        if (!responseState) {
+            if (errorOnNotFound)
+                throw new core_1.CredoError(`OpenID4VC Authorization response state for nonce ${nonce} not found`);
+            return undefined;
+        }
+        return responseState;
+    }
+    async getResponseStateByState(state, errorOnNotFound) {
+        const verificationSession = await this.openId4VcVerificationSessionRepository.findSingleByQuery(this.agentContext, {
+            verifierId: this.verifierId,
+            payloadState: state,
+        });
+        const responseState = await this.getResponseStateFromSessionRecord(verificationSession);
+        if (!responseState) {
+            if (errorOnNotFound)
+                throw new core_1.CredoError(`OpenID4VC Authorization response state for state ${state} not found`);
+            return undefined;
+        }
+        return responseState;
+    }
+    async getCorrelationIdByNonce(nonce, errorOnNotFound) {
+        const requestState = await this.getRequestStateByNonce(nonce, errorOnNotFound);
+        return requestState?.correlationId;
+    }
+    async getCorrelationIdByState(state, errorOnNotFound) {
+        const requestState = await this.getRequestStateByState(state, errorOnNotFound);
+        return requestState?.correlationId;
+    }
+    async deleteStateForCorrelationId() {
+        throw new Error('Method not implemented.');
+    }
+    async getRequestStateFromSessionRecord(sessionRecord) {
+        const lastUpdated = sessionRecord.updatedAt?.getTime() ?? sessionRecord.createdAt.getTime();
+        return {
+            lastUpdated,
+            timestamp: lastUpdated,
+            correlationId: sessionRecord.id,
+            // Not so nice that the session manager expects an error instance.....
+            error: sessionRecord.errorMessage ? new Error(sessionRecord.errorMessage) : undefined,
+            request: await did_auth_siop_1.AuthorizationRequest.fromUriOrJwt(sessionRecord.authorizationRequestJwt),
+            status: sphereonAuthorizationRequestStateFromOpenId4VcVerificationState(sessionRecord.state),
+        };
+    }
+    async getResponseStateFromSessionRecord(sessionRecord) {
+        if (!sessionRecord)
+            return undefined;
+        const lastUpdated = sessionRecord.updatedAt?.getTime() ?? sessionRecord.createdAt.getTime();
+        // If we don't have the authorization response payload yet, it means we haven't
+        // received the response yet, and thus the response state does not exist yet
+        if (!sessionRecord.authorizationResponsePayload) {
+            return undefined;
+        }
+        return {
+            lastUpdated,
+            timestamp: lastUpdated,
+            correlationId: sessionRecord.id,
+            // Not so nice that the session manager expects an error instance.....
+            error: sessionRecord.errorMessage ? new Error(sessionRecord.errorMessage) : undefined,
+            response: await did_auth_siop_1.AuthorizationResponse.fromPayload(sessionRecord.authorizationResponsePayload),
+            status: sphereonAuthorizationResponseStateFromOpenId4VcVerificationState(sessionRecord.state),
+        };
+    }
+}
+exports.OpenId4VcRelyingPartySessionManager = OpenId4VcRelyingPartySessionManager;
+function sphereonAuthorizationResponseStateFromOpenId4VcVerificationState(state) {
+    if (state === OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.Error)
+        return did_auth_siop_1.AuthorizationResponseStateStatus.ERROR;
+    if (state === OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.ResponseVerified)
+        return did_auth_siop_1.AuthorizationResponseStateStatus.VERIFIED;
+    throw new core_1.CredoError(`Can not map OpenId4VcVerificationSessionState ${state} to AuthorizationResponseStateStatus`);
+}
+function sphereonAuthorizationRequestStateFromOpenId4VcVerificationState(state) {
+    if (state === OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.Error)
+        return did_auth_siop_1.AuthorizationRequestStateStatus.ERROR;
+    if ([OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.RequestCreated, OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.ResponseVerified].includes(state)) {
+        return did_auth_siop_1.AuthorizationRequestStateStatus.CREATED;
+    }
+    if (state === OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.RequestUriRetrieved)
+        return did_auth_siop_1.AuthorizationRequestStateStatus.SENT;
+    throw new core_1.CredoError(`Can not map OpenId4VcVerificationSessionState ${state} to AuthorizationRequestStateStatus`);
+}
+//# sourceMappingURL=OpenId4VcRelyingPartySessionManager.js.map

package/build/openid4vc-verifier/repository/OpenId4VcRelyingPartySessionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcRelyingPartySessionManager.js","sourceRoot":"","sources":["../../../src/openid4vc-verifier/repository/OpenId4VcRelyingPartySessionManager.ts"],"names":[],"mappings":";;;AAIA,yCAA2C;AAC3C,2DAKgC;AAEhC,4FAAwF;AAExF,qGAAiG;AAEjG,MAAa,mCAAmC;IAG9C,YACU,YAA0B,EAC1B,UAAkB;QADlB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,eAAU,GAAV,UAAU,CAAQ;QAE1B,IAAI,CAAC,sCAAsC,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAClF,+EAAsC,CACvC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,8BAA8B,CACzC,aAAqB,EACrB,eAAyB;QAEzB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,QAAQ,CACpF,IAAI,CAAC,YAAY,EACjB,aAAa,CACd,CAAA;QAED,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,IAAI,eAAe;gBACjB,MAAM,IAAI,iBAAU,CAAC,4DAA4D,aAAa,YAAY,CAAC,CAAA;YAC7G,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO,IAAI,CAAC,gCAAgC,CAAC,mBAAmB,CAAC,CAAA;IACnE,CAAC;IAEM,KAAK,CAAC,sBAAsB,CACjC,KAAa,EACb,eAAyB;QAEzB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YACjH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;QAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,IAAI,eAAe;gBAAE,MAAM,IAAI,iBAAU,CAAC,mDAAmD,KAAK,YAAY,CAAC,CAAA;YAC/G,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO,IAAI,CAAC,gCAAgC,CAAC,mBAAmB,CAAC,CAAA;IACnE,CAAC;IAEM,KAAK,CAAC,sBAAsB,CACjC,KAAa,EACb,eAAyB;QAEzB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YACjH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,KAAK;SACpB,CAAC,CAAA;QAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,IAAI,eAAe;gBAAE,MAAM,IAAI,iBAAU,CAAC,mDAAmD,KAAK,YAAY,CAAC,CAAA;YAC/G,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO,IAAI,CAAC,gCAAgC,CAAC,mBAAmB,CAAC,CAAA;IACnE,CAAC;IAEM,KAAK,CAAC,+BAA+B,CAC1C,aAAqB,EACrB,eAAyB;QAEzB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,QAAQ,CACpF,IAAI,CAAC,YAAY,EACjB,aAAa,CACd,CAAA;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,mBAAmB,CAAC,CAAA;QACvF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,eAAe;gBACjB,MAAM,IAAI,iBAAU,CAAC,6DAA6D,aAAa,YAAY,CAAC,CAAA;YAC9G,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO,aAAa,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAClC,KAAa,EACb,eAAyB;QAEzB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YACjH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK;SACN,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,mBAAmB,CAAC,CAAA;QACvF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,eAAe;gBAAE,MAAM,IAAI,iBAAU,CAAC,oDAAoD,KAAK,YAAY,CAAC,CAAA;YAChH,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO,aAAa,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAClC,KAAa,EACb,eAAyB;QAEzB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE;YACjH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,KAAK;SACpB,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,mBAAmB,CAAC,CAAA;QACvF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,eAAe;gBAAE,MAAM,IAAI,iBAAU,CAAC,oDAAoD,KAAK,YAAY,CAAC,CAAA;YAChH,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO,aAAa,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,KAAa,EAAE,eAAyB;QAC3E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;QAC9E,OAAO,YAAY,EAAE,aAAa,CAAA;IACpC,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,KAAa,EAAE,eAAyB;QAC3E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;QAC9E,OAAO,YAAY,EAAE,aAAa,CAAA;IACpC,CAAC;IAEM,KAAK,CAAC,2BAA2B;QACtC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAEO,KAAK,CAAC,gCAAgC,CAC5C,aAAiD;QAEjD,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;QAC3F,OAAO;YACL,WAAW;YACX,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,aAAa,CAAC,EAAE;YAC/B,sEAAsE;YACtE,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;YACrF,OAAO,EAAE,MAAM,oCAAoB,CAAC,YAAY,CAAC,aAAa,CAAC,uBAAuB,CAAC;YACvF,MAAM,EAAE,+DAA+D,CAAC,aAAa,CAAC,KAAK,CAAC;SAC7F,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,iCAAiC,CAC7C,aAAwD;QAExD,IAAI,CAAC,aAAa;YAAE,OAAO,SAAS,CAAA;QACpC,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;QAE3F,+EAA+E;QAC/E,4EAA4E;QAC5E,IAAI,CAAC,aAAa,CAAC,4BAA4B,EAAE,CAAC;YAChD,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO;YACL,WAAW;YACX,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,aAAa,CAAC,EAAE;YAC/B,sEAAsE;YACtE,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;YACrF,QAAQ,EAAE,MAAM,qCAAqB,CAAC,WAAW,CAAC,aAAa,CAAC,4BAA4B,CAAC;YAC7F,MAAM,EAAE,gEAAgE,CAAC,aAAa,CAAC,KAAK,CAAC;SAC9F,CAAA;IACH,CAAC;CACF;AA1KD,kFA0KC;AAED,SAAS,gEAAgE,CACvE,KAAwC;IAExC,IAAI,KAAK,KAAK,qEAAiC,CAAC,KAAK;QAAE,OAAO,gDAAgC,CAAC,KAAK,CAAA;IACpG,IAAI,KAAK,KAAK,qEAAiC,CAAC,gBAAgB;QAAE,OAAO,gDAAgC,CAAC,QAAQ,CAAA;IAElH,MAAM,IAAI,iBAAU,CAAC,iDAAiD,KAAK,sCAAsC,CAAC,CAAA;AACpH,CAAC;AAED,SAAS,+DAA+D,CACtE,KAAwC;IAExC,IAAI,KAAK,KAAK,qEAAiC,CAAC,KAAK;QAAE,OAAO,+CAA+B,CAAC,KAAK,CAAA;IAEnG,IACE,CAAC,qEAAiC,CAAC,cAAc,EAAE,qEAAiC,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAC7G,KAAK,CACN,EACD,CAAC;QACD,OAAO,+CAA+B,CAAC,OAAO,CAAA;IAChD,CAAC;IAED,IAAI,KAAK,KAAK,qEAAiC,CAAC,mBAAmB;QAAE,OAAO,+CAA+B,CAAC,IAAI,CAAA;IAEhH,MAAM,IAAI,iBAAU,CAAC,iDAAiD,KAAK,qCAAqC,CAAC,CAAA;AACnH,CAAC"}

package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.d.ts

@@ -1,14 +1,14 @@
-import type { OpenId4VcSiopAuthorizationRequestPayload, OpenId4VcSiopAuthorizationResponsePayload } from '../../shared/models';
-import type { OpenId4VcVerificationSessionState } from '../OpenId4VcVerificationSessionState';
 import type { RecordTags, TagsBase } from '@credo-ts/core';
+import type { OpenId4VcSiopAuthorizationResponsePayload } from '../../shared/models';
+import type { OpenId4VcVerificationSessionState } from '../OpenId4VcVerificationSessionState';
 import { BaseRecord } from '@credo-ts/core';
 export type OpenId4VcVerificationSessionRecordTags = RecordTags<OpenId4VcVerificationSessionRecord>;
 export type DefaultOpenId4VcVerificationSessionRecordTags = {
     verifierId: string;
     state: OpenId4VcVerificationSessionState;
     nonce: string;
-    payloadState?: string;
-    authorizationRequestUri?: string;
+    payloadState: string;
+    authorizationRequestUri: string;
 };
 export interface OpenId4VcVerificationSessionRecordProps {
     id?: string;
@@ -17,9 +17,8 @@ export interface OpenId4VcVerificationSessionRecordProps {
     verifierId: string;
     state: OpenId4VcVerificationSessionState;
     errorMessage?: string;
-    authorizationRequestJwt?: string;
-    authorizationRequestUri?: string;
-    authorizationRequestPayload?: OpenId4VcSiopAuthorizationRequestPayload;
+    authorizationRequestUri: string;
+    authorizationRequestJwt: string;
     authorizationResponsePayload?: OpenId4VcSiopAuthorizationResponsePayload;
     /**
      * Presentation during issuance session. This is used when issuance of a credential requires a presentation, and helps
@@ -45,18 +44,12 @@ export declare class OpenId4VcVerificationSessionRecord extends BaseRecord<Defau
     /**
      * The signed JWT containing the authorization request
      */
-    authorizationRequestJwt?: string;
-    /**
-     * Authorization request payload. This should be used only for unsigned requests
-     */
-    authorizationRequestPayload?: OpenId4VcSiopAuthorizationRequestPayload;
+    authorizationRequestJwt: string;
     /**
      * URI of the authorization request. This is the url that can be used to
-     * retrieve the authorization request.
-     *
-     * Not used for requests with response_mode of dc_api or dc_api.jwt
+     * retrieve the authorization request
      */
-    authorizationRequestUri?: string;
+    authorizationRequestUri: string;
     /**
      * The payload of the received authorization response
      */
@@ -67,14 +60,12 @@ export declare class OpenId4VcVerificationSessionRecord extends BaseRecord<Defau
      */
     presentationDuringIssuanceSession?: string;
     constructor(props: OpenId4VcVerificationSessionRecordProps);
-    get request(): string | OpenId4VcSiopAuthorizationRequestPayload;
-    get requestPayload(): OpenId4VcSiopAuthorizationRequestPayload;
     assertState(expectedStates: OpenId4VcVerificationSessionState | OpenId4VcVerificationSessionState[]): void;
     getTags(): {
         verifierId: string;
         state: OpenId4VcVerificationSessionState;
         nonce: string;
-        payloadState: string | undefined;
-        authorizationRequestUri: string | undefined;
+        payloadState: string;
+        authorizationRequestUri: string;
     };
 }

package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.js

@@ -13,29 +13,15 @@ class OpenId4VcVerificationSessionRecord extends core_1.BaseRecord {
             this.verifierId = props.verifierId;
             this.state = props.state;
             this.errorMessage = props.errorMessage;
-            this.authorizationRequestPayload = props.authorizationRequestPayload;
             this.authorizationRequestJwt = props.authorizationRequestJwt;
             this.authorizationRequestUri = props.authorizationRequestUri;
             this.authorizationResponsePayload = props.authorizationResponsePayload;
             this.presentationDuringIssuanceSession = props.presentationDuringIssuanceSession;
         }
     }
-    get request() {
-        if (this.authorizationRequestJwt)
-            return this.authorizationRequestJwt;
-        if (this.authorizationRequestPayload)
-            return this.authorizationRequestPayload;
-        throw new core_1.CredoError('Unable to extract authorization payload from openid4vc session record');
-    }
-    get requestPayload() {
-        if (this.authorizationRequestJwt)
-            return core_1.Jwt.fromSerializedJwt(this.authorizationRequestJwt).payload.toJson();
-        if (this.authorizationRequestPayload)
-            return this.authorizationRequestPayload;
-        throw new core_1.CredoError('Unable to extract authorization payload from openid4vc session record');
-    }
     assertState(expectedStates) {
         if (!Array.isArray(expectedStates)) {
+            // biome-ignore lint/style/noParameterAssign: <explanation>
             expectedStates = [expectedStates];
         }
         if (!expectedStates.includes(this.state)) {
@@ -43,16 +29,19 @@ class OpenId4VcVerificationSessionRecord extends core_1.BaseRecord {
         }
     }
     getTags() {
-        const request = this.requestPayload;
-        const nonce = request.nonce;
+        const parsedAuthorizationRequest = core_1.Jwt.fromSerializedJwt(this.authorizationRequestJwt);
+        const nonce = parsedAuthorizationRequest.payload.additionalClaims.nonce;
         if (!nonce || typeof nonce !== 'string')
             throw new core_1.CredoError('Expected nonce in authorization request payload');
-        const payloadState = 'state' in request ? request.state : undefined;
+        const payloadState = parsedAuthorizationRequest.payload.additionalClaims.state;
+        if (!payloadState || typeof payloadState !== 'string')
+            throw new core_1.CredoError('Expected state in authorization request payload');
         return {
             ...this._tags,
             verifierId: this.verifierId,
             state: this.state,
             nonce,
+            // FIXME: how do we call this property so it doesn't conflict with the record state?
             payloadState,
             authorizationRequestUri: this.authorizationRequestUri,
         };

package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.js.map

@@ -1 +1 @@
-{"version":3,"file":"OpenId4VcVerificationSessionRecord.js","sourceRoot":"","sources":["../../../src/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.ts"],"names":[],"mappings":";;;AAOA,yCAAmE;AAkCnE,MAAa,kCAAmC,SAAQ,iBAAyD;IAgD/G,YAAmB,KAA8C;QAC/D,KAAK,EAAE,CAAA;QA/CO,SAAI,GAAG,kCAAkC,CAAC,IAAI,CAAA;QAiD5D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,YAAK,CAAC,IAAI,EAAE,CAAA;YAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAA;YAE7B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;YAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACxB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACtC,IAAI,CAAC,2BAA2B,GAAG,KAAK,CAAC,2BAA2B,CAAA;YACpE,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC,uBAAuB,CAAA;YAC5D,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC,uBAAuB,CAAA;YAC5D,IAAI,CAAC,4BAA4B,GAAG,KAAK,CAAC,4BAA4B,CAAA;YAEtE,IAAI,CAAC,iCAAiC,GAAG,KAAK,CAAC,iCAAiC,CAAA;QAClF,CAAC;IACH,CAAC;IAED,IAAW,OAAO;QAChB,IAAI,IAAI,CAAC,uBAAuB;YAAE,OAAO,IAAI,CAAC,uBAAuB,CAAA;QACrE,IAAI,IAAI,CAAC,2BAA2B;YAAE,OAAO,IAAI,CAAC,2BAA2B,CAAA;QAE7E,MAAM,IAAI,iBAAU,CAAC,uEAAuE,CAAC,CAAA;IAC/F,CAAC;IAED,IAAW,cAAc;QACvB,IAAI,IAAI,CAAC,uBAAuB;YAC9B,OAAO,UAAG,CAAC,iBAAiB,CAC1B,IAAI,CAAC,uBAAuB,CAC7B,CAAC,OAAO,CAAC,MAAM,EAA8C,CAAA;QAChE,IAAI,IAAI,CAAC,2BAA2B;YAAE,OAAO,IAAI,CAAC,2BAA2B,CAAA;QAE7E,MAAM,IAAI,iBAAU,CAAC,uEAAuE,CAAC,CAAA;IAC/F,CAAC;IAEM,WAAW,CAAC,cAAuF;QACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,cAAc,GAAG,CAAC,cAAc,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,iBAAU,CAClB,0DAA0D,IAAI,CAAC,KAAK,uBAAuB,cAAc,CAAC,IAAI,CAC5G,IAAI,CACL,GAAG,CACL,CAAA;QACH,CAAC;IACH,CAAC;IAEM,OAAO;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAA;QAEnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,iBAAU,CAAC,iDAAiD,CAAC,CAAA;QAEhH,MAAM,YAAY,GAAG,OAAO,IAAI,OAAO,CAAC,CAAC,CAAE,OAAO,CAAC,KAAgB,CAAC,CAAC,CAAC,SAAS,CAAA;QAE/E,OAAO;YACL,GAAG,IAAI,CAAC,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;YACL,YAAY;YACZ,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;SACtD,CAAA;IACH,CAAC;;AAnHH,gFAoHC;AAnHwB,uCAAI,GAAG,oCAAoC,AAAvC,CAAuC"}
+{"version":3,"file":"OpenId4VcVerificationSessionRecord.js","sourceRoot":"","sources":["../../../src/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.ts"],"names":[],"mappings":";;;AAIA,yCAAmE;AAiCnE,MAAa,kCAAmC,SAAQ,iBAAyD;IAyC/G,YAAmB,KAA8C;QAC/D,KAAK,EAAE,CAAA;QAxCO,SAAI,GAAG,kCAAkC,CAAC,IAAI,CAAA;QA0C5D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,YAAK,CAAC,IAAI,EAAE,CAAA;YAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAA;YAE7B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;YAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACxB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACtC,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC,uBAAuB,CAAA;YAC5D,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC,uBAAuB,CAAA;YAC5D,IAAI,CAAC,4BAA4B,GAAG,KAAK,CAAC,4BAA4B,CAAA;YAEtE,IAAI,CAAC,iCAAiC,GAAG,KAAK,CAAC,iCAAiC,CAAA;QAClF,CAAC;IACH,CAAC;IAEM,WAAW,CAAC,cAAuF;QACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,2DAA2D;YAC3D,cAAc,GAAG,CAAC,cAAc,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,iBAAU,CAClB,0DAA0D,IAAI,CAAC,KAAK,uBAAuB,cAAc,CAAC,IAAI,CAC5G,IAAI,CACL,GAAG,CACL,CAAA;QACH,CAAC;IACH,CAAC;IAEM,OAAO;QACZ,MAAM,0BAA0B,GAAG,UAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;QAEtF,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAA;QACvE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,iBAAU,CAAC,iDAAiD,CAAC,CAAA;QAEhH,MAAM,YAAY,GAAG,0BAA0B,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAA;QAC9E,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;YACnD,MAAM,IAAI,iBAAU,CAAC,iDAAiD,CAAC,CAAA;QAEzE,OAAO;YACL,GAAG,IAAI,CAAC,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;YACL,oFAAoF;YACpF,YAAY;YACZ,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;SACtD,CAAA;IACH,CAAC;;AA9FH,gFA+FC;AA9FwB,uCAAI,GAAG,oCAAoC,AAAvC,CAAuC"}

package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRepository.d.ts

@@ -1,4 +1,4 @@
-import { Repository, StorageService, EventEmitter } from '@credo-ts/core';
+import { EventEmitter, Repository, StorageService } from '@credo-ts/core';
 import { OpenId4VcVerificationSessionRecord } from './OpenId4VcVerificationSessionRecord';
 export declare class OpenId4VcVerificationSessionRepository extends Repository<OpenId4VcVerificationSessionRecord> {
     constructor(storageService: StorageService<OpenId4VcVerificationSessionRecord>, eventEmitter: EventEmitter);

package/build/openid4vc-verifier/repository/OpenId4VcVerifierRecord.d.ts

@@ -1,5 +1,5 @@
-import type { OpenId4VcSiopVerifierClientMetadata } from '../OpenId4VcSiopVerifierServiceOptions';
 import type { RecordTags, TagsBase } from '@credo-ts/core';
+import type { OpenId4VcSiopVerifierClientMetadata } from '../OpenId4VcSiopVerifierServiceOptions';
 import { BaseRecord } from '@credo-ts/core';
 export type OpenId4VcVerifierRecordTags = RecordTags<OpenId4VcVerifierRecord>;
 export type DefaultOpenId4VcVerifierRecordTags = {

package/build/openid4vc-verifier/repository/OpenId4VcVerifierRepository.d.ts

@@ -1,5 +1,5 @@
 import type { AgentContext } from '@credo-ts/core';
-import { Repository, StorageService, EventEmitter } from '@credo-ts/core';
+import { EventEmitter, Repository, StorageService } from '@credo-ts/core';
 import { OpenId4VcVerifierRecord } from './OpenId4VcVerifierRecord';
 export declare class OpenId4VcVerifierRepository extends Repository<OpenId4VcVerifierRecord> {
     constructor(storageService: StorageService<OpenId4VcVerifierRecord>, eventEmitter: EventEmitter);

package/build/openid4vc-verifier/router/authorizationEndpoint.js

@@ -1,21 +1,119 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.configureAuthorizationEndpoint = configureAuthorizationEndpoint;
-const oauth2_1 = require("@openid4vc/oauth2");
+const oauth2_1 = require("@animo-id/oauth2");
+const core_1 = require("@credo-ts/core");
+const did_auth_siop_1 = require("@sphereon/did-auth-siop");
 const router_1 = require("../../shared/router");
 const OpenId4VcSiopVerifierService_1 = require("../OpenId4VcSiopVerifierService");
+async function getVerificationSession(agentContext, options) {
+    const { verifierId, state, nonce } = options;
+    const openId4VcVerifierService = agentContext.dependencyManager.resolve(OpenId4VcSiopVerifierService_1.OpenId4VcSiopVerifierService);
+    const session = await openId4VcVerifierService.findVerificationSessionForAuthorizationResponse(agentContext, {
+        authorizationResponseParams: { state, nonce },
+        verifierId,
+    });
+    if (!session) {
+        agentContext.config.logger.warn(`No verification session found for incoming authorization response for verifier ${verifierId}`);
+        throw new core_1.CredoError(`No state or nonce provided in authorization response for verifier ${verifierId}`);
+    }
+    return session;
+}
+const decryptJarmResponse = (agentContext) => {
+    return async (input) => {
+        const { jwe: compactJwe, jwk: jwkJson } = input;
+        const key = core_1.Key.fromFingerprint(jwkJson.kid);
+        if (!agentContext.wallet.directDecryptCompactJweEcdhEs) {
+            throw new core_1.CredoError('Cannot decrypt Jarm Response, wallet does not support directDecryptCompactJweEcdhEs');
+        }
+        const { data, header } = await agentContext.wallet.directDecryptCompactJweEcdhEs({ compactJwe, recipientKey: key });
+        const decryptedPayload = core_1.TypedArrayEncoder.toUtf8String(data);
+        return {
+            plaintext: decryptedPayload,
+            protectedHeader: header,
+        };
+    };
+};
 function configureAuthorizationEndpoint(router, config) {
     router.post(config.endpointPath, async (request, response, next) => {
         const { agentContext, verifier } = (0, router_1.getRequestContext)(request);
+        let jarmResponseType;
         try {
             const openId4VcVerifierService = agentContext.dependencyManager.resolve(OpenId4VcSiopVerifierService_1.OpenId4VcSiopVerifierService);
-            const result = await openId4VcVerifierService.verifyAuthorizationResponse(agentContext, {
-                authorizationResponse: request.body,
-                verifierId: verifier.verifierId,
+            let verificationSession;
+            let authorizationResponsePayload;
+            let jarmHeader = undefined;
+            if (request.body.response) {
+                const res = await did_auth_siop_1.RP.processJarmAuthorizationResponse(request.body.response, {
+                    getAuthRequestPayload: async (input) => {
+                        verificationSession = await getVerificationSession(agentContext, {
+                            verifierId: verifier.verifierId,
+                            state: input.state,
+                            nonce: input.nonce,
+                        });
+                        const req = await did_auth_siop_1.AuthorizationRequest.fromUriOrJwt(verificationSession.authorizationRequestJwt);
+                        const requestObjectPayload = await req.requestObject?.getPayload();
+                        if (!requestObjectPayload) {
+                            throw new core_1.CredoError('No request object payload found.');
+                        }
+                        return { authRequestParams: requestObjectPayload };
+                    },
+                    decryptCompact: decryptJarmResponse(agentContext),
+                    hasher: core_1.Hasher.hash,
+                });
+                jarmResponseType = res.type;
+                const [header] = request.body.response.split('.');
+                jarmHeader = core_1.JsonEncoder.fromBase64(header);
+                // FIXME: verify the apv matches the nonce of the authorization reuqest
+                authorizationResponsePayload = res.authResponseParams;
+            }
+            else {
+                authorizationResponsePayload = request.body;
+                verificationSession = await getVerificationSession(agentContext, {
+                    verifierId: verifier.verifierId,
+                    state: authorizationResponsePayload.state,
+                    nonce: authorizationResponsePayload.nonce,
+                });
+            }
+            if (typeof authorizationResponsePayload.presentation_submission === 'string') {
+                authorizationResponsePayload.presentation_submission = JSON.parse(request.body.presentation_submission);
+            }
+            // This feels hacky, and should probably be moved to OID4VP lib. However the OID4VP spec allows either object, string, or array...
+            if (typeof authorizationResponsePayload.vp_token === 'string' &&
+                (authorizationResponsePayload.vp_token.startsWith('{') || authorizationResponsePayload.vp_token.startsWith('['))) {
+                authorizationResponsePayload.vp_token = JSON.parse(authorizationResponsePayload.vp_token);
+            }
+            if (!verificationSession) {
+                throw new core_1.CredoError('Missing verification session, cannot verify authorization response.');
+            }
+            const authorizationRequest = await did_auth_siop_1.AuthorizationRequest.fromUriOrJwt(verificationSession.authorizationRequestJwt);
+            const response_mode = await authorizationRequest.getMergedProperty('response_mode');
+            if (response_mode?.includes('jwt') && !jarmResponseType) {
+                throw new oauth2_1.Oauth2ServerErrorResponseError({
+                    error: oauth2_1.Oauth2ErrorCodes.InvalidRequest,
+                    error_description: `JARM response is required for JWT response mode '${response_mode}'.`,
+                });
+            }
+            if (!response_mode?.includes('jwt') && jarmResponseType) {
+                throw new oauth2_1.Oauth2ServerErrorResponseError({
+                    error: oauth2_1.Oauth2ErrorCodes.InvalidRequest,
+                    error_description: `Recieved JARM response which is incompatible with response mode '${response_mode}'.`,
+                });
+            }
+            if (jarmResponseType && jarmResponseType !== 'encrypted') {
+                throw new oauth2_1.Oauth2ServerErrorResponseError({
+                    error: oauth2_1.Oauth2ErrorCodes.InvalidRequest,
+                    error_description: `Only encrypted JARM responses are supported, received '${jarmResponseType}'.`,
+                });
+            }
+            await openId4VcVerifierService.verifyAuthorizationResponse(agentContext, {
+                authorizationResponse: authorizationResponsePayload,
+                verificationSession,
+                jarmHeader,
             });
             return (0, router_1.sendJsonResponse)(response, next, {
                 // Used only for presentation during issuance flow, to prevent session fixation.
-                presentation_during_issuance_session: result.verificationSession.presentationDuringIssuanceSession,
+                presentation_during_issuance_session: verificationSession.presentationDuringIssuanceSession,
             });
         }
         catch (error) {

package/build/openid4vc-verifier/router/authorizationEndpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorizationEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-verifier/router/authorizationEndpoint.ts"],"names":[],"mappings":";;AAkBA,wEAwBC;AAvCD,8CAAkE;AAElE,gDAAqH;AACrH,kFAA8E;AAY9E,SAAgB,8BAA8B,CAAC,MAAc,EAAE,MAAgD;IAC7G,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,OAAqC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACzG,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE7D,IAAI,CAAC;YACH,MAAM,wBAAwB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,2DAA4B,CAAC,CAAA;YAErG,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,2BAA2B,CAAC,YAAY,EAAE;gBACtF,qBAAqB,EAAE,OAAO,CAAC,IAAI;gBACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAA;YAEF,OAAO,IAAA,yBAAgB,EAAC,QAAQ,EAAE,IAAI,EAAE;gBACtC,gFAAgF;gBAChF,oCAAoC,EAAE,MAAM,CAAC,mBAAmB,CAAC,iCAAiC;aACnG,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uCAA8B,EAAE,CAAC;gBACpD,OAAO,IAAA,gCAAuB,EAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YACnF,CAAC;YAED,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;QACrG,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"authorizationEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-verifier/router/authorizationEndpoint.ts"],"names":[],"mappings":";;AAmEA,wEAuGC;AApKD,6CAAmF;AACnF,yCAAwF;AACxF,2DAAkE;AAElE,gDAAqH;AACrH,kFAA8E;AAY9E,KAAK,UAAU,sBAAsB,CACnC,YAA0B,EAC1B,OAIC;IAED,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAE5C,MAAM,wBAAwB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,2DAA4B,CAAC,CAAA;IACrG,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,+CAA+C,CAAC,YAAY,EAAE;QAC3G,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QAC7C,UAAU;KACX,CAAC,CAAA;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC7B,kFAAkF,UAAU,EAAE,CAC/F,CAAA;QACD,MAAM,IAAI,iBAAU,CAAC,qEAAqE,UAAU,EAAE,CAAC,CAAA;IACzG,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,YAA0B,EAAkB,EAAE;IACzE,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;QAC/C,MAAM,GAAG,GAAG,UAAG,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC5C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,6BAA6B,EAAE,CAAC;YACvD,MAAM,IAAI,iBAAU,CAAC,qFAAqF,CAAC,CAAA;QAC7G,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,6BAA6B,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAA;QACnH,MAAM,gBAAgB,GAAG,wBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QAE7D,OAAO;YACL,SAAS,EAAE,gBAAgB;YAC3B,eAAe,EAAE,MAAgE;SAClF,CAAA;IACH,CAAC,CAAA;AACH,CAAC,CAAA;AAED,SAAgB,8BAA8B,CAAC,MAAc,EAAE,MAAgD;IAC7G,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,OAAqC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACzG,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE7D,IAAI,gBAAoC,CAAA;QAExC,IAAI,CAAC;YACH,MAAM,wBAAwB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,2DAA4B,CAAC,CAAA;YAErG,IAAI,mBAAmE,CAAA;YACvE,IAAI,4BAA0D,CAAA;YAC9D,IAAI,UAAU,GAA+C,SAAS,CAAA;YAEtE,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,MAAM,kBAAE,CAAC,gCAAgC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE;oBAC3E,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;wBACrC,mBAAmB,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE;4BAC/D,UAAU,EAAE,QAAQ,CAAC,UAAU;4BAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;4BAClB,KAAK,EAAE,KAAK,CAAC,KAAe;yBAC7B,CAAC,CAAA;wBAEF,MAAM,GAAG,GAAG,MAAM,oCAAoB,CAAC,YAAY,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;wBAChG,MAAM,oBAAoB,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,CAAA;wBAClE,IAAI,CAAC,oBAAoB,EAAE,CAAC;4BAC1B,MAAM,IAAI,iBAAU,CAAC,kCAAkC,CAAC,CAAA;wBAC1D,CAAC;wBACD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,CAAA;oBACpD,CAAC;oBACD,cAAc,EAAE,mBAAmB,CAAC,YAAY,CAAC;oBACjD,MAAM,EAAE,aAAM,CAAC,IAAI;iBACpB,CAAC,CAAA;gBAEF,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAA;gBAE3B,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBACjD,UAAU,GAAG,kBAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;gBAC3C,uEAAuE;gBACvE,4BAA4B,GAAG,GAAG,CAAC,kBAAkD,CAAA;YACvF,CAAC;iBAAM,CAAC;gBACN,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAA;gBAC3C,mBAAmB,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE;oBAC/D,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,KAAK,EAAE,4BAA4B,CAAC,KAAK;oBACzC,KAAK,EAAE,4BAA4B,CAAC,KAAK;iBAC1C,CAAC,CAAA;YACJ,CAAC;YACD,IAAI,OAAO,4BAA4B,CAAC,uBAAuB,KAAK,QAAQ,EAAE,CAAC;gBAC7E,4BAA4B,CAAC,uBAAuB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YACzG,CAAC;YAED,kIAAkI;YAClI,IACE,OAAO,4BAA4B,CAAC,QAAQ,KAAK,QAAQ;gBACzD,CAAC,4BAA4B,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,4BAA4B,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAChH,CAAC;gBACD,4BAA4B,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAA;YAC3F,CAAC;YAED,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,iBAAU,CAAC,qEAAqE,CAAC,CAAA;YAC7F,CAAC;YAED,MAAM,oBAAoB,GAAG,MAAM,oCAAoB,CAAC,YAAY,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;YACjH,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,iBAAiB,CAAS,eAAe,CAAC,CAAA;YAC3F,IAAI,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxD,MAAM,IAAI,uCAA8B,CAAC;oBACvC,KAAK,EAAE,yBAAgB,CAAC,cAAc;oBACtC,iBAAiB,EAAE,oDAAoD,aAAa,IAAI;iBACzF,CAAC,CAAA;YACJ,CAAC;YAED,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,gBAAgB,EAAE,CAAC;gBACxD,MAAM,IAAI,uCAA8B,CAAC;oBACvC,KAAK,EAAE,yBAAgB,CAAC,cAAc;oBACtC,iBAAiB,EAAE,oEAAoE,aAAa,IAAI;iBACzG,CAAC,CAAA;YACJ,CAAC;YAED,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,WAAW,EAAE,CAAC;gBACzD,MAAM,IAAI,uCAA8B,CAAC;oBACvC,KAAK,EAAE,yBAAgB,CAAC,cAAc;oBACtC,iBAAiB,EAAE,0DAA0D,gBAAgB,IAAI;iBAClG,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,wBAAwB,CAAC,2BAA2B,CAAC,YAAY,EAAE;gBACvE,qBAAqB,EAAE,4BAA4B;gBACnD,mBAAmB;gBACnB,UAAU;aACX,CAAC,CAAA;YACF,OAAO,IAAA,yBAAgB,EAAC,QAAQ,EAAE,IAAI,EAAE;gBACtC,gFAAgF;gBAChF,oCAAoC,EAAE,mBAAmB,CAAC,iCAAiC;aAC5F,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uCAA8B,EAAE,CAAC;gBACpD,OAAO,IAAA,gCAAuB,EAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YACnF,CAAC;YAED,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;QACrG,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/build/openid4vc-verifier/router/authorizationRequestEndpoint.js

@@ -5,7 +5,9 @@ const core_1 = require("@credo-ts/core");
 const router_1 = require("../../shared/router");
 const OpenId4VcSiopVerifierService_1 = require("../OpenId4VcSiopVerifierService");
 const OpenId4VcVerificationSessionState_1 = require("../OpenId4VcVerificationSessionState");
+const OpenId4VcVerifierEvents_1 = require("../OpenId4VcVerifierEvents");
 const OpenId4VcVerifierModuleConfig_1 = require("../OpenId4VcVerifierModuleConfig");
+const repository_1 = require("../repository");
 function configureAuthorizationRequestEndpoint(router, config) {
     router.get((0, core_1.joinUriParts)(config.endpointPath, [':authorizationRequestId']), async (request, response, next) => {
         const { agentContext, verifier } = (0, router_1.getRequestContext)(request);
@@ -14,6 +16,7 @@ function configureAuthorizationRequestEndpoint(router, config) {
         }
         try {
             const verifierService = agentContext.dependencyManager.resolve(OpenId4VcSiopVerifierService_1.OpenId4VcSiopVerifierService);
+            const verificationSessionRepository = agentContext.dependencyManager.resolve(repository_1.OpenId4VcVerificationSessionRepository);
             const verifierConfig = agentContext.dependencyManager.resolve(OpenId4VcVerifierModuleConfig_1.OpenId4VcVerifierModuleConfig);
             // We always use shortened URIs currently
             const fullAuthorizationRequestUri = (0, core_1.joinUriParts)(verifierConfig.baseUrl, [
@@ -25,8 +28,7 @@ function configureAuthorizationRequestEndpoint(router, config) {
                 verifierId: verifier.verifierId,
                 authorizationRequestUri: fullAuthorizationRequestUri,
             });
-            // Not all requets are signed, and those are not fetcheable
-            if (!verificationSession || !verificationSession.authorizationRequestJwt) {
+            if (!verificationSession) {
                 return (0, router_1.sendErrorResponse)(response, next, agentContext.config.logger, 404, 'not_found', 'Authorization request not found');
             }
             if (![
@@ -37,7 +39,18 @@ function configureAuthorizationRequestEndpoint(router, config) {
             }
             // It's okay to retrieve the offer multiple times. So we only update the state if it's not already retrieved
             if (verificationSession.state !== OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.RequestUriRetrieved) {
-                await verifierService.updateState(agentContext, verificationSession, OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.RequestUriRetrieved);
+                const previousState = verificationSession.state;
+                verificationSession.state = OpenId4VcVerificationSessionState_1.OpenId4VcVerificationSessionState.RequestUriRetrieved;
+                await verificationSessionRepository.update(agentContext, verificationSession);
+                agentContext.dependencyManager
+                    .resolve(core_1.EventEmitter)
+                    .emit(agentContext, {
+                    type: OpenId4VcVerifierEvents_1.OpenId4VcVerifierEvents.VerificationSessionStateChanged,
+                    payload: {
+                        verificationSession: verificationSession.clone(),
+                        previousState,
+                    },
+                });
             }
             response.type('application/oauth-authz-req+jwt').status(200).send(verificationSession.authorizationRequestJwt);
             next();

package/build/openid4vc-verifier/router/authorizationRequestEndpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorizationRequestEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-verifier/router/authorizationRequestEndpoint.ts"],"names":[],"mappings":";;AAoBA,sFAgFC;AAjGD,yCAA6C;AAE7C,gDAA0E;AAC1E,kFAA8E;AAC9E,4FAAwF;AACxF,oFAAgF;AAYhF,SAAgB,qCAAqC,CACnD,MAAc,EACd,MAAuD;IAEvD,MAAM,CAAC,GAAG,CACR,IAAA,mBAAY,EAAC,MAAM,CAAC,YAAY,EAAE,CAAC,yBAAyB,CAAC,CAAC,EAC9D,KAAK,EAAE,OAAqC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACxE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAsB,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YACxG,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,IAAI,EACJ,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,iBAAiB,EACjB,mCAAmC,CACpC,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,2DAA4B,CAAC,CAAA;YAC5F,MAAM,cAAc,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,6DAA6B,CAAC,CAAA;YAE5F,yCAAyC;YACzC,MAAM,2BAA2B,GAAG,IAAA,mBAAY,EAAC,cAAc,CAAC,OAAO,EAAE;gBACvE,QAAQ,CAAC,UAAU;gBACnB,cAAc,CAAC,4BAA4B,CAAC,YAAY;gBACxD,OAAO,CAAC,MAAM,CAAC,sBAAsB;aACtC,CAAC,CAAA;YAEF,MAAM,CAAC,mBAAmB,CAAC,GAAG,MAAM,eAAe,CAAC,+BAA+B,CAAC,YAAY,EAAE;gBAChG,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,uBAAuB,EAAE,2BAA2B;aACrD,CAAC,CAAA;YAEF,2DAA2D;YAC3D,IAAI,CAAC,mBAAmB,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,EAAE,CAAC;gBACzE,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,IAAI,EACJ,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,WAAW,EACX,iCAAiC,CAClC,CAAA;YACH,CAAC;YAED,IACE,CAAC;gBACC,qEAAiC,CAAC,cAAc;gBAChD,qEAAiC,CAAC,mBAAmB;aACtD,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,EACrC,CAAC;gBACD,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,IAAI,EACJ,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,iBAAiB,EACjB,yCAAyC,CAC1C,CAAA;YACH,CAAC;YAED,4GAA4G;YAC5G,IAAI,mBAAmB,CAAC,KAAK,KAAK,qEAAiC,CAAC,mBAAmB,EAAE,CAAC;gBACxF,MAAM,eAAe,CAAC,WAAW,CAC/B,YAAY,EACZ,mBAAmB,EACnB,qEAAiC,CAAC,mBAAmB,CACtD,CAAA;YACH,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;YAC9G,IAAI,EAAE,CAAA;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;QACrG,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"authorizationRequestEndpoint.js","sourceRoot":"","sources":["../../../src/openid4vc-verifier/router/authorizationRequestEndpoint.ts"],"names":[],"mappings":";;AAuBA,sFA2FC;AA9GD,yCAA2D;AAE3D,gDAA0E;AAC1E,kFAA8E;AAC9E,4FAAwF;AACxF,wEAAoE;AACpE,oFAAgF;AAChF,8CAAsE;AAYtE,SAAgB,qCAAqC,CACnD,MAAc,EACd,MAAuD;IAEvD,MAAM,CAAC,GAAG,CACR,IAAA,mBAAY,EAAC,MAAM,CAAC,YAAY,EAAE,CAAC,yBAAyB,CAAC,CAAC,EAC9D,KAAK,EAAE,OAAqC,EAAE,QAAkB,EAAE,IAAI,EAAE,EAAE;QACxE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,CAAA;QAE7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAsB,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YACxG,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,IAAI,EACJ,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,iBAAiB,EACjB,mCAAmC,CACpC,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,2DAA4B,CAAC,CAAA;YAC5F,MAAM,6BAA6B,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAC1E,mDAAsC,CACvC,CAAA;YACD,MAAM,cAAc,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,6DAA6B,CAAC,CAAA;YAE5F,yCAAyC;YACzC,MAAM,2BAA2B,GAAG,IAAA,mBAAY,EAAC,cAAc,CAAC,OAAO,EAAE;gBACvE,QAAQ,CAAC,UAAU;gBACnB,cAAc,CAAC,4BAA4B,CAAC,YAAY;gBACxD,OAAO,CAAC,MAAM,CAAC,sBAAsB;aACtC,CAAC,CAAA;YAEF,MAAM,CAAC,mBAAmB,CAAC,GAAG,MAAM,eAAe,CAAC,+BAA+B,CAAC,YAAY,EAAE;gBAChG,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,uBAAuB,EAAE,2BAA2B;aACrD,CAAC,CAAA;YAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,IAAI,EACJ,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,WAAW,EACX,iCAAiC,CAClC,CAAA;YACH,CAAC;YAED,IACE,CAAC;gBACC,qEAAiC,CAAC,cAAc;gBAChD,qEAAiC,CAAC,mBAAmB;aACtD,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,EACrC,CAAC;gBACD,OAAO,IAAA,0BAAiB,EACtB,QAAQ,EACR,IAAI,EACJ,YAAY,CAAC,MAAM,CAAC,MAAM,EAC1B,GAAG,EACH,iBAAiB,EACjB,yCAAyC,CAC1C,CAAA;YACH,CAAC;YAED,4GAA4G;YAC5G,IAAI,mBAAmB,CAAC,KAAK,KAAK,qEAAiC,CAAC,mBAAmB,EAAE,CAAC;gBACxF,MAAM,aAAa,GAAG,mBAAmB,CAAC,KAAK,CAAA;gBAE/C,mBAAmB,CAAC,KAAK,GAAG,qEAAiC,CAAC,mBAAmB,CAAA;gBACjF,MAAM,6BAA6B,CAAC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA;gBAE7E,YAAY,CAAC,iBAAiB;qBAC3B,OAAO,CAAC,mBAAY,CAAC;qBACrB,IAAI,CAAgD,YAAY,EAAE;oBACjE,IAAI,EAAE,iDAAuB,CAAC,+BAA+B;oBAC7D,OAAO,EAAE;wBACP,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,EAAE;wBAChD,aAAa;qBACd;iBACF,CAAC,CAAA;YACN,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;YAC9G,IAAI,EAAE,CAAA;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;QACrG,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC"}

package/build/shared/callbacks.d.ts

@@ -1,23 +1,15 @@
-import type { OpenId4VcIssuerRecord } from '../openid4vc-issuer/repository';
+import type { ClientAuthenticationCallback, SignJwtCallback, VerifyJwtCallback } from '@animo-id/oauth2';
 import type { AgentContext } from '@credo-ts/core';
-import type { ClientAuthenticationCallback, SignJwtCallback, VerifyJwtCallback, DecryptJweCallback, EncryptJweCallback } from '@openid4vc/oauth2';
-export declare function getOid4vcJwtVerifyCallback(agentContext: AgentContext, trustedCertificates?: string[]): VerifyJwtCallback;
-export declare function getOid4vcEncryptJweCallback(agentContext: AgentContext): EncryptJweCallback;
-export declare function getOid4vcDecryptJweCallback(agentContext: AgentContext): DecryptJweCallback;
-export declare function getOid4vcJwtSignCallback(agentContext: AgentContext): SignJwtCallback;
-export declare function getOid4vcCallbacks(agentContext: AgentContext, trustedCertificates?: string[]): {
-    hash: (data: Uint8Array, alg: import("@openid4vc/oauth2").HashAlgorithm) => Uint8Array;
+import type { OpenId4VcIssuerRecord } from '../openid4vc-issuer/repository';
+export declare function getOid4vciJwtVerifyCallback(agentContext: AgentContext): VerifyJwtCallback;
+export declare function getOid4vciJwtSignCallback(agentContext: AgentContext): SignJwtCallback;
+export declare function getOid4vciCallbacks(agentContext: AgentContext): {
+    hash: (data: Uint8Array, alg: import("@animo-id/oauth2").HashAlgorithm) => Uint8Array;
     generateRandom: (length: number) => Uint8Array;
     signJwt: SignJwtCallback;
     clientAuthentication: () => void;
     verifyJwt: VerifyJwtCallback;
     fetch: typeof fetch;
-    encryptJwe: EncryptJweCallback;
-    decryptJwe: DecryptJweCallback;
-    getX509CertificateMetadata: (certificate: string) => {
-        sanDnsNames: string[];
-        sanUriNames: string[];
-    };
 };
 /**
  * Allows us to authenticate when making requests to an external