@credo-ts/openid4vc 0.6.0-pr-2392-20251010173905 → 0.6.0-pr-2457-20251016083534

package/build/shared/router/context.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"context.mjs","names":[],"sources":["../../../src/shared/router/context.ts"],"sourcesContent":["import type { AgentContext, Logger } from '@credo-ts/core'\nimport type { Oauth2ErrorCodes, Oauth2ServerErrorResponseError } from '@openid4vc/oauth2'\nimport type { NextFunction, Request, Response } from 'express'\n\nimport { CredoError } from '@credo-ts/core'\nimport { Oauth2ResourceUnauthorizedError, SupportedAuthenticationScheme } from '@openid4vc/oauth2'\n\nexport interface OpenId4VcRequest<RC extends Record<string, unknown> = Record<string, never>> extends Request {\n  requestContext?: RC & OpenId4VcRequestContext\n}\n\nexport interface OpenId4VcRequestContext {\n  agentContext: AgentContext\n}\n\nexport function sendUnauthorizedError(\n  response: Response,\n  next: NextFunction,\n  logger: Logger,\n  error: unknown | Oauth2ResourceUnauthorizedError,\n  status?: number\n) {\n  const errorMessage = error instanceof Error ? error.message : error\n  logger.warn(`[OID4VC] Sending authorization error response: ${JSON.stringify(errorMessage)}`, {\n    error,\n  })\n\n  const unauhorizedError =\n    error instanceof Oauth2ResourceUnauthorizedError\n      ? error\n      : new Oauth2ResourceUnauthorizedError('Unknown error occured', [\n          { scheme: SupportedAuthenticationScheme.DPoP },\n          { scheme: SupportedAuthenticationScheme.Bearer },\n        ])\n\n  response\n    .setHeader('WWW-Authenticate', unauhorizedError.toHeaderValue())\n    .status(status ?? 403)\n    .send()\n  next(error)\n}\n\nexport function sendOauth2ErrorResponse(\n  response: Response,\n  next: NextFunction,\n  logger: Logger,\n  error: Oauth2ServerErrorResponseError\n) {\n  logger.warn(`[OID4VC] Sending oauth2 error response: ${JSON.stringify(error.message)}`, {\n    error,\n  })\n\n  response.status(error.status).json(error.errorResponse)\n  next(error)\n}\nexport function sendUnknownServerErrorResponse(\n  response: Response,\n  next: NextFunction,\n  logger: Logger,\n  error: unknown,\n  additionalParams: Record<string, unknown> = {}\n) {\n  logger.error('[OID4VC] Sending unknown server error response', {\n    error,\n  })\n\n  response.status(500).json({\n    error: 'server_error',\n    ...additionalParams,\n  })\n\n  const throwError =\n    error instanceof Error ? error : new CredoError('Unknown error in openid4vc error response handler')\n  next(throwError)\n}\n\nexport function sendNotFoundResponse(response: Response, next: NextFunction, logger: Logger, internalReason: string) {\n  logger.debug(`[OID4VC] Sending not found response: ${internalReason}`)\n\n  response.status(404).send()\n  next(new CredoError(internalReason))\n}\n\nexport function sendErrorResponse(\n  response: Response,\n  next: NextFunction,\n  logger: Logger,\n  status: number,\n  errorCode: Oauth2ErrorCodes | string,\n  errorDescription?: string,\n  additionalPayload?: Record<string, unknown>,\n  error?: Error\n) {\n  const body = {\n    error: errorCode,\n    error_description: errorDescription,\n    ...additionalPayload,\n  }\n  logger.warn(`[OID4VC] Sending error response: ${JSON.stringify(body)}`, {\n    error,\n  })\n\n  response.status(status).json(body)\n\n  const throwError =\n    error instanceof Error ? error : new CredoError('Unknown error in openid4vc error response handler')\n  next(throwError)\n}\n\nexport function sendJsonResponse(\n  response: Response,\n  next: NextFunction,\n  // biome-ignore lint/suspicious/noExplicitAny: <explanation>\n  body: any,\n  contentType?: string,\n  status?: number\n) {\n  response\n    .setHeader('Content-Type', contentType ?? 'application/json')\n    .status(status ?? 200)\n    .send(JSON.stringify(body))\n\n  next()\n}\n\n// biome-ignore lint/suspicious/noExplicitAny: <explanation>\nexport function getRequestContext<T extends OpenId4VcRequest<any>>(request: T): NonNullable<T['requestContext']> {\n  const requestContext = request.requestContext\n  if (!requestContext) throw new CredoError('Request context not set.')\n\n  return requestContext\n}\n"],"mappings":";;;;AAeA,SAAgB,sBACd,UACA,MACA,QACA,OACA,QACA;CACA,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU;AAC9D,QAAO,KAAK,kDAAkD,KAAK,UAAU,aAAa,IAAI,EAC5F,OACD,CAAC;CAEF,MAAM,mBACJ,iBAAiB,kCACb,QACA,IAAI,gCAAgC,yBAAyB,CAC3D,EAAE,QAAQ,8BAA8B,MAAM,EAC9C,EAAE,QAAQ,8BAA8B,QAAQ,CACjD,CAAC;AAER,UACG,UAAU,oBAAoB,iBAAiB,eAAe,CAAC,CAC/D,OAAO,UAAU,IAAI,CACrB,MAAM;AACT,MAAK,MAAM;;AAGb,SAAgB,wBACd,UACA,MACA,QACA,OACA;AACA,QAAO,KAAK,2CAA2C,KAAK,UAAU,MAAM,QAAQ,IAAI,EACtF,OACD,CAAC;AAEF,UAAS,OAAO,MAAM,OAAO,CAAC,KAAK,MAAM,cAAc;AACvD,MAAK,MAAM;;AAEb,SAAgB,+BACd,UACA,MACA,QACA,OACA,mBAA4C,EAAE,EAC9C;AACA,QAAO,MAAM,kDAAkD,EAC7D,OACD,CAAC;AAEF,UAAS,OAAO,IAAI,CAAC,KAAK;EACxB,OAAO;EACP,GAAG;EACJ,CAAC;AAIF,MADE,iBAAiB,QAAQ,QAAQ,IAAI,WAAW,oDAAoD,CACtF;;AAGlB,SAAgB,qBAAqB,UAAoB,MAAoB,QAAgB,gBAAwB;AACnH,QAAO,MAAM,wCAAwC,iBAAiB;AAEtE,UAAS,OAAO,IAAI,CAAC,MAAM;AAC3B,MAAK,IAAI,WAAW,eAAe,CAAC;;AAGtC,SAAgB,kBACd,UACA,MACA,QACA,QACA,WACA,kBACA,mBACA,OACA;CACA,MAAM,OAAO;EACX,OAAO;EACP,mBAAmB;EACnB,GAAG;EACJ;AACD,QAAO,KAAK,oCAAoC,KAAK,UAAU,KAAK,IAAI,EACtE,OACD,CAAC;AAEF,UAAS,OAAO,OAAO,CAAC,KAAK,KAAK;AAIlC,MADE,iBAAiB,QAAQ,QAAQ,IAAI,WAAW,oDAAoD,CACtF;;AAGlB,SAAgB,iBACd,UACA,MAEA,MACA,aACA,QACA;AACA,UACG,UAAU,gBAAgB,eAAe,mBAAmB,CAC5D,OAAO,UAAU,IAAI,CACrB,KAAK,KAAK,UAAU,KAAK,CAAC;AAE7B,OAAM;;AAIR,SAAgB,kBAAmD,SAA8C;CAC/G,MAAM,iBAAiB,QAAQ;AAC/B,KAAI,CAAC,eAAgB,OAAM,IAAI,WAAW,2BAA2B;AAErE,QAAO"}
+{"version":3,"file":"context.mjs","names":[],"sources":["../../../src/shared/router/context.ts"],"sourcesContent":["import type { AgentContext, Logger } from '@credo-ts/core'\nimport { CredoError } from '@credo-ts/core'\nimport type { Oauth2ErrorCodes, Oauth2ServerErrorResponseError } from '@openid4vc/oauth2'\nimport { Oauth2ResourceUnauthorizedError, SupportedAuthenticationScheme } from '@openid4vc/oauth2'\nimport type { NextFunction, Request, Response } from 'express'\n\nexport interface OpenId4VcRequest<RC extends Record<string, unknown> = Record<string, never>> extends Request {\n  requestContext?: RC & OpenId4VcRequestContext\n}\n\nexport interface OpenId4VcRequestContext {\n  agentContext: AgentContext\n}\n\nexport function sendUnauthorizedError(\n  response: Response,\n  next: NextFunction,\n  logger: Logger,\n  error: unknown | Oauth2ResourceUnauthorizedError,\n  status?: number\n) {\n  const errorMessage = error instanceof Error ? error.message : error\n  logger.warn(`[OID4VC] Sending authorization error response: ${JSON.stringify(errorMessage)}`, {\n    error,\n  })\n\n  const unauhorizedError =\n    error instanceof Oauth2ResourceUnauthorizedError\n      ? error\n      : new Oauth2ResourceUnauthorizedError('Unknown error occured', [\n          { scheme: SupportedAuthenticationScheme.DPoP },\n          { scheme: SupportedAuthenticationScheme.Bearer },\n        ])\n\n  response\n    .setHeader('WWW-Authenticate', unauhorizedError.toHeaderValue())\n    .status(status ?? 403)\n    .send()\n  next(error)\n}\n\nexport function sendOauth2ErrorResponse(\n  response: Response,\n  next: NextFunction,\n  logger: Logger,\n  error: Oauth2ServerErrorResponseError\n) {\n  logger.warn(`[OID4VC] Sending oauth2 error response: ${JSON.stringify(error.message)}`, {\n    error,\n  })\n\n  response.status(error.status).json(error.errorResponse)\n  next(error)\n}\nexport function sendUnknownServerErrorResponse(\n  response: Response,\n  next: NextFunction,\n  logger: Logger,\n  error: unknown,\n  additionalParams: Record<string, unknown> = {}\n) {\n  logger.error('[OID4VC] Sending unknown server error response', {\n    error,\n  })\n\n  response.status(500).json({\n    error: 'server_error',\n    ...additionalParams,\n  })\n\n  const throwError =\n    error instanceof Error ? error : new CredoError('Unknown error in openid4vc error response handler')\n  next(throwError)\n}\n\nexport function sendNotFoundResponse(response: Response, next: NextFunction, logger: Logger, internalReason: string) {\n  logger.debug(`[OID4VC] Sending not found response: ${internalReason}`)\n\n  response.status(404).send()\n  next(new CredoError(internalReason))\n}\n\nexport function sendErrorResponse(\n  response: Response,\n  next: NextFunction,\n  logger: Logger,\n  status: number,\n  errorCode: Oauth2ErrorCodes | string,\n  errorDescription?: string,\n  additionalPayload?: Record<string, unknown>,\n  error?: Error\n) {\n  const body = {\n    error: errorCode,\n    error_description: errorDescription,\n    ...additionalPayload,\n  }\n  logger.warn(`[OID4VC] Sending error response: ${JSON.stringify(body)}`, {\n    error,\n  })\n\n  response.status(status).json(body)\n\n  const throwError =\n    error instanceof Error ? error : new CredoError('Unknown error in openid4vc error response handler')\n  next(throwError)\n}\n\nexport function sendJsonResponse(\n  response: Response,\n  next: NextFunction,\n  // biome-ignore lint/suspicious/noExplicitAny: no explanation\n  body: any,\n  contentType?: string,\n  status?: number\n) {\n  response\n    .setHeader('Content-Type', contentType ?? 'application/json')\n    .status(status ?? 200)\n    .send(JSON.stringify(body))\n\n  next()\n}\n\n// biome-ignore lint/suspicious/noExplicitAny: no explanation\nexport function getRequestContext<T extends OpenId4VcRequest<any>>(request: T): NonNullable<T['requestContext']> {\n  const requestContext = request.requestContext\n  if (!requestContext) throw new CredoError('Request context not set.')\n\n  return requestContext\n}\n"],"mappings":";;;;AAcA,SAAgB,sBACd,UACA,MACA,QACA,OACA,QACA;CACA,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU;AAC9D,QAAO,KAAK,kDAAkD,KAAK,UAAU,aAAa,IAAI,EAC5F,OACD,CAAC;CAEF,MAAM,mBACJ,iBAAiB,kCACb,QACA,IAAI,gCAAgC,yBAAyB,CAC3D,EAAE,QAAQ,8BAA8B,MAAM,EAC9C,EAAE,QAAQ,8BAA8B,QAAQ,CACjD,CAAC;AAER,UACG,UAAU,oBAAoB,iBAAiB,eAAe,CAAC,CAC/D,OAAO,UAAU,IAAI,CACrB,MAAM;AACT,MAAK,MAAM;;AAGb,SAAgB,wBACd,UACA,MACA,QACA,OACA;AACA,QAAO,KAAK,2CAA2C,KAAK,UAAU,MAAM,QAAQ,IAAI,EACtF,OACD,CAAC;AAEF,UAAS,OAAO,MAAM,OAAO,CAAC,KAAK,MAAM,cAAc;AACvD,MAAK,MAAM;;AAEb,SAAgB,+BACd,UACA,MACA,QACA,OACA,mBAA4C,EAAE,EAC9C;AACA,QAAO,MAAM,kDAAkD,EAC7D,OACD,CAAC;AAEF,UAAS,OAAO,IAAI,CAAC,KAAK;EACxB,OAAO;EACP,GAAG;EACJ,CAAC;AAIF,MADE,iBAAiB,QAAQ,QAAQ,IAAI,WAAW,oDAAoD,CACtF;;AAGlB,SAAgB,qBAAqB,UAAoB,MAAoB,QAAgB,gBAAwB;AACnH,QAAO,MAAM,wCAAwC,iBAAiB;AAEtE,UAAS,OAAO,IAAI,CAAC,MAAM;AAC3B,MAAK,IAAI,WAAW,eAAe,CAAC;;AAGtC,SAAgB,kBACd,UACA,MACA,QACA,QACA,WACA,kBACA,mBACA,OACA;CACA,MAAM,OAAO;EACX,OAAO;EACP,mBAAmB;EACnB,GAAG;EACJ;AACD,QAAO,KAAK,oCAAoC,KAAK,UAAU,KAAK,IAAI,EACtE,OACD,CAAC;AAEF,UAAS,OAAO,OAAO,CAAC,KAAK,KAAK;AAIlC,MADE,iBAAiB,QAAQ,QAAQ,IAAI,WAAW,oDAAoD,CACtF;;AAGlB,SAAgB,iBACd,UACA,MAEA,MACA,aACA,QACA;AACA,UACG,UAAU,gBAAgB,eAAe,mBAAmB,CAC5D,OAAO,UAAU,IAAI,CACrB,KAAK,KAAK,UAAU,KAAK,CAAC;AAE7B,OAAM;;AAIR,SAAgB,kBAAmD,SAA8C;CAC/G,MAAM,iBAAiB,QAAQ;AAC/B,KAAI,CAAC,eAAgB,OAAM,IAAI,WAAW,2BAA2B;AAErE,QAAO"}

package/build/shared/router/index.js

@@ -1,3 +1,3 @@
-const require_express = require('./express.js');
 const require_context = require('./context.js');
+const require_express = require('./express.js');
 const require_tenants = require('./tenants.js');

package/build/shared/router/index.mjs

@@ -1,3 +1,3 @@
-import { importExpress } from "./express.mjs";
 import { getRequestContext, sendErrorResponse, sendJsonResponse, sendNotFoundResponse, sendOauth2ErrorResponse, sendUnauthorizedError, sendUnknownServerErrorResponse } from "./context.mjs";
+import { importExpress } from "./express.mjs";
 import { getAgentContextForActorId, storeActorIdForContextCorrelationId } from "./tenants.mjs";

package/build/shared/router/tenants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tenants.mjs","names":[],"sources":["../../../src/shared/router/tenants.ts"],"sourcesContent":["import type { AgentContext, AgentContextProvider } from '@credo-ts/core'\nimport type { TenantsModule } from '@credo-ts/tenants'\n\nimport { InjectionSymbols, getApiForModuleByName } from '@credo-ts/core'\n\nconst OPENID4VC_ACTOR_IDS_METADATA_KEY = '_openid4vc/openId4VcActorIds'\n\nexport async function getAgentContextForActorId(rootAgentContext: AgentContext, actorId: string) {\n  // Check if multi-tenancy is enabled, and if so find the associated multi-tenant record\n  // This is a bit hacky as it uses the tenants module to store the openid4vc actor id\n  // but this way we don't have to expose the contextCorrelationId in the openid metadata\n  const tenantsApi = getApiForModuleByName<TenantsModule>(rootAgentContext, 'TenantsModule')\n  if (tenantsApi) {\n    const [tenant] = await tenantsApi.findTenantsByQuery({\n      [OPENID4VC_ACTOR_IDS_METADATA_KEY]: [actorId],\n    })\n\n    if (tenant) {\n      const agentContextProvider = rootAgentContext.dependencyManager.resolve<AgentContextProvider>(\n        InjectionSymbols.AgentContextProvider\n      )\n      return agentContextProvider.getAgentContextForContextCorrelationId(`tenant-${tenant.id}`)\n    }\n  }\n\n  return rootAgentContext\n}\n\n/**\n * Store the actor id associated with a context correlation id. If multi-tenancy is not used\n * this method won't do anything as we can just use the actor from the default context. However\n * if multi-tenancy is used, we will store the actor id in the tenant record metadata so it can\n * be queried when a request comes in for the specific actor id.\n *\n * The reason for doing this is that we don't want to expose the context correlation id in the\n * actor metadata url, as it is then possible to see exactly which actors are registered under\n * the same agent.\n */\nexport async function storeActorIdForContextCorrelationId(agentContext: AgentContext, actorId: string) {\n  // It's kind of hacky, but we add support for the tenants module specifically here to map an actorId to\n  // a specific tenant. Otherwise we have to expose /:contextCorrelationId/:actorId in all the public URLs\n  // which is of course not so nice.\n  const tenantsApi = getApiForModuleByName<TenantsModule>(agentContext, 'TenantsModule')\n\n  // We don't want to query the tenant record if the current context is the root context\n  if (tenantsApi && tenantsApi.rootAgentContext.contextCorrelationId !== agentContext.contextCorrelationId) {\n    const tenantRecord = await tenantsApi.getTenantById(agentContext.contextCorrelationId.replace('tenant-', ''))\n\n    const currentOpenId4VcActorIds = tenantRecord.metadata.get<string[]>(OPENID4VC_ACTOR_IDS_METADATA_KEY) ?? []\n    const openId4VcActorIds = [...currentOpenId4VcActorIds, actorId]\n\n    tenantRecord.metadata.set(OPENID4VC_ACTOR_IDS_METADATA_KEY, openId4VcActorIds)\n    tenantRecord.setTag(OPENID4VC_ACTOR_IDS_METADATA_KEY, openId4VcActorIds)\n    await tenantsApi.updateTenant(tenantRecord)\n  }\n}\n"],"mappings":";;;AAKA,MAAM,mCAAmC;AAEzC,eAAsB,0BAA0B,kBAAgC,SAAiB;CAI/F,MAAM,aAAa,sBAAqC,kBAAkB,gBAAgB;AAC1F,KAAI,YAAY;EACd,MAAM,CAAC,UAAU,MAAM,WAAW,mBAAmB,GAClD,mCAAmC,CAAC,QAAQ,EAC9C,CAAC;AAEF,MAAI,OAIF,QAH6B,iBAAiB,kBAAkB,QAC9D,iBAAiB,qBAClB,CAC2B,uCAAuC,UAAU,OAAO,KAAK;;AAI7F,QAAO;;;;;;;;;;;;AAaT,eAAsB,oCAAoC,cAA4B,SAAiB;CAIrG,MAAM,aAAa,sBAAqC,cAAc,gBAAgB;AAGtF,KAAI,cAAc,WAAW,iBAAiB,yBAAyB,aAAa,sBAAsB;EACxG,MAAM,eAAe,MAAM,WAAW,cAAc,aAAa,qBAAqB,QAAQ,WAAW,GAAG,CAAC;EAG7G,MAAM,oBAAoB,CAAC,GADM,aAAa,SAAS,IAAc,iCAAiC,IAAI,EAAE,EACpD,QAAQ;AAEhE,eAAa,SAAS,IAAI,kCAAkC,kBAAkB;AAC9E,eAAa,OAAO,kCAAkC,kBAAkB;AACxE,QAAM,WAAW,aAAa,aAAa"}
+{"version":3,"file":"tenants.mjs","names":[],"sources":["../../../src/shared/router/tenants.ts"],"sourcesContent":["import type { AgentContext, AgentContextProvider } from '@credo-ts/core'\nimport { getApiForModuleByName, InjectionSymbols } from '@credo-ts/core'\nimport type { TenantsModule } from '@credo-ts/tenants'\n\nconst OPENID4VC_ACTOR_IDS_METADATA_KEY = '_openid4vc/openId4VcActorIds'\n\nexport async function getAgentContextForActorId(rootAgentContext: AgentContext, actorId: string) {\n  // Check if multi-tenancy is enabled, and if so find the associated multi-tenant record\n  // This is a bit hacky as it uses the tenants module to store the openid4vc actor id\n  // but this way we don't have to expose the contextCorrelationId in the openid metadata\n  const tenantsApi = getApiForModuleByName<TenantsModule>(rootAgentContext, 'TenantsModule')\n  if (tenantsApi) {\n    const [tenant] = await tenantsApi.findTenantsByQuery({\n      [OPENID4VC_ACTOR_IDS_METADATA_KEY]: [actorId],\n    })\n\n    if (tenant) {\n      const agentContextProvider = rootAgentContext.dependencyManager.resolve<AgentContextProvider>(\n        InjectionSymbols.AgentContextProvider\n      )\n      return agentContextProvider.getAgentContextForContextCorrelationId(`tenant-${tenant.id}`)\n    }\n  }\n\n  return rootAgentContext\n}\n\n/**\n * Store the actor id associated with a context correlation id. If multi-tenancy is not used\n * this method won't do anything as we can just use the actor from the default context. However\n * if multi-tenancy is used, we will store the actor id in the tenant record metadata so it can\n * be queried when a request comes in for the specific actor id.\n *\n * The reason for doing this is that we don't want to expose the context correlation id in the\n * actor metadata url, as it is then possible to see exactly which actors are registered under\n * the same agent.\n */\nexport async function storeActorIdForContextCorrelationId(agentContext: AgentContext, actorId: string) {\n  // It's kind of hacky, but we add support for the tenants module specifically here to map an actorId to\n  // a specific tenant. Otherwise we have to expose /:contextCorrelationId/:actorId in all the public URLs\n  // which is of course not so nice.\n  const tenantsApi = getApiForModuleByName<TenantsModule>(agentContext, 'TenantsModule')\n\n  // We don't want to query the tenant record if the current context is the root context\n  if (tenantsApi && tenantsApi.rootAgentContext.contextCorrelationId !== agentContext.contextCorrelationId) {\n    const tenantRecord = await tenantsApi.getTenantById(agentContext.contextCorrelationId.replace('tenant-', ''))\n\n    const currentOpenId4VcActorIds = tenantRecord.metadata.get<string[]>(OPENID4VC_ACTOR_IDS_METADATA_KEY) ?? []\n    const openId4VcActorIds = [...currentOpenId4VcActorIds, actorId]\n\n    tenantRecord.metadata.set(OPENID4VC_ACTOR_IDS_METADATA_KEY, openId4VcActorIds)\n    tenantRecord.setTag(OPENID4VC_ACTOR_IDS_METADATA_KEY, openId4VcActorIds)\n    await tenantsApi.updateTenant(tenantRecord)\n  }\n}\n"],"mappings":";;;AAIA,MAAM,mCAAmC;AAEzC,eAAsB,0BAA0B,kBAAgC,SAAiB;CAI/F,MAAM,aAAa,sBAAqC,kBAAkB,gBAAgB;AAC1F,KAAI,YAAY;EACd,MAAM,CAAC,UAAU,MAAM,WAAW,mBAAmB,GAClD,mCAAmC,CAAC,QAAQ,EAC9C,CAAC;AAEF,MAAI,OAIF,QAH6B,iBAAiB,kBAAkB,QAC9D,iBAAiB,qBAClB,CAC2B,uCAAuC,UAAU,OAAO,KAAK;;AAI7F,QAAO;;;;;;;;;;;;AAaT,eAAsB,oCAAoC,cAA4B,SAAiB;CAIrG,MAAM,aAAa,sBAAqC,cAAc,gBAAgB;AAGtF,KAAI,cAAc,WAAW,iBAAiB,yBAAyB,aAAa,sBAAsB;EACxG,MAAM,eAAe,MAAM,WAAW,cAAc,aAAa,qBAAqB,QAAQ,WAAW,GAAG,CAAC;EAG7G,MAAM,oBAAoB,CAAC,GADM,aAAa,SAAS,IAAc,iCAAiC,IAAI,EAAE,EACpD,QAAQ;AAEhE,eAAa,SAAS,IAAI,kCAAkC,kBAAkB;AAC9E,eAAa,OAAO,kCAAkC,kBAAkB;AACxE,QAAM,WAAW,aAAa,aAAa"}

package/build/shared/utils.js

@@ -54,12 +54,6 @@ function getProofTypeFromPublicJwk(agentContext, key) {
 	if (supportedSignatureSuites.length === 0) throw new __credo_ts_core.CredoError(`Couldn't find a supported signature suite for the given key ${key.jwkTypehumanDescription}.`);
 	return supportedSignatureSuites[0].proofType;
 }
-function addSecondsToDate(date, seconds) {
-	return new Date(date.getTime() + seconds * 1e3);
-}
-function dateToSeconds(date) {
-	return Math.floor(date.getTime() / 1e3);
-}
 function dcqlCredentialQueryToPresentationFormat(credential) {
 	switch (credential.format) {
 		case "dc+sd-jwt": return __credo_ts_core.ClaimFormat.SdJwtDc;
@@ -73,8 +67,6 @@ function dcqlCredentialQueryToPresentationFormat(credential) {
 }
 
 //#endregion
-exports.addSecondsToDate = addSecondsToDate;
-exports.dateToSeconds = dateToSeconds;
 exports.dcqlCredentialQueryToPresentationFormat = dcqlCredentialQueryToPresentationFormat;
 exports.getProofTypeFromPublicJwk = getProofTypeFromPublicJwk;
 exports.getPublicJwkFromDid = getPublicJwkFromDid;

package/build/shared/utils.mjs

@@ -52,12 +52,6 @@ function getProofTypeFromPublicJwk(agentContext, key) {
 	if (supportedSignatureSuites.length === 0) throw new CredoError(`Couldn't find a supported signature suite for the given key ${key.jwkTypehumanDescription}.`);
 	return supportedSignatureSuites[0].proofType;
 }
-function addSecondsToDate(date, seconds) {
-	return new Date(date.getTime() + seconds * 1e3);
-}
-function dateToSeconds(date) {
-	return Math.floor(date.getTime() / 1e3);
-}
 function dcqlCredentialQueryToPresentationFormat(credential) {
 	switch (credential.format) {
 		case "dc+sd-jwt": return ClaimFormat.SdJwtDc;
@@ -71,5 +65,5 @@ function dcqlCredentialQueryToPresentationFormat(credential) {
 }
 
 //#endregion
-export { addSecondsToDate, dateToSeconds, dcqlCredentialQueryToPresentationFormat, getProofTypeFromPublicJwk, getPublicJwkFromDid, getSupportedJwaSignatureAlgorithms, requestSignerToJwtIssuer };
+export { dcqlCredentialQueryToPresentationFormat, getProofTypeFromPublicJwk, getPublicJwkFromDid, getSupportedJwaSignatureAlgorithms, requestSignerToJwtIssuer };
 //# sourceMappingURL=utils.mjs.map

package/build/shared/utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.mjs","names":[],"sources":["../../src/shared/utils.ts"],"sourcesContent":["import { AgentContext, ClaimFormat, type DcqlQuery, type DidPurpose, Kms } from '@credo-ts/core'\nimport type { Jwk, JwtSigner, JwtSignerX5c } from '@openid4vc/oauth2'\nimport type { OpenId4VcJwtIssuer } from './models'\n\nimport {\n  CredoError,\n  DidsApi,\n  SignatureSuiteRegistry,\n  getDomainFromUrl,\n  getPublicJwkFromVerificationMethod,\n} from '@credo-ts/core'\n\n/**\n * Returns the JWA Signature Algorithms that are supported by the wallet.\n */\nexport function getSupportedJwaSignatureAlgorithms(agentContext: AgentContext): Kms.KnownJwaSignatureAlgorithm[] {\n  const kms = agentContext.resolve(Kms.KeyManagementApi)\n\n  // If we can sign with an algorithm we assume it's supported (also for verification)\n  const supportedJwaSignatureAlgorithms = Object.values(Kms.KnownJwaSignatureAlgorithms).filter(\n    (algorithm) => kms.supportedBackendsForOperation({ operation: 'sign', algorithm }).length > 0\n  )\n\n  return supportedJwaSignatureAlgorithms\n}\n\nexport async function getPublicJwkFromDid(\n  agentContext: AgentContext,\n  didUrl: string,\n  allowedPurposes: DidPurpose[] = ['authentication']\n) {\n  const didsApi = agentContext.dependencyManager.resolve(DidsApi)\n  const didDocument = await didsApi.resolveDidDocument(didUrl)\n  const verificationMethod = didDocument.dereferenceKey(didUrl, allowedPurposes)\n\n  return getPublicJwkFromVerificationMethod(verificationMethod)\n}\n\nexport async function requestSignerToJwtIssuer(\n  agentContext: AgentContext,\n  requestSigner: OpenId4VcJwtIssuer\n): Promise<Exclude<JwtSigner, JwtSignerX5c> | (JwtSignerX5c & { issuer: string })> {\n  if (requestSigner.method === 'did') {\n    const dids = agentContext.resolve(DidsApi)\n    const { publicJwk } = await dids.resolveVerificationMethodFromCreatedDidRecord(requestSigner.didUrl)\n\n    return {\n      method: requestSigner.method,\n      didUrl: requestSigner.didUrl,\n      alg: publicJwk.signatureAlgorithm,\n      kid: publicJwk.keyId,\n    }\n  }\n  if (requestSigner.method === 'x5c') {\n    const leafCertificate = requestSigner.x5c[0]\n    if (!leafCertificate) {\n      throw new CredoError('Unable to extract leaf certificate, x5c certificate chain is empty')\n    }\n\n    if (\n      !requestSigner.issuer.startsWith('https://') &&\n      !(requestSigner.issuer.startsWith('http://') && agentContext.config.allowInsecureHttpUrls)\n    ) {\n      throw new CredoError('The X509 certificate issuer must be a HTTPS URI.')\n    }\n\n    if (\n      !leafCertificate.sanUriNames.includes(requestSigner.issuer) &&\n      !leafCertificate.sanDnsNames.includes(getDomainFromUrl(requestSigner.issuer))\n    ) {\n      const sanUriMessage =\n        leafCertificate.sanUriNames.length > 0\n          ? `SAN-URI names are ${leafCertificate.sanUriNames.join(', ')}`\n          : 'there are no SAN-URI names'\n      const sanDnsMessage =\n        leafCertificate.sanDnsNames.length > 0\n          ? `SAN-DNS names are ${leafCertificate.sanDnsNames.join(', ')}`\n          : 'there are no SAN-DNS names'\n      throw new Error(\n        `The 'iss' claim in the payload does not match a 'SAN-URI' or 'SAN-DNS' name in the x5c certificate. 'iss' value is '${requestSigner.issuer}', ${sanUriMessage}, ${sanDnsMessage} (for SAN-DNS only domain has to match)`\n      )\n    }\n\n    return {\n      ...requestSigner,\n      x5c: requestSigner.x5c.map((certificate) => certificate.toString('base64')),\n      alg: leafCertificate.publicJwk.signatureAlgorithm,\n      kid: leafCertificate.publicJwk.keyId,\n    }\n  }\n  if (requestSigner.method === 'jwk') {\n    return {\n      ...requestSigner,\n      publicJwk: requestSigner.jwk.toJson() as Jwk,\n      alg: requestSigner.jwk.signatureAlgorithm,\n    }\n  }\n\n  throw new CredoError(`Unsupported jwt issuer method '${(requestSigner as OpenId4VcJwtIssuer).method}'`)\n}\n\nexport function getProofTypeFromPublicJwk(agentContext: AgentContext, key: Kms.PublicJwk) {\n  const signatureSuiteRegistry = agentContext.dependencyManager.resolve(SignatureSuiteRegistry)\n\n  const supportedSignatureSuites = signatureSuiteRegistry.getAllByPublicJwkType(key)\n  if (supportedSignatureSuites.length === 0) {\n    throw new CredoError(`Couldn't find a supported signature suite for the given key ${key.jwkTypehumanDescription}.`)\n  }\n\n  return supportedSignatureSuites[0].proofType\n}\n\nexport function addSecondsToDate(date: Date, seconds: number) {\n  return new Date(date.getTime() + seconds * 1000)\n}\n\nexport function dateToSeconds(date: Date) {\n  return Math.floor(date.getTime() / 1000)\n}\n\nexport function parseIfJson<T>(input: T): T | Record<string, unknown> {\n  if (typeof input !== 'string') {\n    return input\n  }\n\n  try {\n    // Try to parse the string as JSON\n    return JSON.parse(input)\n  } catch (_error) {\n    /* empty */\n  }\n\n  return input\n}\n\nexport function dcqlCredentialQueryToPresentationFormat(credential: DcqlQuery['credentials'][number]) {\n  switch (credential.format) {\n    case 'dc+sd-jwt':\n      return ClaimFormat.SdJwtDc\n    case 'vc+sd-jwt':\n      if (credential.meta && 'type_values' in credential.meta) {\n        return ClaimFormat.SdJwtW3cVp\n      }\n\n      return ClaimFormat.SdJwtDc\n    case 'jwt_vc_json':\n      return ClaimFormat.JwtVp\n    case 'ldp_vc':\n      return ClaimFormat.LdpVp\n    case 'mso_mdoc':\n      return ClaimFormat.MsoMdoc\n  }\n}\n"],"mappings":";;;;;;AAeA,SAAgB,mCAAmC,cAA8D;CAC/G,MAAM,MAAM,aAAa,QAAQ,IAAI,iBAAiB;AAOtD,QAJwC,OAAO,OAAO,IAAI,4BAA4B,CAAC,QACpF,cAAc,IAAI,8BAA8B;EAAE,WAAW;EAAQ;EAAW,CAAC,CAAC,SAAS,EAC7F;;AAKH,eAAsB,oBACpB,cACA,QACA,kBAAgC,CAAC,iBAAiB,EAClD;AAKA,QAAO,oCAHa,MADJ,aAAa,kBAAkB,QAAQ,QAAQ,CAC7B,mBAAmB,OAAO,EACrB,eAAe,QAAQ,gBAAgB,CAEjB;;AAG/D,eAAsB,yBACpB,cACA,eACiF;AACjF,KAAI,cAAc,WAAW,OAAO;EAElC,MAAM,EAAE,cAAc,MADT,aAAa,QAAQ,QAAQ,CACT,8CAA8C,cAAc,OAAO;AAEpG,SAAO;GACL,QAAQ,cAAc;GACtB,QAAQ,cAAc;GACtB,KAAK,UAAU;GACf,KAAK,UAAU;GAChB;;AAEH,KAAI,cAAc,WAAW,OAAO;EAClC,MAAM,kBAAkB,cAAc,IAAI;AAC1C,MAAI,CAAC,gBACH,OAAM,IAAI,WAAW,qEAAqE;AAG5F,MACE,CAAC,cAAc,OAAO,WAAW,WAAW,IAC5C,EAAE,cAAc,OAAO,WAAW,UAAU,IAAI,aAAa,OAAO,uBAEpE,OAAM,IAAI,WAAW,mDAAmD;AAG1E,MACE,CAAC,gBAAgB,YAAY,SAAS,cAAc,OAAO,IAC3D,CAAC,gBAAgB,YAAY,SAAS,iBAAiB,cAAc,OAAO,CAAC,EAC7E;GACA,MAAM,gBACJ,gBAAgB,YAAY,SAAS,IACjC,qBAAqB,gBAAgB,YAAY,KAAK,KAAK,KAC3D;GACN,MAAM,gBACJ,gBAAgB,YAAY,SAAS,IACjC,qBAAqB,gBAAgB,YAAY,KAAK,KAAK,KAC3D;AACN,SAAM,IAAI,MACR,uHAAuH,cAAc,OAAO,KAAK,cAAc,IAAI,cAAc,yCAClL;;AAGH,SAAO;GACL,GAAG;GACH,KAAK,cAAc,IAAI,KAAK,gBAAgB,YAAY,SAAS,SAAS,CAAC;GAC3E,KAAK,gBAAgB,UAAU;GAC/B,KAAK,gBAAgB,UAAU;GAChC;;AAEH,KAAI,cAAc,WAAW,MAC3B,QAAO;EACL,GAAG;EACH,WAAW,cAAc,IAAI,QAAQ;EACrC,KAAK,cAAc,IAAI;EACxB;AAGH,OAAM,IAAI,WAAW,kCAAmC,cAAqC,OAAO,GAAG;;AAGzG,SAAgB,0BAA0B,cAA4B,KAAoB;CAGxF,MAAM,2BAFyB,aAAa,kBAAkB,QAAQ,uBAAuB,CAErC,sBAAsB,IAAI;AAClF,KAAI,yBAAyB,WAAW,EACtC,OAAM,IAAI,WAAW,+DAA+D,IAAI,wBAAwB,GAAG;AAGrH,QAAO,yBAAyB,GAAG;;AAGrC,SAAgB,iBAAiB,MAAY,SAAiB;AAC5D,QAAO,IAAI,KAAK,KAAK,SAAS,GAAG,UAAU,IAAK;;AAGlD,SAAgB,cAAc,MAAY;AACxC,QAAO,KAAK,MAAM,KAAK,SAAS,GAAG,IAAK;;AAkB1C,SAAgB,wCAAwC,YAA8C;AACpG,SAAQ,WAAW,QAAnB;EACE,KAAK,YACH,QAAO,YAAY;EACrB,KAAK;AACH,OAAI,WAAW,QAAQ,iBAAiB,WAAW,KACjD,QAAO,YAAY;AAGrB,UAAO,YAAY;EACrB,KAAK,cACH,QAAO,YAAY;EACrB,KAAK,SACH,QAAO,YAAY;EACrB,KAAK,WACH,QAAO,YAAY"}
+{"version":3,"file":"utils.mjs","names":[],"sources":["../../src/shared/utils.ts"],"sourcesContent":["import {\n  AgentContext,\n  ClaimFormat,\n  CredoError,\n  type DcqlQuery,\n  type DidPurpose,\n  DidsApi,\n  getDomainFromUrl,\n  getPublicJwkFromVerificationMethod,\n  Kms,\n  SignatureSuiteRegistry,\n} from '@credo-ts/core'\nimport type { Jwk, JwtSigner, JwtSignerX5c } from '@openid4vc/oauth2'\nimport type { OpenId4VcJwtIssuer } from './models'\n\n/**\n * Returns the JWA Signature Algorithms that are supported by the wallet.\n */\nexport function getSupportedJwaSignatureAlgorithms(agentContext: AgentContext): Kms.KnownJwaSignatureAlgorithm[] {\n  const kms = agentContext.resolve(Kms.KeyManagementApi)\n\n  // If we can sign with an algorithm we assume it's supported (also for verification)\n  const supportedJwaSignatureAlgorithms = Object.values(Kms.KnownJwaSignatureAlgorithms).filter(\n    (algorithm) => kms.supportedBackendsForOperation({ operation: 'sign', algorithm }).length > 0\n  )\n\n  return supportedJwaSignatureAlgorithms\n}\n\nexport async function getPublicJwkFromDid(\n  agentContext: AgentContext,\n  didUrl: string,\n  allowedPurposes: DidPurpose[] = ['authentication']\n) {\n  const didsApi = agentContext.dependencyManager.resolve(DidsApi)\n  const didDocument = await didsApi.resolveDidDocument(didUrl)\n  const verificationMethod = didDocument.dereferenceKey(didUrl, allowedPurposes)\n\n  return getPublicJwkFromVerificationMethod(verificationMethod)\n}\n\nexport async function requestSignerToJwtIssuer(\n  agentContext: AgentContext,\n  requestSigner: OpenId4VcJwtIssuer\n): Promise<Exclude<JwtSigner, JwtSignerX5c> | (JwtSignerX5c & { issuer: string })> {\n  if (requestSigner.method === 'did') {\n    const dids = agentContext.resolve(DidsApi)\n    const { publicJwk } = await dids.resolveVerificationMethodFromCreatedDidRecord(requestSigner.didUrl)\n\n    return {\n      method: requestSigner.method,\n      didUrl: requestSigner.didUrl,\n      alg: publicJwk.signatureAlgorithm,\n      kid: publicJwk.keyId,\n    }\n  }\n  if (requestSigner.method === 'x5c') {\n    const leafCertificate = requestSigner.x5c[0]\n    if (!leafCertificate) {\n      throw new CredoError('Unable to extract leaf certificate, x5c certificate chain is empty')\n    }\n\n    if (\n      !requestSigner.issuer.startsWith('https://') &&\n      !(requestSigner.issuer.startsWith('http://') && agentContext.config.allowInsecureHttpUrls)\n    ) {\n      throw new CredoError('The X509 certificate issuer must be a HTTPS URI.')\n    }\n\n    if (\n      !leafCertificate.sanUriNames.includes(requestSigner.issuer) &&\n      !leafCertificate.sanDnsNames.includes(getDomainFromUrl(requestSigner.issuer))\n    ) {\n      const sanUriMessage =\n        leafCertificate.sanUriNames.length > 0\n          ? `SAN-URI names are ${leafCertificate.sanUriNames.join(', ')}`\n          : 'there are no SAN-URI names'\n      const sanDnsMessage =\n        leafCertificate.sanDnsNames.length > 0\n          ? `SAN-DNS names are ${leafCertificate.sanDnsNames.join(', ')}`\n          : 'there are no SAN-DNS names'\n      throw new Error(\n        `The 'iss' claim in the payload does not match a 'SAN-URI' or 'SAN-DNS' name in the x5c certificate. 'iss' value is '${requestSigner.issuer}', ${sanUriMessage}, ${sanDnsMessage} (for SAN-DNS only domain has to match)`\n      )\n    }\n\n    return {\n      ...requestSigner,\n      x5c: requestSigner.x5c.map((certificate) => certificate.toString('base64')),\n      alg: leafCertificate.publicJwk.signatureAlgorithm,\n      kid: leafCertificate.publicJwk.keyId,\n    }\n  }\n  if (requestSigner.method === 'jwk') {\n    return {\n      ...requestSigner,\n      publicJwk: requestSigner.jwk.toJson() as Jwk,\n      alg: requestSigner.jwk.signatureAlgorithm,\n    }\n  }\n\n  throw new CredoError(`Unsupported jwt issuer method '${(requestSigner as OpenId4VcJwtIssuer).method}'`)\n}\n\nexport function getProofTypeFromPublicJwk(agentContext: AgentContext, key: Kms.PublicJwk) {\n  const signatureSuiteRegistry = agentContext.dependencyManager.resolve(SignatureSuiteRegistry)\n\n  const supportedSignatureSuites = signatureSuiteRegistry.getAllByPublicJwkType(key)\n  if (supportedSignatureSuites.length === 0) {\n    throw new CredoError(`Couldn't find a supported signature suite for the given key ${key.jwkTypehumanDescription}.`)\n  }\n\n  return supportedSignatureSuites[0].proofType\n}\n\nexport function parseIfJson<T>(input: T): T | Record<string, unknown> {\n  if (typeof input !== 'string') {\n    return input\n  }\n\n  try {\n    // Try to parse the string as JSON\n    return JSON.parse(input)\n  } catch (_error) {\n    /* empty */\n  }\n\n  return input\n}\n\nexport function dcqlCredentialQueryToPresentationFormat(credential: DcqlQuery['credentials'][number]) {\n  switch (credential.format) {\n    case 'dc+sd-jwt':\n      return ClaimFormat.SdJwtDc\n    case 'vc+sd-jwt':\n      if (credential.meta && 'type_values' in credential.meta) {\n        return ClaimFormat.SdJwtW3cVp\n      }\n\n      return ClaimFormat.SdJwtDc\n    case 'jwt_vc_json':\n      return ClaimFormat.JwtVp\n    case 'ldp_vc':\n      return ClaimFormat.LdpVp\n    case 'mso_mdoc':\n      return ClaimFormat.MsoMdoc\n  }\n}\n"],"mappings":";;;;;;AAkBA,SAAgB,mCAAmC,cAA8D;CAC/G,MAAM,MAAM,aAAa,QAAQ,IAAI,iBAAiB;AAOtD,QAJwC,OAAO,OAAO,IAAI,4BAA4B,CAAC,QACpF,cAAc,IAAI,8BAA8B;EAAE,WAAW;EAAQ;EAAW,CAAC,CAAC,SAAS,EAC7F;;AAKH,eAAsB,oBACpB,cACA,QACA,kBAAgC,CAAC,iBAAiB,EAClD;AAKA,QAAO,oCAHa,MADJ,aAAa,kBAAkB,QAAQ,QAAQ,CAC7B,mBAAmB,OAAO,EACrB,eAAe,QAAQ,gBAAgB,CAEjB;;AAG/D,eAAsB,yBACpB,cACA,eACiF;AACjF,KAAI,cAAc,WAAW,OAAO;EAElC,MAAM,EAAE,cAAc,MADT,aAAa,QAAQ,QAAQ,CACT,8CAA8C,cAAc,OAAO;AAEpG,SAAO;GACL,QAAQ,cAAc;GACtB,QAAQ,cAAc;GACtB,KAAK,UAAU;GACf,KAAK,UAAU;GAChB;;AAEH,KAAI,cAAc,WAAW,OAAO;EAClC,MAAM,kBAAkB,cAAc,IAAI;AAC1C,MAAI,CAAC,gBACH,OAAM,IAAI,WAAW,qEAAqE;AAG5F,MACE,CAAC,cAAc,OAAO,WAAW,WAAW,IAC5C,EAAE,cAAc,OAAO,WAAW,UAAU,IAAI,aAAa,OAAO,uBAEpE,OAAM,IAAI,WAAW,mDAAmD;AAG1E,MACE,CAAC,gBAAgB,YAAY,SAAS,cAAc,OAAO,IAC3D,CAAC,gBAAgB,YAAY,SAAS,iBAAiB,cAAc,OAAO,CAAC,EAC7E;GACA,MAAM,gBACJ,gBAAgB,YAAY,SAAS,IACjC,qBAAqB,gBAAgB,YAAY,KAAK,KAAK,KAC3D;GACN,MAAM,gBACJ,gBAAgB,YAAY,SAAS,IACjC,qBAAqB,gBAAgB,YAAY,KAAK,KAAK,KAC3D;AACN,SAAM,IAAI,MACR,uHAAuH,cAAc,OAAO,KAAK,cAAc,IAAI,cAAc,yCAClL;;AAGH,SAAO;GACL,GAAG;GACH,KAAK,cAAc,IAAI,KAAK,gBAAgB,YAAY,SAAS,SAAS,CAAC;GAC3E,KAAK,gBAAgB,UAAU;GAC/B,KAAK,gBAAgB,UAAU;GAChC;;AAEH,KAAI,cAAc,WAAW,MAC3B,QAAO;EACL,GAAG;EACH,WAAW,cAAc,IAAI,QAAQ;EACrC,KAAK,cAAc,IAAI;EACxB;AAGH,OAAM,IAAI,WAAW,kCAAmC,cAAqC,OAAO,GAAG;;AAGzG,SAAgB,0BAA0B,cAA4B,KAAoB;CAGxF,MAAM,2BAFyB,aAAa,kBAAkB,QAAQ,uBAAuB,CAErC,sBAAsB,IAAI;AAClF,KAAI,yBAAyB,WAAW,EACtC,OAAM,IAAI,WAAW,+DAA+D,IAAI,wBAAwB,GAAG;AAGrH,QAAO,yBAAyB,GAAG;;AAkBrC,SAAgB,wCAAwC,YAA8C;AACpG,SAAQ,WAAW,QAAnB;EACE,KAAK,YACH,QAAO,YAAY;EACrB,KAAK;AACH,OAAI,WAAW,QAAQ,iBAAiB,WAAW,KACjD,QAAO,YAAY;AAGrB,UAAO,YAAY;EACrB,KAAK,cACH,QAAO,YAAY;EACrB,KAAK,SACH,QAAO,YAAY;EACrB,KAAK,WACH,QAAO,YAAY"}

package/package.json

@@ -8,7 +8,7 @@
     },
     "./package.json": "./package.json"
   },
-  "version": "0.6.0-pr-2392-20251010173905",
+  "version": "0.6.0-pr-2457-20251016083534",
   "files": [
     "build"
   ],
@@ -29,19 +29,19 @@
   "dependencies": {
     "class-transformer": "0.5.1",
     "rxjs": "^7.8.2",
-    "zod": "^3.25.56",
+    "zod": "^3.25.74",
     "@openid4vc/openid4vci": "0.3.0-alpha-20251001121503",
     "@openid4vc/oauth2": "0.3.0-alpha-20251001121503",
     "@openid4vc/openid4vp": "0.3.0-alpha-20251001121503",
     "@openid4vc/utils": "0.3.0-alpha-20251001121503",
-    "@types/express": "^4.17.23",
-    "express": "^4.21.2",
-    "@credo-ts/core": "0.6.0-pr-2392-20251010173905"
+    "@types/express": "^5.0.3",
+    "express": "^5.1.0",
+    "@credo-ts/core": "0.6.0-pr-2457-20251016083534"
   },
   "devDependencies": {
-    "nock": "^14.0.5",
-    "typescript": "~5.8.3",
-    "@credo-ts/tenants": "0.6.0-pr-2392-20251010173905"
+    "nock": "^14.0.10",
+    "typescript": "~5.9.3",
+    "@credo-ts/tenants": "0.6.0-pr-2457-20251016083534"
   },
   "scripts": {
     "build": "tsdown --config-loader unconfig"