@credo-ts/openid4vc 0.6.0-pr-2392-20251010173905 → 0.6.0-pr-2457-20251016083534
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/build/OpenId4VcApi.d.mts +1 -1
- package/build/OpenId4VcApi.d.ts +1 -1
- package/build/OpenId4VcApi.js +2 -2
- package/build/OpenId4VcApi.mjs +2 -2
- package/build/OpenId4VcModule.d.mts +1 -1
- package/build/OpenId4VcModule.d.ts +1 -1
- package/build/OpenId4VcModule.js +2 -2
- package/build/OpenId4VcModule.mjs +2 -2
- package/build/OpenId4VcModuleConfig.js +1 -1
- package/build/OpenId4VcModuleConfig.mjs +1 -1
- package/build/index.d.mts +15 -14
- package/build/index.d.ts +15 -14
- package/build/index.js +22 -15
- package/build/index.mjs +18 -17
- package/build/openid4vc-holder/OpenId4VcHolderApi.d.mts.map +1 -1
- package/build/openid4vc-holder/OpenId4VcHolderApi.d.ts.map +1 -1
- package/build/openid4vc-holder/OpenId4VcHolderApi.mjs.map +1 -1
- package/build/openid4vc-holder/OpenId4VciHolderService.d.mts.map +1 -1
- package/build/openid4vc-holder/OpenId4VciHolderService.d.ts.map +1 -1
- package/build/openid4vc-holder/OpenId4VciHolderService.js +11 -8
- package/build/openid4vc-holder/OpenId4VciHolderService.mjs +11 -8
- package/build/openid4vc-holder/OpenId4VciHolderService.mjs.map +1 -1
- package/build/openid4vc-holder/OpenId4VciHolderServiceOptions.d.mts.map +1 -1
- package/build/openid4vc-holder/OpenId4VciHolderServiceOptions.d.ts.map +1 -1
- package/build/openid4vc-holder/OpenId4VciHolderServiceOptions.mjs.map +1 -1
- package/build/openid4vc-holder/OpenId4vpHolderService.d.mts.map +1 -1
- package/build/openid4vc-holder/OpenId4vpHolderService.d.ts.map +1 -1
- package/build/openid4vc-holder/OpenId4vpHolderService.js +4 -4
- package/build/openid4vc-holder/OpenId4vpHolderService.mjs +4 -4
- package/build/openid4vc-holder/OpenId4vpHolderService.mjs.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerApi.d.mts +5 -214
- package/build/openid4vc-issuer/OpenId4VcIssuerApi.d.mts.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerApi.d.ts +5 -214
- package/build/openid4vc-issuer/OpenId4VcIssuerApi.d.ts.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerApi.js +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerApi.mjs +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerApi.mjs.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerModule.d.mts.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerModule.d.ts.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerModule.js +7 -7
- package/build/openid4vc-issuer/OpenId4VcIssuerModule.mjs +7 -7
- package/build/openid4vc-issuer/OpenId4VcIssuerModule.mjs.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerModuleConfig.d.mts.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerModuleConfig.d.ts.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerModuleConfig.mjs.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerService.d.mts +8 -218
- package/build/openid4vc-issuer/OpenId4VcIssuerService.d.mts.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerService.d.ts +8 -218
- package/build/openid4vc-issuer/OpenId4VcIssuerService.d.ts.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerService.js +18 -18
- package/build/openid4vc-issuer/OpenId4VcIssuerService.mjs +19 -19
- package/build/openid4vc-issuer/OpenId4VcIssuerService.mjs.map +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerServiceOptions.d.mts +1 -1
- package/build/openid4vc-issuer/OpenId4VcIssuerServiceOptions.d.ts +1 -1
- package/build/openid4vc-issuer/index.js +2 -2
- package/build/openid4vc-issuer/index.mjs +2 -2
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.d.mts +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.d.mts.map +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.d.ts +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.d.ts.map +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.js +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.mjs +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRecord.mjs.map +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRepository.js +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRepository.mjs +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuanceSessionRepository.mjs.map +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuerRecord.d.mts.map +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuerRecord.d.ts.map +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuerRecord.mjs.map +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuerRepository.js +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuerRepository.mjs +1 -1
- package/build/openid4vc-issuer/repository/OpenId4VcIssuerRepository.mjs.map +1 -1
- package/build/openid4vc-issuer/repository/index.js +2 -2
- package/build/openid4vc-issuer/repository/index.mjs +2 -2
- package/build/openid4vc-issuer/router/accessTokenEndpoint.js +3 -4
- package/build/openid4vc-issuer/router/accessTokenEndpoint.mjs +3 -4
- package/build/openid4vc-issuer/router/accessTokenEndpoint.mjs.map +1 -1
- package/build/openid4vc-issuer/router/authorizationChallengeEndpoint.js +5 -6
- package/build/openid4vc-issuer/router/authorizationChallengeEndpoint.mjs +6 -7
- package/build/openid4vc-issuer/router/authorizationChallengeEndpoint.mjs.map +1 -1
- package/build/openid4vc-issuer/router/authorizationServerMetadataEndpoint.mjs.map +1 -1
- package/build/openid4vc-issuer/router/credentialEndpoint.js +5 -6
- package/build/openid4vc-issuer/router/credentialEndpoint.mjs +5 -6
- package/build/openid4vc-issuer/router/credentialEndpoint.mjs.map +1 -1
- package/build/openid4vc-issuer/router/credentialOfferEndpoint.js +2 -4
- package/build/openid4vc-issuer/router/credentialOfferEndpoint.mjs +3 -4
- package/build/openid4vc-issuer/router/credentialOfferEndpoint.mjs.map +1 -1
- package/build/openid4vc-issuer/router/deferredCredentialEndpoint.js +2 -4
- package/build/openid4vc-issuer/router/deferredCredentialEndpoint.mjs +3 -4
- package/build/openid4vc-issuer/router/deferredCredentialEndpoint.mjs.map +1 -1
- package/build/openid4vc-issuer/router/index.js +4 -4
- package/build/openid4vc-issuer/router/index.mjs +4 -4
- package/build/openid4vc-issuer/router/issuerMetadataEndpoint.mjs.map +1 -1
- package/build/openid4vc-issuer/router/jwksEndpoint.mjs.map +1 -1
- package/build/openid4vc-issuer/router/nonceEndpoint.mjs.map +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierApi.d.mts +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierApi.d.mts.map +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierApi.d.ts +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierApi.d.ts.map +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierApi.js +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierApi.mjs +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierApi.mjs.map +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierModule.d.mts.map +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierModule.d.ts.map +1 -1
- package/build/openid4vc-verifier/OpenId4VcVerifierModule.js +2 -2
- package/build/openid4vc-verifier/OpenId4VcVerifierModule.mjs +2 -2
- package/build/openid4vc-verifier/OpenId4VcVerifierModule.mjs.map +1 -1
- package/build/openid4vc-verifier/OpenId4VpVerifierService.d.mts +3 -3
- package/build/openid4vc-verifier/OpenId4VpVerifierService.d.mts.map +1 -1
- package/build/openid4vc-verifier/OpenId4VpVerifierService.d.ts +3 -3
- package/build/openid4vc-verifier/OpenId4VpVerifierService.d.ts.map +1 -1
- package/build/openid4vc-verifier/OpenId4VpVerifierService.js +17 -17
- package/build/openid4vc-verifier/OpenId4VpVerifierService.mjs +17 -17
- package/build/openid4vc-verifier/OpenId4VpVerifierService.mjs.map +1 -1
- package/build/openid4vc-verifier/OpenId4VpVerifierServiceOptions.d.mts +1 -1
- package/build/openid4vc-verifier/OpenId4VpVerifierServiceOptions.d.ts +1 -1
- package/build/openid4vc-verifier/index.js +3 -3
- package/build/openid4vc-verifier/index.mjs +3 -3
- package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.d.mts +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.d.mts.map +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.d.ts +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.d.ts.map +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRecord.mjs.map +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRepository.js +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRepository.mjs +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerificationSessionRepository.mjs.map +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerifierRecord.d.mts.map +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerifierRecord.d.ts.map +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerifierRecord.mjs.map +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerifierRepository.js +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerifierRepository.mjs +1 -1
- package/build/openid4vc-verifier/repository/OpenId4VcVerifierRepository.mjs.map +1 -1
- package/build/openid4vc-verifier/repository/index.js +2 -2
- package/build/openid4vc-verifier/repository/index.mjs +2 -2
- package/build/openid4vc-verifier/router/authorizationEndpoint.js +1 -1
- package/build/openid4vc-verifier/router/authorizationEndpoint.mjs +1 -1
- package/build/openid4vc-verifier/router/authorizationEndpoint.mjs.map +1 -1
- package/build/openid4vc-verifier/router/authorizationRequestEndpoint.js +1 -1
- package/build/openid4vc-verifier/router/authorizationRequestEndpoint.mjs +1 -1
- package/build/openid4vc-verifier/router/authorizationRequestEndpoint.mjs.map +1 -1
- package/build/shared/callbacks.d.mts +46 -0
- package/build/shared/callbacks.d.mts.map +1 -0
- package/build/shared/callbacks.d.ts +46 -0
- package/build/shared/callbacks.d.ts.map +1 -0
- package/build/shared/callbacks.js +5 -1
- package/build/shared/callbacks.mjs +1 -1
- package/build/shared/callbacks.mjs.map +1 -1
- package/build/shared/index.js +2 -1
- package/build/shared/index.mjs +2 -1
- package/build/shared/issuerMetadataUtils.d.mts +2 -258
- package/build/shared/issuerMetadataUtils.d.mts.map +1 -1
- package/build/shared/issuerMetadataUtils.d.ts +2 -258
- package/build/shared/issuerMetadataUtils.d.ts.map +1 -1
- package/build/shared/issuerMetadataUtils.mjs.map +1 -1
- package/build/shared/models/index.d.ts +1 -1
- package/build/shared/router/context.mjs.map +1 -1
- package/build/shared/router/index.js +1 -1
- package/build/shared/router/index.mjs +1 -1
- package/build/shared/router/tenants.mjs.map +1 -1
- package/build/shared/utils.js +0 -8
- package/build/shared/utils.mjs +1 -7
- package/build/shared/utils.mjs.map +1 -1
- package/package.json +8 -8
|
@@ -1,22 +1,22 @@
|
|
|
1
1
|
const require_rolldown_runtime = require('../_virtual/rolldown_runtime.js');
|
|
2
|
-
const
|
|
3
|
-
const
|
|
4
|
-
require('../shared/index.js');
|
|
2
|
+
const require_OpenId4VcIssuanceSessionState = require('./OpenId4VcIssuanceSessionState.js');
|
|
3
|
+
const require_tenants = require('../shared/router/tenants.js');
|
|
4
|
+
require('../shared/router/index.js');
|
|
5
|
+
const require_OpenId4VcIssuerModuleConfig = require('./OpenId4VcIssuerModuleConfig.js');
|
|
5
6
|
const require_utils = require('../shared/utils.js');
|
|
6
7
|
const require_callbacks = require('../shared/callbacks.js');
|
|
7
8
|
const require_decorateMetadata = require('../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorateMetadata.js');
|
|
8
9
|
const require_decorate = require('../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorate.js');
|
|
9
|
-
const require_tenants = require('../shared/router/tenants.js');
|
|
10
|
-
require('../shared/router/index.js');
|
|
11
10
|
const require_OpenId4VcVerifierApi = require('../openid4vc-verifier/OpenId4VcVerifierApi.js');
|
|
12
11
|
require('../openid4vc-verifier/index.js');
|
|
13
|
-
const
|
|
14
|
-
const
|
|
12
|
+
const require_issuerMetadataUtils = require('../shared/issuerMetadataUtils.js');
|
|
13
|
+
const require_OpenId4VciCredentialFormatProfile = require('../shared/models/OpenId4VciCredentialFormatProfile.js');
|
|
14
|
+
require('../shared/index.js');
|
|
15
15
|
const require_OpenId4VcIssuerEvents = require('./OpenId4VcIssuerEvents.js');
|
|
16
|
-
const require_OpenId4VcIssuerRecord = require('./repository/OpenId4VcIssuerRecord.js');
|
|
17
|
-
const require_OpenId4VcIssuerRepository = require('./repository/OpenId4VcIssuerRepository.js');
|
|
18
16
|
const require_OpenId4VcIssuanceSessionRecord = require('./repository/OpenId4VcIssuanceSessionRecord.js');
|
|
19
17
|
const require_OpenId4VcIssuanceSessionRepository = require('./repository/OpenId4VcIssuanceSessionRepository.js');
|
|
18
|
+
const require_OpenId4VcIssuerRecord = require('./repository/OpenId4VcIssuerRecord.js');
|
|
19
|
+
const require_OpenId4VcIssuerRepository = require('./repository/OpenId4VcIssuerRepository.js');
|
|
20
20
|
require('./repository/index.js');
|
|
21
21
|
const require_txCode = require('./util/txCode.js');
|
|
22
22
|
let __credo_ts_core = require("@credo-ts/core");
|
|
@@ -89,7 +89,7 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
89
89
|
}
|
|
90
90
|
});
|
|
91
91
|
const createdAt = /* @__PURE__ */ new Date();
|
|
92
|
-
const expiresAt =
|
|
92
|
+
const expiresAt = __credo_ts_core.utils.addSecondsToDate(createdAt, this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds);
|
|
93
93
|
const issuanceSessionRepository = this.openId4VcIssuanceSessionRepository;
|
|
94
94
|
const issuanceSession = new require_OpenId4VcIssuanceSessionRecord.OpenId4VcIssuanceSessionRecord({
|
|
95
95
|
createdAt,
|
|
@@ -159,7 +159,7 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
159
159
|
credentialConfigurationId
|
|
160
160
|
});
|
|
161
161
|
const mapper = options.credentialRequestToCredentialMapper ?? this.openId4VcIssuerConfig.credentialRequestToCredentialMapper;
|
|
162
|
-
let verification
|
|
162
|
+
let verification;
|
|
163
163
|
if (issuanceSession.presentation?.openId4VcVerificationSessionId) {
|
|
164
164
|
const verifierApi = agentContext.dependencyManager.resolve(require_OpenId4VcVerifierApi.OpenId4VcVerifierApi);
|
|
165
165
|
const session = await verifierApi.getVerificationSessionById(issuanceSession.presentation.openId4VcVerificationSessionId);
|
|
@@ -348,7 +348,7 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
348
348
|
};
|
|
349
349
|
}
|
|
350
350
|
if (proofType === "jwt") {
|
|
351
|
-
let firstNonce
|
|
351
|
+
let firstNonce;
|
|
352
352
|
const proofSigners = [];
|
|
353
353
|
for (const jwt of proofValue) {
|
|
354
354
|
const { signer, payload, header, keyAttestation } = await vcIssuer.verifyCredentialRequestJwtProof({
|
|
@@ -547,14 +547,14 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
547
547
|
const issuerMetadata = await this.getIssuerMetadata(agentContext, issuer);
|
|
548
548
|
const jwsService = agentContext.dependencyManager.resolve(__credo_ts_core.JwsService);
|
|
549
549
|
const cNonceExpiresInSeconds = this.openId4VcIssuerConfig.cNonceExpiresInSeconds;
|
|
550
|
-
const cNonceExpiresAt =
|
|
550
|
+
const cNonceExpiresAt = __credo_ts_core.utils.addSecondsToDate(/* @__PURE__ */ new Date(), cNonceExpiresInSeconds);
|
|
551
551
|
const key = issuer.resolvedAccessTokenPublicJwk;
|
|
552
552
|
return {
|
|
553
553
|
cNonce: await jwsService.createJwsCompact(agentContext, {
|
|
554
554
|
keyId: key.keyId,
|
|
555
555
|
payload: __credo_ts_core.JwtPayload.fromJson({
|
|
556
556
|
iss: issuerMetadata.credentialIssuer.credential_issuer,
|
|
557
|
-
exp:
|
|
557
|
+
exp: __credo_ts_core.utils.dateToSeconds(cNonceExpiresAt)
|
|
558
558
|
}),
|
|
559
559
|
protectedHeaderOptions: {
|
|
560
560
|
typ: "credo+cnonce",
|
|
@@ -591,14 +591,14 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
591
591
|
const issuerMetadata = await this.getIssuerMetadata(agentContext, issuer);
|
|
592
592
|
const jwsService = agentContext.dependencyManager.resolve(__credo_ts_core.JwsService);
|
|
593
593
|
const expiresInSeconds = this.openId4VcIssuerConfig.refreshTokenExpiresInSeconds;
|
|
594
|
-
const expiresAt =
|
|
594
|
+
const expiresAt = __credo_ts_core.utils.addSecondsToDate(/* @__PURE__ */ new Date(), expiresInSeconds);
|
|
595
595
|
const key = issuer.resolvedAccessTokenPublicJwk;
|
|
596
596
|
return await jwsService.createJwsCompact(agentContext, {
|
|
597
597
|
keyId: key.keyId,
|
|
598
598
|
payload: __credo_ts_core.JwtPayload.fromJson({
|
|
599
599
|
iss: issuerMetadata.credentialIssuer.credential_issuer,
|
|
600
600
|
aud: issuerMetadata.credentialIssuer.credential_issuer,
|
|
601
|
-
exp:
|
|
601
|
+
exp: __credo_ts_core.utils.dateToSeconds(expiresAt),
|
|
602
602
|
issuer_state: options.issuerState,
|
|
603
603
|
"pre-authorized_code": options.preAuthorizedCode,
|
|
604
604
|
cnf: options.dpop ? { jkt: await (0, __openid4vc_oauth2.calculateJwkThumbprint)({
|
|
@@ -676,8 +676,8 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
676
676
|
* deferrals happening, with longer intervals.
|
|
677
677
|
*/
|
|
678
678
|
async updateExpiresAt(agentContext, issuanceSession, interval) {
|
|
679
|
-
const expiresAt = issuanceSession.expiresAt ??
|
|
680
|
-
issuanceSession.expiresAt = new Date(Math.max(expiresAt.getTime(),
|
|
679
|
+
const expiresAt = issuanceSession.expiresAt ?? __credo_ts_core.utils.addSecondsToDate(issuanceSession.createdAt, this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds);
|
|
680
|
+
issuanceSession.expiresAt = new Date(Math.max(expiresAt.getTime(), __credo_ts_core.utils.addSecondsToDate(/* @__PURE__ */ new Date(), Math.max(this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds, interval * 2)).getTime()));
|
|
681
681
|
await this.openId4VcIssuanceSessionRepository.update(agentContext, issuanceSession);
|
|
682
682
|
}
|
|
683
683
|
/**
|
|
@@ -1,21 +1,21 @@
|
|
|
1
|
-
import {
|
|
2
|
-
import {
|
|
3
|
-
import "../shared/index.mjs";
|
|
4
|
-
import {
|
|
1
|
+
import { OpenId4VcIssuanceSessionState } from "./OpenId4VcIssuanceSessionState.mjs";
|
|
2
|
+
import { storeActorIdForContextCorrelationId } from "../shared/router/tenants.mjs";
|
|
3
|
+
import "../shared/router/index.mjs";
|
|
4
|
+
import { OpenId4VcIssuerModuleConfig } from "./OpenId4VcIssuerModuleConfig.mjs";
|
|
5
|
+
import { getProofTypeFromPublicJwk, getPublicJwkFromDid, getSupportedJwaSignatureAlgorithms } from "../shared/utils.mjs";
|
|
5
6
|
import { dynamicOid4vciClientAuthentication, getOid4vcCallbacks } from "../shared/callbacks.mjs";
|
|
6
7
|
import { __decorateMetadata } from "../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorateMetadata.mjs";
|
|
7
8
|
import { __decorate } from "../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorate.mjs";
|
|
8
|
-
import { storeActorIdForContextCorrelationId } from "../shared/router/tenants.mjs";
|
|
9
|
-
import "../shared/router/index.mjs";
|
|
10
9
|
import { OpenId4VcVerifierApi } from "../openid4vc-verifier/OpenId4VcVerifierApi.mjs";
|
|
11
10
|
import "../openid4vc-verifier/index.mjs";
|
|
12
|
-
import {
|
|
13
|
-
import {
|
|
11
|
+
import { getCredentialConfigurationsSupportedForScopes, getOfferedCredentials } from "../shared/issuerMetadataUtils.mjs";
|
|
12
|
+
import { OpenId4VciCredentialFormatProfile } from "../shared/models/OpenId4VciCredentialFormatProfile.mjs";
|
|
13
|
+
import "../shared/index.mjs";
|
|
14
14
|
import { OpenId4VcIssuerEvents } from "./OpenId4VcIssuerEvents.mjs";
|
|
15
|
-
import { OpenId4VcIssuerRecord } from "./repository/OpenId4VcIssuerRecord.mjs";
|
|
16
|
-
import { OpenId4VcIssuerRepository } from "./repository/OpenId4VcIssuerRepository.mjs";
|
|
17
15
|
import { OpenId4VcIssuanceSessionRecord } from "./repository/OpenId4VcIssuanceSessionRecord.mjs";
|
|
18
16
|
import { OpenId4VcIssuanceSessionRepository } from "./repository/OpenId4VcIssuanceSessionRepository.mjs";
|
|
17
|
+
import { OpenId4VcIssuerRecord } from "./repository/OpenId4VcIssuerRecord.mjs";
|
|
18
|
+
import { OpenId4VcIssuerRepository } from "./repository/OpenId4VcIssuerRepository.mjs";
|
|
19
19
|
import "./repository/index.mjs";
|
|
20
20
|
import { generateTxCode } from "./util/txCode.mjs";
|
|
21
21
|
import { AgentContext, ClaimFormat, CredoError, EventEmitter, JwsService, Jwt, JwtPayload, Kms, MdocApi, SdJwtVcApi, TypedArrayEncoder, W3cCredentialService, W3cV2CredentialService, injectable, joinUriParts, utils } from "@credo-ts/core";
|
|
@@ -85,7 +85,7 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
85
85
|
}
|
|
86
86
|
});
|
|
87
87
|
const createdAt = /* @__PURE__ */ new Date();
|
|
88
|
-
const expiresAt = addSecondsToDate(createdAt, this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds);
|
|
88
|
+
const expiresAt = utils.addSecondsToDate(createdAt, this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds);
|
|
89
89
|
const issuanceSessionRepository = this.openId4VcIssuanceSessionRepository;
|
|
90
90
|
const issuanceSession = new OpenId4VcIssuanceSessionRecord({
|
|
91
91
|
createdAt,
|
|
@@ -155,7 +155,7 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
155
155
|
credentialConfigurationId
|
|
156
156
|
});
|
|
157
157
|
const mapper = options.credentialRequestToCredentialMapper ?? this.openId4VcIssuerConfig.credentialRequestToCredentialMapper;
|
|
158
|
-
let verification
|
|
158
|
+
let verification;
|
|
159
159
|
if (issuanceSession.presentation?.openId4VcVerificationSessionId) {
|
|
160
160
|
const verifierApi = agentContext.dependencyManager.resolve(OpenId4VcVerifierApi);
|
|
161
161
|
const session = await verifierApi.getVerificationSessionById(issuanceSession.presentation.openId4VcVerificationSessionId);
|
|
@@ -344,7 +344,7 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
344
344
|
};
|
|
345
345
|
}
|
|
346
346
|
if (proofType === "jwt") {
|
|
347
|
-
let firstNonce
|
|
347
|
+
let firstNonce;
|
|
348
348
|
const proofSigners = [];
|
|
349
349
|
for (const jwt of proofValue) {
|
|
350
350
|
const { signer, payload, header, keyAttestation } = await vcIssuer.verifyCredentialRequestJwtProof({
|
|
@@ -543,14 +543,14 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
543
543
|
const issuerMetadata = await this.getIssuerMetadata(agentContext, issuer);
|
|
544
544
|
const jwsService = agentContext.dependencyManager.resolve(JwsService);
|
|
545
545
|
const cNonceExpiresInSeconds = this.openId4VcIssuerConfig.cNonceExpiresInSeconds;
|
|
546
|
-
const cNonceExpiresAt = addSecondsToDate(/* @__PURE__ */ new Date(), cNonceExpiresInSeconds);
|
|
546
|
+
const cNonceExpiresAt = utils.addSecondsToDate(/* @__PURE__ */ new Date(), cNonceExpiresInSeconds);
|
|
547
547
|
const key = issuer.resolvedAccessTokenPublicJwk;
|
|
548
548
|
return {
|
|
549
549
|
cNonce: await jwsService.createJwsCompact(agentContext, {
|
|
550
550
|
keyId: key.keyId,
|
|
551
551
|
payload: JwtPayload.fromJson({
|
|
552
552
|
iss: issuerMetadata.credentialIssuer.credential_issuer,
|
|
553
|
-
exp: dateToSeconds(cNonceExpiresAt)
|
|
553
|
+
exp: utils.dateToSeconds(cNonceExpiresAt)
|
|
554
554
|
}),
|
|
555
555
|
protectedHeaderOptions: {
|
|
556
556
|
typ: "credo+cnonce",
|
|
@@ -587,14 +587,14 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
587
587
|
const issuerMetadata = await this.getIssuerMetadata(agentContext, issuer);
|
|
588
588
|
const jwsService = agentContext.dependencyManager.resolve(JwsService);
|
|
589
589
|
const expiresInSeconds = this.openId4VcIssuerConfig.refreshTokenExpiresInSeconds;
|
|
590
|
-
const expiresAt = addSecondsToDate(/* @__PURE__ */ new Date(), expiresInSeconds);
|
|
590
|
+
const expiresAt = utils.addSecondsToDate(/* @__PURE__ */ new Date(), expiresInSeconds);
|
|
591
591
|
const key = issuer.resolvedAccessTokenPublicJwk;
|
|
592
592
|
return await jwsService.createJwsCompact(agentContext, {
|
|
593
593
|
keyId: key.keyId,
|
|
594
594
|
payload: JwtPayload.fromJson({
|
|
595
595
|
iss: issuerMetadata.credentialIssuer.credential_issuer,
|
|
596
596
|
aud: issuerMetadata.credentialIssuer.credential_issuer,
|
|
597
|
-
exp: dateToSeconds(expiresAt),
|
|
597
|
+
exp: utils.dateToSeconds(expiresAt),
|
|
598
598
|
issuer_state: options.issuerState,
|
|
599
599
|
"pre-authorized_code": options.preAuthorizedCode,
|
|
600
600
|
cnf: options.dpop ? { jkt: await calculateJwkThumbprint({
|
|
@@ -672,8 +672,8 @@ let OpenId4VcIssuerService = class OpenId4VcIssuerService$1 {
|
|
|
672
672
|
* deferrals happening, with longer intervals.
|
|
673
673
|
*/
|
|
674
674
|
async updateExpiresAt(agentContext, issuanceSession, interval) {
|
|
675
|
-
const expiresAt = issuanceSession.expiresAt ?? addSecondsToDate(issuanceSession.createdAt, this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds);
|
|
676
|
-
issuanceSession.expiresAt = new Date(Math.max(expiresAt.getTime(), addSecondsToDate(/* @__PURE__ */ new Date(), Math.max(this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds, interval * 2)).getTime()));
|
|
675
|
+
const expiresAt = issuanceSession.expiresAt ?? utils.addSecondsToDate(issuanceSession.createdAt, this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds);
|
|
676
|
+
issuanceSession.expiresAt = new Date(Math.max(expiresAt.getTime(), utils.addSecondsToDate(/* @__PURE__ */ new Date(), Math.max(this.openId4VcIssuerConfig.statefulCredentialOfferExpirationInSeconds, interval * 2)).getTime()));
|
|
677
677
|
await this.openId4VcIssuanceSessionRepository.update(agentContext, issuanceSession);
|
|
678
678
|
}
|
|
679
679
|
/**
|