@credo-ts/openid4vc 0.6.1-pr-2091-20241119140918 → 0.6.1

package/build/openid4vc-holder/OpenId4vpHolderServiceOptions.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4vpHolderServiceOptions.d.mts","names":[],"sources":["../../src/openid4vc-holder/OpenId4vpHolderServiceOptions.ts"],"sourcesContent":[],"mappings":";;;;;;KAYY,0BAAA,GAA6B,YAAY;UAEpC,2CAAA;wBACO;EAHZ,MAAA,CAAA,EAAA,MAAA;AAEZ;AAGC,KAEI,kBAAA,GAAqB,WAAY,CAAA,qCAAA,CAAZ,KAAA,CAAA,CAAA;AAET,UAAA,qCAAA,CAAqC;EAMtC;;;;EAsBI,oBAAA,CAAA,EAAA;IAQW,UAAA,EA9Bf,iCA8Be;IAQnB,qBAAA,EArCe,2BAqCf;EACC,CAAA;EACD;;;;EA4BK,IAAA,CAAA,EAAA;IAMA,WAAA,EAjEA,eAiEA;EAQA,CAAA;EAaG;;;;;;;;;;oBAzEA;WACT;;;;;;+BAOoB;;;;;;;YAQnB;aACC;YACD;;;;;;oBAOQ;;;;uBAKG;;;;;;;UAgBN,0CAAA;;;;;;iBAMA;;;;;;;iBAQA;;;;;;;;;;;;oBAaG;;;;;;+BAOW"}

package/build/openid4vc-holder/index.d.mts

@@ -0,0 +1,6 @@
+import { OpenId4VpAcceptAuthorizationRequestOptions, OpenId4VpResolvedAuthorizationRequest, ParsedTransactionDataEntry, ResolveOpenId4VpAuthorizationRequestOptions } from "./OpenId4vpHolderServiceOptions.mjs";
+import { OpenId4VcAuthorizationCodeTokenRequestOptions, OpenId4VciAcceptCredentialOfferOptions, OpenId4VciAuthCodeFlowOptions, OpenId4VciAuthorizationFlow, OpenId4VciCredentialBindingOptions, OpenId4VciCredentialBindingResolver, OpenId4VciCredentialRequestOptions, OpenId4VciCredentialResponse, OpenId4VciDeferredCredentialRequestOptions, OpenId4VciDeferredCredentialResponse, OpenId4VciDpopRequestOptions, OpenId4VciNotificationEvent, OpenId4VciPreAuthorizedTokenRequestOptions, OpenId4VciProofOfPossessionRequirements, OpenId4VciProofOfPressionProofTypes, OpenId4VciRequestTokenResponse, OpenId4VciResolvedAuthorizationRequest, OpenId4VciResolvedCredentialOffer, OpenId4VciRetrieveAuthorizationCodeUsingPresentationOptions, OpenId4VciSendNotificationOptions, OpenId4VciSupportedCredentialFormats, OpenId4VciTokenRefreshOptions, OpenId4VciTokenRequestOptions, openId4VciSupportedCredentialFormats } from "./OpenId4VciHolderServiceOptions.mjs";
+import { OpenId4VciHolderService } from "./OpenId4VciHolderService.mjs";
+import { OpenId4VpHolderService } from "./OpenId4vpHolderService.mjs";
+import { OpenId4VcHolderApi } from "./OpenId4VcHolderApi.mjs";
+import { OpenId4VcHolderModule } from "./OpenId4VcHolderModule.mjs";

package/build/openid4vc-holder/index.mjs

@@ -0,0 +1,5 @@
+import { OpenId4VciAuthorizationFlow, openId4VciSupportedCredentialFormats } from "./OpenId4VciHolderServiceOptions.mjs";
+import { OpenId4VciHolderService } from "./OpenId4VciHolderService.mjs";
+import { OpenId4VpHolderService } from "./OpenId4vpHolderService.mjs";
+import { OpenId4VcHolderApi } from "./OpenId4VcHolderApi.mjs";
+import { OpenId4VcHolderModule } from "./OpenId4VcHolderModule.mjs";

package/build/openid4vc-issuer/OpenId4VcIssuanceSessionState.d.mts

@@ -0,0 +1,16 @@
+//#region src/openid4vc-issuer/OpenId4VcIssuanceSessionState.d.ts
+declare enum OpenId4VcIssuanceSessionState {
+  OfferCreated = "OfferCreated",
+  OfferUriRetrieved = "OfferUriRetrieved",
+  AuthorizationInitiated = "AuthorizationInitiated",
+  AuthorizationGranted = "AuthorizationGranted",
+  AccessTokenRequested = "AccessTokenRequested",
+  AccessTokenCreated = "AccessTokenCreated",
+  CredentialRequestReceived = "CredentialRequestReceived",
+  CredentialsPartiallyIssued = "CredentialsPartiallyIssued",
+  Completed = "Completed",
+  Error = "Error",
+}
+//#endregion
+export { OpenId4VcIssuanceSessionState };
+//# sourceMappingURL=OpenId4VcIssuanceSessionState.d.mts.map

package/build/openid4vc-issuer/OpenId4VcIssuanceSessionState.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuanceSessionState.d.mts","names":[],"sources":["../../src/openid4vc-issuer/OpenId4VcIssuanceSessionState.ts"],"sourcesContent":[],"mappings":";aAAY,6BAAA;EAAA,YAAA,GAAA,cAAA"}

package/build/openid4vc-issuer/OpenId4VcIssuanceSessionState.mjs

@@ -0,0 +1,18 @@
+//#region src/openid4vc-issuer/OpenId4VcIssuanceSessionState.ts
+let OpenId4VcIssuanceSessionState = /* @__PURE__ */ function(OpenId4VcIssuanceSessionState$1) {
+	OpenId4VcIssuanceSessionState$1["OfferCreated"] = "OfferCreated";
+	OpenId4VcIssuanceSessionState$1["OfferUriRetrieved"] = "OfferUriRetrieved";
+	OpenId4VcIssuanceSessionState$1["AuthorizationInitiated"] = "AuthorizationInitiated";
+	OpenId4VcIssuanceSessionState$1["AuthorizationGranted"] = "AuthorizationGranted";
+	OpenId4VcIssuanceSessionState$1["AccessTokenRequested"] = "AccessTokenRequested";
+	OpenId4VcIssuanceSessionState$1["AccessTokenCreated"] = "AccessTokenCreated";
+	OpenId4VcIssuanceSessionState$1["CredentialRequestReceived"] = "CredentialRequestReceived";
+	OpenId4VcIssuanceSessionState$1["CredentialsPartiallyIssued"] = "CredentialsPartiallyIssued";
+	OpenId4VcIssuanceSessionState$1["Completed"] = "Completed";
+	OpenId4VcIssuanceSessionState$1["Error"] = "Error";
+	return OpenId4VcIssuanceSessionState$1;
+}({});
+
+//#endregion
+export { OpenId4VcIssuanceSessionState };
+//# sourceMappingURL=OpenId4VcIssuanceSessionState.mjs.map

package/build/openid4vc-issuer/OpenId4VcIssuanceSessionState.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuanceSessionState.mjs","names":[],"sources":["../../src/openid4vc-issuer/OpenId4VcIssuanceSessionState.ts"],"sourcesContent":["export enum OpenId4VcIssuanceSessionState {\n  OfferCreated = 'OfferCreated',\n  OfferUriRetrieved = 'OfferUriRetrieved',\n\n  // Used with authorization code flow where Credo is the auth server\n  AuthorizationInitiated = 'AuthorizationInitiated',\n  AuthorizationGranted = 'AuthorizationGranted',\n\n  // Used with pre-auth and auth code flow where Credo is the auth server\n  AccessTokenRequested = 'AccessTokenRequested',\n  AccessTokenCreated = 'AccessTokenCreated',\n\n  CredentialRequestReceived = 'CredentialRequestReceived',\n  CredentialsPartiallyIssued = 'CredentialsPartiallyIssued',\n  Completed = 'Completed',\n  Error = 'Error',\n}\n"],"mappings":";AAAA,IAAY,0FAAL;AACL;AACA;AAGA;AACA;AAGA;AACA;AAEA;AACA;AACA;AACA"}

package/build/openid4vc-issuer/OpenId4VcIssuerApi.d.mts

@@ -0,0 +1,137 @@
+import { OpenId4VciCredentialConfigurationsSupportedWithFormats, OpenId4VciCredentialOfferPayload } from "../shared/models/index.mjs";
+import { OpenId4VcIssuanceSessionRecord } from "./repository/OpenId4VcIssuanceSessionRecord.mjs";
+import { OpenId4VcIssuerRecord } from "./repository/OpenId4VcIssuerRecord.mjs";
+import "./repository/index.mjs";
+import { OpenId4VcUpdateIssuerRecordOptions, OpenId4VciCreateCredentialOfferOptions, OpenId4VciCreateCredentialResponseOptions, OpenId4VciCreateDeferredCredentialResponseOptions, OpenId4VciCreateIssuerOptions, OpenId4VciCreateStatelessCredentialOfferOptions } from "./OpenId4VcIssuerServiceOptions.mjs";
+import { OpenId4VcIssuerModuleConfig } from "./OpenId4VcIssuerModuleConfig.mjs";
+import { OpenId4VcIssuerService } from "./OpenId4VcIssuerService.mjs";
+import "../index.mjs";
+import { AgentContext } from "@credo-ts/core";
+import * as _openid4vc_oauth20 from "@openid4vc/oauth2";
+import * as _openid4vc_openid4vci0 from "@openid4vc/openid4vci";
+
+//#region src/openid4vc-issuer/OpenId4VcIssuerApi.d.ts
+/**
+ * @public
+ * This class represents the API for interacting with the OpenID4VC Issuer service.
+ * It provides methods for creating a credential offer, creating a response to a credential issuance request,
+ * and retrieving a credential offer from a URI.
+ */
+declare class OpenId4VcIssuerApi {
+  readonly config: OpenId4VcIssuerModuleConfig;
+  private agentContext;
+  private openId4VcIssuerService;
+  constructor(config: OpenId4VcIssuerModuleConfig, agentContext: AgentContext, openId4VcIssuerService: OpenId4VcIssuerService);
+  getAllIssuers(): Promise<OpenId4VcIssuerRecord[]>;
+  getIssuerByIssuerId(issuerId: string): Promise<OpenId4VcIssuerRecord>;
+  /**
+   * Creates an issuer and stores the corresponding issuer metadata. Multiple issuers can be created, to allow different sets of
+   * credentials to be issued with each issuer.
+   */
+  createIssuer(options: OpenId4VciCreateIssuerOptions): Promise<OpenId4VcIssuerRecord>;
+  /**
+   * Rotate the key used for signing access tokens for the issuer with the given issuerId.
+   */
+  rotateAccessTokenSigningKey(issuerId: string): Promise<void>;
+  updateIssuerMetadata(options: OpenId4VcUpdateIssuerRecordOptions): Promise<void>;
+  /**
+   * Creates a stateless credential offer. This can only be used with an external authorization server, as credo only supports stateful
+   * credential offers.
+   */
+  createStatelessCredentialOffer(options: OpenId4VciCreateStatelessCredentialOfferOptions & {
+    issuerId: string;
+  }): Promise<{
+    credentialOffer: string;
+    credentialOfferObject: OpenId4VciCredentialOfferPayload;
+  }>;
+  /**
+   * Creates a credential offer. Either the preAuthorizedCodeFlowConfig or the authorizationCodeFlowConfig must be provided.
+   *
+   * @returns Object containing the payload of the credential offer and the credential offer request, which can be sent to the wallet.
+   */
+  createCredentialOffer(options: OpenId4VciCreateCredentialOfferOptions & {
+    issuerId: string;
+  }): Promise<{
+    issuanceSession: OpenId4VcIssuanceSessionRecord;
+    credentialOffer: string;
+  }>;
+  /**
+   * This function creates a response which can be sent to the holder after receiving a credential issuance request.
+   */
+  createCredentialResponse(options: OpenId4VciCreateCredentialResponseOptions & {
+    issuanceSessionId: string;
+  }): Promise<{
+    issuanceSession: OpenId4VcIssuanceSessionRecord;
+    credentialResponse: _openid4vc_openid4vci0.CredentialResponse;
+  }>;
+  /**
+   * This function creates a response which can be sent to the holder after receiving a deferred credential issuance request.
+   */
+  createDeferredCredentialResponse(options: OpenId4VciCreateDeferredCredentialResponseOptions & {
+    issuanceSessionId: string;
+  }): Promise<{
+    issuanceSession: OpenId4VcIssuanceSessionRecord;
+    deferredCredentialResponse: _openid4vc_openid4vci0.DeferredCredentialResponse;
+  }>;
+  getIssuerMetadata(issuerId: string): Promise<{
+    originalDraftVersion: _openid4vc_openid4vci0.Openid4vciDraftVersion;
+    credentialIssuer: {
+      credential_issuer: string;
+      credential_endpoint: string;
+      deferred_credential_endpoint: string;
+      credential_configurations_supported: OpenId4VciCredentialConfigurationsSupportedWithFormats;
+      authorization_servers: string[] | undefined;
+      display: {
+        [x: string]: unknown;
+        name?: string | undefined;
+        locale?: string | undefined;
+        logo?: {
+          [x: string]: unknown;
+          uri?: string | undefined;
+          alt_text?: string | undefined;
+        } | undefined;
+      }[] | undefined;
+      nonce_endpoint: string;
+      batch_credential_issuance: {
+        batch_size: number;
+      } | undefined;
+    };
+    authorizationServers: ({
+      [x: string]: unknown;
+      issuer: string;
+      token_endpoint: string;
+      token_endpoint_auth_methods_supported?: string[] | undefined;
+      authorization_endpoint?: string | undefined;
+      jwks_uri?: string | undefined;
+      grant_types_supported?: string[] | undefined;
+      code_challenge_methods_supported?: string[] | undefined;
+      dpop_signing_alg_values_supported?: string[] | undefined;
+      require_pushed_authorization_requests?: boolean | undefined;
+      pushed_authorization_request_endpoint?: string | undefined;
+      introspection_endpoint?: string | undefined;
+      introspection_endpoint_auth_methods_supported?: string[] | undefined;
+      introspection_endpoint_auth_signing_alg_values_supported?: string[] | undefined;
+      authorization_challenge_endpoint?: string | undefined;
+      'pre-authorized_grant_anonymous_access_supported'?: boolean | undefined;
+      client_attestation_pop_nonce_required?: boolean | undefined;
+    } | {
+      issuer: string;
+      token_endpoint: string;
+      'pre-authorized_grant_anonymous_access_supported': true;
+      jwks_uri: string;
+      grant_types_supported: ("authorization_code" | "urn:ietf:params:oauth:grant-type:pre-authorized_code")[];
+      authorization_challenge_endpoint: string;
+      authorization_endpoint: string;
+      pushed_authorization_request_endpoint: string;
+      require_pushed_authorization_requests: true;
+      code_challenge_methods_supported: _openid4vc_oauth20.PkceCodeChallengeMethod[];
+      dpop_signing_alg_values_supported: ["HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "PS256" | "PS384" | "PS512" | "EdDSA" | "Ed25519" | "ES256K", ...("HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "PS256" | "PS384" | "PS512" | "EdDSA" | "Ed25519" | "ES256K")[]] | undefined;
+    })[];
+    knownCredentialConfigurations: OpenId4VciCredentialConfigurationsSupportedWithFormats;
+    signedMetadataJwt: string | undefined;
+  }>;
+  getIssuanceSessionById(issuanceSessionId: string): Promise<OpenId4VcIssuanceSessionRecord>;
+}
+//#endregion
+export { OpenId4VcIssuerApi };
+//# sourceMappingURL=OpenId4VcIssuerApi.d.mts.map

package/build/openid4vc-issuer/OpenId4VcIssuerApi.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerApi.d.mts","names":[],"sources":["../../src/openid4vc-issuer/OpenId4VcIssuerApi.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;cAmBa,kBAAA;mBAEe;;EAFf,QAAA,sBAAkB;EAEH,WAAA,CAAA,MAAA,EAAA,2BAAA,EAAA,YAAA,EACF,YADE,EAAA,sBAAA,EAEQ,sBAFR;EAAA,aAAA,CAAA,CAAA,EAKA,OALA,CAE8B,qBAAA,EAF9B,CAAA;EACF,mBAAA,CAAA,QAAA,EAAA,MAAA,CAAA,EAQyB,OARzB,CAIE,qBAAA,CAJF;EACU;;;;EAOe,YAAA,CAAA,OAAA,EAQd,6BARc,CAAA,EAQe,OARf,CAQe,qBAAA,CARf;EAQd;;;EAOsB,2BAAA,CAAA,QAAA,EAAA,MAAA,CAAA,EAAA,OAAA,CAAA,IAAA,CAAA;EAKd,oBAAA,CAAA,OAAA,EAAA,kCAAA,CAAA,EAAkC,OAAlC,CAAA,IAAA,CAAA;EAAkC;;;;EAsCjC,8BAAA,CAAA,OAAA,EAZjC,+CAYiC,GAAA;IAAsC,QAAA,EAAA,MAAA;EAAuB,CAAA,CAAA,EAZxB,OAYwB,CAAA;IAU9F,eAAA,EAAA,MAAA;IAAyC,qBAAA,EAtBM,gCAsBN;;EAAgC;;;;;EAeQ,qBAAA,CAAA,OAAA,EAzBhD,sCAyBgD,GAAA;;MAzBa;qBAAvB;IAuCnC,eAAA,EAAA,MAAA;EAAA,CAAA,CAAA;EAKc;;;oCAlClD;;MAAyE;qBAAhC;;;;;;4CAezC;;MAAiF;qBAAhC;;;uCAcb;0BAd6C,sBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qDAmB/B,QALd,8BAAA"}

package/build/openid4vc-issuer/OpenId4VcIssuerApi.mjs

@@ -0,0 +1,108 @@
+import { OpenId4VcIssuerModuleConfig } from "./OpenId4VcIssuerModuleConfig.mjs";
+import { __decorateMetadata } from "../_virtual/_@oxc-project_runtime@0.99.0/helpers/decorateMetadata.mjs";
+import { __decorate } from "../_virtual/_@oxc-project_runtime@0.99.0/helpers/decorate.mjs";
+import { OpenId4VcIssuerService } from "./OpenId4VcIssuerService.mjs";
+import { AgentContext, injectable } from "@credo-ts/core";
+
+//#region src/openid4vc-issuer/OpenId4VcIssuerApi.ts
+var _ref, _ref2, _ref3;
+let OpenId4VcIssuerApi = class OpenId4VcIssuerApi$1 {
+	constructor(config, agentContext, openId4VcIssuerService) {
+		this.config = config;
+		this.agentContext = agentContext;
+		this.openId4VcIssuerService = openId4VcIssuerService;
+	}
+	async getAllIssuers() {
+		return this.openId4VcIssuerService.getAllIssuers(this.agentContext);
+	}
+	async getIssuerByIssuerId(issuerId) {
+		return this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId);
+	}
+	/**
+	* Creates an issuer and stores the corresponding issuer metadata. Multiple issuers can be created, to allow different sets of
+	* credentials to be issued with each issuer.
+	*/
+	async createIssuer(options) {
+		return this.openId4VcIssuerService.createIssuer(this.agentContext, options);
+	}
+	/**
+	* Rotate the key used for signing access tokens for the issuer with the given issuerId.
+	*/
+	async rotateAccessTokenSigningKey(issuerId) {
+		const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId);
+		return this.openId4VcIssuerService.rotateAccessTokenSigningKey(this.agentContext, issuer);
+	}
+	async updateIssuerMetadata(options) {
+		const { issuerId, credentialConfigurationsSupported, display, dpopSigningAlgValuesSupported, batchCredentialIssuance, authorizationServerConfigs } = options;
+		const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId);
+		issuer.credentialConfigurationsSupported = credentialConfigurationsSupported;
+		issuer.display = display;
+		issuer.dpopSigningAlgValuesSupported = dpopSigningAlgValuesSupported;
+		issuer.batchCredentialIssuance = batchCredentialIssuance;
+		issuer.authorizationServerConfigs = authorizationServerConfigs;
+		return this.openId4VcIssuerService.updateIssuer(this.agentContext, issuer);
+	}
+	/**
+	* Creates a stateless credential offer. This can only be used with an external authorization server, as credo only supports stateful
+	* credential offers.
+	*/
+	async createStatelessCredentialOffer(options) {
+		const { issuerId, ...rest } = options;
+		const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId);
+		return await this.openId4VcIssuerService.createStatelessCredentialOffer(this.agentContext, {
+			...rest,
+			issuer
+		});
+	}
+	/**
+	* Creates a credential offer. Either the preAuthorizedCodeFlowConfig or the authorizationCodeFlowConfig must be provided.
+	*
+	* @returns Object containing the payload of the credential offer and the credential offer request, which can be sent to the wallet.
+	*/
+	async createCredentialOffer(options) {
+		const { issuerId, ...rest } = options;
+		const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId);
+		return await this.openId4VcIssuerService.createCredentialOffer(this.agentContext, {
+			...rest,
+			issuer
+		});
+	}
+	/**
+	* This function creates a response which can be sent to the holder after receiving a credential issuance request.
+	*/
+	async createCredentialResponse(options) {
+		const { issuanceSessionId, ...rest } = options;
+		const issuanceSession = await this.openId4VcIssuerService.getIssuanceSessionById(this.agentContext, issuanceSessionId);
+		return await this.openId4VcIssuerService.createCredentialResponse(this.agentContext, {
+			...rest,
+			issuanceSession
+		});
+	}
+	/**
+	* This function creates a response which can be sent to the holder after receiving a deferred credential issuance request.
+	*/
+	async createDeferredCredentialResponse(options) {
+		const { issuanceSessionId, ...rest } = options;
+		const issuanceSession = await this.openId4VcIssuerService.getIssuanceSessionById(this.agentContext, issuanceSessionId);
+		return await this.openId4VcIssuerService.createDeferredCredentialResponse(this.agentContext, {
+			...rest,
+			issuanceSession
+		});
+	}
+	async getIssuerMetadata(issuerId) {
+		const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId);
+		return this.openId4VcIssuerService.getIssuerMetadata(this.agentContext, issuer);
+	}
+	async getIssuanceSessionById(issuanceSessionId) {
+		return this.openId4VcIssuerService.getIssuanceSessionById(this.agentContext, issuanceSessionId);
+	}
+};
+OpenId4VcIssuerApi = __decorate([injectable(), __decorateMetadata("design:paramtypes", [
+	typeof (_ref = typeof OpenId4VcIssuerModuleConfig !== "undefined" && OpenId4VcIssuerModuleConfig) === "function" ? _ref : Object,
+	typeof (_ref2 = typeof AgentContext !== "undefined" && AgentContext) === "function" ? _ref2 : Object,
+	typeof (_ref3 = typeof OpenId4VcIssuerService !== "undefined" && OpenId4VcIssuerService) === "function" ? _ref3 : Object
+])], OpenId4VcIssuerApi);
+
+//#endregion
+export { OpenId4VcIssuerApi };
+//# sourceMappingURL=OpenId4VcIssuerApi.mjs.map

package/build/openid4vc-issuer/OpenId4VcIssuerApi.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerApi.mjs","names":["OpenId4VcIssuerApi","config: OpenId4VcIssuerModuleConfig","agentContext: AgentContext","openId4VcIssuerService: OpenId4VcIssuerService"],"sources":["../../src/openid4vc-issuer/OpenId4VcIssuerApi.ts"],"sourcesContent":["import { AgentContext, injectable } from '@credo-ts/core'\nimport { OpenId4VcIssuerModuleConfig } from './OpenId4VcIssuerModuleConfig'\nimport { OpenId4VcIssuerService } from './OpenId4VcIssuerService'\nimport type {\n  OpenId4VciCreateCredentialOfferOptions,\n  OpenId4VciCreateCredentialResponseOptions,\n  OpenId4VciCreateDeferredCredentialResponseOptions,\n  OpenId4VciCreateIssuerOptions,\n  OpenId4VciCreateStatelessCredentialOfferOptions,\n  OpenId4VcUpdateIssuerRecordOptions,\n} from './OpenId4VcIssuerServiceOptions'\n\n/**\n * @public\n * This class represents the API for interacting with the OpenID4VC Issuer service.\n * It provides methods for creating a credential offer, creating a response to a credential issuance request,\n * and retrieving a credential offer from a URI.\n */\n@injectable()\nexport class OpenId4VcIssuerApi {\n  public constructor(\n    public readonly config: OpenId4VcIssuerModuleConfig,\n    private agentContext: AgentContext,\n    private openId4VcIssuerService: OpenId4VcIssuerService\n  ) {}\n\n  public async getAllIssuers() {\n    return this.openId4VcIssuerService.getAllIssuers(this.agentContext)\n  }\n\n  public async getIssuerByIssuerId(issuerId: string) {\n    return this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId)\n  }\n\n  /**\n   * Creates an issuer and stores the corresponding issuer metadata. Multiple issuers can be created, to allow different sets of\n   * credentials to be issued with each issuer.\n   */\n  public async createIssuer(options: OpenId4VciCreateIssuerOptions) {\n    return this.openId4VcIssuerService.createIssuer(this.agentContext, options)\n  }\n\n  /**\n   * Rotate the key used for signing access tokens for the issuer with the given issuerId.\n   */\n  public async rotateAccessTokenSigningKey(issuerId: string) {\n    const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId)\n    return this.openId4VcIssuerService.rotateAccessTokenSigningKey(this.agentContext, issuer)\n  }\n\n  public async updateIssuerMetadata(options: OpenId4VcUpdateIssuerRecordOptions) {\n    const {\n      issuerId,\n      credentialConfigurationsSupported,\n      display,\n      dpopSigningAlgValuesSupported,\n      batchCredentialIssuance,\n      authorizationServerConfigs,\n    } = options\n\n    const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId)\n\n    issuer.credentialConfigurationsSupported = credentialConfigurationsSupported\n    issuer.display = display\n    issuer.dpopSigningAlgValuesSupported = dpopSigningAlgValuesSupported\n    issuer.batchCredentialIssuance = batchCredentialIssuance\n    issuer.authorizationServerConfigs = authorizationServerConfigs\n\n    return this.openId4VcIssuerService.updateIssuer(this.agentContext, issuer)\n  }\n\n  /**\n   * Creates a stateless credential offer. This can only be used with an external authorization server, as credo only supports stateful\n   * credential offers.\n   */\n  public async createStatelessCredentialOffer(\n    options: OpenId4VciCreateStatelessCredentialOfferOptions & { issuerId: string }\n  ) {\n    const { issuerId, ...rest } = options\n    const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId)\n    return await this.openId4VcIssuerService.createStatelessCredentialOffer(this.agentContext, { ...rest, issuer })\n  }\n\n  /**\n   * Creates a credential offer. Either the preAuthorizedCodeFlowConfig or the authorizationCodeFlowConfig must be provided.\n   *\n   * @returns Object containing the payload of the credential offer and the credential offer request, which can be sent to the wallet.\n   */\n  public async createCredentialOffer(options: OpenId4VciCreateCredentialOfferOptions & { issuerId: string }) {\n    const { issuerId, ...rest } = options\n    const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId)\n    return await this.openId4VcIssuerService.createCredentialOffer(this.agentContext, { ...rest, issuer })\n  }\n\n  /**\n   * This function creates a response which can be sent to the holder after receiving a credential issuance request.\n   */\n  public async createCredentialResponse(\n    options: OpenId4VciCreateCredentialResponseOptions & { issuanceSessionId: string }\n  ) {\n    const { issuanceSessionId, ...rest } = options\n    const issuanceSession = await this.openId4VcIssuerService.getIssuanceSessionById(\n      this.agentContext,\n      issuanceSessionId\n    )\n\n    return await this.openId4VcIssuerService.createCredentialResponse(this.agentContext, { ...rest, issuanceSession })\n  }\n\n  /**\n   * This function creates a response which can be sent to the holder after receiving a deferred credential issuance request.\n   */\n  public async createDeferredCredentialResponse(\n    options: OpenId4VciCreateDeferredCredentialResponseOptions & { issuanceSessionId: string }\n  ) {\n    const { issuanceSessionId, ...rest } = options\n    const issuanceSession = await this.openId4VcIssuerService.getIssuanceSessionById(\n      this.agentContext,\n      issuanceSessionId\n    )\n\n    return await this.openId4VcIssuerService.createDeferredCredentialResponse(this.agentContext, {\n      ...rest,\n      issuanceSession,\n    })\n  }\n\n  public async getIssuerMetadata(issuerId: string) {\n    const issuer = await this.openId4VcIssuerService.getIssuerByIssuerId(this.agentContext, issuerId)\n    return this.openId4VcIssuerService.getIssuerMetadata(this.agentContext, issuer)\n  }\n\n  public async getIssuanceSessionById(issuanceSessionId: string) {\n    return this.openId4VcIssuerService.getIssuanceSessionById(this.agentContext, issuanceSessionId)\n  }\n}\n"],"mappings":";;;;;;;;AAmBO,+BAAMA,qBAAmB;CAC9B,AAAO,YACL,AAAgBC,QAChB,AAAQC,cACR,AAAQC,wBACR;EAHgB;EACR;EACA;;CAGV,MAAa,gBAAgB;AAC3B,SAAO,KAAK,uBAAuB,cAAc,KAAK,aAAa;;CAGrE,MAAa,oBAAoB,UAAkB;AACjD,SAAO,KAAK,uBAAuB,oBAAoB,KAAK,cAAc,SAAS;;;;;;CAOrF,MAAa,aAAa,SAAwC;AAChE,SAAO,KAAK,uBAAuB,aAAa,KAAK,cAAc,QAAQ;;;;;CAM7E,MAAa,4BAA4B,UAAkB;EACzD,MAAM,SAAS,MAAM,KAAK,uBAAuB,oBAAoB,KAAK,cAAc,SAAS;AACjG,SAAO,KAAK,uBAAuB,4BAA4B,KAAK,cAAc,OAAO;;CAG3F,MAAa,qBAAqB,SAA6C;EAC7E,MAAM,EACJ,UACA,mCACA,SACA,+BACA,yBACA,+BACE;EAEJ,MAAM,SAAS,MAAM,KAAK,uBAAuB,oBAAoB,KAAK,cAAc,SAAS;AAEjG,SAAO,oCAAoC;AAC3C,SAAO,UAAU;AACjB,SAAO,gCAAgC;AACvC,SAAO,0BAA0B;AACjC,SAAO,6BAA6B;AAEpC,SAAO,KAAK,uBAAuB,aAAa,KAAK,cAAc,OAAO;;;;;;CAO5E,MAAa,+BACX,SACA;EACA,MAAM,EAAE,UAAU,GAAG,SAAS;EAC9B,MAAM,SAAS,MAAM,KAAK,uBAAuB,oBAAoB,KAAK,cAAc,SAAS;AACjG,SAAO,MAAM,KAAK,uBAAuB,+BAA+B,KAAK,cAAc;GAAE,GAAG;GAAM;GAAQ,CAAC;;;;;;;CAQjH,MAAa,sBAAsB,SAAwE;EACzG,MAAM,EAAE,UAAU,GAAG,SAAS;EAC9B,MAAM,SAAS,MAAM,KAAK,uBAAuB,oBAAoB,KAAK,cAAc,SAAS;AACjG,SAAO,MAAM,KAAK,uBAAuB,sBAAsB,KAAK,cAAc;GAAE,GAAG;GAAM;GAAQ,CAAC;;;;;CAMxG,MAAa,yBACX,SACA;EACA,MAAM,EAAE,mBAAmB,GAAG,SAAS;EACvC,MAAM,kBAAkB,MAAM,KAAK,uBAAuB,uBACxD,KAAK,cACL,kBACD;AAED,SAAO,MAAM,KAAK,uBAAuB,yBAAyB,KAAK,cAAc;GAAE,GAAG;GAAM;GAAiB,CAAC;;;;;CAMpH,MAAa,iCACX,SACA;EACA,MAAM,EAAE,mBAAmB,GAAG,SAAS;EACvC,MAAM,kBAAkB,MAAM,KAAK,uBAAuB,uBACxD,KAAK,cACL,kBACD;AAED,SAAO,MAAM,KAAK,uBAAuB,iCAAiC,KAAK,cAAc;GAC3F,GAAG;GACH;GACD,CAAC;;CAGJ,MAAa,kBAAkB,UAAkB;EAC/C,MAAM,SAAS,MAAM,KAAK,uBAAuB,oBAAoB,KAAK,cAAc,SAAS;AACjG,SAAO,KAAK,uBAAuB,kBAAkB,KAAK,cAAc,OAAO;;CAGjF,MAAa,uBAAuB,mBAA2B;AAC7D,SAAO,KAAK,uBAAuB,uBAAuB,KAAK,cAAc,kBAAkB;;;iCAnHlG,YAAY"}

package/build/openid4vc-issuer/OpenId4VcIssuerEvents.d.mts

@@ -0,0 +1,19 @@
+import { OpenId4VcIssuanceSessionState } from "./OpenId4VcIssuanceSessionState.mjs";
+import { OpenId4VcIssuanceSessionRecord } from "./repository/OpenId4VcIssuanceSessionRecord.mjs";
+import "./repository/index.mjs";
+import { BaseEvent } from "@credo-ts/core";
+
+//#region src/openid4vc-issuer/OpenId4VcIssuerEvents.d.ts
+declare enum OpenId4VcIssuerEvents {
+  IssuanceSessionStateChanged = "OpenId4VcIssuer.IssuanceSessionStateChanged",
+}
+interface OpenId4VcIssuanceSessionStateChangedEvent extends BaseEvent {
+  type: typeof OpenId4VcIssuerEvents.IssuanceSessionStateChanged;
+  payload: {
+    issuanceSession: OpenId4VcIssuanceSessionRecord;
+    previousState: OpenId4VcIssuanceSessionState | null;
+  };
+}
+//#endregion
+export { OpenId4VcIssuanceSessionStateChangedEvent, OpenId4VcIssuerEvents };
+//# sourceMappingURL=OpenId4VcIssuerEvents.d.mts.map

package/build/openid4vc-issuer/OpenId4VcIssuerEvents.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerEvents.d.mts","names":[],"sources":["../../src/openid4vc-issuer/OpenId4VcIssuerEvents.ts"],"sourcesContent":[],"mappings":";;;;;;aAIY,qBAAA;;;AAAA,UAIK,yCAAA,SAAkD,SAJlC,CAAA;EAIhB,IAAA,EAAA,OACF,qBAAA,CAAsB,2BADsB;EAC5C,OAAA,EAAA;IAEM,eAAA,EAAA,8BAAA;IACF,aAAA,EAAA,6BAAA,GAAA,IAAA;EAJgD,CAAA"}

package/build/openid4vc-issuer/OpenId4VcIssuerEvents.mjs

@@ -0,0 +1,9 @@
+//#region src/openid4vc-issuer/OpenId4VcIssuerEvents.ts
+let OpenId4VcIssuerEvents = /* @__PURE__ */ function(OpenId4VcIssuerEvents$1) {
+	OpenId4VcIssuerEvents$1["IssuanceSessionStateChanged"] = "OpenId4VcIssuer.IssuanceSessionStateChanged";
+	return OpenId4VcIssuerEvents$1;
+}({});
+
+//#endregion
+export { OpenId4VcIssuerEvents };
+//# sourceMappingURL=OpenId4VcIssuerEvents.mjs.map

package/build/openid4vc-issuer/OpenId4VcIssuerEvents.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerEvents.mjs","names":[],"sources":["../../src/openid4vc-issuer/OpenId4VcIssuerEvents.ts"],"sourcesContent":["import type { BaseEvent } from '@credo-ts/core'\nimport type { OpenId4VcIssuanceSessionState } from './OpenId4VcIssuanceSessionState'\nimport type { OpenId4VcIssuanceSessionRecord } from './repository'\n\nexport enum OpenId4VcIssuerEvents {\n  IssuanceSessionStateChanged = 'OpenId4VcIssuer.IssuanceSessionStateChanged',\n}\n\nexport interface OpenId4VcIssuanceSessionStateChangedEvent extends BaseEvent {\n  type: typeof OpenId4VcIssuerEvents.IssuanceSessionStateChanged\n  payload: {\n    issuanceSession: OpenId4VcIssuanceSessionRecord\n    previousState: OpenId4VcIssuanceSessionState | null\n  }\n}\n"],"mappings":";AAIA,IAAY,0EAAL;AACL"}

package/build/openid4vc-issuer/OpenId4VcIssuerModule.d.mts

@@ -0,0 +1,27 @@
+import { InternalOpenId4VcIssuerModuleConfigOptions, OpenId4VcIssuerModuleConfig } from "./OpenId4VcIssuerModuleConfig.mjs";
+import { AgentContext, DependencyManager, Module } from "@credo-ts/core";
+
+//#region src/openid4vc-issuer/OpenId4VcIssuerModule.d.ts
+
+/**
+ * @public
+ */
+declare class OpenId4VcIssuerModule implements Module {
+  readonly config: OpenId4VcIssuerModuleConfig;
+  constructor(options: InternalOpenId4VcIssuerModuleConfigOptions | OpenId4VcIssuerModuleConfig);
+  /**
+   * Registers the dependencies of the openid4vc issuer module on the dependency manager.
+   */
+  register(dependencyManager: DependencyManager): void;
+  initialize(rootAgentContext: AgentContext): Promise<void>;
+  /**
+   * Registers the endpoints on the router passed to this module.
+   */
+  private configureRouter;
+  private getIssuerIdParamHandler;
+  private registerWellKnownRoutes;
+  private registerIssuerRoutes;
+}
+//#endregion
+export { OpenId4VcIssuerModule };
+//# sourceMappingURL=OpenId4VcIssuerModule.d.mts.map

package/build/openid4vc-issuer/OpenId4VcIssuerModule.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerModule.d.mts","names":[],"sources":["../../src/openid4vc-issuer/OpenId4VcIssuerModule.ts"],"sourcesContent":[],"mappings":";;;;;;AA4BA;;AAG8B,cAHjB,qBAAA,YAAiC,MAGhB,CAAA;EAA6C,SAAA,MAAA,EAFjD,2BAEiD;EAOtC,WAAA,CAAA,OAAA,EAPP,0CAOO,GAPsC,2BAOtC;EAgBO;;;EA1BQ,QAAA,CAAA,iBAAA,EAUf,iBAVe,CAAA,EAAA,IAAA;+BA0BR,eAAe"}

package/build/openid4vc-issuer/OpenId4VcIssuerModule.mjs

@@ -0,0 +1,150 @@
+import { OpenId4VcIssuerModuleConfig } from "./OpenId4VcIssuerModuleConfig.mjs";
+import { getRequestContext } from "../shared/router/context.mjs";
+import { importExpress } from "../shared/router/express.mjs";
+import { getAgentContextForActorId } from "../shared/router/tenants.mjs";
+import "../shared/router/index.mjs";
+import { OpenId4VcIssuanceSessionRepository } from "./repository/OpenId4VcIssuanceSessionRepository.mjs";
+import { OpenId4VcIssuerRepository } from "./repository/OpenId4VcIssuerRepository.mjs";
+import "./repository/index.mjs";
+import { OpenId4VcIssuerService } from "./OpenId4VcIssuerService.mjs";
+import { OpenId4VcIssuerApi } from "./OpenId4VcIssuerApi.mjs";
+import { configureAccessTokenEndpoint } from "./router/accessTokenEndpoint.mjs";
+import { configurePushedAuthorizationRequestEndpoint } from "./router/pushedAuthorizationRequestEndpoint.mjs";
+import { configureAuthorizationChallengeEndpoint } from "./router/authorizationChallengeEndpoint.mjs";
+import { configureAuthorizationEndpoint } from "./router/authorizationEndpoint.mjs";
+import { configureOAuthAuthorizationServerMetadataEndpoint } from "./router/authorizationServerMetadataEndpoint.mjs";
+import { configureCredentialEndpoint } from "./router/credentialEndpoint.mjs";
+import { configureCredentialOfferEndpoint } from "./router/credentialOfferEndpoint.mjs";
+import { configureDeferredCredentialEndpoint } from "./router/deferredCredentialEndpoint.mjs";
+import { configureIssuerMetadataEndpoint } from "./router/issuerMetadataEndpoint.mjs";
+import { configureJwksEndpoint } from "./router/jwksEndpoint.mjs";
+import { configureNonceEndpoint } from "./router/nonceEndpoint.mjs";
+import { configureRedirectEndpoint } from "./router/redirectEndpoint.mjs";
+import "./router/index.mjs";
+import { joinUriParts } from "@credo-ts/core";
+
+//#region src/openid4vc-issuer/OpenId4VcIssuerModule.ts
+/**
+* @public
+*/
+var OpenId4VcIssuerModule = class {
+	constructor(options) {
+		this.getIssuerIdParamHandler = (rootAgentContext) => async (req, res, next, issuerId) => {
+			if (!issuerId) {
+				rootAgentContext.config.logger.debug("No issuerId provided for incoming oid4vci request, returning 404");
+				return res.status(404).send("Not found");
+			}
+			let agentContext;
+			try {
+				agentContext = await getAgentContextForActorId(rootAgentContext, issuerId);
+				const issuer = await agentContext.dependencyManager.resolve(OpenId4VcIssuerApi).getIssuerByIssuerId(issuerId);
+				req.requestContext = {
+					agentContext,
+					issuer
+				};
+			} catch (error) {
+				agentContext?.config.logger.error("Failed to correlate incoming oid4vci request to existing tenant and issuer", { error });
+				await agentContext?.endSession();
+				return res.status(404).send("Not found");
+			}
+			next();
+		};
+		this.config = options instanceof OpenId4VcIssuerModuleConfig ? options : new OpenId4VcIssuerModuleConfig(options);
+	}
+	/**
+	* Registers the dependencies of the openid4vc issuer module on the dependency manager.
+	*/
+	register(dependencyManager) {
+		dependencyManager.registerContextScoped(OpenId4VcIssuerApi);
+		dependencyManager.registerInstance(OpenId4VcIssuerModuleConfig, this.config);
+		dependencyManager.registerSingleton(OpenId4VcIssuerService);
+		dependencyManager.registerSingleton(OpenId4VcIssuerRepository);
+		dependencyManager.registerSingleton(OpenId4VcIssuanceSessionRepository);
+	}
+	async initialize(rootAgentContext) {
+		this.configureRouter(rootAgentContext);
+	}
+	/**
+	* Registers the endpoints on the router passed to this module.
+	*/
+	configureRouter(rootAgentContext) {
+		this.registerWellKnownRoutes(rootAgentContext);
+		this.registerIssuerRoutes(rootAgentContext);
+	}
+	registerWellKnownRoutes(rootAgentContext) {
+		const issuerIdParamHandler = this.getIssuerIdParamHandler(rootAgentContext);
+		const { Router } = importExpress();
+		const wellKnownEndpointsRouter = Router();
+		const basePath = new URL(this.config.baseUrl).pathname;
+		const issuerPath = joinUriParts(basePath, [":issuerId"]);
+		const openidCredentialIssuerPath = joinUriParts("/.well-known/openid-credential-issuer", [issuerPath]);
+		const oauthAuthorizationServerPath = joinUriParts("/.well-known/oauth-authorization-server", [issuerPath]);
+		wellKnownEndpointsRouter.param("issuerId", issuerIdParamHandler);
+		configureIssuerMetadataEndpoint(wellKnownEndpointsRouter, openidCredentialIssuerPath);
+		configureOAuthAuthorizationServerMetadataEndpoint(wellKnownEndpointsRouter, oauthAuthorizationServerPath);
+		wellKnownEndpointsRouter.use(async (req, _res, next) => {
+			const { agentContext } = getRequestContext(req);
+			await agentContext.endSession();
+			next();
+		});
+		wellKnownEndpointsRouter.use(async (_error, req, res, next) => {
+			const { agentContext } = getRequestContext(req);
+			if (!res.headersSent) {
+				agentContext.config.logger.warn("Error was thrown but openid4vci endpoint did not send a response. Sending generic server_error.");
+				res.status(500).json({
+					error: "server_error",
+					error_description: "An unexpected error occurred on the server."
+				});
+			}
+			await agentContext.endSession();
+			next();
+		});
+		this.config.app.get(openidCredentialIssuerPath, wellKnownEndpointsRouter);
+		this.config.app.get(oauthAuthorizationServerPath, wellKnownEndpointsRouter);
+	}
+	registerIssuerRoutes(rootAgentContext) {
+		const { Router, json, urlencoded } = importExpress();
+		const issuerContextRouter = Router();
+		const issuerEndpointsRouter = Router();
+		const issuerIdParamHandler = this.getIssuerIdParamHandler(rootAgentContext);
+		const basePath = new URL(this.config.baseUrl).pathname;
+		issuerContextRouter.use(urlencoded({ extended: false }));
+		issuerContextRouter.use(json());
+		issuerContextRouter.param("issuerId", issuerIdParamHandler);
+		issuerContextRouter.use("/:issuerId", issuerEndpointsRouter);
+		configureIssuerMetadataEndpoint(issuerEndpointsRouter, "/.well-known/openid-credential-issuer");
+		configureOAuthAuthorizationServerMetadataEndpoint(issuerEndpointsRouter, "/.well-known/oauth-authorization-server");
+		configureJwksEndpoint(issuerEndpointsRouter, this.config);
+		configureNonceEndpoint(issuerEndpointsRouter, this.config);
+		configureCredentialOfferEndpoint(issuerEndpointsRouter, this.config);
+		configureAccessTokenEndpoint(issuerEndpointsRouter, this.config);
+		configureAuthorizationChallengeEndpoint(issuerEndpointsRouter, this.config);
+		configureCredentialEndpoint(issuerEndpointsRouter, this.config);
+		configureDeferredCredentialEndpoint(issuerEndpointsRouter, this.config);
+		configurePushedAuthorizationRequestEndpoint(issuerEndpointsRouter, this.config);
+		configureAuthorizationEndpoint(issuerEndpointsRouter, this.config);
+		configureRedirectEndpoint(issuerEndpointsRouter, this.config);
+		issuerContextRouter.use(async (req, _res, next) => {
+			const { agentContext } = getRequestContext(req);
+			await agentContext.endSession();
+			next();
+		});
+		issuerContextRouter.use(async (_error, req, res, next) => {
+			const { agentContext } = getRequestContext(req);
+			if (!res.headersSent) {
+				agentContext.config.logger.warn("Error was thrown but openid4vci endpoint did not send a response. Sending generic server_error.");
+				res.status(500).json({
+					error: "server_error",
+					error_description: "An unexpected error occurred on the server."
+				});
+			}
+			await agentContext.endSession();
+			next();
+		});
+		this.config.app.use(basePath, issuerContextRouter);
+	}
+};
+
+//#endregion
+export { OpenId4VcIssuerModule };
+//# sourceMappingURL=OpenId4VcIssuerModule.mjs.map

package/build/openid4vc-issuer/OpenId4VcIssuerModule.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenId4VcIssuerModule.mjs","names":["agentContext: AgentContext | undefined"],"sources":["../../src/openid4vc-issuer/OpenId4VcIssuerModule.ts"],"sourcesContent":["import { type AgentContext, type DependencyManager, joinUriParts, type Module } from '@credo-ts/core'\nimport type { NextFunction, Response } from 'express'\nimport { getAgentContextForActorId, getRequestContext, importExpress } from '../shared/router'\nimport { OpenId4VcIssuerApi } from './OpenId4VcIssuerApi'\nimport type { InternalOpenId4VcIssuerModuleConfigOptions } from './OpenId4VcIssuerModuleConfig'\nimport { OpenId4VcIssuerModuleConfig } from './OpenId4VcIssuerModuleConfig'\nimport { OpenId4VcIssuerService } from './OpenId4VcIssuerService'\nimport { OpenId4VcIssuanceSessionRepository } from './repository'\nimport { OpenId4VcIssuerRepository } from './repository/OpenId4VcIssuerRepository'\nimport type { OpenId4VcIssuanceRequest } from './router'\nimport {\n  configureAccessTokenEndpoint,\n  configureAuthorizationChallengeEndpoint,\n  configureAuthorizationEndpoint,\n  configureCredentialEndpoint,\n  configureCredentialOfferEndpoint,\n  configureDeferredCredentialEndpoint,\n  configureIssuerMetadataEndpoint,\n  configureJwksEndpoint,\n  configureNonceEndpoint,\n  configureOAuthAuthorizationServerMetadataEndpoint,\n  configurePushedAuthorizationRequestEndpoint,\n  configureRedirectEndpoint,\n} from './router'\n\n/**\n * @public\n */\nexport class OpenId4VcIssuerModule implements Module {\n  public readonly config: OpenId4VcIssuerModuleConfig\n\n  public constructor(options: InternalOpenId4VcIssuerModuleConfigOptions | OpenId4VcIssuerModuleConfig) {\n    this.config = options instanceof OpenId4VcIssuerModuleConfig ? options : new OpenId4VcIssuerModuleConfig(options)\n  }\n\n  /**\n   * Registers the dependencies of the openid4vc issuer module on the dependency manager.\n   */\n  public register(dependencyManager: DependencyManager) {\n    // Since the OpenID4VC module is a nested module (a module consisting of three modules) we register the API\n    // manually. In the future we may disallow resolving the sub-api, but for now it allows for a cleaner migration path\n    dependencyManager.registerContextScoped(OpenId4VcIssuerApi)\n\n    // Register config\n    dependencyManager.registerInstance(OpenId4VcIssuerModuleConfig, this.config)\n\n    // Services\n    dependencyManager.registerSingleton(OpenId4VcIssuerService)\n\n    // Repository\n    dependencyManager.registerSingleton(OpenId4VcIssuerRepository)\n    dependencyManager.registerSingleton(OpenId4VcIssuanceSessionRepository)\n  }\n\n  public async initialize(rootAgentContext: AgentContext): Promise<void> {\n    this.configureRouter(rootAgentContext)\n  }\n\n  /**\n   * Registers the endpoints on the router passed to this module.\n   */\n  private configureRouter(rootAgentContext: AgentContext) {\n    // TODO: it is currently not possible to initialize an agent\n    // shut it down, and then start it again, as the\n    // express router is configured with a specific `AgentContext` instance\n    // and dependency manager. One option is to always create a new router\n    // but then users cannot pass their own router implementation.\n    // We need to find a proper way to fix this.\n    this.registerWellKnownRoutes(rootAgentContext)\n    this.registerIssuerRoutes(rootAgentContext)\n  }\n\n  private getIssuerIdParamHandler =\n    (rootAgentContext: AgentContext) =>\n    async (req: OpenId4VcIssuanceRequest, res: Response, next: NextFunction, issuerId: string) => {\n      if (!issuerId) {\n        rootAgentContext.config.logger.debug('No issuerId provided for incoming oid4vci request, returning 404')\n        return res.status(404).send('Not found')\n      }\n\n      let agentContext: AgentContext | undefined\n\n      try {\n        // FIXME: should we create combined openId actor record?\n        agentContext = await getAgentContextForActorId(rootAgentContext, issuerId)\n        const issuerApi = agentContext.dependencyManager.resolve(OpenId4VcIssuerApi)\n        const issuer = await issuerApi.getIssuerByIssuerId(issuerId)\n\n        req.requestContext = {\n          agentContext,\n          issuer,\n        }\n      } catch (error) {\n        agentContext?.config.logger.error(\n          'Failed to correlate incoming oid4vci request to existing tenant and issuer',\n          {\n            error,\n          }\n        )\n        // If the opening failed\n        await agentContext?.endSession()\n\n        return res.status(404).send('Not found')\n      }\n\n      next()\n    }\n\n  private registerWellKnownRoutes(rootAgentContext: AgentContext) {\n    const issuerIdParamHandler = this.getIssuerIdParamHandler(rootAgentContext)\n    const { Router } = importExpress()\n    const wellKnownEndpointsRouter = Router()\n\n    const basePath = new URL(this.config.baseUrl).pathname\n    const issuerPath = joinUriParts(basePath, [':issuerId'])\n\n    // The files need to be hosted at the root .well-known directory\n    const openidCredentialIssuerPath = joinUriParts('/.well-known/openid-credential-issuer', [issuerPath])\n    const oauthAuthorizationServerPath = joinUriParts('/.well-known/oauth-authorization-server', [issuerPath])\n\n    wellKnownEndpointsRouter.param('issuerId', issuerIdParamHandler)\n\n    configureIssuerMetadataEndpoint(wellKnownEndpointsRouter, openidCredentialIssuerPath)\n    configureOAuthAuthorizationServerMetadataEndpoint(wellKnownEndpointsRouter, oauthAuthorizationServerPath)\n\n    wellKnownEndpointsRouter.use(async (req: OpenId4VcIssuanceRequest, _res: unknown, next) => {\n      const { agentContext } = getRequestContext(req)\n      await agentContext.endSession()\n\n      next()\n    })\n\n    // This one will be called for all errors that are thrown\n    wellKnownEndpointsRouter.use(\n      async (_error: unknown, req: OpenId4VcIssuanceRequest, res: Response, next: NextFunction) => {\n        const { agentContext } = getRequestContext(req)\n\n        if (!res.headersSent) {\n          agentContext.config.logger.warn(\n            'Error was thrown but openid4vci endpoint did not send a response. Sending generic server_error.'\n          )\n\n          res.status(500).json({\n            error: 'server_error',\n            error_description: 'An unexpected error occurred on the server.',\n          })\n        }\n\n        await agentContext.endSession()\n        next()\n      }\n    )\n\n    // We only want these routes to be handle by the router, so we register each path separately\n    // here, so it's also possible for the app to register other `.well-known` endpoints.\n    this.config.app.get(openidCredentialIssuerPath, wellKnownEndpointsRouter)\n    this.config.app.get(oauthAuthorizationServerPath, wellKnownEndpointsRouter)\n  }\n\n  private registerIssuerRoutes(rootAgentContext: AgentContext) {\n    const { Router, json, urlencoded } = importExpress()\n\n    const issuerContextRouter = Router()\n    const issuerEndpointsRouter = Router()\n    const issuerIdParamHandler = this.getIssuerIdParamHandler(rootAgentContext)\n\n    const basePath = new URL(this.config.baseUrl).pathname\n\n    // parse application/x-www-form-urlencoded\n    issuerContextRouter.use(urlencoded({ extended: false }))\n    // parse application/json\n    issuerContextRouter.use(json())\n\n    // Register the issuer endpoints under /:issuerId\n    issuerContextRouter.param('issuerId', issuerIdParamHandler)\n    issuerContextRouter.use('/:issuerId', issuerEndpointsRouter)\n\n    // NOTE: these are here for backwards compat, at some point we should remove them for the root well-known counterpart\n    configureIssuerMetadataEndpoint(issuerEndpointsRouter, '/.well-known/openid-credential-issuer')\n    configureOAuthAuthorizationServerMetadataEndpoint(issuerEndpointsRouter, '/.well-known/oauth-authorization-server')\n\n    configureJwksEndpoint(issuerEndpointsRouter, this.config)\n    configureNonceEndpoint(issuerEndpointsRouter, this.config)\n    configureCredentialOfferEndpoint(issuerEndpointsRouter, this.config)\n    configureAccessTokenEndpoint(issuerEndpointsRouter, this.config)\n    configureAuthorizationChallengeEndpoint(issuerEndpointsRouter, this.config)\n    configureCredentialEndpoint(issuerEndpointsRouter, this.config)\n    configureDeferredCredentialEndpoint(issuerEndpointsRouter, this.config)\n    configurePushedAuthorizationRequestEndpoint(issuerEndpointsRouter, this.config)\n    configureAuthorizationEndpoint(issuerEndpointsRouter, this.config)\n    configureRedirectEndpoint(issuerEndpointsRouter, this.config)\n\n    // First one will be called for all requests (when next is called)\n    issuerContextRouter.use(async (req: OpenId4VcIssuanceRequest, _res: unknown, next) => {\n      const { agentContext } = getRequestContext(req)\n      await agentContext.endSession()\n\n      next()\n    })\n\n    // This one will be called for all errors that are thrown\n    issuerContextRouter.use(\n      async (_error: unknown, req: OpenId4VcIssuanceRequest, res: Response, next: NextFunction) => {\n        const { agentContext } = getRequestContext(req)\n\n        if (!res.headersSent) {\n          agentContext.config.logger.warn(\n            'Error was thrown but openid4vci endpoint did not send a response. Sending generic server_error.'\n          )\n\n          res.status(500).json({\n            error: 'server_error',\n            error_description: 'An unexpected error occurred on the server.',\n          })\n        }\n\n        await agentContext.endSession()\n        next()\n      }\n    )\n\n    // Register the issuer context router under /<basePath>\n    this.config.app.use(basePath, issuerContextRouter)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,IAAa,wBAAb,MAAqD;CAGnD,AAAO,YAAY,SAAmF;OAyC9F,2BACL,qBACD,OAAO,KAA+B,KAAe,MAAoB,aAAqB;AAC5F,OAAI,CAAC,UAAU;AACb,qBAAiB,OAAO,OAAO,MAAM,mEAAmE;AACxG,WAAO,IAAI,OAAO,IAAI,CAAC,KAAK,YAAY;;GAG1C,IAAIA;AAEJ,OAAI;AAEF,mBAAe,MAAM,0BAA0B,kBAAkB,SAAS;IAE1E,MAAM,SAAS,MADG,aAAa,kBAAkB,QAAQ,mBAAmB,CAC7C,oBAAoB,SAAS;AAE5D,QAAI,iBAAiB;KACnB;KACA;KACD;YACM,OAAO;AACd,kBAAc,OAAO,OAAO,MAC1B,8EACA,EACE,OACD,CACF;AAED,UAAM,cAAc,YAAY;AAEhC,WAAO,IAAI,OAAO,IAAI,CAAC,KAAK,YAAY;;AAG1C,SAAM;;AAzER,OAAK,SAAS,mBAAmB,8BAA8B,UAAU,IAAI,4BAA4B,QAAQ;;;;;CAMnH,AAAO,SAAS,mBAAsC;AAGpD,oBAAkB,sBAAsB,mBAAmB;AAG3D,oBAAkB,iBAAiB,6BAA6B,KAAK,OAAO;AAG5E,oBAAkB,kBAAkB,uBAAuB;AAG3D,oBAAkB,kBAAkB,0BAA0B;AAC9D,oBAAkB,kBAAkB,mCAAmC;;CAGzE,MAAa,WAAW,kBAA+C;AACrE,OAAK,gBAAgB,iBAAiB;;;;;CAMxC,AAAQ,gBAAgB,kBAAgC;AAOtD,OAAK,wBAAwB,iBAAiB;AAC9C,OAAK,qBAAqB,iBAAiB;;CAuC7C,AAAQ,wBAAwB,kBAAgC;EAC9D,MAAM,uBAAuB,KAAK,wBAAwB,iBAAiB;EAC3E,MAAM,EAAE,WAAW,eAAe;EAClC,MAAM,2BAA2B,QAAQ;EAEzC,MAAM,WAAW,IAAI,IAAI,KAAK,OAAO,QAAQ,CAAC;EAC9C,MAAM,aAAa,aAAa,UAAU,CAAC,YAAY,CAAC;EAGxD,MAAM,6BAA6B,aAAa,yCAAyC,CAAC,WAAW,CAAC;EACtG,MAAM,+BAA+B,aAAa,2CAA2C,CAAC,WAAW,CAAC;AAE1G,2BAAyB,MAAM,YAAY,qBAAqB;AAEhE,kCAAgC,0BAA0B,2BAA2B;AACrF,oDAAkD,0BAA0B,6BAA6B;AAEzG,2BAAyB,IAAI,OAAO,KAA+B,MAAe,SAAS;GACzF,MAAM,EAAE,iBAAiB,kBAAkB,IAAI;AAC/C,SAAM,aAAa,YAAY;AAE/B,SAAM;IACN;AAGF,2BAAyB,IACvB,OAAO,QAAiB,KAA+B,KAAe,SAAuB;GAC3F,MAAM,EAAE,iBAAiB,kBAAkB,IAAI;AAE/C,OAAI,CAAC,IAAI,aAAa;AACpB,iBAAa,OAAO,OAAO,KACzB,kGACD;AAED,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO;KACP,mBAAmB;KACpB,CAAC;;AAGJ,SAAM,aAAa,YAAY;AAC/B,SAAM;IAET;AAID,OAAK,OAAO,IAAI,IAAI,4BAA4B,yBAAyB;AACzE,OAAK,OAAO,IAAI,IAAI,8BAA8B,yBAAyB;;CAG7E,AAAQ,qBAAqB,kBAAgC;EAC3D,MAAM,EAAE,QAAQ,MAAM,eAAe,eAAe;EAEpD,MAAM,sBAAsB,QAAQ;EACpC,MAAM,wBAAwB,QAAQ;EACtC,MAAM,uBAAuB,KAAK,wBAAwB,iBAAiB;EAE3E,MAAM,WAAW,IAAI,IAAI,KAAK,OAAO,QAAQ,CAAC;AAG9C,sBAAoB,IAAI,WAAW,EAAE,UAAU,OAAO,CAAC,CAAC;AAExD,sBAAoB,IAAI,MAAM,CAAC;AAG/B,sBAAoB,MAAM,YAAY,qBAAqB;AAC3D,sBAAoB,IAAI,cAAc,sBAAsB;AAG5D,kCAAgC,uBAAuB,wCAAwC;AAC/F,oDAAkD,uBAAuB,0CAA0C;AAEnH,wBAAsB,uBAAuB,KAAK,OAAO;AACzD,yBAAuB,uBAAuB,KAAK,OAAO;AAC1D,mCAAiC,uBAAuB,KAAK,OAAO;AACpE,+BAA6B,uBAAuB,KAAK,OAAO;AAChE,0CAAwC,uBAAuB,KAAK,OAAO;AAC3E,8BAA4B,uBAAuB,KAAK,OAAO;AAC/D,sCAAoC,uBAAuB,KAAK,OAAO;AACvE,8CAA4C,uBAAuB,KAAK,OAAO;AAC/E,iCAA+B,uBAAuB,KAAK,OAAO;AAClE,4BAA0B,uBAAuB,KAAK,OAAO;AAG7D,sBAAoB,IAAI,OAAO,KAA+B,MAAe,SAAS;GACpF,MAAM,EAAE,iBAAiB,kBAAkB,IAAI;AAC/C,SAAM,aAAa,YAAY;AAE/B,SAAM;IACN;AAGF,sBAAoB,IAClB,OAAO,QAAiB,KAA+B,KAAe,SAAuB;GAC3F,MAAM,EAAE,iBAAiB,kBAAkB,IAAI;AAE/C,OAAI,CAAC,IAAI,aAAa;AACpB,iBAAa,OAAO,OAAO,KACzB,kGACD;AAED,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO;KACP,mBAAmB;KACpB,CAAC;;AAGJ,SAAM,aAAa,YAAY;AAC/B,SAAM;IAET;AAGD,OAAK,OAAO,IAAI,IAAI,UAAU,oBAAoB"}