@credo-ts/question-answer 0.5.2 → 0.5.4

package/build/core/src/modules/vc/jwt-vc/W3cJwtVerifiablePresentation.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.W3cJwtVerifiablePresentation = void 0;
+const Jwt_1 = require("../../../crypto/jose/jwt/Jwt");
+const error_1 = require("../../../error");
+const models_1 = require("../models");
+const presentationTransformer_1 = require("./presentationTransformer");
+class W3cJwtVerifiablePresentation {
+    constructor(options) {
+        this.jwt = options.jwt;
+        this._presentation = (0, presentationTransformer_1.getPresentationFromJwtPayload)(this.jwt.payload);
+    }
+    static fromSerializedJwt(serializedJwt) {
+        const jwt = Jwt_1.Jwt.fromSerializedJwt(serializedJwt);
+        if (!jwt.payload.additionalClaims.nonce) {
+            throw new error_1.CredoError(`JWT payload does not contain required claim 'nonce'`);
+        }
+        return new W3cJwtVerifiablePresentation({
+            jwt,
+        });
+    }
+    /**
+     * Get the W3cPresentation from the JWT payload. This does not include the JWT wrapper,
+     * and thus is not suitable for sharing. If you need a JWT, use the `serializedJwt` property.
+     *
+     * All properties and getters from the `W3cPresentation` interface are implemented as getters
+     * on the `W3cJwtVerifiablePresentation` class itself, so you can also use this directly
+     * instead of accessing the inner `presentation` property.
+     */
+    get presentation() {
+        return this._presentation;
+    }
+    get serializedJwt() {
+        return this.jwt.serializedJwt;
+    }
+    //
+    // Below all properties from the `W3cPresentation` interface are implemented as getters
+    // this is to make the interface compatible with the W3cJsonLdVerifiablePresentation interface
+    // which makes using the different classes interchangeably from a user point of view.
+    // This is 'easier' than extending the W3cPresentation class as it means we have to create the
+    // instance based on JSON, but also add custom properties.
+    //
+    get context() {
+        return this.presentation.context;
+    }
+    get id() {
+        return this.presentation.id;
+    }
+    get type() {
+        return this.presentation.type;
+    }
+    get holder() {
+        return this.presentation.holder;
+    }
+    get verifiableCredential() {
+        return this.presentation.verifiableCredential;
+    }
+    get holderId() {
+        return this.presentation.holderId;
+    }
+    /**
+     * The {@link ClaimFormat} of the presentation. For JWT presentations this is always `jwt_vp`.
+     */
+    get claimFormat() {
+        return models_1.ClaimFormat.JwtVp;
+    }
+    /**
+     * Get the encoded variant of the W3C Verifiable Presentation. For JWT presentations this is
+     * a JWT string.
+     */
+    get encoded() {
+        return this.serializedJwt;
+    }
+}
+exports.W3cJwtVerifiablePresentation = W3cJwtVerifiablePresentation;
+//# sourceMappingURL=W3cJwtVerifiablePresentation.js.map

package/build/core/src/modules/vc/jwt-vc/W3cJwtVerifiablePresentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cJwtVerifiablePresentation.js","sourceRoot":"","sources":["../../../../../../../core/src/modules/vc/jwt-vc/W3cJwtVerifiablePresentation.ts"],"names":[],"mappings":";;;AAEA,sDAAkD;AAClD,0CAA2C;AAC3C,sCAAuC;AAEvC,uEAAyE;AAMzE,MAAa,4BAA4B;IAIvC,YAAmB,OAA4C;QAC7D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;QAEtB,IAAI,CAAC,aAAa,GAAG,IAAA,uDAA6B,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACtE,CAAC;IAEM,MAAM,CAAC,iBAAiB,CAAC,aAAqB;QACnD,MAAM,GAAG,GAAG,SAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;QAEhD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,IAAI,kBAAU,CAAC,qDAAqD,CAAC,CAAA;QAC7E,CAAC;QAED,OAAO,IAAI,4BAA4B,CAAC;YACtC,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,IAAW,YAAY;QACrB,OAAO,IAAI,CAAC,aAAa,CAAA;IAC3B,CAAC;IAED,IAAW,aAAa;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAA;IAC/B,CAAC;IAED,EAAE;IACF,uFAAuF;IACvF,8FAA8F;IAC9F,qFAAqF;IACrF,8FAA8F;IAC9F,0DAA0D;IAC1D,EAAE;IAEF,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAA;IAClC,CAAC;IAED,IAAW,EAAE;QACX,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,CAAA;IAC7B,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAA;IAC/B,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAA;IACjC,CAAC;IAED,IAAW,oBAAoB;QAC7B,OAAO,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAA;IAC/C,CAAC;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAA;IACnC,CAAC;IAED;;OAEG;IACH,IAAW,WAAW;QACpB,OAAO,oBAAW,CAAC,KAAK,CAAA;IAC1B,CAAC;IAED;;;OAGG;IACH,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,aAAa,CAAA;IAC3B,CAAC;CACF;AApFD,oEAoFC"}

package/build/core/src/modules/vc/jwt-vc/credentialTransformer.d.ts

@@ -0,0 +1,4 @@
+import { JwtPayload } from '../../../crypto/jose/jwt';
+import { W3cCredential } from '../models/credential/W3cCredential';
+export declare function getJwtPayloadFromCredential(credential: W3cCredential): JwtPayload;
+export declare function getCredentialFromJwtPayload(jwtPayload: JwtPayload): W3cCredential;

package/build/core/src/modules/vc/jwt-vc/credentialTransformer.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getJwtPayloadFromCredential = getJwtPayloadFromCredential;
+exports.getCredentialFromJwtPayload = getCredentialFromJwtPayload;
+const class_validator_1 = require("class-validator");
+const jwt_1 = require("../../../crypto/jose/jwt");
+const error_1 = require("../../../error");
+const utils_1 = require("../../../utils");
+const W3cCredential_1 = require("../models/credential/W3cCredential");
+const util_1 = require("../util");
+function getJwtPayloadFromCredential(credential) {
+    var _a;
+    const vc = utils_1.JsonTransformer.toJSON(credential);
+    const payloadOptions = {
+        additionalClaims: {
+            vc,
+        },
+    };
+    // Extract `nbf` and remove issuance date from vc
+    const issuanceDate = Date.parse(credential.issuanceDate);
+    if (isNaN(issuanceDate)) {
+        throw new error_1.CredoError('JWT VCs must have a valid issuance date');
+    }
+    payloadOptions.nbf = Math.floor(issuanceDate / 1000);
+    delete vc.issuanceDate;
+    // Extract `exp` and remove expiration date from vc
+    if (credential.expirationDate) {
+        const expirationDate = Date.parse(credential.expirationDate);
+        if (!isNaN(expirationDate)) {
+            payloadOptions.exp = Math.floor(expirationDate / 1000);
+            delete vc.expirationDate;
+        }
+    }
+    // Extract `iss` and remove issuer id from vc
+    payloadOptions.iss = credential.issuerId;
+    if (typeof vc.issuer === 'string') {
+        delete vc.issuer;
+    }
+    else if (typeof vc.issuer === 'object') {
+        delete vc.issuer.id;
+        if (Object.keys(vc.issuer).length === 0) {
+            delete vc.issuer;
+        }
+    }
+    // Extract `jti` and remove id from vc
+    if (credential.id) {
+        payloadOptions.jti = credential.id;
+        delete vc.id;
+    }
+    if (Array.isArray(credential.credentialSubject) && credential.credentialSubject.length !== 1) {
+        throw new error_1.CredoError('JWT VCs must have exactly one credential subject');
+    }
+    // Extract `sub` and remove credential subject id from vc
+    const [credentialSubjectId] = credential.credentialSubjectIds;
+    if (credentialSubjectId) {
+        payloadOptions.sub = credentialSubjectId;
+        if (Array.isArray(vc.credentialSubject)) {
+            delete vc.credentialSubject[0].id;
+        }
+        else {
+            (_a = vc.credentialSubject) === null || _a === void 0 ? true : delete _a.id;
+        }
+    }
+    return new jwt_1.JwtPayload(payloadOptions);
+}
+function getCredentialFromJwtPayload(jwtPayload) {
+    if (!('vc' in jwtPayload.additionalClaims) || !(0, utils_1.isJsonObject)(jwtPayload.additionalClaims.vc)) {
+        throw new error_1.CredoError("JWT does not contain a valid 'vc' claim");
+    }
+    const jwtVc = jwtPayload.additionalClaims.vc;
+    if (!jwtPayload.nbf || !jwtPayload.iss) {
+        throw new error_1.CredoError("JWT does not contain valid 'nbf' and 'iss' claims");
+    }
+    if (Array.isArray(jwtVc.credentialSubject) && jwtVc.credentialSubject.length !== 1) {
+        throw new error_1.CredoError('JWT VCs must have exactly one credential subject');
+    }
+    if (Array.isArray(jwtVc.credentialSubject) && !(0, class_validator_1.isObject)(jwtVc.credentialSubject[0])) {
+        throw new error_1.CredoError('JWT VCs must have a credential subject of type object');
+    }
+    const credentialSubject = Array.isArray(jwtVc.credentialSubject)
+        ? jwtVc.credentialSubject[0]
+        : jwtVc.credentialSubject;
+    if (!(0, utils_1.isJsonObject)(credentialSubject)) {
+        throw new error_1.CredoError('JWT VC does not have a valid credential subject');
+    }
+    const subjectWithId = jwtPayload.sub ? Object.assign(Object.assign({}, credentialSubject), { id: jwtPayload.sub }) : credentialSubject;
+    // Validate vc.id and jti
+    if (jwtVc.id && jwtPayload.jti !== jwtVc.id) {
+        throw new error_1.CredoError('JWT jti and vc.id do not match');
+    }
+    // Validate vc.issuer and iss
+    if ((typeof jwtVc.issuer === 'string' && jwtPayload.iss !== jwtVc.issuer) ||
+        ((0, utils_1.isJsonObject)(jwtVc.issuer) && jwtVc.issuer.id && jwtPayload.iss !== jwtVc.issuer.id)) {
+        throw new error_1.CredoError('JWT iss and vc.issuer(.id) do not match');
+    }
+    // Validate vc.issuanceDate and nbf
+    if (jwtVc.issuanceDate) {
+        if (typeof jwtVc.issuanceDate !== 'string') {
+            throw new error_1.CredoError('JWT vc.issuanceDate must be a string');
+        }
+        const issuanceDate = Date.parse(jwtVc.issuanceDate) / 1000;
+        if (jwtPayload.nbf !== issuanceDate) {
+            throw new error_1.CredoError('JWT nbf and vc.issuanceDate do not match');
+        }
+    }
+    // Validate vc.expirationDate and exp
+    if (jwtVc.expirationDate) {
+        if (typeof jwtVc.expirationDate !== 'string') {
+            throw new error_1.CredoError('JWT vc.expirationDate must be a string');
+        }
+        const expirationDate = Date.parse(jwtVc.expirationDate) / 1000;
+        if (expirationDate !== jwtPayload.exp) {
+            throw new error_1.CredoError('JWT exp and vc.expirationDate do not match');
+        }
+    }
+    // Validate vc.credentialSubject.id and sub
+    if (((0, utils_1.isJsonObject)(jwtVc.credentialSubject) &&
+        jwtVc.credentialSubject.id &&
+        jwtPayload.sub !== jwtVc.credentialSubject.id) ||
+        (Array.isArray(jwtVc.credentialSubject) &&
+            (0, utils_1.isJsonObject)(jwtVc.credentialSubject[0]) &&
+            jwtVc.credentialSubject[0].id &&
+            jwtPayload.sub !== jwtVc.credentialSubject[0].id)) {
+        throw new error_1.CredoError('JWT sub and vc.credentialSubject.id do not match');
+    }
+    // Create a verifiable credential structure that is compatible with the VC data model
+    const dataModelVc = Object.assign(Object.assign({}, jwtVc), { issuanceDate: (0, util_1.w3cDate)(jwtPayload.nbf * 1000), expirationDate: jwtPayload.exp ? (0, util_1.w3cDate)(jwtPayload.exp * 1000) : undefined, issuer: typeof jwtVc.issuer === 'object' ? Object.assign(Object.assign({}, jwtVc.issuer), { id: jwtPayload.iss }) : jwtPayload.iss, id: jwtPayload.jti, credentialSubject: Array.isArray(jwtVc.credentialSubject) ? [subjectWithId] : subjectWithId });
+    const vcInstance = utils_1.JsonTransformer.fromJSON(dataModelVc, W3cCredential_1.W3cCredential);
+    return vcInstance;
+}
+//# sourceMappingURL=credentialTransformer.js.map

package/build/core/src/modules/vc/jwt-vc/credentialTransformer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialTransformer.js","sourceRoot":"","sources":["../../../../../../../core/src/modules/vc/jwt-vc/credentialTransformer.ts"],"names":[],"mappings":";;AAWA,kEA4DC;AAED,kEA0FC;AAhKD,qDAA0C;AAE1C,kDAAqD;AACrD,0CAA2C;AAC3C,0CAA8D;AAC9D,sEAAkE;AAClE,kCAAiC;AAEjC,SAAgB,2BAA2B,CAAC,UAAyB;;IACnE,MAAM,EAAE,GAAG,uBAAe,CAAC,MAAM,CAAC,UAAU,CAA+B,CAAA;IAE3E,MAAM,cAAc,GAAsB;QACxC,gBAAgB,EAAE;YAChB,EAAE;SACH;KACF,CAAA;IAED,iDAAiD;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;IACxD,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAU,CAAC,yCAAyC,CAAC,CAAA;IACjE,CAAC;IACD,cAAc,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IACpD,OAAO,EAAE,CAAC,YAAY,CAAA;IAEtB,mDAAmD;IACnD,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;QAC5D,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3B,cAAc,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;YACtD,OAAO,EAAE,CAAC,cAAc,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,cAAc,CAAC,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAA;IACxC,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC,MAAM,CAAA;IAClB,CAAC;SAAM,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAA;QACnB,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAA;QAClB,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;QAClB,cAAc,CAAC,GAAG,GAAG,UAAU,CAAC,EAAE,CAAA;QAClC,OAAO,EAAE,CAAC,EAAE,CAAA;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,kBAAU,CAAC,kDAAkD,CAAC,CAAA;IAC1E,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAC,mBAAmB,CAAC,GAAG,UAAU,CAAC,oBAAoB,CAAA;IAC7D,IAAI,mBAAmB,EAAE,CAAC;QACxB,cAAc,CAAC,GAAG,GAAG,mBAAmB,CAAA;QAExC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACnC,CAAC;aAAM,CAAC;YACC,MAAA,EAAE,CAAC,iBAAiB,+CAAE,EAAE,CAAA;QACjC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,gBAAU,CAAC,cAAc,CAAC,CAAA;AACvC,CAAC;AAED,SAAgB,2BAA2B,CAAC,UAAsB;IAChE,IAAI,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAA,oBAAY,EAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,kBAAU,CAAC,yCAAyC,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAA;IAE5C,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QACvC,MAAM,IAAI,kBAAU,CAAC,mDAAmD,CAAC,CAAA;IAC3E,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,kBAAU,CAAC,kDAAkD,CAAC,CAAA;IAC1E,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAA,0BAAQ,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,kBAAU,CAAC,uDAAuD,CAAC,CAAA;IAC/E,CAAC;IAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC9D,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAA;IAC3B,IAAI,CAAC,IAAA,oBAAY,EAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,kBAAU,CAAC,iDAAiD,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,iCAAM,iBAAiB,KAAE,EAAE,EAAE,UAAU,CAAC,GAAG,IAAG,CAAC,CAAC,iBAAiB,CAAA;IAEvG,yBAAyB;IACzB,IAAI,KAAK,CAAC,EAAE,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAU,CAAC,gCAAgC,CAAC,CAAA;IACxD,CAAC;IAED,6BAA6B;IAC7B,IACE,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC;QACrE,CAAC,IAAA,oBAAY,EAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EACrF,CAAC;QACD,MAAM,IAAI,kBAAU,CAAC,yCAAyC,CAAC,CAAA;IACjE,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC3C,MAAM,IAAI,kBAAU,CAAC,sCAAsC,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAA;QAC1D,IAAI,UAAU,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,IAAI,kBAAU,CAAC,0CAA0C,CAAC,CAAA;QAClE,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,kBAAU,CAAC,wCAAwC,CAAC,CAAA;QAChE,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,CAAA;QAC9D,IAAI,cAAc,KAAK,UAAU,CAAC,GAAG,EAAE,CAAC;YACtC,MAAM,IAAI,kBAAU,CAAC,4CAA4C,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,IACE,CAAC,IAAA,oBAAY,EAAC,KAAK,CAAC,iBAAiB,CAAC;QACpC,KAAK,CAAC,iBAAiB,CAAC,EAAE;QAC1B,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAChD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACrC,IAAA,oBAAY,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;YACxC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;YAC7B,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,kBAAU,CAAC,kDAAkD,CAAC,CAAA;IAC1E,CAAC;IAED,qFAAqF;IACrF,MAAM,WAAW,mCACZ,KAAK,KACR,YAAY,EAAE,IAAA,cAAO,EAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,EAC5C,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAC3E,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,iCAAM,KAAK,CAAC,MAAM,KAAE,EAAE,EAAE,UAAU,CAAC,GAAG,IAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EACnG,EAAE,EAAE,UAAU,CAAC,GAAG,EAClB,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,GAC5F,CAAA;IAED,MAAM,UAAU,GAAG,uBAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,6BAAa,CAAC,CAAA;IAEvE,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/build/core/src/modules/vc/jwt-vc/index.d.ts

@@ -0,0 +1,3 @@
+export * from './W3cJwtCredentialService';
+export * from './W3cJwtVerifiableCredential';
+export * from './W3cJwtVerifiablePresentation';

package/build/core/src/modules/vc/jwt-vc/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./W3cJwtCredentialService"), exports);
+__exportStar(require("./W3cJwtVerifiableCredential"), exports);
+__exportStar(require("./W3cJwtVerifiablePresentation"), exports);
+//# sourceMappingURL=index.js.map

package/build/core/src/modules/vc/jwt-vc/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../core/src/modules/vc/jwt-vc/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAAyC;AACzC,+DAA4C;AAC5C,iEAA8C"}

package/build/core/src/modules/vc/jwt-vc/presentationTransformer.d.ts

@@ -0,0 +1,4 @@
+import { JwtPayload } from '../../../crypto/jose/jwt';
+import { W3cPresentation } from '../models/presentation/W3cPresentation';
+export declare function getJwtPayloadFromPresentation(presentation: W3cPresentation): JwtPayload;
+export declare function getPresentationFromJwtPayload(jwtPayload: JwtPayload): W3cPresentation;

package/build/core/src/modules/vc/jwt-vc/presentationTransformer.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getJwtPayloadFromPresentation = getJwtPayloadFromPresentation;
+exports.getPresentationFromJwtPayload = getPresentationFromJwtPayload;
+const jwt_1 = require("../../../crypto/jose/jwt");
+const error_1 = require("../../../error");
+const utils_1 = require("../../../utils");
+const W3cPresentation_1 = require("../models/presentation/W3cPresentation");
+function getJwtPayloadFromPresentation(presentation) {
+    const vp = utils_1.JsonTransformer.toJSON(presentation);
+    const payloadOptions = {
+        additionalClaims: {
+            vp,
+        },
+    };
+    // Extract `iss` and remove holder id from vp
+    if (presentation.holderId) {
+        payloadOptions.iss = presentation.holderId;
+        if (typeof vp.holder === 'string') {
+            delete vp.holder;
+        }
+        else if (typeof vp.holder === 'object') {
+            delete vp.holder.id;
+            if (Object.keys(vp.holder).length === 0) {
+                delete vp.holder;
+            }
+        }
+    }
+    // Extract `jti` and remove id from vp
+    if (presentation.id) {
+        payloadOptions.jti = presentation.id;
+        delete vp.id;
+    }
+    return new jwt_1.JwtPayload(payloadOptions);
+}
+function getPresentationFromJwtPayload(jwtPayload) {
+    if (!('vp' in jwtPayload.additionalClaims) || !(0, utils_1.isJsonObject)(jwtPayload.additionalClaims.vp)) {
+        throw new error_1.CredoError("JWT does not contain a valid 'vp' claim");
+    }
+    const jwtVp = jwtPayload.additionalClaims.vp;
+    // Validate vp.id and jti
+    if (jwtVp.id && jwtPayload.jti !== jwtVp.id) {
+        throw new error_1.CredoError('JWT jti and vp.id do not match');
+    }
+    // Validate vp.holder and iss
+    if ((typeof jwtVp.holder === 'string' && jwtPayload.iss !== jwtVp.holder) ||
+        ((0, utils_1.isJsonObject)(jwtVp.holder) && jwtVp.holder.id && jwtPayload.iss !== jwtVp.holder.id)) {
+        throw new error_1.CredoError('JWT iss and vp.holder(.id) do not match');
+    }
+    const dataModelVp = Object.assign(Object.assign({}, jwtVp), { id: jwtPayload.jti, holder: jwtPayload.iss });
+    const vpInstance = utils_1.JsonTransformer.fromJSON(dataModelVp, W3cPresentation_1.W3cPresentation);
+    return vpInstance;
+}
+//# sourceMappingURL=presentationTransformer.js.map

package/build/core/src/modules/vc/jwt-vc/presentationTransformer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationTransformer.js","sourceRoot":"","sources":["../../../../../../../core/src/modules/vc/jwt-vc/presentationTransformer.ts"],"names":[],"mappings":";;AAQA,sEA8BC;AAED,sEA6BC;AAlED,kDAAqD;AACrD,0CAA2C;AAC3C,0CAA8D;AAC9D,4EAAwE;AAExE,SAAgB,6BAA6B,CAAC,YAA6B;IACzE,MAAM,EAAE,GAAG,uBAAe,CAAC,MAAM,CAAC,YAAY,CAAiC,CAAA;IAE/E,MAAM,cAAc,GAAsB;QACxC,gBAAgB,EAAE;YAChB,EAAE;SACH;KACF,CAAA;IAED,6CAA6C;IAC7C,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC1B,cAAc,CAAC,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAA;QAE1C,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC,MAAM,CAAA;QAClB,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAA;YACnB,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,EAAE,CAAC,MAAM,CAAA;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;QACpB,cAAc,CAAC,GAAG,GAAG,YAAY,CAAC,EAAE,CAAA;QACpC,OAAO,EAAE,CAAC,EAAE,CAAA;IACd,CAAC;IAED,OAAO,IAAI,gBAAU,CAAC,cAAc,CAAC,CAAA;AACvC,CAAC;AAED,SAAgB,6BAA6B,CAAC,UAAsB;IAClE,IAAI,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAA,oBAAY,EAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,kBAAU,CAAC,yCAAyC,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAA;IAE5C,yBAAyB;IACzB,IAAI,KAAK,CAAC,EAAE,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAU,CAAC,gCAAgC,CAAC,CAAA;IACxD,CAAC;IAED,6BAA6B;IAC7B,IACE,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC;QACrE,CAAC,IAAA,oBAAY,EAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EACrF,CAAC;QACD,MAAM,IAAI,kBAAU,CAAC,yCAAyC,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,WAAW,mCACZ,KAAK,KACR,EAAE,EAAE,UAAU,CAAC,GAAG,EAClB,MAAM,EAAE,UAAU,CAAC,GAAG,GACvB,CAAA;IAED,MAAM,UAAU,GAAG,uBAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,iCAAe,CAAC,CAAA;IAEzE,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/build/core/src/modules/vc/models/ClaimFormat.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Defines the claim format based on the formats registered in
+ * [DIF Claim Format Registry](https://identity.foundation/claim-format-registry/).
+ */
+export declare enum ClaimFormat {
+    Jwt = "jwt",
+    JwtVc = "jwt_vc",
+    JwtVp = "jwt_vp",
+    Ldp = "ldp",
+    LdpVc = "ldp_vc",
+    LdpVp = "ldp_vp",
+    Di = "di",
+    DiVc = "di_vc",
+    DiVp = "di_vp",
+    SdJwtVc = "vc+sd-jwt"
+}

package/build/core/src/modules/vc/models/ClaimFormat.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClaimFormat = void 0;
+/**
+ * Defines the claim format based on the formats registered in
+ * [DIF Claim Format Registry](https://identity.foundation/claim-format-registry/).
+ */
+var ClaimFormat;
+(function (ClaimFormat) {
+    ClaimFormat["Jwt"] = "jwt";
+    ClaimFormat["JwtVc"] = "jwt_vc";
+    ClaimFormat["JwtVp"] = "jwt_vp";
+    ClaimFormat["Ldp"] = "ldp";
+    ClaimFormat["LdpVc"] = "ldp_vc";
+    ClaimFormat["LdpVp"] = "ldp_vp";
+    ClaimFormat["Di"] = "di";
+    ClaimFormat["DiVc"] = "di_vc";
+    ClaimFormat["DiVp"] = "di_vp";
+    ClaimFormat["SdJwtVc"] = "vc+sd-jwt";
+})(ClaimFormat || (exports.ClaimFormat = ClaimFormat = {}));
+//# sourceMappingURL=ClaimFormat.js.map

package/build/core/src/modules/vc/models/ClaimFormat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaimFormat.js","sourceRoot":"","sources":["../../../../../../../core/src/modules/vc/models/ClaimFormat.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,IAAY,WAWX;AAXD,WAAY,WAAW;IACrB,0BAAW,CAAA;IACX,+BAAgB,CAAA;IAChB,+BAAgB,CAAA;IAChB,0BAAW,CAAA;IACX,+BAAgB,CAAA;IAChB,+BAAgB,CAAA;IAChB,wBAAS,CAAA;IACT,6BAAc,CAAA;IACd,6BAAc,CAAA;IACd,oCAAqB,CAAA;AACvB,CAAC,EAXW,WAAW,2BAAX,WAAW,QAWtB"}

package/build/core/src/modules/vc/models/W3cVerifyResult.d.ts

@@ -0,0 +1,109 @@
+export type W3cVerifyPresentationResult = W3cVerifyResult<W3cPresentationValidations>;
+export type W3cVerifyCredentialResult = W3cVerifyResult<W3cCredentialValidations>;
+export type SingleValidationResult = {
+    isValid: boolean;
+    error?: Error;
+};
+interface W3cVerifyResult<Validations> {
+    /**
+     * Whether the verification as a whole is valid. This means that
+     * all validations inside the validations object should have passed.
+     */
+    isValid: boolean;
+    /**
+     * Validations that have been performed
+     */
+    validations: Partial<Validations>;
+    /**
+     * Error that was caught during verification not related to
+     * any of the specific validations that are performed
+     */
+    error?: Error;
+}
+interface W3cCredentialValidations {
+    /**
+     * Validation that validates whether the credential conforms
+     * to the data model and is currently valid (not expired or
+     * issued in the future).
+     */
+    dataModel: SingleValidationResult;
+    /**
+     * Whether the signature of the credential is valid
+     */
+    signature: SingleValidationResult;
+    /**
+     * Whether the credential status is still valid, meaning
+     * that is hasn't been revoked yet.
+     */
+    credentialStatus: SingleValidationResult;
+    /**
+     * Whether the 'issuer' of the credential is also the
+     * signer of the credential proof
+     */
+    issuerIsSigner: SingleValidationResult;
+    /**
+     * NOTE: this validation is currently only present for ldp_vc credentials.
+     * When this validation is present, ALL OTHER validations will be skipped.
+     *
+     * Whether the presentation is valid according to the [vc.js](https://github.com/digitalbazaar/vc)
+     * library. As the library handles all validations, it is not possible to include the other
+     * validation items separately. In the future the vc.js library will be replaced to provide a similar
+     * validation result for all credential formats.
+     */
+    vcJs: SingleValidationResult;
+}
+interface W3cPresentationValidations {
+    /**
+     * Validation that validates whether the presentation conforms
+     * to the data model.
+     */
+    dataModel: SingleValidationResult;
+    /**
+     * Whether the signature of the presentation is valid
+     */
+    presentationSignature: SingleValidationResult;
+    /**
+     * Validation results of the credentials inside the presentation.
+     * The order matches the order of credentials in the presentation.
+     *
+     * This object extends the credential verification result with the exception that
+     * a new `credentialSubjectAuthentication` has been added.
+     */
+    credentials: W3cVerifyResult<W3cCredentialValidations & {
+        /**
+         * Whether the credential subject authentication is valid. Note this only
+         * takes into account credentialSubject authentication, and not cases where
+         * the holder of a credential may be different from the credential subject.
+         *
+         * The credentialSubject authentication is deemed valid in the following cases:
+         *  - The credential has no credential subject identifiers. In this case the
+         *    credential is seen as a bearer credential and thus authentication is not needed.
+         *  - The credential has AT LEAST one credential subject id, and the presentation
+         *    is signed by at least one of the credential subject ids.
+         */
+        credentialSubjectAuthentication: SingleValidationResult;
+    }>[];
+    /**
+     * Whether the presentation is signed by the 'holder' of the
+     * presentation.
+     *
+     * NOTE: this check will return the value `true` for `isValid`
+     * when the `holder` property is not set on the presentation.
+     * as the goal of this validation is to assert whether the
+     * 'holder' property that is used in the presentation is valid.
+     * If the property is not present, the validation can be seen as
+     * successful
+     */
+    holderIsSigner: SingleValidationResult;
+    /**
+     * NOTE: this validation is currently only present for ldp_vp presentations.
+     * When this validation is present, ALL OTHER validations will be skipped.
+     *
+     * Whether the presentation is valid according to the [vc.js](https://github.com/digitalbazaar/vc)
+     * library. As the library handles all validations, it is not possible to include the other
+     * validation items separately. In the future the vc.js library will be replaced to provide a similar
+     * validation result for all credential formats.
+     */
+    vcJs: SingleValidationResult;
+}
+export {};

package/build/core/src/modules/vc/models/W3cVerifyResult.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=W3cVerifyResult.js.map

package/build/core/src/modules/vc/models/W3cVerifyResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cVerifyResult.js","sourceRoot":"","sources":["../../../../../../../core/src/modules/vc/models/W3cVerifyResult.ts"],"names":[],"mappings":""}

package/build/core/src/modules/vc/models/credential/W3cCredential.d.ts

@@ -0,0 +1,37 @@
+import type { W3cCredentialSubjectOptions } from './W3cCredentialSubject';
+import type { W3cIssuerOptions } from './W3cIssuer';
+import type { JsonObject } from '../../../../types';
+import type { ValidationOptions } from 'class-validator';
+import { SingleOrArray } from '../../../../utils/type';
+import { W3cCredentialSchema } from './W3cCredentialSchema';
+import { W3cCredentialStatus } from './W3cCredentialStatus';
+import { W3cCredentialSubject } from './W3cCredentialSubject';
+import { W3cIssuer } from './W3cIssuer';
+export interface W3cCredentialOptions {
+    context?: Array<string | JsonObject>;
+    id?: string;
+    type: Array<string>;
+    issuer: string | W3cIssuerOptions;
+    issuanceDate: string;
+    expirationDate?: string;
+    credentialSubject: SingleOrArray<W3cCredentialSubjectOptions>;
+    credentialStatus?: W3cCredentialStatus;
+}
+export declare class W3cCredential {
+    constructor(options: W3cCredentialOptions);
+    context: Array<string | JsonObject>;
+    id?: string;
+    type: Array<string>;
+    issuer: string | W3cIssuer;
+    issuanceDate: string;
+    expirationDate?: string;
+    credentialSubject: SingleOrArray<W3cCredentialSubject>;
+    credentialSchema?: SingleOrArray<W3cCredentialSchema>;
+    credentialStatus?: W3cCredentialStatus;
+    get issuerId(): string;
+    get credentialSchemaIds(): string[];
+    get credentialSubjectIds(): string[];
+    get contexts(): Array<string | JsonObject>;
+    static fromJson(json: Record<string, unknown>): W3cCredential;
+}
+export declare function IsCredentialType(validationOptions?: ValidationOptions): PropertyDecorator;