@digitalbazaar/oid4-client 3.4.0 → 3.5.0

package/lib/OID4Client.js

@@ -121,8 +121,17 @@ export class OID4Client {
           }
           break;
         } catch(cause) {
+          // presentation is required to continue issuance
+          if(_isPresentationRequired(cause)) {
+            const {data: details} = cause;
+            const error = new Error('Presentation is required.', {cause});
+            error.name = 'NotAllowedError';
+            error.details = details;
+            throw error;
+          }
+
           if(!_isMissingProofError(cause)) {
-            // non-specific error case
+            // other non-specific error case
             throw cause;
           }
 
@@ -335,7 +344,7 @@ function _isMissingProofError(error) {
     Cache-Control: no-store
 
   {
-    "error": "invalid_or_missing_proof" // or "invalid_proof"
+    "error": "invalid_or_missing_proof", // or "invalid_proof"
     "error_description":
         "Credential issuer requires proof element in Credential Request"
     "c_nonce": "8YE9hCnyV2",
@@ -349,6 +358,24 @@ function _isMissingProofError(error) {
     errorType === 'invalid_or_missing_proof');
 }
 
+function _isPresentationRequired(error) {
+  /* If OID4VP is required, delivery server sends, e.g.:
+
+  HTTP/1.1 400 Bad Request
+    Content-Type: application/json
+    Cache-Control: no-store
+
+  {
+    "error": "presentation_required",
+    "error_description":
+        "Credential issuer requires presentation before Credential Request"
+    "authorization_request": {...}
+  }
+  */
+  const errorType = error.data?.error;
+  return error.status === 400 && errorType === 'presentation_required';
+}
+
 function _createCredentialRequestFromId({id, issuerConfig}) {
   const {credentials_supported: supported = []} = issuerConfig;
   const meta = supported.find(d => d.id === id);

package/lib/oid4vp.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2023 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2023-2024 Digital Bazaar, Inc. All rights reserved.
  */
 import {assert, assertOptional, fetchJSON} from './util.js';
 import {decodeJwt} from 'jose';
@@ -159,6 +159,7 @@ export async function sendAuthorizationResponse({
   verifiablePresentation,
   presentationSubmission,
   authorizationRequest,
+  vpToken,
   agent
 } = {}) {
   try {
@@ -174,7 +175,7 @@ export async function sendAuthorizationResponse({
 
     // send VP and presentation submission to complete exchange
     const body = new URLSearchParams();
-    body.set('vp_token', JSON.stringify(verifiablePresentation));
+    body.set('vp_token', vpToken ?? JSON.stringify(verifiablePresentation));
     body.set('presentation_submission', JSON.stringify(presentationSubmission));
     const response = await httpClient.post(authorizationRequest.response_uri, {
       agent, body, headers: {accept: 'application/json'},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@digitalbazaar/oid4-client",
-  "version": "3.4.0",
+  "version": "3.5.0",
   "description": "An OID4 (VC + VP) client",
   "homepage": "https://github.com/digitalbazaar/oid4-client",
   "author": {