@digitalbazaar/oid4-client 5.2.1 → 5.3.0

package/lib/oid4vp/authorizationRequest.js

@@ -13,6 +13,9 @@ import {
 const REQUIRED_SIGNED_AUTHZ_REQUEST_CLIENT_ID_SCHEMES = new Set([
   'x509_san_dns', 'x509_hash', 'did', 'decentralized_identifier'
 ]);
+const SUPPORTED_AUTHORIZATION_ENCRYPTED_RESPONSE_ENC = new Set([
+  'A256GCM', 'A128GCM'
+]);
 const SUPPORTED_CLIENT_ID_SCHEMES = new Set([
   'redirect_uri',
   'x509_san_dns', 'x509_hash', 'did', 'decentralized_identifier'
@@ -177,10 +180,12 @@ export async function validate({authorizationRequest, expectedClientId}) {
         name: 'NotSupportedError'
       });
     }
-    if(authorization_encrypted_response_enc !== 'A256GCM') {
+    if(!SUPPORTED_AUTHORIZATION_ENCRYPTED_RESPONSE_ENC.has(
+      authorization_encrypted_response_enc)) {
+      const supported = [...SUPPORTED_AUTHORIZATION_ENCRYPTED_RESPONSE_ENC];
       throw createNamedError({
         message: `"${authorization_encrypted_response_enc}" is not ` +
-          'supported; only "A256GCM" is supported.',
+          `supported; supported values are: ${supported.join(', ')}`,
         name: 'NotSupportedError'
       });
     }

package/lib/oid4vp/authorizationResponse.js

@@ -239,7 +239,8 @@ async function _encrypt({
   };
   const jwt = await new EncryptJWT(claimSet)
     .setProtectedHeader({
-      alg: 'ECDH-ES', enc: 'A256GCM',
+      alg: 'ECDH-ES',
+      enc: encryptionOptions?.enc ?? 'A256GCM',
       kid: recipientPublicJwk.kid
     })
     .setKeyManagementParameters(keyManagementParameters)

package/lib/oid4vp/verifier.js

@@ -96,7 +96,7 @@ async function _decrypt({jwt, getDecryptParameters}) {
 
   return jwtDecrypt(jwt, getKey, {
     // only supported algorithms at this time:
-    contentEncryptionAlgorithms: ['A256GCM'],
+    contentEncryptionAlgorithms: ['A256GCM', 'A128GCM'],
     keyManagementAlgorithms: ['ECDH-ES']
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@digitalbazaar/oid4-client",
-  "version": "5.2.1",
+  "version": "5.3.0",
   "description": "An OID4 (VC + VP) client",
   "homepage": "https://github.com/digitalbazaar/oid4-client",
   "author": {