@eudiplo/cli 9.1.0-main.2d54936 → 9.1.0-main.3156bf0

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@eudiplo/cli",
-    "version": "9.1.0-main.2d54936",
+    "version": "9.1.0-main.3156bf0",
     "description": "Deployment-aware command line tools for EUDIPLO",
     "private": false,
     "type": "module",
@@ -65,6 +65,6 @@
         "esbuild": "^0.28.2",
         "tsx": "^4.23.15",
         "typescript": "^7.0.2",
-        "vitest": "5.0.3"
+        "vitest": "5.0.4"
     }
 }

package/templates/schemas/CreateFederationTrustAnchorDto.schema.json

@@ -0,0 +1,82 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 255,
+      "pattern": "^[A-Za-z0-9._-]+$",
+      "description": "Unique identifier of the trust anchor in the tenant."
+    },
+    "entityId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "description": "Entity identifier of the trust anchor, exactly as configured in `federation.trustAnchors` and DCQL `openid_federation` values."
+    },
+    "description": {
+      "anyOf": [
+        {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 1000
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "Optional description of the trust anchor."
+    },
+    "jwks": {
+      "type": "object",
+      "properties": {
+        "keys": {
+          "minItems": 1,
+          "maxItems": 20,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "kty": {
+                "type": "string",
+                "enum": [
+                  "EC",
+                  "RSA",
+                  "OKP"
+                ],
+                "description": "Key type of the public federation key."
+              },
+              "kid": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256,
+                "description": "Key ID. Federation statements name their signing key with `kid`."
+              }
+            },
+            "required": [
+              "kty",
+              "kid"
+            ],
+            "additionalProperties": {},
+            "description": "Public federation key of the trust anchor as a JWK."
+          },
+          "description": "The trust anchor's federation keys."
+        }
+      },
+      "required": [
+        "keys"
+      ],
+      "additionalProperties": false,
+      "description": "JWK set with the federation keys of the trust anchor, obtained out of band (OpenID Federation 1.0 Section 10.2)."
+    }
+  },
+  "required": [
+    "id",
+    "entityId",
+    "jwks"
+  ],
+  "additionalProperties": false,
+  "$id": "./CreateFederationTrustAnchorDto.schema.json",
+  "title": "CreateFederationTrustAnchorDto"
+}

package/templates/schemas/FederationTrustAnchorConfigFile.schema.json

@@ -0,0 +1,60 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./FederationTrustAnchorConfigFile.schema.json",
+  "title": "FederationTrustAnchorConfigFile",
+  "description": "Configuration file identified by its $schema URL.",
+  "oneOf": [
+    {
+      "type": "object",
+      "properties": {
+        "$schema": {
+          "type": "string",
+          "const": "https://eudiplo.dev/schemas/v1/FederationTrustAnchorConfigFile.schema.json"
+        },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "generation": {
+              "type": "integer",
+              "minimum": 1,
+              "description": "Monotonically increasing configuration generation."
+            },
+            "ownership": {
+              "type": "string",
+              "enum": [
+                "unmanaged",
+                "file-managed"
+              ],
+              "description": "Requested ownership recorded when the document is applied."
+            }
+          },
+          "additionalProperties": false
+        },
+        "spec": {
+          "allOf": [
+            {
+              "$ref": "./CreateFederationTrustAnchorDto.schema.json"
+            },
+            {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              }
+            }
+          ]
+        }
+      },
+      "required": [
+        "$schema",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/IssuanceConfig.schema.json

@@ -528,8 +528,9 @@
               ]
             },
             "entityId": {
-              "description": "Optional local federation entity id.",
-              "type": "string"
+              "description": "Entity Identifier of the tenant's federation entity, usually {PUBLIC_URL}/issuers/{tenantId}: an https URL with a host and without query or fragment (OpenID Federation 1.0 Section 1.2). http is accepted only when OUTBOUND_URL_ALLOW_HTTP is true.",
+              "type": "string",
+              "pattern": "^(https?:\\/\\/[^\\s?#]+)?$"
             },
             "enforceSigningPolicy": {
               "description": "Enforce strict signing policy checks.",
@@ -564,6 +565,80 @@
                 "additionalProperties": false
               },
               "description": "Federation trust anchors."
+            },
+            "entityTypes": {
+              "description": "Roles the entity configuration publishes metadata for. Defaults to openid_credential_issuer.",
+              "minItems": 1,
+              "type": "array",
+              "items": {
+                "type": "string",
+                "enum": [
+                  "openid_credential_issuer",
+                  "openid_credential_verifier"
+                ]
+              }
+            },
+            "authorityHints": {
+              "description": "authority_hints of the entity configuration: the superiors that issue a subordinate statement about this entity. Defaults to the trust anchor entity ids.",
+              "type": "array",
+              "items": {
+                "type": "string",
+                "format": "uri"
+              }
+            },
+            "entityKeyChainId": {
+              "description": "Key chain with usage type 'federation' that signs the entity configuration. Without it, a federation key chain of the tenant is used; set it when the tenant has several.",
+              "type": "string",
+              "minLength": 1
+            },
+            "entityConfigurationLifetimeSeconds": {
+              "description": "Lifetime (exp - iat) of the entity configuration in seconds. Defaults to 86400.",
+              "type": "integer",
+              "minimum": 60,
+              "maximum": 31536000
+            },
+            "trustMarks": {
+              "description": "Trust mark JWTs issued to this entity, published in the entity configuration.",
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "entityMetadata": {
+              "description": "Informational federation_entity metadata of the entity configuration.",
+              "type": "object",
+              "properties": {
+                "organization_name": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "contacts": {
+                  "minItems": 1,
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "logo_uri": {
+                  "type": "string",
+                  "format": "uri"
+                },
+                "policy_uri": {
+                  "type": "string",
+                  "format": "uri"
+                },
+                "homepage_uri": {
+                  "type": "string",
+                  "format": "uri"
+                }
+              },
+              "additionalProperties": false
+            },
+            "includeTrustChain": {
+              "description": "Add the trust chain of this entity as trust_chain header to federation SD-JWT VCs and OID4VP request objects.",
+              "type": "boolean"
             }
           },
           "required": [