@gerege-systems/eid-mongolia-sdk 0.7.0 → 0.8.0

package/README.md

@@ -19,7 +19,94 @@ Node.js ≥ 22 (global `fetch`, `node:crypto`).
 
 `POST https://ca.eidmongolia.mn/v3/rp-applications` (эсвэл [developer.eidmongolia.mn](https://developer.eidmongolia.mn)) —
 оператор баталсны дараа **relyingPartyUUID** ба **API secret** (`rp_sk_…`) олгогдоно; secret **зөвхөн нэг удаа**
-харагдана. Дэлгэрэнгүй: <https://developer.eidmongolia.mn/#burtgel>.
+харагдана. Дэлгэрэнгүй: <https://developer.eidmongolia.mn/#registration>.
+
+## 1a. «eID-ээр нэвтрэх» (OpenID Connect)
+
+Хамгийн хялбар нэвтрэлт: таны вэбэд нэг товч, нэвтрэх хуудсыг (QR · утсан дээрх аппаар нээх · регистрээр
+мэдэгдэл) eID сервер өөрөө харуулж, гарын үсэг ба гэрчилгээний гинжийг шалгаад танд стандарт OpenID Connect
+(Authorization Code + PKCE `S256`) `id_token` өгнө — Google/Apple нэвтрэлттэй ижил. Утасны хөтчөөс дарахад
+хуудасгүйгээр шууд eID апп нээгдэнэ. Гэрээ: <https://developer.eidmongolia.mn/#oidc>.
+
+**Бүртгэл.** `client_id` = таны RP UUID (`relyingPartyUUID`), `client_secret` = RP API secret (`rp_sk_…`).
+RP-д `AUTH` эрх, OIDC асаалттай, `redirect_uri` (https, ≤ 10) бүртгэлтэй байна — authorize/token-ий `redirect_uri`
+бүртгэлтэйтэй **тэмдэгт бүрээрээ** таарах ёстой. Иргэний ETSI дугаар (`pnomn` claim) хэрэгтэй бол `PNOMN` эрх
+хүсэж, `scope: "openid pnomn"`. Token endpoint-д RP-ийн IP allowlist мөрдөгдөнө; `requireMtls` RP OIDC ашиглахгүй.
+
+```ts
+import { EidOidcClient, EidOidcError } from "@gerege-systems/eid-mongolia-sdk";
+
+const oidc = new EidOidcClient({
+  clientId: process.env.EID_RP_UUID!,
+  clientSecret: process.env.EID_SECRET!, // rp_sk_… — зөвхөн backend
+  redirectUri: "https://bank.example.mn/auth/eid/callback",
+  // issuer анхдагч https://login.eidmongolia.mn, scope анхдагч "openid"
+});
+
+const TX = "eid_oidc_tx";
+const cookieOpts = { httpOnly: true, secure: true, sameSite: "lax", path: "/auth/eid", maxAge: 600_000 } as const;
+
+// GET /auth/eid/login — товчны href
+app.get("/auth/eid/login", async (_req, res) => {
+  const a = await oidc.createAuthorization(); // { url, state, nonce, codeVerifier }
+  res.cookie(TX, JSON.stringify({ state: a.state, nonce: a.nonce, codeVerifier: a.codeVerifier }), cookieOpts);
+  res.set("Cache-Control", "no-store").redirect(302, a.url);
+});
+
+// GET /auth/eid/callback?code&state (эсвэл ?error) — бүртгэлтэй redirect_uri
+app.get("/auth/eid/callback", async (req, res) => {
+  const tx = JSON.parse(req.cookies[TX] ?? "null");
+  res.clearCookie(TX, { path: "/auth/eid" });
+  if (!tx) return res.redirect(303, "/login?error=state");
+  try {
+    const { claims } = await oidc.handleCallback(req.originalUrl, tx); // state → token → id_token (ES256)
+    const user = await users.findOrCreateBySub(claims.sub); // pairwise sub-аар таньна (нэрээр биш)
+    await startSession(res, user); // таны session-ийг шинээр үүсгэ (session fixation)
+    res.redirect(303, "/");
+  } catch (e) {
+    const code = e instanceof EidOidcError ? e.code : "server_error"; // access_denied → «дахин оролдоно уу»
+    res.redirect(303, `/login?error=${code}`);
+  }
+});
+```
+
+Next.js App Router-д ижил: `app/auth/eid/login/route.ts` → `NextResponse.redirect(a.url, 302)` + `res.cookies.set(…)`;
+callback → `oidc.handleCallback(request.nextUrl.searchParams, tx)` (зөвхөн query уншина — прокси ард host хамаагүй).
+
+**Товч** — энгийн холбоос (`<a href>` эсвэл form GET). `fetch`/XHR/JS redirect биш: iOS Universal Link зөвхөн
+хэрэглэгчийн tap-аас эхэлсэн redirect гинжид eID аппыг нээнэ.
+
+```html
+<a class="eid-login" href="/auth/eid/login">eID-ээр нэвтрэх</a>
+<style>
+  .eid-login { display: inline-flex; align-items: center; justify-content: center; min-height: 44px;
+    padding: 0 1.25rem; border-radius: 8px; background: #0b3d91; color: #fff; font: 600 1rem/1 system-ui, sans-serif;
+    text-decoration: none; }
+  .eid-login:focus-visible { outline: 2px solid #0b3d91; outline-offset: 2px; }
+</style>
+```
+
+`createAuthorization({ display: "page" })` — утсан дээр ч нэвтрэх хуудас (QR / push) харуулна (ж: таблет киоск).
+
+**`id_token` claims** (`EidIdTokenClaims`): `sub` (pairwise — RP тус бүрд өөр, иргэнд тогтмол), `acr`
+(`urn:eidmongolia:loa:qualified` | `…:advanced`), `auth_time`, `given_name` / `family_name` (латин, гэрчилгээнээс),
+`given_name_mn` / `family_name_mn` (кирилл, байвал), `pnomn` (`pnomn` scope + эрхтэй үед). `id_token` 5 минут
+хүчинтэй; access_token / refresh_token / userinfo байхгүй — нэвтрэлтийн дараа өөрийн session-оо хэрэглэнэ.
+
+**Аюулгүй байдал.**
+
+- `state`, `nonce`, `codeVerifier`-ийг **хөтчийн session-тэй** (httpOnly, Secure, SameSite=Lax cookie эсвэл server
+  session) холбож хадгална; `handleCallback` state-ийг timing-safe тулгаж, таарахгүй бол code-ийг солихгүй
+  (`state_mismatch`). Үүнгүйгээр «өөрийн бүртгэлд хохирогчийн eID-ийг холбуулах» (login CSRF) нээлттэй.
+- `handleCallback` / `verifyIdToken` нь ES256 гарын үсэг (JWKS `kid`, cache 1 цаг, танихгүй `kid` → нэг удаа дахин
+  татна), `iss`, `aud` (= `clientId`; олон aud бол `azp`), `exp` / `iat` (±60 сек), `nonce`-ийг шалгана.
+  `EidOidcError` (`invalid_id_token`) гарвал **итгэхгүй**.
+- Code нэг удаагийн, 60 секунд — callback-ийг дахин ачаалбал `invalid_grant`; хэрэглэгчийг дахин нэвтрүүлнэ.
+- `error_description` (`EidOidcError.description`)-ийг логт бичиж болно, хэрэглэгчид шууд харуулахгүй.
+- **Native апп (RFC 8252):** authorize-ийг системийн хөтчөөр нээнэ — iOS `ASWebAuthenticationSession`
+  (`prefersEphemeralWebBrowserSession = false`), Android Custom Tabs. **WebView хориотой.** `redirect_uri` = таны
+  https Universal Link / App Link (custom scheme дэмжихгүй). `state` / `nonce` / `codeVerifier` апп-ын санах ойд;
+  code-ийг таны backend `client_secret`-ээр солино (`client_secret`-ийг аппад хадгалахгүй).
 
 ## 2. Нэвтрэлт (push)
 
@@ -222,6 +309,7 @@ OK ирж болзошгүй. Иймд `ResponseValidator`:
 | `ValidationError` | cert chain/signature/level шалгалт бүтэлгүйтсэн |
 | `ApiError` | бусад HTTP алдаа (`.status`, `.body`, серверийн `.code` — ж: 404 `ORG_NOT_FOUND`) |
 | `NetworkError` | timeout/сүлжээ |
+| `EidOidcError` | «eID-ээр нэвтрэх» (OIDC) — `.code`: `access_denied`, `login_required`, `state_mismatch`, `invalid_grant`, `invalid_id_token`, `server_error` … |
 | `DeviceLinkError` | device-link холбоос угсрах боломжгүй (`deviceLinkBase` https биш, token/secret/lang хэлбэр, төрөлд хэрэгтэй талбар дутуу) |
 
 ## mTLS (eIDAS qualified орчин)

package/dist/index.cjs

@@ -25,8 +25,13 @@ __export(index_exports, {
   AuthenticationError: () => AuthenticationError,
   DEFAULT_BASE_URL: () => DEFAULT_BASE_URL,
   DeviceLinkError: () => DeviceLinkError,
+  EID_ACR_ADVANCED: () => EID_ACR_ADVANCED,
+  EID_ACR_QUALIFIED: () => EID_ACR_QUALIFIED,
+  EID_OIDC_ISSUER: () => EID_OIDC_ISSUER,
   EidClient: () => EidClient,
   EidError: () => EidError,
+  EidOidcClient: () => EidOidcClient,
+  EidOidcError: () => EidOidcError,
   ForbiddenError: () => ForbiddenError,
   Http: () => Http,
   NetworkError: () => NetworkError,
@@ -46,6 +51,7 @@ __export(index_exports, {
   isMobileUserAgent: () => isMobileUserAgent,
   openOrShowQR: () => openOrShowQR,
   parseSessionResult: () => parseSessionResult,
+  pkceChallenge: () => pkceChallenge,
   qrDeviceLinkTicker: () => qrDeviceLinkTicker,
   randomChallenge: () => randomChallenge,
   resolveBaseUrl: () => resolveBaseUrl,
@@ -1032,6 +1038,283 @@ function qrDeviceLinkTicker(input, onLink, opts) {
   t.unref?.();
   return () => clearInterval(t);
 }
+
+// src/oidc.ts
+var import_node_crypto4 = require("crypto");
+var EID_OIDC_ISSUER = "https://login.eidmongolia.mn";
+var EID_ACR_QUALIFIED = "urn:eidmongolia:loa:qualified";
+var EID_ACR_ADVANCED = "urn:eidmongolia:loa:advanced";
+var CLOCK_SKEW_S = 60;
+var CACHE_MS = 60 * 60 * 1e3;
+var DEFAULT_TIMEOUT_MS2 = 1e4;
+var KNOWN_CODES = /* @__PURE__ */ new Set([
+  "access_denied",
+  "login_required",
+  "invalid_request",
+  "invalid_scope",
+  "unauthorized_client",
+  "unsupported_response_type",
+  "request_not_supported",
+  "temporarily_unavailable",
+  "server_error",
+  "invalid_client",
+  "invalid_grant",
+  "unsupported_grant_type"
+]);
+var EidOidcError = class extends EidError {
+  constructor(code, message, description) {
+    super(message);
+    this.code = code;
+    this.description = description;
+  }
+  code;
+  description;
+};
+var EidOidcClient = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+    if (!cfg.clientId) throw new EidError("EidOidcClient: clientId \u0445\u043E\u043E\u0441\u043E\u043D");
+    if (!cfg.clientSecret) throw new EidError("EidOidcClient: clientSecret \u0445\u043E\u043E\u0441\u043E\u043D");
+    if (!/^https:\/\//.test(cfg.redirectUri ?? "")) throw new EidError("EidOidcClient: redirectUri https:// \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439");
+    this.issuer = (cfg.issuer ?? EID_OIDC_ISSUER).replace(/\/+$/, "");
+    this.scope = cfg.scope ?? "openid";
+  }
+  cfg;
+  issuer;
+  scope;
+  discovery;
+  jwks;
+  /** Discovery document (1 цаг cache). `issuer` нь тохиргоотой яг таарах ёстой (OIDC Discovery §4.3). */
+  discover() {
+    const c = this.discovery;
+    if (c && Date.now() - c.at < CACHE_MS) return c.d;
+    const d = this.fetchDiscovery();
+    this.discovery = { at: Date.now(), d };
+    d.catch(() => {
+      if (this.discovery?.d === d) this.discovery = void 0;
+    });
+    return d;
+  }
+  async fetchDiscovery() {
+    const d = await this.getJson(this.issuer + "/.well-known/openid-configuration");
+    if (!d || d.issuer !== this.issuer) {
+      throw new EidOidcError("discovery_failed", `OIDC discovery-\u0438\u0439\u043D issuer \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439 (\u0445\u04AF\u043B\u044D\u044D\u0441\u044D\u043D ${this.issuer})`);
+    }
+    for (const k of ["authorization_endpoint", "token_endpoint", "jwks_uri"]) {
+      if (typeof d[k] !== "string" || !d[k].startsWith("https://")) {
+        throw new EidOidcError("discovery_failed", `OIDC discovery: ${k} \u0431\u0443\u0440\u0443\u0443`);
+      }
+    }
+    return d;
+  }
+  /**
+   * Authorize URL + санамсаргүй state / nonce / PKCE codeVerifier. RP буцаасан `state`, `nonce`, `codeVerifier`-ийг
+   * хөтчийн session-тэй холбож (httpOnly cookie эсвэл server session) хадгалаад хөтчийг `url` руу 302 хийнэ.
+   */
+  async createAuthorization(opts = {}) {
+    const d = await this.discover();
+    const state = randomB64url(32);
+    const nonce = randomB64url(32);
+    const codeVerifier = randomB64url(32);
+    const u = new URL(d.authorization_endpoint);
+    const p = new URLSearchParams({
+      response_type: "code",
+      client_id: this.cfg.clientId,
+      redirect_uri: this.cfg.redirectUri,
+      scope: opts.scope ?? this.scope,
+      state,
+      nonce,
+      code_challenge: await pkceChallenge(codeVerifier),
+      code_challenge_method: "S256"
+    });
+    if (opts.display) p.set("display", opts.display);
+    u.search = p.toString();
+    return { url: u.toString(), state, nonce, codeVerifier };
+  }
+  /**
+   * redirect_uri руу ирсэн callback-ийг шийднэ: state тулгах → `error` бол {@link EidOidcError} → code солих →
+   * id_token шалгах. `input` — бүтэн callback URL, харьцангуй зам (`/cb?code=…`) эсвэл query (`URLSearchParams` / `code=…&state=…`); зөвхөн query-г уншина.
+   * Амжилтгүй бүх тохиолдолд {@link EidOidcError} (эсвэл {@link NetworkError}) шиднэ.
+   */
+  async handleCallback(input, checks) {
+    const q = callbackParams(input);
+    const state = q.get("state") ?? "";
+    if (!checks.state || !timingSafeEqualStr(state, checks.state)) {
+      throw new EidOidcError("state_mismatch", "OIDC state \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439 \u2014 \u043D\u044D\u0432\u0442\u0440\u044D\u043B\u0442\u0438\u0439\u0433 \u0434\u0430\u0445\u0438\u043D \u044D\u0445\u043B\u04AF\u04AF\u043B\u043D\u044D \u04AF\u04AF");
+    }
+    const iss = q.get("iss");
+    if (iss !== null && iss !== this.issuer) {
+      throw new EidOidcError("invalid_callback", "OIDC callback-\u0438\u0439\u043D iss \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    }
+    const err = q.get("error");
+    if (err) {
+      const code2 = KNOWN_CODES.has(err) ? err : "server_error";
+      throw new EidOidcError(code2, `eID \u043D\u044D\u0432\u0442\u0440\u044D\u043B\u0442 \u0430\u043C\u0436\u0438\u043B\u0442\u0433\u04AF\u0439: ${code2}`, q.get("error_description") ?? void 0);
+    }
+    const code = q.get("code") ?? "";
+    if (code === "" || code.length > 512) throw new EidOidcError("invalid_callback", "OIDC callback-\u0434 code \u0430\u043B\u0433\u0430");
+    const idToken = await this.exchangeCode(code, checks.codeVerifier);
+    const claims = await this.verifyIdToken(idToken, { nonce: checks.nonce });
+    return { claims, idToken };
+  }
+  /** `POST token_endpoint` (client_secret_basic, RFC 6749 §2.3.1) → id_token. */
+  async exchangeCode(code, codeVerifier) {
+    const d = await this.discover();
+    const basic = Buffer.from(formEncode(this.cfg.clientId) + ":" + formEncode(this.cfg.clientSecret)).toString("base64");
+    const res = await this.fetch(d.token_endpoint, {
+      method: "POST",
+      headers: {
+        Authorization: "Basic " + basic,
+        "Content-Type": "application/x-www-form-urlencoded",
+        Accept: "application/json"
+      },
+      body: new URLSearchParams({
+        grant_type: "authorization_code",
+        code,
+        redirect_uri: this.cfg.redirectUri,
+        code_verifier: codeVerifier
+      }).toString()
+    });
+    let j = {};
+    try {
+      j = await res.json();
+    } catch {
+    }
+    if (!res.ok) {
+      const e = typeof j.error === "string" && KNOWN_CODES.has(j.error) ? j.error : "server_error";
+      throw new EidOidcError(
+        e,
+        `OIDC token ${res.status}: ${e}`,
+        typeof j.error_description === "string" ? j.error_description : void 0
+      );
+    }
+    if (typeof j.id_token !== "string" || j.id_token === "") {
+      throw new EidOidcError("server_error", "OIDC token \u0445\u0430\u0440\u0438\u0443\u043D\u0434 id_token \u0430\u043B\u0433\u0430");
+    }
+    return j.id_token;
+  }
+  /**
+   * id_token шалгана: JWKS (`kid`, cache; танихгүй kid → нэг удаа дахин татна) ES256 гарын үсэг, `iss`, `aud`
+   * (= clientId; олон aud бол `azp`), `exp`/`iat` (±60 сек), `nonce`. Амжилтгүй бол `invalid_id_token`.
+   */
+  async verifyIdToken(idToken, opts) {
+    const bad = (why) => new EidOidcError("invalid_id_token", `id_token: ${why}`);
+    const parts = idToken.split(".");
+    if (parts.length !== 3) throw bad("\u0445\u044D\u043B\u0431\u044D\u0440 \u0431\u0443\u0440\u0443\u0443");
+    const header = decodeJsonPart(parts[0]);
+    const payload = decodeJsonPart(parts[1]);
+    if (!header || !payload) throw bad("\u0445\u044D\u043B\u0431\u044D\u0440 \u0431\u0443\u0440\u0443\u0443");
+    if (header.alg !== "ES256") throw bad("alg ES256 \u0431\u0438\u0448");
+    const kid = typeof header.kid === "string" ? header.kid : "";
+    if (!kid) throw bad("kid \u0430\u043B\u0433\u0430");
+    const pick = (ks) => ks.find(
+      (k) => k.kid === kid && k.kty === "EC" && k.crv === "P-256" && (k.use === void 0 || k.use === "sig") && (k.alg === void 0 || k.alg === "ES256")
+    );
+    const jwk = pick(await this.keys(false)) ?? pick(await this.keys(true));
+    if (!jwk || !jwk.x || !jwk.y) throw bad(`\u0442\u0430\u043D\u0438\u0445\u0433\u04AF\u0439 kid ${kid}`);
+    const sig = Buffer.from(parts[2], "base64url");
+    if (sig.length !== 64) throw bad("\u0433\u0430\u0440\u044B\u043D \u04AF\u0441\u044D\u0433 \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
+    let ok = false;
+    try {
+      const key = await globalThis.crypto.subtle.importKey(
+        "jwk",
+        { kty: "EC", crv: "P-256", x: jwk.x, y: jwk.y },
+        { name: "ECDSA", namedCurve: "P-256" },
+        false,
+        ["verify"]
+      );
+      ok = await globalThis.crypto.subtle.verify(
+        { name: "ECDSA", hash: "SHA-256" },
+        key,
+        sig,
+        new TextEncoder().encode(parts[0] + "." + parts[1])
+      );
+    } catch {
+      ok = false;
+    }
+    if (!ok) throw bad("\u0433\u0430\u0440\u044B\u043D \u04AF\u0441\u044D\u0433 \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
+    const c = payload;
+    const now = Math.floor(Date.now() / 1e3);
+    if (c.iss !== this.issuer) throw bad("iss \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    const aud = Array.isArray(c.aud) ? c.aud : [c.aud];
+    if (!aud.includes(this.cfg.clientId)) throw bad("aud \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    if (aud.length > 1 && c.azp !== this.cfg.clientId) throw bad("azp \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    if (typeof c.exp !== "number" || now > c.exp + CLOCK_SKEW_S) throw bad("\u0445\u0443\u0433\u0430\u0446\u0430\u0430 \u0434\u0443\u0443\u0441\u0441\u0430\u043D");
+    if (typeof c.iat !== "number" || c.iat > now + CLOCK_SKEW_S) throw bad("iat \u0438\u0440\u044D\u044D\u0434\u04AF\u0439\u0434");
+    if (typeof c.nonce !== "string" || !opts.nonce || !timingSafeEqualStr(c.nonce, opts.nonce)) throw bad("nonce \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    if (typeof c.sub !== "string" || c.sub === "") throw bad("sub \u0430\u043B\u0433\u0430");
+    return c;
+  }
+  keys(force) {
+    const c = this.jwks;
+    if (!force && c && Date.now() - c.at < CACHE_MS) return c.keys;
+    const keys = this.discover().then(async (d) => {
+      const j = await this.getJson(d.jwks_uri);
+      return Array.isArray(j?.keys) ? j.keys : [];
+    });
+    this.jwks = { at: Date.now(), keys };
+    keys.catch(() => {
+      if (this.jwks?.keys === keys) this.jwks = void 0;
+    });
+    return keys;
+  }
+  async getJson(url) {
+    const res = await this.fetch(url, { method: "GET", headers: { Accept: "application/json" } });
+    if (!res.ok) throw new EidOidcError("discovery_failed", `OIDC ${res.status}: ${url}`);
+    try {
+      return await res.json();
+    } catch {
+      throw new EidOidcError("discovery_failed", `OIDC JSON \u0431\u0438\u0448: ${url}`);
+    }
+  }
+  async fetch(url, init) {
+    const f = this.cfg.fetchImpl ?? fetch;
+    try {
+      return await f(url, {
+        ...init,
+        redirect: "error",
+        signal: AbortSignal.timeout(this.cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS2)
+      });
+    } catch (e) {
+      const err = e;
+      if (err.name === "TimeoutError" || err.name === "AbortError") {
+        throw new NetworkError(`OIDC \u0445\u04AF\u0441\u044D\u043B\u0442 \u0445\u0443\u0433\u0430\u0446\u0430\u0430 \u0445\u044D\u0442\u044D\u0440\u043B\u044D\u044D: ${url}`);
+      }
+      throw new NetworkError(`OIDC \u0441\u04AF\u043B\u0436\u044D\u044D\u043D\u0438\u0439 \u0430\u043B\u0434\u0430\u0430 (${url}): ${err.message}`);
+    }
+  }
+};
+async function pkceChallenge(codeVerifier) {
+  const h = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(codeVerifier));
+  return Buffer.from(h).toString("base64url");
+}
+function randomB64url(bytes) {
+  return Buffer.from(globalThis.crypto.getRandomValues(new Uint8Array(bytes))).toString("base64url");
+}
+function formEncode(s) {
+  return new URLSearchParams({ v: s }).toString().slice(2);
+}
+function timingSafeEqualStr(a, b) {
+  const x = Buffer.from(a, "utf8");
+  const y = Buffer.from(b, "utf8");
+  return x.length === y.length && (0, import_node_crypto4.timingSafeEqual)(x, y);
+}
+function decodeJsonPart(s) {
+  try {
+    const v = JSON.parse(Buffer.from(s, "base64url").toString("utf8"));
+    return v && typeof v === "object" && !Array.isArray(v) ? v : null;
+  } catch {
+    return null;
+  }
+}
+function callbackParams(input) {
+  if (input instanceof URLSearchParams) return input;
+  if (input instanceof URL) return input.searchParams;
+  const s = input.trim();
+  if (/^https?:\/\//i.test(s)) return new URL(s).searchParams;
+  const i = s.indexOf("?");
+  return new URLSearchParams(i >= 0 ? s.slice(i + 1) : s);
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ApiError,
@@ -1039,8 +1322,13 @@ function qrDeviceLinkTicker(input, onLink, opts) {
   AuthenticationError,
   DEFAULT_BASE_URL,
   DeviceLinkError,
+  EID_ACR_ADVANCED,
+  EID_ACR_QUALIFIED,
+  EID_OIDC_ISSUER,
   EidClient,
   EidError,
+  EidOidcClient,
+  EidOidcError,
   ForbiddenError,
   Http,
   NetworkError,
@@ -1060,6 +1348,7 @@ function qrDeviceLinkTicker(input, onLink, opts) {
   isMobileUserAgent,
   openOrShowQR,
   parseSessionResult,
+  pkceChallenge,
   qrDeviceLinkTicker,
   randomChallenge,
   resolveBaseUrl,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, b as RepresentationsResponse, A as AcspContext, F as FlowType } from './browser-Db82DlYN.cjs';
-export { c as ApiError, d as AuthenticationError, e as DeviceLinkError, f as DeviceLinkInput, E as EidError, g as EndResult, h as ForbiddenError, i as NavigatorLike, j as NetworkError, O as ON_BEHALF_ERROR_CODES, k as OnBehalfErrorCode, l as OpenOrShowQROptions, m as OrgResult, P as PdfDocumentStatus, n as PdfSessionBlock, o as PdfSigner, p as Representation, q as SessionFailedError, r as SessionState, s as SignatureAlgorithmParameters, t as SignatureProtocol, V as ValidationError, u as deviceLink, v as isMobileUserAgent, w as openOrShowQR } from './browser-Db82DlYN.cjs';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, b as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-Db82DlYN.cjs';
+export { c as ApiError, d as AuthenticationError, e as DeviceLinkError, f as DeviceLinkInput, g as EndResult, h as ForbiddenError, i as NavigatorLike, j as NetworkError, O as ON_BEHALF_ERROR_CODES, k as OnBehalfErrorCode, l as OpenOrShowQROptions, m as OrgResult, P as PdfDocumentStatus, n as PdfSessionBlock, o as PdfSigner, p as Representation, q as SessionFailedError, r as SessionState, s as SignatureAlgorithmParameters, t as SignatureProtocol, V as ValidationError, u as deviceLink, v as isMobileUserAgent, w as openOrShowQR } from './browser-Db82DlYN.cjs';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -457,4 +457,141 @@ interface QrDeviceLinkTickerOptions {
  */
 declare function qrDeviceLinkTicker(input: Omit<BuildDeviceLinkInput, "deviceLinkType" | "now">, onLink: (link: string) => void, opts?: QrDeviceLinkTickerOptions): () => void;
 
-export { AcspContext, type AcspV2Params, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CertificateLevel, type ClientConfig, DEFAULT_BASE_URL, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EidClient, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, type PdfSignerRef, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, type TrustConfig, type ValidateAuthOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature };
+/** eID-ийн OIDC issuer (төгсгөлд `/` байхгүй). */
+declare const EID_OIDC_ISSUER = "https://login.eidmongolia.mn";
+/** `acr` утгууд — иргэний гэрчилгээний бодит түвшин. */
+declare const EID_ACR_QUALIFIED = "urn:eidmongolia:loa:qualified";
+declare const EID_ACR_ADVANCED = "urn:eidmongolia:loa:advanced";
+/**
+ * OIDC алдааны код. Authorize redirect (RFC 6749 §4.1.2.1) ба token endpoint (§5.2)-ийн стандарт кодууд, мөн
+ * SDK-ийн өөрийн шалгалтын кодууд:
+ * - `state_mismatch` — callback-ийн `state` хадгалсантай таарсангүй (CSRF / өөр tab / cookie дууссан) → дахин эхлүүл;
+ * - `invalid_callback` — `code` алга / хэт урт, эсвэл `iss` параметр өөр;
+ * - `invalid_id_token` — id_token-ий гарын үсэг / iss / aud / exp / iat / nonce шалгалт унасан (ИТГЭХГҮЙ);
+ * - `discovery_failed` — discovery/JWKS буруу эсвэл issuer таарахгүй.
+ *
+ * `access_denied` = иргэн татгалзсан, нэвтрэлтийн хугацаа дууссан, эсвэл гэрчилгээний шалгалт унасан → «дахин оролд».
+ */
+type EidOidcErrorCode = "access_denied" | "login_required" | "invalid_request" | "invalid_scope" | "unauthorized_client" | "unsupported_response_type" | "request_not_supported" | "temporarily_unavailable" | "server_error" | "invalid_client" | "invalid_grant" | "unsupported_grant_type" | "state_mismatch" | "invalid_callback" | "invalid_id_token" | "discovery_failed";
+/**
+ * OIDC урсгалын алдаа. `code`-оор салгана. `description` нь серверийн `error_description` — логт л,
+ * хэрэглэгчид шууд харуулахгүй.
+ */
+declare class EidOidcError extends EidError {
+    readonly code: EidOidcErrorCode;
+    readonly description?: string | undefined;
+    constructor(code: EidOidcErrorCode, message: string, description?: string | undefined);
+}
+interface EidOidcClientConfig {
+    /** RP UUID (`relyingPartyUUID`). */
+    clientId: string;
+    /** RP API secret (`rp_sk_…`) — зөвхөн backend-д. */
+    clientSecret: string;
+    /** Бүртгэлтэй redirect URI — тэмдэгт бүрээрээ таарах ёстой. */
+    redirectUri: string;
+    /** Анхдагч {@link EID_OIDC_ISSUER}. */
+    issuer?: string;
+    /** Анхдагч `"openid"`. Иргэний ETSI дугаар хэрэгтэй бол `"openid pnomn"` (RP-д `PNOMN` эрх). */
+    scope?: string;
+    /** HTTP timeout (мс), анхдагч 10000. */
+    timeoutMs?: number;
+    /** fetch орлуулагч (тест). */
+    fetchImpl?: typeof fetch;
+}
+interface EidOidcDiscovery {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri: string;
+    [k: string]: unknown;
+}
+interface CreateAuthorizationOptions {
+    /** Энэ хүсэлтэд scope-ыг дарна. */
+    scope?: string;
+    /**
+     * `touch` (анхдагч) — утасны хөтчөөс шууд eID апп; `page` — үргэлж нэвтрэх хуудас (QR / push), ж: таблет киоск.
+     */
+    display?: "page" | "touch";
+}
+/** RP-ийн хадгалах ёстой гүйлгээ — httpOnly cookie / server session-д (браузерийн JS-д биш). */
+interface EidAuthorization {
+    /** Хөтчийг энэ рүү 302. */
+    url: string;
+    state: string;
+    nonce: string;
+    codeVerifier: string;
+}
+/** createAuthorization-аас хадгалсан утгууд. */
+interface EidCallbackChecks {
+    state: string;
+    nonce: string;
+    codeVerifier: string;
+}
+/** id_token-ий claim-ууд (`docs/OIDC.md` §4). */
+interface EidIdTokenClaims {
+    iss: string;
+    aud: string | string[];
+    azp?: string;
+    /** Pairwise — RP тус бүрд өөр, иргэнд тогтмол. Хэрэглэгчийг ҮҮГЭЭР таньна. */
+    sub: string;
+    exp: number;
+    iat: number;
+    nonce: string;
+    /** Иргэн баталгаажуулсан мөч (Unix сек). */
+    auth_time: number;
+    /** {@link EID_ACR_QUALIFIED} эсвэл {@link EID_ACR_ADVANCED}. */
+    acr: string;
+    /** Гэрчилгээний GIVENNAME — латин (ICAO, том үсэг). */
+    given_name: string;
+    /** Гэрчилгээний SURNAME (эцэг/эхийн нэр) — латин. */
+    family_name: string;
+    /** Нэр — кирилл (бүртгэлд байхгүй бол алга). */
+    given_name_mn?: string;
+    /** Эцэг/эхийн нэр — кирилл (бүртгэлд байхгүй бол алга). */
+    family_name_mn?: string;
+    /** `PNOMN-<иргэний дугаар>` — зөвхөн `pnomn` scope + `PNOMN` эрхтэй үед. */
+    pnomn?: string;
+    [k: string]: unknown;
+}
+interface EidCallbackResult {
+    claims: EidIdTokenClaims;
+    idToken: string;
+}
+declare class EidOidcClient {
+    private readonly cfg;
+    readonly issuer: string;
+    private readonly scope;
+    private discovery?;
+    private jwks?;
+    constructor(cfg: EidOidcClientConfig);
+    /** Discovery document (1 цаг cache). `issuer` нь тохиргоотой яг таарах ёстой (OIDC Discovery §4.3). */
+    discover(): Promise<EidOidcDiscovery>;
+    private fetchDiscovery;
+    /**
+     * Authorize URL + санамсаргүй state / nonce / PKCE codeVerifier. RP буцаасан `state`, `nonce`, `codeVerifier`-ийг
+     * хөтчийн session-тэй холбож (httpOnly cookie эсвэл server session) хадгалаад хөтчийг `url` руу 302 хийнэ.
+     */
+    createAuthorization(opts?: CreateAuthorizationOptions): Promise<EidAuthorization>;
+    /**
+     * redirect_uri руу ирсэн callback-ийг шийднэ: state тулгах → `error` бол {@link EidOidcError} → code солих →
+     * id_token шалгах. `input` — бүтэн callback URL, харьцангуй зам (`/cb?code=…`) эсвэл query (`URLSearchParams` / `code=…&state=…`); зөвхөн query-г уншина.
+     * Амжилтгүй бүх тохиолдолд {@link EidOidcError} (эсвэл {@link NetworkError}) шиднэ.
+     */
+    handleCallback(input: string | URL | URLSearchParams, checks: EidCallbackChecks): Promise<EidCallbackResult>;
+    /** `POST token_endpoint` (client_secret_basic, RFC 6749 §2.3.1) → id_token. */
+    private exchangeCode;
+    /**
+     * id_token шалгана: JWKS (`kid`, cache; танихгүй kid → нэг удаа дахин татна) ES256 гарын үсэг, `iss`, `aud`
+     * (= clientId; олон aud бол `azp`), `exp`/`iat` (±60 сек), `nonce`. Амжилтгүй бол `invalid_id_token`.
+     */
+    verifyIdToken(idToken: string, opts: {
+        nonce: string;
+    }): Promise<EidIdTokenClaims>;
+    private keys;
+    private getJson;
+    private fetch;
+}
+/** PKCE S256: `BASE64URL(SHA-256(ASCII(code_verifier)))` (RFC 7636 §4.2). */
+declare function pkceChallenge(codeVerifier: string): Promise<string>;
+
+export { AcspContext, type AcspV2Params, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CertificateLevel, type ClientConfig, type CreateAuthorizationOptions, DEFAULT_BASE_URL, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EID_ACR_ADVANCED, EID_ACR_QUALIFIED, EID_OIDC_ISSUER, type EidAuthorization, type EidCallbackChecks, type EidCallbackResult, EidClient, EidError, type EidIdTokenClaims, EidOidcClient, type EidOidcClientConfig, type EidOidcDiscovery, EidOidcError, type EidOidcErrorCode, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, type PdfSignerRef, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, type TrustConfig, type ValidateAuthOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, pkceChallenge, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, b as RepresentationsResponse, A as AcspContext, F as FlowType } from './browser-Db82DlYN.js';
-export { c as ApiError, d as AuthenticationError, e as DeviceLinkError, f as DeviceLinkInput, E as EidError, g as EndResult, h as ForbiddenError, i as NavigatorLike, j as NetworkError, O as ON_BEHALF_ERROR_CODES, k as OnBehalfErrorCode, l as OpenOrShowQROptions, m as OrgResult, P as PdfDocumentStatus, n as PdfSessionBlock, o as PdfSigner, p as Representation, q as SessionFailedError, r as SessionState, s as SignatureAlgorithmParameters, t as SignatureProtocol, V as ValidationError, u as deviceLink, v as isMobileUserAgent, w as openOrShowQR } from './browser-Db82DlYN.js';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, b as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-Db82DlYN.js';
+export { c as ApiError, d as AuthenticationError, e as DeviceLinkError, f as DeviceLinkInput, g as EndResult, h as ForbiddenError, i as NavigatorLike, j as NetworkError, O as ON_BEHALF_ERROR_CODES, k as OnBehalfErrorCode, l as OpenOrShowQROptions, m as OrgResult, P as PdfDocumentStatus, n as PdfSessionBlock, o as PdfSigner, p as Representation, q as SessionFailedError, r as SessionState, s as SignatureAlgorithmParameters, t as SignatureProtocol, V as ValidationError, u as deviceLink, v as isMobileUserAgent, w as openOrShowQR } from './browser-Db82DlYN.js';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -457,4 +457,141 @@ interface QrDeviceLinkTickerOptions {
  */
 declare function qrDeviceLinkTicker(input: Omit<BuildDeviceLinkInput, "deviceLinkType" | "now">, onLink: (link: string) => void, opts?: QrDeviceLinkTickerOptions): () => void;
 
-export { AcspContext, type AcspV2Params, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CertificateLevel, type ClientConfig, DEFAULT_BASE_URL, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EidClient, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, type PdfSignerRef, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, type TrustConfig, type ValidateAuthOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature };
+/** eID-ийн OIDC issuer (төгсгөлд `/` байхгүй). */
+declare const EID_OIDC_ISSUER = "https://login.eidmongolia.mn";
+/** `acr` утгууд — иргэний гэрчилгээний бодит түвшин. */
+declare const EID_ACR_QUALIFIED = "urn:eidmongolia:loa:qualified";
+declare const EID_ACR_ADVANCED = "urn:eidmongolia:loa:advanced";
+/**
+ * OIDC алдааны код. Authorize redirect (RFC 6749 §4.1.2.1) ба token endpoint (§5.2)-ийн стандарт кодууд, мөн
+ * SDK-ийн өөрийн шалгалтын кодууд:
+ * - `state_mismatch` — callback-ийн `state` хадгалсантай таарсангүй (CSRF / өөр tab / cookie дууссан) → дахин эхлүүл;
+ * - `invalid_callback` — `code` алга / хэт урт, эсвэл `iss` параметр өөр;
+ * - `invalid_id_token` — id_token-ий гарын үсэг / iss / aud / exp / iat / nonce шалгалт унасан (ИТГЭХГҮЙ);
+ * - `discovery_failed` — discovery/JWKS буруу эсвэл issuer таарахгүй.
+ *
+ * `access_denied` = иргэн татгалзсан, нэвтрэлтийн хугацаа дууссан, эсвэл гэрчилгээний шалгалт унасан → «дахин оролд».
+ */
+type EidOidcErrorCode = "access_denied" | "login_required" | "invalid_request" | "invalid_scope" | "unauthorized_client" | "unsupported_response_type" | "request_not_supported" | "temporarily_unavailable" | "server_error" | "invalid_client" | "invalid_grant" | "unsupported_grant_type" | "state_mismatch" | "invalid_callback" | "invalid_id_token" | "discovery_failed";
+/**
+ * OIDC урсгалын алдаа. `code`-оор салгана. `description` нь серверийн `error_description` — логт л,
+ * хэрэглэгчид шууд харуулахгүй.
+ */
+declare class EidOidcError extends EidError {
+    readonly code: EidOidcErrorCode;
+    readonly description?: string | undefined;
+    constructor(code: EidOidcErrorCode, message: string, description?: string | undefined);
+}
+interface EidOidcClientConfig {
+    /** RP UUID (`relyingPartyUUID`). */
+    clientId: string;
+    /** RP API secret (`rp_sk_…`) — зөвхөн backend-д. */
+    clientSecret: string;
+    /** Бүртгэлтэй redirect URI — тэмдэгт бүрээрээ таарах ёстой. */
+    redirectUri: string;
+    /** Анхдагч {@link EID_OIDC_ISSUER}. */
+    issuer?: string;
+    /** Анхдагч `"openid"`. Иргэний ETSI дугаар хэрэгтэй бол `"openid pnomn"` (RP-д `PNOMN` эрх). */
+    scope?: string;
+    /** HTTP timeout (мс), анхдагч 10000. */
+    timeoutMs?: number;
+    /** fetch орлуулагч (тест). */
+    fetchImpl?: typeof fetch;
+}
+interface EidOidcDiscovery {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri: string;
+    [k: string]: unknown;
+}
+interface CreateAuthorizationOptions {
+    /** Энэ хүсэлтэд scope-ыг дарна. */
+    scope?: string;
+    /**
+     * `touch` (анхдагч) — утасны хөтчөөс шууд eID апп; `page` — үргэлж нэвтрэх хуудас (QR / push), ж: таблет киоск.
+     */
+    display?: "page" | "touch";
+}
+/** RP-ийн хадгалах ёстой гүйлгээ — httpOnly cookie / server session-д (браузерийн JS-д биш). */
+interface EidAuthorization {
+    /** Хөтчийг энэ рүү 302. */
+    url: string;
+    state: string;
+    nonce: string;
+    codeVerifier: string;
+}
+/** createAuthorization-аас хадгалсан утгууд. */
+interface EidCallbackChecks {
+    state: string;
+    nonce: string;
+    codeVerifier: string;
+}
+/** id_token-ий claim-ууд (`docs/OIDC.md` §4). */
+interface EidIdTokenClaims {
+    iss: string;
+    aud: string | string[];
+    azp?: string;
+    /** Pairwise — RP тус бүрд өөр, иргэнд тогтмол. Хэрэглэгчийг ҮҮГЭЭР таньна. */
+    sub: string;
+    exp: number;
+    iat: number;
+    nonce: string;
+    /** Иргэн баталгаажуулсан мөч (Unix сек). */
+    auth_time: number;
+    /** {@link EID_ACR_QUALIFIED} эсвэл {@link EID_ACR_ADVANCED}. */
+    acr: string;
+    /** Гэрчилгээний GIVENNAME — латин (ICAO, том үсэг). */
+    given_name: string;
+    /** Гэрчилгээний SURNAME (эцэг/эхийн нэр) — латин. */
+    family_name: string;
+    /** Нэр — кирилл (бүртгэлд байхгүй бол алга). */
+    given_name_mn?: string;
+    /** Эцэг/эхийн нэр — кирилл (бүртгэлд байхгүй бол алга). */
+    family_name_mn?: string;
+    /** `PNOMN-<иргэний дугаар>` — зөвхөн `pnomn` scope + `PNOMN` эрхтэй үед. */
+    pnomn?: string;
+    [k: string]: unknown;
+}
+interface EidCallbackResult {
+    claims: EidIdTokenClaims;
+    idToken: string;
+}
+declare class EidOidcClient {
+    private readonly cfg;
+    readonly issuer: string;
+    private readonly scope;
+    private discovery?;
+    private jwks?;
+    constructor(cfg: EidOidcClientConfig);
+    /** Discovery document (1 цаг cache). `issuer` нь тохиргоотой яг таарах ёстой (OIDC Discovery §4.3). */
+    discover(): Promise<EidOidcDiscovery>;
+    private fetchDiscovery;
+    /**
+     * Authorize URL + санамсаргүй state / nonce / PKCE codeVerifier. RP буцаасан `state`, `nonce`, `codeVerifier`-ийг
+     * хөтчийн session-тэй холбож (httpOnly cookie эсвэл server session) хадгалаад хөтчийг `url` руу 302 хийнэ.
+     */
+    createAuthorization(opts?: CreateAuthorizationOptions): Promise<EidAuthorization>;
+    /**
+     * redirect_uri руу ирсэн callback-ийг шийднэ: state тулгах → `error` бол {@link EidOidcError} → code солих →
+     * id_token шалгах. `input` — бүтэн callback URL, харьцангуй зам (`/cb?code=…`) эсвэл query (`URLSearchParams` / `code=…&state=…`); зөвхөн query-г уншина.
+     * Амжилтгүй бүх тохиолдолд {@link EidOidcError} (эсвэл {@link NetworkError}) шиднэ.
+     */
+    handleCallback(input: string | URL | URLSearchParams, checks: EidCallbackChecks): Promise<EidCallbackResult>;
+    /** `POST token_endpoint` (client_secret_basic, RFC 6749 §2.3.1) → id_token. */
+    private exchangeCode;
+    /**
+     * id_token шалгана: JWKS (`kid`, cache; танихгүй kid → нэг удаа дахин татна) ES256 гарын үсэг, `iss`, `aud`
+     * (= clientId; олон aud бол `azp`), `exp`/`iat` (±60 сек), `nonce`. Амжилтгүй бол `invalid_id_token`.
+     */
+    verifyIdToken(idToken: string, opts: {
+        nonce: string;
+    }): Promise<EidIdTokenClaims>;
+    private keys;
+    private getJson;
+    private fetch;
+}
+/** PKCE S256: `BASE64URL(SHA-256(ASCII(code_verifier)))` (RFC 7636 §4.2). */
+declare function pkceChallenge(codeVerifier: string): Promise<string>;
+
+export { AcspContext, type AcspV2Params, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CertificateLevel, type ClientConfig, type CreateAuthorizationOptions, DEFAULT_BASE_URL, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EID_ACR_ADVANCED, EID_ACR_QUALIFIED, EID_OIDC_ISSUER, type EidAuthorization, type EidCallbackChecks, type EidCallbackResult, EidClient, EidError, type EidIdTokenClaims, EidOidcClient, type EidOidcClientConfig, type EidOidcDiscovery, EidOidcError, type EidOidcErrorCode, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, type PdfSignerRef, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, type TrustConfig, type ValidateAuthOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, pkceChallenge, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature };

package/dist/index.js

@@ -897,14 +897,296 @@ function qrDeviceLinkTicker(input, onLink, opts) {
   t.unref?.();
   return () => clearInterval(t);
 }
+
+// src/oidc.ts
+import { timingSafeEqual } from "crypto";
+var EID_OIDC_ISSUER = "https://login.eidmongolia.mn";
+var EID_ACR_QUALIFIED = "urn:eidmongolia:loa:qualified";
+var EID_ACR_ADVANCED = "urn:eidmongolia:loa:advanced";
+var CLOCK_SKEW_S = 60;
+var CACHE_MS = 60 * 60 * 1e3;
+var DEFAULT_TIMEOUT_MS2 = 1e4;
+var KNOWN_CODES = /* @__PURE__ */ new Set([
+  "access_denied",
+  "login_required",
+  "invalid_request",
+  "invalid_scope",
+  "unauthorized_client",
+  "unsupported_response_type",
+  "request_not_supported",
+  "temporarily_unavailable",
+  "server_error",
+  "invalid_client",
+  "invalid_grant",
+  "unsupported_grant_type"
+]);
+var EidOidcError = class extends EidError {
+  constructor(code, message, description) {
+    super(message);
+    this.code = code;
+    this.description = description;
+  }
+  code;
+  description;
+};
+var EidOidcClient = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+    if (!cfg.clientId) throw new EidError("EidOidcClient: clientId \u0445\u043E\u043E\u0441\u043E\u043D");
+    if (!cfg.clientSecret) throw new EidError("EidOidcClient: clientSecret \u0445\u043E\u043E\u0441\u043E\u043D");
+    if (!/^https:\/\//.test(cfg.redirectUri ?? "")) throw new EidError("EidOidcClient: redirectUri https:// \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439");
+    this.issuer = (cfg.issuer ?? EID_OIDC_ISSUER).replace(/\/+$/, "");
+    this.scope = cfg.scope ?? "openid";
+  }
+  cfg;
+  issuer;
+  scope;
+  discovery;
+  jwks;
+  /** Discovery document (1 цаг cache). `issuer` нь тохиргоотой яг таарах ёстой (OIDC Discovery §4.3). */
+  discover() {
+    const c = this.discovery;
+    if (c && Date.now() - c.at < CACHE_MS) return c.d;
+    const d = this.fetchDiscovery();
+    this.discovery = { at: Date.now(), d };
+    d.catch(() => {
+      if (this.discovery?.d === d) this.discovery = void 0;
+    });
+    return d;
+  }
+  async fetchDiscovery() {
+    const d = await this.getJson(this.issuer + "/.well-known/openid-configuration");
+    if (!d || d.issuer !== this.issuer) {
+      throw new EidOidcError("discovery_failed", `OIDC discovery-\u0438\u0439\u043D issuer \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439 (\u0445\u04AF\u043B\u044D\u044D\u0441\u044D\u043D ${this.issuer})`);
+    }
+    for (const k of ["authorization_endpoint", "token_endpoint", "jwks_uri"]) {
+      if (typeof d[k] !== "string" || !d[k].startsWith("https://")) {
+        throw new EidOidcError("discovery_failed", `OIDC discovery: ${k} \u0431\u0443\u0440\u0443\u0443`);
+      }
+    }
+    return d;
+  }
+  /**
+   * Authorize URL + санамсаргүй state / nonce / PKCE codeVerifier. RP буцаасан `state`, `nonce`, `codeVerifier`-ийг
+   * хөтчийн session-тэй холбож (httpOnly cookie эсвэл server session) хадгалаад хөтчийг `url` руу 302 хийнэ.
+   */
+  async createAuthorization(opts = {}) {
+    const d = await this.discover();
+    const state = randomB64url(32);
+    const nonce = randomB64url(32);
+    const codeVerifier = randomB64url(32);
+    const u = new URL(d.authorization_endpoint);
+    const p = new URLSearchParams({
+      response_type: "code",
+      client_id: this.cfg.clientId,
+      redirect_uri: this.cfg.redirectUri,
+      scope: opts.scope ?? this.scope,
+      state,
+      nonce,
+      code_challenge: await pkceChallenge(codeVerifier),
+      code_challenge_method: "S256"
+    });
+    if (opts.display) p.set("display", opts.display);
+    u.search = p.toString();
+    return { url: u.toString(), state, nonce, codeVerifier };
+  }
+  /**
+   * redirect_uri руу ирсэн callback-ийг шийднэ: state тулгах → `error` бол {@link EidOidcError} → code солих →
+   * id_token шалгах. `input` — бүтэн callback URL, харьцангуй зам (`/cb?code=…`) эсвэл query (`URLSearchParams` / `code=…&state=…`); зөвхөн query-г уншина.
+   * Амжилтгүй бүх тохиолдолд {@link EidOidcError} (эсвэл {@link NetworkError}) шиднэ.
+   */
+  async handleCallback(input, checks) {
+    const q = callbackParams(input);
+    const state = q.get("state") ?? "";
+    if (!checks.state || !timingSafeEqualStr(state, checks.state)) {
+      throw new EidOidcError("state_mismatch", "OIDC state \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439 \u2014 \u043D\u044D\u0432\u0442\u0440\u044D\u043B\u0442\u0438\u0439\u0433 \u0434\u0430\u0445\u0438\u043D \u044D\u0445\u043B\u04AF\u04AF\u043B\u043D\u044D \u04AF\u04AF");
+    }
+    const iss = q.get("iss");
+    if (iss !== null && iss !== this.issuer) {
+      throw new EidOidcError("invalid_callback", "OIDC callback-\u0438\u0439\u043D iss \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    }
+    const err = q.get("error");
+    if (err) {
+      const code2 = KNOWN_CODES.has(err) ? err : "server_error";
+      throw new EidOidcError(code2, `eID \u043D\u044D\u0432\u0442\u0440\u044D\u043B\u0442 \u0430\u043C\u0436\u0438\u043B\u0442\u0433\u04AF\u0439: ${code2}`, q.get("error_description") ?? void 0);
+    }
+    const code = q.get("code") ?? "";
+    if (code === "" || code.length > 512) throw new EidOidcError("invalid_callback", "OIDC callback-\u0434 code \u0430\u043B\u0433\u0430");
+    const idToken = await this.exchangeCode(code, checks.codeVerifier);
+    const claims = await this.verifyIdToken(idToken, { nonce: checks.nonce });
+    return { claims, idToken };
+  }
+  /** `POST token_endpoint` (client_secret_basic, RFC 6749 §2.3.1) → id_token. */
+  async exchangeCode(code, codeVerifier) {
+    const d = await this.discover();
+    const basic = Buffer.from(formEncode(this.cfg.clientId) + ":" + formEncode(this.cfg.clientSecret)).toString("base64");
+    const res = await this.fetch(d.token_endpoint, {
+      method: "POST",
+      headers: {
+        Authorization: "Basic " + basic,
+        "Content-Type": "application/x-www-form-urlencoded",
+        Accept: "application/json"
+      },
+      body: new URLSearchParams({
+        grant_type: "authorization_code",
+        code,
+        redirect_uri: this.cfg.redirectUri,
+        code_verifier: codeVerifier
+      }).toString()
+    });
+    let j = {};
+    try {
+      j = await res.json();
+    } catch {
+    }
+    if (!res.ok) {
+      const e = typeof j.error === "string" && KNOWN_CODES.has(j.error) ? j.error : "server_error";
+      throw new EidOidcError(
+        e,
+        `OIDC token ${res.status}: ${e}`,
+        typeof j.error_description === "string" ? j.error_description : void 0
+      );
+    }
+    if (typeof j.id_token !== "string" || j.id_token === "") {
+      throw new EidOidcError("server_error", "OIDC token \u0445\u0430\u0440\u0438\u0443\u043D\u0434 id_token \u0430\u043B\u0433\u0430");
+    }
+    return j.id_token;
+  }
+  /**
+   * id_token шалгана: JWKS (`kid`, cache; танихгүй kid → нэг удаа дахин татна) ES256 гарын үсэг, `iss`, `aud`
+   * (= clientId; олон aud бол `azp`), `exp`/`iat` (±60 сек), `nonce`. Амжилтгүй бол `invalid_id_token`.
+   */
+  async verifyIdToken(idToken, opts) {
+    const bad = (why) => new EidOidcError("invalid_id_token", `id_token: ${why}`);
+    const parts = idToken.split(".");
+    if (parts.length !== 3) throw bad("\u0445\u044D\u043B\u0431\u044D\u0440 \u0431\u0443\u0440\u0443\u0443");
+    const header = decodeJsonPart(parts[0]);
+    const payload = decodeJsonPart(parts[1]);
+    if (!header || !payload) throw bad("\u0445\u044D\u043B\u0431\u044D\u0440 \u0431\u0443\u0440\u0443\u0443");
+    if (header.alg !== "ES256") throw bad("alg ES256 \u0431\u0438\u0448");
+    const kid = typeof header.kid === "string" ? header.kid : "";
+    if (!kid) throw bad("kid \u0430\u043B\u0433\u0430");
+    const pick = (ks) => ks.find(
+      (k) => k.kid === kid && k.kty === "EC" && k.crv === "P-256" && (k.use === void 0 || k.use === "sig") && (k.alg === void 0 || k.alg === "ES256")
+    );
+    const jwk = pick(await this.keys(false)) ?? pick(await this.keys(true));
+    if (!jwk || !jwk.x || !jwk.y) throw bad(`\u0442\u0430\u043D\u0438\u0445\u0433\u04AF\u0439 kid ${kid}`);
+    const sig = Buffer.from(parts[2], "base64url");
+    if (sig.length !== 64) throw bad("\u0433\u0430\u0440\u044B\u043D \u04AF\u0441\u044D\u0433 \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
+    let ok = false;
+    try {
+      const key = await globalThis.crypto.subtle.importKey(
+        "jwk",
+        { kty: "EC", crv: "P-256", x: jwk.x, y: jwk.y },
+        { name: "ECDSA", namedCurve: "P-256" },
+        false,
+        ["verify"]
+      );
+      ok = await globalThis.crypto.subtle.verify(
+        { name: "ECDSA", hash: "SHA-256" },
+        key,
+        sig,
+        new TextEncoder().encode(parts[0] + "." + parts[1])
+      );
+    } catch {
+      ok = false;
+    }
+    if (!ok) throw bad("\u0433\u0430\u0440\u044B\u043D \u04AF\u0441\u044D\u0433 \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
+    const c = payload;
+    const now = Math.floor(Date.now() / 1e3);
+    if (c.iss !== this.issuer) throw bad("iss \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    const aud = Array.isArray(c.aud) ? c.aud : [c.aud];
+    if (!aud.includes(this.cfg.clientId)) throw bad("aud \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    if (aud.length > 1 && c.azp !== this.cfg.clientId) throw bad("azp \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    if (typeof c.exp !== "number" || now > c.exp + CLOCK_SKEW_S) throw bad("\u0445\u0443\u0433\u0430\u0446\u0430\u0430 \u0434\u0443\u0443\u0441\u0441\u0430\u043D");
+    if (typeof c.iat !== "number" || c.iat > now + CLOCK_SKEW_S) throw bad("iat \u0438\u0440\u044D\u044D\u0434\u04AF\u0439\u0434");
+    if (typeof c.nonce !== "string" || !opts.nonce || !timingSafeEqualStr(c.nonce, opts.nonce)) throw bad("nonce \u0442\u0430\u0430\u0440\u0430\u0445\u0433\u04AF\u0439");
+    if (typeof c.sub !== "string" || c.sub === "") throw bad("sub \u0430\u043B\u0433\u0430");
+    return c;
+  }
+  keys(force) {
+    const c = this.jwks;
+    if (!force && c && Date.now() - c.at < CACHE_MS) return c.keys;
+    const keys = this.discover().then(async (d) => {
+      const j = await this.getJson(d.jwks_uri);
+      return Array.isArray(j?.keys) ? j.keys : [];
+    });
+    this.jwks = { at: Date.now(), keys };
+    keys.catch(() => {
+      if (this.jwks?.keys === keys) this.jwks = void 0;
+    });
+    return keys;
+  }
+  async getJson(url) {
+    const res = await this.fetch(url, { method: "GET", headers: { Accept: "application/json" } });
+    if (!res.ok) throw new EidOidcError("discovery_failed", `OIDC ${res.status}: ${url}`);
+    try {
+      return await res.json();
+    } catch {
+      throw new EidOidcError("discovery_failed", `OIDC JSON \u0431\u0438\u0448: ${url}`);
+    }
+  }
+  async fetch(url, init) {
+    const f = this.cfg.fetchImpl ?? fetch;
+    try {
+      return await f(url, {
+        ...init,
+        redirect: "error",
+        signal: AbortSignal.timeout(this.cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS2)
+      });
+    } catch (e) {
+      const err = e;
+      if (err.name === "TimeoutError" || err.name === "AbortError") {
+        throw new NetworkError(`OIDC \u0445\u04AF\u0441\u044D\u043B\u0442 \u0445\u0443\u0433\u0430\u0446\u0430\u0430 \u0445\u044D\u0442\u044D\u0440\u043B\u044D\u044D: ${url}`);
+      }
+      throw new NetworkError(`OIDC \u0441\u04AF\u043B\u0436\u044D\u044D\u043D\u0438\u0439 \u0430\u043B\u0434\u0430\u0430 (${url}): ${err.message}`);
+    }
+  }
+};
+async function pkceChallenge(codeVerifier) {
+  const h = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(codeVerifier));
+  return Buffer.from(h).toString("base64url");
+}
+function randomB64url(bytes) {
+  return Buffer.from(globalThis.crypto.getRandomValues(new Uint8Array(bytes))).toString("base64url");
+}
+function formEncode(s) {
+  return new URLSearchParams({ v: s }).toString().slice(2);
+}
+function timingSafeEqualStr(a, b) {
+  const x = Buffer.from(a, "utf8");
+  const y = Buffer.from(b, "utf8");
+  return x.length === y.length && timingSafeEqual(x, y);
+}
+function decodeJsonPart(s) {
+  try {
+    const v = JSON.parse(Buffer.from(s, "base64url").toString("utf8"));
+    return v && typeof v === "object" && !Array.isArray(v) ? v : null;
+  } catch {
+    return null;
+  }
+}
+function callbackParams(input) {
+  if (input instanceof URLSearchParams) return input;
+  if (input instanceof URL) return input.searchParams;
+  const s = input.trim();
+  if (/^https?:\/\//i.test(s)) return new URL(s).searchParams;
+  const i = s.indexOf("?");
+  return new URLSearchParams(i >= 0 ? s.slice(i + 1) : s);
+}
 export {
   ApiError,
   AuthApi,
   AuthenticationError,
   DEFAULT_BASE_URL,
   DeviceLinkError,
+  EID_ACR_ADVANCED,
+  EID_ACR_QUALIFIED,
+  EID_OIDC_ISSUER,
   EidClient,
   EidError,
+  EidOidcClient,
+  EidOidcError,
   ForbiddenError,
   Http,
   NetworkError,
@@ -924,6 +1206,7 @@ export {
   isMobileUserAgent,
   openOrShowQR,
   parseSessionResult,
+  pkceChallenge,
   qrDeviceLinkTicker,
   randomChallenge,
   resolveBaseUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gerege-systems/eid-mongolia-sdk",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "e-ID Mongolia Relying Party SDK — иргэнээр утсаар нь нэвтрэлт ба хууль ёсны цахим гарын үсэг (RP-API v3, Smart-ID нийцтэй).",
   "license": "MIT",
   "type": "module",
@@ -29,7 +29,7 @@
   },
   "scripts": {
     "build": "tsup src/index.ts src/browser.ts --format esm,cjs --dts --clean",
-    "test": "npm run build && node --test --experimental-strip-types test/sdk.test.ts",
+    "test": "npm run build && node --test --experimental-strip-types test/sdk.test.ts test/oidc.test.ts",
     "lint": "tsc --noEmit"
   },
   "keywords": [