@gramota/oid4vp 0.1.0 → 0.2.1

package/README.md

@@ -1,6 +1,6 @@
 # @gramota/oid4vp
 
-> OpenID for Verifiable Presentations transport — authorization request/response wire format for EUDIW.
+> OpenID for Verifiable Presentations Final 1.0 — authorization request/response wire format, RFC 9101 JAR signing, X.509 verifier-identity certs. Accepts both DCQL and DIF Presentation Exchange response shapes.
 
 Part of [Gramota](https://github.com/gramota-org/gramota) — the TypeScript
 SDK for the EU Digital Identity Wallet (EUDIW).
@@ -13,17 +13,57 @@ pnpm add @gramota/oid4vp
 # or: yarn add @gramota/oid4vp
 ```
 
-## Usage
+## Quick example — verifier emits a signed JAR
 
 ```ts
-import { buildAuthorizationRequest, parseAuthorizationResponse } from "@gramota/oid4vp";
+import {
+  generateSigningCert,
+  signAuthorizationRequest,
+  buildAuthorizationRequestUrl,
+} from "@gramota/oid4vp";
 
-const req = buildAuthorizationRequest({ client_id, nonce, ... });
-const res = parseAuthorizationResponse(formData);
+// Self-signed cert with SAN-DNS = the verifier's hostname
+const cert = await generateSigningCert({ sanDns: "verifier.example" });
+
+// Build the OID4VP request, sign as a JAR (RFC 9101) embedded in the URL
+const request = {
+  response_type: "vp_token" as const,
+  client_id: `x509_san_dns:${cert.sanDns}`,
+  response_mode: "direct_post" as const,
+  response_uri: "https://verifier.example/oid4vp/response",
+  nonce: "n-12345",
+  state: "s-67890",
+  dcql_query: {
+    credentials: [
+      { id: "pid", format: "dc+sd-jwt", meta: { vct_values: ["urn:eudi:pid:1"] } },
+    ],
+  },
+};
+const jar = await signAuthorizationRequest({ request, cert });
+const deepLink = `openid4vp://?client_id=${encodeURIComponent(request.client_id)}&request=${encodeURIComponent(jar)}`;
+```
+
+## Quick example — verifier parses the wallet's response
+
+```ts
+import { parseAuthorizationResponseFromParams } from "@gramota/oid4vp";
+
+// req.body is { vp_token, presentation_submission?, state }
+const response = parseAuthorizationResponseFromParams(req.body);
+// vp_token can be a string (PEX, single), string[] (PEX, multi),
+// or { [credentialId]: string } (DCQL, OID4VP Final 1.0)
 ```
 
-For full docs, examples, and the high-level Verifier/Issuer/Holder API,
-see the [main repo](https://github.com/gramota-org/gramota).
+## What's inside
+
+- `buildAuthorizationRequestUrl` / `parseAuthorizationRequestUrl` — wire format (§5)
+- `parseAuthorizationResponseFromParams` / `buildAuthorizationResponseBody` — wire format (§6); accepts both PEX and DCQL response shapes
+- `generateSigningCert` — self-signed X.509 with SAN-DNS for `x509_san_dns` client_id_prefix
+- `signAuthorizationRequest` — RFC 9101 JAR signing with cert in the JWS `x5c` header
+- `signingCertToJwks` — convert the cert+key bundle into a JWK pair for `@gramota/issuer`
+
+For the high-level Verifier API, see the
+[main repo](https://github.com/gramota-org/gramota).
 
 ## License
 

package/dist/cert.d.ts

@@ -0,0 +1,72 @@
+/**
+ * X.509 self-signed cert generation for OID4VP verifiers.
+ *
+ * The EU reference wallet's `X509SanDns` client_id_prefix accepts
+ * Authorization Requests signed by a cert whose Subject Alternative Name
+ * matches the verifier's hostname. For local dev, mock environments, and
+ * pinned-trust deployments we generate a fresh ES256 keypair + a leaf
+ * cert with the right SAN. Production deployments swap this for an
+ * externally issued cert (ACME / corporate CA) — the {@link SigningCert}
+ * shape is the same, only the origin differs.
+ *
+ * The cert+key pair is consumed by:
+ *   1. `signAuthorizationRequest` — signs the JAR JWS, embedding the
+ *      cert in the `x5c` header.
+ *   2. The wallet's TLS / trust-anchor store — it must trust this cert
+ *      out-of-band (in production: via a CA the wallet already trusts;
+ *      for emulators: via patching the wallet's trust list).
+ */
+import "reflect-metadata";
+import type { JsonWebKey } from "@gramota/jose";
+import { type SigningCert } from "./types.js";
+export interface GenerateSigningCertOptions {
+    /** Primary DNS name for the cert's Subject Alternative Name. Must match
+     * the verifier's hostname (the part the wallet sees in the OID4VP
+     * `client_id` after the `x509_san_dns:` prefix). */
+    readonly sanDns: string;
+    /** Additional SAN-DNS entries — used for wildcards (e.g. `*.localtest.me`)
+     * so a single cert covers per-tenant subdomains, or for serving multiple
+     * verifier hostnames behind one identity. */
+    readonly extraSanDns?: readonly string[];
+    /** Cert subject CN — purely cosmetic, shown in cert viewers. Defaults
+     * to `sanDns`. */
+    readonly commonName?: string;
+    /** Org name for the cert subject. Defaults to `"Gramota Verifier"`. */
+    readonly organizationName?: string;
+    /** Validity in days. Default 365. */
+    readonly validDays?: number;
+}
+/**
+ * Generate an ES256 keypair + self-signed X.509 cert with the given
+ * SAN-DNS entries.
+ *
+ * The cert carries the standard verifier-identity extensions: serverAuth
+ * + clientAuth EKUs (so wallets that look for a TLS-style cert accept
+ * it), digitalSignature + keyEncipherment KU flags, and CA:false.
+ *
+ * Returns a {@link SigningCert} ready to feed into
+ * {@link signAuthorizationRequest}.
+ *
+ * @throws {@link Oid4vpError} with `oid4vp.cert_generation_failed` if
+ *   the underlying crypto / X.509 generation fails.
+ */
+export declare function generateSigningCert(input: GenerateSigningCertOptions): Promise<SigningCert>;
+/**
+ * Convert a {@link SigningCert} (PEM bundle) into the JWK pair that
+ * `@gramota/issuer` and other JOSE consumers expect.
+ *
+ * Unlike `generateSigningCert` this is a pure conversion — it doesn't
+ * touch crypto state or generate anything new. It just bridges the two
+ * representations of the same key material:
+ *
+ *   - Input shape: PKCS#8 PEM (private) + X.509 PEM (public-via-cert)
+ *   - Output shape: two RFC 7517 JWKs with `alg: "ES256"` set
+ *
+ * Throws {@link Oid4vpError} with `oid4vp.cert_generation_failed` on a
+ * malformed PEM or an unrecognised key type.
+ */
+export declare function signingCertToJwks(cert: SigningCert): Promise<{
+    publicJwk: JsonWebKey;
+    privateJwk: JsonWebKey;
+}>;
+//# sourceMappingURL=cert.d.ts.map

package/dist/cert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert.d.ts","sourceRoot":"","sources":["../src/cert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,OAAO,kBAAkB,CAAC;AAI1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAc3D,MAAM,WAAW,0BAA0B;IACzC;;wDAEoD;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;iDAE6C;IAC7C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC;sBACkB;IAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,qCAAqC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,WAAW,CAAC,CAyFtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC,CAmC5D"}

package/dist/cert.js

@@ -0,0 +1,191 @@
+/**
+ * X.509 self-signed cert generation for OID4VP verifiers.
+ *
+ * The EU reference wallet's `X509SanDns` client_id_prefix accepts
+ * Authorization Requests signed by a cert whose Subject Alternative Name
+ * matches the verifier's hostname. For local dev, mock environments, and
+ * pinned-trust deployments we generate a fresh ES256 keypair + a leaf
+ * cert with the right SAN. Production deployments swap this for an
+ * externally issued cert (ACME / corporate CA) — the {@link SigningCert}
+ * shape is the same, only the origin differs.
+ *
+ * The cert+key pair is consumed by:
+ *   1. `signAuthorizationRequest` — signs the JAR JWS, embedding the
+ *      cert in the `x5c` header.
+ *   2. The wallet's TLS / trust-anchor store — it must trust this cert
+ *      out-of-band (in production: via a CA the wallet already trusts;
+ *      for emulators: via patching the wallet's trust list).
+ */
+// `@peculiar/x509@2.x` uses tsyringe for dependency injection, which in
+// turn requires the Reflect.metadata polyfill at module load time. We
+// import it here so consumers don't have to. The package.json marks
+// `dist/cert.js` as a side-effecting module so bundlers don't drop it.
+import "reflect-metadata";
+import * as x509 from "@peculiar/x509";
+import { webcrypto } from "node:crypto";
+import { exportJWK, importPKCS8, importX509 } from "jose";
+import { Oid4vpError } from "./types.js";
+// @peculiar/x509 needs a Web Crypto provider — Node's webcrypto suffices.
+// Safe to call multiple times; no-op after first.
+let cryptoProviderSet = false;
+function ensureCryptoProvider() {
+    if (cryptoProviderSet)
+        return;
+    // @peculiar/x509's CryptoProvider type wants a DOM `Crypto`. Node's
+    // webcrypto is API-compatible — the cast is just to satisfy TS.
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    x509.cryptoProvider.set(webcrypto);
+    cryptoProviderSet = true;
+}
+/**
+ * Generate an ES256 keypair + self-signed X.509 cert with the given
+ * SAN-DNS entries.
+ *
+ * The cert carries the standard verifier-identity extensions: serverAuth
+ * + clientAuth EKUs (so wallets that look for a TLS-style cert accept
+ * it), digitalSignature + keyEncipherment KU flags, and CA:false.
+ *
+ * Returns a {@link SigningCert} ready to feed into
+ * {@link signAuthorizationRequest}.
+ *
+ * @throws {@link Oid4vpError} with `oid4vp.cert_generation_failed` if
+ *   the underlying crypto / X.509 generation fails.
+ */
+export async function generateSigningCert(input) {
+    if (typeof input.sanDns !== "string" || input.sanDns.length === 0) {
+        throw new Oid4vpError("oid4vp.cert_generation_failed", "generateSigningCert: sanDns is required");
+    }
+    ensureCryptoProvider();
+    const validDays = input.validDays ?? 365;
+    const notBefore = new Date();
+    const notAfter = new Date(notBefore.getTime() + validDays * 24 * 60 * 60 * 1000);
+    // ES256 — the algorithm the EU wallet uses for KB-JWT and what most
+    // OID4VP implementations default to.
+    const algorithm = { name: "ECDSA", namedCurve: "P-256" };
+    const keys = await webcrypto.subtle.generateKey(algorithm, true, [
+        "sign",
+        "verify",
+    ]);
+    const subjectName = buildSubjectDn({
+        commonName: input.commonName ?? input.sanDns,
+        organizationName: input.organizationName ?? "Gramota Verifier",
+    });
+    let cert;
+    try {
+        cert = await x509.X509CertificateGenerator.createSelfSigned({
+            serialNumber: randomSerial(),
+            name: subjectName,
+            notBefore,
+            notAfter,
+            signingAlgorithm: { name: "ECDSA", hash: "SHA-256" },
+            keys,
+            extensions: [
+                // Subject Alternative Name — what the wallet validates against
+                // `client_id` (OID4VP `x509_san_dns:<host>`) and what TLS clients
+                // match the host header against.
+                new x509.SubjectAlternativeNameExtension([
+                    { type: "dns", value: input.sanDns },
+                    ...(input.extraSanDns ?? []).map((value) => ({
+                        type: "dns",
+                        value,
+                    })),
+                ]),
+                // Standard verifier-identity usage flags.
+                new x509.KeyUsagesExtension(x509.KeyUsageFlags.digitalSignature | x509.KeyUsageFlags.keyEncipherment),
+                new x509.ExtendedKeyUsageExtension([
+                    // serverAuth — wallets that expect a TLS-style cert accept this
+                    "1.3.6.1.5.5.7.3.1",
+                    // clientAuth — used by some wallets to bind the verifier identity
+                    "1.3.6.1.5.5.7.3.2",
+                ]),
+                // Leaf cert, not a CA.
+                new x509.BasicConstraintsExtension(false),
+            ],
+        });
+    }
+    catch (err) {
+        throw new Oid4vpError("oid4vp.cert_generation_failed", `generateSigningCert: X.509 generation failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    // Export private key as PKCS#8 PEM
+    const pkcs8 = await webcrypto.subtle.exportKey("pkcs8", keys.privateKey);
+    const privateKeyPem = derToPem(new Uint8Array(pkcs8), "PRIVATE KEY");
+    // Cert PEM
+    const certificatePem = cert.toString("pem");
+    // x5c header value: array of base64-encoded DER certs (no PEM wrappers).
+    const certDer = new Uint8Array(cert.rawData);
+    const x5c = [bytesToBase64(certDer)];
+    return {
+        privateKeyPem,
+        certificatePem,
+        x5c,
+        sanDns: input.sanDns,
+    };
+}
+/**
+ * Convert a {@link SigningCert} (PEM bundle) into the JWK pair that
+ * `@gramota/issuer` and other JOSE consumers expect.
+ *
+ * Unlike `generateSigningCert` this is a pure conversion — it doesn't
+ * touch crypto state or generate anything new. It just bridges the two
+ * representations of the same key material:
+ *
+ *   - Input shape: PKCS#8 PEM (private) + X.509 PEM (public-via-cert)
+ *   - Output shape: two RFC 7517 JWKs with `alg: "ES256"` set
+ *
+ * Throws {@link Oid4vpError} with `oid4vp.cert_generation_failed` on a
+ * malformed PEM or an unrecognised key type.
+ */
+export async function signingCertToJwks(cert) {
+    if (cert === null ||
+        typeof cert !== "object" ||
+        typeof cert.privateKeyPem !== "string" ||
+        typeof cert.certificatePem !== "string") {
+        throw new Oid4vpError("oid4vp.cert_generation_failed", "signingCertToJwks: cert must include privateKeyPem and certificatePem");
+    }
+    let privateJwk;
+    let publicJwk;
+    try {
+        const priv = await importPKCS8(cert.privateKeyPem, "ES256");
+        const pub = await importX509(cert.certificatePem, "ES256");
+        privateJwk = (await exportJWK(priv));
+        publicJwk = (await exportJWK(pub));
+    }
+    catch (err) {
+        throw new Oid4vpError("oid4vp.cert_generation_failed", `signingCertToJwks: failed to import key material: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    // Annotate with `alg` so downstream consumers (e.g. @gramota/issuer)
+    // can pick a JWS algorithm without re-deriving it.
+    privateJwk.alg = "ES256";
+    publicJwk.alg = "ES256";
+    return { publicJwk, privateJwk };
+}
+// ---------------------------------------------------------------------------
+// helpers
+// ---------------------------------------------------------------------------
+function buildSubjectDn(parts) {
+    return `CN=${escapeDn(parts.commonName)}, O=${escapeDn(parts.organizationName)}`;
+}
+function escapeDn(value) {
+    // Minimal RFC 4514 escaping — commas, equals, plus.
+    return value.replace(/([,=+])/g, "\\$1");
+}
+function randomSerial() {
+    // 20-byte hex string — RFC 5280 §4.1.2.2 says serials must be positive
+    // integers up to 20 octets.
+    const bytes = new Uint8Array(20);
+    webcrypto.getRandomValues(bytes);
+    // Ensure leading byte isn't zero so it's a positive integer.
+    if (bytes[0] === 0)
+        bytes[0] = 1;
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+function derToPem(der, label) {
+    const b64 = bytesToBase64(der);
+    // 64-char wrap per RFC 7468.
+    const wrapped = b64.replace(/(.{64})/g, "$1\n");
+    return `-----BEGIN ${label}-----\n${wrapped}\n-----END ${label}-----\n`;
+}
+function bytesToBase64(bytes) {
+    return Buffer.from(bytes).toString("base64");
+}
+//# sourceMappingURL=cert.js.map

package/dist/cert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert.js","sourceRoot":"","sources":["../src/cert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,wEAAwE;AACxE,sEAAsE;AACtE,oEAAoE;AACpE,uEAAuE;AACvE,OAAO,kBAAkB,CAAC;AAC1B,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAC;AAE3D,0EAA0E;AAC1E,kDAAkD;AAClD,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,SAAS,oBAAoB;IAC3B,IAAI,iBAAiB;QAAE,OAAO;IAC9B,oEAAoE;IACpE,gEAAgE;IAChE,8DAA8D;IAC9D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAgB,CAAC,CAAC;IAC1C,iBAAiB,GAAG,IAAI,CAAC;AAC3B,CAAC;AAoBD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAiC;IAEjC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,oBAAoB,EAAE,CAAC;IAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,IAAI,CACvB,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CACtD,CAAC;IAEF,oEAAoE;IACpE,qCAAqC;IACrC,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE;QAC/D,MAAM;QACN,QAAQ;KACT,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,cAAc,CAAC;QACjC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM;QAC5C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,kBAAkB;KAC/D,CAAC,CAAC;IAEH,IAAI,IAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC;YAC1D,YAAY,EAAE,YAAY,EAAE;YAC5B,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,QAAQ;YACR,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YACpD,IAAI;YACJ,UAAU,EAAE;gBACV,+DAA+D;gBAC/D,kEAAkE;gBAClE,iCAAiC;gBACjC,IAAI,IAAI,CAAC,+BAA+B,CAAC;oBACvC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;oBACpC,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC3C,IAAI,EAAE,KAAc;wBACpB,KAAK;qBACN,CAAC,CAAC;iBACJ,CAAC;gBACF,0CAA0C;gBAC1C,IAAI,IAAI,CAAC,kBAAkB,CACzB,IAAI,CAAC,aAAa,CAAC,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CACzE;gBACD,IAAI,IAAI,CAAC,yBAAyB,CAAC;oBACjC,gEAAgE;oBAChE,mBAAmB;oBACnB,kEAAkE;oBAClE,mBAAmB;iBACpB,CAAC;gBACF,uBAAuB;gBACvB,IAAI,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;aAC1C;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,iDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;IAErE,WAAW;IACX,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5C,yEAAyE;IACzE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAErC,OAAO;QACL,aAAa;QACb,cAAc;QACd,GAAG;QACH,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAiB;IAEjB,IACE,IAAI,KAAK,IAAI;QACb,OAAO,IAAI,KAAK,QAAQ;QACxB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;QACtC,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,EACvC,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC;IACf,IAAI,SAAS,CAAC;IACd,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC3D,UAAU,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAe,CAAC;QACnD,SAAS,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAe,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,qDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,mDAAmD;IACnD,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC;IACzB,SAAS,CAAC,GAAG,GAAG,OAAO,CAAC;IAExB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,cAAc,CAAC,KAGvB;IACC,OAAO,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,oDAAoD;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY;IACnB,uEAAuE;IACvE,4BAA4B;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,6DAA6D;IAC7D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAe,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,6BAA6B;IAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO,cAAc,KAAK,UAAU,OAAO,cAAc,KAAK,SAAS,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 export { buildAuthorizationRequestUrl, parseAuthorizationRequestUrl, parseAuthorizationRequestSearchParams, } from "./request.js";
 export { buildAuthorizationResponseBody, parseAuthorizationResponseBody, parseAuthorizationResponseFromParams, } from "./response.js";
-export { Oid4vpError, type AuthorizationRequest, type AuthorizationResponse, type ClientIdScheme, type Oid4vpErrorCode, type ResponseMode, } from "./types.js";
+export { generateSigningCert, signingCertToJwks, type GenerateSigningCertOptions, } from "./cert.js";
+export { signAuthorizationRequest, type SignAuthorizationRequestOptions, } from "./jar.js";
+export { Oid4vpError, type AuthorizationRequest, type AuthorizationResponse, type ClientIdScheme, type Oid4vpErrorCode, type ResponseMode, type SigningCert, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,qCAAqC,GACtC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,qCAAqC,GACtC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,0BAA0B,GAChC,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,4 +1,6 @@
 export { buildAuthorizationRequestUrl, parseAuthorizationRequestUrl, parseAuthorizationRequestSearchParams, } from "./request.js";
 export { buildAuthorizationResponseBody, parseAuthorizationResponseBody, parseAuthorizationResponseFromParams, } from "./response.js";
+export { generateSigningCert, signingCertToJwks, } from "./cert.js";
+export { signAuthorizationRequest, } from "./jar.js";
 export { Oid4vpError, } from "./types.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,qCAAqC,GACtC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,GAMZ,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,qCAAqC,GACtC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAElB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,wBAAwB,GAEzB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,WAAW,GAOZ,MAAM,YAAY,CAAC"}

package/dist/jar.d.ts

@@ -0,0 +1,50 @@
+/**
+ * RFC 9101 JAR (JWT-Secured Authorization Request) signing for OID4VP.
+ *
+ *   verifier ─── builds AuthorizationRequest object ──►
+ *           ─── wraps as compact-serialised JWS    ──►
+ *           ─── sets x5c header = [leaf cert DER]  ──►
+ *                                                     wallet
+ *
+ * The wallet:
+ *   1. Fetches the JAR (inline `request=<jwt>` or via `request_uri=<url>`)
+ *   2. Sees `application/oauth-authz-req+jwt`, parses as a JWS
+ *   3. Reads the `x5c` header → leaf cert
+ *   4. Validates: cert chain trusted? SAN matches `client_id` value?
+ *   5. Verifies the JWS signature with the leaf cert's public key
+ *   6. Decodes the payload as the AuthorizationRequest, processes it
+ *
+ * For the EUDIW HAIP profile + the EU reference wallet's demo build,
+ * `x509_san_dns` (with this signed JAR shape) is the only `client_id_prefix`
+ * the wallet accepts. Production verifiers MUST sign their requests.
+ */
+import { type AuthorizationRequest, type SigningCert } from "./types.js";
+export interface SignAuthorizationRequestOptions {
+    /** The verifier's Authorization Request to sign. Must already include
+     * the verifier-side fields (`client_id`, `nonce`, `response_uri`, etc).
+     * The signer doesn't validate semantic content — only wire-encodes. */
+    readonly request: AuthorizationRequest;
+    /** The verifier's signing material — produced by `generateSigningCert`
+     * or supplied externally. */
+    readonly cert: SigningCert;
+}
+/**
+ * Sign an OID4VP Authorization Request as a compact-serialised JWS,
+ * formatted per RFC 9101 + OID4VP §5.10.
+ *
+ * The JWS header carries:
+ *   - `alg: "ES256"` (the only algorithm the EU wallet currently accepts
+ *     for x509_san_dns prefix; future iterations can lift this)
+ *   - `typ: "oauth-authz-req+jwt"` per RFC 9101
+ *   - `x5c: [<base64-DER leaf cert>]` so the wallet doesn't need a
+ *     separate key-discovery step
+ *
+ * The JWS payload IS the request object — claims at the top level, not
+ * wrapped in some envelope (RFC 9101 §10.2). Caller serves the result
+ * with content type `application/oauth-authz-req+jwt`.
+ *
+ * @throws {@link Oid4vpError} with `oid4vp.jar_signing_failed` if the
+ *   private key is malformed or signing fails.
+ */
+export declare function signAuthorizationRequest(options: SignAuthorizationRequestOptions): Promise<string>;
+//# sourceMappingURL=jar.d.ts.map

package/dist/jar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jar.d.ts","sourceRoot":"","sources":["../src/jar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,+BAA+B;IAC9C;;2EAEuE;IACvE,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC;iCAC6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,MAAM,CAAC,CAqDjB"}

package/dist/jar.js

@@ -0,0 +1,77 @@
+/**
+ * RFC 9101 JAR (JWT-Secured Authorization Request) signing for OID4VP.
+ *
+ *   verifier ─── builds AuthorizationRequest object ──►
+ *           ─── wraps as compact-serialised JWS    ──►
+ *           ─── sets x5c header = [leaf cert DER]  ──►
+ *                                                     wallet
+ *
+ * The wallet:
+ *   1. Fetches the JAR (inline `request=<jwt>` or via `request_uri=<url>`)
+ *   2. Sees `application/oauth-authz-req+jwt`, parses as a JWS
+ *   3. Reads the `x5c` header → leaf cert
+ *   4. Validates: cert chain trusted? SAN matches `client_id` value?
+ *   5. Verifies the JWS signature with the leaf cert's public key
+ *   6. Decodes the payload as the AuthorizationRequest, processes it
+ *
+ * For the EUDIW HAIP profile + the EU reference wallet's demo build,
+ * `x509_san_dns` (with this signed JAR shape) is the only `client_id_prefix`
+ * the wallet accepts. Production verifiers MUST sign their requests.
+ */
+import { SignJWT, importPKCS8 } from "jose";
+import { Oid4vpError, } from "./types.js";
+/**
+ * Sign an OID4VP Authorization Request as a compact-serialised JWS,
+ * formatted per RFC 9101 + OID4VP §5.10.
+ *
+ * The JWS header carries:
+ *   - `alg: "ES256"` (the only algorithm the EU wallet currently accepts
+ *     for x509_san_dns prefix; future iterations can lift this)
+ *   - `typ: "oauth-authz-req+jwt"` per RFC 9101
+ *   - `x5c: [<base64-DER leaf cert>]` so the wallet doesn't need a
+ *     separate key-discovery step
+ *
+ * The JWS payload IS the request object — claims at the top level, not
+ * wrapped in some envelope (RFC 9101 §10.2). Caller serves the result
+ * with content type `application/oauth-authz-req+jwt`.
+ *
+ * @throws {@link Oid4vpError} with `oid4vp.jar_signing_failed` if the
+ *   private key is malformed or signing fails.
+ */
+export async function signAuthorizationRequest(options) {
+    if (options.cert === null ||
+        typeof options.cert !== "object" ||
+        typeof options.cert.privateKeyPem !== "string") {
+        throw new Oid4vpError("oid4vp.jar_signing_failed", "signAuthorizationRequest: cert.privateKeyPem is required");
+    }
+    if (!Array.isArray(options.cert.x5c) || options.cert.x5c.length === 0) {
+        throw new Oid4vpError("oid4vp.jar_signing_failed", "signAuthorizationRequest: cert.x5c must be a non-empty array");
+    }
+    let privateKey;
+    try {
+        privateKey = await importPKCS8(options.cert.privateKeyPem, "ES256");
+    }
+    catch (err) {
+        throw new Oid4vpError("oid4vp.jar_signing_failed", `signAuthorizationRequest: failed to import private key: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    try {
+        // Spread into a fresh mutable object — `jose.SignJWT` wants
+        // `JWTPayload` (mutable, index-signature) while `AuthorizationRequest`
+        // is strict-readonly. The spread copies own enumerable props and
+        // produces a value of structurally-compatible type without an
+        // `as unknown as` double-cast.
+        const payload = { ...options.request };
+        const jwt = await new SignJWT(payload)
+            .setProtectedHeader({
+            alg: "ES256",
+            typ: "oauth-authz-req+jwt",
+            x5c: [...options.cert.x5c],
+        })
+            .sign(privateKey);
+        return jwt;
+    }
+    catch (err) {
+        throw new Oid4vpError("oid4vp.jar_signing_failed", `signAuthorizationRequest: JWS signing failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=jar.js.map

package/dist/jar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jar.js","sourceRoot":"","sources":["../src/jar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAC5C,OAAO,EACL,WAAW,GAGZ,MAAM,YAAY,CAAC;AAYpB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAwC;IAExC,IACE,OAAO,CAAC,IAAI,KAAK,IAAI;QACrB,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,OAAO,OAAO,CAAC,IAAI,CAAC,aAAa,KAAK,QAAQ,EAC9C,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC;IACf,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,2DACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,4DAA4D;QAC5D,uEAAuE;QACvE,iEAAiE;QACjE,8DAA8D;QAC9D,+BAA+B;QAC/B,MAAM,OAAO,GAA4B,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;aACnC,kBAAkB,CAAC;YAClB,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,qBAAqB;YAC1B,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;SAC3B,CAAC;aACD,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,iDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/request.d.ts

@@ -3,16 +3,58 @@ import { type AuthorizationRequest } from "./types.js";
  * Serialise an Authorization Request to a URL with query parameters per
  * OID4VP §5.1 (parameter encoding rules).
  *
- * The base URL is typically `https://wallet.example.com/authorize` for web
- * flows or a custom scheme like `openid4vp://`. Both work — we just append
- * the query string.
+ * The base URL is typically a custom scheme like `openid4vp://` for the
+ * native wallet handoff, or `https://wallet.example.com/authorize` for
+ * web flows — both work, the function just appends the query string.
+ *
+ * Object-valued parameters (`presentation_definition`, `dcql_query`,
+ * `client_metadata`) are JSON-encoded into the query string per §5.1.
+ *
+ * For HAIP / EUDIW-compliant verifiers, this output is typically wrapped
+ * in a signed JAR (RFC 9101) via {@link signAuthorizationRequest} and
+ * delivered as `request=<jwt>` rather than as raw query params.
+ *
+ * @example
+ * ```ts
+ * const url = buildAuthorizationRequestUrl("openid4vp://", {
+ *   response_type: "vp_token",
+ *   client_id: "x509_san_dns:verifier.example",
+ *   nonce: "n-12345",
+ *   response_mode: "direct_post",
+ *   response_uri: "https://verifier.example/oid4vp/response",
+ *   dcql_query: { credentials: [{ id: "pid", format: "dc+sd-jwt", meta: {...} }] },
+ * });
+ * ```
+ *
+ * @throws {@link Oid4vpError} `oid4vp.required_field_missing`,
+ *   `oid4vp.unsupported_response_type`, `oid4vp.mutually_exclusive_fields`,
+ *   `oid4vp.response_uri_required`, or `oid4vp.invalid_value_type`.
  */
 export declare function buildAuthorizationRequestUrl(baseUrl: string, request: AuthorizationRequest): string;
-/** Parse an OID4VP Authorization Request from a URL string. */
+/**
+ * Parse an OID4VP Authorization Request from a URL string.
+ *
+ * Inverse of {@link buildAuthorizationRequestUrl}. Validates required
+ * fields and mutually-exclusive flag combinations; does NOT verify a
+ * signed JAR (use the wallet's JWS verification step for that, then
+ * call this function on the JAR's payload claims).
+ *
+ * @throws {@link Oid4vpError} with `oid4vp.invalid_url`,
+ *   `oid4vp.required_field_missing`, or other field-validation codes.
+ */
 export declare function parseAuthorizationRequestUrl(rawUrl: string): AuthorizationRequest;
 /**
- * Parse from a `URLSearchParams` (or anything that quacks like one) — useful
- * when the verifier already has a parsed `req.query` from Express, Hono, etc.
+ * Parse an OID4VP Authorization Request from URL query parameters.
+ *
+ * Useful when the verifier already has parsed query params from a web
+ * framework (`req.query` from Express, Hono, Fastify, ...). Accepts
+ * either a `URLSearchParams` instance or a plain `Record<string, string>`.
+ *
+ * Object-valued params (`presentation_definition`, `dcql_query`,
+ * `client_metadata`) are JSON-decoded; everything else is left as-is.
+ *
+ * @throws {@link Oid4vpError} with `oid4vp.invalid_json` if a JSON-valued
+ *   param is malformed, plus the standard field-validation codes.
  */
 export declare function parseAuthorizationRequestSearchParams(params: URLSearchParams | Record<string, string>): AuthorizationRequest;
 //# sourceMappingURL=request.d.ts.map

package/dist/request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../src/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAYpE;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,oBAAoB,GAC5B,MAAM,CAkBR;AAED,+DAA+D;AAC/D,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,GACb,oBAAoB,CAWtB;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/C,oBAAoB,CA0CtB"}
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../src/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAYpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,oBAAoB,GAC5B,MAAM,CAkBR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,GACb,oBAAoB,CAWtB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/C,oBAAoB,CA0CtB"}

package/dist/request.js

@@ -11,9 +11,32 @@ const JSON_FIELDS = new Set([
  * Serialise an Authorization Request to a URL with query parameters per
  * OID4VP §5.1 (parameter encoding rules).
  *
- * The base URL is typically `https://wallet.example.com/authorize` for web
- * flows or a custom scheme like `openid4vp://`. Both work — we just append
- * the query string.
+ * The base URL is typically a custom scheme like `openid4vp://` for the
+ * native wallet handoff, or `https://wallet.example.com/authorize` for
+ * web flows — both work, the function just appends the query string.
+ *
+ * Object-valued parameters (`presentation_definition`, `dcql_query`,
+ * `client_metadata`) are JSON-encoded into the query string per §5.1.
+ *
+ * For HAIP / EUDIW-compliant verifiers, this output is typically wrapped
+ * in a signed JAR (RFC 9101) via {@link signAuthorizationRequest} and
+ * delivered as `request=<jwt>` rather than as raw query params.
+ *
+ * @example
+ * ```ts
+ * const url = buildAuthorizationRequestUrl("openid4vp://", {
+ *   response_type: "vp_token",
+ *   client_id: "x509_san_dns:verifier.example",
+ *   nonce: "n-12345",
+ *   response_mode: "direct_post",
+ *   response_uri: "https://verifier.example/oid4vp/response",
+ *   dcql_query: { credentials: [{ id: "pid", format: "dc+sd-jwt", meta: {...} }] },
+ * });
+ * ```
+ *
+ * @throws {@link Oid4vpError} `oid4vp.required_field_missing`,
+ *   `oid4vp.unsupported_response_type`, `oid4vp.mutually_exclusive_fields`,
+ *   `oid4vp.response_uri_required`, or `oid4vp.invalid_value_type`.
  */
 export function buildAuthorizationRequestUrl(baseUrl, request) {
     validateRequest(request);
@@ -33,7 +56,17 @@ export function buildAuthorizationRequestUrl(baseUrl, request) {
     }
     return url.toString();
 }
-/** Parse an OID4VP Authorization Request from a URL string. */
+/**
+ * Parse an OID4VP Authorization Request from a URL string.
+ *
+ * Inverse of {@link buildAuthorizationRequestUrl}. Validates required
+ * fields and mutually-exclusive flag combinations; does NOT verify a
+ * signed JAR (use the wallet's JWS verification step for that, then
+ * call this function on the JAR's payload claims).
+ *
+ * @throws {@link Oid4vpError} with `oid4vp.invalid_url`,
+ *   `oid4vp.required_field_missing`, or other field-validation codes.
+ */
 export function parseAuthorizationRequestUrl(rawUrl) {
     let url;
     try {
@@ -45,8 +78,17 @@ export function parseAuthorizationRequestUrl(rawUrl) {
     return parseAuthorizationRequestSearchParams(url.searchParams);
 }
 /**
- * Parse from a `URLSearchParams` (or anything that quacks like one) — useful
- * when the verifier already has a parsed `req.query` from Express, Hono, etc.
+ * Parse an OID4VP Authorization Request from URL query parameters.
+ *
+ * Useful when the verifier already has parsed query params from a web
+ * framework (`req.query` from Express, Hono, Fastify, ...). Accepts
+ * either a `URLSearchParams` instance or a plain `Record<string, string>`.
+ *
+ * Object-valued params (`presentation_definition`, `dcql_query`,
+ * `client_metadata`) are JSON-decoded; everything else is left as-is.
+ *
+ * @throws {@link Oid4vpError} with `oid4vp.invalid_json` if a JSON-valued
+ *   param is malformed, plus the standard field-validation codes.
  */
 export function parseAuthorizationRequestSearchParams(params) {
     const get = (k) => params instanceof URLSearchParams ? params.get(k) ?? undefined : params[k];

package/dist/request.js.map

@@ -1 +1 @@
-{"version":3,"file":"request.js","sourceRoot":"","sources":["../src/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA6B,MAAM,YAAY,CAAC;AAEpE,qCAAqC;AACrC,MAAM,eAAe,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,OAAO,CAAU,CAAC;AAEzE,sEAAsE;AACtE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS;IAClC,yBAAyB;IACzB,YAAY;IACZ,iBAAiB;CAClB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAe,EACf,OAA6B;IAE7B,eAAe,CAAC,OAAO,CAAC,CAAC;IAEzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,+BAA+B,GAAG,MAAM,OAAO,KAAK,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,4BAA4B,CAC1C,MAAc;IAEd,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,qCAAqC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qCAAqC,CACnD,MAAgD;IAEhD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAsB,EAAE,CAC5C,MAAM,YAAY,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE7E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG;QACZ,eAAe;QACf,WAAW;QACX,kBAAkB;QAClB,eAAe;QACf,cAAc;QACd,cAAc;QACd,OAAO;QACP,OAAO;QACP,yBAAyB;QACzB,6BAA6B;QAC7B,YAAY;QACZ,iBAAiB;QACjB,OAAO;KACR,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,+BAA+B,GAAG,MAChC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IAED,eAAe,CAAC,GAAoC,CAAC,CAAC;IACtD,OAAO,GAAsC,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,GAAkC;IACzD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,wDAAwD,KAAK,EAAE,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,WAAW,CACnB,kCAAkC,EAClC,gEAAgE,GAAG,CAAC,aAAa,GAAG,CACrF,CAAC;IACJ,CAAC;IACD,IACE,GAAG,CAAC,uBAAuB,KAAK,SAAS;QACzC,GAAG,CAAC,2BAA2B,KAAK,SAAS,EAC7C,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,kCAAkC,EAClC,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IACD,IACE,GAAG,CAAC,uBAAuB,KAAK,SAAS;QACzC,GAAG,CAAC,UAAU,KAAK,SAAS,EAC5B,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,kCAAkC,EAClC,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,aAAa,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1E,MAAM,IAAI,WAAW,CACnB,8BAA8B,EAC9B,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../src/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA6B,MAAM,YAAY,CAAC;AAEpE,qCAAqC;AACrC,MAAM,eAAe,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,OAAO,CAAU,CAAC;AAEzE,sEAAsE;AACtE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS;IAClC,yBAAyB;IACzB,YAAY;IACZ,iBAAiB;CAClB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAe,EACf,OAA6B;IAE7B,eAAe,CAAC,OAAO,CAAC,CAAC;IAEzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,+BAA+B,GAAG,MAAM,OAAO,KAAK,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAc;IAEd,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,qCAAqC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qCAAqC,CACnD,MAAgD;IAEhD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAsB,EAAE,CAC5C,MAAM,YAAY,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE7E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG;QACZ,eAAe;QACf,WAAW;QACX,kBAAkB;QAClB,eAAe;QACf,cAAc;QACd,cAAc;QACd,OAAO;QACP,OAAO;QACP,yBAAyB;QACzB,6BAA6B;QAC7B,YAAY;QACZ,iBAAiB;QACjB,OAAO;KACR,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,+BAA+B,GAAG,MAChC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IAED,eAAe,CAAC,GAAoC,CAAC,CAAC;IACtD,OAAO,GAAsC,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,GAAkC;IACzD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,wDAAwD,KAAK,EAAE,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,WAAW,CACnB,kCAAkC,EAClC,gEAAgE,GAAG,CAAC,aAAa,GAAG,CACrF,CAAC;IACJ,CAAC;IACD,IACE,GAAG,CAAC,uBAAuB,KAAK,SAAS;QACzC,GAAG,CAAC,2BAA2B,KAAK,SAAS,EAC7C,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,kCAAkC,EAClC,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IACD,IACE,GAAG,CAAC,uBAAuB,KAAK,SAAS;QACzC,GAAG,CAAC,UAAU,KAAK,SAAS,EAC5B,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,kCAAkC,EAClC,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,aAAa,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1E,MAAM,IAAI,WAAW,CACnB,8BAA8B,EAC9B,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/response.d.ts

@@ -3,9 +3,11 @@ import { type AuthorizationResponse } from "./types.js";
  * Serialise an Authorization Response to a URL-encoded form body, suitable
  * for `direct_post` (POST application/x-www-form-urlencoded). Per OID4VP §6:
  *
- *  - `vp_token` is the raw presentation string, or a JSON-encoded array if
- *    multiple credentials are presented.
- *  - `presentation_submission` is JSON-encoded.
+ *  - `vp_token` is the raw presentation string, a JSON-encoded array if
+ *    multiple credentials are presented (PEX), or a JSON-encoded object
+ *    keyed by DCQL credential id (DCQL response form).
+ *  - `presentation_submission` is JSON-encoded — only included for PEX
+ *    responses; DCQL responses omit it.
  *  - `state` (optional) and `iss` (optional) pass through as strings.
  */
 export declare function buildAuthorizationResponseBody(response: AuthorizationResponse): string;

package/dist/response.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAKrE;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,MAAM,CAuBR;AAED,2EAA2E;AAC3E,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,GACd,qBAAqB,CAavB;AAED;+BAC+B;AAC/B,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/C,qBAAqB,CAqEvB"}
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAErE;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,MAAM,CA+BR;AAED,2EAA2E;AAC3E,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,GACd,qBAAqB,CAavB;AAED;+BAC+B;AAC/B,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/C,qBAAqB,CAsGvB"}

package/dist/response.js

@@ -1,13 +1,13 @@
 import { Oid4vpError } from "./types.js";
-/** Required fields per OID4VP §6.1. */
-const REQUIRED_FIELDS = ["vp_token", "presentation_submission"];
 /**
  * Serialise an Authorization Response to a URL-encoded form body, suitable
  * for `direct_post` (POST application/x-www-form-urlencoded). Per OID4VP §6:
  *
- *  - `vp_token` is the raw presentation string, or a JSON-encoded array if
- *    multiple credentials are presented.
- *  - `presentation_submission` is JSON-encoded.
+ *  - `vp_token` is the raw presentation string, a JSON-encoded array if
+ *    multiple credentials are presented (PEX), or a JSON-encoded object
+ *    keyed by DCQL credential id (DCQL response form).
+ *  - `presentation_submission` is JSON-encoded — only included for PEX
+ *    responses; DCQL responses omit it.
  *  - `state` (optional) and `iss` (optional) pass through as strings.
  */
 export function buildAuthorizationResponseBody(response) {
@@ -19,10 +19,17 @@ export function buildAuthorizationResponseBody(response) {
     else if (typeof response.vp_token === "string") {
         body.set("vp_token", response.vp_token);
     }
+    else if (response.vp_token !== null &&
+        typeof response.vp_token === "object") {
+        // DCQL response — JSON object keyed by credential id.
+        body.set("vp_token", JSON.stringify(response.vp_token));
+    }
     else {
-        throw new Oid4vpError("oid4vp.invalid_value_type", "vp_token must be a string or an array of strings");
+        throw new Oid4vpError("oid4vp.invalid_value_type", "vp_token must be a string, array of strings, or DCQL credential map");
+    }
+    if (response.presentation_submission !== undefined) {
+        body.set("presentation_submission", JSON.stringify(response.presentation_submission));
     }
-    body.set("presentation_submission", JSON.stringify(response.presentation_submission));
     if (response.state !== undefined)
         body.set("state", response.state);
     if (response.iss !== undefined)
@@ -49,39 +56,74 @@ export function parseAuthorizationResponseFromParams(params) {
     if (vpRaw === undefined) {
         throw new Oid4vpError("oid4vp.required_field_missing", "Authorization Response is missing required parameter: vp_token");
     }
-    if (submissionRaw === undefined) {
-        throw new Oid4vpError("oid4vp.required_field_missing", "Authorization Response is missing required parameter: presentation_submission");
-    }
-    let submission;
-    try {
-        submission = JSON.parse(submissionRaw);
-    }
-    catch (err) {
-        throw new Oid4vpError("oid4vp.invalid_json", `presentation_submission is not valid JSON: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    if (submission === null ||
-        typeof submission !== "object" ||
-        Array.isArray(submission)) {
-        throw new Oid4vpError("oid4vp.malformed_submission", "presentation_submission must be a JSON object (DIF Presentation Exchange v2)");
-    }
-    // vp_token may be a string OR a JSON-encoded array of strings.
+    // vp_token may be:
+    //   - a single SD-JWT-VC string (PEX, single credential)
+    //   - a JSON-encoded string[] (PEX, multiple credentials)
+    //   - a JSON-encoded object keyed by DCQL credential id (DCQL response,
+    //     OID4VP Final 1.0 — what production EU wallets send)
     let vp_token = vpRaw;
-    if (vpRaw.trim().startsWith("[")) {
+    const trimmed = vpRaw.trim();
+    if (trimmed.startsWith("[") || trimmed.startsWith("{")) {
         try {
             const parsed = JSON.parse(vpRaw);
-            if (Array.isArray(parsed) &&
-                parsed.every((p) => typeof p === "string")) {
+            if (Array.isArray(parsed) && parsed.every((p) => typeof p === "string")) {
                 vp_token = parsed;
             }
+            else if (parsed !== null &&
+                typeof parsed === "object" &&
+                !Array.isArray(parsed)) {
+                // DCQL response form — keys are credential ids, values are
+                // (single-credential) strings or arrays.
+                const obj = parsed;
+                const flat = {};
+                for (const [id, val] of Object.entries(obj)) {
+                    if (typeof val === "string") {
+                        flat[id] = val;
+                    }
+                    else if (Array.isArray(val) &&
+                        val.length === 1 &&
+                        typeof val[0] === "string") {
+                        // Some wallets wrap each credential in a single-element array
+                        // (anticipating multi-instance presentations). Flatten for our
+                        // SD-JWT-VC verifier which expects a single string per id.
+                        flat[id] = val[0];
+                    }
+                    else {
+                        throw new Oid4vpError("oid4vp.invalid_value_type", `vp_token[${id}] must be a string or single-element array of strings`);
+                    }
+                }
+                vp_token = flat;
+            }
         }
-        catch {
-            // Not a JSON array — treat as a literal string.
+        catch (err) {
+            if (err instanceof Oid4vpError)
+                throw err;
+            // Not a JSON array/object — treat as a literal string.
         }
     }
-    const result = {
-        vp_token,
-        presentation_submission: submission,
-    };
+    // presentation_submission is required for PEX responses (string or
+    // string[] vp_token), optional for DCQL responses (object vp_token).
+    const isDcqlResponse = typeof vp_token === "object" && !Array.isArray(vp_token);
+    let submission;
+    if (submissionRaw !== undefined) {
+        let parsed;
+        try {
+            parsed = JSON.parse(submissionRaw);
+        }
+        catch (err) {
+            throw new Oid4vpError("oid4vp.invalid_json", `presentation_submission is not valid JSON: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new Oid4vpError("oid4vp.malformed_submission", "presentation_submission must be a JSON object (DIF Presentation Exchange v2)");
+        }
+        submission = parsed;
+    }
+    else if (!isDcqlResponse) {
+        throw new Oid4vpError("oid4vp.required_field_missing", "Authorization Response is missing required parameter: presentation_submission");
+    }
+    const result = { vp_token };
+    if (submission !== undefined)
+        result.presentation_submission = submission;
     const state = get("state");
     if (state !== undefined)
         result.state = state;
@@ -92,15 +134,23 @@ export function parseAuthorizationResponseFromParams(params) {
     return result;
 }
 function validateResponse(resp) {
-    for (const field of REQUIRED_FIELDS) {
-        if (resp[field] === undefined) {
-            throw new Oid4vpError("oid4vp.required_field_missing", `Authorization Response is missing required parameter: ${field}`);
-        }
+    if (resp.vp_token === undefined) {
+        throw new Oid4vpError("oid4vp.required_field_missing", "Authorization Response is missing required parameter: vp_token");
+    }
+    const isString = typeof resp.vp_token === "string";
+    const isStringArray = Array.isArray(resp.vp_token) &&
+        resp.vp_token.every((v) => typeof v === "string");
+    const isDcqlMap = !Array.isArray(resp.vp_token) &&
+        resp.vp_token !== null &&
+        typeof resp.vp_token === "object" &&
+        Object.values(resp.vp_token).every((v) => typeof v === "string");
+    if (!isString && !isStringArray && !isDcqlMap) {
+        throw new Oid4vpError("oid4vp.invalid_value_type", "vp_token must be a string, array of strings, or DCQL credential map");
     }
-    if (typeof resp.vp_token !== "string" &&
-        !(Array.isArray(resp.vp_token) &&
-            resp.vp_token.every((v) => typeof v === "string"))) {
-        throw new Oid4vpError("oid4vp.invalid_value_type", "vp_token must be a string or an array of strings");
+    // PEX path requires presentation_submission; DCQL path doesn't.
+    if ((isString || isStringArray) &&
+        resp.presentation_submission === undefined) {
+        throw new Oid4vpError("oid4vp.required_field_missing", "Authorization Response is missing required parameter: presentation_submission");
     }
 }
 //# sourceMappingURL=response.js.map

package/dist/response.js.map

@@ -1 +1 @@
-{"version":3,"file":"response.js","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,YAAY,CAAC;AAErE,uCAAuC;AACvC,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,yBAAyB,CAAU,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAA+B;IAE/B,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE3B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IAEnC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;SAAM,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CACN,yBAAyB,EACzB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CACjD,CAAC;IACF,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE9D,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,8BAA8B,CAC5C,OAAe;IAEf,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,mEACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO,oCAAoC,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;+BAC+B;AAC/B,MAAM,UAAU,oCAAoC,CAClD,MAAgD;IAEhD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAsB,EAAE,CAC5C,MAAM,YAAY,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE7E,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAErD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,8CACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IACE,UAAU,KAAK,IAAI;QACnB,OAAO,UAAU,KAAK,QAAQ;QAC9B,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,6BAA6B,EAC7B,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,IAAI,QAAQ,GAAsB,KAAK,CAAC;IACxC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,IACE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAC1C,CAAC;gBACD,QAAQ,GAAG,MAAM,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAA0B;QACpC,QAAQ;QACR,uBAAuB,EAAE,UAAqC;KAC/D,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IAExC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAoC;IAC5D,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,yDAAyD,KAAK,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;QACjC,CAAC,CACC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAClD,EACD,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,kDAAkD,CACnD,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,YAAY,CAAC;AAErE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAA+B;IAE/B,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE3B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IAEnC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;SAAM,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;SAAM,IACL,QAAQ,CAAC,QAAQ,KAAK,IAAI;QAC1B,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EACrC,CAAC;QACD,sDAAsD;QACtD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG,CACN,yBAAyB,EACzB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE9D,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,8BAA8B,CAC5C,OAAe;IAEf,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,mEACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO,oCAAoC,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;+BAC+B;AAC/B,MAAM,UAAU,oCAAoC,CAClD,MAAgD;IAEhD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAsB,EAAE,CAC5C,MAAM,YAAY,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE7E,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAErD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,yDAAyD;IACzD,0DAA0D;IAC1D,wEAAwE;IACxE,0DAA0D;IAC1D,IAAI,QAAQ,GAAsC,KAAK,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACxE,QAAQ,GAAG,MAAM,CAAC;YACpB,CAAC;iBAAM,IACL,MAAM,KAAK,IAAI;gBACf,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACtB,CAAC;gBACD,2DAA2D;gBAC3D,yCAAyC;gBACzC,MAAM,GAAG,GAAG,MAAiC,CAAC;gBAC9C,MAAM,IAAI,GAA2B,EAAE,CAAC;gBACxC,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;wBAC5B,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;oBACjB,CAAC;yBAAM,IACL,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;wBAClB,GAAG,CAAC,MAAM,KAAK,CAAC;wBAChB,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAC1B,CAAC;wBACD,8DAA8D;wBAC9D,+DAA+D;wBAC/D,2DAA2D;wBAC3D,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,YAAY,EAAE,uDAAuD,CACtE,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW;gBAAE,MAAM,GAAG,CAAC;YAC1C,uDAAuD;QACzD,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,MAAM,cAAc,GAClB,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,UAA+C,CAAC;IACpD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,8CACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,WAAW,CACnB,6BAA6B,EAC7B,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,MAAiC,CAAC;IACjD,CAAC;SAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA0B,EAAE,QAAQ,EAAE,CAAC;IACnD,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,uBAAuB,GAAG,UAAU,CAAC;IAC1E,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IAExC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAoC;IAC5D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACnD,MAAM,aAAa,GACjB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACpD,MAAM,SAAS,GACb,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,QAAQ,KAAK,IAAI;QACtB,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAmC,CAAC,CAAC,KAAK,CAC3D,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC7B,CAAC;IACJ,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,gEAAgE;IAChE,IACE,CAAC,QAAQ,IAAI,aAAa,CAAC;QAC3B,IAAI,CAAC,uBAAuB,KAAK,SAAS,EAC1C,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,+BAA+B,EAC/B,+EAA+E,CAChF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -1,3 +1,4 @@
+import { GramotaError } from "@gramota/core";
 /**
  * OID4VP Final 1.0 wire-format types.
  * Spec: https://openid.net/specs/openid-4-verifiable-presentations-1_0.html
@@ -47,21 +48,68 @@ export interface AuthorizationRequest {
      * is willing to accept. */
     scope?: string;
 }
-/** OID4VP §6 — Authorization Response from wallet to verifier. */
+/** OID4VP §6 — Authorization Response from wallet to verifier.
+ *
+ * The wire shape depends on which query language the request used:
+ *
+ *   - **Presentation Exchange (DIF PEX)**: `vp_token` is a string or
+ *     string[], paired with `presentation_submission` mapping descriptors
+ *     to vp_token positions.
+ *   - **DCQL** (OID4VP Final 1.0): `vp_token` is a JSON OBJECT keyed by
+ *     the DCQL credential `id` (e.g. `{"pid": "<sd-jwt-vc>"}`). No
+ *     `presentation_submission` is sent — the keys ARE the mapping.
+ *
+ * Verifiers should accept whichever shape the wallet sends; production EU
+ * wallets (eudi-lib-android-wallet-ui 0.26+) use DCQL exclusively.
+ */
 export interface AuthorizationResponse {
-    /** The presentation(s) — a single SD-JWT-VC or an array for multi-credential. */
-    vp_token: string | readonly string[];
-    /** DIF Presentation Submission mapping descriptors → vp_token positions. */
-    presentation_submission: Readonly<Record<string, unknown>>;
+    /** The presentation(s).
+     *
+     *   - String / string[] form (PEX response).
+     *   - Object form (DCQL response) — keys are the DCQL credential ids
+     *     and values are the credential strings.
+     */
+    vp_token: string | readonly string[] | Readonly<Record<string, string>>;
+    /** DIF Presentation Submission mapping descriptors → vp_token positions.
+     * Required for PEX responses; absent for DCQL responses. */
+    presentation_submission?: Readonly<Record<string, unknown>>;
     /** Echoes the verifier's `state` from the request. */
     state?: string;
     /** OID4VP §6.4 — the wallet's identifier (e.g. issuer URL). */
     iss?: string;
 }
+/**
+ * X.509 signing material for an OID4VP verifier.
+ *
+ * Bundles together the four artefacts a verifier needs to produce signed
+ * Authorization Requests (RFC 9101 JAR) and prove its identity to wallets
+ * via the `x509_san_dns` client_id_prefix:
+ *
+ *   - `privateKeyPem` — PKCS#8 private key, used to sign the JAR
+ *   - `certificatePem` — leaf cert, served when the wallet asks for proof
+ *   - `x5c` — base64 DER cert(s) embedded in the JWS `x5c` header
+ *   - `sanDns` — the SAN-DNS hostname the wallet matches against `client_id`
+ *
+ * Generation: see `generateSigningCert` for self-signed certs (local dev,
+ * pinned-trust-store deployments). Production typically uses an externally
+ * issued cert (ACME, corporate CA) — same shape, different origin.
+ */
+export interface SigningCert {
+    /** PEM-encoded PKCS#8 private key. */
+    readonly privateKeyPem: string;
+    /** PEM-encoded leaf certificate. */
+    readonly certificatePem: string;
+    /** Base64-encoded DER certs in chain order, suitable for the JWS `x5c`
+     * header per RFC 7515 §4.1.6. Length 1 for self-signed leaves. */
+    readonly x5c: readonly string[];
+    /** DNS name in the cert's Subject Alternative Name. The wallet
+     * compares this against the OID4VP `client_id` value (with the
+     * `x509_san_dns:` prefix stripped). */
+    readonly sanDns: string;
+}
 /** Stable codes for `Oid4vpError`. */
-export type Oid4vpErrorCode = "oid4vp.invalid_url" | "oid4vp.required_field_missing" | "oid4vp.unsupported_response_type" | "oid4vp.mutually_exclusive_fields" | "oid4vp.response_uri_required" | "oid4vp.invalid_json" | "oid4vp.invalid_value_type" | "oid4vp.malformed_body" | "oid4vp.malformed_submission";
-export declare class Oid4vpError extends Error {
-    readonly name = "Oid4vpError";
+export type Oid4vpErrorCode = "oid4vp.invalid_url" | "oid4vp.required_field_missing" | "oid4vp.unsupported_response_type" | "oid4vp.mutually_exclusive_fields" | "oid4vp.response_uri_required" | "oid4vp.invalid_json" | "oid4vp.invalid_value_type" | "oid4vp.malformed_body" | "oid4vp.malformed_submission" | "oid4vp.cert_generation_failed" | "oid4vp.jar_signing_failed";
+export declare class Oid4vpError extends GramotaError {
     readonly code: Oid4vpErrorCode;
     constructor(code: Oid4vpErrorCode, message: string, options?: {
         cause?: unknown;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0DAA0D;AAC1D,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,cAAc,GACd,OAAO,GACP,KAAK,GACL,cAAc,GACd,cAAc,GACd,sBAAsB,GACtB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,oEAAoE;AACpE,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,iBAAiB,GACjB,UAAU,GACV,OAAO,CAAC;AAEZ;;;;2DAI2D;AAC3D,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,aAAa,EAAE,UAAU,CAAC;IAC1B,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB;uEACmE;IACnE,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC,wEAAwE;IACxE,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;mCAC+B;IAC/B,uBAAuB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,gFAAgF;IAChF,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;4DACwD;IACxD,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,8CAA8C;IAC9C,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD;+BAC2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,kEAAkE;AAClE,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACrC,4EAA4E;IAC5E,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,sCAAsC;AACtC,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,+BAA+B,GAC/B,kCAAkC,GAClC,kCAAkC,GAClC,8BAA8B,GAC9B,qBAAqB,GACrB,2BAA2B,GAC3B,uBAAuB,GACvB,6BAA6B,CAAC;AAElC,qBAAa,WAAY,SAAQ,KAAK;IACpC,SAAkB,IAAI,iBAAiB;IACvC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;gBAG7B,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAQhC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;GAOG;AAEH,0DAA0D;AAC1D,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,cAAc,GACd,OAAO,GACP,KAAK,GACL,cAAc,GACd,cAAc,GACd,sBAAsB,GACtB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,oEAAoE;AACpE,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,iBAAiB,GACjB,UAAU,GACV,OAAO,CAAC;AAEZ;;;;2DAI2D;AAC3D,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,aAAa,EAAE,UAAU,CAAC;IAC1B,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB;uEACmE;IACnE,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC,wEAAwE;IACxE,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;mCAC+B;IAC/B,uBAAuB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,gFAAgF;IAChF,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;4DACwD;IACxD,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,8CAA8C;IAC9C,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD;+BAC2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxE;gEAC4D;IAC5D,uBAAuB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,oCAAoC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;sEACkE;IAClE,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;2CAEuC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,sCAAsC;AACtC,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,+BAA+B,GAC/B,kCAAkC,GAClC,kCAAkC,GAClC,8BAA8B,GAC9B,qBAAqB,GACrB,2BAA2B,GAC3B,uBAAuB,GACvB,6BAA6B,GAC7B,+BAA+B,GAC/B,2BAA2B,CAAC;AAEhC,qBAAa,WAAY,SAAQ,YAAY;IAC3C,SAAkB,IAAI,EAAE,eAAe,CAAC;gBAGtC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAMhC"}

package/dist/types.js

@@ -1,20 +1,10 @@
-/**
- * OID4VP Final 1.0 wire-format types.
- * Spec: https://openid.net/specs/openid-4-verifiable-presentations-1_0.html
- *
- * Scope of this package: §5 Authorization Request, §6 Authorization Response.
- * Presentation Definition (§5.4) is modelled but not yet matched/queried —
- * downstream packages will add DIF Presentation Exchange JSONPath support.
- */
-export class Oid4vpError extends Error {
-    name = "Oid4vpError";
+import { GramotaError } from "@gramota/core";
+export class Oid4vpError extends GramotaError {
     code;
     constructor(code, message, options) {
-        super(message);
+        super(message, code, options);
+        this.name = "Oid4vpError";
         this.code = code;
-        if (options?.cause !== undefined) {
-            this.cause = options.cause;
-        }
     }
 }
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkFH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAClB,IAAI,GAAG,aAAa,CAAC;IAC9B,IAAI,CAAkB;IAE/B,YACE,IAAqB,EACrB,OAAe,EACf,OAA6B;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA8I7C,MAAM,OAAO,WAAY,SAAQ,YAAY;IACzB,IAAI,CAAkB;IAExC,YACE,IAAqB,EACrB,OAAe,EACf,OAA6B;QAE7B,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gramota/oid4vp",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "OpenID for Verifiable Presentations transport — authorization request/response wire format for EUDIW.",
   "license": "Apache-2.0",
   "type": "module",
@@ -15,6 +15,16 @@
   "files": [
     "dist"
   ],
+  "dependencies": {
+    "@peculiar/x509": "^2.0.0",
+    "jose": "^5.9.6",
+    "reflect-metadata": "^0.2.0",
+    "@gramota/core": "0.2.0",
+    "@gramota/jose": "0.2.1"
+  },
+  "sideEffects": [
+    "./dist/cert.js"
+  ],
   "author": "Petromil Pavlov <petromilpavlov@gmail.com>",
   "homepage": "https://github.com/gramota-org/gramota#readme",
   "bugs": {
@@ -23,7 +33,6 @@
   "engines": {
     "node": ">=20"
   },
-  "sideEffects": false,
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"