@js-soft/node-red-eudiplo-connector 0.1.0-alpha.1

package/eudiplo-issuance.html

@@ -0,0 +1,164 @@
+<script type="text/javascript">
+  RED.nodes.registerType('eudiplo-issuance', {
+    category:     'eudiplo',
+    color:        '#ffffff',
+    defaults: {
+      name:                            { value: '' },
+      baseUrl:                         { value: '' },
+      baseUrlOverwrite:                { value: false },
+      clientId:                        { value: '' },
+      credentialsOverwrite:            { value: false },
+      flow:                            { value: 'pre_authorized_code' },
+      responseType:                    { value: 'uri' },
+      credentialConfigurationId:       { value: '', required: true },
+      credentialConfigurationIdSource: { value: 'msg' },
+      subjectData:                     { value: '{}' },
+      subjectDataSource:               { value: 'json' },
+    },
+    credentials: {
+      clientSecret: { type: 'password' },
+    },
+    inputs:       1,
+    outputs:      1,
+    icon:         'eudiploLogo.svg',
+    label:        function () { return this.name || 'eudiplo issuance'; },
+    paletteLabel: 'eudiplo issuance',
+
+    oneditprepare: function () {
+      $('#node-input-credentialConfigurationId').typedInput({
+        type:      this.credentialConfigurationIdSource || 'msg',
+        types:     ['msg', 'str'],
+        typeField: '#node-input-credentialConfigurationIdSource',
+      });
+      $('#node-input-subjectData').typedInput({
+        type:      this.subjectDataSource || 'json',
+        types:     ['msg', 'json'],
+        typeField: '#node-input-subjectDataSource',
+      });
+
+      $('#node-input-baseUrlEnvVar').val('EUDIPLO_BASE_URL');
+
+      function toggleBaseUrlOverride() {
+        const checked = $('#node-input-baseUrlOverwrite').prop('checked');
+        $('#base-url-override-rows').toggle(checked);
+      }
+
+      function toggleCredentials() {
+        const checked = $('#node-input-credentialsOverwrite').prop('checked');
+        $('#credentials-override-rows').toggle(checked);
+      }
+
+      toggleBaseUrlOverride();
+      toggleCredentials();
+      $('#node-input-baseUrlOverwrite').on('change', toggleBaseUrlOverride);
+      $('#node-input-credentialsOverwrite').on('change', toggleCredentials);
+    },
+  });
+</script>
+
+<script type="text/html" data-template-name="eudiplo-issuance">
+  <div class="form-row">
+    <label for="node-input-name"><i class="fa fa-tag"></i> Name</label>
+    <input type="text" id="node-input-name" placeholder="Name">
+  </div>
+
+  <div class="form-row">
+    <label for="node-input-baseUrlEnvVar"><i class="fa fa-globe"></i> Base URL</label>
+    <input type="text" id="node-input-baseUrlEnvVar" readonly>
+  </div>
+
+  <div class="form-row">
+    <input type="checkbox" id="node-input-baseUrlOverwrite" style="width:auto; margin-left: 107px;">
+    <label for="node-input-baseUrlOverwrite" style="width:auto;"> Override base URL</label>
+  </div>
+
+  <div id="base-url-override-rows">
+    <div class="form-row">
+      <label for="node-input-baseUrl"><i class="fa fa-globe"></i> Base URL</label>
+      <input type="text" id="node-input-baseUrl" placeholder="https://eudiplo.example.com">
+    </div>
+  </div>
+
+  <hr/>
+
+  <div class="form-row">
+    <label><i class="fa fa-lock"></i> OAuth2</label>
+  </div>
+
+  <div class="form-row">
+    <input type="checkbox" id="node-input-credentialsOverwrite" style="width:auto; margin-left: 107px;">
+    <label for="node-input-credentialsOverwrite" style="width:auto;"> Override credentials</label>
+  </div>
+
+  <div id="credentials-override-rows">
+    <div class="form-row">
+      <label for="node-input-clientId"><i class="fa fa-user"></i> Client ID</label>
+      <input type="text" id="node-input-clientId">
+    </div>
+
+    <div class="form-row">
+      <label for="node-input-clientSecret"><i class="fa fa-user-secret"></i> Client Secret</label>
+      <input type="password" id="node-input-clientSecret">
+    </div>
+  </div>
+
+  <hr/>
+
+  <div class="form-row">
+    <label for="node-input-flow"><i class="fa fa-code-fork"></i> Flow</label>
+    <select id="node-input-flow" style="width:70%">
+      <option value="pre_authorized_code">pre_authorized_code</option>
+      <option value="authorization_code">authorization_code</option>
+    </select>
+  </div>
+
+  <div class="form-row">
+    <label for="node-input-responseType"><i class="fa fa-qrcode"></i> Response Type</label>
+    <select id="node-input-responseType" style="width:70%">
+      <option value="uri">uri</option>
+      <option value="dc-api">dc-api</option>
+    </select>
+  </div>
+
+  <div class="form-row">
+    <label for="node-input-credentialConfigurationId"><i class="fa fa-id-card"></i> Credential Configuration ID</label>
+    <input type="text" id="node-input-credentialConfigurationId">
+    <input type="hidden" id="node-input-credentialConfigurationIdSource">
+  </div>
+
+  <div class="form-row">
+    <label for="node-input-subjectData"><i class="fa fa-user-circle"></i> Subject Data</label>
+    <input type="text" id="node-input-subjectData">
+    <input type="hidden" id="node-input-subjectDataSource">
+  </div>
+</script>
+
+<script type="text/html" data-help-name="eudiplo-issuance">
+  <p>Issues a Verifiable Credential via a Eudiplo server and outputs the <code>credentialOffer</code> URI for the holder's wallet.</p>
+
+  <h3>Inputs</h3>
+  <dl class="message-properties">
+    <dt>payload <span class="property-type">any</span></dt>
+    <dd>Used to resolve <b>Credential Configuration ID</b> and <b>Subject Data</b> when configured as <code>msg</code> properties.</dd>
+  </dl>
+
+  <h3>Outputs</h3>
+  <dl class="message-properties">
+    <dt>payload.credentialOffer <span class="property-type">string</span></dt>
+    <dd>The OID4VCI credential offer URI to present to the holder's wallet.</dd>
+    <dt>payload.sessionId <span class="property-type">string</span></dt>
+    <dd>Session ID for polling issuance status.</dd>
+  </dl>
+
+  <h3>Details</h3>
+  <ul>
+    <li><b>Base URL</b> — By default the node reads the server URL from the <code>EUDIPLO_BASE_URL</code> environment variable shown in the editor.</li>
+    <li><b>Base URL Override</b> — Enable this to provide a node-specific Base URL instead of using <code>EUDIPLO_BASE_URL</code>.</li>
+    <li><b>Client ID / Secret</b> — OAuth2 client credentials (Client Credentials grant). The secret is stored encrypted. The SDK uses <code>${baseUrl}/oauth2/token</code> as the token endpoint.</li>
+    <li><b>Credential Configuration ID</b> — The type identifier of the credential to issue. Can be read from a <code>msg</code> property or set as a static string.</li>
+    <li><b>Subject Data</b> — JSON object of subject claims/attributes. Can be a <code>msg</code> property or a static JSON object.</li>
+  </ul>
+
+  <h3>Notes</h3>
+  <p>Uses the <code>@eudiplo/sdk-core</code> package. The OAuth2 access token is cached and automatically refreshed by the SDK.</p>
+</script>

package/eudiplo-issuance.js

@@ -0,0 +1,117 @@
+const { EudiploClient } = require('@eudiplo/sdk-core');
+
+const BASE_URL_ENV_VAR = 'EUDIPLO_BASE_URL';
+
+module.exports = function (RED) {
+  function EudiploIssuanceNode(config) {
+    RED.nodes.createNode(this, config);
+    const node = this;
+
+    let clientId = process.env.EUDIPLO_CLIENT_ID;
+    let password = process.env.EUDIPLO_CLIENT_SECRET;
+
+    if (config.credentialsOverwrite) {
+      node.log('Overwriting eudiplo-credentials from environment variables');
+      clientId = config.clientId;
+      password = node.credentials.clientSecret;
+    } else {
+      node.log('Using eudiplo-credentials from environment variables');
+    }
+
+    const baseUrl = config.baseUrlOverwrite ? config.baseUrl : process.env[BASE_URL_ENV_VAR];
+
+    if (config.baseUrlOverwrite) {
+      node.log('Overwriting eudiplo base URL from node configuration');
+    } else {
+      node.log(`Using eudiplo base URL from environment variable ${BASE_URL_ENV_VAR}`);
+    }
+
+    let configurationError = null;
+    if (!baseUrl) {
+      configurationError = `Missing Eudiplo base URL. Set ${BASE_URL_ENV_VAR} or enable the Base URL override in the node configuration.`;
+      node.status({ fill: 'red', shape: 'ring', text: 'missing base URL' });
+      node.error(configurationError);
+    }
+
+    // EudiploClient handles token acquisition and refresh internally.
+    // The SDK uses ${baseUrl}/oauth2/token as the token endpoint.
+    let sdkClient = null;
+    if (!configurationError) {
+      sdkClient = new EudiploClient({
+        baseUrl,
+        clientId: clientId,
+        clientSecret: password
+      });
+    }
+
+    node.on('input', async function (msg, send, done) {
+      if (configurationError) {
+        node.status({ fill: 'red', shape: 'ring', text: 'missing base URL' });
+        return done(new Error(configurationError));
+      }
+
+      try {
+        // ── Resolve credentialConfigurationIds ──────────────────────────
+        const rawId =
+          config.credentialConfigurationIdSource === 'msg'
+            ? RED.util.getMessageProperty(msg, config.credentialConfigurationId)
+            : config.credentialConfigurationId;
+
+        if (!rawId) {
+          return done(new Error('Credential Configuration ID is empty'));
+        }
+        const credentialConfigurationIds = Array.isArray(rawId) ? rawId : [rawId];
+
+        // ── Resolve subject data / claims ──────────────────────────────
+        let subjectData;
+        if (config.subjectDataSource === 'msg') {
+          subjectData = RED.util.getMessageProperty(msg, config.subjectData);
+        } else {
+          try {
+            subjectData = JSON.parse(config.subjectData || '{}');
+          } catch {
+            subjectData = {};
+          }
+        }
+
+        let claims;
+        if (subjectData && Object.keys(subjectData).length > 0) {
+          claims = { [credentialConfigurationIds[0]]: subjectData };
+        }
+
+        node.status({ fill: 'blue', shape: 'dot', text: 'issuing…' });
+
+        const result = await sdkClient.createIssuanceOffer({
+          credentialConfigurationIds,
+          claims,
+          flow: config.flow || 'pre_authorized_code',
+          responseType: config.responseType || 'uri',
+        });
+
+        node.log('Issuance result: ' + JSON.stringify(result));
+
+        if (!msg.payload || typeof msg.payload !== 'object') {
+          msg.payload = {};
+        }
+        msg.payload.credentialOffer = result.uri;
+        msg.payload.sessionId = result.sessionId;
+        node.status({});
+        send(msg);
+        done();
+      } catch (err) {
+        node.status({ fill: 'red', shape: 'ring', text: err.message });
+        done(err);
+      }
+    });
+
+    node.on('close', function () {
+      sdkClient = null;
+    });
+  }
+
+  RED.nodes.registerType('eudiplo-issuance', EudiploIssuanceNode, {
+    credentials: {
+      clientSecret: { type: 'password' },
+    },
+  });
+};

package/eudiplo-presentation.html

@@ -0,0 +1,134 @@
+<script type="text/javascript">
+  RED.nodes.registerType('eudiplo-presentation', {
+    category:     'eudiplo',
+    color:        '#ffffff',
+    defaults: {
+      name:                       { value: '' },
+      baseUrl:                    { value: '' },
+      baseUrlOverwrite:           { value: false },
+      clientId:                   { value: '' },
+      credentialsOverwrite:       { value: false },
+      presentationConfigId:       { value: '', required: true },
+      presentationConfigIdSource: { value: 'str' },
+    },
+    credentials: {
+      clientSecret: { type: 'password' },
+    },
+    inputs:       1,
+    outputs:      1,
+    icon:         'eudiploLogo.svg',
+    label:        function () { return this.name || 'eudiplo presentation'; },
+    paletteLabel: 'eudiplo presentation',
+
+    oneditprepare: function () {
+      $('#node-input-presentationConfigId').typedInput({
+        type:      this.presentationConfigIdSource || 'str',
+        types:     ['msg', 'str'],
+        typeField: '#node-input-presentationConfigIdSource',
+      });
+
+      $('#node-input-baseUrlEnvVar').val('EUDIPLO_BASE_URL');
+
+      function toggleBaseUrlOverride() {
+        const checked = $('#node-input-baseUrlOverwrite').prop('checked');
+        $('#base-url-override-rows').toggle(checked);
+      }
+
+      function toggleCredentials() {
+        const checked = $('#node-input-credentialsOverwrite').prop('checked');
+        $('#credentials-override-rows').toggle(checked);
+      }
+
+      toggleBaseUrlOverride();
+      toggleCredentials();
+      $('#node-input-baseUrlOverwrite').on('change', toggleBaseUrlOverride);
+      $('#node-input-credentialsOverwrite').on('change', toggleCredentials);
+    },
+  });
+</script>
+
+<script type="text/html" data-template-name="eudiplo-presentation">
+  <div class="form-row">
+    <label for="node-input-name"><i class="fa fa-tag"></i> Name</label>
+    <input type="text" id="node-input-name" placeholder="Name">
+  </div>
+
+  <div class="form-row">
+    <label for="node-input-baseUrlEnvVar"><i class="fa fa-globe"></i> Base URL</label>
+    <input type="text" id="node-input-baseUrlEnvVar" readonly>
+  </div>
+
+  <div class="form-row">
+    <input type="checkbox" id="node-input-baseUrlOverwrite" style="width:auto; margin-left: 107px;">
+    <label for="node-input-baseUrlOverwrite" style="width:auto;"> Override base URL</label>
+  </div>
+
+  <div id="base-url-override-rows">
+    <div class="form-row">
+      <label for="node-input-baseUrl"><i class="fa fa-globe"></i> Base URL</label>
+      <input type="text" id="node-input-baseUrl" placeholder="https://eudiplo.example.com">
+    </div>
+  </div>
+
+  <hr/>
+
+  <div class="form-row">
+    <label><i class="fa fa-lock"></i> OAuth2</label>
+  </div>
+
+  <div class="form-row">
+    <input type="checkbox" id="node-input-credentialsOverwrite" style="width:auto; margin-left: 107px;">
+    <label for="node-input-credentialsOverwrite" style="width:auto;"> Override credentials</label>
+  </div>
+
+  <div id="credentials-override-rows">
+    <div class="form-row">
+      <label for="node-input-clientId"><i class="fa fa-user"></i> Client ID</label>
+      <input type="text" id="node-input-clientId">
+    </div>
+
+    <div class="form-row">
+      <label for="node-input-clientSecret"><i class="fa fa-user-secret"></i> Client Secret</label>
+      <input type="password" id="node-input-clientSecret">
+    </div>
+  </div>
+
+  <hr/>
+
+  <div class="form-row">
+    <label for="node-input-presentationConfigId"><i class="fa fa-id-card"></i> Presentation Config ID</label>
+    <input type="text" id="node-input-presentationConfigId">
+    <input type="hidden" id="node-input-presentationConfigIdSource">
+  </div>
+</script>
+
+<script type="text/html" data-help-name="eudiplo-presentation">
+  <p>Creates a Verifiable Presentation request via a Eudiplo server and outputs the presentation URI for the holder's wallet.</p>
+
+  <h3>Inputs</h3>
+  <dl class="message-properties">
+    <dt>payload <span class="property-type">any</span></dt>
+    <dd>Used to resolve the <b>Presentation Config ID</b> when configured as a <code>msg</code> property.</dd>
+  </dl>
+
+  <h3>Outputs</h3>
+  <dl class="message-properties">
+    <dt>payload.presentationUri <span class="property-type">string</span></dt>
+    <dd>Same-device OID4VP presentation request URI (wallet on same device, redirects back after completion).</dd>
+    <dt>payload.crossDeviceUri <span class="property-type">string</span></dt>
+    <dd>Cross-device URI suitable for displaying as a QR code (no redirect; poll <code>sessionId</code> for status).</dd>
+    <dt>payload.sessionId <span class="property-type">string</span></dt>
+    <dd>Session ID for polling presentation status.</dd>
+  </dl>
+
+  <h3>Details</h3>
+  <ul>
+    <li><b>Base URL</b> — By default the node reads the server URL from the <code>EUDIPLO_BASE_URL</code> environment variable shown in the editor.</li>
+    <li><b>Base URL Override</b> — Enable this to provide a node-specific Base URL instead of using <code>EUDIPLO_BASE_URL</code>.</li>
+    <li><b>Client ID / Secret</b> — OAuth2 client credentials (Client Credentials grant). The secret is stored encrypted. The SDK uses <code>${baseUrl}/oauth2/token</code> as the token endpoint.</li>
+    <li><b>Presentation Config ID</b> — The ID of the presentation configuration that defines which credentials are required. Can be read from a <code>msg</code> property or set as a static string.</li>
+  </ul>
+
+  <h3>Notes</h3>
+  <p>Uses the <code>@eudiplo/sdk-core</code> package. The OAuth2 access token is cached and automatically refreshed by the SDK.</p>
+</script>

package/eudiplo-presentation.js

@@ -0,0 +1,105 @@
+const { EudiploClient } = require('@eudiplo/sdk-core');
+
+const BASE_URL_ENV_VAR = 'EUDIPLO_BASE_URL';
+
+module.exports = function (RED) {
+  function EudiploPresentationNode(config) {
+    RED.nodes.createNode(this, config);
+    const node = this;
+
+    let clientId = process.env.EUDIPLO_CLIENT_ID;
+    let clientSecret = process.env.EUDIPLO_CLIENT_SECRET;
+
+    if (config.credentialsOverwrite) {
+      clientId = config.clientId;
+      clientSecret = node.credentials.clientSecret;
+      node.log('Overwriting eudiplo-credentials from environment variables ');
+    } else {
+      node.log('Using eudiplo-credentials from environment variables');
+    }
+
+    const baseUrl = config.baseUrlOverwrite ? config.baseUrl : process.env[BASE_URL_ENV_VAR];
+
+    if (config.baseUrlOverwrite) {
+      node.log('Overwriting eudiplo base URL from node configuration');
+    } else {
+      node.log(`Using eudiplo base URL from environment variable ${BASE_URL_ENV_VAR}`);
+    }
+
+    let configurationError = null;
+    if (!baseUrl) {
+      configurationError = `Missing Eudiplo base URL. Set ${BASE_URL_ENV_VAR} or enable the Base URL override in the node configuration.`;
+      node.status({ fill: 'red', shape: 'ring', text: 'missing base URL' });
+      node.error(configurationError);
+    }
+
+    // EudiploClient handles token acquisition and refresh internally.
+    // The SDK uses ${baseUrl}/oauth2/token as the token endpoint.
+    let sdkClient = null;
+    if (!configurationError) {
+      sdkClient = new EudiploClient({
+        baseUrl,
+        clientId: clientId,
+        clientSecret: clientSecret,
+      });
+    }
+
+    node.on('input', async function (msg, send, done) {
+      if (configurationError) {
+        node.status({ fill: 'red', shape: 'ring', text: 'missing base URL' });
+        return done(new Error(configurationError));
+      }
+
+      try {
+        // ── Resolve presentation config ID ───────────────────────────────
+        const configId =
+          config.presentationConfigIdSource === 'msg'
+            ? RED.util.getMessageProperty(msg, config.presentationConfigId)
+            : config.presentationConfigId;
+
+        if (!configId) {
+          return done(new Error('Presentation Config ID is empty'));
+        }
+
+        node.status({ fill: 'blue', shape: 'dot', text: 'requesting…' });
+        let result;
+        try {
+          result = await sdkClient.createPresentationRequest({
+            configId,
+            responseType: 'uri',
+          });
+        } catch (error) {
+          msg.payload.eudiploSuccess = false;
+          send(msg);
+          return done(error);
+        }
+
+        node.log('Presentation result: ' + JSON.stringify(result));
+
+        if (!msg.payload || typeof msg.payload !== 'object') {
+          msg.payload = {};
+        }
+        msg.payload.presentationUri = result.uri;
+        msg.payload.crossDeviceUri = result.crossDeviceUri;
+        msg.payload.sessionId = result.sessionId;
+        msg.payload.eudiploSuccess = true;
+        node.status({});
+        send(msg);
+        done();
+      } catch (err) {
+        node.status({ fill: 'red', shape: 'ring', text: err.message });
+        done(err);
+      }
+    });
+
+    node.on('close', function () {
+      sdkClient = null;
+    });
+  }
+
+  RED.nodes.registerType('eudiplo-presentation', EudiploPresentationNode, {
+    credentials: {
+      clientSecret: { type: 'password' },
+    },
+  });
+};