@learncard/network-plugin 2.4.18 → 2.4.19

package/dist/lcn-plugin.cjs.development.js

@@ -9809,6 +9809,28 @@ var LCNNotificationValidator = mod.object({
   data: LCNNotificationDataValidator.optional(),
   sent: mod.string().datetime().optional()
 });
+var AUTH_GRANT_AUDIENCE_DOMAIN_PREFIX = "auth-grant:";
+var AuthGrantValidator = mod.object({
+  id: mod.string(),
+  name: mod.string(),
+  description: mod.string().optional(),
+  challenge: mod.string().startsWith(AUTH_GRANT_AUDIENCE_DOMAIN_PREFIX).min(10, { message: "Challenge is too short" }).max(100, { message: "Challenge is too long" }),
+  status: mod.enum(["revoked", "active"], {
+    required_error: "Status is required",
+    invalid_type_error: "Status must be either active or revoked"
+  }),
+  scope: mod.string(),
+  createdAt: mod.string().datetime({ message: "createdAt must be a valid ISO 8601 datetime string" }),
+  expiresAt: mod.string().datetime({ message: "expiresAt must be a valid ISO 8601 datetime string" }).nullish().optional()
+});
+var FlatAuthGrantValidator = mod.object({ id: mod.string() }).catchall(mod.any());
+var AuthGrantStatusValidator = mod.enum(["active", "revoked"]);
+var AuthGrantQueryValidator = mod.object({
+  id: StringQuery,
+  name: StringQuery,
+  description: StringQuery,
+  status: AuthGrantStatusValidator
+}).partial();
 
 // src/plugin.ts
 var getLearnCardNetworkPlugin = /* @__PURE__ */ __name(async (learnCard, url) => {
@@ -10548,6 +10570,58 @@ var getLearnCardNetworkPlugin = /* @__PURE__ */ __name(async (learnCard, url) =>
           throw new Error("Please make an account first!");
         return client.claimHook.deleteClaimHook.mutate({ id });
       },
+      addAuthGrant: async (_learnCard, authGrant) => {
+        if (!userData)
+          throw new Error("Please make an account first!");
+        return client.authGrants.addAuthGrant.mutate(authGrant);
+      },
+      revokeAuthGrant: async (_learnCard, id) => {
+        if (!userData)
+          throw new Error("Please make an account first!");
+        return client.authGrants.revokeAuthGrant.mutate({ id });
+      },
+      deleteAuthGrant: async (_learnCard, id) => {
+        if (!userData)
+          throw new Error("Please make an account first!");
+        return client.authGrants.deleteAuthGrant.mutate({ id });
+      },
+      updateAuthGrant: async (_learnCard, id, updates) => {
+        if (!userData)
+          throw new Error("Please make an account first!");
+        return client.authGrants.updateAuthGrant.mutate({ id, updates });
+      },
+      getAuthGrant: async (_learnCard, id) => {
+        if (!userData)
+          throw new Error("Please make an account first!");
+        return client.authGrants.getAuthGrant.query({ id });
+      },
+      getAuthGrants: async (_learnCard, options) => {
+        if (!userData)
+          throw new Error("Please make an account first!");
+        return client.authGrants.getAuthGrants.query(options);
+      },
+      getAPITokenForAuthGrant: async (_learnCard, id) => {
+        if (!userData)
+          throw new Error("Please make an account first!");
+        const authGrant = await client.authGrants.getAuthGrant.query({ id });
+        if (!authGrant)
+          throw new Error("Auth grant not found");
+        if (authGrant.status !== "active")
+          throw new Error("Auth grant is not active");
+        if (!authGrant.challenge)
+          throw new Error("Auth grant has no challenge");
+        if (!authGrant.scope)
+          throw new Error("Auth grant has no scope");
+        if (authGrant.expiresAt && new Date(authGrant.expiresAt) < new Date())
+          throw new Error("Auth grant is expired");
+        const apiToken = await _learnCard.invoke.getDidAuthVp({
+          challenge: authGrant.challenge,
+          proofFormat: "jwt"
+        });
+        if (!apiToken)
+          throw new Error("Failed to get API Token for auth grant");
+        return apiToken;
+      },
       resolveFromLCN: async (_learnCard, uri) => {
         const result = await client.storage.resolve.query({ uri });
         return UnsignedVCValidator.or(VCValidator).or(VPValidator).or(JWEValidator).or(ConsentFlowContractValidator).or(ConsentFlowTermsValidator).parseAsync(result);