@openeudi/openid4vp 0.7.0 → 0.8.0

package/README.md

@@ -338,6 +338,10 @@ This library implements the **verifier side** of OpenID4VP for SD-JWT VC and mDO
 
 EUDI Architecture Reference Framework (ARF) alignment: tracks OpenID4VP 1.0 final. Full ARF 1.4+ profile compliance will be added before a stable 1.0.
 
+## OIDF Conformance Testing
+
+Verifier-side conformance is automated against a self-hosted OpenID Foundation conformance suite. See `docs/manual-testing/oidf-interop.md` for both the CI orchestrator (`npm run oidf:ci -- --profile=happy-flow|full`) and the manual hosted-demo escape hatch.
+
 ## Related packages
 
 - **[@openeudi/core](https://www.npmjs.com/package/@openeudi/core)** -- Framework-agnostic EUDI Wallet verification protocol engine with session management and QR code generation.

package/dist/index.cjs

@@ -8159,7 +8159,10 @@ async function createSignedAuthorizationRequest(input, query) {
     }
     const jwk = { ...input.encryptionKey.publicJwk, use: "enc" };
     clientMetadata.jwks = { keys: [jwk] };
-    clientMetadata.encrypted_response_enc_values_supported = enc ?? [...DEFAULT_SUPPORTED_ENC_VALUES];
+    const encValues = enc ?? [...DEFAULT_SUPPORTED_ENC_VALUES];
+    clientMetadata.encrypted_response_enc_values_supported = encValues;
+    clientMetadata.authorization_encrypted_response_alg = "ECDH-ES";
+    clientMetadata.authorization_encrypted_response_enc = encValues[0];
   }
   const payload = {
     iss: clientId,
@@ -8418,7 +8421,7 @@ async function verifyCoseSign1(coseSign1, publicKey, allowedAlgorithms) {
     throw new exports.MalformedCredentialError(`no hash mapping for alg ${coseSign1.alg}`);
   }
   const sigStructure = ["Signature1", coseSign1.protectedHeaderBytes, new Uint8Array(0), coseSign1.payload];
-  const sigInput = decoder.encode(sigStructure);
+  const sigInput = new Uint8Array(decoder.encode(sigStructure));
   const ok = await crypto.subtle.verify(
     { name: "ECDSA", hash: hashAlg },
     publicKey,
@@ -8957,32 +8960,74 @@ var SdJwtParser = class {
       return invalidResult(`Unsupported algorithm: ${alg}`);
     }
     const x5cArray = header.x5c;
-    if (!Array.isArray(x5cArray) || x5cArray.length === 0 || typeof x5cArray[0] !== "string") {
-      throw new exports.MalformedCredentialError("Missing or invalid x5c in JWT header");
-    }
+    const hasX5c = Array.isArray(x5cArray) && x5cArray.length > 0 && typeof x5cArray[0] === "string";
     let issuerKey;
     let issuerCertBytes;
-    try {
-      issuerKey = await jose.importX509(derToPem2(x5cArray[0]), alg);
-      issuerCertBytes = base64ToBytes(x5cArray[0]);
-    } catch (err) {
-      if (err instanceof exports.MalformedCredentialError) throw err;
-      throw new exports.MalformedCredentialError("Failed to import issuer certificate");
+    if (hasX5c) {
+      try {
+        issuerKey = await jose.importX509(derToPem2(x5cArray[0]), alg);
+        issuerCertBytes = base64ToBytes(x5cArray[0]);
+      } catch (err) {
+        if (err instanceof exports.MalformedCredentialError) throw err;
+        throw new exports.MalformedCredentialError("Failed to import issuer certificate");
+      }
+    } else if (options.trustedIssuerJwks && options.trustedIssuerJwks.length > 0) {
+      issuerKey = void 0;
+    } else {
+      throw new exports.MalformedCredentialError("Missing or invalid x5c in JWT header");
     }
     let payload;
-    try {
-      const result2 = await jose.jwtVerify(parts.jwt, issuerKey, { algorithms: allowedAlgorithms });
-      payload = result2.payload;
-    } catch {
-      return invalidResult("Issuer JWT signature verification failed");
+    if (issuerKey) {
+      try {
+        const result2 = await jose.jwtVerify(parts.jwt, issuerKey, { algorithms: allowedAlgorithms });
+        payload = result2.payload;
+      } catch {
+        return invalidResult("Issuer JWT signature verification failed");
+      }
+    } else {
+      const jwks = options.trustedIssuerJwks;
+      const headerKid = header["kid"];
+      let candidates;
+      if (typeof headerKid === "string") {
+        const matched = jwks.find((k) => k["kid"] === headerKid);
+        if (!matched) {
+          return invalidResult(
+            `No matching JWK found in trustedIssuerJwks for kid=${headerKid}`
+          );
+        }
+        candidates = [matched];
+      } else {
+        candidates = jwks;
+      }
+      let verifiedPayload;
+      for (const jwk of candidates) {
+        let candidateKey;
+        try {
+          candidateKey = await jose.importJWK(jwk, alg);
+        } catch {
+          continue;
+        }
+        try {
+          const result2 = await jose.jwtVerify(parts.jwt, candidateKey, {
+            algorithms: allowedAlgorithms
+          });
+          verifiedPayload = result2.payload;
+          break;
+        } catch {
+        }
+      }
+      if (!verifiedPayload) {
+        return invalidResult("Issuer JWT signature verification failed");
+      }
+      payload = verifiedPayload;
     }
     const issuerString = typeof payload["iss"] === "string" ? payload["iss"] : "";
     const issuerInfo = {
-      certificate: issuerCertBytes,
+      certificate: issuerCertBytes ?? new Uint8Array(),
       country: extractCountryHint(issuerString)
     };
     let trustResult;
-    if (options.trustStore) {
+    if (issuerCertBytes === void 0) ; else if (options.trustStore) {
       const { TrustEvaluator: TrustEvaluator2 } = await Promise.resolve().then(() => (init_TrustEvaluator(), TrustEvaluator_exports));
       const evaluator = new TrustEvaluator2({
         trustStore: options.trustStore,
@@ -9002,24 +9047,56 @@ var SdJwtParser = class {
           );
         }
       } else {
-        const isTrusted = options.trustedCertificates.some((trusted) => bytesEqual4(trusted, issuerCertBytes));
+        const isTrusted = options.trustedCertificates.some(
+          (trusted) => bytesEqual4(trusted, issuerCertBytes)
+        );
         if (!isTrusted) {
           return invalidResult("Issuer certificate is not trusted");
         }
       }
     }
-    const sdArray = payload["_sd"];
     if (parts.disclosures.length > 0) {
-      if (!Array.isArray(sdArray) || sdArray.length === 0) {
-        return invalidResult("Disclosures present but no _sd array in issuer JWT");
-      }
+      const decodedDisclosures = [];
       for (const disclosure of parts.disclosures) {
+        let parsed;
+        try {
+          parsed = JSON.parse(new TextDecoder().decode(base64ToBytes(disclosure)));
+        } catch {
+          return invalidResult("Disclosure is not valid base64url-encoded JSON");
+        }
+        if (!Array.isArray(parsed) || parsed.length !== 2 && parsed.length !== 3) {
+          return invalidResult("Disclosure must be a 2- or 3-element array");
+        }
         const hashBytes = await sha256Hasher(disclosure);
-        const hashB64url = bytesToBase64url(hashBytes);
-        if (!sdArray.includes(hashB64url)) {
-          return invalidResult("Disclosure hash mismatch");
+        decodedDisclosures.push({
+          raw: disclosure,
+          hash: bytesToBase64url(hashBytes),
+          length: parsed.length,
+          value: parsed.length === 3 ? parsed[2] : parsed[1]
+        });
+      }
+      const seed = collectAnchorHashes(payload);
+      const kvHashes = seed.kvHashes;
+      const arrayElemHashes = seed.arrayElemHashes;
+      const remaining = [...decodedDisclosures];
+      for (; ; ) {
+        const anchored = [];
+        for (const d of remaining) {
+          const valid = d.length === 3 ? kvHashes.has(d.hash) : arrayElemHashes.has(d.hash);
+          if (valid) anchored.push(d);
+        }
+        if (anchored.length === 0) break;
+        for (const a of anchored) {
+          const sub = collectAnchorHashes(a.value);
+          for (const h of sub.kvHashes) kvHashes.add(h);
+          for (const h of sub.arrayElemHashes) arrayElemHashes.add(h);
+          const idx = remaining.indexOf(a);
+          if (idx >= 0) remaining.splice(idx, 1);
         }
       }
+      if (remaining.length > 0) {
+        return invalidResult("Disclosure hash mismatch");
+      }
     }
     if (parts.kbJwt) {
       const cnf = payload["cnf"];
@@ -9082,6 +9159,35 @@ var SdJwtParser = class {
     return result;
   }
 };
+function collectAnchorHashes(node) {
+  const kvHashes = /* @__PURE__ */ new Set();
+  const arrayElemHashes = /* @__PURE__ */ new Set();
+  const visit = (value) => {
+    if (Array.isArray(value)) {
+      for (const item of value) {
+        if (item && typeof item === "object" && !Array.isArray(item)) {
+          const obj = item;
+          const keys = Object.keys(obj);
+          if (keys.length === 1 && keys[0] === "..." && typeof obj["..."] === "string") {
+            arrayElemHashes.add(obj["..."]);
+            continue;
+          }
+        }
+        visit(item);
+      }
+    } else if (value && typeof value === "object") {
+      for (const [k, v] of Object.entries(value)) {
+        if (k === "_sd" && Array.isArray(v)) {
+          for (const h of v) if (typeof h === "string") kvHashes.add(h);
+          continue;
+        }
+        visit(v);
+      }
+    }
+  };
+  visit(node);
+  return { kvHashes, arrayElemHashes };
+}
 
 // src/presentation.ts
 var parsers = [new SdJwtParser(), new MdocParser()];
@@ -9821,7 +9927,7 @@ function equalBytes(a, b) {
 
 // src/index.ts
 init_errors();
-var VERSION = "0.7.0";
+var VERSION = "0.8.0";
 /*! Bundled license information:
 
 pvtsutils/build/index.es.js: