@openeudi/openid4vp 0.9.0 → 0.9.2

package/dist/index.cjs

@@ -1,6 +1,7 @@
 'use strict';
 
 var x509 = require('@peculiar/x509');
+require('reflect-metadata');
 var uuid = require('uuid');
 var jose = require('jose');
 var cborX = require('cbor-x');
@@ -40,7 +41,7 @@ var __export = (target, all) => {
 };
 
 // src/errors.ts
-exports.InvalidSignatureError = void 0; exports.ExpiredCredentialError = void 0; exports.UnsupportedFormatError = void 0; exports.MalformedCredentialError = void 0; exports.NonceValidationError = void 0; exports.HaipValidationError = void 0; exports.OpenID4VPError = void 0; exports.TrustAnchorNotFoundError = void 0; exports.CertificateChainError = void 0; exports.RevokedCertificateError = void 0; exports.RevocationCheckFailedError = void 0; exports.LotlFetchError = void 0; exports.LotlSignatureError = void 0; exports.SignedRequestBuildError = void 0; exports.UnsupportedJweError = void 0; exports.DecryptionFailedError = void 0; exports.MissingDecryptionKeyError = void 0; exports.MultipleCredentialsNotSupportedError = void 0;
+exports.InvalidSignatureError = void 0; exports.ExpiredCredentialError = void 0; exports.UnsupportedFormatError = void 0; exports.MalformedCredentialError = void 0; exports.NonceValidationError = void 0; exports.HaipValidationError = void 0; exports.OpenID4VPError = void 0; exports.TrustAnchorNotFoundError = void 0; exports.CertificateChainError = void 0; exports.RevokedCertificateError = void 0; exports.RevocationCheckFailedError = void 0; exports.LotlFetchError = void 0; exports.LotlSignatureError = void 0; exports.SignedRequestBuildError = void 0; exports.UnsupportedJweError = void 0; exports.DecryptionFailedError = void 0; exports.MissingDecryptionKeyError = void 0; exports.MissingVerifierEncryptionKeyError = void 0; exports.MultipleCredentialsNotSupportedError = void 0;
 var init_errors = __esm({
   "src/errors.ts"() {
     exports.InvalidSignatureError = class extends Error {
@@ -165,6 +166,12 @@ var init_errors = __esm({
         super(message);
       }
     };
+    exports.MissingVerifierEncryptionKeyError = class extends exports.OpenID4VPError {
+      code = "missing_verifier_encryption_key";
+      constructor(message = "verifierEncryptionJwk is required to build the OID4VP 1.0 OpenID4VPHandover SessionTranscript for an encrypted response") {
+        super(message);
+      }
+    };
     exports.MultipleCredentialsNotSupportedError = class extends exports.OpenID4VPError {
       code = "multi_credential_unsupported";
       entryCount;
@@ -9525,6 +9532,9 @@ async function jwkSha256Thumbprint(jwk) {
   if (jwk.kty !== "EC") {
     throw new Error(`Unsupported JWK kty for thumbprint: ${jwk.kty}`);
   }
+  if (!jwk.crv || !jwk.x || !jwk.y) {
+    throw new Error("EC JWK for thumbprint is missing a required member (crv, x, or y)");
+  }
   const canonical = `{"crv":"${jwk.crv}","kty":"EC","x":"${jwk.x}","y":"${jwk.y}"}`;
   return sha256(new TextEncoder().encode(canonical));
 }
@@ -9618,6 +9628,9 @@ async function verifyAuthorizationResponse(envelope, query, options) {
     const nextOptions = { ...options };
     if (options.mdocSessionTranscript === void 0 && options.clientId !== void 0 && options.responseUri !== void 0 && options.nonce !== void 0) {
       if (options.sessionTranscriptProfile === "openid4vp-1.0") {
+        if (options.verifierEncryptionJwk === void 0) {
+          throw new exports.MissingVerifierEncryptionKeyError();
+        }
         nextOptions.mdocSessionTranscript = await buildOpenID4VPHandoverSessionTranscript({
           clientId: options.clientId,
           nonce: options.nonce,
@@ -10279,7 +10292,7 @@ function equalBytes(a, b) {
 
 // src/index.ts
 init_errors();
-var VERSION = "0.8.0";
+var VERSION = "0.9.2";
 /*! Bundled license information:
 
 pvtsutils/build/index.es.js: