@openid4vc/oauth2 0.3.0-alpha-20250321213505 → 0.3.0-alpha-20250322133827

package/dist/index.mjs

@@ -672,14 +672,8 @@ function getAuthorizationServerMetadataFromList(authorizationServersMetadata, is
 // src/metadata/fetch-jwks-uri.ts
 import { ContentType as ContentType2, createZodFetcher as createZodFetcher2 } from "@openid4vc/utils";
 import { InvalidFetchResponseError as InvalidFetchResponseError2 } from "@openid4vc/utils";
-async function fetchJwks(authorizationServer, fetch) {
+async function fetchJwks(jwksUrl, fetch) {
   const fetcher = createZodFetcher2(fetch);
-  const jwksUrl = authorizationServer.jwks_uri;
-  if (!jwksUrl) {
-    throw new Oauth2Error(
-      `Authorization server '${authorizationServer.issuer}' does not have a 'jwks_uri' parameter to fetch JWKs.`
-    );
-  }
   const { result, response } = await fetcher(zJwkSet, ContentType2.JwkSet, jwksUrl);
   if (!response.ok) {
     throw new InvalidFetchResponseError2(
@@ -786,7 +780,13 @@ async function verifyJwtProfileAccessToken(options) {
       `Access token jwt contains unrecognized authorization server 'iss' value of '${decodedJwt.payload.iss}'`
     );
   }
-  const jwks = await fetchJwks(authorizationServer, options.callbacks.fetch);
+  const jwksUrl = authorizationServer.jwks_uri;
+  if (!jwksUrl) {
+    throw new Oauth2Error(
+      `Authorization server '${authorizationServer.issuer}' does not have a 'jwks_uri' parameter to fetch JWKs.`
+    );
+  }
+  const jwks = await fetchJwks(jwksUrl, options.callbacks.fetch);
   const publicJwk = extractJwkFromJwksForJwt({
     kid: decodedJwt.header.kid,
     jwks,