@openid4vc/oauth2 0.3.0-alpha-20250328114752 → 0.3.0-alpha-20250329202257

package/dist/index.mjs

@@ -925,7 +925,7 @@ var zAuthorizationServerMetadata = z8.object({
   // FiPA (no RFC yet)
   authorization_challenge_endpoint: z8.optional(zHttpsUrl2),
   // From OpenID4VCI specification
-  pre_authorized_grant_anonymous_access_supported: z8.optional(z8.boolean()),
+  "pre-authorized_grant_anonymous_access_supported": z8.optional(z8.boolean()),
   // Attestation Based Client Auth (draft 5)
   client_attestation_pop_nonce_required: z8.boolean().optional()
 }).passthrough().refine(
@@ -1634,7 +1634,7 @@ function clientAuthenticationDynamic(options) {
     const { url, authorizationServerMetadata, body } = callbackOptions;
     const endpointType = url === authorizationServerMetadata.introspection_endpoint ? "introspection" : url === authorizationServerMetadata.token_endpoint ? "token" : "endpoint";
     const method = getSupportedClientAuthenticationMethod(authorizationServerMetadata, endpointType);
-    if (endpointType === "token" && body.grant_type === preAuthorizedCodeGrantIdentifier && authorizationServerMetadata.pre_authorized_grant_anonymous_access_supported) {
+    if (endpointType === "token" && body.grant_type === preAuthorizedCodeGrantIdentifier && authorizationServerMetadata["pre-authorized_grant_anonymous_access_supported"]) {
       return clientAuthenticationAnonymous()(callbackOptions);
     }
     if (method === "client_secret_basic" /* ClientSecretBasic */) {
@@ -2265,7 +2265,7 @@ async function verifyAuthorizationRequestClientAttestation(options, authorizatio
       return void 0;
     }
     throw new Oauth2ServerErrorResponseError({
-      error: "invalid_dpop_proof" /* InvalidDpopProof */,
+      error: "invalid_client" /* InvalidClient */,
       error_description: `Missing required client attestation parameters in pushed authorization request. Make sure to provide the '${oauthClientAttestationHeader}' and '${oauthClientAttestationPopHeader}' header values.`
     });
   }