@openid4vc/oauth2 0.9.1-alpha-20261030145614 → 0.9.1

package/dist/index.d.mts

@@ -2102,6 +2102,8 @@ export declare enum Oauth2ErrorCodes {
   UnknownCredentialConfiguration = "unknown_credential_configuration",
   UnknownCredentialIdentifier = "unknown_credential_identifier",
   InvalidTransactionId = "invalid_transaction_id",
+  InvalidNotificationId = "invalid_notification_id",
+  InvalidNotificationRequest = "invalid_notification_request",
   UnsupportedCredentialType = "unsupported_credential_type",
   UnsupportedCredentialFormat = "unsupported_credential_format",
   MissingInteractionType = "missing_interaction_type",
@@ -4308,5 +4310,5 @@ export declare function verifyResourceRequest(options: VerifyResourceRequestOpti
   authorizationServer: string;
 }>;
 //#endregion
-export { type AccessTokenErrorResponse, type AccessTokenProfileJwtPayload, type AccessTokenResponse, type AuthorizationChallengeErrorResponse, type AuthorizationChallengeRequest, type AuthorizationChallengeResponse, type AuthorizationCodeGrantIdentifier, type AuthorizationRequest, type AuthorizationServerMetadata, type CalculateJwkThumbprintOptions, type CallbackContext, type ClientAttestationChallengeResponse, type ClientAttestationJwtHeader, type ClientAttestationJwtPayload, type ClientAttestationPopJwtHeader, type ClientAttestationPopJwtPayload, type ClientAuthenticationCallback, type ClientAuthenticationCallbackOptions, type ClientAuthenticationClientAttestationJwtDpopOptions, type ClientAuthenticationClientAttestationJwtOptions, type ClientAuthenticationClientSecretBasicOptions, type ClientAuthenticationClientSecretPostOptions, type ClientAuthenticationDynamicOptions, type ClientAuthenticationNoneOptions, type ClientCredentialsGrantIdentifier, type CreateAuthorizationRequestUrlOptions, type CreateClientAttestationJwtOptions, type CreateJarAuthorizationRequestOptions, type CreatePkceReturn, type CreatePushedAuthorizationErrorResponseOptions, type CreatePushedAuthorizationResponseOptions, type DecodeJwtHeaderResult, type DecodeJwtOptions, type DecodeJwtResult, type DecryptJweCallback, type DecryptJweCallbackOptions, type EncryptJweCallback, type GenerateRandomCallback, type GetAuthorizationServerMetadataCallback, type GetJwksCallback, type HashCallback, type HttpMethod, InvalidFetchResponseError, type JarAuthorizationRequest, type JarRequestObjectPayload, type JweEncryptor, type Jwk, type JwkSet, type JwtHeader, type JwtPayload, type JwtSigner, type JwtSignerCustom, type JwtSignerDid, type JwtSignerJwk, type JwtSignerWithJwk, type JwtSignerX5c, type Oauth2AuthorizationServerOptions, type Oauth2ClientOptions, type Oauth2ErrorOptions, type Oauth2ErrorResponse, type Oauth2ResourceServerOptions, type Oid4vcTsConfig, type ParseAuthorizationChallengeRequestOptions, type ParseAuthorizationChallengeRequestResult, type ParseAuthorizationRequestOptions, type ParseAuthorizationRequestResult, type ParsePushedAuthorizationRequestOptions, type ParsePushedAuthorizationRequestResult, type ParsedJarRequest, type ParsedJarRequestOptions, type PreAuthorizedCodeGrantIdentifier, type PushedAuthorizationRequestUriPrefix, type RefreshTokenGrantIdentifier, type RequestClientAttestationChallengeOptions, type RequestClientAttestationOptions, type RequestDpopOptions, type RequestLike, type ResourceRequestOptions, type ResourceRequestResponseNotOk, type ResourceRequestResponseOk, type RetrieveAuthorizationCodeAccessTokenOptions, type RetrieveClientCredentialsAccessTokenOptions, type RetrievePreAuthorizedCodeAccessTokenOptions, type ShouldRetryAuthorizationServerRequestWithClientAttestationChallengeOptions, type SignJwtCallback, type TokenIntrospectionResponse, type VerifiedClientAttestationJwt, type VerifiedJarRequest, type VerifyAccessTokenRequestReturn, type VerifyAuthorizationChallengeRequestOptions, type VerifyAuthorizationChallengeRequestReturn, type VerifyAuthorizationRequestOptions, type VerifyAuthorizationRequestReturn, type VerifyClientAttestationOptions, type VerifyDataIntegrityProofCallback, type VerifyJarRequestOptions, type VerifyJwtCallback, type VerifyPushedAuthorizationRequestOptions, type VerifyPushedAuthorizationRequestReturn, type VerifyResourceRequestOptions, type WwwAuthenticateHeaderChallenge, getGlobalConfig, setGlobalConfig };
+export { type AccessTokenErrorResponse, type AccessTokenProfileJwtPayload, type AccessTokenResponse, type AuthorizationChallengeErrorResponse, type AuthorizationChallengeRequest, type AuthorizationChallengeResponse, type AuthorizationCodeGrantIdentifier, type AuthorizationRequest, type AuthorizationServerMetadata, type CalculateJwkThumbprintOptions, type CallbackContext, type ClientAttestationChallengeResponse, type ClientAttestationJwtHeader, type ClientAttestationJwtPayload, type ClientAttestationPopJwtHeader, type ClientAttestationPopJwtPayload, type ClientAuthenticationCallback, type ClientAuthenticationCallbackOptions, type ClientAuthenticationClientAttestationJwtDpopOptions, type ClientAuthenticationClientAttestationJwtOptions, type ClientAuthenticationClientSecretBasicOptions, type ClientAuthenticationClientSecretPostOptions, type ClientAuthenticationDynamicOptions, type ClientAuthenticationNoneOptions, type ClientCredentialsGrantIdentifier, type CreateAuthorizationRequestUrlOptions, type CreateClientAttestationJwtOptions, type CreateJarAuthorizationRequestOptions, type CreatePkceReturn, type CreatePushedAuthorizationErrorResponseOptions, type CreatePushedAuthorizationResponseOptions, type DecodeJwtHeaderResult, type DecodeJwtOptions, type DecodeJwtResult, type DecryptJweCallback, type DecryptJweCallbackOptions, type EncryptJweCallback, type GenerateRandomCallback, type GetAuthorizationServerMetadataCallback, type GetJwksCallback, type HashCallback, type HttpMethod, InvalidFetchResponseError, type JarAuthorizationRequest, type JarRequestObjectPayload, type JweEncryptor, type Jwk, type JwkSet, type JwtHeader, type JwtPayload, type JwtSigner, type JwtSignerCustom, type JwtSignerDid, type JwtSignerJwk, type JwtSignerWithJwk, type JwtSignerX5c, type Oauth2AuthorizationServerOptions, type Oauth2ClientOptions, type Oauth2ErrorOptions, type Oauth2ErrorResponse, type Oauth2ResourceServerOptions, type Oid4vcTsConfig, type ParseAuthorizationChallengeRequestOptions, type ParseAuthorizationChallengeRequestResult, type ParseAuthorizationRequestOptions, type ParseAuthorizationRequestResult, type ParsePushedAuthorizationRequestOptions, type ParsePushedAuthorizationRequestResult, type ParsedJarRequest, type ParsedJarRequestOptions, type PreAuthorizedCodeGrantIdentifier, type PushedAuthorizationRequestUriPrefix, type RefreshTokenGrantIdentifier, type RequestClientAttestationChallengeOptions, type RequestClientAttestationOptions, type RequestDpopOptions, type RequestLike, type ResourceRequestOptions, type ResourceRequestResponseNotOk, type ResourceRequestResponseOk, type RetrieveAccessTokenReturn, type RetrieveAuthorizationCodeAccessTokenOptions, type RetrieveClientCredentialsAccessTokenOptions, type RetrievePreAuthorizedCodeAccessTokenOptions, type ShouldRetryAuthorizationServerRequestWithClientAttestationChallengeOptions, type SignJwtCallback, type TokenIntrospectionResponse, type VerifiedClientAttestationJwt, type VerifiedJarRequest, type VerifyAccessTokenRequestReturn, type VerifyAuthorizationChallengeRequestOptions, type VerifyAuthorizationChallengeRequestReturn, type VerifyAuthorizationRequestOptions, type VerifyAuthorizationRequestReturn, type VerifyClientAttestationOptions, type VerifyDataIntegrityProofCallback, type VerifyJarRequestOptions, type VerifyJwtCallback, type VerifyPushedAuthorizationRequestOptions, type VerifyPushedAuthorizationRequestReturn, type VerifyResourceRequestOptions, type WwwAuthenticateHeaderChallenge, getGlobalConfig, setGlobalConfig };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -456,6 +456,8 @@ let Oauth2ErrorCodes = /* @__PURE__ */ function(Oauth2ErrorCodes) {
 	Oauth2ErrorCodes["UnknownCredentialConfiguration"] = "unknown_credential_configuration";
 	Oauth2ErrorCodes["UnknownCredentialIdentifier"] = "unknown_credential_identifier";
 	Oauth2ErrorCodes["InvalidTransactionId"] = "invalid_transaction_id";
+	Oauth2ErrorCodes["InvalidNotificationId"] = "invalid_notification_id";
+	Oauth2ErrorCodes["InvalidNotificationRequest"] = "invalid_notification_request";
 	Oauth2ErrorCodes["UnsupportedCredentialType"] = "unsupported_credential_type";
 	Oauth2ErrorCodes["UnsupportedCredentialFormat"] = "unsupported_credential_format";
 	Oauth2ErrorCodes["MissingInteractionType"] = "missing_interaction_type";
@@ -2929,6 +2931,7 @@ var Oauth2Client = class {
 			callbacks: this.options.callbacks,
 			codeVerifier: options.pkceCodeVerifier
 		}) : void 0;
+		let dpop = options.dpop;
 		if (options.authorizationServerMetadata.authorization_challenge_endpoint) try {
 			await this.sendAuthorizationChallengeRequest({
 				authorizationServerMetadata: options.authorizationServerMetadata,
@@ -2937,22 +2940,23 @@ var Oauth2Client = class {
 				redirectUri: options.redirectUri,
 				scope: options.scope,
 				resource: options.resource,
-				dpop: options.dpop,
+				dpop,
 				state: options.state
 			});
 		} catch (error) {
 			if (!(error instanceof Oauth2ClientAuthorizationChallengeError && error.errorResponse.error === "redirect_to_web")) throw error;
+			const dpopNonce = extractDpopNonceFromHeaders(error.response.headers);
+			if (dpop && dpopNonce) dpop = {
+				...dpop,
+				nonce: dpopNonce
+			};
 			if (error.errorResponse.request_uri) {
 				const authorizationRequestUrl = `${options.authorizationServerMetadata.authorization_endpoint}?${objectToQueryParams({
 					request_uri: error.errorResponse.request_uri,
 					client_id: options.clientId
 				}).toString()}`;
-				const dpopNonce = extractDpopNonceFromHeaders(error.response.headers);
 				return {
-					dpop: options.dpop ? {
-						...options.dpop,
-						nonce: dpopNonce ?? void 0
-					} : void 0,
+					dpop,
 					authorizationRequestUrl,
 					pkce
 				};
@@ -2966,7 +2970,7 @@ var Oauth2Client = class {
 			scope: options.scope,
 			pkceCodeVerifier: pkce?.codeVerifier,
 			resource: options.resource,
-			dpop: options.dpop,
+			dpop,
 			state: options.state
 		});
 	}