@openid4vc/openid4vci 0.3.0-alpha-20251112081659 → 0.3.0-alpha-20251113095648

package/dist/index.cjs

@@ -259,7 +259,7 @@ const zCredentialConfigurationSupportedCommonDraft15 = zod.default.object({
 	format: zod.default.string(),
 	scope: zod.default.string().optional(),
 	cryptographic_binding_methods_supported: zod.default.array(zod.default.string()).optional(),
-	credential_signing_alg_values_supported: zod.default.array(zod.default.string()).or(zod.default.array(zod.default.number())).optional(),
+	credential_signing_alg_values_supported: zod.default.array(zod.default.string()).optional(),
 	proof_types_supported: zod.default.record(zod.default.union([
 		zod.default.literal("jwt"),
 		zod.default.literal("attestation"),
@@ -281,6 +281,7 @@ const zMsoMdocFormatIdentifier = zod.default.literal("mso_mdoc");
 const zMsoMdocCredentialIssuerMetadata = zCredentialConfigurationSupportedCommon.extend({
 	format: zMsoMdocFormatIdentifier,
 	doctype: zod.default.string(),
+	credential_signing_alg_values_supported: zod.default.array(zod.default.number()).optional(),
 	credential_metadata: zCredentialConfigurationSupportedCommonCredentialMetadata.extend({ claims: zod.default.array(zMsoMdocIssuerMetadataClaimsDescription).optional() }).optional()
 });
 const zMsoMdocCredentialIssuerMetadataDraft15 = zCredentialConfigurationSupportedCommonDraft15.extend({
@@ -306,6 +307,7 @@ const zSdJwtDcFormatIdentifier = zod.default.literal("dc+sd-jwt");
 const zSdJwtDcCredentialIssuerMetadata = zCredentialConfigurationSupportedCommon.extend({
 	vct: zod.default.string(),
 	format: zSdJwtDcFormatIdentifier,
+	credential_signing_alg_values_supported: zod.default.array(zod.default.string()).optional(),
 	credential_metadata: zCredentialConfigurationSupportedCommonCredentialMetadata.extend({ claims: zod.default.array(zIssuerMetadataClaimsDescription).optional() }).optional()
 });
 const zSdJwtDcCredentialIssuerMetadataDraft15 = zCredentialConfigurationSupportedCommonDraft15.extend({
@@ -331,6 +333,7 @@ const zLegacySdJwtVcCredentialIssuerMetadataV1 = zCredentialConfigurationSupport
 	vct: zod.default.string(),
 	format: zLegacySdJwtVcFormatIdentifier,
 	order: zod.default.optional(zod.default.array(zod.default.string())),
+	credential_signing_alg_values_supported: zod.default.array(zod.default.string()).optional(),
 	credential_metadata: zCredentialConfigurationSupportedCommonCredentialMetadata.extend({ claims: zod.default.array(zIssuerMetadataClaimsDescription).optional() }).optional(),
 	credential_definition: zod.default.optional(zod.default.never())
 });
@@ -388,6 +391,7 @@ const zJwtVcJsonCredentialDefinitionDraft14 = zJwtVcJsonCredentialDefinition.ext
 const zJwtVcJsonCredentialIssuerMetadata = zCredentialConfigurationSupportedCommon.extend({
 	format: zJwtVcJsonFormatIdentifier,
 	credential_definition: zJwtVcJsonCredentialDefinition,
+	credential_signing_alg_values_supported: zod.default.array(zod.default.string()).optional(),
 	credential_metadata: zCredentialConfigurationSupportedCommonCredentialMetadata.extend({ claims: zod.default.array(zIssuerMetadataClaimsDescription).optional() }).optional()
 });
 const zJwtVcJsonCredentialIssuerMetadataDraft15 = zCredentialConfigurationSupportedCommonDraft15.extend({
@@ -448,6 +452,7 @@ const zJwtVcJsonLdFormatIdentifier = zod.default.literal("jwt_vc_json-ld");
 const zJwtVcJsonLdCredentialIssuerMetadata = zCredentialConfigurationSupportedCommon.extend({
 	format: zJwtVcJsonLdFormatIdentifier,
 	credential_definition: zW3cVcJsonLdCredentialDefinition,
+	credential_signing_alg_values_supported: zod.default.array(zod.default.string()).optional(),
 	credential_metadata: zCredentialConfigurationSupportedCommonCredentialMetadata.extend({ claims: zod.default.array(zIssuerMetadataClaimsDescription).optional() }).optional()
 });
 const zJwtVcJsonLdCredentialIssuerMetadataDraft15 = zCredentialConfigurationSupportedCommonDraft15.extend({
@@ -513,6 +518,7 @@ const zLdpVcFormatIdentifier = zod.default.literal("ldp_vc");
 const zLdpVcCredentialIssuerMetadata = zCredentialConfigurationSupportedCommon.extend({
 	format: zLdpVcFormatIdentifier,
 	credential_definition: zW3cVcJsonLdCredentialDefinition,
+	credential_signing_alg_values_supported: zod.default.array(zod.default.string()).optional(),
 	credential_metadata: zCredentialConfigurationSupportedCommonCredentialMetadata.extend({ claims: zod.default.array(zIssuerMetadataClaimsDescription).optional() }).optional()
 });
 const zLdpVcCredentialIssuerMetadataDraft15 = zCredentialConfigurationSupportedCommonDraft15.extend({
@@ -579,6 +585,7 @@ const zSdJwtW3VcCredentialDefinition = zod.default.object({ type: zod.default.tu
 const zSdJwtW3VcCredentialIssuerMetadata = zCredentialConfigurationSupportedCommon.extend({
 	format: zSdJwtW3VcFormatIdentifier,
 	credential_definition: zSdJwtW3VcCredentialDefinition,
+	credential_signing_alg_values_supported: zod.default.array(zod.default.string()).optional(),
 	credential_metadata: zCredentialConfigurationSupportedCommonCredentialMetadata.extend({ claims: zod.default.array(zIssuerMetadataClaimsDescription).optional() }).optional(),
 	vct: zod.default.optional(zod.default.never())
 });
@@ -652,7 +659,7 @@ const zCredentialIssuerMetadataDraft14Draft15V1 = zod.default.object({
 	display: zod.default.array(zCredentialIssuerMetadataDisplayEntry).optional(),
 	credential_configurations_supported: zod.default.record(zod.default.string(), zCredentialConfigurationSupportedWithFormats)
 }).loose();
-const zCredentialConfigurationSupportedDraft11To16 = zod.default.object({
+const zCredentialConfigurationSupportedDraft11ToV1 = zod.default.object({
 	id: zod.default.string().optional(),
 	format: zod.default.string(),
 	cryptographic_suites_supported: zod.default.array(zod.default.string()).optional(),
@@ -661,9 +668,10 @@ const zCredentialConfigurationSupportedDraft11To16 = zod.default.object({
 		background_image: zod.default.object({ url: zod.default.url().optional() }).loose().optional()
 	}).loose()).optional(),
 	claims: zod.default.any().optional()
-}).loose().transform(({ cryptographic_suites_supported, display, claims, id,...rest }) => ({
+}).loose().transform(({ cryptographic_suites_supported, display, claims, id, format,...rest }) => ({
 	...rest,
-	...cryptographic_suites_supported ? { credential_signing_alg_values_supported: cryptographic_suites_supported } : {},
+	format,
+	...cryptographic_suites_supported ? { credential_signing_alg_values_supported: format === zMsoMdocFormatIdentifier.value ? (0, __openid4vc_oauth2.jwaSignatureAlgorithmArrayToFullySpecifiedCoseAlgorithmArray)(cryptographic_suites_supported) : cryptographic_suites_supported } : {},
 	...claims || display ? { credential_metadata: {
 		...claims ? { claims } : {},
 		...display ? { display: display.map(({ logo, background_image,...displayRest }) => ({
@@ -690,9 +698,10 @@ const zCredentialConfigurationSupportedDraft11To16 = zod.default.object({
 const zCredentialConfigurationSupportedV1ToDraft11 = zCredentialConfigurationSupportedWithFormats.transform(({ credential_metadata,...rest }) => ({
 	...credential_metadata,
 	...rest
-})).and(zod.default.object({ id: zod.default.string() }).loose()).transform(({ id, credential_signing_alg_values_supported, display, proof_types_supported, scope,...rest }) => ({
+})).and(zod.default.object({ id: zod.default.string() }).loose()).transform(({ id, credential_signing_alg_values_supported, display, proof_types_supported, scope, format,...rest }) => ({
 	...rest,
-	...credential_signing_alg_values_supported ? { cryptographic_suites_supported: credential_signing_alg_values_supported } : {},
+	format,
+	...credential_signing_alg_values_supported ? { cryptographic_suites_supported: format === zMsoMdocFormatIdentifier.value && typeof credential_signing_alg_values_supported[0] === "number" ? (0, __openid4vc_oauth2.fullySpecifiedCoseAlgorithmArrayToJwaSignatureAlgorithmArray)(credential_signing_alg_values_supported) : credential_signing_alg_values_supported } : {},
 	...display ? { display: display.map(({ logo, background_image,...displayRest }) => {
 		const { uri: logoUri,...logoRest } = logo ?? {};
 		const { uri: backgroundImageUri,...backgroundImageRest } = background_image ?? {};
@@ -719,7 +728,7 @@ const zCredentialConfigurationSupportedV1ToDraft11 = zCredentialConfigurationSup
 		zJwtVcJsonLdFormatIdentifier.value
 	].includes(input)) }).loose()
 ]));
-const zCredentialIssuerMetadataDraft11To16 = zod.default.object({
+const zCredentialIssuerMetadataDraft11ToV1 = zod.default.object({
 	authorization_server: zod.default.string().optional(),
 	credentials_supported: zod.default.array(zod.default.object({ id: zod.default.string().optional() }).loose())
 }).loose().transform(({ authorization_server, credentials_supported,...rest }) => {
@@ -728,7 +737,7 @@ const zCredentialIssuerMetadataDraft11To16 = zod.default.object({
 		...authorization_server ? { authorization_servers: [authorization_server] } : {},
 		credential_configurations_supported: Object.fromEntries(credentials_supported.map((supported) => supported.id ? [supported.id, supported] : void 0).filter((i) => i !== void 0))
 	};
-}).pipe(zod.default.object({ credential_configurations_supported: zod.default.record(zod.default.string(), zCredentialConfigurationSupportedDraft11To16) }).loose()).pipe(zCredentialIssuerMetadataDraft14Draft15V1);
+}).pipe(zod.default.object({ credential_configurations_supported: zod.default.record(zod.default.string(), zCredentialConfigurationSupportedDraft11ToV1) }).loose()).pipe(zCredentialIssuerMetadataDraft14Draft15V1);
 const zCredentialIssuerMetadataWithDraft11 = zCredentialIssuerMetadataDraft14Draft15V1.transform((issuerMetadata) => ({
 	...issuerMetadata,
 	...issuerMetadata.authorization_servers ? { authorization_server: issuerMetadata.authorization_servers[0] } : {},
@@ -737,7 +746,7 @@ const zCredentialIssuerMetadataWithDraft11 = zCredentialIssuerMetadataDraft14Dra
 		id
 	}))
 })).pipe(zCredentialIssuerMetadataDraft14Draft15V1.extend({ credentials_supported: zod.default.array(zCredentialConfigurationSupportedV1ToDraft11) }));
-const zCredentialIssuerMetadata = zod.default.union([zCredentialIssuerMetadataDraft14Draft15V1, zCredentialIssuerMetadataDraft11To16]);
+const zCredentialIssuerMetadata = zod.default.union([zCredentialIssuerMetadataDraft14Draft15V1, zCredentialIssuerMetadataDraft11ToV1]);
 const zCredentialIssuerMetadataWithDraftVersion = zod.default.union([zCredentialIssuerMetadataDraft14Draft15V1.transform((credentialIssuerMetadata) => {
 	const credentialConfigurations = Object.values(credentialIssuerMetadata.credential_configurations_supported);
 	const isDraft15 = credentialConfigurations.some((configuration) => {
@@ -749,9 +758,9 @@ const zCredentialIssuerMetadataWithDraftVersion = zod.default.union([zCredential
 	});
 	return {
 		credentialIssuerMetadata,
-		originalDraftVersion: credentialConfigurations.some((configuration) => configuration.credential_metadata) ? Openid4vciDraftVersion.V1 : isDraft15 ? Openid4vciDraftVersion.Draft15 : Openid4vciDraftVersion.Draft14
+		originalDraftVersion: credentialConfigurations.some((configuration) => configuration.credential_metadata || configuration.format === "mso_mdoc" && configuration.credential_signing_alg_values_supported?.some((supported) => typeof supported === "number")) ? Openid4vciDraftVersion.V1 : isDraft15 ? Openid4vciDraftVersion.Draft15 : Openid4vciDraftVersion.Draft14
 	};
-}), zCredentialIssuerMetadataDraft11To16.transform((credentialIssuerMetadata) => ({
+}), zCredentialIssuerMetadataDraft11ToV1.transform((credentialIssuerMetadata) => ({
 	credentialIssuerMetadata,
 	originalDraftVersion: Openid4vciDraftVersion.Draft11
 }))]);
@@ -973,7 +982,7 @@ function credentialsSupportedToCredentialConfigurationsSupported(credentialsSupp
 	for (let index = 0; index < credentialsSupported.length; index++) {
 		const credentialSupported = credentialsSupported[index];
 		if (!credentialSupported.id) throw new Openid4vciError(`Credential supported at index '${index}' does not have an 'id' property. Credential configuration requires the 'id' property as key`);
-		const parseResult = zCredentialConfigurationSupportedDraft11To16.safeParse(credentialSupported);
+		const parseResult = zCredentialConfigurationSupportedDraft11ToV1.safeParse(credentialSupported);
 		if (!parseResult.success) throw new __openid4vc_utils.ValidationError(`Error transforming credential supported with id '${credentialSupported.id}' to credential configuration supported format`, parseResult.error);
 		credentialConfigurationsSupported[credentialSupported.id] = parseResult.data;
 	}