@openid4vc/openid4vci 0.3.0 → 0.3.1-alpha-20251124151046

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import { ContentType, Fetch, FetchHeaders, HttpMethod, InferOutputUnion, Oid4vcTsConfig, OrPromise, StringWithAutoCompletion, getGlobalConfig, setGlobalConfig } from "@openid4vc/utils";
-import * as _openid4vc_oauth28 from "@openid4vc/oauth2";
+import * as _openid4vc_oauth20 from "@openid4vc/oauth2";
 import { AuthorizationCodeGrantIdentifier, AuthorizationServerMetadata, CallbackContext, CreateAuthorizationRequestUrlOptions, CreateClientAttestationJwtOptions, CreatePkceReturn, DecodeJwtResult, Jwk, JwtSigner, JwtSignerWithJwk, PreAuthorizedCodeGrantIdentifier, RequestDpopOptions, ResourceRequestResponseNotOk, ResourceRequestResponseOk, RetrieveAuthorizationCodeAccessTokenOptions, RetrievePreAuthorizedCodeAccessTokenOptions, authorizationCodeGrantIdentifier, preAuthorizedCodeGrantIdentifier } from "@openid4vc/oauth2";
 import * as zod0 from "zod";
 import z from "zod";
@@ -2643,7 +2643,7 @@ interface ParseKeyAttestationJwtOptions {
 declare function parseKeyAttestationJwt({
   keyAttestationJwt,
   use
-}: ParseKeyAttestationJwtOptions): _openid4vc_oauth28.DecodeJwtResult<zod0.ZodObject<{
+}: ParseKeyAttestationJwtOptions): _openid4vc_oauth20.DecodeJwtResult<zod0.ZodObject<{
   typ: zod0.ZodUnion<[zod0.ZodLiteral<"keyattestation+jwt">, zod0.ZodLiteral<"key-attestation+jwt">]>;
   alg: zod0.ZodString;
   kid: zod0.ZodOptional<zod0.ZodString>;
@@ -2917,7 +2917,7 @@ declare function verifyKeyAttestationJwt(options: VerifyKeyAttestationJwtOptions
     status?: Record<string, any> | undefined;
     trust_chain?: [string, ...string[]] | undefined;
   };
-  signer: _openid4vc_oauth28.JwtSignerWithJwk;
+  signer: _openid4vc_oauth20.JwtSignerWithJwk;
 }>;
 //#endregion
 //#region src/metadata/credential-issuer/credential-configurations.d.ts
@@ -3081,7 +3081,7 @@ declare class Openid4vciClient {
     };
     dpop: {
       nonce: string | undefined;
-      signer: _openid4vc_oauth28.JwtSignerJwk;
+      signer: _openid4vc_oauth20.JwtSignerJwk;
     } | undefined;
   }>;
   /**
@@ -3140,7 +3140,7 @@ declare class Openid4vciClient {
     issuerMetadata: IssuerMetadataResult;
   }): Promise<{
     authorizationServer: string;
-    accessTokenResponse: _openid4vc_oauth28.AccessTokenResponse;
+    accessTokenResponse: _openid4vc_oauth20.AccessTokenResponse;
     dpop?: RequestDpopOptions;
   }>;
   /**
@@ -3160,7 +3160,7 @@ declare class Openid4vciClient {
     issuerMetadata: IssuerMetadataResult;
   }): Promise<{
     authorizationServer: string;
-    accessTokenResponse: _openid4vc_oauth28.AccessTokenResponse;
+    accessTokenResponse: _openid4vc_oauth20.AccessTokenResponse;
     dpop?: RequestDpopOptions;
   }>;
   /**
@@ -3215,7 +3215,7 @@ declare class Openid4vciClient {
     additionalRequestPayload,
     accessToken,
     dpop
-  }: Pick<SendNotificationOptions, 'accessToken' | 'additionalRequestPayload' | 'issuerMetadata' | 'dpop' | 'notification'>): Promise<_openid4vc_oauth28.ResourceRequestResponseOk>;
+  }: Pick<SendNotificationOptions, 'accessToken' | 'additionalRequestPayload' | 'issuerMetadata' | 'dpop' | 'notification'>): Promise<_openid4vc_oauth20.ResourceRequestResponseOk>;
 }
 //#endregion
 //#region ../oauth2/src/common/jwk/z-jwk.d.ts
@@ -3901,7 +3901,7 @@ declare class Openid4vciIssuer {
       status?: Record<string, any> | undefined;
       trust_chain?: [string, ...string[]] | undefined;
     };
-    signer: _openid4vc_oauth28.JwtSignerWithJwk;
+    signer: _openid4vc_oauth20.JwtSignerWithJwk;
     keyAttestation: {
       header: {
         [x: string]: unknown;
@@ -4024,7 +4024,7 @@ declare class Openid4vciIssuer {
         status?: Record<string, any> | undefined;
         trust_chain?: [string, ...string[]] | undefined;
       };
-      signer: _openid4vc_oauth28.JwtSignerWithJwk;
+      signer: _openid4vc_oauth20.JwtSignerWithJwk;
     } | undefined;
   }>;
   /**
@@ -4155,7 +4155,7 @@ declare class Openid4vciIssuer {
       status?: Record<string, any> | undefined;
       trust_chain?: [string, ...string[]] | undefined;
     };
-    signer: _openid4vc_oauth28.JwtSignerWithJwk;
+    signer: _openid4vc_oauth20.JwtSignerWithJwk;
   }>;
   /**
    * @throws Oauth2ServerErrorResponseError - when validation of the credential request fails
@@ -4291,7 +4291,7 @@ declare class Openid4vciIssuer {
         status?: Record<string, any> | undefined;
         trust_chain?: [string, ...string[]] | undefined;
       };
-      signer: _openid4vc_oauth28.JwtSignerWithJwk;
+      signer: _openid4vc_oauth20.JwtSignerWithJwk;
     };
     clientAttestationPop: {
       header: {
@@ -4381,7 +4381,7 @@ declare class Openid4vciIssuer {
         status?: Record<string, any> | undefined;
         trust_chain?: [string, ...string[]] | undefined;
       };
-      signer: _openid4vc_oauth28.JwtSignerWithJwk;
+      signer: _openid4vc_oauth20.JwtSignerWithJwk;
     };
   }>;
 }

package/dist/index.mjs

@@ -44,7 +44,7 @@ const zCredentialOfferObjectDraft11To14 = z.object({
 			user_pin_required: z.optional(z.boolean())
 		}).loose().optional()
 	}))
-}).loose().transform(({ credentials, grants,...rest }) => {
+}).loose().transform(({ credentials, grants, ...rest }) => {
 	const v14 = {
 		...rest,
 		credential_configuration_ids: credentials
@@ -52,7 +52,7 @@ const zCredentialOfferObjectDraft11To14 = z.object({
 	if (grants) {
 		v14.grants = { ...grants };
 		if (grants[preAuthorizedCodeGrantIdentifier]) {
-			const { user_pin_required,...restGrants } = grants[preAuthorizedCodeGrantIdentifier];
+			const { user_pin_required, ...restGrants } = grants[preAuthorizedCodeGrantIdentifier];
 			v14.grants[preAuthorizedCodeGrantIdentifier] = { ...restGrants };
 			if (user_pin_required) v14.grants[preAuthorizedCodeGrantIdentifier].tx_code = { input_mode: "text" };
 		}
@@ -101,7 +101,7 @@ function determineAuthorizationServerForCredentialOffer(options) {
 	return authorizationServer;
 }
 async function createCredentialOffer(options) {
-	const { [preAuthorizedCodeGrantIdentifier]: preAuthorizedCodeGrant, [authorizationCodeGrantIdentifier]: authorizationCodeGrant,...restGrants } = options.grants;
+	const { [preAuthorizedCodeGrantIdentifier]: preAuthorizedCodeGrant, [authorizationCodeGrantIdentifier]: authorizationCodeGrant, ...restGrants } = options.grants;
 	const grants = { ...restGrants };
 	if (authorizationCodeGrant) {
 		determineAuthorizationServerForCredentialOffer({
@@ -492,14 +492,14 @@ const zJwtVcJsonCredentialIssuerMetadataDraft11 = z.object({
 	types: z.tuple([z.string()], z.string()),
 	credentialSubject: zW3cVcCredentialSubjectDraft14.optional()
 }).loose();
-const zJwtVcJsonCredentialIssuerMetadataDraft11To14 = zJwtVcJsonCredentialIssuerMetadataDraft11.transform(({ types, credentialSubject,...rest }) => ({
+const zJwtVcJsonCredentialIssuerMetadataDraft11To14 = zJwtVcJsonCredentialIssuerMetadataDraft11.transform(({ types, credentialSubject, ...rest }) => ({
 	...rest,
 	credential_definition: {
 		type: types,
 		...credentialSubject ? { credentialSubject } : {}
 	}
 }));
-const zJwtVcJsonCredentialIssuerMetadataDraft14To11 = zJwtVcJsonCredentialIssuerMetadataDraft14.loose().transform(({ credential_definition: { type,...credentialDefinition },...rest }) => ({
+const zJwtVcJsonCredentialIssuerMetadataDraft14To11 = zJwtVcJsonCredentialIssuerMetadataDraft14.loose().transform(({ credential_definition: { type, ...credentialDefinition }, ...rest }) => ({
 	...rest,
 	types: type,
 	...credentialDefinition
@@ -513,7 +513,7 @@ const zJwtVcJsonCredentialRequestDraft11 = z.object({
 	types: z.tuple([z.string()], z.string()),
 	credentialSubject: z.optional(zW3cVcCredentialSubjectDraft14)
 }).loose();
-const zJwtVcJsonCredentialRequestDraft11To14 = zJwtVcJsonCredentialRequestDraft11.transform(({ types, credentialSubject,...rest }) => {
+const zJwtVcJsonCredentialRequestDraft11To14 = zJwtVcJsonCredentialRequestDraft11.transform(({ types, credentialSubject, ...rest }) => {
 	return {
 		...rest,
 		credential_definition: {
@@ -522,7 +522,7 @@ const zJwtVcJsonCredentialRequestDraft11To14 = zJwtVcJsonCredentialRequestDraft1
 		}
 	};
 });
-const zJwtVcJsonCredentialRequestDraft14To11 = zJwtVcJsonCredentialRequestFormatDraft14.loose().transform(({ credential_definition: { type,...credentialDefinition },...rest }) => ({
+const zJwtVcJsonCredentialRequestDraft14To11 = zJwtVcJsonCredentialRequestFormatDraft14.loose().transform(({ credential_definition: { type, ...credentialDefinition }, ...rest }) => ({
 	...rest,
 	types: type,
 	...credentialDefinition
@@ -554,7 +554,7 @@ const zJwtVcJsonLdCredentialIssuerMetadataDraft11 = z.object({
 	types: z.tuple([z.string()], z.string()),
 	credentialSubject: zW3cVcCredentialSubjectDraft14.optional()
 }).loose();
-const zJwtVcJsonLdCredentialIssuerMetadataDraft11To14 = zJwtVcJsonLdCredentialIssuerMetadataDraft11.transform(({ "@context": context, types, credentialSubject,...rest }) => ({
+const zJwtVcJsonLdCredentialIssuerMetadataDraft11To14 = zJwtVcJsonLdCredentialIssuerMetadataDraft11.transform(({ "@context": context, types, credentialSubject, ...rest }) => ({
 	...rest,
 	credential_definition: {
 		"@context": context,
@@ -562,7 +562,7 @@ const zJwtVcJsonLdCredentialIssuerMetadataDraft11To14 = zJwtVcJsonLdCredentialIs
 		...credentialSubject ? { credentialSubject } : {}
 	}
 }));
-const zJwtVcJsonLdCredentialIssuerMetadataDraft14To11 = zJwtVcJsonLdCredentialIssuerMetadataDraft14.loose().transform(({ credential_definition: { type,...credentialDefinition },...rest }) => ({
+const zJwtVcJsonLdCredentialIssuerMetadataDraft14To11 = zJwtVcJsonLdCredentialIssuerMetadataDraft14.loose().transform(({ credential_definition: { type, ...credentialDefinition }, ...rest }) => ({
 	...rest,
 	...credentialDefinition,
 	types: type
@@ -579,14 +579,14 @@ const zJwtVcJsonLdCredentialRequestDraft11 = z.object({
 		credentialSubject: z.optional(zW3cVcCredentialSubjectDraft14)
 	}).loose()
 }).loose();
-const zJwtVcJsonLdCredentialRequestDraft11To14 = zJwtVcJsonLdCredentialRequestDraft11.transform(({ credential_definition: { types,...restCredentialDefinition },...rest }) => ({
+const zJwtVcJsonLdCredentialRequestDraft11To14 = zJwtVcJsonLdCredentialRequestDraft11.transform(({ credential_definition: { types, ...restCredentialDefinition }, ...rest }) => ({
 	...rest,
 	credential_definition: {
 		...restCredentialDefinition,
 		type: types
 	}
 }));
-const zJwtVcJsonLdCredentialRequestDraft14To11 = zJwtVcJsonLdCredentialRequestFormatDraft14.loose().transform(({ credential_definition: { type,...restCredentialDefinition },...rest }) => ({
+const zJwtVcJsonLdCredentialRequestDraft14To11 = zJwtVcJsonLdCredentialRequestFormatDraft14.loose().transform(({ credential_definition: { type, ...restCredentialDefinition }, ...rest }) => ({
 	...rest,
 	credential_definition: {
 		...restCredentialDefinition,
@@ -620,7 +620,7 @@ const zLdpVcCredentialIssuerMetadataDraft11 = z.object({
 	types: z.tuple([z.string()], z.string()),
 	credentialSubject: zW3cVcCredentialSubjectDraft14.optional()
 }).loose();
-const zLdpVcCredentialIssuerMetadataDraft11To14 = zLdpVcCredentialIssuerMetadataDraft11.transform(({ "@context": context, types, credentialSubject,...rest }) => ({
+const zLdpVcCredentialIssuerMetadataDraft11To14 = zLdpVcCredentialIssuerMetadataDraft11.transform(({ "@context": context, types, credentialSubject, ...rest }) => ({
 	...rest,
 	credential_definition: {
 		"@context": context,
@@ -628,7 +628,7 @@ const zLdpVcCredentialIssuerMetadataDraft11To14 = zLdpVcCredentialIssuerMetadata
 		...credentialSubject ? { credentialSubject } : {}
 	}
 }));
-const zLdpVcCredentialIssuerMetadataDraft14To11 = zLdpVcCredentialIssuerMetadataDraft14.loose().transform(({ credential_definition: { type,...credentialDefinition },...rest }) => ({
+const zLdpVcCredentialIssuerMetadataDraft14To11 = zLdpVcCredentialIssuerMetadataDraft14.loose().transform(({ credential_definition: { type, ...credentialDefinition }, ...rest }) => ({
 	...rest,
 	...credentialDefinition,
 	types: type
@@ -645,14 +645,14 @@ const zLdpVcCredentialRequestDraft11 = z.object({
 		credentialSubject: zW3cVcCredentialSubjectDraft14.optional()
 	})
 }).loose();
-const zLdpVcCredentialRequestDraft11To14 = zLdpVcCredentialRequestDraft11.transform(({ credential_definition: { types,...restCredentialDefinition },...rest }) => ({
+const zLdpVcCredentialRequestDraft11To14 = zLdpVcCredentialRequestDraft11.transform(({ credential_definition: { types, ...restCredentialDefinition }, ...rest }) => ({
 	...rest,
 	credential_definition: {
 		...restCredentialDefinition,
 		type: types
 	}
 }));
-const zLdpVcCredentialRequestDraft14To11 = zLdpVcCredentialRequestFormatDraft14.loose().transform(({ credential_definition: { type,...restCredentialDefinition },...rest }) => ({
+const zLdpVcCredentialRequestDraft14To11 = zLdpVcCredentialRequestFormatDraft14.loose().transform(({ credential_definition: { type, ...restCredentialDefinition }, ...rest }) => ({
 	...rest,
 	credential_definition: {
 		...restCredentialDefinition,
@@ -750,13 +750,13 @@ const zCredentialConfigurationSupportedDraft11ToV1 = z.object({
 		background_image: z.object({ url: zHttpsUrl.or(zDataUrl).optional() }).loose().optional()
 	}).loose()).optional(),
 	claims: z.any().optional()
-}).loose().transform(({ cryptographic_suites_supported, display, claims, id, format,...rest }) => ({
+}).loose().transform(({ cryptographic_suites_supported, display, claims, id, format, ...rest }) => ({
 	...rest,
 	format,
 	...cryptographic_suites_supported ? { credential_signing_alg_values_supported: format === zMsoMdocFormatIdentifier.value ? jwaSignatureAlgorithmArrayToFullySpecifiedCoseAlgorithmArray(cryptographic_suites_supported) : cryptographic_suites_supported } : {},
 	...claims || display ? { credential_metadata: {
 		...claims ? { claims } : {},
-		...display ? { display: display.map(({ logo, background_image,...displayRest }) => ({
+		...display ? { display: display.map(({ logo, background_image, ...displayRest }) => ({
 			...displayRest,
 			...logo?.url ? { logo: { uri: logo.url } } : {},
 			...background_image?.url ? { background_image: { uri: background_image.url } } : {}
@@ -777,16 +777,16 @@ const zCredentialConfigurationSupportedDraft11ToV1 = z.object({
 	});
 	return z.NEVER;
 }).pipe(zCredentialConfigurationSupportedWithFormats);
-const zCredentialConfigurationSupportedV1ToDraft11 = zCredentialConfigurationSupportedWithFormats.transform(({ credential_metadata,...rest }) => ({
+const zCredentialConfigurationSupportedV1ToDraft11 = zCredentialConfigurationSupportedWithFormats.transform(({ credential_metadata, ...rest }) => ({
 	...credential_metadata,
 	...rest
-})).and(z.object({ id: z.string() }).loose()).transform(({ id, credential_signing_alg_values_supported, display, proof_types_supported, scope, format,...rest }) => ({
+})).and(z.object({ id: z.string() }).loose()).transform(({ id, credential_signing_alg_values_supported, display, proof_types_supported, scope, format, ...rest }) => ({
 	...rest,
 	format,
 	...credential_signing_alg_values_supported ? { cryptographic_suites_supported: format === zMsoMdocFormatIdentifier.value && typeof credential_signing_alg_values_supported[0] === "number" ? fullySpecifiedCoseAlgorithmArrayToJwaSignatureAlgorithmArray(credential_signing_alg_values_supported) : credential_signing_alg_values_supported } : {},
-	...display ? { display: display.map(({ logo, background_image,...displayRest }) => {
-		const { uri: logoUri,...logoRest } = logo ?? {};
-		const { uri: backgroundImageUri,...backgroundImageRest } = background_image ?? {};
+	...display ? { display: display.map(({ logo, background_image, ...displayRest }) => {
+		const { uri: logoUri, ...logoRest } = logo ?? {};
+		const { uri: backgroundImageUri, ...backgroundImageRest } = background_image ?? {};
 		return {
 			...displayRest,
 			...logoUri ? { logo: {
@@ -813,7 +813,7 @@ const zCredentialConfigurationSupportedV1ToDraft11 = zCredentialConfigurationSup
 const zCredentialIssuerMetadataDraft11ToV1 = z.object({
 	authorization_server: z.string().optional(),
 	credentials_supported: z.array(z.object({ id: z.string().optional() }).loose())
-}).loose().transform(({ authorization_server, credentials_supported,...rest }) => {
+}).loose().transform(({ authorization_server, credentials_supported, ...rest }) => {
 	return {
 		...rest,
 		...authorization_server ? { authorization_servers: [authorization_server] } : {},