@openid4vc/openid4vci 0.3.1-alpha-20251124151046 → 0.4.0-alpha-20251127093634

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/package.json +5 -6
  2. package/dist/index.cjs +0 -2157
  3. package/dist/index.cjs.map +0 -1
  4. package/dist/index.d.cts +0 -4407
package/dist/index.d.cts DELETED
@@ -1,4407 +0,0 @@
1
- import { ContentType, Fetch, FetchHeaders, HttpMethod, InferOutputUnion, Oid4vcTsConfig, OrPromise, StringWithAutoCompletion, getGlobalConfig, setGlobalConfig } from "@openid4vc/utils";
2
- import * as _openid4vc_oauth20 from "@openid4vc/oauth2";
3
- import { AuthorizationCodeGrantIdentifier, AuthorizationServerMetadata, CallbackContext, CreateAuthorizationRequestUrlOptions, CreateClientAttestationJwtOptions, CreatePkceReturn, DecodeJwtResult, Jwk, JwtSigner, JwtSignerWithJwk, PreAuthorizedCodeGrantIdentifier, RequestDpopOptions, ResourceRequestResponseNotOk, ResourceRequestResponseOk, RetrieveAuthorizationCodeAccessTokenOptions, RetrievePreAuthorizedCodeAccessTokenOptions, authorizationCodeGrantIdentifier, preAuthorizedCodeGrantIdentifier } from "@openid4vc/oauth2";
4
- import * as zod0 from "zod";
5
- import z from "zod";
6
- import * as zod_v4_core0 from "zod/v4/core";
7
-
8
- //#region src/version.d.ts
9
- declare enum Openid4vciDraftVersion {
10
- V1 = "V1",
11
- Draft15 = "Draft15",
12
- Draft14 = "Draft14",
13
- Draft11 = "Draft11",
14
- }
15
- //#endregion
16
- //#region src/metadata/credential-issuer/z-claims-description.d.ts
17
- declare const zCredentialConfigurationSupportedClaimsDescriptionDraft14: z.ZodObject<{
18
- mandatory: z.ZodOptional<z.ZodBoolean>;
19
- value_type: z.ZodOptional<z.ZodString>;
20
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
21
- name: z.ZodOptional<z.ZodString>;
22
- locale: z.ZodOptional<z.ZodString>;
23
- }, z.core.$loose>>>;
24
- }, z.core.$loose>;
25
- type CredentialConfigurationSupportedClaimsDraft14 = {
26
- [key: string]: z.infer<typeof zCredentialConfigurationSupportedClaimsDescriptionDraft14> | CredentialConfigurationSupportedClaimsDraft14;
27
- };
28
- //#endregion
29
- //#region src/metadata/credential-issuer/z-credential-configuration-supported-common.d.ts
30
- declare const zCredentialConfigurationSupportedCommon: z.ZodObject<{
31
- format: z.ZodString;
32
- scope: z.ZodOptional<z.ZodString>;
33
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
34
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString>, z.ZodArray<z.ZodNumber>]>>;
35
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
36
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
37
- key_attestations_required: z.ZodOptional<z.ZodObject<{
38
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
39
- iso_18045_high: "iso_18045_high";
40
- iso_18045_moderate: "iso_18045_moderate";
41
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
42
- iso_18045_basic: "iso_18045_basic";
43
- }>, z.ZodString]>>>;
44
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
45
- iso_18045_high: "iso_18045_high";
46
- iso_18045_moderate: "iso_18045_moderate";
47
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
48
- iso_18045_basic: "iso_18045_basic";
49
- }>, z.ZodString]>>>;
50
- }, z.core.$loose>>;
51
- }, z.core.$strip>>>;
52
- credential_metadata: z.ZodOptional<z.ZodObject<{
53
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
54
- name: z.ZodString;
55
- locale: z.ZodOptional<z.ZodString>;
56
- logo: z.ZodOptional<z.ZodObject<{
57
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
58
- alt_text: z.ZodOptional<z.ZodString>;
59
- }, z.core.$loose>>;
60
- description: z.ZodOptional<z.ZodString>;
61
- background_color: z.ZodOptional<z.ZodString>;
62
- background_image: z.ZodOptional<z.ZodObject<{
63
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
64
- }, z.core.$loose>>;
65
- text_color: z.ZodOptional<z.ZodString>;
66
- }, z.core.$loose>>>;
67
- }, z.core.$loose>>;
68
- }, z.core.$loose>;
69
- //#endregion
70
- //#region src/metadata/credential-issuer/z-credential-issuer-metadata.d.ts
71
- declare const allCredentialIssuerMetadataFormats: readonly [z.ZodObject<{
72
- scope: z.ZodOptional<z.ZodString>;
73
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
74
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
75
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
76
- key_attestations_required: z.ZodOptional<z.ZodObject<{
77
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
78
- iso_18045_high: "iso_18045_high";
79
- iso_18045_moderate: "iso_18045_moderate";
80
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
81
- iso_18045_basic: "iso_18045_basic";
82
- }>, z.ZodString]>>>;
83
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
84
- iso_18045_high: "iso_18045_high";
85
- iso_18045_moderate: "iso_18045_moderate";
86
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
87
- iso_18045_basic: "iso_18045_basic";
88
- }>, z.ZodString]>>>;
89
- }, z.core.$loose>>;
90
- }, z.core.$strip>>>;
91
- vct: z.ZodString;
92
- format: z.ZodLiteral<"dc+sd-jwt">;
93
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
94
- credential_metadata: z.ZodOptional<z.ZodObject<{
95
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
96
- name: z.ZodString;
97
- locale: z.ZodOptional<z.ZodString>;
98
- logo: z.ZodOptional<z.ZodObject<{
99
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
100
- alt_text: z.ZodOptional<z.ZodString>;
101
- }, z.core.$loose>>;
102
- description: z.ZodOptional<z.ZodString>;
103
- background_color: z.ZodOptional<z.ZodString>;
104
- background_image: z.ZodOptional<z.ZodObject<{
105
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
106
- }, z.core.$loose>>;
107
- text_color: z.ZodOptional<z.ZodString>;
108
- }, z.core.$loose>>>;
109
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
110
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
111
- mandatory: z.ZodOptional<z.ZodBoolean>;
112
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
113
- name: z.ZodOptional<z.ZodString>;
114
- locale: z.ZodOptional<z.ZodString>;
115
- }, z.core.$loose>>>;
116
- }, z.core.$loose>>>;
117
- }, z.core.$loose>>;
118
- }, z.core.$loose>, z.ZodObject<{
119
- scope: z.ZodOptional<z.ZodString>;
120
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
121
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
122
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
123
- key_attestations_required: z.ZodOptional<z.ZodObject<{
124
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
125
- iso_18045_high: "iso_18045_high";
126
- iso_18045_moderate: "iso_18045_moderate";
127
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
128
- iso_18045_basic: "iso_18045_basic";
129
- }>, z.ZodString]>>>;
130
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
131
- iso_18045_high: "iso_18045_high";
132
- iso_18045_moderate: "iso_18045_moderate";
133
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
134
- iso_18045_basic: "iso_18045_basic";
135
- }>, z.ZodString]>>>;
136
- }, z.core.$loose>>;
137
- }, z.core.$strip>>>;
138
- format: z.ZodLiteral<"mso_mdoc">;
139
- doctype: z.ZodString;
140
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
141
- credential_metadata: z.ZodOptional<z.ZodObject<{
142
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
143
- name: z.ZodString;
144
- locale: z.ZodOptional<z.ZodString>;
145
- logo: z.ZodOptional<z.ZodObject<{
146
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
147
- alt_text: z.ZodOptional<z.ZodString>;
148
- }, z.core.$loose>>;
149
- description: z.ZodOptional<z.ZodString>;
150
- background_color: z.ZodOptional<z.ZodString>;
151
- background_image: z.ZodOptional<z.ZodObject<{
152
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
153
- }, z.core.$loose>>;
154
- text_color: z.ZodOptional<z.ZodString>;
155
- }, z.core.$loose>>>;
156
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
157
- mandatory: z.ZodOptional<z.ZodBoolean>;
158
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
159
- name: z.ZodOptional<z.ZodString>;
160
- locale: z.ZodOptional<z.ZodString>;
161
- }, z.core.$loose>>>;
162
- path: z.ZodTuple<[z.ZodString, z.ZodString], z.ZodString>;
163
- }, z.core.$loose>>>;
164
- }, z.core.$loose>>;
165
- }, z.core.$loose>, z.ZodObject<{
166
- scope: z.ZodOptional<z.ZodString>;
167
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
168
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
169
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
170
- key_attestations_required: z.ZodOptional<z.ZodObject<{
171
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
172
- iso_18045_high: "iso_18045_high";
173
- iso_18045_moderate: "iso_18045_moderate";
174
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
175
- iso_18045_basic: "iso_18045_basic";
176
- }>, z.ZodString]>>>;
177
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
178
- iso_18045_high: "iso_18045_high";
179
- iso_18045_moderate: "iso_18045_moderate";
180
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
181
- iso_18045_basic: "iso_18045_basic";
182
- }>, z.ZodString]>>>;
183
- }, z.core.$loose>>;
184
- }, z.core.$strip>>>;
185
- format: z.ZodLiteral<"jwt_vc_json-ld">;
186
- credential_definition: z.ZodObject<{
187
- '@context': z.ZodArray<z.ZodString>;
188
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
189
- }, z.core.$loose>;
190
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
191
- credential_metadata: z.ZodOptional<z.ZodObject<{
192
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
193
- name: z.ZodString;
194
- locale: z.ZodOptional<z.ZodString>;
195
- logo: z.ZodOptional<z.ZodObject<{
196
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
197
- alt_text: z.ZodOptional<z.ZodString>;
198
- }, z.core.$loose>>;
199
- description: z.ZodOptional<z.ZodString>;
200
- background_color: z.ZodOptional<z.ZodString>;
201
- background_image: z.ZodOptional<z.ZodObject<{
202
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
203
- }, z.core.$loose>>;
204
- text_color: z.ZodOptional<z.ZodString>;
205
- }, z.core.$loose>>>;
206
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
207
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
208
- mandatory: z.ZodOptional<z.ZodBoolean>;
209
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
210
- name: z.ZodOptional<z.ZodString>;
211
- locale: z.ZodOptional<z.ZodString>;
212
- }, z.core.$loose>>>;
213
- }, z.core.$loose>>>;
214
- }, z.core.$loose>>;
215
- }, z.core.$loose>, z.ZodObject<{
216
- scope: z.ZodOptional<z.ZodString>;
217
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
218
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
219
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
220
- key_attestations_required: z.ZodOptional<z.ZodObject<{
221
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
222
- iso_18045_high: "iso_18045_high";
223
- iso_18045_moderate: "iso_18045_moderate";
224
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
225
- iso_18045_basic: "iso_18045_basic";
226
- }>, z.ZodString]>>>;
227
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
228
- iso_18045_high: "iso_18045_high";
229
- iso_18045_moderate: "iso_18045_moderate";
230
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
231
- iso_18045_basic: "iso_18045_basic";
232
- }>, z.ZodString]>>>;
233
- }, z.core.$loose>>;
234
- }, z.core.$strip>>>;
235
- format: z.ZodLiteral<"ldp_vc">;
236
- credential_definition: z.ZodObject<{
237
- '@context': z.ZodArray<z.ZodString>;
238
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
239
- }, z.core.$loose>;
240
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
241
- credential_metadata: z.ZodOptional<z.ZodObject<{
242
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
243
- name: z.ZodString;
244
- locale: z.ZodOptional<z.ZodString>;
245
- logo: z.ZodOptional<z.ZodObject<{
246
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
247
- alt_text: z.ZodOptional<z.ZodString>;
248
- }, z.core.$loose>>;
249
- description: z.ZodOptional<z.ZodString>;
250
- background_color: z.ZodOptional<z.ZodString>;
251
- background_image: z.ZodOptional<z.ZodObject<{
252
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
253
- }, z.core.$loose>>;
254
- text_color: z.ZodOptional<z.ZodString>;
255
- }, z.core.$loose>>>;
256
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
257
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
258
- mandatory: z.ZodOptional<z.ZodBoolean>;
259
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
260
- name: z.ZodOptional<z.ZodString>;
261
- locale: z.ZodOptional<z.ZodString>;
262
- }, z.core.$loose>>>;
263
- }, z.core.$loose>>>;
264
- }, z.core.$loose>>;
265
- }, z.core.$loose>, z.ZodObject<{
266
- scope: z.ZodOptional<z.ZodString>;
267
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
268
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
269
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
270
- key_attestations_required: z.ZodOptional<z.ZodObject<{
271
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
272
- iso_18045_high: "iso_18045_high";
273
- iso_18045_moderate: "iso_18045_moderate";
274
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
275
- iso_18045_basic: "iso_18045_basic";
276
- }>, z.ZodString]>>>;
277
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
278
- iso_18045_high: "iso_18045_high";
279
- iso_18045_moderate: "iso_18045_moderate";
280
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
281
- iso_18045_basic: "iso_18045_basic";
282
- }>, z.ZodString]>>>;
283
- }, z.core.$loose>>;
284
- }, z.core.$strip>>>;
285
- format: z.ZodLiteral<"jwt_vc_json">;
286
- credential_definition: z.ZodObject<{
287
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
288
- }, z.core.$loose>;
289
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
290
- credential_metadata: z.ZodOptional<z.ZodObject<{
291
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
292
- name: z.ZodString;
293
- locale: z.ZodOptional<z.ZodString>;
294
- logo: z.ZodOptional<z.ZodObject<{
295
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
296
- alt_text: z.ZodOptional<z.ZodString>;
297
- }, z.core.$loose>>;
298
- description: z.ZodOptional<z.ZodString>;
299
- background_color: z.ZodOptional<z.ZodString>;
300
- background_image: z.ZodOptional<z.ZodObject<{
301
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
302
- }, z.core.$loose>>;
303
- text_color: z.ZodOptional<z.ZodString>;
304
- }, z.core.$loose>>>;
305
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
306
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
307
- mandatory: z.ZodOptional<z.ZodBoolean>;
308
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
309
- name: z.ZodOptional<z.ZodString>;
310
- locale: z.ZodOptional<z.ZodString>;
311
- }, z.core.$loose>>>;
312
- }, z.core.$loose>>>;
313
- }, z.core.$loose>>;
314
- }, z.core.$loose>, z.ZodObject<{
315
- scope: z.ZodOptional<z.ZodString>;
316
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
317
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
318
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
319
- key_attestations_required: z.ZodOptional<z.ZodObject<{
320
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
321
- iso_18045_high: "iso_18045_high";
322
- iso_18045_moderate: "iso_18045_moderate";
323
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
324
- iso_18045_basic: "iso_18045_basic";
325
- }>, z.ZodString]>>>;
326
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
327
- iso_18045_high: "iso_18045_high";
328
- iso_18045_moderate: "iso_18045_moderate";
329
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
330
- iso_18045_basic: "iso_18045_basic";
331
- }>, z.ZodString]>>>;
332
- }, z.core.$loose>>;
333
- }, z.core.$strip>>>;
334
- format: z.ZodLiteral<"vc+sd-jwt">;
335
- credential_definition: z.ZodObject<{
336
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
337
- }, z.core.$loose>;
338
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
339
- credential_metadata: z.ZodOptional<z.ZodObject<{
340
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
341
- name: z.ZodString;
342
- locale: z.ZodOptional<z.ZodString>;
343
- logo: z.ZodOptional<z.ZodObject<{
344
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
345
- alt_text: z.ZodOptional<z.ZodString>;
346
- }, z.core.$loose>>;
347
- description: z.ZodOptional<z.ZodString>;
348
- background_color: z.ZodOptional<z.ZodString>;
349
- background_image: z.ZodOptional<z.ZodObject<{
350
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
351
- }, z.core.$loose>>;
352
- text_color: z.ZodOptional<z.ZodString>;
353
- }, z.core.$loose>>>;
354
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
355
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
356
- mandatory: z.ZodOptional<z.ZodBoolean>;
357
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
358
- name: z.ZodOptional<z.ZodString>;
359
- locale: z.ZodOptional<z.ZodString>;
360
- }, z.core.$loose>>>;
361
- }, z.core.$loose>>>;
362
- }, z.core.$loose>>;
363
- vct: z.ZodOptional<z.ZodNever>;
364
- }, z.core.$loose>, z.ZodObject<{
365
- scope: z.ZodOptional<z.ZodString>;
366
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
367
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
368
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
369
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
370
- key_attestations_required: z.ZodOptional<z.ZodObject<{
371
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
372
- iso_18045_high: "iso_18045_high";
373
- iso_18045_moderate: "iso_18045_moderate";
374
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
375
- iso_18045_basic: "iso_18045_basic";
376
- }>, z.ZodString]>>>;
377
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
378
- iso_18045_high: "iso_18045_high";
379
- iso_18045_moderate: "iso_18045_moderate";
380
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
381
- iso_18045_basic: "iso_18045_basic";
382
- }>, z.ZodString]>>>;
383
- }, z.core.$loose>>;
384
- }, z.core.$strip>>>;
385
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
386
- name: z.ZodString;
387
- locale: z.ZodOptional<z.ZodString>;
388
- logo: z.ZodOptional<z.ZodObject<{
389
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
390
- alt_text: z.ZodOptional<z.ZodString>;
391
- }, z.core.$loose>>;
392
- description: z.ZodOptional<z.ZodString>;
393
- background_color: z.ZodOptional<z.ZodString>;
394
- background_image: z.ZodOptional<z.ZodObject<{
395
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
396
- }, z.core.$loose>>;
397
- text_color: z.ZodOptional<z.ZodString>;
398
- }, z.core.$loose>>>;
399
- credential_metadata: z.ZodOptional<z.ZodNever>;
400
- format: z.ZodLiteral<"vc+sd-jwt">;
401
- credential_definition: z.ZodObject<{
402
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
403
- }, z.core.$loose>;
404
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
405
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
406
- mandatory: z.ZodOptional<z.ZodBoolean>;
407
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
408
- name: z.ZodOptional<z.ZodString>;
409
- locale: z.ZodOptional<z.ZodString>;
410
- }, z.core.$loose>>>;
411
- }, z.core.$loose>>>;
412
- vct: z.ZodOptional<z.ZodNever>;
413
- }, z.core.$loose>, z.ZodObject<{
414
- scope: z.ZodOptional<z.ZodString>;
415
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
416
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
417
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
418
- key_attestations_required: z.ZodOptional<z.ZodObject<{
419
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
420
- iso_18045_high: "iso_18045_high";
421
- iso_18045_moderate: "iso_18045_moderate";
422
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
423
- iso_18045_basic: "iso_18045_basic";
424
- }>, z.ZodString]>>>;
425
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
426
- iso_18045_high: "iso_18045_high";
427
- iso_18045_moderate: "iso_18045_moderate";
428
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
429
- iso_18045_basic: "iso_18045_basic";
430
- }>, z.ZodString]>>>;
431
- }, z.core.$loose>>;
432
- }, z.core.$strip>>>;
433
- vct: z.ZodString;
434
- format: z.ZodLiteral<"vc+sd-jwt">;
435
- order: z.ZodOptional<z.ZodArray<z.ZodString>>;
436
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
437
- credential_metadata: z.ZodOptional<z.ZodObject<{
438
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
439
- name: z.ZodString;
440
- locale: z.ZodOptional<z.ZodString>;
441
- logo: z.ZodOptional<z.ZodObject<{
442
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
443
- alt_text: z.ZodOptional<z.ZodString>;
444
- }, z.core.$loose>>;
445
- description: z.ZodOptional<z.ZodString>;
446
- background_color: z.ZodOptional<z.ZodString>;
447
- background_image: z.ZodOptional<z.ZodObject<{
448
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
449
- }, z.core.$loose>>;
450
- text_color: z.ZodOptional<z.ZodString>;
451
- }, z.core.$loose>>>;
452
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
453
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
454
- mandatory: z.ZodOptional<z.ZodBoolean>;
455
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
456
- name: z.ZodOptional<z.ZodString>;
457
- locale: z.ZodOptional<z.ZodString>;
458
- }, z.core.$loose>>>;
459
- }, z.core.$loose>>>;
460
- }, z.core.$loose>>;
461
- credential_definition: z.ZodOptional<z.ZodNever>;
462
- }, z.core.$loose>, z.ZodObject<{
463
- scope: z.ZodOptional<z.ZodString>;
464
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
465
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
466
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
467
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
468
- key_attestations_required: z.ZodOptional<z.ZodObject<{
469
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
470
- iso_18045_high: "iso_18045_high";
471
- iso_18045_moderate: "iso_18045_moderate";
472
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
473
- iso_18045_basic: "iso_18045_basic";
474
- }>, z.ZodString]>>>;
475
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
476
- iso_18045_high: "iso_18045_high";
477
- iso_18045_moderate: "iso_18045_moderate";
478
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
479
- iso_18045_basic: "iso_18045_basic";
480
- }>, z.ZodString]>>>;
481
- }, z.core.$loose>>;
482
- }, z.core.$strip>>>;
483
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
484
- name: z.ZodString;
485
- locale: z.ZodOptional<z.ZodString>;
486
- logo: z.ZodOptional<z.ZodObject<{
487
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
488
- alt_text: z.ZodOptional<z.ZodString>;
489
- }, z.core.$loose>>;
490
- description: z.ZodOptional<z.ZodString>;
491
- background_color: z.ZodOptional<z.ZodString>;
492
- background_image: z.ZodOptional<z.ZodObject<{
493
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
494
- }, z.core.$loose>>;
495
- text_color: z.ZodOptional<z.ZodString>;
496
- }, z.core.$loose>>>;
497
- credential_metadata: z.ZodOptional<z.ZodNever>;
498
- vct: z.ZodString;
499
- format: z.ZodLiteral<"dc+sd-jwt">;
500
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
501
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
502
- mandatory: z.ZodOptional<z.ZodBoolean>;
503
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
504
- name: z.ZodOptional<z.ZodString>;
505
- locale: z.ZodOptional<z.ZodString>;
506
- }, z.core.$loose>>>;
507
- }, z.core.$loose>>>;
508
- }, z.core.$loose>, z.ZodObject<{
509
- scope: z.ZodOptional<z.ZodString>;
510
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
511
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
512
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
513
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
514
- key_attestations_required: z.ZodOptional<z.ZodObject<{
515
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
516
- iso_18045_high: "iso_18045_high";
517
- iso_18045_moderate: "iso_18045_moderate";
518
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
519
- iso_18045_basic: "iso_18045_basic";
520
- }>, z.ZodString]>>>;
521
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
522
- iso_18045_high: "iso_18045_high";
523
- iso_18045_moderate: "iso_18045_moderate";
524
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
525
- iso_18045_basic: "iso_18045_basic";
526
- }>, z.ZodString]>>>;
527
- }, z.core.$loose>>;
528
- }, z.core.$strip>>>;
529
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
530
- name: z.ZodString;
531
- locale: z.ZodOptional<z.ZodString>;
532
- logo: z.ZodOptional<z.ZodObject<{
533
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
534
- alt_text: z.ZodOptional<z.ZodString>;
535
- }, z.core.$loose>>;
536
- description: z.ZodOptional<z.ZodString>;
537
- background_color: z.ZodOptional<z.ZodString>;
538
- background_image: z.ZodOptional<z.ZodObject<{
539
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
540
- }, z.core.$loose>>;
541
- text_color: z.ZodOptional<z.ZodString>;
542
- }, z.core.$loose>>>;
543
- credential_metadata: z.ZodOptional<z.ZodNever>;
544
- format: z.ZodLiteral<"mso_mdoc">;
545
- doctype: z.ZodString;
546
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
547
- mandatory: z.ZodOptional<z.ZodBoolean>;
548
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
549
- name: z.ZodOptional<z.ZodString>;
550
- locale: z.ZodOptional<z.ZodString>;
551
- }, z.core.$loose>>>;
552
- path: z.ZodTuple<[z.ZodString, z.ZodString], z.ZodString>;
553
- }, z.core.$loose>>>;
554
- }, z.core.$loose>, z.ZodObject<{
555
- scope: z.ZodOptional<z.ZodString>;
556
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
557
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
558
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
559
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
560
- key_attestations_required: z.ZodOptional<z.ZodObject<{
561
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
562
- iso_18045_high: "iso_18045_high";
563
- iso_18045_moderate: "iso_18045_moderate";
564
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
565
- iso_18045_basic: "iso_18045_basic";
566
- }>, z.ZodString]>>>;
567
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
568
- iso_18045_high: "iso_18045_high";
569
- iso_18045_moderate: "iso_18045_moderate";
570
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
571
- iso_18045_basic: "iso_18045_basic";
572
- }>, z.ZodString]>>>;
573
- }, z.core.$loose>>;
574
- }, z.core.$strip>>>;
575
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
576
- name: z.ZodString;
577
- locale: z.ZodOptional<z.ZodString>;
578
- logo: z.ZodOptional<z.ZodObject<{
579
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
580
- alt_text: z.ZodOptional<z.ZodString>;
581
- }, z.core.$loose>>;
582
- description: z.ZodOptional<z.ZodString>;
583
- background_color: z.ZodOptional<z.ZodString>;
584
- background_image: z.ZodOptional<z.ZodObject<{
585
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
586
- }, z.core.$loose>>;
587
- text_color: z.ZodOptional<z.ZodString>;
588
- }, z.core.$loose>>>;
589
- credential_metadata: z.ZodOptional<z.ZodNever>;
590
- format: z.ZodLiteral<"jwt_vc_json-ld">;
591
- credential_definition: z.ZodObject<{
592
- '@context': z.ZodArray<z.ZodString>;
593
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
594
- }, z.core.$loose>;
595
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
596
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
597
- mandatory: z.ZodOptional<z.ZodBoolean>;
598
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
599
- name: z.ZodOptional<z.ZodString>;
600
- locale: z.ZodOptional<z.ZodString>;
601
- }, z.core.$loose>>>;
602
- }, z.core.$loose>>>;
603
- }, z.core.$loose>, z.ZodObject<{
604
- scope: z.ZodOptional<z.ZodString>;
605
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
606
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
607
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
608
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
609
- key_attestations_required: z.ZodOptional<z.ZodObject<{
610
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
611
- iso_18045_high: "iso_18045_high";
612
- iso_18045_moderate: "iso_18045_moderate";
613
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
614
- iso_18045_basic: "iso_18045_basic";
615
- }>, z.ZodString]>>>;
616
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
617
- iso_18045_high: "iso_18045_high";
618
- iso_18045_moderate: "iso_18045_moderate";
619
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
620
- iso_18045_basic: "iso_18045_basic";
621
- }>, z.ZodString]>>>;
622
- }, z.core.$loose>>;
623
- }, z.core.$strip>>>;
624
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
625
- name: z.ZodString;
626
- locale: z.ZodOptional<z.ZodString>;
627
- logo: z.ZodOptional<z.ZodObject<{
628
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
629
- alt_text: z.ZodOptional<z.ZodString>;
630
- }, z.core.$loose>>;
631
- description: z.ZodOptional<z.ZodString>;
632
- background_color: z.ZodOptional<z.ZodString>;
633
- background_image: z.ZodOptional<z.ZodObject<{
634
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
635
- }, z.core.$loose>>;
636
- text_color: z.ZodOptional<z.ZodString>;
637
- }, z.core.$loose>>>;
638
- credential_metadata: z.ZodOptional<z.ZodNever>;
639
- format: z.ZodLiteral<"ldp_vc">;
640
- credential_definition: z.ZodObject<{
641
- '@context': z.ZodArray<z.ZodString>;
642
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
643
- }, z.core.$loose>;
644
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
645
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
646
- mandatory: z.ZodOptional<z.ZodBoolean>;
647
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
648
- name: z.ZodOptional<z.ZodString>;
649
- locale: z.ZodOptional<z.ZodString>;
650
- }, z.core.$loose>>>;
651
- }, z.core.$loose>>>;
652
- }, z.core.$loose>, z.ZodObject<{
653
- scope: z.ZodOptional<z.ZodString>;
654
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
655
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
656
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
657
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
658
- key_attestations_required: z.ZodOptional<z.ZodObject<{
659
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
660
- iso_18045_high: "iso_18045_high";
661
- iso_18045_moderate: "iso_18045_moderate";
662
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
663
- iso_18045_basic: "iso_18045_basic";
664
- }>, z.ZodString]>>>;
665
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
666
- iso_18045_high: "iso_18045_high";
667
- iso_18045_moderate: "iso_18045_moderate";
668
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
669
- iso_18045_basic: "iso_18045_basic";
670
- }>, z.ZodString]>>>;
671
- }, z.core.$loose>>;
672
- }, z.core.$strip>>>;
673
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
674
- name: z.ZodString;
675
- locale: z.ZodOptional<z.ZodString>;
676
- logo: z.ZodOptional<z.ZodObject<{
677
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
678
- alt_text: z.ZodOptional<z.ZodString>;
679
- }, z.core.$loose>>;
680
- description: z.ZodOptional<z.ZodString>;
681
- background_color: z.ZodOptional<z.ZodString>;
682
- background_image: z.ZodOptional<z.ZodObject<{
683
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
684
- }, z.core.$loose>>;
685
- text_color: z.ZodOptional<z.ZodString>;
686
- }, z.core.$loose>>>;
687
- credential_metadata: z.ZodOptional<z.ZodNever>;
688
- format: z.ZodLiteral<"jwt_vc_json">;
689
- credential_definition: z.ZodObject<{
690
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
691
- }, z.core.$loose>;
692
- claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
693
- path: z.ZodTuple<[z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>], z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
694
- mandatory: z.ZodOptional<z.ZodBoolean>;
695
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
696
- name: z.ZodOptional<z.ZodString>;
697
- locale: z.ZodOptional<z.ZodString>;
698
- }, z.core.$loose>>>;
699
- }, z.core.$loose>>>;
700
- }, z.core.$loose>, z.ZodObject<{
701
- scope: z.ZodOptional<z.ZodString>;
702
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
703
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
704
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
705
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
706
- key_attestations_required: z.ZodOptional<z.ZodObject<{
707
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
708
- iso_18045_high: "iso_18045_high";
709
- iso_18045_moderate: "iso_18045_moderate";
710
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
711
- iso_18045_basic: "iso_18045_basic";
712
- }>, z.ZodString]>>>;
713
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
714
- iso_18045_high: "iso_18045_high";
715
- iso_18045_moderate: "iso_18045_moderate";
716
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
717
- iso_18045_basic: "iso_18045_basic";
718
- }>, z.ZodString]>>>;
719
- }, z.core.$loose>>;
720
- }, z.core.$strip>>>;
721
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
722
- name: z.ZodString;
723
- locale: z.ZodOptional<z.ZodString>;
724
- logo: z.ZodOptional<z.ZodObject<{
725
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
726
- alt_text: z.ZodOptional<z.ZodString>;
727
- }, z.core.$loose>>;
728
- description: z.ZodOptional<z.ZodString>;
729
- background_color: z.ZodOptional<z.ZodString>;
730
- background_image: z.ZodOptional<z.ZodObject<{
731
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
732
- }, z.core.$loose>>;
733
- text_color: z.ZodOptional<z.ZodString>;
734
- }, z.core.$loose>>>;
735
- credential_metadata: z.ZodOptional<z.ZodNever>;
736
- format: z.ZodLiteral<"mso_mdoc">;
737
- doctype: z.ZodString;
738
- claims: z.ZodOptional<z.ZodType<CredentialConfigurationSupportedClaimsDraft14, unknown, z.core.$ZodTypeInternals<CredentialConfigurationSupportedClaimsDraft14, unknown>>>;
739
- order: z.ZodOptional<z.ZodArray<z.ZodString>>;
740
- }, z.core.$loose>, z.ZodObject<{
741
- scope: z.ZodOptional<z.ZodString>;
742
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
743
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
744
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
745
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
746
- key_attestations_required: z.ZodOptional<z.ZodObject<{
747
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
748
- iso_18045_high: "iso_18045_high";
749
- iso_18045_moderate: "iso_18045_moderate";
750
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
751
- iso_18045_basic: "iso_18045_basic";
752
- }>, z.ZodString]>>>;
753
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
754
- iso_18045_high: "iso_18045_high";
755
- iso_18045_moderate: "iso_18045_moderate";
756
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
757
- iso_18045_basic: "iso_18045_basic";
758
- }>, z.ZodString]>>>;
759
- }, z.core.$loose>>;
760
- }, z.core.$strip>>>;
761
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
762
- name: z.ZodString;
763
- locale: z.ZodOptional<z.ZodString>;
764
- logo: z.ZodOptional<z.ZodObject<{
765
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
766
- alt_text: z.ZodOptional<z.ZodString>;
767
- }, z.core.$loose>>;
768
- description: z.ZodOptional<z.ZodString>;
769
- background_color: z.ZodOptional<z.ZodString>;
770
- background_image: z.ZodOptional<z.ZodObject<{
771
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
772
- }, z.core.$loose>>;
773
- text_color: z.ZodOptional<z.ZodString>;
774
- }, z.core.$loose>>>;
775
- credential_metadata: z.ZodOptional<z.ZodNever>;
776
- vct: z.ZodString;
777
- format: z.ZodLiteral<"vc+sd-jwt">;
778
- claims: z.ZodOptional<z.ZodType<CredentialConfigurationSupportedClaimsDraft14, unknown, z.core.$ZodTypeInternals<CredentialConfigurationSupportedClaimsDraft14, unknown>>>;
779
- order: z.ZodOptional<z.ZodArray<z.ZodString>>;
780
- credential_definition: z.ZodOptional<z.ZodNever>;
781
- }, z.core.$loose>, z.ZodObject<{
782
- scope: z.ZodOptional<z.ZodString>;
783
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
784
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
785
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
786
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
787
- key_attestations_required: z.ZodOptional<z.ZodObject<{
788
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
789
- iso_18045_high: "iso_18045_high";
790
- iso_18045_moderate: "iso_18045_moderate";
791
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
792
- iso_18045_basic: "iso_18045_basic";
793
- }>, z.ZodString]>>>;
794
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
795
- iso_18045_high: "iso_18045_high";
796
- iso_18045_moderate: "iso_18045_moderate";
797
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
798
- iso_18045_basic: "iso_18045_basic";
799
- }>, z.ZodString]>>>;
800
- }, z.core.$loose>>;
801
- }, z.core.$strip>>>;
802
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
803
- name: z.ZodString;
804
- locale: z.ZodOptional<z.ZodString>;
805
- logo: z.ZodOptional<z.ZodObject<{
806
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
807
- alt_text: z.ZodOptional<z.ZodString>;
808
- }, z.core.$loose>>;
809
- description: z.ZodOptional<z.ZodString>;
810
- background_color: z.ZodOptional<z.ZodString>;
811
- background_image: z.ZodOptional<z.ZodObject<{
812
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
813
- }, z.core.$loose>>;
814
- text_color: z.ZodOptional<z.ZodString>;
815
- }, z.core.$loose>>>;
816
- credential_metadata: z.ZodOptional<z.ZodNever>;
817
- format: z.ZodLiteral<"jwt_vc_json-ld">;
818
- credential_definition: z.ZodObject<{
819
- '@context': z.ZodArray<z.ZodString>;
820
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
821
- credentialSubject: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodObject<{
822
- mandatory: z.ZodOptional<z.ZodBoolean>;
823
- value_type: z.ZodOptional<z.ZodString>;
824
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
825
- name: z.ZodOptional<z.ZodString>;
826
- locale: z.ZodOptional<z.ZodString>;
827
- }, z.core.$loose>>>;
828
- }, z.core.$loose>]>>>;
829
- }, z.core.$loose>;
830
- order: z.ZodOptional<z.ZodArray<z.ZodString>>;
831
- }, z.core.$loose>, z.ZodObject<{
832
- scope: z.ZodOptional<z.ZodString>;
833
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
834
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
835
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
836
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
837
- key_attestations_required: z.ZodOptional<z.ZodObject<{
838
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
839
- iso_18045_high: "iso_18045_high";
840
- iso_18045_moderate: "iso_18045_moderate";
841
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
842
- iso_18045_basic: "iso_18045_basic";
843
- }>, z.ZodString]>>>;
844
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
845
- iso_18045_high: "iso_18045_high";
846
- iso_18045_moderate: "iso_18045_moderate";
847
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
848
- iso_18045_basic: "iso_18045_basic";
849
- }>, z.ZodString]>>>;
850
- }, z.core.$loose>>;
851
- }, z.core.$strip>>>;
852
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
853
- name: z.ZodString;
854
- locale: z.ZodOptional<z.ZodString>;
855
- logo: z.ZodOptional<z.ZodObject<{
856
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
857
- alt_text: z.ZodOptional<z.ZodString>;
858
- }, z.core.$loose>>;
859
- description: z.ZodOptional<z.ZodString>;
860
- background_color: z.ZodOptional<z.ZodString>;
861
- background_image: z.ZodOptional<z.ZodObject<{
862
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
863
- }, z.core.$loose>>;
864
- text_color: z.ZodOptional<z.ZodString>;
865
- }, z.core.$loose>>>;
866
- credential_metadata: z.ZodOptional<z.ZodNever>;
867
- format: z.ZodLiteral<"ldp_vc">;
868
- credential_definition: z.ZodObject<{
869
- '@context': z.ZodArray<z.ZodString>;
870
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
871
- credentialSubject: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodObject<{
872
- mandatory: z.ZodOptional<z.ZodBoolean>;
873
- value_type: z.ZodOptional<z.ZodString>;
874
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
875
- name: z.ZodOptional<z.ZodString>;
876
- locale: z.ZodOptional<z.ZodString>;
877
- }, z.core.$loose>>>;
878
- }, z.core.$loose>]>>>;
879
- }, z.core.$loose>;
880
- order: z.ZodOptional<z.ZodArray<z.ZodString>>;
881
- }, z.core.$loose>, z.ZodObject<{
882
- scope: z.ZodOptional<z.ZodString>;
883
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
884
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
885
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
886
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
887
- key_attestations_required: z.ZodOptional<z.ZodObject<{
888
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
889
- iso_18045_high: "iso_18045_high";
890
- iso_18045_moderate: "iso_18045_moderate";
891
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
892
- iso_18045_basic: "iso_18045_basic";
893
- }>, z.ZodString]>>>;
894
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
895
- iso_18045_high: "iso_18045_high";
896
- iso_18045_moderate: "iso_18045_moderate";
897
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
898
- iso_18045_basic: "iso_18045_basic";
899
- }>, z.ZodString]>>>;
900
- }, z.core.$loose>>;
901
- }, z.core.$strip>>>;
902
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
903
- name: z.ZodString;
904
- locale: z.ZodOptional<z.ZodString>;
905
- logo: z.ZodOptional<z.ZodObject<{
906
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
907
- alt_text: z.ZodOptional<z.ZodString>;
908
- }, z.core.$loose>>;
909
- description: z.ZodOptional<z.ZodString>;
910
- background_color: z.ZodOptional<z.ZodString>;
911
- background_image: z.ZodOptional<z.ZodObject<{
912
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
913
- }, z.core.$loose>>;
914
- text_color: z.ZodOptional<z.ZodString>;
915
- }, z.core.$loose>>>;
916
- credential_metadata: z.ZodOptional<z.ZodNever>;
917
- format: z.ZodLiteral<"jwt_vc_json">;
918
- credential_definition: z.ZodObject<{
919
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
920
- credentialSubject: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodObject<{
921
- mandatory: z.ZodOptional<z.ZodBoolean>;
922
- value_type: z.ZodOptional<z.ZodString>;
923
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
924
- name: z.ZodOptional<z.ZodString>;
925
- locale: z.ZodOptional<z.ZodString>;
926
- }, z.core.$loose>>>;
927
- }, z.core.$loose>]>>>;
928
- }, z.core.$loose>;
929
- order: z.ZodOptional<z.ZodArray<z.ZodString>>;
930
- }, z.core.$loose>];
931
- declare const zCredentialConfigurationSupportedWithFormats: z.ZodPipe<z.ZodUnion<readonly [z.ZodObject<{
932
- format: z.ZodString;
933
- scope: z.ZodOptional<z.ZodString>;
934
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
935
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString>, z.ZodArray<z.ZodNumber>]>>;
936
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
937
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
938
- key_attestations_required: z.ZodOptional<z.ZodObject<{
939
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
940
- iso_18045_high: "iso_18045_high";
941
- iso_18045_moderate: "iso_18045_moderate";
942
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
943
- iso_18045_basic: "iso_18045_basic";
944
- }>, z.ZodString]>>>;
945
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
946
- iso_18045_high: "iso_18045_high";
947
- iso_18045_moderate: "iso_18045_moderate";
948
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
949
- iso_18045_basic: "iso_18045_basic";
950
- }>, z.ZodString]>>>;
951
- }, z.core.$loose>>;
952
- }, z.core.$strip>>>;
953
- credential_metadata: z.ZodOptional<z.ZodObject<{
954
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
955
- name: z.ZodString;
956
- locale: z.ZodOptional<z.ZodString>;
957
- logo: z.ZodOptional<z.ZodObject<{
958
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
959
- alt_text: z.ZodOptional<z.ZodString>;
960
- }, z.core.$loose>>;
961
- description: z.ZodOptional<z.ZodString>;
962
- background_color: z.ZodOptional<z.ZodString>;
963
- background_image: z.ZodOptional<z.ZodObject<{
964
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
965
- }, z.core.$loose>>;
966
- text_color: z.ZodOptional<z.ZodString>;
967
- }, z.core.$loose>>>;
968
- }, z.core.$loose>>;
969
- }, z.core.$loose>, z.ZodObject<{
970
- format: z.ZodString;
971
- scope: z.ZodOptional<z.ZodString>;
972
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
973
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
974
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
975
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
976
- key_attestations_required: z.ZodOptional<z.ZodObject<{
977
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
978
- iso_18045_high: "iso_18045_high";
979
- iso_18045_moderate: "iso_18045_moderate";
980
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
981
- iso_18045_basic: "iso_18045_basic";
982
- }>, z.ZodString]>>>;
983
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
984
- iso_18045_high: "iso_18045_high";
985
- iso_18045_moderate: "iso_18045_moderate";
986
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
987
- iso_18045_basic: "iso_18045_basic";
988
- }>, z.ZodString]>>>;
989
- }, z.core.$loose>>;
990
- }, z.core.$strip>>>;
991
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
992
- name: z.ZodString;
993
- locale: z.ZodOptional<z.ZodString>;
994
- logo: z.ZodOptional<z.ZodObject<{
995
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
996
- alt_text: z.ZodOptional<z.ZodString>;
997
- }, z.core.$loose>>;
998
- description: z.ZodOptional<z.ZodString>;
999
- background_color: z.ZodOptional<z.ZodString>;
1000
- background_image: z.ZodOptional<z.ZodObject<{
1001
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1002
- }, z.core.$loose>>;
1003
- text_color: z.ZodOptional<z.ZodString>;
1004
- }, z.core.$loose>>>;
1005
- credential_metadata: z.ZodOptional<z.ZodNever>;
1006
- }, z.core.$loose>]>, z.ZodTransform<{
1007
- [x: string]: unknown;
1008
- format: string;
1009
- scope?: string | undefined;
1010
- cryptographic_binding_methods_supported?: string[] | undefined;
1011
- credential_signing_alg_values_supported?: string[] | number[] | undefined;
1012
- proof_types_supported?: Record<string, {
1013
- proof_signing_alg_values_supported: string[];
1014
- key_attestations_required?: {
1015
- [x: string]: unknown;
1016
- key_storage?: string[] | undefined;
1017
- user_authentication?: string[] | undefined;
1018
- } | undefined;
1019
- }> | undefined;
1020
- credential_metadata?: {
1021
- [x: string]: unknown;
1022
- display?: {
1023
- [x: string]: unknown;
1024
- name: string;
1025
- locale?: string | undefined;
1026
- logo?: {
1027
- [x: string]: unknown;
1028
- uri?: string | undefined;
1029
- alt_text?: string | undefined;
1030
- } | undefined;
1031
- description?: string | undefined;
1032
- background_color?: string | undefined;
1033
- background_image?: {
1034
- [x: string]: unknown;
1035
- uri?: string | undefined;
1036
- } | undefined;
1037
- text_color?: string | undefined;
1038
- }[] | undefined;
1039
- } | undefined;
1040
- }, {
1041
- [x: string]: unknown;
1042
- format: string;
1043
- scope?: string | undefined;
1044
- cryptographic_binding_methods_supported?: string[] | undefined;
1045
- credential_signing_alg_values_supported?: string[] | number[] | undefined;
1046
- proof_types_supported?: Record<string, {
1047
- proof_signing_alg_values_supported: string[];
1048
- key_attestations_required?: {
1049
- [x: string]: unknown;
1050
- key_storage?: string[] | undefined;
1051
- user_authentication?: string[] | undefined;
1052
- } | undefined;
1053
- }> | undefined;
1054
- credential_metadata?: {
1055
- [x: string]: unknown;
1056
- display?: {
1057
- [x: string]: unknown;
1058
- name: string;
1059
- locale?: string | undefined;
1060
- logo?: {
1061
- [x: string]: unknown;
1062
- uri?: string | undefined;
1063
- alt_text?: string | undefined;
1064
- } | undefined;
1065
- description?: string | undefined;
1066
- background_color?: string | undefined;
1067
- background_image?: {
1068
- [x: string]: unknown;
1069
- uri?: string | undefined;
1070
- } | undefined;
1071
- text_color?: string | undefined;
1072
- }[] | undefined;
1073
- } | undefined;
1074
- } | {
1075
- [x: string]: unknown;
1076
- format: string;
1077
- scope?: string | undefined;
1078
- cryptographic_binding_methods_supported?: string[] | undefined;
1079
- credential_signing_alg_values_supported?: string[] | undefined;
1080
- proof_types_supported?: Record<string, {
1081
- proof_signing_alg_values_supported: string[];
1082
- key_attestations_required?: {
1083
- [x: string]: unknown;
1084
- key_storage?: string[] | undefined;
1085
- user_authentication?: string[] | undefined;
1086
- } | undefined;
1087
- }> | undefined;
1088
- display?: {
1089
- [x: string]: unknown;
1090
- name: string;
1091
- locale?: string | undefined;
1092
- logo?: {
1093
- [x: string]: unknown;
1094
- uri?: string | undefined;
1095
- alt_text?: string | undefined;
1096
- } | undefined;
1097
- description?: string | undefined;
1098
- background_color?: string | undefined;
1099
- background_image?: {
1100
- [x: string]: unknown;
1101
- uri?: string | undefined;
1102
- } | undefined;
1103
- text_color?: string | undefined;
1104
- }[] | undefined;
1105
- credential_metadata?: undefined;
1106
- }>>;
1107
- type CredentialConfigurationSupportedCommon = z.infer<typeof zCredentialConfigurationSupportedCommon>;
1108
- type CredentialConfigurationSupportedFormatSpecific = InferOutputUnion<typeof allCredentialIssuerMetadataFormats>;
1109
- type CredentialConfigurationSupportedWithFormats = CredentialConfigurationSupportedFormatSpecific & CredentialConfigurationSupportedCommon;
1110
- type CredentialConfigurationsSupportedWithFormats = Record<string, CredentialConfigurationSupportedWithFormats>;
1111
- type CredentialConfigurationSupported = z.infer<typeof zCredentialConfigurationSupportedWithFormats>;
1112
- type CredentialConfigurationsSupported = Record<string, CredentialConfigurationSupported>;
1113
- declare const zCredentialIssuerMetadataDisplayEntry: z.ZodObject<{
1114
- name: z.ZodOptional<z.ZodString>;
1115
- locale: z.ZodOptional<z.ZodString>;
1116
- logo: z.ZodOptional<z.ZodObject<{
1117
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1118
- alt_text: z.ZodOptional<z.ZodString>;
1119
- }, z.core.$loose>>;
1120
- }, z.core.$loose>;
1121
- type CredentialIssuerMetadataDisplayEntry = z.infer<typeof zCredentialIssuerMetadataDisplayEntry>;
1122
- type CredentialIssuerMetadata = z.infer<typeof zCredentialIssuerMetadataDraft14Draft15V1>;
1123
- declare const zCredentialIssuerMetadataDraft14Draft15V1: z.ZodObject<{
1124
- credential_issuer: z.ZodURL;
1125
- authorization_servers: z.ZodOptional<z.ZodArray<z.ZodURL>>;
1126
- credential_endpoint: z.ZodURL;
1127
- deferred_credential_endpoint: z.ZodOptional<z.ZodURL>;
1128
- notification_endpoint: z.ZodOptional<z.ZodURL>;
1129
- nonce_endpoint: z.ZodOptional<z.ZodURL>;
1130
- credential_response_encryption: z.ZodOptional<z.ZodObject<{
1131
- alg_values_supported: z.ZodArray<z.ZodString>;
1132
- enc_values_supported: z.ZodArray<z.ZodString>;
1133
- encryption_required: z.ZodBoolean;
1134
- }, z.core.$loose>>;
1135
- batch_credential_issuance: z.ZodOptional<z.ZodObject<{
1136
- batch_size: z.ZodNumber;
1137
- }, z.core.$loose>>;
1138
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
1139
- name: z.ZodOptional<z.ZodString>;
1140
- locale: z.ZodOptional<z.ZodString>;
1141
- logo: z.ZodOptional<z.ZodObject<{
1142
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1143
- alt_text: z.ZodOptional<z.ZodString>;
1144
- }, z.core.$loose>>;
1145
- }, z.core.$loose>>>;
1146
- credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodObject<{
1147
- format: z.ZodString;
1148
- scope: z.ZodOptional<z.ZodString>;
1149
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
1150
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString>, z.ZodArray<z.ZodNumber>]>>;
1151
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
1152
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
1153
- key_attestations_required: z.ZodOptional<z.ZodObject<{
1154
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
1155
- iso_18045_high: "iso_18045_high";
1156
- iso_18045_moderate: "iso_18045_moderate";
1157
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
1158
- iso_18045_basic: "iso_18045_basic";
1159
- }>, z.ZodString]>>>;
1160
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
1161
- iso_18045_high: "iso_18045_high";
1162
- iso_18045_moderate: "iso_18045_moderate";
1163
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
1164
- iso_18045_basic: "iso_18045_basic";
1165
- }>, z.ZodString]>>>;
1166
- }, z.core.$loose>>;
1167
- }, z.core.$strip>>>;
1168
- credential_metadata: z.ZodOptional<z.ZodObject<{
1169
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
1170
- name: z.ZodString;
1171
- locale: z.ZodOptional<z.ZodString>;
1172
- logo: z.ZodOptional<z.ZodObject<{
1173
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1174
- alt_text: z.ZodOptional<z.ZodString>;
1175
- }, z.core.$loose>>;
1176
- description: z.ZodOptional<z.ZodString>;
1177
- background_color: z.ZodOptional<z.ZodString>;
1178
- background_image: z.ZodOptional<z.ZodObject<{
1179
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1180
- }, z.core.$loose>>;
1181
- text_color: z.ZodOptional<z.ZodString>;
1182
- }, z.core.$loose>>>;
1183
- }, z.core.$loose>>;
1184
- }, z.core.$loose>>;
1185
- }, z.core.$loose>;
1186
- declare const zCredentialConfigurationSupportedDraft11ToV1: z.ZodPipe<z.ZodPipe<z.ZodPipe<z.ZodObject<{
1187
- id: z.ZodOptional<z.ZodString>;
1188
- format: z.ZodString;
1189
- cryptographic_suites_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
1190
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
1191
- logo: z.ZodOptional<z.ZodObject<{
1192
- url: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1193
- }, z.core.$loose>>;
1194
- background_image: z.ZodOptional<z.ZodObject<{
1195
- url: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1196
- }, z.core.$loose>>;
1197
- }, z.core.$loose>>>;
1198
- claims: z.ZodOptional<z.ZodAny>;
1199
- }, z.core.$loose>, z.ZodTransform<{
1200
- credential_metadata?: {
1201
- display?: {
1202
- background_image?: {
1203
- uri: string;
1204
- } | undefined;
1205
- logo?: {
1206
- uri: string;
1207
- } | undefined;
1208
- }[] | undefined;
1209
- claims?: any;
1210
- } | undefined;
1211
- credential_signing_alg_values_supported?: string[] | (-19 | -53 | -8 | -9 | -51 | -52 | -47 | -7 | -35 | -36 | -257 | -258 | -259 | -37 | -38 | -39)[] | undefined;
1212
- format: string;
1213
- }, {
1214
- [x: string]: unknown;
1215
- format: string;
1216
- id?: string | undefined;
1217
- cryptographic_suites_supported?: string[] | undefined;
1218
- display?: {
1219
- [x: string]: unknown;
1220
- logo?: {
1221
- [x: string]: unknown;
1222
- url?: string | undefined;
1223
- } | undefined;
1224
- background_image?: {
1225
- [x: string]: unknown;
1226
- url?: string | undefined;
1227
- } | undefined;
1228
- }[] | undefined;
1229
- claims?: any;
1230
- }>>, z.ZodTransform<unknown, {
1231
- credential_metadata?: {
1232
- display?: {
1233
- background_image?: {
1234
- uri: string;
1235
- } | undefined;
1236
- logo?: {
1237
- uri: string;
1238
- } | undefined;
1239
- }[] | undefined;
1240
- claims?: any;
1241
- } | undefined;
1242
- credential_signing_alg_values_supported?: string[] | (-19 | -53 | -8 | -9 | -51 | -52 | -47 | -7 | -35 | -36 | -257 | -258 | -259 | -37 | -38 | -39)[] | undefined;
1243
- format: string;
1244
- }>>, z.ZodPipe<z.ZodUnion<readonly [z.ZodObject<{
1245
- format: z.ZodString;
1246
- scope: z.ZodOptional<z.ZodString>;
1247
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
1248
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString>, z.ZodArray<z.ZodNumber>]>>;
1249
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
1250
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
1251
- key_attestations_required: z.ZodOptional<z.ZodObject<{
1252
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
1253
- iso_18045_high: "iso_18045_high";
1254
- iso_18045_moderate: "iso_18045_moderate";
1255
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
1256
- iso_18045_basic: "iso_18045_basic";
1257
- }>, z.ZodString]>>>;
1258
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
1259
- iso_18045_high: "iso_18045_high";
1260
- iso_18045_moderate: "iso_18045_moderate";
1261
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
1262
- iso_18045_basic: "iso_18045_basic";
1263
- }>, z.ZodString]>>>;
1264
- }, z.core.$loose>>;
1265
- }, z.core.$strip>>>;
1266
- credential_metadata: z.ZodOptional<z.ZodObject<{
1267
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
1268
- name: z.ZodString;
1269
- locale: z.ZodOptional<z.ZodString>;
1270
- logo: z.ZodOptional<z.ZodObject<{
1271
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1272
- alt_text: z.ZodOptional<z.ZodString>;
1273
- }, z.core.$loose>>;
1274
- description: z.ZodOptional<z.ZodString>;
1275
- background_color: z.ZodOptional<z.ZodString>;
1276
- background_image: z.ZodOptional<z.ZodObject<{
1277
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1278
- }, z.core.$loose>>;
1279
- text_color: z.ZodOptional<z.ZodString>;
1280
- }, z.core.$loose>>>;
1281
- }, z.core.$loose>>;
1282
- }, z.core.$loose>, z.ZodObject<{
1283
- format: z.ZodString;
1284
- scope: z.ZodOptional<z.ZodString>;
1285
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
1286
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
1287
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
1288
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
1289
- key_attestations_required: z.ZodOptional<z.ZodObject<{
1290
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
1291
- iso_18045_high: "iso_18045_high";
1292
- iso_18045_moderate: "iso_18045_moderate";
1293
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
1294
- iso_18045_basic: "iso_18045_basic";
1295
- }>, z.ZodString]>>>;
1296
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
1297
- iso_18045_high: "iso_18045_high";
1298
- iso_18045_moderate: "iso_18045_moderate";
1299
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
1300
- iso_18045_basic: "iso_18045_basic";
1301
- }>, z.ZodString]>>>;
1302
- }, z.core.$loose>>;
1303
- }, z.core.$strip>>>;
1304
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
1305
- name: z.ZodString;
1306
- locale: z.ZodOptional<z.ZodString>;
1307
- logo: z.ZodOptional<z.ZodObject<{
1308
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1309
- alt_text: z.ZodOptional<z.ZodString>;
1310
- }, z.core.$loose>>;
1311
- description: z.ZodOptional<z.ZodString>;
1312
- background_color: z.ZodOptional<z.ZodString>;
1313
- background_image: z.ZodOptional<z.ZodObject<{
1314
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1315
- }, z.core.$loose>>;
1316
- text_color: z.ZodOptional<z.ZodString>;
1317
- }, z.core.$loose>>>;
1318
- credential_metadata: z.ZodOptional<z.ZodNever>;
1319
- }, z.core.$loose>]>, z.ZodTransform<{
1320
- [x: string]: unknown;
1321
- format: string;
1322
- scope?: string | undefined;
1323
- cryptographic_binding_methods_supported?: string[] | undefined;
1324
- credential_signing_alg_values_supported?: string[] | number[] | undefined;
1325
- proof_types_supported?: Record<string, {
1326
- proof_signing_alg_values_supported: string[];
1327
- key_attestations_required?: {
1328
- [x: string]: unknown;
1329
- key_storage?: string[] | undefined;
1330
- user_authentication?: string[] | undefined;
1331
- } | undefined;
1332
- }> | undefined;
1333
- credential_metadata?: {
1334
- [x: string]: unknown;
1335
- display?: {
1336
- [x: string]: unknown;
1337
- name: string;
1338
- locale?: string | undefined;
1339
- logo?: {
1340
- [x: string]: unknown;
1341
- uri?: string | undefined;
1342
- alt_text?: string | undefined;
1343
- } | undefined;
1344
- description?: string | undefined;
1345
- background_color?: string | undefined;
1346
- background_image?: {
1347
- [x: string]: unknown;
1348
- uri?: string | undefined;
1349
- } | undefined;
1350
- text_color?: string | undefined;
1351
- }[] | undefined;
1352
- } | undefined;
1353
- }, {
1354
- [x: string]: unknown;
1355
- format: string;
1356
- scope?: string | undefined;
1357
- cryptographic_binding_methods_supported?: string[] | undefined;
1358
- credential_signing_alg_values_supported?: string[] | number[] | undefined;
1359
- proof_types_supported?: Record<string, {
1360
- proof_signing_alg_values_supported: string[];
1361
- key_attestations_required?: {
1362
- [x: string]: unknown;
1363
- key_storage?: string[] | undefined;
1364
- user_authentication?: string[] | undefined;
1365
- } | undefined;
1366
- }> | undefined;
1367
- credential_metadata?: {
1368
- [x: string]: unknown;
1369
- display?: {
1370
- [x: string]: unknown;
1371
- name: string;
1372
- locale?: string | undefined;
1373
- logo?: {
1374
- [x: string]: unknown;
1375
- uri?: string | undefined;
1376
- alt_text?: string | undefined;
1377
- } | undefined;
1378
- description?: string | undefined;
1379
- background_color?: string | undefined;
1380
- background_image?: {
1381
- [x: string]: unknown;
1382
- uri?: string | undefined;
1383
- } | undefined;
1384
- text_color?: string | undefined;
1385
- }[] | undefined;
1386
- } | undefined;
1387
- } | {
1388
- [x: string]: unknown;
1389
- format: string;
1390
- scope?: string | undefined;
1391
- cryptographic_binding_methods_supported?: string[] | undefined;
1392
- credential_signing_alg_values_supported?: string[] | undefined;
1393
- proof_types_supported?: Record<string, {
1394
- proof_signing_alg_values_supported: string[];
1395
- key_attestations_required?: {
1396
- [x: string]: unknown;
1397
- key_storage?: string[] | undefined;
1398
- user_authentication?: string[] | undefined;
1399
- } | undefined;
1400
- }> | undefined;
1401
- display?: {
1402
- [x: string]: unknown;
1403
- name: string;
1404
- locale?: string | undefined;
1405
- logo?: {
1406
- [x: string]: unknown;
1407
- uri?: string | undefined;
1408
- alt_text?: string | undefined;
1409
- } | undefined;
1410
- description?: string | undefined;
1411
- background_color?: string | undefined;
1412
- background_image?: {
1413
- [x: string]: unknown;
1414
- uri?: string | undefined;
1415
- } | undefined;
1416
- text_color?: string | undefined;
1417
- }[] | undefined;
1418
- credential_metadata?: undefined;
1419
- }>>>;
1420
- //#endregion
1421
- //#region src/metadata/credential-issuer/z-signed-credential-issuer-metadata.d.ts
1422
- declare const zSignedCredentialIssuerMetadataHeader: z.ZodObject<{
1423
- typ: z.ZodLiteral<"openidvci-issuer-metadata+jwt">;
1424
- alg: z.ZodString;
1425
- kid: z.ZodOptional<z.ZodString>;
1426
- jwk: z.ZodOptional<z.ZodObject<{
1427
- kty: z.ZodString;
1428
- crv: z.ZodOptional<z.ZodString>;
1429
- x: z.ZodOptional<z.ZodString>;
1430
- y: z.ZodOptional<z.ZodString>;
1431
- e: z.ZodOptional<z.ZodString>;
1432
- n: z.ZodOptional<z.ZodString>;
1433
- alg: z.ZodOptional<z.ZodString>;
1434
- d: z.ZodOptional<z.ZodString>;
1435
- dp: z.ZodOptional<z.ZodString>;
1436
- dq: z.ZodOptional<z.ZodString>;
1437
- ext: z.ZodOptional<z.ZodBoolean>;
1438
- k: z.ZodOptional<z.ZodString>;
1439
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
1440
- kid: z.ZodOptional<z.ZodString>;
1441
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
1442
- d: z.ZodOptional<z.ZodString>;
1443
- r: z.ZodOptional<z.ZodString>;
1444
- t: z.ZodOptional<z.ZodString>;
1445
- }, z.core.$loose>>>;
1446
- p: z.ZodOptional<z.ZodString>;
1447
- q: z.ZodOptional<z.ZodString>;
1448
- qi: z.ZodOptional<z.ZodString>;
1449
- use: z.ZodOptional<z.ZodString>;
1450
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
1451
- x5t: z.ZodOptional<z.ZodString>;
1452
- 'x5t#S256': z.ZodOptional<z.ZodString>;
1453
- x5u: z.ZodOptional<z.ZodString>;
1454
- }, z.core.$loose>>;
1455
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
1456
- trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
1457
- }, z.core.$loose>;
1458
- declare const zSignedCredentialIssuerMetadataPayload: z.ZodObject<{
1459
- credential_issuer: z.ZodURL;
1460
- authorization_servers: z.ZodOptional<z.ZodArray<z.ZodURL>>;
1461
- credential_endpoint: z.ZodURL;
1462
- deferred_credential_endpoint: z.ZodOptional<z.ZodURL>;
1463
- notification_endpoint: z.ZodOptional<z.ZodURL>;
1464
- nonce_endpoint: z.ZodOptional<z.ZodURL>;
1465
- credential_response_encryption: z.ZodOptional<z.ZodObject<{
1466
- alg_values_supported: z.ZodArray<z.ZodString>;
1467
- enc_values_supported: z.ZodArray<z.ZodString>;
1468
- encryption_required: z.ZodBoolean;
1469
- }, z.core.$loose>>;
1470
- batch_credential_issuance: z.ZodOptional<z.ZodObject<{
1471
- batch_size: z.ZodNumber;
1472
- }, z.core.$loose>>;
1473
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
1474
- name: z.ZodOptional<z.ZodString>;
1475
- locale: z.ZodOptional<z.ZodString>;
1476
- logo: z.ZodOptional<z.ZodObject<{
1477
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1478
- alt_text: z.ZodOptional<z.ZodString>;
1479
- }, z.core.$loose>>;
1480
- }, z.core.$loose>>>;
1481
- credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodObject<{
1482
- format: z.ZodString;
1483
- scope: z.ZodOptional<z.ZodString>;
1484
- cryptographic_binding_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
1485
- credential_signing_alg_values_supported: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString>, z.ZodArray<z.ZodNumber>]>>;
1486
- proof_types_supported: z.ZodOptional<z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"jwt">, z.ZodLiteral<"attestation">, z.ZodString]>, z.ZodObject<{
1487
- proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
1488
- key_attestations_required: z.ZodOptional<z.ZodObject<{
1489
- key_storage: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
1490
- iso_18045_high: "iso_18045_high";
1491
- iso_18045_moderate: "iso_18045_moderate";
1492
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
1493
- iso_18045_basic: "iso_18045_basic";
1494
- }>, z.ZodString]>>>;
1495
- user_authentication: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
1496
- iso_18045_high: "iso_18045_high";
1497
- iso_18045_moderate: "iso_18045_moderate";
1498
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
1499
- iso_18045_basic: "iso_18045_basic";
1500
- }>, z.ZodString]>>>;
1501
- }, z.core.$loose>>;
1502
- }, z.core.$strip>>>;
1503
- credential_metadata: z.ZodOptional<z.ZodObject<{
1504
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
1505
- name: z.ZodString;
1506
- locale: z.ZodOptional<z.ZodString>;
1507
- logo: z.ZodOptional<z.ZodObject<{
1508
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1509
- alt_text: z.ZodOptional<z.ZodString>;
1510
- }, z.core.$loose>>;
1511
- description: z.ZodOptional<z.ZodString>;
1512
- background_color: z.ZodOptional<z.ZodString>;
1513
- background_image: z.ZodOptional<z.ZodObject<{
1514
- uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1515
- }, z.core.$loose>>;
1516
- text_color: z.ZodOptional<z.ZodString>;
1517
- }, z.core.$loose>>>;
1518
- }, z.core.$loose>>;
1519
- }, z.core.$loose>>;
1520
- iat: z.ZodNumber;
1521
- sub: z.ZodString;
1522
- iss: z.ZodOptional<z.ZodString>;
1523
- aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
1524
- exp: z.ZodOptional<z.ZodNumber>;
1525
- nbf: z.ZodOptional<z.ZodNumber>;
1526
- nonce: z.ZodOptional<z.ZodString>;
1527
- jti: z.ZodOptional<z.ZodString>;
1528
- cnf: z.ZodOptional<z.ZodObject<{
1529
- jwk: z.ZodOptional<z.ZodObject<{
1530
- kty: z.ZodString;
1531
- crv: z.ZodOptional<z.ZodString>;
1532
- x: z.ZodOptional<z.ZodString>;
1533
- y: z.ZodOptional<z.ZodString>;
1534
- e: z.ZodOptional<z.ZodString>;
1535
- n: z.ZodOptional<z.ZodString>;
1536
- alg: z.ZodOptional<z.ZodString>;
1537
- d: z.ZodOptional<z.ZodString>;
1538
- dp: z.ZodOptional<z.ZodString>;
1539
- dq: z.ZodOptional<z.ZodString>;
1540
- ext: z.ZodOptional<z.ZodBoolean>;
1541
- k: z.ZodOptional<z.ZodString>;
1542
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
1543
- kid: z.ZodOptional<z.ZodString>;
1544
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
1545
- d: z.ZodOptional<z.ZodString>;
1546
- r: z.ZodOptional<z.ZodString>;
1547
- t: z.ZodOptional<z.ZodString>;
1548
- }, z.core.$loose>>>;
1549
- p: z.ZodOptional<z.ZodString>;
1550
- q: z.ZodOptional<z.ZodString>;
1551
- qi: z.ZodOptional<z.ZodString>;
1552
- use: z.ZodOptional<z.ZodString>;
1553
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
1554
- x5t: z.ZodOptional<z.ZodString>;
1555
- 'x5t#S256': z.ZodOptional<z.ZodString>;
1556
- x5u: z.ZodOptional<z.ZodString>;
1557
- }, z.core.$loose>>;
1558
- jkt: z.ZodOptional<z.ZodString>;
1559
- }, z.core.$loose>>;
1560
- status: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
1561
- trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
1562
- }, z.core.$loose>;
1563
- //#endregion
1564
- //#region src/metadata/credential-issuer/credential-issuer-metadata.d.ts
1565
- interface CredentialIssuerMetadataSigned {
1566
- jwt: DecodeJwtResult<typeof zSignedCredentialIssuerMetadataHeader, typeof zSignedCredentialIssuerMetadataPayload>;
1567
- signer: JwtSignerWithJwk;
1568
- }
1569
- //#endregion
1570
- //#region src/metadata/fetch-issuer-metadata.d.ts
1571
- interface IssuerMetadataResult {
1572
- originalDraftVersion: Openid4vciDraftVersion;
1573
- credentialIssuer: CredentialIssuerMetadata;
1574
- /**
1575
- * Metadata about the signed credential issuer metadata,
1576
- * if the issuer metadata was signed
1577
- */
1578
- signedCredentialIssuer?: CredentialIssuerMetadataSigned;
1579
- authorizationServers: AuthorizationServerMetadata[];
1580
- /**
1581
- * Known credential configurations includes all the credential configurations with a known credential format
1582
- * that pass the validation requirements from the OpenID4VCI specification. Recognized formats that do not
1583
- * adhere to the format specific metadata requirements are not included, but also won't result in an error, to
1584
- * to still allow interacting with issuers using invalid metadata for specific configurations.
1585
- */
1586
- knownCredentialConfigurations: CredentialConfigurationsSupportedWithFormats;
1587
- }
1588
- //#endregion
1589
- //#region src/credential-offer/z-credential-offer.d.ts
1590
- declare const zTxCode: z.ZodObject<{
1591
- input_mode: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"numeric">, z.ZodLiteral<"text">]>>;
1592
- length: z.ZodOptional<z.ZodNumber>;
1593
- description: z.ZodOptional<z.ZodString>;
1594
- }, z.core.$loose>;
1595
- type CredentialOfferPreAuthorizedCodeGrantTxCode = z.input<typeof zTxCode>;
1596
- declare const zCredentialOfferGrants: z.ZodObject<{
1597
- authorization_code: z.ZodOptional<z.ZodObject<{
1598
- issuer_state: z.ZodOptional<z.ZodString>;
1599
- authorization_server: z.ZodOptional<z.ZodURL>;
1600
- }, z.core.$loose>>;
1601
- "urn:ietf:params:oauth:grant-type:pre-authorized_code": z.ZodOptional<z.ZodObject<{
1602
- 'pre-authorized_code': z.ZodString;
1603
- tx_code: z.ZodOptional<z.ZodObject<{
1604
- input_mode: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"numeric">, z.ZodLiteral<"text">]>>;
1605
- length: z.ZodOptional<z.ZodNumber>;
1606
- description: z.ZodOptional<z.ZodString>;
1607
- }, z.core.$loose>>;
1608
- authorization_server: z.ZodOptional<z.ZodURL>;
1609
- }, z.core.$loose>>;
1610
- }, z.core.$loose>;
1611
- type CredentialOfferGrants = z.input<typeof zCredentialOfferGrants>;
1612
- type CredentialOfferPreAuthorizedCodeGrant = CredentialOfferGrants[PreAuthorizedCodeGrantIdentifier];
1613
- type CredentialOfferAuthorizationCodeGrant = CredentialOfferGrants[AuthorizationCodeGrantIdentifier];
1614
- declare const zCredentialOfferObjectDraft14: z.ZodObject<{
1615
- credential_issuer: z.ZodURL;
1616
- credential_configuration_ids: z.ZodArray<z.ZodString>;
1617
- grants: z.ZodOptional<z.ZodObject<{
1618
- authorization_code: z.ZodOptional<z.ZodObject<{
1619
- issuer_state: z.ZodOptional<z.ZodString>;
1620
- authorization_server: z.ZodOptional<z.ZodURL>;
1621
- }, z.core.$loose>>;
1622
- "urn:ietf:params:oauth:grant-type:pre-authorized_code": z.ZodOptional<z.ZodObject<{
1623
- 'pre-authorized_code': z.ZodString;
1624
- tx_code: z.ZodOptional<z.ZodObject<{
1625
- input_mode: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"numeric">, z.ZodLiteral<"text">]>>;
1626
- length: z.ZodOptional<z.ZodNumber>;
1627
- description: z.ZodOptional<z.ZodString>;
1628
- }, z.core.$loose>>;
1629
- authorization_server: z.ZodOptional<z.ZodURL>;
1630
- }, z.core.$loose>>;
1631
- }, z.core.$loose>>;
1632
- }, z.core.$loose>;
1633
- type CredentialOfferObject = z.input<typeof zCredentialOfferObjectDraft14>;
1634
- //#endregion
1635
- //#region src/credential-offer/credential-offer.d.ts
1636
- interface CreateCredentialOfferGrantsOptions {
1637
- [preAuthorizedCodeGrantIdentifier]?: Partial<CredentialOfferPreAuthorizedCodeGrant>;
1638
- [authorizationCodeGrantIdentifier]?: CredentialOfferAuthorizationCodeGrant;
1639
- [key: string]: unknown;
1640
- }
1641
- interface CreateCredentialOfferOptions {
1642
- issuerMetadata: IssuerMetadataResult;
1643
- /**
1644
- * The credential configuration ids to be offered
1645
- */
1646
- credentialConfigurationIds: string[];
1647
- /**
1648
- * Grants to include in the credential offer
1649
- */
1650
- grants: CreateCredentialOfferGrantsOptions;
1651
- /**
1652
- * Additional payload to include in the body of the credential offer. Will be applied
1653
- * after the other fields, allowing to override common properties, so be cautious.
1654
- */
1655
- additionalPayload?: Record<string, unknown>;
1656
- /**
1657
- * If provided the encoded credential offer will use the `credential_offer_uri` parameter
1658
- * instead of directly adding the `credential_offer`. Requires hosting of the `credential_offer_uri`
1659
- */
1660
- credentialOfferUri?: string;
1661
- /**
1662
- * The scheme to use for the credential offer.
1663
- *
1664
- * @default `openid-credential-offer://`
1665
- */
1666
- credentialOfferScheme?: string;
1667
- /**
1668
- * Callbacks used to create credential offer
1669
- */
1670
- callbacks: Pick<CallbackContext, 'generateRandom'>;
1671
- }
1672
- interface DetermineAuthorizationServerForGrant {
1673
- issuerMetadata: IssuerMetadataResult;
1674
- grantAuthorizationServer?: string;
1675
- }
1676
- declare function determineAuthorizationServerForCredentialOffer(options: DetermineAuthorizationServerForGrant): string;
1677
- //#endregion
1678
- //#region src/credential-request/z-credential-request-common.d.ts
1679
- declare const zCredentialRequestProof: z.ZodUnion<readonly [z.ZodObject<{
1680
- proof_type: z.ZodString;
1681
- }, z.core.$loose>, z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
1682
- proof_type: z.ZodLiteral<"jwt">;
1683
- jwt: z.ZodString;
1684
- }, z.core.$strip>, z.ZodObject<{
1685
- proof_type: z.ZodLiteral<"attestation">;
1686
- attestation: z.ZodString;
1687
- }, z.core.$strip>], "proof_type">]>;
1688
- declare const zCredentialRequestProofs: z.ZodObject<{
1689
- jwt: z.ZodOptional<z.ZodArray<z.ZodString>>;
1690
- attestation: z.ZodOptional<z.ZodArray<z.ZodString>>;
1691
- }, z.core.$strip>;
1692
- type CredentialRequestProof = z.infer<typeof zCredentialRequestProof>;
1693
- type CredentialRequestProofsFormatSpecific = z.infer<typeof zCredentialRequestProofs>;
1694
- type CredentialRequestProofs = z.infer<typeof zCredentialRequestProofs>;
1695
- declare const zCredentialRequestCommon: z.ZodObject<{
1696
- proof: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
1697
- proof_type: z.ZodString;
1698
- }, z.core.$loose>, z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
1699
- proof_type: z.ZodLiteral<"jwt">;
1700
- jwt: z.ZodString;
1701
- }, z.core.$strip>, z.ZodObject<{
1702
- proof_type: z.ZodLiteral<"attestation">;
1703
- attestation: z.ZodString;
1704
- }, z.core.$strip>], "proof_type">]>>;
1705
- proofs: z.ZodOptional<z.ZodIntersection<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodUnknown>>, z.ZodObject<{
1706
- jwt: z.ZodOptional<z.ZodArray<z.ZodString>>;
1707
- attestation: z.ZodOptional<z.ZodArray<z.ZodString>>;
1708
- }, z.core.$strip>>>;
1709
- credential_response_encryption: z.ZodOptional<z.ZodObject<{
1710
- jwk: z.ZodObject<{
1711
- kty: z.ZodString;
1712
- crv: z.ZodOptional<z.ZodString>;
1713
- x: z.ZodOptional<z.ZodString>;
1714
- y: z.ZodOptional<z.ZodString>;
1715
- e: z.ZodOptional<z.ZodString>;
1716
- n: z.ZodOptional<z.ZodString>;
1717
- alg: z.ZodOptional<z.ZodString>;
1718
- d: z.ZodOptional<z.ZodString>;
1719
- dp: z.ZodOptional<z.ZodString>;
1720
- dq: z.ZodOptional<z.ZodString>;
1721
- ext: z.ZodOptional<z.ZodBoolean>;
1722
- k: z.ZodOptional<z.ZodString>;
1723
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
1724
- kid: z.ZodOptional<z.ZodString>;
1725
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
1726
- d: z.ZodOptional<z.ZodString>;
1727
- r: z.ZodOptional<z.ZodString>;
1728
- t: z.ZodOptional<z.ZodString>;
1729
- }, z.core.$loose>>>;
1730
- p: z.ZodOptional<z.ZodString>;
1731
- q: z.ZodOptional<z.ZodString>;
1732
- qi: z.ZodOptional<z.ZodString>;
1733
- use: z.ZodOptional<z.ZodString>;
1734
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
1735
- x5t: z.ZodOptional<z.ZodString>;
1736
- 'x5t#S256': z.ZodOptional<z.ZodString>;
1737
- x5u: z.ZodOptional<z.ZodString>;
1738
- }, z.core.$loose>;
1739
- alg: z.ZodString;
1740
- enc: z.ZodString;
1741
- }, z.core.$loose>>;
1742
- }, z.core.$loose>;
1743
- //#endregion
1744
- //#region src/credential-request/z-credential-request.d.ts
1745
- declare const allCredentialRequestFormats: readonly [z.ZodObject<{
1746
- format: z.ZodLiteral<"vc+sd-jwt">;
1747
- credential_definition: z.ZodObject<{
1748
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
1749
- }, z.core.$loose>;
1750
- vct: z.ZodOptional<z.ZodNever>;
1751
- }, z.core.$strip>, z.ZodObject<{
1752
- format: z.ZodLiteral<"mso_mdoc">;
1753
- doctype: z.ZodString;
1754
- claims: z.ZodOptional<z.ZodType<CredentialConfigurationSupportedClaimsDraft14, unknown, z.core.$ZodTypeInternals<CredentialConfigurationSupportedClaimsDraft14, unknown>>>;
1755
- }, z.core.$strip>, z.ZodObject<{
1756
- format: z.ZodLiteral<"ldp_vc">;
1757
- credential_definition: z.ZodObject<{
1758
- '@context': z.ZodArray<z.ZodString>;
1759
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
1760
- credentialSubject: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodObject<{
1761
- mandatory: z.ZodOptional<z.ZodBoolean>;
1762
- value_type: z.ZodOptional<z.ZodString>;
1763
- display: z.ZodOptional<z.ZodArray<z.ZodObject<{
1764
- name: z.ZodOptional<z.ZodString>;
1765
- locale: z.ZodOptional<z.ZodString>;
1766
- }, z.core.$loose>>>;
1767
- }, z.core.$loose>]>>>;
1768
- }, z.core.$loose>;
1769
- }, z.core.$strip>, z.ZodObject<{
1770
- format: z.ZodLiteral<"jwt_vc_json-ld">;
1771
- credential_definition: z.ZodObject<{
1772
- '@context': z.ZodArray<z.ZodString>;
1773
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
1774
- }, z.core.$loose>;
1775
- }, z.core.$strip>, z.ZodObject<{
1776
- format: z.ZodLiteral<"jwt_vc_json">;
1777
- credential_definition: z.ZodObject<{
1778
- type: z.ZodTuple<[z.ZodString], z.ZodString>;
1779
- }, z.core.$loose>;
1780
- }, z.core.$strip>, z.ZodObject<{
1781
- format: z.ZodLiteral<"vc+sd-jwt">;
1782
- vct: z.ZodString;
1783
- claims: z.ZodOptional<z.ZodType<CredentialConfigurationSupportedClaimsDraft14, unknown, z.core.$ZodTypeInternals<CredentialConfigurationSupportedClaimsDraft14, unknown>>>;
1784
- credential_definition: z.ZodOptional<z.ZodNever>;
1785
- }, z.core.$strip>];
1786
- declare const zCredentialRequestDraft15: z.ZodUnion<readonly [z.ZodIntersection<z.ZodObject<{
1787
- proof: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
1788
- proof_type: z.ZodString;
1789
- }, z.core.$loose>, z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
1790
- proof_type: z.ZodLiteral<"jwt">;
1791
- jwt: z.ZodString;
1792
- }, z.core.$strip>, z.ZodObject<{
1793
- proof_type: z.ZodLiteral<"attestation">;
1794
- attestation: z.ZodString;
1795
- }, z.core.$strip>], "proof_type">]>>;
1796
- proofs: z.ZodOptional<z.ZodIntersection<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodUnknown>>, z.ZodObject<{
1797
- jwt: z.ZodOptional<z.ZodArray<z.ZodString>>;
1798
- attestation: z.ZodOptional<z.ZodArray<z.ZodString>>;
1799
- }, z.core.$strip>>>;
1800
- credential_response_encryption: z.ZodOptional<z.ZodObject<{
1801
- jwk: z.ZodObject<{
1802
- kty: z.ZodString;
1803
- crv: z.ZodOptional<z.ZodString>;
1804
- x: z.ZodOptional<z.ZodString>;
1805
- y: z.ZodOptional<z.ZodString>;
1806
- e: z.ZodOptional<z.ZodString>;
1807
- n: z.ZodOptional<z.ZodString>;
1808
- alg: z.ZodOptional<z.ZodString>;
1809
- d: z.ZodOptional<z.ZodString>;
1810
- dp: z.ZodOptional<z.ZodString>;
1811
- dq: z.ZodOptional<z.ZodString>;
1812
- ext: z.ZodOptional<z.ZodBoolean>;
1813
- k: z.ZodOptional<z.ZodString>;
1814
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
1815
- kid: z.ZodOptional<z.ZodString>;
1816
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
1817
- d: z.ZodOptional<z.ZodString>;
1818
- r: z.ZodOptional<z.ZodString>;
1819
- t: z.ZodOptional<z.ZodString>;
1820
- }, z.core.$loose>>>;
1821
- p: z.ZodOptional<z.ZodString>;
1822
- q: z.ZodOptional<z.ZodString>;
1823
- qi: z.ZodOptional<z.ZodString>;
1824
- use: z.ZodOptional<z.ZodString>;
1825
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
1826
- x5t: z.ZodOptional<z.ZodString>;
1827
- 'x5t#S256': z.ZodOptional<z.ZodString>;
1828
- x5u: z.ZodOptional<z.ZodString>;
1829
- }, z.core.$loose>;
1830
- alg: z.ZodString;
1831
- enc: z.ZodString;
1832
- }, z.core.$loose>>;
1833
- }, z.core.$loose>, z.ZodObject<{
1834
- credential_identifier: z.ZodString;
1835
- credential_configuration_id: z.ZodOptional<z.ZodNever>;
1836
- format: z.ZodOptional<z.ZodNever>;
1837
- }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
1838
- proof: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
1839
- proof_type: z.ZodString;
1840
- }, z.core.$loose>, z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
1841
- proof_type: z.ZodLiteral<"jwt">;
1842
- jwt: z.ZodString;
1843
- }, z.core.$strip>, z.ZodObject<{
1844
- proof_type: z.ZodLiteral<"attestation">;
1845
- attestation: z.ZodString;
1846
- }, z.core.$strip>], "proof_type">]>>;
1847
- proofs: z.ZodOptional<z.ZodIntersection<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodUnknown>>, z.ZodObject<{
1848
- jwt: z.ZodOptional<z.ZodArray<z.ZodString>>;
1849
- attestation: z.ZodOptional<z.ZodArray<z.ZodString>>;
1850
- }, z.core.$strip>>>;
1851
- credential_response_encryption: z.ZodOptional<z.ZodObject<{
1852
- jwk: z.ZodObject<{
1853
- kty: z.ZodString;
1854
- crv: z.ZodOptional<z.ZodString>;
1855
- x: z.ZodOptional<z.ZodString>;
1856
- y: z.ZodOptional<z.ZodString>;
1857
- e: z.ZodOptional<z.ZodString>;
1858
- n: z.ZodOptional<z.ZodString>;
1859
- alg: z.ZodOptional<z.ZodString>;
1860
- d: z.ZodOptional<z.ZodString>;
1861
- dp: z.ZodOptional<z.ZodString>;
1862
- dq: z.ZodOptional<z.ZodString>;
1863
- ext: z.ZodOptional<z.ZodBoolean>;
1864
- k: z.ZodOptional<z.ZodString>;
1865
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
1866
- kid: z.ZodOptional<z.ZodString>;
1867
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
1868
- d: z.ZodOptional<z.ZodString>;
1869
- r: z.ZodOptional<z.ZodString>;
1870
- t: z.ZodOptional<z.ZodString>;
1871
- }, z.core.$loose>>>;
1872
- p: z.ZodOptional<z.ZodString>;
1873
- q: z.ZodOptional<z.ZodString>;
1874
- qi: z.ZodOptional<z.ZodString>;
1875
- use: z.ZodOptional<z.ZodString>;
1876
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
1877
- x5t: z.ZodOptional<z.ZodString>;
1878
- 'x5t#S256': z.ZodOptional<z.ZodString>;
1879
- x5u: z.ZodOptional<z.ZodString>;
1880
- }, z.core.$loose>;
1881
- alg: z.ZodString;
1882
- enc: z.ZodString;
1883
- }, z.core.$loose>>;
1884
- }, z.core.$loose>, z.ZodObject<{
1885
- credential_configuration_id: z.ZodString;
1886
- format: z.ZodOptional<z.ZodNever>;
1887
- credential_identifier: z.ZodOptional<z.ZodNever>;
1888
- }, z.core.$strip>>]>;
1889
- declare const zCredentialRequestDraft14: z.ZodUnion<readonly [z.ZodPipe<z.ZodIntersection<z.ZodObject<{
1890
- proof: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
1891
- proof_type: z.ZodString;
1892
- }, z.core.$loose>, z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
1893
- proof_type: z.ZodLiteral<"jwt">;
1894
- jwt: z.ZodString;
1895
- }, z.core.$strip>, z.ZodObject<{
1896
- proof_type: z.ZodLiteral<"attestation">;
1897
- attestation: z.ZodString;
1898
- }, z.core.$strip>], "proof_type">]>>;
1899
- proofs: z.ZodOptional<z.ZodIntersection<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodUnknown>>, z.ZodObject<{
1900
- jwt: z.ZodOptional<z.ZodArray<z.ZodString>>;
1901
- attestation: z.ZodOptional<z.ZodArray<z.ZodString>>;
1902
- }, z.core.$strip>>>;
1903
- credential_response_encryption: z.ZodOptional<z.ZodObject<{
1904
- jwk: z.ZodObject<{
1905
- kty: z.ZodString;
1906
- crv: z.ZodOptional<z.ZodString>;
1907
- x: z.ZodOptional<z.ZodString>;
1908
- y: z.ZodOptional<z.ZodString>;
1909
- e: z.ZodOptional<z.ZodString>;
1910
- n: z.ZodOptional<z.ZodString>;
1911
- alg: z.ZodOptional<z.ZodString>;
1912
- d: z.ZodOptional<z.ZodString>;
1913
- dp: z.ZodOptional<z.ZodString>;
1914
- dq: z.ZodOptional<z.ZodString>;
1915
- ext: z.ZodOptional<z.ZodBoolean>;
1916
- k: z.ZodOptional<z.ZodString>;
1917
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
1918
- kid: z.ZodOptional<z.ZodString>;
1919
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
1920
- d: z.ZodOptional<z.ZodString>;
1921
- r: z.ZodOptional<z.ZodString>;
1922
- t: z.ZodOptional<z.ZodString>;
1923
- }, z.core.$loose>>>;
1924
- p: z.ZodOptional<z.ZodString>;
1925
- q: z.ZodOptional<z.ZodString>;
1926
- qi: z.ZodOptional<z.ZodString>;
1927
- use: z.ZodOptional<z.ZodString>;
1928
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
1929
- x5t: z.ZodOptional<z.ZodString>;
1930
- 'x5t#S256': z.ZodOptional<z.ZodString>;
1931
- x5u: z.ZodOptional<z.ZodString>;
1932
- }, z.core.$loose>;
1933
- alg: z.ZodString;
1934
- enc: z.ZodString;
1935
- }, z.core.$loose>>;
1936
- }, z.core.$loose>, z.ZodObject<{
1937
- format: z.ZodString;
1938
- credential_identifier: z.ZodOptional<z.ZodNever>;
1939
- credential_configuration_id: z.ZodOptional<z.ZodNever>;
1940
- }, z.core.$loose>>, z.ZodTransform<{
1941
- [x: string]: unknown;
1942
- proof?: {
1943
- proof_type: "jwt";
1944
- jwt: string;
1945
- } | {
1946
- proof_type: "attestation";
1947
- attestation: string;
1948
- } | {
1949
- [x: string]: unknown;
1950
- proof_type: string;
1951
- } | undefined;
1952
- proofs?: (Record<string, unknown[]> & {
1953
- jwt?: string[] | undefined;
1954
- attestation?: string[] | undefined;
1955
- }) | undefined;
1956
- credential_response_encryption?: {
1957
- [x: string]: unknown;
1958
- jwk: {
1959
- [x: string]: unknown;
1960
- kty: string;
1961
- crv?: string | undefined;
1962
- x?: string | undefined;
1963
- y?: string | undefined;
1964
- e?: string | undefined;
1965
- n?: string | undefined;
1966
- alg?: string | undefined;
1967
- d?: string | undefined;
1968
- dp?: string | undefined;
1969
- dq?: string | undefined;
1970
- ext?: boolean | undefined;
1971
- k?: string | undefined;
1972
- key_ops?: string[] | undefined;
1973
- kid?: string | undefined;
1974
- oth?: {
1975
- [x: string]: unknown;
1976
- d?: string | undefined;
1977
- r?: string | undefined;
1978
- t?: string | undefined;
1979
- }[] | undefined;
1980
- p?: string | undefined;
1981
- q?: string | undefined;
1982
- qi?: string | undefined;
1983
- use?: string | undefined;
1984
- x5c?: string[] | undefined;
1985
- x5t?: string | undefined;
1986
- 'x5t#S256'?: string | undefined;
1987
- x5u?: string | undefined;
1988
- };
1989
- alg: string;
1990
- enc: string;
1991
- } | undefined;
1992
- } & {
1993
- [x: string]: unknown;
1994
- format: string;
1995
- credential_identifier?: undefined;
1996
- credential_configuration_id?: undefined;
1997
- }, {
1998
- [x: string]: unknown;
1999
- proof?: {
2000
- proof_type: "jwt";
2001
- jwt: string;
2002
- } | {
2003
- proof_type: "attestation";
2004
- attestation: string;
2005
- } | {
2006
- [x: string]: unknown;
2007
- proof_type: string;
2008
- } | undefined;
2009
- proofs?: (Record<string, unknown[]> & {
2010
- jwt?: string[] | undefined;
2011
- attestation?: string[] | undefined;
2012
- }) | undefined;
2013
- credential_response_encryption?: {
2014
- [x: string]: unknown;
2015
- jwk: {
2016
- [x: string]: unknown;
2017
- kty: string;
2018
- crv?: string | undefined;
2019
- x?: string | undefined;
2020
- y?: string | undefined;
2021
- e?: string | undefined;
2022
- n?: string | undefined;
2023
- alg?: string | undefined;
2024
- d?: string | undefined;
2025
- dp?: string | undefined;
2026
- dq?: string | undefined;
2027
- ext?: boolean | undefined;
2028
- k?: string | undefined;
2029
- key_ops?: string[] | undefined;
2030
- kid?: string | undefined;
2031
- oth?: {
2032
- [x: string]: unknown;
2033
- d?: string | undefined;
2034
- r?: string | undefined;
2035
- t?: string | undefined;
2036
- }[] | undefined;
2037
- p?: string | undefined;
2038
- q?: string | undefined;
2039
- qi?: string | undefined;
2040
- use?: string | undefined;
2041
- x5c?: string[] | undefined;
2042
- x5t?: string | undefined;
2043
- 'x5t#S256'?: string | undefined;
2044
- x5u?: string | undefined;
2045
- };
2046
- alg: string;
2047
- enc: string;
2048
- } | undefined;
2049
- } & {
2050
- [x: string]: unknown;
2051
- format: string;
2052
- credential_identifier?: undefined;
2053
- credential_configuration_id?: undefined;
2054
- }>>, z.ZodIntersection<z.ZodObject<{
2055
- proof: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
2056
- proof_type: z.ZodString;
2057
- }, z.core.$loose>, z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
2058
- proof_type: z.ZodLiteral<"jwt">;
2059
- jwt: z.ZodString;
2060
- }, z.core.$strip>, z.ZodObject<{
2061
- proof_type: z.ZodLiteral<"attestation">;
2062
- attestation: z.ZodString;
2063
- }, z.core.$strip>], "proof_type">]>>;
2064
- proofs: z.ZodOptional<z.ZodIntersection<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodUnknown>>, z.ZodObject<{
2065
- jwt: z.ZodOptional<z.ZodArray<z.ZodString>>;
2066
- attestation: z.ZodOptional<z.ZodArray<z.ZodString>>;
2067
- }, z.core.$strip>>>;
2068
- credential_response_encryption: z.ZodOptional<z.ZodObject<{
2069
- jwk: z.ZodObject<{
2070
- kty: z.ZodString;
2071
- crv: z.ZodOptional<z.ZodString>;
2072
- x: z.ZodOptional<z.ZodString>;
2073
- y: z.ZodOptional<z.ZodString>;
2074
- e: z.ZodOptional<z.ZodString>;
2075
- n: z.ZodOptional<z.ZodString>;
2076
- alg: z.ZodOptional<z.ZodString>;
2077
- d: z.ZodOptional<z.ZodString>;
2078
- dp: z.ZodOptional<z.ZodString>;
2079
- dq: z.ZodOptional<z.ZodString>;
2080
- ext: z.ZodOptional<z.ZodBoolean>;
2081
- k: z.ZodOptional<z.ZodString>;
2082
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
2083
- kid: z.ZodOptional<z.ZodString>;
2084
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
2085
- d: z.ZodOptional<z.ZodString>;
2086
- r: z.ZodOptional<z.ZodString>;
2087
- t: z.ZodOptional<z.ZodString>;
2088
- }, z.core.$loose>>>;
2089
- p: z.ZodOptional<z.ZodString>;
2090
- q: z.ZodOptional<z.ZodString>;
2091
- qi: z.ZodOptional<z.ZodString>;
2092
- use: z.ZodOptional<z.ZodString>;
2093
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
2094
- x5t: z.ZodOptional<z.ZodString>;
2095
- 'x5t#S256': z.ZodOptional<z.ZodString>;
2096
- x5u: z.ZodOptional<z.ZodString>;
2097
- }, z.core.$loose>;
2098
- alg: z.ZodString;
2099
- enc: z.ZodString;
2100
- }, z.core.$loose>>;
2101
- }, z.core.$loose>, z.ZodObject<{
2102
- credential_identifier: z.ZodString;
2103
- credential_configuration_id: z.ZodOptional<z.ZodNever>;
2104
- format: z.ZodOptional<z.ZodNever>;
2105
- }, z.core.$strip>>]>;
2106
- declare const zDeferredCredentialRequest: z.ZodObject<{
2107
- transaction_id: z.ZodString;
2108
- credential_response_encryption: z.ZodOptional<z.ZodObject<{
2109
- jwk: z.ZodObject<{
2110
- kty: z.ZodString;
2111
- crv: z.ZodOptional<z.ZodString>;
2112
- x: z.ZodOptional<z.ZodString>;
2113
- y: z.ZodOptional<z.ZodString>;
2114
- e: z.ZodOptional<z.ZodString>;
2115
- n: z.ZodOptional<z.ZodString>;
2116
- alg: z.ZodOptional<z.ZodString>;
2117
- d: z.ZodOptional<z.ZodString>;
2118
- dp: z.ZodOptional<z.ZodString>;
2119
- dq: z.ZodOptional<z.ZodString>;
2120
- ext: z.ZodOptional<z.ZodBoolean>;
2121
- k: z.ZodOptional<z.ZodString>;
2122
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
2123
- kid: z.ZodOptional<z.ZodString>;
2124
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
2125
- d: z.ZodOptional<z.ZodString>;
2126
- r: z.ZodOptional<z.ZodString>;
2127
- t: z.ZodOptional<z.ZodString>;
2128
- }, z.core.$loose>>>;
2129
- p: z.ZodOptional<z.ZodString>;
2130
- q: z.ZodOptional<z.ZodString>;
2131
- qi: z.ZodOptional<z.ZodString>;
2132
- use: z.ZodOptional<z.ZodString>;
2133
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
2134
- x5t: z.ZodOptional<z.ZodString>;
2135
- 'x5t#S256': z.ZodOptional<z.ZodString>;
2136
- x5u: z.ZodOptional<z.ZodString>;
2137
- }, z.core.$loose>;
2138
- alg: z.ZodString;
2139
- enc: z.ZodString;
2140
- }, z.core.$loose>>;
2141
- }, z.core.$strip>;
2142
- type CredentialRequestCommon = z.infer<typeof zCredentialRequestCommon>;
2143
- type CredentialRequestFormatSpecific = InferOutputUnion<typeof allCredentialRequestFormats>;
2144
- type CredentialRequestWithFormats = CredentialRequestCommon & CredentialRequestFormatSpecific;
2145
- type CredentialRequestDraft14 = z.infer<typeof zCredentialRequestDraft14>;
2146
- type CredentialRequestDraft15 = z.infer<typeof zCredentialRequestDraft15>;
2147
- type CredentialRequest = CredentialRequestDraft14 | CredentialRequestDraft15;
2148
- type DeferredCredentialRequest = z.infer<typeof zDeferredCredentialRequest>;
2149
- //#endregion
2150
- //#region src/credential-request/credential-request-configurations.d.ts
2151
- interface GetCredentialConfigurationsMatchingRequestFormatOptions {
2152
- requestFormat: CredentialRequestFormatSpecific;
2153
- issuerMetadata: IssuerMetadataResult;
2154
- }
2155
- declare function getCredentialConfigurationsMatchingRequestFormat({
2156
- requestFormat,
2157
- issuerMetadata
2158
- }: GetCredentialConfigurationsMatchingRequestFormatOptions): CredentialConfigurationsSupportedWithFormats;
2159
- //#endregion
2160
- //#region src/credential-request/parse-credential-request.d.ts
2161
- interface ParseCredentialRequestOptions {
2162
- issuerMetadata: IssuerMetadataResult;
2163
- credentialRequest: Record<string, unknown>;
2164
- }
2165
- interface ParseCredentialRequestReturn {
2166
- /**
2167
- * If the request was for a `format` that is known to this library it will have the
2168
- * format specific data defined here. Will not be defined if the request is for an unknown format,
2169
- * or if `credential_identifier` is used.
2170
- */
2171
- format?: CredentialRequestFormatSpecific;
2172
- /**
2173
- * If the request contains `proof` or `proofs` with a `proof_type` that is known to this
2174
- * library it will have the proof type specific data defined here. Will not be defined
2175
- * if the `proof_type` is not known or no `proof` or `proofs` were included.
2176
- *
2177
- * The `proof` property is parsed to the new proofs structure and the entries will
2178
- * always only have a single entry in this case.
2179
- *
2180
- * NOTE: this value being `undefined` does NOT mean there were no proofs.
2181
- * It means that either there were no proofs, or that the proof format is not
2182
- * known to this library
2183
- */
2184
- proofs?: CredentialRequestProofsFormatSpecific;
2185
- /**
2186
- * If authorization details were used a `credential_identifier` will be included
2187
- * in the request. Will not be defined if `format` is defined.
2188
- */
2189
- credentialIdentifier?: string;
2190
- /**
2191
- * Starting from OID4VCI draft 15 the credential request can include a `credential_configuration_id`.
2192
- * This will only be defined if the request included the credential configuration id.
2193
- *
2194
- * An error will be thrown if a credential configuration id was included in the request that is not
2195
- * present in the credential configurations supported of the issuer metadata
2196
- */
2197
- credentialConfigurationId?: string;
2198
- /**
2199
- * If the request included a `credential_configuration_id` with a known format, it will
2200
- * be included here. It's still possible `credential_configuration_id` was defined, but
2201
- * it's not a known format.
2202
- */
2203
- credentialConfiguration?: CredentialConfigurationSupportedWithFormats;
2204
- /**
2205
- * The validated credential request. If both `format` and `credentialIdentifier` are
2206
- * undefined you can still handle the request by using this object directly.
2207
- */
2208
- credentialRequest: CredentialRequest;
2209
- }
2210
- //#endregion
2211
- //#region ../oauth2/src/common/z-oauth2-error.d.ts
2212
- declare enum Oauth2ErrorCodes {
2213
- ServerError = "server_error",
2214
- InvalidTarget = "invalid_target",
2215
- InvalidRequest = "invalid_request",
2216
- InvalidToken = "invalid_token",
2217
- InsufficientScope = "insufficient_scope",
2218
- InvalidGrant = "invalid_grant",
2219
- InvalidClient = "invalid_client",
2220
- UnauthorizedClient = "unauthorized_client",
2221
- UnsupportedGrantType = "unsupported_grant_type",
2222
- InvalidScope = "invalid_scope",
2223
- InvalidDpopProof = "invalid_dpop_proof",
2224
- UseDpopNonce = "use_dpop_nonce",
2225
- RedirectToWeb = "redirect_to_web",
2226
- InvalidSession = "invalid_session",
2227
- InsufficientAuthorization = "insufficient_authorization",
2228
- InvalidCredentialRequest = "invalid_credential_request",
2229
- CredentialRequestDenied = "credential_request_denied",
2230
- InvalidProof = "invalid_proof",
2231
- InvalidNonce = "invalid_nonce",
2232
- InvalidEncryptionParameters = "invalid_encryption_parameters",
2233
- UnknownCredentialConfiguration = "unknown_credential_configuration",
2234
- UnknownCredentialIdentifier = "unknown_credential_identifier",
2235
- InvalidTransactionId = "invalid_transaction_id",
2236
- UnsupportedCredentialType = "unsupported_credential_type",
2237
- UnsupportedCredentialFormat = "unsupported_credential_format",
2238
- InvalidRequestUri = "invalid_request_uri",
2239
- InvalidRequestObject = "invalid_request_object",
2240
- RequestNotSupported = "request_not_supported",
2241
- RequestUriNotSupported = "request_uri_not_supported",
2242
- VpFormatsNotSupported = "vp_formats_not_supported",
2243
- AccessDenied = "access_denied",
2244
- InvalidPresentationDefinitionUri = "invalid_presentation_definition_uri",
2245
- InvalidPresentationDefinitionReference = "invalid_presentation_definition_reference",
2246
- InvalidRequestUriMethod = "invalid_request_uri_method",
2247
- InvalidTransactionData = "invalid_transaction_data",
2248
- WalletUnavailable = "wallet_unavailable",
2249
- }
2250
- //#endregion
2251
- //#region src/credential-request/z-credential-response.d.ts
2252
- declare const zCredentialResponse: z.ZodObject<{
2253
- credentials: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodObject<{
2254
- credential: z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>;
2255
- }, z.core.$strip>>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>]>>;
2256
- notification_id: z.ZodOptional<z.ZodString>;
2257
- transaction_id: z.ZodOptional<z.ZodString>;
2258
- interval: z.ZodOptional<z.ZodNumber>;
2259
- credential: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>;
2260
- c_nonce: z.ZodOptional<z.ZodString>;
2261
- c_nonce_expires_in: z.ZodOptional<z.ZodNumber>;
2262
- }, z.core.$loose>;
2263
- type CredentialResponse = z.infer<typeof zCredentialResponse>;
2264
- declare const zCredentialErrorResponse: z.ZodObject<{
2265
- c_nonce: z.ZodOptional<z.ZodString>;
2266
- c_nonce_expires_in: z.ZodOptional<z.ZodNumber>;
2267
- error: z.ZodUnion<readonly [z.ZodEnum<typeof Oauth2ErrorCodes>, z.ZodString]>;
2268
- error_description: z.ZodOptional<z.ZodString>;
2269
- error_uri: z.ZodOptional<z.ZodString>;
2270
- }, z.core.$loose>;
2271
- type CredentialErrorResponse = z.infer<typeof zCredentialErrorResponse>;
2272
- declare const zDeferredCredentialResponse: z.ZodObject<{
2273
- credentials: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodObject<{
2274
- credential: z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>;
2275
- }, z.core.$strip>>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>]>>;
2276
- notification_id: z.ZodOptional<z.ZodString>;
2277
- transaction_id: z.ZodOptional<z.ZodString>;
2278
- interval: z.ZodOptional<z.ZodNumber>;
2279
- }, z.core.$loose>;
2280
- type DeferredCredentialResponse = z.infer<typeof zDeferredCredentialResponse>;
2281
- //#endregion
2282
- //#region src/credential-request/retrieve-credentials.d.ts
2283
- interface RetrieveCredentialsBaseOptions {
2284
- /**
2285
- * Metadata of the credential issuer and authorization servers.
2286
- */
2287
- issuerMetadata: IssuerMetadataResult;
2288
- /**
2289
- * Callback used in retrieve credentials endpoints
2290
- */
2291
- callbacks: Pick<CallbackContext, 'fetch' | 'generateRandom' | 'hash' | 'signJwt'>;
2292
- /**
2293
- * Access token authorized to retrieve the credential(s)
2294
- */
2295
- accessToken: string;
2296
- /**
2297
- * DPoP options
2298
- */
2299
- dpop?: RequestDpopOptions;
2300
- }
2301
- interface RetrieveCredentialsWithFormatOptions extends RetrieveCredentialsBaseOptions {
2302
- /**
2303
- * Additional payload to include in the credential request.
2304
- */
2305
- additionalRequestPayload?: Record<string, unknown>;
2306
- /**
2307
- * The format specific payload. Needs to at least include the `format` and other params
2308
- * are determined by the format itself
2309
- */
2310
- formatPayload: CredentialRequestWithFormats;
2311
- proof?: CredentialRequestProof;
2312
- proofs?: CredentialRequestProofs;
2313
- }
2314
- interface RetrieveCredentialsResponseOk extends ResourceRequestResponseOk {
2315
- /**
2316
- * The successful validated (in structure, not the actual contents are validated) credential response payload
2317
- */
2318
- credentialResponse: CredentialResponse;
2319
- }
2320
- interface RetrieveCredentialsResponseNotOk extends ResourceRequestResponseNotOk {
2321
- /**
2322
- * If this is defined it means the response itself was successful but the validation of the
2323
- * credential response data structure failed
2324
- */
2325
- credentialResponseResult?: ReturnType<typeof zCredentialResponse.safeParse>;
2326
- /**
2327
- * If this is defined it means the response was JSON and we tried to parse it as
2328
- * a credential error response. It may be successful or it may not be.
2329
- */
2330
- credentialErrorResponseResult?: ReturnType<typeof zCredentialErrorResponse.safeParse>;
2331
- }
2332
- interface RetrieveDeferredCredentialsOptions extends RetrieveCredentialsBaseOptions {
2333
- /**
2334
- * Additional payload to include in the credential request.
2335
- */
2336
- additionalRequestPayload?: Record<string, unknown>;
2337
- /**
2338
- * The transaction ID
2339
- */
2340
- transactionId: string;
2341
- }
2342
- interface RetrieveDeferredCredentialsResponseOk extends ResourceRequestResponseOk {
2343
- /**
2344
- * The successful validated (in structure, not the actual contents are validated) deferred credential response payload
2345
- */
2346
- deferredCredentialResponse: DeferredCredentialResponse;
2347
- }
2348
- //#endregion
2349
- //#region src/error/Openid4vciError.d.ts
2350
- interface Openid4vciErrorOptions {
2351
- cause?: unknown;
2352
- }
2353
- declare class Openid4vciError extends Error {
2354
- readonly cause?: unknown;
2355
- constructor(message?: string, options?: Openid4vciErrorOptions);
2356
- }
2357
- //#endregion
2358
- //#region src/error/Openid4vciRetrieveCredentialsError.d.ts
2359
- declare class Openid4vciRetrieveCredentialsError extends Openid4vciError {
2360
- response: RetrieveCredentialsResponseNotOk;
2361
- constructor(message: string, response: RetrieveCredentialsResponseNotOk, responseText: string);
2362
- }
2363
- //#endregion
2364
- //#region src/notification/z-notification.d.ts
2365
- declare const zNotificationEvent: z.ZodEnum<{
2366
- credential_accepted: "credential_accepted";
2367
- credential_failure: "credential_failure";
2368
- credential_deleted: "credential_deleted";
2369
- }>;
2370
- type NotificationEvent = z.infer<typeof zNotificationEvent>;
2371
- declare const zNotificationErrorResponse: z.ZodObject<{
2372
- error: z.ZodEnum<{
2373
- invalid_notification_id: "invalid_notification_id";
2374
- invalid_notification_request: "invalid_notification_request";
2375
- }>;
2376
- }, z.core.$loose>;
2377
- type NotificationErrorResponse = z.infer<typeof zNotificationErrorResponse>;
2378
- //#endregion
2379
- //#region src/notification/notification.d.ts
2380
- interface SendNotificationOptions {
2381
- notification: {
2382
- /**
2383
- * Notification id, as returned in the credential response
2384
- */
2385
- notificationId: string;
2386
- /**
2387
- * The notification
2388
- */
2389
- event: NotificationEvent;
2390
- /**
2391
- * Human readable description of the event
2392
- */
2393
- eventDescription?: string;
2394
- };
2395
- /**
2396
- * Metadata of the credential issuer and authorization servers.
2397
- */
2398
- issuerMetadata: IssuerMetadataResult;
2399
- /**
2400
- * Callback used in notification endpoint
2401
- */
2402
- callbacks: Pick<CallbackContext, 'fetch' | 'generateRandom' | 'hash' | 'signJwt'>;
2403
- /**
2404
- * Access token authorized to retrieve the credential(s)
2405
- */
2406
- accessToken: string;
2407
- /**
2408
- * DPoP options
2409
- */
2410
- dpop?: RequestDpopOptions;
2411
- /**
2412
- * Additional payload to include in the notification request.
2413
- */
2414
- additionalRequestPayload?: Record<string, unknown>;
2415
- }
2416
- type SendNotificationResponseOk = ResourceRequestResponseOk;
2417
- interface SendNotificationResponseNotOk extends ResourceRequestResponseNotOk {
2418
- /**
2419
- * If this is defined it means the response was JSON and we tried to parse it as
2420
- * a notification error response. It may be successful or it may not be.
2421
- */
2422
- notificationErrorResponseResult?: ReturnType<typeof zNotificationErrorResponse.safeParse>;
2423
- }
2424
- //#endregion
2425
- //#region src/error/Openid4vciSendNotificationError.d.ts
2426
- declare class Openid4vciSendNotificationError extends Openid4vciError {
2427
- response: SendNotificationResponseNotOk;
2428
- constructor(message: string, response: SendNotificationResponseNotOk);
2429
- }
2430
- //#endregion
2431
- //#region src/formats/credential/mso-mdoc/z-mso-mdoc.d.ts
2432
- declare const zMsoMdocFormatIdentifier: z.ZodLiteral<"mso_mdoc">;
2433
- type MsoMdocFormatIdentifier = z.infer<typeof zMsoMdocFormatIdentifier>;
2434
- //#endregion
2435
- //#region src/formats/credential/sd-jwt-dc/z-sd-jwt-dc.d.ts
2436
- declare const zSdJwtDcFormatIdentifier: z.ZodLiteral<"dc+sd-jwt">;
2437
- type SdJwtDcFormatIdentifier = z.infer<typeof zSdJwtDcFormatIdentifier>;
2438
- //#endregion
2439
- //#region src/formats/credential/sd-jwt-vc/z-sd-jwt-vc.d.ts
2440
- /**
2441
- * @deprecated format has been deprecated in favor of "dc+sd-jwt" since Draft 23
2442
- * of the OpenID for Verifiable Presentations specification. Please update your
2443
- * implementations accordingly.
2444
- */
2445
- declare const zLegacySdJwtVcFormatIdentifier: z.ZodLiteral<"vc+sd-jwt">;
2446
- /**
2447
- * @deprecated format has been deprecated in favor of "dc+sd-jwt" since Draft 23
2448
- * of the OpenID for Verifiable Presentations specification. Please update your
2449
- * implementations accordingly.
2450
- */
2451
- type LegacySdJwtVcFormatIdentifier = z.infer<typeof zLegacySdJwtVcFormatIdentifier>;
2452
- //#endregion
2453
- //#region src/formats/credential/w3c-vc/z-w3c-jwt-vc-json.d.ts
2454
- declare const zJwtVcJsonFormatIdentifier: z.ZodLiteral<"jwt_vc_json">;
2455
- type JwtVcJsonFormatIdentifier = z.infer<typeof zJwtVcJsonFormatIdentifier>;
2456
- //#endregion
2457
- //#region src/formats/credential/w3c-vc/z-w3c-jwt-vc-json-ld.d.ts
2458
- declare const zJwtVcJsonLdFormatIdentifier: z.ZodLiteral<"jwt_vc_json-ld">;
2459
- type JwtVcJsonLdFormatIdentifier = z.infer<typeof zJwtVcJsonLdFormatIdentifier>;
2460
- //#endregion
2461
- //#region src/formats/credential/w3c-vc/z-w3c-ldp-vc.d.ts
2462
- declare const zLdpVcFormatIdentifier: z.ZodLiteral<"ldp_vc">;
2463
- type LdpVcFormatIdentifier = z.infer<typeof zLdpVcFormatIdentifier>;
2464
- //#endregion
2465
- //#region src/formats/credential/index.d.ts
2466
- type CredentialFormatIdentifier = MsoMdocFormatIdentifier | LegacySdJwtVcFormatIdentifier | SdJwtDcFormatIdentifier | LdpVcFormatIdentifier | JwtVcJsonLdFormatIdentifier | JwtVcJsonFormatIdentifier;
2467
- //#endregion
2468
- //#region src/key-attestation/z-key-attestation.d.ts
2469
- type KeyAttestationJwtUse = 'proof_type.jwt' | 'proof_type.attestation';
2470
- declare const zIso18045: z.ZodEnum<{
2471
- iso_18045_high: "iso_18045_high";
2472
- iso_18045_moderate: "iso_18045_moderate";
2473
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
2474
- iso_18045_basic: "iso_18045_basic";
2475
- }>;
2476
- type Iso18045 = z.infer<typeof zIso18045>;
2477
- //#endregion
2478
- //#region src/formats/proof-type/attestation/z-attestation-proof-type.d.ts
2479
- declare const zAttestationProofTypeIdentifier: z.ZodLiteral<"attestation">;
2480
- type AttestationProofTypeIdentifier = z.infer<typeof zAttestationProofTypeIdentifier>;
2481
- //#endregion
2482
- //#region src/formats/proof-type/jwt/z-jwt-proof-type.d.ts
2483
- declare const zJwtProofTypeIdentifier: z.ZodLiteral<"jwt">;
2484
- type JwtProofTypeIdentifier = z.infer<typeof zJwtProofTypeIdentifier>;
2485
- declare const zCredentialRequestJwtProofTypeHeader: z.ZodObject<{
2486
- alg: z.ZodString;
2487
- kid: z.ZodOptional<z.ZodString>;
2488
- jwk: z.ZodOptional<z.ZodObject<{
2489
- kty: z.ZodString;
2490
- crv: z.ZodOptional<z.ZodString>;
2491
- x: z.ZodOptional<z.ZodString>;
2492
- y: z.ZodOptional<z.ZodString>;
2493
- e: z.ZodOptional<z.ZodString>;
2494
- n: z.ZodOptional<z.ZodString>;
2495
- alg: z.ZodOptional<z.ZodString>;
2496
- d: z.ZodOptional<z.ZodString>;
2497
- dp: z.ZodOptional<z.ZodString>;
2498
- dq: z.ZodOptional<z.ZodString>;
2499
- ext: z.ZodOptional<z.ZodBoolean>;
2500
- k: z.ZodOptional<z.ZodString>;
2501
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
2502
- kid: z.ZodOptional<z.ZodString>;
2503
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
2504
- d: z.ZodOptional<z.ZodString>;
2505
- r: z.ZodOptional<z.ZodString>;
2506
- t: z.ZodOptional<z.ZodString>;
2507
- }, z.core.$loose>>>;
2508
- p: z.ZodOptional<z.ZodString>;
2509
- q: z.ZodOptional<z.ZodString>;
2510
- qi: z.ZodOptional<z.ZodString>;
2511
- use: z.ZodOptional<z.ZodString>;
2512
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
2513
- x5t: z.ZodOptional<z.ZodString>;
2514
- 'x5t#S256': z.ZodOptional<z.ZodString>;
2515
- x5u: z.ZodOptional<z.ZodString>;
2516
- }, z.core.$loose>>;
2517
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
2518
- trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
2519
- key_attestation: z.ZodOptional<z.ZodString>;
2520
- typ: z.ZodLiteral<"openid4vci-proof+jwt">;
2521
- }, z.core.$loose>;
2522
- type CredentialRequestJwtProofTypeHeader = z.infer<typeof zCredentialRequestJwtProofTypeHeader>;
2523
- declare const zCredentialRequestJwtProofTypePayload: z.ZodObject<{
2524
- aud: z.ZodUnion<readonly [z.ZodURL, z.ZodArray<z.ZodURL>]>;
2525
- iat: z.ZodNumber;
2526
- iss: z.ZodOptional<z.ZodString>;
2527
- exp: z.ZodOptional<z.ZodNumber>;
2528
- nbf: z.ZodOptional<z.ZodNumber>;
2529
- nonce: z.ZodOptional<z.ZodString>;
2530
- jti: z.ZodOptional<z.ZodString>;
2531
- sub: z.ZodOptional<z.ZodString>;
2532
- cnf: z.ZodOptional<z.ZodObject<{
2533
- jwk: z.ZodOptional<z.ZodObject<{
2534
- kty: z.ZodString;
2535
- crv: z.ZodOptional<z.ZodString>;
2536
- x: z.ZodOptional<z.ZodString>;
2537
- y: z.ZodOptional<z.ZodString>;
2538
- e: z.ZodOptional<z.ZodString>;
2539
- n: z.ZodOptional<z.ZodString>;
2540
- alg: z.ZodOptional<z.ZodString>;
2541
- d: z.ZodOptional<z.ZodString>;
2542
- dp: z.ZodOptional<z.ZodString>;
2543
- dq: z.ZodOptional<z.ZodString>;
2544
- ext: z.ZodOptional<z.ZodBoolean>;
2545
- k: z.ZodOptional<z.ZodString>;
2546
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
2547
- kid: z.ZodOptional<z.ZodString>;
2548
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
2549
- d: z.ZodOptional<z.ZodString>;
2550
- r: z.ZodOptional<z.ZodString>;
2551
- t: z.ZodOptional<z.ZodString>;
2552
- }, z.core.$loose>>>;
2553
- p: z.ZodOptional<z.ZodString>;
2554
- q: z.ZodOptional<z.ZodString>;
2555
- qi: z.ZodOptional<z.ZodString>;
2556
- use: z.ZodOptional<z.ZodString>;
2557
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
2558
- x5t: z.ZodOptional<z.ZodString>;
2559
- 'x5t#S256': z.ZodOptional<z.ZodString>;
2560
- x5u: z.ZodOptional<z.ZodString>;
2561
- }, z.core.$loose>>;
2562
- jkt: z.ZodOptional<z.ZodString>;
2563
- }, z.core.$loose>>;
2564
- status: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
2565
- trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
2566
- }, z.core.$loose>;
2567
- type CredentialRequestJwtProofTypePayload = z.infer<typeof zCredentialRequestJwtProofTypePayload>;
2568
- //#endregion
2569
- //#region src/formats/proof-type/index.d.ts
2570
- type ProofTypeIdentifier = JwtProofTypeIdentifier | AttestationProofTypeIdentifier;
2571
- //#endregion
2572
- //#region src/key-attestation/key-attestation.d.ts
2573
- interface CreateKeyAttestationJwtOptions {
2574
- /**
2575
- * Nonce to use in the key attestation.
2576
- *
2577
- * MUST be present if the attestation is used with the attestation proof
2578
- */
2579
- nonce?: string;
2580
- /**
2581
- * The date when the key attestation was issued. If not provided the current time will be used.
2582
- */
2583
- issuedAt?: Date;
2584
- /**
2585
- * The date when the key attestation will expire.
2586
- *
2587
- * MUST be present if the attestation is used with the JWT proof
2588
- */
2589
- expiresAt?: Date;
2590
- /**
2591
- * The keys that the attestation jwt attests.
2592
- */
2593
- attestedKeys: Jwk[];
2594
- /**
2595
- * Optional attack potential resistance of attested keys and key storage
2596
- */
2597
- keyStorage?: StringWithAutoCompletion<Iso18045>[];
2598
- /**
2599
- * Optional attack potential resistance of user authentication methods
2600
- */
2601
- userAuthentication?: StringWithAutoCompletion<Iso18045>[];
2602
- /**
2603
- * Optional url linking to the certification of the key storage component.
2604
- */
2605
- certification?: string;
2606
- /**
2607
- * The intended use of the key attestation. Based on this additional validation
2608
- * is performed.
2609
- *
2610
- * - `proof_type.jwt` -> `exp` MUST be set
2611
- * - `proof_type.attestation` -> `nonce` MUST be set
2612
- */
2613
- use?: KeyAttestationJwtUse;
2614
- /**
2615
- * Signer of the key attestation jwt
2616
- */
2617
- signer: JwtSigner;
2618
- /**
2619
- * Callbacks used for creating the key attestation jwt
2620
- */
2621
- callbacks: Pick<CallbackContext, 'signJwt'>;
2622
- /**
2623
- * Additional payload to include in the key attestation jwt payload. Will be applied after
2624
- * any default claims that are included, so add claims with caution.
2625
- */
2626
- additionalPayload?: Record<string, unknown>;
2627
- }
2628
- declare function createKeyAttestationJwt(options: CreateKeyAttestationJwtOptions): Promise<string>;
2629
- interface ParseKeyAttestationJwtOptions {
2630
- /**
2631
- * The compact key attestation jwt
2632
- */
2633
- keyAttestationJwt: string;
2634
- /**
2635
- * The intended use of the key attestation. Based on this additional validation
2636
- * is performed.
2637
- *
2638
- * - `proof_type.jwt` -> `exp` MUST be set
2639
- * - `proof_type.attestation` -> `nonce` MUST be set
2640
- */
2641
- use?: KeyAttestationJwtUse;
2642
- }
2643
- declare function parseKeyAttestationJwt({
2644
- keyAttestationJwt,
2645
- use
2646
- }: ParseKeyAttestationJwtOptions): _openid4vc_oauth20.DecodeJwtResult<zod0.ZodObject<{
2647
- typ: zod0.ZodUnion<[zod0.ZodLiteral<"keyattestation+jwt">, zod0.ZodLiteral<"key-attestation+jwt">]>;
2648
- alg: zod0.ZodString;
2649
- kid: zod0.ZodOptional<zod0.ZodString>;
2650
- jwk: zod0.ZodOptional<zod0.ZodObject<{
2651
- kty: zod0.ZodString;
2652
- crv: zod0.ZodOptional<zod0.ZodString>;
2653
- x: zod0.ZodOptional<zod0.ZodString>;
2654
- y: zod0.ZodOptional<zod0.ZodString>;
2655
- e: zod0.ZodOptional<zod0.ZodString>;
2656
- n: zod0.ZodOptional<zod0.ZodString>;
2657
- alg: zod0.ZodOptional<zod0.ZodString>;
2658
- d: zod0.ZodOptional<zod0.ZodString>;
2659
- dp: zod0.ZodOptional<zod0.ZodString>;
2660
- dq: zod0.ZodOptional<zod0.ZodString>;
2661
- ext: zod0.ZodOptional<zod0.ZodBoolean>;
2662
- k: zod0.ZodOptional<zod0.ZodString>;
2663
- key_ops: zod0.ZodOptional<zod0.ZodArray<zod0.ZodString>>;
2664
- kid: zod0.ZodOptional<zod0.ZodString>;
2665
- oth: zod0.ZodOptional<zod0.ZodArray<zod0.ZodObject<{
2666
- d: zod0.ZodOptional<zod0.ZodString>;
2667
- r: zod0.ZodOptional<zod0.ZodString>;
2668
- t: zod0.ZodOptional<zod0.ZodString>;
2669
- }, zod_v4_core0.$loose>>>;
2670
- p: zod0.ZodOptional<zod0.ZodString>;
2671
- q: zod0.ZodOptional<zod0.ZodString>;
2672
- qi: zod0.ZodOptional<zod0.ZodString>;
2673
- use: zod0.ZodOptional<zod0.ZodString>;
2674
- x5c: zod0.ZodOptional<zod0.ZodArray<zod0.ZodString>>;
2675
- x5t: zod0.ZodOptional<zod0.ZodString>;
2676
- 'x5t#S256': zod0.ZodOptional<zod0.ZodString>;
2677
- x5u: zod0.ZodOptional<zod0.ZodString>;
2678
- }, zod_v4_core0.$loose>>;
2679
- x5c: zod0.ZodOptional<zod0.ZodArray<zod0.ZodString>>;
2680
- trust_chain: zod0.ZodOptional<zod0.ZodTuple<[zod0.ZodString], zod0.ZodString>>;
2681
- }, zod_v4_core0.$loose>, zod0.ZodObject<{
2682
- nonce: zod0.ZodString | zod0.ZodOptional<zod0.ZodString>;
2683
- exp: zod0.ZodNumber | zod0.ZodOptional<zod0.ZodNumber>;
2684
- iat: zod0.ZodNumber;
2685
- attested_keys: zod0.ZodArray<zod0.ZodObject<{
2686
- kty: zod0.ZodString;
2687
- crv: zod0.ZodOptional<zod0.ZodString>;
2688
- x: zod0.ZodOptional<zod0.ZodString>;
2689
- y: zod0.ZodOptional<zod0.ZodString>;
2690
- e: zod0.ZodOptional<zod0.ZodString>;
2691
- n: zod0.ZodOptional<zod0.ZodString>;
2692
- alg: zod0.ZodOptional<zod0.ZodString>;
2693
- d: zod0.ZodOptional<zod0.ZodString>;
2694
- dp: zod0.ZodOptional<zod0.ZodString>;
2695
- dq: zod0.ZodOptional<zod0.ZodString>;
2696
- ext: zod0.ZodOptional<zod0.ZodBoolean>;
2697
- k: zod0.ZodOptional<zod0.ZodString>;
2698
- key_ops: zod0.ZodOptional<zod0.ZodArray<zod0.ZodString>>;
2699
- kid: zod0.ZodOptional<zod0.ZodString>;
2700
- oth: zod0.ZodOptional<zod0.ZodArray<zod0.ZodObject<{
2701
- d: zod0.ZodOptional<zod0.ZodString>;
2702
- r: zod0.ZodOptional<zod0.ZodString>;
2703
- t: zod0.ZodOptional<zod0.ZodString>;
2704
- }, zod_v4_core0.$loose>>>;
2705
- p: zod0.ZodOptional<zod0.ZodString>;
2706
- q: zod0.ZodOptional<zod0.ZodString>;
2707
- qi: zod0.ZodOptional<zod0.ZodString>;
2708
- use: zod0.ZodOptional<zod0.ZodString>;
2709
- x5c: zod0.ZodOptional<zod0.ZodArray<zod0.ZodString>>;
2710
- x5t: zod0.ZodOptional<zod0.ZodString>;
2711
- 'x5t#S256': zod0.ZodOptional<zod0.ZodString>;
2712
- x5u: zod0.ZodOptional<zod0.ZodString>;
2713
- }, zod_v4_core0.$loose>>;
2714
- key_storage: zod0.ZodOptional<zod0.ZodArray<zod0.ZodUnion<readonly [zod0.ZodEnum<{
2715
- iso_18045_high: "iso_18045_high";
2716
- iso_18045_moderate: "iso_18045_moderate";
2717
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
2718
- iso_18045_basic: "iso_18045_basic";
2719
- }>, zod0.ZodString]>>>;
2720
- user_authentication: zod0.ZodOptional<zod0.ZodArray<zod0.ZodUnion<readonly [zod0.ZodEnum<{
2721
- iso_18045_high: "iso_18045_high";
2722
- iso_18045_moderate: "iso_18045_moderate";
2723
- "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
2724
- iso_18045_basic: "iso_18045_basic";
2725
- }>, zod0.ZodString]>>>;
2726
- certification: zod0.ZodOptional<zod0.ZodURL>;
2727
- iss: zod0.ZodOptional<zod0.ZodString>;
2728
- aud: zod0.ZodOptional<zod0.ZodUnion<readonly [zod0.ZodString, zod0.ZodArray<zod0.ZodString>]>>;
2729
- nbf: zod0.ZodOptional<zod0.ZodNumber>;
2730
- jti: zod0.ZodOptional<zod0.ZodString>;
2731
- sub: zod0.ZodOptional<zod0.ZodString>;
2732
- cnf: zod0.ZodOptional<zod0.ZodObject<{
2733
- jwk: zod0.ZodOptional<zod0.ZodObject<{
2734
- kty: zod0.ZodString;
2735
- crv: zod0.ZodOptional<zod0.ZodString>;
2736
- x: zod0.ZodOptional<zod0.ZodString>;
2737
- y: zod0.ZodOptional<zod0.ZodString>;
2738
- e: zod0.ZodOptional<zod0.ZodString>;
2739
- n: zod0.ZodOptional<zod0.ZodString>;
2740
- alg: zod0.ZodOptional<zod0.ZodString>;
2741
- d: zod0.ZodOptional<zod0.ZodString>;
2742
- dp: zod0.ZodOptional<zod0.ZodString>;
2743
- dq: zod0.ZodOptional<zod0.ZodString>;
2744
- ext: zod0.ZodOptional<zod0.ZodBoolean>;
2745
- k: zod0.ZodOptional<zod0.ZodString>;
2746
- key_ops: zod0.ZodOptional<zod0.ZodArray<zod0.ZodString>>;
2747
- kid: zod0.ZodOptional<zod0.ZodString>;
2748
- oth: zod0.ZodOptional<zod0.ZodArray<zod0.ZodObject<{
2749
- d: zod0.ZodOptional<zod0.ZodString>;
2750
- r: zod0.ZodOptional<zod0.ZodString>;
2751
- t: zod0.ZodOptional<zod0.ZodString>;
2752
- }, zod_v4_core0.$loose>>>;
2753
- p: zod0.ZodOptional<zod0.ZodString>;
2754
- q: zod0.ZodOptional<zod0.ZodString>;
2755
- qi: zod0.ZodOptional<zod0.ZodString>;
2756
- use: zod0.ZodOptional<zod0.ZodString>;
2757
- x5c: zod0.ZodOptional<zod0.ZodArray<zod0.ZodString>>;
2758
- x5t: zod0.ZodOptional<zod0.ZodString>;
2759
- 'x5t#S256': zod0.ZodOptional<zod0.ZodString>;
2760
- x5u: zod0.ZodOptional<zod0.ZodString>;
2761
- }, zod_v4_core0.$loose>>;
2762
- jkt: zod0.ZodOptional<zod0.ZodString>;
2763
- }, zod_v4_core0.$loose>>;
2764
- status: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodAny>>;
2765
- trust_chain: zod0.ZodOptional<zod0.ZodTuple<[zod0.ZodString], zod0.ZodString>>;
2766
- }, zod_v4_core0.$loose>>;
2767
- interface VerifyKeyAttestationJwtOptions {
2768
- /**
2769
- * The compact key attestation jwt
2770
- */
2771
- keyAttestationJwt: string;
2772
- /**
2773
- * Expected nonce. If the key attestation is used directly as proof this should be provided.
2774
- */
2775
- expectedNonce?: string;
2776
- /**
2777
- * Date at which the nonce will expire
2778
- */
2779
- nonceExpiresAt?: Date;
2780
- /**
2781
- * The intended use of the key attestation. Based on this additional validation
2782
- * is performed.
2783
- *
2784
- * - `proof_type.jwt` -> `exp` MUST be set
2785
- * - `proof_type.attestation` -> `nonce` MUST be set
2786
- */
2787
- use?: KeyAttestationJwtUse;
2788
- /**
2789
- * Current time, if not provided a new date instance will be created
2790
- */
2791
- now?: Date;
2792
- /**
2793
- * Callbacks required for the key attestation jwt verification
2794
- */
2795
- callbacks: Pick<CallbackContext, 'verifyJwt'>;
2796
- }
2797
- type VerifyKeyAttestationJwtReturn = Awaited<ReturnType<typeof verifyKeyAttestationJwt>>;
2798
- declare function verifyKeyAttestationJwt(options: VerifyKeyAttestationJwtOptions): Promise<{
2799
- header: {
2800
- [x: string]: unknown;
2801
- typ: "keyattestation+jwt" | "key-attestation+jwt";
2802
- alg: string;
2803
- kid?: string | undefined;
2804
- jwk?: {
2805
- [x: string]: unknown;
2806
- kty: string;
2807
- crv?: string | undefined;
2808
- x?: string | undefined;
2809
- y?: string | undefined;
2810
- e?: string | undefined;
2811
- n?: string | undefined;
2812
- alg?: string | undefined;
2813
- d?: string | undefined;
2814
- dp?: string | undefined;
2815
- dq?: string | undefined;
2816
- ext?: boolean | undefined;
2817
- k?: string | undefined;
2818
- key_ops?: string[] | undefined;
2819
- kid?: string | undefined;
2820
- oth?: {
2821
- [x: string]: unknown;
2822
- d?: string | undefined;
2823
- r?: string | undefined;
2824
- t?: string | undefined;
2825
- }[] | undefined;
2826
- p?: string | undefined;
2827
- q?: string | undefined;
2828
- qi?: string | undefined;
2829
- use?: string | undefined;
2830
- x5c?: string[] | undefined;
2831
- x5t?: string | undefined;
2832
- 'x5t#S256'?: string | undefined;
2833
- x5u?: string | undefined;
2834
- } | undefined;
2835
- x5c?: string[] | undefined;
2836
- trust_chain?: [string, ...string[]] | undefined;
2837
- };
2838
- payload: {
2839
- [x: string]: unknown;
2840
- nonce: string | undefined;
2841
- exp: number | undefined;
2842
- iat: number;
2843
- attested_keys: {
2844
- [x: string]: unknown;
2845
- kty: string;
2846
- crv?: string | undefined;
2847
- x?: string | undefined;
2848
- y?: string | undefined;
2849
- e?: string | undefined;
2850
- n?: string | undefined;
2851
- alg?: string | undefined;
2852
- d?: string | undefined;
2853
- dp?: string | undefined;
2854
- dq?: string | undefined;
2855
- ext?: boolean | undefined;
2856
- k?: string | undefined;
2857
- key_ops?: string[] | undefined;
2858
- kid?: string | undefined;
2859
- oth?: {
2860
- [x: string]: unknown;
2861
- d?: string | undefined;
2862
- r?: string | undefined;
2863
- t?: string | undefined;
2864
- }[] | undefined;
2865
- p?: string | undefined;
2866
- q?: string | undefined;
2867
- qi?: string | undefined;
2868
- use?: string | undefined;
2869
- x5c?: string[] | undefined;
2870
- x5t?: string | undefined;
2871
- 'x5t#S256'?: string | undefined;
2872
- x5u?: string | undefined;
2873
- }[];
2874
- key_storage?: string[] | undefined;
2875
- user_authentication?: string[] | undefined;
2876
- certification?: string | undefined;
2877
- iss?: string | undefined;
2878
- aud?: string | string[] | undefined;
2879
- nbf?: number | undefined;
2880
- jti?: string | undefined;
2881
- sub?: string | undefined;
2882
- cnf?: {
2883
- [x: string]: unknown;
2884
- jwk?: {
2885
- [x: string]: unknown;
2886
- kty: string;
2887
- crv?: string | undefined;
2888
- x?: string | undefined;
2889
- y?: string | undefined;
2890
- e?: string | undefined;
2891
- n?: string | undefined;
2892
- alg?: string | undefined;
2893
- d?: string | undefined;
2894
- dp?: string | undefined;
2895
- dq?: string | undefined;
2896
- ext?: boolean | undefined;
2897
- k?: string | undefined;
2898
- key_ops?: string[] | undefined;
2899
- kid?: string | undefined;
2900
- oth?: {
2901
- [x: string]: unknown;
2902
- d?: string | undefined;
2903
- r?: string | undefined;
2904
- t?: string | undefined;
2905
- }[] | undefined;
2906
- p?: string | undefined;
2907
- q?: string | undefined;
2908
- qi?: string | undefined;
2909
- use?: string | undefined;
2910
- x5c?: string[] | undefined;
2911
- x5t?: string | undefined;
2912
- 'x5t#S256'?: string | undefined;
2913
- x5u?: string | undefined;
2914
- } | undefined;
2915
- jkt?: string | undefined;
2916
- } | undefined;
2917
- status?: Record<string, any> | undefined;
2918
- trust_chain?: [string, ...string[]] | undefined;
2919
- };
2920
- signer: _openid4vc_oauth20.JwtSignerWithJwk;
2921
- }>;
2922
- //#endregion
2923
- //#region src/metadata/credential-issuer/credential-configurations.d.ts
2924
- interface ExtractScopesForCredentialConfigurationIdsOptions {
2925
- /**
2926
- * The credential configuration ids to extract the scope from
2927
- */
2928
- credentialConfigurationIds: string[];
2929
- /**
2930
- * Whether to throw an error if the corresponding credential configuration
2931
- * for a provided credential configuration id has no scope.
2932
- *
2933
- * @default false
2934
- */
2935
- throwOnConfigurationWithoutScope?: boolean;
2936
- /**
2937
- * The issuer metadata
2938
- */
2939
- issuerMetadata: IssuerMetadataResult;
2940
- }
2941
- declare function extractScopesForCredentialConfigurationIds(options: ExtractScopesForCredentialConfigurationIdsOptions): string[] | undefined;
2942
- /**
2943
- * Transforms draft 11 credentials supported syntax to credential configurations supported
2944
- *
2945
- * @throws if a credentials supported entry without id is passed
2946
- * @throws if a credentials supported entry with invalid structure or format specific properties is passed
2947
- */
2948
- declare function credentialsSupportedToCredentialConfigurationsSupported(credentialsSupported: Array<z.input<typeof zCredentialConfigurationSupportedDraft11ToV1>>): CredentialConfigurationsSupported;
2949
- //#endregion
2950
- //#region src/nonce/z-nonce.d.ts
2951
- declare const zNonceResponse: z.ZodObject<{
2952
- c_nonce: z.ZodString;
2953
- c_nonce_expires_in: z.ZodOptional<z.ZodNumber>;
2954
- }, z.core.$loose>;
2955
- type NonceResponse = z.infer<typeof zNonceResponse>;
2956
- //#endregion
2957
- //#region src/formats/proof-type/jwt/jwt-proof-type.d.ts
2958
- interface CreateCredentialRequestJwtProofOptions {
2959
- /**
2960
- * Nonce to use in the jwt. Should be derived from the c_nonce
2961
- */
2962
- nonce?: string;
2963
- /**
2964
- * The credential issuer identifier
2965
- */
2966
- credentialIssuer: string;
2967
- /**
2968
- * The date when the token was issued. If not provided the current time will be used.
2969
- */
2970
- issuedAt?: Date;
2971
- /**
2972
- * The client id of the wallet requesting the credential. Should not be included when using
2973
- * the pre-authorized code flow
2974
- */
2975
- clientId?: string;
2976
- /**
2977
- * Key attestation jwt that the proof should based on. In this case it is required that the `signer` uses
2978
- * a key from the `attested_keys` in the key attestation jwt payload.
2979
- */
2980
- keyAttestationJwt?: string;
2981
- signer: JwtSigner;
2982
- callbacks: Pick<CallbackContext, 'signJwt' | 'hash'>;
2983
- }
2984
- interface VerifyCredentialRequestJwtProofOptions {
2985
- /**
2986
- * The proof jwt
2987
- */
2988
- jwt: string;
2989
- /**
2990
- * Expected nonce. Should be a c_nonce previously shared with the wallet
2991
- */
2992
- expectedNonce?: string;
2993
- /**
2994
- * Date at which the nonce will expire
2995
- */
2996
- nonceExpiresAt?: Date;
2997
- /**
2998
- * The credential issuer identifier, will be matched against the `aud` claim.
2999
- */
3000
- credentialIssuer: string;
3001
- /**
3002
- * The client id of the wallet requesting the credential, if available.
3003
- */
3004
- clientId?: string;
3005
- /**
3006
- * Current time, if not provided a new date instance will be created
3007
- */
3008
- now?: Date;
3009
- /**
3010
- * Callbacks required for the jwt verification.
3011
- *
3012
- * Will be used for the jwt proof, and optionally a `key_attestation` in the jwt proof header.
3013
- */
3014
- callbacks: Pick<CallbackContext, 'verifyJwt' | 'hash'>;
3015
- }
3016
- //#endregion
3017
- //#region src/nonce/nonce-request.d.ts
3018
- interface RequestNonceOptions {
3019
- issuerMetadata: IssuerMetadataResult;
3020
- /**
3021
- * Custom fetch implementation to use
3022
- */
3023
- fetch?: Fetch;
3024
- }
3025
- interface CreateNonceResponseOptions {
3026
- cNonce: string;
3027
- cNonceExpiresIn?: number;
3028
- /**
3029
- * Additional payload to include in the nonce response.
3030
- *
3031
- * Will be applied after default params to allow extension so be cautious
3032
- */
3033
- additionalPayload?: Record<string, unknown>;
3034
- }
3035
- //#endregion
3036
- //#region src/Openid4vciClient.d.ts
3037
- declare enum AuthorizationFlow {
3038
- Oauth2Redirect = "Oauth2Redirect",
3039
- PresentationDuringIssuance = "PresentationDuringIssuance",
3040
- }
3041
- interface Openid4vciClientOptions {
3042
- /**
3043
- * Callbacks required for the openid4vc client
3044
- */
3045
- callbacks: Omit<CallbackContext, 'verifyJwt' | 'decryptJwe' | 'encryptJwe'>;
3046
- }
3047
- declare class Openid4vciClient {
3048
- private options;
3049
- private oauth2Client;
3050
- constructor(options: Openid4vciClientOptions);
3051
- /**
3052
- * Resolve a credential offer into a credential offer object, handling both
3053
- * 'credential_offer' and 'credential_offer_uri' params.
3054
- */
3055
- resolveCredentialOffer(credentialOffer: string): Promise<CredentialOfferObject>;
3056
- resolveIssuerMetadata(credentialIssuer: string): Promise<IssuerMetadataResult>;
3057
- /**
3058
- * Retrieve an authorization code for a presentation during issuance session
3059
- *
3060
- * This can only be called if an authorization challenge was performed before and returned a
3061
- * `presentation` parameter along with an `auth_session`. If the presentation response included
3062
- * an `presentation_during_issuance_session` parameter it MUST be included in this request as well.
3063
- */
3064
- retrieveAuthorizationCodeUsingPresentation(options: {
3065
- /**
3066
- * Auth session as returned by `{@link Openid4vciClient.initiateAuthorization}
3067
- */
3068
- authSession: string;
3069
- /**
3070
- * Presentation during issuance session, obtained from the RP after submitting
3071
- * openid4vp authorization response
3072
- */
3073
- presentationDuringIssuanceSession?: string;
3074
- credentialOffer: CredentialOfferObject;
3075
- issuerMetadata: IssuerMetadataResult;
3076
- dpop?: RequestDpopOptions;
3077
- }): Promise<{
3078
- authorizationChallengeResponse: {
3079
- [x: string]: unknown;
3080
- authorization_code: string;
3081
- };
3082
- dpop: {
3083
- nonce: string | undefined;
3084
- signer: _openid4vc_oauth20.JwtSignerJwk;
3085
- } | undefined;
3086
- }>;
3087
- /**
3088
- * Initiates authorization for credential issuance. It handles the following cases:
3089
- * - Authorization Challenge
3090
- * - Pushed Authorization Request
3091
- * - Regular Authorization url
3092
- *
3093
- * In case the authorization challenge request returns an error with `insufficient_authorization`
3094
- * with a `presentation` field it means the authorization server expects presentation of credentials
3095
- * before issuance of credentials. If this is the case, the value in `presentation` should be treated
3096
- * as an openid4vp authorization request and submitted to the verifier. Once the presentation response
3097
- * has been submitted, the RP will respond with a `presentation_during_issuance_session` parameter.
3098
- * Together with the `auth_session` parameter returned in this call you can retrieve an `authorization_code`
3099
- * using
3100
- */
3101
- initiateAuthorization(options: Omit<CreateAuthorizationRequestUrlOptions, 'callbacks' | 'authorizationServerMetadata'> & {
3102
- credentialOffer: CredentialOfferObject;
3103
- issuerMetadata: IssuerMetadataResult;
3104
- }): Promise<{
3105
- authorizationFlow: AuthorizationFlow.PresentationDuringIssuance;
3106
- openid4vpRequestUrl: string;
3107
- authSession: string;
3108
- authorizationServer: string;
3109
- } | {
3110
- authorizationFlow: AuthorizationFlow.Oauth2Redirect;
3111
- authorizationRequestUrl: string;
3112
- authorizationServer: string;
3113
- pkce?: CreatePkceReturn;
3114
- }>;
3115
- /**
3116
- * Convenience method around {@link Oauth2Client.createAuthorizationRequestUrl}
3117
- * but specifically focused on a credential offer
3118
- */
3119
- createAuthorizationRequestUrlFromOffer(options: Omit<CreateAuthorizationRequestUrlOptions, 'callbacks' | 'authorizationServerMetadata'> & {
3120
- credentialOffer: CredentialOfferObject;
3121
- issuerMetadata: IssuerMetadataResult;
3122
- }): Promise<{
3123
- authorizationRequestUrl: string;
3124
- pkce: CreatePkceReturn | undefined;
3125
- dpop: RequestDpopOptions | undefined;
3126
- authorizationServer: string;
3127
- }>;
3128
- /**
3129
- * Convenience method around {@link Oauth2Client.retrievePreAuthorizedCodeAccessToken}
3130
- * but specifically focused on a credential offer
3131
- */
3132
- retrievePreAuthorizedCodeAccessTokenFromOffer({
3133
- credentialOffer,
3134
- issuerMetadata,
3135
- additionalRequestPayload,
3136
- txCode,
3137
- dpop
3138
- }: Omit<RetrievePreAuthorizedCodeAccessTokenOptions, 'callbacks' | 'authorizationServerMetadata' | 'preAuthorizedCode' | 'resource'> & {
3139
- credentialOffer: CredentialOfferObject;
3140
- issuerMetadata: IssuerMetadataResult;
3141
- }): Promise<{
3142
- authorizationServer: string;
3143
- accessTokenResponse: _openid4vc_oauth20.AccessTokenResponse;
3144
- dpop?: RequestDpopOptions;
3145
- }>;
3146
- /**
3147
- * Convenience method around {@link Oauth2Client.retrieveAuthorizationCodeAccessTokenFrom}
3148
- * but specifically focused on a credential offer
3149
- */
3150
- retrieveAuthorizationCodeAccessTokenFromOffer({
3151
- issuerMetadata,
3152
- additionalRequestPayload,
3153
- credentialOffer,
3154
- authorizationCode,
3155
- pkceCodeVerifier,
3156
- redirectUri,
3157
- dpop
3158
- }: Omit<RetrieveAuthorizationCodeAccessTokenOptions, 'authorizationServerMetadata' | 'callbacks'> & {
3159
- credentialOffer: CredentialOfferObject;
3160
- issuerMetadata: IssuerMetadataResult;
3161
- }): Promise<{
3162
- authorizationServer: string;
3163
- accessTokenResponse: _openid4vc_oauth20.AccessTokenResponse;
3164
- dpop?: RequestDpopOptions;
3165
- }>;
3166
- /**
3167
- * Request a nonce to be used in credential request proofs from the `nonce_endpoint`
3168
- *
3169
- * @throws Openid4vciError - if no `nonce_endpoint` is configured in the issuer metadata
3170
- * @throws InvalidFetchResponseError - if the nonce endpoint did not return a successful response
3171
- * @throws ValidationError - if validating the nonce response failed
3172
- */
3173
- requestNonce(options: Pick<RequestNonceOptions, 'issuerMetadata'>): Promise<{
3174
- [x: string]: unknown;
3175
- c_nonce: string;
3176
- c_nonce_expires_in?: number | undefined;
3177
- }>;
3178
- /**
3179
- * Creates the jwt proof payload and header to be included in a credential request.
3180
- */
3181
- createCredentialRequestJwtProof(options: Pick<CreateCredentialRequestJwtProofOptions, 'signer' | 'nonce' | 'issuedAt' | 'clientId' | 'keyAttestationJwt'> & {
3182
- issuerMetadata: IssuerMetadataResult;
3183
- credentialConfigurationId: string;
3184
- }): Promise<{
3185
- jwt: string;
3186
- }>;
3187
- /**
3188
- * @throws Openid4vciRetrieveCredentialsError - if an unsuccessful response or the response couldn't be parsed as credential response
3189
- * @throws ValidationError - if validation of the credential request failed
3190
- * @throws Openid4vciError - if the `credentialConfigurationId` couldn't be found, or if the the format specific request couldn't be constructed
3191
- */
3192
- retrieveCredentials({
3193
- issuerMetadata,
3194
- proof,
3195
- proofs,
3196
- credentialConfigurationId,
3197
- additionalRequestPayload,
3198
- accessToken,
3199
- dpop
3200
- }: Pick<RetrieveCredentialsWithFormatOptions, 'accessToken' | 'additionalRequestPayload' | 'issuerMetadata' | 'proof' | 'proofs' | 'dpop'> & {
3201
- credentialConfigurationId: string;
3202
- }): Promise<RetrieveCredentialsResponseOk>;
3203
- /**
3204
- * @throws Openid4vciRetrieveCredentialsError - if an unsuccessful response or the response couldn't be parsed as credential response
3205
- * @throws ValidationError - if validation of the credential request failed
3206
- */
3207
- retrieveDeferredCredentials(options: Pick<RetrieveDeferredCredentialsOptions, 'issuerMetadata' | 'accessToken' | 'transactionId' | 'dpop' | 'additionalRequestPayload'>): Promise<RetrieveDeferredCredentialsResponseOk>;
3208
- /**
3209
- * @throws Openid4vciSendNotificationError - if an unsuccessful response
3210
- * @throws ValidationError - if validation of the notification request failed
3211
- */
3212
- sendNotification({
3213
- issuerMetadata,
3214
- notification,
3215
- additionalRequestPayload,
3216
- accessToken,
3217
- dpop
3218
- }: Pick<SendNotificationOptions, 'accessToken' | 'additionalRequestPayload' | 'issuerMetadata' | 'dpop' | 'notification'>): Promise<_openid4vc_oauth20.ResourceRequestResponseOk>;
3219
- }
3220
- //#endregion
3221
- //#region ../oauth2/src/common/jwk/z-jwk.d.ts
3222
- declare const zJwk: z.ZodObject<{
3223
- kty: z.ZodString;
3224
- crv: z.ZodOptional<z.ZodString>;
3225
- x: z.ZodOptional<z.ZodString>;
3226
- y: z.ZodOptional<z.ZodString>;
3227
- e: z.ZodOptional<z.ZodString>;
3228
- n: z.ZodOptional<z.ZodString>;
3229
- alg: z.ZodOptional<z.ZodString>;
3230
- d: z.ZodOptional<z.ZodString>;
3231
- dp: z.ZodOptional<z.ZodString>;
3232
- dq: z.ZodOptional<z.ZodString>;
3233
- ext: z.ZodOptional<z.ZodBoolean>;
3234
- k: z.ZodOptional<z.ZodString>;
3235
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
3236
- kid: z.ZodOptional<z.ZodString>;
3237
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
3238
- d: z.ZodOptional<z.ZodString>;
3239
- r: z.ZodOptional<z.ZodString>;
3240
- t: z.ZodOptional<z.ZodString>;
3241
- }, z.core.$loose>>>;
3242
- p: z.ZodOptional<z.ZodString>;
3243
- q: z.ZodOptional<z.ZodString>;
3244
- qi: z.ZodOptional<z.ZodString>;
3245
- use: z.ZodOptional<z.ZodString>;
3246
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
3247
- x5t: z.ZodOptional<z.ZodString>;
3248
- 'x5t#S256': z.ZodOptional<z.ZodString>;
3249
- x5u: z.ZodOptional<z.ZodString>;
3250
- }, z.core.$loose>;
3251
- type Jwk$1 = z.infer<typeof zJwk>;
3252
- //#endregion
3253
- //#region ../oauth2/src/common/jwt/z-jwt.d.ts
3254
- type JwtSignerDid = {
3255
- method: 'did';
3256
- didUrl: string;
3257
- alg: string;
3258
- /**
3259
- * The key id that should be used for signing. You need to make sure the kid actuall matches
3260
- * with the key associated with the didUrl.
3261
- */
3262
- kid?: string;
3263
- };
3264
- type JwtSignerJwk = {
3265
- method: 'jwk';
3266
- publicJwk: Jwk$1;
3267
- alg: string;
3268
- /**
3269
- * The key id that should be used for signing. You need to make sure the kid actuall matches
3270
- * with the key associated with the jwk.
3271
- *
3272
- * If not provided the kid can also be extracted from the `publicJwk`. Providing it here means the `kid` won't
3273
- * be included in the JWT header.
3274
- */
3275
- kid?: string;
3276
- };
3277
- type JwtSignerX5c = {
3278
- method: 'x5c';
3279
- x5c: string[];
3280
- alg: string;
3281
- /**
3282
- * The key id that should be used for signing. You need to make sure the kid actuall matches
3283
- * with the key associated with the leaf certificate.
3284
- */
3285
- kid?: string;
3286
- };
3287
- type JwtSignerFederation = {
3288
- method: 'federation';
3289
- trustChain?: [string, ...string[]];
3290
- alg: string;
3291
- /**
3292
- * The key id that should be used for signing. You need to make sure the kid actuall matches
3293
- * with a key present in the federation.
3294
- */
3295
- kid: string;
3296
- };
3297
- type JwtSignerCustom = {
3298
- method: 'custom';
3299
- alg: string;
3300
- /**
3301
- * The key id that should be used for signing.
3302
- */
3303
- kid?: string;
3304
- };
3305
- type JwtSigner$1 = JwtSignerDid | JwtSignerJwk | JwtSignerX5c | JwtSignerFederation | JwtSignerCustom;
3306
- type JweEncryptor = JwtSignerJwk & {
3307
- enc: string;
3308
- /**
3309
- * base64-url encoded apu
3310
- */
3311
- apu?: string;
3312
- /**
3313
- * base64-url encoded apv
3314
- */
3315
- apv?: string;
3316
- };
3317
- declare const zJwtPayload: z.ZodObject<{
3318
- iss: z.ZodOptional<z.ZodString>;
3319
- aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
3320
- iat: z.ZodOptional<z.ZodNumber>;
3321
- exp: z.ZodOptional<z.ZodNumber>;
3322
- nbf: z.ZodOptional<z.ZodNumber>;
3323
- nonce: z.ZodOptional<z.ZodString>;
3324
- jti: z.ZodOptional<z.ZodString>;
3325
- sub: z.ZodOptional<z.ZodString>;
3326
- cnf: z.ZodOptional<z.ZodObject<{
3327
- jwk: z.ZodOptional<z.ZodObject<{
3328
- kty: z.ZodString;
3329
- crv: z.ZodOptional<z.ZodString>;
3330
- x: z.ZodOptional<z.ZodString>;
3331
- y: z.ZodOptional<z.ZodString>;
3332
- e: z.ZodOptional<z.ZodString>;
3333
- n: z.ZodOptional<z.ZodString>;
3334
- alg: z.ZodOptional<z.ZodString>;
3335
- d: z.ZodOptional<z.ZodString>;
3336
- dp: z.ZodOptional<z.ZodString>;
3337
- dq: z.ZodOptional<z.ZodString>;
3338
- ext: z.ZodOptional<z.ZodBoolean>;
3339
- k: z.ZodOptional<z.ZodString>;
3340
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
3341
- kid: z.ZodOptional<z.ZodString>;
3342
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
3343
- d: z.ZodOptional<z.ZodString>;
3344
- r: z.ZodOptional<z.ZodString>;
3345
- t: z.ZodOptional<z.ZodString>;
3346
- }, z.core.$loose>>>;
3347
- p: z.ZodOptional<z.ZodString>;
3348
- q: z.ZodOptional<z.ZodString>;
3349
- qi: z.ZodOptional<z.ZodString>;
3350
- use: z.ZodOptional<z.ZodString>;
3351
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
3352
- x5t: z.ZodOptional<z.ZodString>;
3353
- 'x5t#S256': z.ZodOptional<z.ZodString>;
3354
- x5u: z.ZodOptional<z.ZodString>;
3355
- }, z.core.$loose>>;
3356
- jkt: z.ZodOptional<z.ZodString>;
3357
- }, z.core.$loose>>;
3358
- status: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
3359
- trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
3360
- }, z.core.$loose>;
3361
- type JwtPayload = z.infer<typeof zJwtPayload>;
3362
- declare const zJwtHeader: z.ZodObject<{
3363
- alg: z.ZodString;
3364
- typ: z.ZodOptional<z.ZodString>;
3365
- kid: z.ZodOptional<z.ZodString>;
3366
- jwk: z.ZodOptional<z.ZodObject<{
3367
- kty: z.ZodString;
3368
- crv: z.ZodOptional<z.ZodString>;
3369
- x: z.ZodOptional<z.ZodString>;
3370
- y: z.ZodOptional<z.ZodString>;
3371
- e: z.ZodOptional<z.ZodString>;
3372
- n: z.ZodOptional<z.ZodString>;
3373
- alg: z.ZodOptional<z.ZodString>;
3374
- d: z.ZodOptional<z.ZodString>;
3375
- dp: z.ZodOptional<z.ZodString>;
3376
- dq: z.ZodOptional<z.ZodString>;
3377
- ext: z.ZodOptional<z.ZodBoolean>;
3378
- k: z.ZodOptional<z.ZodString>;
3379
- key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
3380
- kid: z.ZodOptional<z.ZodString>;
3381
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
3382
- d: z.ZodOptional<z.ZodString>;
3383
- r: z.ZodOptional<z.ZodString>;
3384
- t: z.ZodOptional<z.ZodString>;
3385
- }, z.core.$loose>>>;
3386
- p: z.ZodOptional<z.ZodString>;
3387
- q: z.ZodOptional<z.ZodString>;
3388
- qi: z.ZodOptional<z.ZodString>;
3389
- use: z.ZodOptional<z.ZodString>;
3390
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
3391
- x5t: z.ZodOptional<z.ZodString>;
3392
- 'x5t#S256': z.ZodOptional<z.ZodString>;
3393
- x5u: z.ZodOptional<z.ZodString>;
3394
- }, z.core.$loose>>;
3395
- x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
3396
- trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
3397
- }, z.core.$loose>;
3398
- type JwtHeader = z.infer<typeof zJwtHeader>;
3399
- //#endregion
3400
- //#region ../oauth2/src/metadata/authorization-server/z-authorization-server-metadata.d.ts
3401
- declare const zAuthorizationServerMetadata: z.ZodObject<{
3402
- issuer: z.ZodURL;
3403
- token_endpoint: z.ZodURL;
3404
- token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
3405
- client_secret_basic: "client_secret_basic";
3406
- client_secret_post: "client_secret_post";
3407
- attest_jwt_client_auth: "attest_jwt_client_auth";
3408
- client_secret_jwt: "client_secret_jwt";
3409
- private_key_jwt: "private_key_jwt";
3410
- }>, z.ZodString]>>>;
3411
- authorization_endpoint: z.ZodOptional<z.ZodURL>;
3412
- jwks_uri: z.ZodOptional<z.ZodURL>;
3413
- grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
3414
- code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
3415
- dpop_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
3416
- require_pushed_authorization_requests: z.ZodOptional<z.ZodBoolean>;
3417
- pushed_authorization_request_endpoint: z.ZodOptional<z.ZodURL>;
3418
- introspection_endpoint: z.ZodOptional<z.ZodURL>;
3419
- introspection_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
3420
- client_secret_basic: "client_secret_basic";
3421
- client_secret_post: "client_secret_post";
3422
- attest_jwt_client_auth: "attest_jwt_client_auth";
3423
- client_secret_jwt: "client_secret_jwt";
3424
- private_key_jwt: "private_key_jwt";
3425
- }>, z.ZodString]>>>;
3426
- introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
3427
- authorization_challenge_endpoint: z.ZodOptional<z.ZodURL>;
3428
- 'pre-authorized_grant_anonymous_access_supported': z.ZodOptional<z.ZodBoolean>;
3429
- client_attestation_pop_nonce_required: z.ZodOptional<z.ZodBoolean>;
3430
- }, z.core.$loose>;
3431
- type AuthorizationServerMetadata$1 = z.infer<typeof zAuthorizationServerMetadata>;
3432
- //#endregion
3433
- //#region ../oauth2/src/client-authentication.d.ts
3434
- /**
3435
- * Options for client authentication
3436
- */
3437
- interface ClientAuthenticationCallbackOptions {
3438
- /**
3439
- * Metadata of the authorization server
3440
- */
3441
- authorizationServerMetadata: AuthorizationServerMetadata$1;
3442
- /**
3443
- * URL to which the request will be made
3444
- */
3445
- url: string;
3446
- /**
3447
- * http method that will be used
3448
- */
3449
- method: HttpMethod;
3450
- /**
3451
- * Headers for the request. You can modify this object
3452
- */
3453
- headers: FetchHeaders;
3454
- contentType: ContentType;
3455
- /**
3456
- * The body as a JSON object. If content type `x-www-form-urlencoded`
3457
- * is used, it will be encoded after this call.
3458
- *
3459
- * You can modify this object
3460
- */
3461
- body: Record<string, unknown>;
3462
- }
3463
- /**
3464
- * Callback method to determine the client authentication for a request.
3465
- */
3466
- type ClientAuthenticationCallback = (options: ClientAuthenticationCallbackOptions) => Promise<void> | void;
3467
- //#endregion
3468
- //#region ../oauth2/src/callbacks.d.ts
3469
- /**
3470
- * Supported hashing algorithms
3471
- *
3472
- * Based on https://www.iana.org/assignments/named-information/named-information.xhtml
3473
- */
3474
- declare enum HashAlgorithm {
3475
- Sha256 = "sha-256",
3476
- Sha384 = "sha-384",
3477
- Sha512 = "sha-512",
3478
- }
3479
- /**
3480
- * Callback used for operations that require hashing
3481
- */
3482
- type HashCallback = (data: Uint8Array, alg: HashAlgorithm) => OrPromise<Uint8Array>;
3483
- type GenerateRandomCallback = (byteLength: number) => OrPromise<Uint8Array>;
3484
- type SignJwtCallback = (jwtSigner: JwtSigner$1, jwt: {
3485
- header: JwtHeader;
3486
- payload: JwtPayload;
3487
- }) => OrPromise<{
3488
- jwt: string;
3489
- signerJwk: Jwk$1;
3490
- }>;
3491
- type VerifyJwtCallback = (jwtSigner: JwtSigner$1, jwt: {
3492
- header: JwtHeader;
3493
- payload: JwtPayload;
3494
- compact: string;
3495
- }) => OrPromise<{
3496
- verified: true;
3497
- signerJwk: Jwk$1;
3498
- } | {
3499
- verified: false;
3500
- signerJwk?: Jwk$1;
3501
- }>;
3502
- interface DecryptJweCallbackOptions {
3503
- jwk?: Jwk$1;
3504
- }
3505
- type DecryptJweCallback = (jwe: string, options?: DecryptJweCallbackOptions) => OrPromise<{
3506
- decrypted: true;
3507
- decryptionJwk: Jwk$1;
3508
- payload: string;
3509
- } | {
3510
- decrypted: false;
3511
- decryptionJwk?: Jwk$1;
3512
- payload?: string;
3513
- }>;
3514
- type EncryptJweCallback = (jweEncryptor: JweEncryptor, data: string) => OrPromise<{
3515
- encryptionJwk: Jwk$1;
3516
- jwe: string;
3517
- }>;
3518
- /**
3519
- * Callback context provides the callbacks that are required for the openid4vc library
3520
- */
3521
- interface CallbackContext$1 {
3522
- /**
3523
- * Custom fetch implementation to use
3524
- */
3525
- fetch?: Fetch;
3526
- /**
3527
- * Hash callback used for e.g. dpop and pkce
3528
- */
3529
- hash: HashCallback;
3530
- /**
3531
- * Sign jwt callback for signing of Json Web Tokens
3532
- */
3533
- signJwt: SignJwtCallback;
3534
- /**
3535
- * Decrypt jwe callback for decrypting of Json Web Encryptions
3536
- */
3537
- decryptJwe: DecryptJweCallback;
3538
- /**
3539
- * Encrypt jwt callback for encrypting of Json Web Encryptions
3540
- */
3541
- encryptJwe: EncryptJweCallback;
3542
- /**
3543
- * Verify jwt callback for verification of Json Web Tokens
3544
- */
3545
- verifyJwt: VerifyJwtCallback;
3546
- /**
3547
- * Generate random callback to generate random bytes. Used for
3548
- * e.g. the 'jti' value in a dpop jwt, and 'code_verifier' in pkce.
3549
- */
3550
- generateRandom: GenerateRandomCallback;
3551
- /**
3552
- * Extend a request to the authorization server with client authentication
3553
- * parameters. If you're not using client authentication, you can set this
3554
- * to `clientAuthenticationNone()`
3555
- *
3556
- * There are three default client authentication methods provided:
3557
- * - `clientAuthenticationClientSecretPost`
3558
- * - `clientAuthenticationClientSecretBasic`
3559
- * - `clientAuthenticationClientAttestationJwt`
3560
- * - `clientAuthenticationNone`
3561
- * - `clientAuthenticationAnonymous`
3562
- *
3563
- * A custom implementation can be made for other methods, or allowing complex
3564
- * scenarios where multiple authorization servers are supported.
3565
- */
3566
- clientAuthentication: ClientAuthenticationCallback;
3567
- /**
3568
- * Get the DNS names and URI names from a X.509 certificate
3569
- */
3570
- getX509CertificateMetadata?: (certificate: string) => {
3571
- sanDnsNames: string[];
3572
- sanUriNames: string[];
3573
- };
3574
- }
3575
- //#endregion
3576
- //#region ../oauth2/src/client-attestation/client-attestation.d.ts
3577
- interface VerifyClientAttestationOptions {
3578
- authorizationServer: string;
3579
- clientAttestationJwt: string;
3580
- clientAttestationPopJwt: string;
3581
- callbacks: Pick<CallbackContext$1, 'verifyJwt'>;
3582
- /**
3583
- * Date to use for expiration. If not provided current date will be used.
3584
- */
3585
- now?: Date;
3586
- }
3587
- //#endregion
3588
- //#region src/credential-request/credential-response.d.ts
3589
- interface CreateCredentialResponseOptions {
3590
- credentialRequest: ParseCredentialRequestReturn;
3591
- credential?: CredentialResponse['credential'];
3592
- credentials?: CredentialResponse['credentials'];
3593
- transactionId?: string;
3594
- interval?: number;
3595
- cNonce?: string;
3596
- cNonceExpiresInSeconds?: number;
3597
- notificationId?: string;
3598
- /**
3599
- * Additional payload to include in the credential response
3600
- */
3601
- additionalPayload?: Record<string, unknown>;
3602
- }
3603
- type CreateDeferredCredentialResponseOptions = ({
3604
- credentials: DeferredCredentialResponse['credentials'];
3605
- notificationId?: string;
3606
- transactionId?: never;
3607
- interval?: never;
3608
- } | {
3609
- /**
3610
- * The `transaction_id` used to identify the deferred issuance transaction.
3611
- */
3612
- transactionId: string;
3613
- interval: number;
3614
- credentials?: never;
3615
- notificationId?: never;
3616
- }) & {
3617
- /**
3618
- * Additional payload to include in the deferred credential response
3619
- */
3620
- additionalPayload?: Record<string, unknown>;
3621
- };
3622
- //#endregion
3623
- //#region src/credential-request/parse-deferred-credential-request.d.ts
3624
- interface ParseDeferredCredentialRequestOptions {
3625
- deferredCredentialRequest: Record<string, unknown>;
3626
- }
3627
- interface ParseDeferredCredentialRequestReturn {
3628
- /**
3629
- * The validated credential request. If both `format` and `credentialIdentifier` are
3630
- * undefined you can still handle the request by using this object directly.
3631
- */
3632
- deferredCredentialRequest: DeferredCredentialRequest;
3633
- }
3634
- //#endregion
3635
- //#region src/formats/proof-type/attestation/attestation-proof-type.d.ts
3636
- interface VerifyCredentialRequestAttestationProofOptions extends Omit<VerifyKeyAttestationJwtOptions, 'use'> {}
3637
- //#endregion
3638
- //#region src/metadata/credential-issuer/signed-credential-issuer-metadata.d.ts
3639
- interface CreateSignedCredentialIssuerMetadataJwtOptions {
3640
- /**
3641
- * The credential issuer metadata to include in the jwt
3642
- */
3643
- credentialIssuerMetadata: CredentialIssuerMetadata;
3644
- /**
3645
- * The date when the credential issuer metadata was issued. If not provided the current time will be used.
3646
- */
3647
- issuedAt?: Date;
3648
- /**
3649
- * The date when the credential issuer metadata will expire.
3650
- */
3651
- expiresAt?: Date;
3652
- /**
3653
- * Signer of the credential issuer metadata jwt
3654
- */
3655
- signer: JwtSigner;
3656
- /**
3657
- * The issuer of the issuer metadata jwt. This field is optional
3658
- */
3659
- issuer?: string;
3660
- /**
3661
- * Callbacks used for creating the credential issuer metadata jwt
3662
- */
3663
- callbacks: Pick<CallbackContext, 'signJwt'>;
3664
- /**
3665
- * Additional payload to include in the credential issuer metadata jwt payload. Will be applied after
3666
- * any default claims that are included, so add claims with caution.
3667
- */
3668
- additionalPayload?: Record<string, unknown>;
3669
- }
3670
- //#endregion
3671
- //#region src/Openid4vciIssuer.d.ts
3672
- interface Openid4vciIssuerOptions {
3673
- /**
3674
- * Callbacks required for the openid4vc issuer
3675
- */
3676
- callbacks: Omit<CallbackContext, 'decryptJwe' | 'encryptJwe'>;
3677
- }
3678
- declare class Openid4vciIssuer {
3679
- private options;
3680
- constructor(options: Openid4vciIssuerOptions);
3681
- getCredentialIssuerMetadataDraft11(credentialIssuerMetadata: CredentialIssuerMetadata): {
3682
- [x: string]: unknown;
3683
- credential_issuer: string;
3684
- credential_endpoint: string;
3685
- credential_configurations_supported: Record<string, {
3686
- [x: string]: unknown;
3687
- format: string;
3688
- scope?: string | undefined;
3689
- cryptographic_binding_methods_supported?: string[] | undefined;
3690
- credential_signing_alg_values_supported?: string[] | number[] | undefined;
3691
- proof_types_supported?: Record<string, {
3692
- proof_signing_alg_values_supported: string[];
3693
- key_attestations_required?: {
3694
- [x: string]: unknown;
3695
- key_storage?: string[] | undefined;
3696
- user_authentication?: string[] | undefined;
3697
- } | undefined;
3698
- }> | undefined;
3699
- credential_metadata?: {
3700
- [x: string]: unknown;
3701
- display?: {
3702
- [x: string]: unknown;
3703
- name: string;
3704
- locale?: string | undefined;
3705
- logo?: {
3706
- [x: string]: unknown;
3707
- uri?: string | undefined;
3708
- alt_text?: string | undefined;
3709
- } | undefined;
3710
- description?: string | undefined;
3711
- background_color?: string | undefined;
3712
- background_image?: {
3713
- [x: string]: unknown;
3714
- uri?: string | undefined;
3715
- } | undefined;
3716
- text_color?: string | undefined;
3717
- }[] | undefined;
3718
- } | undefined;
3719
- }>;
3720
- credentials_supported: ({
3721
- [x: string]: unknown;
3722
- format: "ldp_vc";
3723
- '@context': string[];
3724
- types: [string, ...string[]];
3725
- order?: string[] | undefined;
3726
- credentialSubject?: Record<string, any[] | Record<string, any> | {
3727
- [x: string]: unknown;
3728
- mandatory?: boolean | undefined;
3729
- value_type?: string | undefined;
3730
- display?: {
3731
- [x: string]: unknown;
3732
- name?: string | undefined;
3733
- locale?: string | undefined;
3734
- }[] | undefined;
3735
- }> | undefined;
3736
- } | {
3737
- [x: string]: unknown;
3738
- format: "jwt_vc_json";
3739
- types: [string, ...string[]];
3740
- order?: string[] | undefined;
3741
- credentialSubject?: Record<string, any[] | Record<string, any> | {
3742
- [x: string]: unknown;
3743
- mandatory?: boolean | undefined;
3744
- value_type?: string | undefined;
3745
- display?: {
3746
- [x: string]: unknown;
3747
- name?: string | undefined;
3748
- locale?: string | undefined;
3749
- }[] | undefined;
3750
- }> | undefined;
3751
- } | {
3752
- [x: string]: unknown;
3753
- format: "jwt_vc_json-ld";
3754
- '@context': string[];
3755
- types: [string, ...string[]];
3756
- order?: string[] | undefined;
3757
- credentialSubject?: Record<string, any[] | Record<string, any> | {
3758
- [x: string]: unknown;
3759
- mandatory?: boolean | undefined;
3760
- value_type?: string | undefined;
3761
- display?: {
3762
- [x: string]: unknown;
3763
- name?: string | undefined;
3764
- locale?: string | undefined;
3765
- }[] | undefined;
3766
- }> | undefined;
3767
- } | {
3768
- [x: string]: unknown;
3769
- format: string;
3770
- })[];
3771
- authorization_servers?: string[] | undefined;
3772
- deferred_credential_endpoint?: string | undefined;
3773
- notification_endpoint?: string | undefined;
3774
- nonce_endpoint?: string | undefined;
3775
- credential_response_encryption?: {
3776
- [x: string]: unknown;
3777
- alg_values_supported: string[];
3778
- enc_values_supported: string[];
3779
- encryption_required: boolean;
3780
- } | undefined;
3781
- batch_credential_issuance?: {
3782
- [x: string]: unknown;
3783
- batch_size: number;
3784
- } | undefined;
3785
- display?: {
3786
- [x: string]: unknown;
3787
- name?: string | undefined;
3788
- locale?: string | undefined;
3789
- logo?: {
3790
- [x: string]: unknown;
3791
- uri?: string | undefined;
3792
- alt_text?: string | undefined;
3793
- } | undefined;
3794
- }[] | undefined;
3795
- };
3796
- getKnownCredentialConfigurationsSupported(credentialIssuerMetadata: CredentialIssuerMetadata): CredentialConfigurationsSupportedWithFormats;
3797
- /**
3798
- * Create issuer metadata and validates the structure is correct
3799
- */
3800
- createCredentialIssuerMetadata(credentialIssuerMetadata: CredentialIssuerMetadata): CredentialIssuerMetadata;
3801
- /**
3802
- * Validates credential issuer metadata structure is correct and creates signed credential issuer metadata JWT
3803
- */
3804
- createSignedCredentialIssuerMetadataJwt(options: Omit<CreateSignedCredentialIssuerMetadataJwtOptions, 'callbacks'>): Promise<string>;
3805
- createCredentialOffer(options: Pick<CreateCredentialOfferOptions, 'issuerMetadata' | 'additionalPayload' | 'grants' | 'credentialOfferUri' | 'credentialOfferScheme' | 'credentialConfigurationIds'>): Promise<{
3806
- credentialOffer: string;
3807
- credentialOfferObject: CredentialOfferObject;
3808
- }>;
3809
- /**
3810
- * @throws Oauth2ServerErrorResponseError - if verification of the jwt failed. You can extract
3811
- * the credential error response from this.
3812
- */
3813
- verifyCredentialRequestJwtProof(options: Pick<VerifyCredentialRequestJwtProofOptions, 'clientId' | 'jwt' | 'now' | 'expectedNonce' | 'nonceExpiresAt'> & {
3814
- issuerMetadata: IssuerMetadataResult;
3815
- }): Promise<{
3816
- header: {
3817
- [x: string]: unknown;
3818
- alg: string;
3819
- typ: "openid4vci-proof+jwt";
3820
- kid?: string | undefined;
3821
- jwk?: {
3822
- [x: string]: unknown;
3823
- kty: string;
3824
- crv?: string | undefined;
3825
- x?: string | undefined;
3826
- y?: string | undefined;
3827
- e?: string | undefined;
3828
- n?: string | undefined;
3829
- alg?: string | undefined;
3830
- d?: string | undefined;
3831
- dp?: string | undefined;
3832
- dq?: string | undefined;
3833
- ext?: boolean | undefined;
3834
- k?: string | undefined;
3835
- key_ops?: string[] | undefined;
3836
- kid?: string | undefined;
3837
- oth?: {
3838
- [x: string]: unknown;
3839
- d?: string | undefined;
3840
- r?: string | undefined;
3841
- t?: string | undefined;
3842
- }[] | undefined;
3843
- p?: string | undefined;
3844
- q?: string | undefined;
3845
- qi?: string | undefined;
3846
- use?: string | undefined;
3847
- x5c?: string[] | undefined;
3848
- x5t?: string | undefined;
3849
- 'x5t#S256'?: string | undefined;
3850
- x5u?: string | undefined;
3851
- } | undefined;
3852
- x5c?: string[] | undefined;
3853
- trust_chain?: [string, ...string[]] | undefined;
3854
- key_attestation?: string | undefined;
3855
- };
3856
- payload: {
3857
- [x: string]: unknown;
3858
- aud: string | string[];
3859
- iat: number;
3860
- iss?: string | undefined;
3861
- exp?: number | undefined;
3862
- nbf?: number | undefined;
3863
- nonce?: string | undefined;
3864
- jti?: string | undefined;
3865
- sub?: string | undefined;
3866
- cnf?: {
3867
- [x: string]: unknown;
3868
- jwk?: {
3869
- [x: string]: unknown;
3870
- kty: string;
3871
- crv?: string | undefined;
3872
- x?: string | undefined;
3873
- y?: string | undefined;
3874
- e?: string | undefined;
3875
- n?: string | undefined;
3876
- alg?: string | undefined;
3877
- d?: string | undefined;
3878
- dp?: string | undefined;
3879
- dq?: string | undefined;
3880
- ext?: boolean | undefined;
3881
- k?: string | undefined;
3882
- key_ops?: string[] | undefined;
3883
- kid?: string | undefined;
3884
- oth?: {
3885
- [x: string]: unknown;
3886
- d?: string | undefined;
3887
- r?: string | undefined;
3888
- t?: string | undefined;
3889
- }[] | undefined;
3890
- p?: string | undefined;
3891
- q?: string | undefined;
3892
- qi?: string | undefined;
3893
- use?: string | undefined;
3894
- x5c?: string[] | undefined;
3895
- x5t?: string | undefined;
3896
- 'x5t#S256'?: string | undefined;
3897
- x5u?: string | undefined;
3898
- } | undefined;
3899
- jkt?: string | undefined;
3900
- } | undefined;
3901
- status?: Record<string, any> | undefined;
3902
- trust_chain?: [string, ...string[]] | undefined;
3903
- };
3904
- signer: _openid4vc_oauth20.JwtSignerWithJwk;
3905
- keyAttestation: {
3906
- header: {
3907
- [x: string]: unknown;
3908
- typ: "keyattestation+jwt" | "key-attestation+jwt";
3909
- alg: string;
3910
- kid?: string | undefined;
3911
- jwk?: {
3912
- [x: string]: unknown;
3913
- kty: string;
3914
- crv?: string | undefined;
3915
- x?: string | undefined;
3916
- y?: string | undefined;
3917
- e?: string | undefined;
3918
- n?: string | undefined;
3919
- alg?: string | undefined;
3920
- d?: string | undefined;
3921
- dp?: string | undefined;
3922
- dq?: string | undefined;
3923
- ext?: boolean | undefined;
3924
- k?: string | undefined;
3925
- key_ops?: string[] | undefined;
3926
- kid?: string | undefined;
3927
- oth?: {
3928
- [x: string]: unknown;
3929
- d?: string | undefined;
3930
- r?: string | undefined;
3931
- t?: string | undefined;
3932
- }[] | undefined;
3933
- p?: string | undefined;
3934
- q?: string | undefined;
3935
- qi?: string | undefined;
3936
- use?: string | undefined;
3937
- x5c?: string[] | undefined;
3938
- x5t?: string | undefined;
3939
- 'x5t#S256'?: string | undefined;
3940
- x5u?: string | undefined;
3941
- } | undefined;
3942
- x5c?: string[] | undefined;
3943
- trust_chain?: [string, ...string[]] | undefined;
3944
- };
3945
- payload: {
3946
- [x: string]: unknown;
3947
- nonce: string | undefined;
3948
- exp: number | undefined;
3949
- iat: number;
3950
- attested_keys: {
3951
- [x: string]: unknown;
3952
- kty: string;
3953
- crv?: string | undefined;
3954
- x?: string | undefined;
3955
- y?: string | undefined;
3956
- e?: string | undefined;
3957
- n?: string | undefined;
3958
- alg?: string | undefined;
3959
- d?: string | undefined;
3960
- dp?: string | undefined;
3961
- dq?: string | undefined;
3962
- ext?: boolean | undefined;
3963
- k?: string | undefined;
3964
- key_ops?: string[] | undefined;
3965
- kid?: string | undefined;
3966
- oth?: {
3967
- [x: string]: unknown;
3968
- d?: string | undefined;
3969
- r?: string | undefined;
3970
- t?: string | undefined;
3971
- }[] | undefined;
3972
- p?: string | undefined;
3973
- q?: string | undefined;
3974
- qi?: string | undefined;
3975
- use?: string | undefined;
3976
- x5c?: string[] | undefined;
3977
- x5t?: string | undefined;
3978
- 'x5t#S256'?: string | undefined;
3979
- x5u?: string | undefined;
3980
- }[];
3981
- key_storage?: string[] | undefined;
3982
- user_authentication?: string[] | undefined;
3983
- certification?: string | undefined;
3984
- iss?: string | undefined;
3985
- aud?: string | string[] | undefined;
3986
- nbf?: number | undefined;
3987
- jti?: string | undefined;
3988
- sub?: string | undefined;
3989
- cnf?: {
3990
- [x: string]: unknown;
3991
- jwk?: {
3992
- [x: string]: unknown;
3993
- kty: string;
3994
- crv?: string | undefined;
3995
- x?: string | undefined;
3996
- y?: string | undefined;
3997
- e?: string | undefined;
3998
- n?: string | undefined;
3999
- alg?: string | undefined;
4000
- d?: string | undefined;
4001
- dp?: string | undefined;
4002
- dq?: string | undefined;
4003
- ext?: boolean | undefined;
4004
- k?: string | undefined;
4005
- key_ops?: string[] | undefined;
4006
- kid?: string | undefined;
4007
- oth?: {
4008
- [x: string]: unknown;
4009
- d?: string | undefined;
4010
- r?: string | undefined;
4011
- t?: string | undefined;
4012
- }[] | undefined;
4013
- p?: string | undefined;
4014
- q?: string | undefined;
4015
- qi?: string | undefined;
4016
- use?: string | undefined;
4017
- x5c?: string[] | undefined;
4018
- x5t?: string | undefined;
4019
- 'x5t#S256'?: string | undefined;
4020
- x5u?: string | undefined;
4021
- } | undefined;
4022
- jkt?: string | undefined;
4023
- } | undefined;
4024
- status?: Record<string, any> | undefined;
4025
- trust_chain?: [string, ...string[]] | undefined;
4026
- };
4027
- signer: _openid4vc_oauth20.JwtSignerWithJwk;
4028
- } | undefined;
4029
- }>;
4030
- /**
4031
- * @throws Oauth2ServerErrorResponseError - if verification of the key attestation failed. You can extract
4032
- * the credential error response from this.
4033
- */
4034
- verifyCredentialRequestAttestationProof(options: Pick<VerifyCredentialRequestAttestationProofOptions, 'keyAttestationJwt' | 'expectedNonce' | 'nonceExpiresAt' | 'now'> & {
4035
- issuerMetadata: IssuerMetadataResult;
4036
- }): Promise<{
4037
- header: {
4038
- [x: string]: unknown;
4039
- typ: "keyattestation+jwt" | "key-attestation+jwt";
4040
- alg: string;
4041
- kid?: string | undefined;
4042
- jwk?: {
4043
- [x: string]: unknown;
4044
- kty: string;
4045
- crv?: string | undefined;
4046
- x?: string | undefined;
4047
- y?: string | undefined;
4048
- e?: string | undefined;
4049
- n?: string | undefined;
4050
- alg?: string | undefined;
4051
- d?: string | undefined;
4052
- dp?: string | undefined;
4053
- dq?: string | undefined;
4054
- ext?: boolean | undefined;
4055
- k?: string | undefined;
4056
- key_ops?: string[] | undefined;
4057
- kid?: string | undefined;
4058
- oth?: {
4059
- [x: string]: unknown;
4060
- d?: string | undefined;
4061
- r?: string | undefined;
4062
- t?: string | undefined;
4063
- }[] | undefined;
4064
- p?: string | undefined;
4065
- q?: string | undefined;
4066
- qi?: string | undefined;
4067
- use?: string | undefined;
4068
- x5c?: string[] | undefined;
4069
- x5t?: string | undefined;
4070
- 'x5t#S256'?: string | undefined;
4071
- x5u?: string | undefined;
4072
- } | undefined;
4073
- x5c?: string[] | undefined;
4074
- trust_chain?: [string, ...string[]] | undefined;
4075
- };
4076
- payload: {
4077
- [x: string]: unknown;
4078
- nonce: string | undefined;
4079
- exp: number | undefined;
4080
- iat: number;
4081
- attested_keys: {
4082
- [x: string]: unknown;
4083
- kty: string;
4084
- crv?: string | undefined;
4085
- x?: string | undefined;
4086
- y?: string | undefined;
4087
- e?: string | undefined;
4088
- n?: string | undefined;
4089
- alg?: string | undefined;
4090
- d?: string | undefined;
4091
- dp?: string | undefined;
4092
- dq?: string | undefined;
4093
- ext?: boolean | undefined;
4094
- k?: string | undefined;
4095
- key_ops?: string[] | undefined;
4096
- kid?: string | undefined;
4097
- oth?: {
4098
- [x: string]: unknown;
4099
- d?: string | undefined;
4100
- r?: string | undefined;
4101
- t?: string | undefined;
4102
- }[] | undefined;
4103
- p?: string | undefined;
4104
- q?: string | undefined;
4105
- qi?: string | undefined;
4106
- use?: string | undefined;
4107
- x5c?: string[] | undefined;
4108
- x5t?: string | undefined;
4109
- 'x5t#S256'?: string | undefined;
4110
- x5u?: string | undefined;
4111
- }[];
4112
- key_storage?: string[] | undefined;
4113
- user_authentication?: string[] | undefined;
4114
- certification?: string | undefined;
4115
- iss?: string | undefined;
4116
- aud?: string | string[] | undefined;
4117
- nbf?: number | undefined;
4118
- jti?: string | undefined;
4119
- sub?: string | undefined;
4120
- cnf?: {
4121
- [x: string]: unknown;
4122
- jwk?: {
4123
- [x: string]: unknown;
4124
- kty: string;
4125
- crv?: string | undefined;
4126
- x?: string | undefined;
4127
- y?: string | undefined;
4128
- e?: string | undefined;
4129
- n?: string | undefined;
4130
- alg?: string | undefined;
4131
- d?: string | undefined;
4132
- dp?: string | undefined;
4133
- dq?: string | undefined;
4134
- ext?: boolean | undefined;
4135
- k?: string | undefined;
4136
- key_ops?: string[] | undefined;
4137
- kid?: string | undefined;
4138
- oth?: {
4139
- [x: string]: unknown;
4140
- d?: string | undefined;
4141
- r?: string | undefined;
4142
- t?: string | undefined;
4143
- }[] | undefined;
4144
- p?: string | undefined;
4145
- q?: string | undefined;
4146
- qi?: string | undefined;
4147
- use?: string | undefined;
4148
- x5c?: string[] | undefined;
4149
- x5t?: string | undefined;
4150
- 'x5t#S256'?: string | undefined;
4151
- x5u?: string | undefined;
4152
- } | undefined;
4153
- jkt?: string | undefined;
4154
- } | undefined;
4155
- status?: Record<string, any> | undefined;
4156
- trust_chain?: [string, ...string[]] | undefined;
4157
- };
4158
- signer: _openid4vc_oauth20.JwtSignerWithJwk;
4159
- }>;
4160
- /**
4161
- * @throws Oauth2ServerErrorResponseError - when validation of the credential request fails
4162
- * You can extract the credential error response from this.
4163
- */
4164
- parseCredentialRequest(options: ParseCredentialRequestOptions): ParseCredentialRequestReturn;
4165
- /**
4166
- * @throws Oauth2ServerErrorResponseError - when validation of the deferred credential request fails
4167
- */
4168
- parseDeferredCredentialRequest(options: ParseDeferredCredentialRequestOptions): ParseDeferredCredentialRequestReturn;
4169
- /**
4170
- * @throws ValidationError - when validation of the credential response fails
4171
- */
4172
- createCredentialResponse(options: CreateCredentialResponseOptions): {
4173
- [x: string]: unknown;
4174
- credentials?: {
4175
- credential: string | Record<string, any>;
4176
- }[] | (string | Record<string, any>)[] | undefined;
4177
- notification_id?: string | undefined;
4178
- transaction_id?: string | undefined;
4179
- interval?: number | undefined;
4180
- credential?: string | Record<string, any> | undefined;
4181
- c_nonce?: string | undefined;
4182
- c_nonce_expires_in?: number | undefined;
4183
- };
4184
- /**
4185
- * @throws ValidationError - when validation of the credential response fails
4186
- */
4187
- createDeferredCredentialResponse(options: CreateDeferredCredentialResponseOptions): {
4188
- [x: string]: unknown;
4189
- credentials?: {
4190
- credential: string | Record<string, any>;
4191
- }[] | (string | Record<string, any>)[] | undefined;
4192
- notification_id?: string | undefined;
4193
- transaction_id?: string | undefined;
4194
- interval?: number | undefined;
4195
- };
4196
- /**
4197
- * @throws ValidationError - when validation of the nonce response fails
4198
- */
4199
- createNonceResponse(options: CreateNonceResponseOptions): {
4200
- [x: string]: unknown;
4201
- c_nonce: string;
4202
- c_nonce_expires_in?: number | undefined;
4203
- };
4204
- verifyWalletAttestation(options: Omit<VerifyClientAttestationOptions, 'callbacks'>): Promise<{
4205
- clientAttestation: {
4206
- header: {
4207
- [x: string]: unknown;
4208
- typ: "oauth-client-attestation+jwt";
4209
- alg: string;
4210
- kid?: string | undefined;
4211
- jwk?: {
4212
- [x: string]: unknown;
4213
- kty: string;
4214
- crv?: string | undefined;
4215
- x?: string | undefined;
4216
- y?: string | undefined;
4217
- e?: string | undefined;
4218
- n?: string | undefined;
4219
- alg?: string | undefined;
4220
- d?: string | undefined;
4221
- dp?: string | undefined;
4222
- dq?: string | undefined;
4223
- ext?: boolean | undefined;
4224
- k?: string | undefined;
4225
- key_ops?: string[] | undefined;
4226
- kid?: string | undefined;
4227
- oth?: {
4228
- [x: string]: unknown;
4229
- d?: string | undefined;
4230
- r?: string | undefined;
4231
- t?: string | undefined;
4232
- }[] | undefined;
4233
- p?: string | undefined;
4234
- q?: string | undefined;
4235
- qi?: string | undefined;
4236
- use?: string | undefined;
4237
- x5c?: string[] | undefined;
4238
- x5t?: string | undefined;
4239
- 'x5t#S256'?: string | undefined;
4240
- x5u?: string | undefined;
4241
- } | undefined;
4242
- x5c?: string[] | undefined;
4243
- trust_chain?: [string, ...string[]] | undefined;
4244
- };
4245
- payload: {
4246
- [x: string]: unknown;
4247
- iss: string;
4248
- sub: string;
4249
- exp: number;
4250
- cnf: {
4251
- [x: string]: unknown;
4252
- jwk: {
4253
- [x: string]: unknown;
4254
- kty: string;
4255
- crv?: string | undefined;
4256
- x?: string | undefined;
4257
- y?: string | undefined;
4258
- e?: string | undefined;
4259
- n?: string | undefined;
4260
- alg?: string | undefined;
4261
- d?: string | undefined;
4262
- dp?: string | undefined;
4263
- dq?: string | undefined;
4264
- ext?: boolean | undefined;
4265
- k?: string | undefined;
4266
- key_ops?: string[] | undefined;
4267
- kid?: string | undefined;
4268
- oth?: {
4269
- [x: string]: unknown;
4270
- d?: string | undefined;
4271
- r?: string | undefined;
4272
- t?: string | undefined;
4273
- }[] | undefined;
4274
- p?: string | undefined;
4275
- q?: string | undefined;
4276
- qi?: string | undefined;
4277
- use?: string | undefined;
4278
- x5c?: string[] | undefined;
4279
- x5t?: string | undefined;
4280
- 'x5t#S256'?: string | undefined;
4281
- x5u?: string | undefined;
4282
- };
4283
- };
4284
- wallet_name?: string | undefined;
4285
- wallet_link?: string | undefined;
4286
- aud?: string | string[] | undefined;
4287
- iat?: number | undefined;
4288
- nbf?: number | undefined;
4289
- nonce?: string | undefined;
4290
- jti?: string | undefined;
4291
- status?: Record<string, any> | undefined;
4292
- trust_chain?: [string, ...string[]] | undefined;
4293
- };
4294
- signer: _openid4vc_oauth20.JwtSignerWithJwk;
4295
- };
4296
- clientAttestationPop: {
4297
- header: {
4298
- [x: string]: unknown;
4299
- typ: "oauth-client-attestation-pop+jwt";
4300
- alg: string;
4301
- kid?: string | undefined;
4302
- jwk?: {
4303
- [x: string]: unknown;
4304
- kty: string;
4305
- crv?: string | undefined;
4306
- x?: string | undefined;
4307
- y?: string | undefined;
4308
- e?: string | undefined;
4309
- n?: string | undefined;
4310
- alg?: string | undefined;
4311
- d?: string | undefined;
4312
- dp?: string | undefined;
4313
- dq?: string | undefined;
4314
- ext?: boolean | undefined;
4315
- k?: string | undefined;
4316
- key_ops?: string[] | undefined;
4317
- kid?: string | undefined;
4318
- oth?: {
4319
- [x: string]: unknown;
4320
- d?: string | undefined;
4321
- r?: string | undefined;
4322
- t?: string | undefined;
4323
- }[] | undefined;
4324
- p?: string | undefined;
4325
- q?: string | undefined;
4326
- qi?: string | undefined;
4327
- use?: string | undefined;
4328
- x5c?: string[] | undefined;
4329
- x5t?: string | undefined;
4330
- 'x5t#S256'?: string | undefined;
4331
- x5u?: string | undefined;
4332
- } | undefined;
4333
- x5c?: string[] | undefined;
4334
- trust_chain?: [string, ...string[]] | undefined;
4335
- };
4336
- payload: {
4337
- [x: string]: unknown;
4338
- iss: string;
4339
- exp: number;
4340
- aud: string | string[];
4341
- jti: string;
4342
- nonce?: string | undefined;
4343
- iat?: number | undefined;
4344
- nbf?: number | undefined;
4345
- sub?: string | undefined;
4346
- cnf?: {
4347
- [x: string]: unknown;
4348
- jwk?: {
4349
- [x: string]: unknown;
4350
- kty: string;
4351
- crv?: string | undefined;
4352
- x?: string | undefined;
4353
- y?: string | undefined;
4354
- e?: string | undefined;
4355
- n?: string | undefined;
4356
- alg?: string | undefined;
4357
- d?: string | undefined;
4358
- dp?: string | undefined;
4359
- dq?: string | undefined;
4360
- ext?: boolean | undefined;
4361
- k?: string | undefined;
4362
- key_ops?: string[] | undefined;
4363
- kid?: string | undefined;
4364
- oth?: {
4365
- [x: string]: unknown;
4366
- d?: string | undefined;
4367
- r?: string | undefined;
4368
- t?: string | undefined;
4369
- }[] | undefined;
4370
- p?: string | undefined;
4371
- q?: string | undefined;
4372
- qi?: string | undefined;
4373
- use?: string | undefined;
4374
- x5c?: string[] | undefined;
4375
- x5t?: string | undefined;
4376
- 'x5t#S256'?: string | undefined;
4377
- x5u?: string | undefined;
4378
- } | undefined;
4379
- jkt?: string | undefined;
4380
- } | undefined;
4381
- status?: Record<string, any> | undefined;
4382
- trust_chain?: [string, ...string[]] | undefined;
4383
- };
4384
- signer: _openid4vc_oauth20.JwtSignerWithJwk;
4385
- };
4386
- }>;
4387
- }
4388
- //#endregion
4389
- //#region src/Openid4vciWalletProvider.d.ts
4390
- interface Openid4vciWalletProviderOptions {
4391
- /**
4392
- * Callbacks required for the openid4vc issuer
4393
- */
4394
- callbacks: Pick<CallbackContext, 'signJwt'>;
4395
- }
4396
- declare class Openid4vciWalletProvider {
4397
- private options;
4398
- constructor(options: Openid4vciWalletProviderOptions);
4399
- createWalletAttestationJwt(options: Omit<CreateClientAttestationJwtOptions, 'callbacks'> & {
4400
- walletName?: string;
4401
- walletLink?: string;
4402
- }): Promise<string>;
4403
- createKeyAttestationJwt(options: Omit<CreateKeyAttestationJwtOptions, 'callbacks'>): Promise<string>;
4404
- }
4405
- //#endregion
4406
- export { AuthorizationFlow, type CreateKeyAttestationJwtOptions, type CredentialConfigurationSupported, type CredentialConfigurationSupportedWithFormats, type CredentialConfigurationsSupported, type CredentialConfigurationsSupportedWithFormats, type CredentialErrorResponse, type CredentialFormatIdentifier, type CredentialIssuerMetadata, type CredentialIssuerMetadataDisplayEntry, type CredentialOfferAuthorizationCodeGrant, type CredentialOfferGrants, type CredentialOfferObject, type CredentialOfferPreAuthorizedCodeGrant, type CredentialOfferPreAuthorizedCodeGrantTxCode, type CredentialRequest, type CredentialRequestFormatSpecific, type CredentialRequestJwtProofTypeHeader, type CredentialRequestJwtProofTypePayload, type CredentialRequestWithFormats, type CredentialResponse, type DeferredCredentialRequest, type DeferredCredentialResponse, type ExtractScopesForCredentialConfigurationIdsOptions, type GetCredentialConfigurationsMatchingRequestFormatOptions, type IssuerMetadataResult, type JwtProofTypeIdentifier, type JwtVcJsonFormatIdentifier, type JwtVcJsonLdFormatIdentifier, type LdpVcFormatIdentifier, type LegacySdJwtVcFormatIdentifier, type MsoMdocFormatIdentifier, type NonceResponse, type NotificationErrorResponse, type NotificationEvent, type Oid4vcTsConfig, Openid4vciClient, type Openid4vciClientOptions, Openid4vciDraftVersion, Openid4vciError, type Openid4vciErrorOptions, Openid4vciIssuer, type Openid4vciIssuerOptions, Openid4vciRetrieveCredentialsError, Openid4vciSendNotificationError, Openid4vciWalletProvider, type Openid4vciWalletProviderOptions, type ParseCredentialRequestReturn, type ParseKeyAttestationJwtOptions, type ProofTypeIdentifier, type RetrieveCredentialsResponseNotOk, type RetrieveCredentialsResponseOk, type SendNotificationResponseNotOk, type SendNotificationResponseOk, type VerifyKeyAttestationJwtOptions, type VerifyKeyAttestationJwtReturn, createKeyAttestationJwt, credentialsSupportedToCredentialConfigurationsSupported, determineAuthorizationServerForCredentialOffer, extractScopesForCredentialConfigurationIds, getCredentialConfigurationsMatchingRequestFormat, getGlobalConfig, parseKeyAttestationJwt, setGlobalConfig, verifyKeyAttestationJwt };
4407
- //# sourceMappingURL=index.d.cts.map