@openid4vc/openid4vp 0.3.0-alpha-20250321145547 → 0.3.0-alpha-20250321202313

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import * as zod from 'zod';
 import zod__default, { z } from 'zod';
 import * as _openid4vc_oauth2 from '@openid4vc/oauth2';
-import { Jwk, JwtSignerWithJwk, CallbackContext, JwtPayload, JwtSigner, JweEncryptor, HashAlgorithm } from '@openid4vc/oauth2';
+import { Jwk, JwtSignerWithJwk, decodeJwt, CallbackContext, JwtPayload, JwtSigner, JweEncryptor, HashAlgorithm } from '@openid4vc/oauth2';
 
 declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
     response_type: z.ZodLiteral<"vp_token">;
@@ -7428,10 +7428,11 @@ declare const zJarRequestObjectPayload: z.ZodObject<{
 type JarRequestObjectPayload = z.infer<typeof zJarRequestObjectPayload>;
 
 interface VerifiedJarRequest {
-    authorizationRequestParams: JarRequestObjectPayload;
+    authorizationRequestPayload: JarRequestObjectPayload;
     sendBy: 'value' | 'reference';
     decryptionJwk?: Jwk;
     signer: JwtSignerWithJwk;
+    jwt: ReturnType<typeof decodeJwt<undefined, typeof zJarRequestObjectPayload>>;
 }
 
 declare const zClientMetadata: z.ZodObject<{
@@ -15811,7 +15812,7 @@ interface ResolveOpenid4vpAuthorizationRequestOptions {
     wallet?: WalletVerificationOptions;
     origin?: string;
     disableOriginValidation?: boolean;
-    callbacks: Pick<CallbackContext, 'verifyJwt' | 'decryptJwe' | 'getX509CertificateMetadata'>;
+    callbacks: Pick<CallbackContext, 'verifyJwt' | 'decryptJwe' | 'getX509CertificateMetadata' | 'fetch'>;
 }
 type ResolvedOpenid4vpAuthorizationRequest = {
     transactionData?: ParsedTransactionDataEntry[];

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import * as zod from 'zod';
 import zod__default, { z } from 'zod';
 import * as _openid4vc_oauth2 from '@openid4vc/oauth2';
-import { Jwk, JwtSignerWithJwk, CallbackContext, JwtPayload, JwtSigner, JweEncryptor, HashAlgorithm } from '@openid4vc/oauth2';
+import { Jwk, JwtSignerWithJwk, decodeJwt, CallbackContext, JwtPayload, JwtSigner, JweEncryptor, HashAlgorithm } from '@openid4vc/oauth2';
 
 declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
     response_type: z.ZodLiteral<"vp_token">;
@@ -7428,10 +7428,11 @@ declare const zJarRequestObjectPayload: z.ZodObject<{
 type JarRequestObjectPayload = z.infer<typeof zJarRequestObjectPayload>;
 
 interface VerifiedJarRequest {
-    authorizationRequestParams: JarRequestObjectPayload;
+    authorizationRequestPayload: JarRequestObjectPayload;
     sendBy: 'value' | 'reference';
     decryptionJwk?: Jwk;
     signer: JwtSignerWithJwk;
+    jwt: ReturnType<typeof decodeJwt<undefined, typeof zJarRequestObjectPayload>>;
 }
 
 declare const zClientMetadata: z.ZodObject<{
@@ -15811,7 +15812,7 @@ interface ResolveOpenid4vpAuthorizationRequestOptions {
     wallet?: WalletVerificationOptions;
     origin?: string;
     disableOriginValidation?: boolean;
-    callbacks: Pick<CallbackContext, 'verifyJwt' | 'decryptJwe' | 'getX509CertificateMetadata'>;
+    callbacks: Pick<CallbackContext, 'verifyJwt' | 'decryptJwe' | 'getX509CertificateMetadata' | 'fetch'>;
 }
 type ResolvedOpenid4vpAuthorizationRequest = {
     transactionData?: ParsedTransactionDataEntry[];

package/dist/index.js

@@ -1039,7 +1039,8 @@ async function verifyJarRequest(options) {
     requestUri: jarRequestParams.request_uri,
     clientIdentifierScheme,
     method,
-    wallet
+    wallet,
+    fetch: callbacks.fetch
   });
   const requestObjectIsEncrypted = import_oauth217.zCompactJwe.safeParse(requestObject).success;
   const { decryptionJwk, payload: decryptedRequestObject } = requestObjectIsEncrypted ? await decryptJarRequest({ jwe: requestObject, callbacks }) : { payload: requestObject, decryptionJwk: void 0 };
@@ -1050,17 +1051,17 @@ async function verifyJarRequest(options) {
       error_description: "Jar Request Object is not a valid JWS."
     });
   }
-  const { authorizationRequestParams, signer } = await verifyJarRequestObject({
+  const { authorizationRequestPayload, signer, jwt } = await verifyJarRequestObject({
     decryptedRequestObject,
     callbacks
   });
-  if (!authorizationRequestParams.client_id) {
+  if (!authorizationRequestPayload.client_id) {
     throw new import_oauth217.Oauth2ServerErrorResponseError({
       error: import_oauth217.Oauth2ErrorCodes.InvalidRequestObject,
       error_description: 'Jar Request Object is missing the required "client_id" field.'
     });
   }
-  if (jarRequestParams.client_id !== authorizationRequestParams.client_id) {
+  if (jarRequestParams.client_id !== authorizationRequestPayload.client_id) {
     throw new import_oauth217.Oauth2ServerErrorResponseError({
       error: import_oauth217.Oauth2ErrorCodes.InvalidRequest,
       error_description: "client_id does not match the request object client_id."
@@ -1068,7 +1069,8 @@ async function verifyJarRequest(options) {
   }
   return {
     sendBy,
-    authorizationRequestParams,
+    jwt,
+    authorizationRequestPayload,
     signer,
     decryptionJwk
   };
@@ -1109,7 +1111,11 @@ async function verifyJarRequestObject(options) {
       error_description: `Invalid Jar Request Object typ header. Expected "oauth-authz-req+jwt", received "${jwt.header.typ}".`
     });
   }
-  return { authorizationRequestParams: jwt.payload, signer };
+  return {
+    signer,
+    jwt,
+    authorizationRequestPayload: jwt.payload
+  };
 }
 
 // src/transaction-data/parse-transaction-data.ts
@@ -1157,7 +1163,7 @@ async function resolveOpenid4vpAuthorizationRequest(options) {
     jar = await verifyJarRequest({ jarRequestParams: parsed, callbacks, wallet });
     const parsedJarAuthorizationRequestPayload = (0, import_utils14.parseWithErrorHandling)(
       import_zod14.default.union([zOpenid4vpAuthorizationRequestDcApi, zOpenid4vpAuthorizationRequest]),
-      jar.authorizationRequestParams,
+      jar.authorizationRequestPayload,
       "Invalid authorization request. Could not parse jar request payload as openid4vp auth request."
     );
     authorizationRequestPayload = validateOpenId4vpAuthorizationRequestPayload({