@openid4vc/openid4vp 0.3.0-alpha-20250321221213 → 0.3.0-alpha-20250322133827

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/dist/index.d.mts +58 -1
  2. package/dist/index.d.ts +58 -1
  3. package/dist/index.js +10 -3
  4. package/dist/index.js.map +1 -1
  5. package/dist/index.mjs +12 -4
  6. package/dist/index.mjs.map +1 -1
  7. package/package.json +3 -3
package/dist/index.d.ts CHANGED
@@ -23,6 +23,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
23
23
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
24
24
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
25
25
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
26
+ jwks_uri: z.ZodOptional<z.ZodString>;
26
27
  jwks: z.ZodOptional<z.ZodObject<{
27
28
  keys: z.ZodArray<z.ZodObject<{
28
29
  kty: z.ZodString;
@@ -367,6 +368,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
367
368
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
368
369
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
369
370
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
371
+ jwks_uri: z.ZodOptional<z.ZodString>;
370
372
  jwks: z.ZodOptional<z.ZodObject<{
371
373
  keys: z.ZodArray<z.ZodObject<{
372
374
  kty: z.ZodString;
@@ -711,6 +713,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
711
713
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
712
714
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
713
715
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
716
+ jwks_uri: z.ZodOptional<z.ZodString>;
714
717
  jwks: z.ZodOptional<z.ZodObject<{
715
718
  keys: z.ZodArray<z.ZodObject<{
716
719
  kty: z.ZodString;
@@ -1075,6 +1078,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
1075
1078
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
1076
1079
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
1077
1080
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1081
+ jwks_uri: z.ZodOptional<z.ZodString>;
1078
1082
  jwks: z.ZodOptional<z.ZodObject<{
1079
1083
  keys: z.ZodArray<z.ZodObject<{
1080
1084
  kty: z.ZodString;
@@ -1419,6 +1423,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
1419
1423
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
1420
1424
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
1421
1425
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1426
+ jwks_uri: z.ZodOptional<z.ZodString>;
1422
1427
  jwks: z.ZodOptional<z.ZodObject<{
1423
1428
  keys: z.ZodArray<z.ZodObject<{
1424
1429
  kty: z.ZodString;
@@ -1763,6 +1768,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
1763
1768
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
1764
1769
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
1765
1770
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1771
+ jwks_uri: z.ZodOptional<z.ZodString>;
1766
1772
  jwks: z.ZodOptional<z.ZodObject<{
1767
1773
  keys: z.ZodArray<z.ZodObject<{
1768
1774
  kty: z.ZodString;
@@ -2127,6 +2133,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
2127
2133
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
2128
2134
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
2129
2135
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2136
+ jwks_uri: z.ZodOptional<z.ZodString>;
2130
2137
  jwks: z.ZodOptional<z.ZodObject<{
2131
2138
  keys: z.ZodArray<z.ZodObject<{
2132
2139
  kty: z.ZodString;
@@ -2471,6 +2478,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
2471
2478
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
2472
2479
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
2473
2480
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2481
+ jwks_uri: z.ZodOptional<z.ZodString>;
2474
2482
  jwks: z.ZodOptional<z.ZodObject<{
2475
2483
  keys: z.ZodArray<z.ZodObject<{
2476
2484
  kty: z.ZodString;
@@ -2815,6 +2823,7 @@ declare const zOpenid4vpAuthorizationRequest: z.ZodObject<{
2815
2823
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
2816
2824
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
2817
2825
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
2826
+ jwks_uri: z.ZodOptional<z.ZodString>;
2818
2827
  jwks: z.ZodOptional<z.ZodObject<{
2819
2828
  keys: z.ZodArray<z.ZodObject<{
2820
2829
  kty: z.ZodString;
@@ -3200,6 +3209,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
3200
3209
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
3201
3210
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
3202
3211
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3212
+ jwks_uri: z.ZodOptional<z.ZodString>;
3203
3213
  jwks: z.ZodOptional<z.ZodObject<{
3204
3214
  keys: z.ZodArray<z.ZodObject<{
3205
3215
  kty: z.ZodString;
@@ -3544,6 +3554,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
3544
3554
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
3545
3555
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
3546
3556
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3557
+ jwks_uri: z.ZodOptional<z.ZodString>;
3547
3558
  jwks: z.ZodOptional<z.ZodObject<{
3548
3559
  keys: z.ZodArray<z.ZodObject<{
3549
3560
  kty: z.ZodString;
@@ -3888,6 +3899,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
3888
3899
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
3889
3900
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
3890
3901
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3902
+ jwks_uri: z.ZodOptional<z.ZodString>;
3891
3903
  jwks: z.ZodOptional<z.ZodObject<{
3892
3904
  keys: z.ZodArray<z.ZodObject<{
3893
3905
  kty: z.ZodString;
@@ -4258,6 +4270,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
4258
4270
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
4259
4271
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
4260
4272
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4273
+ jwks_uri: z.ZodOptional<z.ZodString>;
4261
4274
  jwks: z.ZodOptional<z.ZodObject<{
4262
4275
  keys: z.ZodArray<z.ZodObject<{
4263
4276
  kty: z.ZodString;
@@ -4602,6 +4615,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
4602
4615
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
4603
4616
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
4604
4617
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4618
+ jwks_uri: z.ZodOptional<z.ZodString>;
4605
4619
  jwks: z.ZodOptional<z.ZodObject<{
4606
4620
  keys: z.ZodArray<z.ZodObject<{
4607
4621
  kty: z.ZodString;
@@ -4946,6 +4960,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
4946
4960
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
4947
4961
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
4948
4962
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4963
+ jwks_uri: z.ZodOptional<z.ZodString>;
4949
4964
  jwks: z.ZodOptional<z.ZodObject<{
4950
4965
  keys: z.ZodArray<z.ZodObject<{
4951
4966
  kty: z.ZodString;
@@ -5316,6 +5331,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
5316
5331
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
5317
5332
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
5318
5333
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
5334
+ jwks_uri: z.ZodOptional<z.ZodString>;
5319
5335
  jwks: z.ZodOptional<z.ZodObject<{
5320
5336
  keys: z.ZodArray<z.ZodObject<{
5321
5337
  kty: z.ZodString;
@@ -5660,6 +5676,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
5660
5676
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
5661
5677
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
5662
5678
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
5679
+ jwks_uri: z.ZodOptional<z.ZodString>;
5663
5680
  jwks: z.ZodOptional<z.ZodObject<{
5664
5681
  keys: z.ZodArray<z.ZodObject<{
5665
5682
  kty: z.ZodString;
@@ -6004,6 +6021,7 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<z.objectUtil.exte
6004
6021
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
6005
6022
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
6006
6023
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
6024
+ jwks_uri: z.ZodOptional<z.ZodString>;
6007
6025
  jwks: z.ZodOptional<z.ZodObject<{
6008
6026
  keys: z.ZodArray<z.ZodObject<{
6009
6027
  kty: z.ZodString;
@@ -7441,6 +7459,7 @@ declare const zClientMetadata: z.ZodObject<{
7441
7459
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
7442
7460
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
7443
7461
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
7462
+ jwks_uri: z.ZodOptional<z.ZodString>;
7444
7463
  jwks: z.ZodOptional<z.ZodObject<{
7445
7464
  keys: z.ZodArray<z.ZodObject<{
7446
7465
  kty: z.ZodString;
@@ -7785,6 +7804,7 @@ declare const zClientMetadata: z.ZodObject<{
7785
7804
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
7786
7805
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
7787
7806
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
7807
+ jwks_uri: z.ZodOptional<z.ZodString>;
7788
7808
  jwks: z.ZodOptional<z.ZodObject<{
7789
7809
  keys: z.ZodArray<z.ZodObject<{
7790
7810
  kty: z.ZodString;
@@ -8129,6 +8149,7 @@ declare const zClientMetadata: z.ZodObject<{
8129
8149
  authorization_signed_response_alg: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
8130
8150
  authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
8131
8151
  authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
8152
+ jwks_uri: z.ZodOptional<z.ZodString>;
8132
8153
  jwks: z.ZodOptional<z.ZodObject<{
8133
8154
  keys: z.ZodArray<z.ZodObject<{
8134
8155
  kty: z.ZodString;
@@ -9345,6 +9366,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
9345
9366
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
9346
9367
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
9347
9368
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
9369
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
9348
9370
  jwks: zod.ZodOptional<zod.ZodObject<{
9349
9371
  keys: zod.ZodArray<zod.ZodObject<{
9350
9372
  kty: zod.ZodString;
@@ -9689,6 +9711,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
9689
9711
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
9690
9712
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
9691
9713
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
9714
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
9692
9715
  jwks: zod.ZodOptional<zod.ZodObject<{
9693
9716
  keys: zod.ZodArray<zod.ZodObject<{
9694
9717
  kty: zod.ZodString;
@@ -10033,6 +10056,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
10033
10056
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
10034
10057
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
10035
10058
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
10059
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
10036
10060
  jwks: zod.ZodOptional<zod.ZodObject<{
10037
10061
  keys: zod.ZodArray<zod.ZodObject<{
10038
10062
  kty: zod.ZodString;
@@ -10397,6 +10421,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
10397
10421
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
10398
10422
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
10399
10423
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
10424
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
10400
10425
  jwks: zod.ZodOptional<zod.ZodObject<{
10401
10426
  keys: zod.ZodArray<zod.ZodObject<{
10402
10427
  kty: zod.ZodString;
@@ -10741,6 +10766,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
10741
10766
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
10742
10767
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
10743
10768
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
10769
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
10744
10770
  jwks: zod.ZodOptional<zod.ZodObject<{
10745
10771
  keys: zod.ZodArray<zod.ZodObject<{
10746
10772
  kty: zod.ZodString;
@@ -11085,6 +11111,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
11085
11111
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
11086
11112
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
11087
11113
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
11114
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
11088
11115
  jwks: zod.ZodOptional<zod.ZodObject<{
11089
11116
  keys: zod.ZodArray<zod.ZodObject<{
11090
11117
  kty: zod.ZodString;
@@ -11551,6 +11578,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
11551
11578
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
11552
11579
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
11553
11580
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
11581
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
11554
11582
  jwks: zod.ZodOptional<zod.ZodObject<{
11555
11583
  keys: zod.ZodArray<zod.ZodObject<{
11556
11584
  kty: zod.ZodString;
@@ -11895,6 +11923,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
11895
11923
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
11896
11924
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
11897
11925
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
11926
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
11898
11927
  jwks: zod.ZodOptional<zod.ZodObject<{
11899
11928
  keys: zod.ZodArray<zod.ZodObject<{
11900
11929
  kty: zod.ZodString;
@@ -12239,6 +12268,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
12239
12268
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
12240
12269
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
12241
12270
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
12271
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
12242
12272
  jwks: zod.ZodOptional<zod.ZodObject<{
12243
12273
  keys: zod.ZodArray<zod.ZodObject<{
12244
12274
  kty: zod.ZodString;
@@ -12603,6 +12633,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
12603
12633
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
12604
12634
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
12605
12635
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
12636
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
12606
12637
  jwks: zod.ZodOptional<zod.ZodObject<{
12607
12638
  keys: zod.ZodArray<zod.ZodObject<{
12608
12639
  kty: zod.ZodString;
@@ -12947,6 +12978,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
12947
12978
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
12948
12979
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
12949
12980
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
12981
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
12950
12982
  jwks: zod.ZodOptional<zod.ZodObject<{
12951
12983
  keys: zod.ZodArray<zod.ZodObject<{
12952
12984
  kty: zod.ZodString;
@@ -13291,6 +13323,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
13291
13323
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
13292
13324
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
13293
13325
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
13326
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
13294
13327
  jwks: zod.ZodOptional<zod.ZodObject<{
13295
13328
  keys: zod.ZodArray<zod.ZodObject<{
13296
13329
  kty: zod.ZodString;
@@ -13662,6 +13695,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
13662
13695
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
13663
13696
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
13664
13697
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
13698
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
13665
13699
  jwks: zod.ZodOptional<zod.ZodObject<{
13666
13700
  keys: zod.ZodArray<zod.ZodObject<{
13667
13701
  kty: zod.ZodString;
@@ -14006,6 +14040,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
14006
14040
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
14007
14041
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
14008
14042
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
14043
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
14009
14044
  jwks: zod.ZodOptional<zod.ZodObject<{
14010
14045
  keys: zod.ZodArray<zod.ZodObject<{
14011
14046
  kty: zod.ZodString;
@@ -14350,6 +14385,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
14350
14385
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
14351
14386
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
14352
14387
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
14388
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
14353
14389
  jwks: zod.ZodOptional<zod.ZodObject<{
14354
14390
  keys: zod.ZodArray<zod.ZodObject<{
14355
14391
  kty: zod.ZodString;
@@ -14714,6 +14750,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
14714
14750
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
14715
14751
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
14716
14752
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
14753
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
14717
14754
  jwks: zod.ZodOptional<zod.ZodObject<{
14718
14755
  keys: zod.ZodArray<zod.ZodObject<{
14719
14756
  kty: zod.ZodString;
@@ -15058,6 +15095,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
15058
15095
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
15059
15096
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
15060
15097
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
15098
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
15061
15099
  jwks: zod.ZodOptional<zod.ZodObject<{
15062
15100
  keys: zod.ZodArray<zod.ZodObject<{
15063
15101
  kty: zod.ZodString;
@@ -15402,6 +15440,7 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
15402
15440
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
15403
15441
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
15404
15442
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
15443
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
15405
15444
  jwks: zod.ZodOptional<zod.ZodObject<{
15406
15445
  keys: zod.ZodArray<zod.ZodObject<{
15407
15446
  kty: zod.ZodString;
@@ -15889,7 +15928,7 @@ interface CreateOpenid4vpAuthorizationResponseOptions {
15889
15928
  audience?: string;
15890
15929
  expiresInSeconds?: number;
15891
15930
  };
15892
- callbacks: Pick<CallbackContext, 'signJwt' | 'encryptJwe'>;
15931
+ callbacks: Pick<CallbackContext, 'signJwt' | 'encryptJwe' | 'fetch'>;
15893
15932
  }
15894
15933
  interface CreateOpenid4vpAuthorizationResponseResult {
15895
15934
  authorizationResponsePayload: Openid4vpAuthorizationResponse;
@@ -16298,6 +16337,7 @@ declare class Openid4vpVerifier {
16298
16337
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
16299
16338
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
16300
16339
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
16340
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
16301
16341
  jwks: zod.ZodOptional<zod.ZodObject<{
16302
16342
  keys: zod.ZodArray<zod.ZodObject<{
16303
16343
  kty: zod.ZodString;
@@ -16642,6 +16682,7 @@ declare class Openid4vpVerifier {
16642
16682
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
16643
16683
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
16644
16684
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
16685
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
16645
16686
  jwks: zod.ZodOptional<zod.ZodObject<{
16646
16687
  keys: zod.ZodArray<zod.ZodObject<{
16647
16688
  kty: zod.ZodString;
@@ -16986,6 +17027,7 @@ declare class Openid4vpVerifier {
16986
17027
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
16987
17028
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
16988
17029
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
17030
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
16989
17031
  jwks: zod.ZodOptional<zod.ZodObject<{
16990
17032
  keys: zod.ZodArray<zod.ZodObject<{
16991
17033
  kty: zod.ZodString;
@@ -17350,6 +17392,7 @@ declare class Openid4vpVerifier {
17350
17392
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
17351
17393
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
17352
17394
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
17395
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
17353
17396
  jwks: zod.ZodOptional<zod.ZodObject<{
17354
17397
  keys: zod.ZodArray<zod.ZodObject<{
17355
17398
  kty: zod.ZodString;
@@ -17694,6 +17737,7 @@ declare class Openid4vpVerifier {
17694
17737
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
17695
17738
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
17696
17739
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
17740
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
17697
17741
  jwks: zod.ZodOptional<zod.ZodObject<{
17698
17742
  keys: zod.ZodArray<zod.ZodObject<{
17699
17743
  kty: zod.ZodString;
@@ -18038,6 +18082,7 @@ declare class Openid4vpVerifier {
18038
18082
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
18039
18083
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
18040
18084
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
18085
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
18041
18086
  jwks: zod.ZodOptional<zod.ZodObject<{
18042
18087
  keys: zod.ZodArray<zod.ZodObject<{
18043
18088
  kty: zod.ZodString;
@@ -18504,6 +18549,7 @@ declare class Openid4vpVerifier {
18504
18549
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
18505
18550
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
18506
18551
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
18552
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
18507
18553
  jwks: zod.ZodOptional<zod.ZodObject<{
18508
18554
  keys: zod.ZodArray<zod.ZodObject<{
18509
18555
  kty: zod.ZodString;
@@ -18848,6 +18894,7 @@ declare class Openid4vpVerifier {
18848
18894
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
18849
18895
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
18850
18896
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
18897
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
18851
18898
  jwks: zod.ZodOptional<zod.ZodObject<{
18852
18899
  keys: zod.ZodArray<zod.ZodObject<{
18853
18900
  kty: zod.ZodString;
@@ -19192,6 +19239,7 @@ declare class Openid4vpVerifier {
19192
19239
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
19193
19240
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
19194
19241
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
19242
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
19195
19243
  jwks: zod.ZodOptional<zod.ZodObject<{
19196
19244
  keys: zod.ZodArray<zod.ZodObject<{
19197
19245
  kty: zod.ZodString;
@@ -19556,6 +19604,7 @@ declare class Openid4vpVerifier {
19556
19604
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
19557
19605
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
19558
19606
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
19607
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
19559
19608
  jwks: zod.ZodOptional<zod.ZodObject<{
19560
19609
  keys: zod.ZodArray<zod.ZodObject<{
19561
19610
  kty: zod.ZodString;
@@ -19900,6 +19949,7 @@ declare class Openid4vpVerifier {
19900
19949
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
19901
19950
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
19902
19951
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
19952
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
19903
19953
  jwks: zod.ZodOptional<zod.ZodObject<{
19904
19954
  keys: zod.ZodArray<zod.ZodObject<{
19905
19955
  kty: zod.ZodString;
@@ -20244,6 +20294,7 @@ declare class Openid4vpVerifier {
20244
20294
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
20245
20295
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
20246
20296
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
20297
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
20247
20298
  jwks: zod.ZodOptional<zod.ZodObject<{
20248
20299
  keys: zod.ZodArray<zod.ZodObject<{
20249
20300
  kty: zod.ZodString;
@@ -20615,6 +20666,7 @@ declare class Openid4vpVerifier {
20615
20666
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
20616
20667
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
20617
20668
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
20669
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
20618
20670
  jwks: zod.ZodOptional<zod.ZodObject<{
20619
20671
  keys: zod.ZodArray<zod.ZodObject<{
20620
20672
  kty: zod.ZodString;
@@ -20959,6 +21011,7 @@ declare class Openid4vpVerifier {
20959
21011
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
20960
21012
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
20961
21013
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
21014
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
20962
21015
  jwks: zod.ZodOptional<zod.ZodObject<{
20963
21016
  keys: zod.ZodArray<zod.ZodObject<{
20964
21017
  kty: zod.ZodString;
@@ -21303,6 +21356,7 @@ declare class Openid4vpVerifier {
21303
21356
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
21304
21357
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
21305
21358
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
21359
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
21306
21360
  jwks: zod.ZodOptional<zod.ZodObject<{
21307
21361
  keys: zod.ZodArray<zod.ZodObject<{
21308
21362
  kty: zod.ZodString;
@@ -21667,6 +21721,7 @@ declare class Openid4vpVerifier {
21667
21721
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
21668
21722
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
21669
21723
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
21724
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
21670
21725
  jwks: zod.ZodOptional<zod.ZodObject<{
21671
21726
  keys: zod.ZodArray<zod.ZodObject<{
21672
21727
  kty: zod.ZodString;
@@ -22011,6 +22066,7 @@ declare class Openid4vpVerifier {
22011
22066
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
22012
22067
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
22013
22068
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
22069
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
22014
22070
  jwks: zod.ZodOptional<zod.ZodObject<{
22015
22071
  keys: zod.ZodArray<zod.ZodObject<{
22016
22072
  kty: zod.ZodString;
@@ -22355,6 +22411,7 @@ declare class Openid4vpVerifier {
22355
22411
  authorization_signed_response_alg: zod.ZodOptional<zod.ZodEffects<zod.ZodString, string, string>>;
22356
22412
  authorization_encrypted_response_alg: zod.ZodOptional<zod.ZodString>;
22357
22413
  authorization_encrypted_response_enc: zod.ZodOptional<zod.ZodOptional<zod.ZodString>>;
22414
+ jwks_uri: zod.ZodOptional<zod.ZodString>;
22358
22415
  jwks: zod.ZodOptional<zod.ZodObject<{
22359
22416
  keys: zod.ZodArray<zod.ZodObject<{
22360
22417
  kty: zod.ZodString;
package/dist/index.js CHANGED
@@ -154,6 +154,8 @@ var zVpFormatsSupported = import_zod2.z.record(
154
154
 
155
155
  // src/models/z-client-metadata.ts
156
156
  var zClientMetadata = import_zod3.z.object({
157
+ // Up until draft 22
158
+ jwks_uri: import_zod3.z.string().url().optional(),
157
159
  jwks: import_zod3.z.optional(import_oauth22.zJwkSet),
158
160
  vp_formats: import_zod3.z.optional(zVpFormatsSupported),
159
161
  ...zJarmClientMetadata.shape,
@@ -1354,10 +1356,15 @@ async function createOpenid4vpAuthorizationResponse(options) {
1354
1356
  if (!authorizationRequestPayload.client_metadata) {
1355
1357
  throw new import_oauth222.Oauth2Error("Missing client metadata in the request params to assert Jarm metadata support.");
1356
1358
  }
1357
- if (!authorizationRequestPayload.client_metadata.jwks) {
1359
+ let jwks;
1360
+ if (authorizationRequestPayload.client_metadata.jwks) {
1361
+ jwks = authorizationRequestPayload.client_metadata.jwks;
1362
+ } else if (authorizationRequestPayload.client_metadata.jwks_uri) {
1363
+ jwks = await (0, import_oauth222.fetchJwks)(authorizationRequestPayload.client_metadata.jwks_uri, options.callbacks.fetch);
1364
+ } else {
1358
1365
  throw new import_oauth222.Oauth2ServerErrorResponseError({
1359
1366
  error: import_oauth222.Oauth2ErrorCodes.InvalidRequest,
1360
- error_description: "Missing JWKS in client metadata. Cannot extract encryption JWK."
1367
+ error_description: `Missing 'jwks' or 'jwks_uri' in client metadata. Cannot extract encryption JWK.`
1361
1368
  });
1362
1369
  }
1363
1370
  const supportedJarmMetadata = jarmAssertMetadataSupported({
@@ -1366,7 +1373,7 @@ async function createOpenid4vpAuthorizationResponse(options) {
1366
1373
  });
1367
1374
  const clientMetaJwks = extractJwksFromClientMetadata({
1368
1375
  ...authorizationRequestPayload.client_metadata,
1369
- jwks: authorizationRequestPayload.client_metadata.jwks
1376
+ jwks
1370
1377
  });
1371
1378
  if (!clientMetaJwks?.encJwk) {
1372
1379
  throw new import_oauth222.Oauth2ServerErrorResponseError({