@openid4vc/openid4vp 0.3.0-alpha-20250713104317 → 0.3.0-alpha-20250713113151

package/dist/index.mjs

@@ -285,6 +285,7 @@ function getOpenid4vpClientId(options) {
   const original = {
     clientId: options.clientId
   };
+  const version = options.version ?? 100;
   if (isOpenid4vpResponseModeDcApi(options.responseMode)) {
     if (!options.clientId) {
       if (!options.origin) {
@@ -297,10 +298,7 @@ function getOpenid4vpClientId(options) {
         clientIdPrefix: "origin",
         effectiveClientIdPrefix: "origin",
         clientIdIdentifier: options.origin,
-        // FIXME: draft 24 uses web-origin, draft 25+ uses origin
-        // But it's not really possible to know which one to use as the
-        // 'effective' client id. Defaulting to origin: since that's newer
-        effectiveClientId: `origin:${options.origin}`,
+        effectiveClientId: version >= 25 ? `origin:${options.origin}` : `web-origin:${options.origin}`,
         original
       };
     }
@@ -1411,6 +1409,7 @@ async function resolveOpenid4vpAuthorizationRequest(options) {
       disableOriginValidation
     });
   }
+  const version = parseAuthorizationRequestVersion(authorizationRequestPayload);
   let clientMetadata = authorizationRequestPayload.client_metadata;
   if (!isOpenid4vpAuthorizationRequestDcApi(authorizationRequestPayload) && !clientMetadata && authorizationRequestPayload.client_metadata_uri) {
     clientMetadata = await fetchClientMetadata({ clientMetadataUri: authorizationRequestPayload.client_metadata_uri });
@@ -1422,7 +1421,8 @@ async function resolveOpenid4vpAuthorizationRequest(options) {
     },
     jar,
     callbacks,
-    origin
+    origin,
+    version
   });
   let pex;
   let dcql;
@@ -1449,7 +1449,7 @@ async function resolveOpenid4vpAuthorizationRequest(options) {
     client: clientMeta,
     pex,
     dcql,
-    version: parseAuthorizationRequestVersion(authorizationRequestPayload)
+    version
   };
 }
 function validateOpenId4vpAuthorizationRequestPayload(options) {
@@ -2118,6 +2118,7 @@ export {
   Openid4vpVerifier,
   createOpenid4vpAuthorizationRequest,
   createOpenid4vpAuthorizationResponse,
+  extractEncryptionJwkFromJwks,
   getOpenid4vpClientId,
   isJarmResponseMode,
   isOpenid4vpAuthorizationRequestDcApi,