@openid4vc/openid4vp 0.3.0-alpha-20251107132439 → 0.3.0-alpha-20251110130103

package/dist/index.cjs

@@ -397,6 +397,12 @@ function parseOpenid4vpAuthorizationRequest(options) {
 	};
 }
 
+//#endregion
+//#region src/client-identifier-prefix/x509-hash.ts
+async function calculateX509HashClientIdPrefixValue({ x509Certificate, hash }) {
+	return (0, __openid4vc_utils.encodeToBase64Url)(await hash(typeof x509Certificate === "string" ? (0, __openid4vc_utils.decodeBase64)(x509Certificate) : x509Certificate, __openid4vc_oauth2.HashAlgorithm.Sha256));
+}
+
 //#endregion
 //#region src/client-identifier-prefix/z-client-id-prefix.ts
 const zClientIdPrefix = zod.z.enum([
@@ -656,7 +662,10 @@ async function validateOpenid4vpClientId(options, parserConfig) {
 				});
 			}
 		} else if (clientIdPrefix === "x509_hash") {
-			const x509Hash = (0, __openid4vc_utils.encodeToBase64Url)(await options.callbacks.hash((0, __openid4vc_utils.decodeBase64)(jar.signer.x5c[0]), __openid4vc_oauth2.HashAlgorithm.Sha256));
+			const x509Hash = await calculateX509HashClientIdPrefixValue({
+				hash: options.callbacks.hash,
+				x509Certificate: jar.signer.x5c[0]
+			});
 			if (x509Hash !== clientIdIdentifier) throw new __openid4vc_oauth2.Oauth2ServerErrorResponseError({
 				error: __openid4vc_oauth2.Oauth2ErrorCodes.InvalidRequest,
 				error_description: `Invalid client identifier. Expected the base64url encoded sha-256 hash of the leaf x5c certificate ('${x509Hash}') to match the client identifier '${clientIdIdentifier}'.`
@@ -1717,6 +1726,7 @@ var Openid4vpVerifier = class {
 exports.JarmMode = JarmMode;
 exports.Openid4vpClient = Openid4vpClient;
 exports.Openid4vpVerifier = Openid4vpVerifier;
+exports.calculateX509HashClientIdPrefixValue = calculateX509HashClientIdPrefixValue;
 exports.createOpenid4vpAuthorizationRequest = createOpenid4vpAuthorizationRequest;
 exports.createOpenid4vpAuthorizationResponse = createOpenid4vpAuthorizationResponse;
 exports.extractEncryptionJwkFromJwks = extractEncryptionJwkFromJwks;