@openid4vc/openid4vp 0.4.6-alpha-20260201172333 → 0.5.0-alpha-20260202155954

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.mts CHANGED
@@ -281,10 +281,115 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<{
281
281
  type Openid4vpAuthorizationRequestDcApi = z.infer<typeof zOpenid4vpAuthorizationRequestDcApi>;
282
282
  declare function isOpenid4vpAuthorizationRequestDcApi(request: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpJarAuthorizationRequest): request is Openid4vpAuthorizationRequestDcApi;
283
283
  //#endregion
284
+ //#region src/authorization-request/z-authorization-request-iae.d.ts
285
+ /**
286
+ * Authorization Request schema for Interactive Authorization Endpoint (IAE) flow
287
+ *
288
+ * IAE is used in OpenID4VCI when the authorization server needs to interact
289
+ * directly with the wallet (e.g., requesting credential presentation) as part
290
+ * of the authorization process.
291
+ *
292
+ * Key differences from DC API:
293
+ * - Uses iae_post/iae_post.jwt response modes
294
+ * - Uses expected_url instead of expected_origins for signed requests
295
+ * - Response is sent back to the Interactive Authorization Endpoint
296
+ */
297
+ declare const zOpenid4vpAuthorizationRequestIae: z.ZodObject<{
298
+ response_type: z.ZodLiteral<"vp_token">;
299
+ client_id: z.ZodOptional<z.ZodString>;
300
+ nonce: z.ZodString;
301
+ scope: z.ZodOptional<z.ZodNever>;
302
+ client_metadata: z.ZodOptional<z.ZodObject<{
303
+ logo_uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
304
+ client_name: z.ZodOptional<z.ZodString>;
305
+ authorization_signed_response_alg: z.ZodOptional<z.ZodString>;
306
+ authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
307
+ authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
308
+ jwks_uri: z.ZodOptional<z.ZodURL>;
309
+ jwks: z.ZodOptional<z.ZodObject<{
310
+ keys: z.ZodArray<z.ZodObject<{
311
+ kty: z.ZodString;
312
+ crv: z.ZodOptional<z.ZodString>;
313
+ x: z.ZodOptional<z.ZodString>;
314
+ y: z.ZodOptional<z.ZodString>;
315
+ e: z.ZodOptional<z.ZodString>;
316
+ n: z.ZodOptional<z.ZodString>;
317
+ alg: z.ZodOptional<z.ZodString>;
318
+ d: z.ZodOptional<z.ZodString>;
319
+ dp: z.ZodOptional<z.ZodString>;
320
+ dq: z.ZodOptional<z.ZodString>;
321
+ ext: z.ZodOptional<z.ZodBoolean>;
322
+ k: z.ZodOptional<z.ZodString>;
323
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
324
+ kid: z.ZodOptional<z.ZodString>;
325
+ oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
326
+ d: z.ZodOptional<z.ZodString>;
327
+ r: z.ZodOptional<z.ZodString>;
328
+ t: z.ZodOptional<z.ZodString>;
329
+ }, z.core.$loose>>>;
330
+ p: z.ZodOptional<z.ZodString>;
331
+ q: z.ZodOptional<z.ZodString>;
332
+ qi: z.ZodOptional<z.ZodString>;
333
+ use: z.ZodOptional<z.ZodString>;
334
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
335
+ x5t: z.ZodOptional<z.ZodString>;
336
+ 'x5t#S256': z.ZodOptional<z.ZodString>;
337
+ x5u: z.ZodOptional<z.ZodString>;
338
+ }, z.core.$loose>>;
339
+ }, z.core.$loose>>;
340
+ vp_formats: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
341
+ alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
342
+ }, z.core.$loose>>>;
343
+ vp_formats_supported: z.ZodOptional<z.ZodObject<{
344
+ 'dc+sd-jwt': z.ZodOptional<z.ZodObject<{
345
+ 'sd-jwt_alg_values': z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
346
+ 'kb-jwt_alg_values': z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
347
+ }, z.core.$loose>>;
348
+ jwt_vc_json: z.ZodOptional<z.ZodObject<{
349
+ alg_values: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
350
+ }, z.core.$loose>>;
351
+ ldp_vc: z.ZodOptional<z.ZodObject<{
352
+ proof_type_values: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
353
+ cryptosuite_values: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
354
+ }, z.core.$loose>>;
355
+ mso_mdoc: z.ZodOptional<z.ZodObject<{
356
+ issuer_signed_alg_values: z.ZodOptional<z.ZodTuple<[z.ZodNumber], z.ZodNumber>>;
357
+ device_signed_alg_values: z.ZodOptional<z.ZodTuple<[z.ZodNumber], z.ZodNumber>>;
358
+ issuerauth_alg_values: z.ZodOptional<z.ZodTuple<[z.ZodNumber], z.ZodNumber>>;
359
+ deviceauth_alg_values: z.ZodOptional<z.ZodTuple<[z.ZodNumber], z.ZodNumber>>;
360
+ }, z.core.$loose>>;
361
+ }, z.core.$catchall<z.ZodObject<{}, z.core.$loose>>>>;
362
+ encrypted_response_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
363
+ }, z.core.$loose>>;
364
+ state: z.ZodOptional<z.ZodString>;
365
+ transaction_data: z.ZodOptional<z.ZodArray<z.ZodBase64URL>>;
366
+ trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
367
+ client_id_scheme: z.ZodOptional<z.ZodNever>;
368
+ verifier_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
369
+ format: z.ZodString;
370
+ data: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodString]>;
371
+ credential_ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
372
+ }, z.core.$strip>>>;
373
+ verifier_info: z.ZodOptional<z.ZodArray<z.ZodObject<{
374
+ format: z.ZodString;
375
+ data: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodString]>;
376
+ credential_ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
377
+ }, z.core.$strip>>>;
378
+ response_mode: z.ZodEnum<{
379
+ iae_post: "iae_post";
380
+ "iae_post.jwt": "iae_post.jwt";
381
+ }>;
382
+ dcql_query: z.ZodRecord<z.ZodString, z.ZodAny>;
383
+ expected_url: z.ZodOptional<z.ZodString>;
384
+ expected_origins: z.ZodOptional<z.ZodNever>;
385
+ }, z.core.$loose>;
386
+ type Openid4vpAuthorizationRequestIae = z.infer<typeof zOpenid4vpAuthorizationRequestIae>;
387
+ declare function isOpenid4vpAuthorizationRequestIae(request: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestIae | Openid4vpJarAuthorizationRequest): request is Openid4vpAuthorizationRequestIae;
388
+ //#endregion
284
389
  //#region src/authorization-request/create-authorization-request.d.ts
285
390
  interface CreateOpenid4vpAuthorizationRequestOptions {
286
391
  scheme?: string;
287
- authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi;
392
+ authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae;
288
393
  jar?: Pick<CreateJarAuthorizationRequestOptions, 'additionalJwtPayload' | 'requestUri' | 'jwtSigner' | 'expiresInSeconds'>;
289
394
  wallet?: WalletVerificationOptions;
290
395
  callbacks: Pick<CallbackContext, 'signJwt' | 'encryptJwe'>;
@@ -513,6 +618,104 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
513
618
  expected_origins?: string[] | undefined;
514
619
  client_id_scheme?: undefined;
515
620
  scope?: undefined;
621
+ } | {
622
+ [x: string]: unknown;
623
+ response_type: "vp_token";
624
+ nonce: string;
625
+ response_mode: "iae_post" | "iae_post.jwt";
626
+ dcql_query: Record<string, any>;
627
+ client_id?: string | undefined;
628
+ scope?: undefined;
629
+ client_metadata?: {
630
+ [x: string]: unknown;
631
+ logo_uri?: string | undefined;
632
+ client_name?: string | undefined;
633
+ authorization_signed_response_alg?: string | undefined;
634
+ authorization_encrypted_response_alg?: string | undefined;
635
+ authorization_encrypted_response_enc?: string | undefined;
636
+ jwks_uri?: string | undefined;
637
+ jwks?: {
638
+ [x: string]: unknown;
639
+ keys: {
640
+ [x: string]: unknown;
641
+ kty: string;
642
+ crv?: string | undefined;
643
+ x?: string | undefined;
644
+ y?: string | undefined;
645
+ e?: string | undefined;
646
+ n?: string | undefined;
647
+ alg?: string | undefined;
648
+ d?: string | undefined;
649
+ dp?: string | undefined;
650
+ dq?: string | undefined;
651
+ ext?: boolean | undefined;
652
+ k?: string | undefined;
653
+ key_ops?: string[] | undefined;
654
+ kid?: string | undefined;
655
+ oth?: {
656
+ [x: string]: unknown;
657
+ d?: string | undefined;
658
+ r?: string | undefined;
659
+ t?: string | undefined;
660
+ }[] | undefined;
661
+ p?: string | undefined;
662
+ q?: string | undefined;
663
+ qi?: string | undefined;
664
+ use?: string | undefined;
665
+ x5c?: string[] | undefined;
666
+ x5t?: string | undefined;
667
+ 'x5t#S256'?: string | undefined;
668
+ x5u?: string | undefined;
669
+ }[];
670
+ } | undefined;
671
+ vp_formats?: Record<string, {
672
+ [x: string]: unknown;
673
+ alg_values_supported?: string[] | undefined;
674
+ }> | undefined;
675
+ vp_formats_supported?: {
676
+ [x: string]: {
677
+ [x: string]: unknown;
678
+ };
679
+ 'dc+sd-jwt'?: {
680
+ [x: string]: unknown;
681
+ 'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
682
+ 'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
683
+ } | undefined;
684
+ jwt_vc_json?: {
685
+ [x: string]: unknown;
686
+ alg_values?: [string, ...string[]] | undefined;
687
+ } | undefined;
688
+ ldp_vc?: {
689
+ [x: string]: unknown;
690
+ proof_type_values?: [string, ...string[]] | undefined;
691
+ cryptosuite_values?: [string, ...string[]] | undefined;
692
+ } | undefined;
693
+ mso_mdoc?: {
694
+ [x: string]: unknown;
695
+ issuer_signed_alg_values?: [number, ...number[]] | undefined;
696
+ device_signed_alg_values?: [number, ...number[]] | undefined;
697
+ issuerauth_alg_values?: [number, ...number[]] | undefined;
698
+ deviceauth_alg_values?: [number, ...number[]] | undefined;
699
+ } | undefined;
700
+ } | undefined;
701
+ encrypted_response_enc_values_supported?: string[] | undefined;
702
+ } | undefined;
703
+ state?: string | undefined;
704
+ transaction_data?: string[] | undefined;
705
+ trust_chain?: [string, ...string[]] | undefined;
706
+ client_id_scheme?: undefined;
707
+ verifier_attestations?: {
708
+ format: string;
709
+ data: string | Record<string, unknown>;
710
+ credential_ids?: string[] | undefined;
711
+ }[] | undefined;
712
+ verifier_info?: {
713
+ format: string;
714
+ data: string | Record<string, unknown>;
715
+ credential_ids?: string[] | undefined;
716
+ }[] | undefined;
717
+ expected_url?: string | undefined;
718
+ expected_origins?: undefined;
516
719
  };
517
720
  authorizationRequestObject: {
518
721
  [x: string]: unknown;
@@ -799,22 +1002,14 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
799
1002
  expected_origins?: string[] | undefined;
800
1003
  client_id_scheme?: undefined;
801
1004
  scope?: undefined;
802
- };
803
- authorizationRequestObject: {
1005
+ } | {
804
1006
  [x: string]: unknown;
805
1007
  response_type: "vp_token";
806
- client_id: string;
807
1008
  nonce: string;
808
- redirect_uri?: string | undefined;
809
- response_uri?: string | undefined;
810
- request_uri?: string | undefined;
811
- request_uri_method?: string | undefined;
812
- response_mode?: "direct_post" | "direct_post.jwt" | undefined;
813
- wallet_nonce?: string | undefined;
814
- scope?: string | undefined;
815
- presentation_definition?: any;
816
- presentation_definition_uri?: string | undefined;
817
- dcql_query?: any;
1009
+ response_mode: "iae_post" | "iae_post.jwt";
1010
+ dcql_query: Record<string, any>;
1011
+ client_id?: string | undefined;
1012
+ scope?: undefined;
818
1013
  client_metadata?: {
819
1014
  [x: string]: unknown;
820
1015
  logo_uri?: string | undefined;
@@ -889,11 +1084,10 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
889
1084
  } | undefined;
890
1085
  encrypted_response_enc_values_supported?: string[] | undefined;
891
1086
  } | undefined;
892
- client_metadata_uri?: string | undefined;
893
1087
  state?: string | undefined;
894
1088
  transaction_data?: string[] | undefined;
895
1089
  trust_chain?: [string, ...string[]] | undefined;
896
- client_id_scheme?: "redirect_uri" | "pre-registered" | "entity_id" | "did" | "verifier_attestation" | "x509_san_dns" | "x509_san_uri" | "x509_hash" | undefined;
1090
+ client_id_scheme?: undefined;
897
1091
  verifier_attestations?: {
898
1092
  format: string;
899
1093
  data: string | Record<string, unknown>;
@@ -904,12 +1098,23 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
904
1098
  data: string | Record<string, unknown>;
905
1099
  credential_ids?: string[] | undefined;
906
1100
  }[] | undefined;
907
- } | {
1101
+ expected_url?: string | undefined;
1102
+ expected_origins?: undefined;
1103
+ };
1104
+ authorizationRequestObject: {
908
1105
  [x: string]: unknown;
909
1106
  response_type: "vp_token";
1107
+ client_id: string;
910
1108
  nonce: string;
911
- response_mode: "dc_api" | "dc_api.jwt" | "w3c_dc_api.jwt" | "w3c_dc_api";
1109
+ redirect_uri?: string | undefined;
1110
+ response_uri?: string | undefined;
1111
+ request_uri?: string | undefined;
1112
+ request_uri_method?: string | undefined;
1113
+ response_mode?: "direct_post" | "direct_post.jwt" | undefined;
1114
+ wallet_nonce?: string | undefined;
1115
+ scope?: string | undefined;
912
1116
  presentation_definition?: any;
1117
+ presentation_definition_uri?: string | undefined;
913
1118
  dcql_query?: any;
914
1119
  client_metadata?: {
915
1120
  [x: string]: unknown;
@@ -985,9 +1190,11 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
985
1190
  } | undefined;
986
1191
  encrypted_response_enc_values_supported?: string[] | undefined;
987
1192
  } | undefined;
1193
+ client_metadata_uri?: string | undefined;
988
1194
  state?: string | undefined;
989
1195
  transaction_data?: string[] | undefined;
990
1196
  trust_chain?: [string, ...string[]] | undefined;
1197
+ client_id_scheme?: "redirect_uri" | "pre-registered" | "entity_id" | "did" | "verifier_attestation" | "x509_san_dns" | "x509_san_uri" | "x509_hash" | undefined;
991
1198
  verifier_attestations?: {
992
1199
  format: string;
993
1200
  data: string | Record<string, unknown>;
@@ -998,46 +1205,243 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
998
1205
  data: string | Record<string, unknown>;
999
1206
  credential_ids?: string[] | undefined;
1000
1207
  }[] | undefined;
1001
- client_id?: string | undefined;
1002
- expected_origins?: string[] | undefined;
1003
- client_id_scheme?: undefined;
1004
- scope?: undefined;
1005
- };
1006
- authorizationRequest: string;
1007
- jar: undefined;
1008
- }>;
1009
- //#endregion
1010
- //#region src/authorization-request/parse-authorization-request-params.d.ts
1011
- interface ParsedJarRequest {
1012
- type: 'jar';
1013
- provided: 'uri' | 'jwt' | 'params';
1014
- params: Openid4vpJarAuthorizationRequest;
1015
- }
1016
- interface ParsedOpenid4vpAuthorizationRequest {
1017
- type: 'openid4vp';
1018
- provided: 'uri' | 'jwt' | 'params';
1019
- params: Openid4vpAuthorizationRequest;
1020
- }
1021
- interface ParsedOpenid4vpDcApiAuthorizationRequest {
1022
- type: 'openid4vp_dc_api';
1023
- provided: 'uri' | 'jwt' | 'params';
1024
- params: Openid4vpAuthorizationRequestDcApi;
1025
- }
1026
- interface ParseOpenid4vpAuthorizationRequestOptions {
1027
- authorizationRequest: string | Record<string, unknown>;
1028
- }
1029
- declare function parseOpenid4vpAuthorizationRequest(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest;
1030
- //#endregion
1031
- //#region src/jar/handle-jar-request/verify-jar-request.d.ts
1032
- interface VerifiedJarRequest {
1033
- authorizationRequestPayload: JarRequestObjectPayload;
1034
- sendBy: 'value' | 'reference';
1035
- decryptionJwk?: Jwk;
1036
- signer: JwtSignerWithJwk;
1037
- jwt: DecodeJwtResult<undefined, typeof zJarRequestObjectPayload>;
1038
- }
1039
- //#endregion
1040
- //#region src/models/z-client-metadata.d.ts
1208
+ } | {
1209
+ [x: string]: unknown;
1210
+ response_type: "vp_token";
1211
+ nonce: string;
1212
+ response_mode: "dc_api" | "dc_api.jwt" | "w3c_dc_api.jwt" | "w3c_dc_api";
1213
+ presentation_definition?: any;
1214
+ dcql_query?: any;
1215
+ client_metadata?: {
1216
+ [x: string]: unknown;
1217
+ logo_uri?: string | undefined;
1218
+ client_name?: string | undefined;
1219
+ authorization_signed_response_alg?: string | undefined;
1220
+ authorization_encrypted_response_alg?: string | undefined;
1221
+ authorization_encrypted_response_enc?: string | undefined;
1222
+ jwks_uri?: string | undefined;
1223
+ jwks?: {
1224
+ [x: string]: unknown;
1225
+ keys: {
1226
+ [x: string]: unknown;
1227
+ kty: string;
1228
+ crv?: string | undefined;
1229
+ x?: string | undefined;
1230
+ y?: string | undefined;
1231
+ e?: string | undefined;
1232
+ n?: string | undefined;
1233
+ alg?: string | undefined;
1234
+ d?: string | undefined;
1235
+ dp?: string | undefined;
1236
+ dq?: string | undefined;
1237
+ ext?: boolean | undefined;
1238
+ k?: string | undefined;
1239
+ key_ops?: string[] | undefined;
1240
+ kid?: string | undefined;
1241
+ oth?: {
1242
+ [x: string]: unknown;
1243
+ d?: string | undefined;
1244
+ r?: string | undefined;
1245
+ t?: string | undefined;
1246
+ }[] | undefined;
1247
+ p?: string | undefined;
1248
+ q?: string | undefined;
1249
+ qi?: string | undefined;
1250
+ use?: string | undefined;
1251
+ x5c?: string[] | undefined;
1252
+ x5t?: string | undefined;
1253
+ 'x5t#S256'?: string | undefined;
1254
+ x5u?: string | undefined;
1255
+ }[];
1256
+ } | undefined;
1257
+ vp_formats?: Record<string, {
1258
+ [x: string]: unknown;
1259
+ alg_values_supported?: string[] | undefined;
1260
+ }> | undefined;
1261
+ vp_formats_supported?: {
1262
+ [x: string]: {
1263
+ [x: string]: unknown;
1264
+ };
1265
+ 'dc+sd-jwt'?: {
1266
+ [x: string]: unknown;
1267
+ 'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
1268
+ 'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
1269
+ } | undefined;
1270
+ jwt_vc_json?: {
1271
+ [x: string]: unknown;
1272
+ alg_values?: [string, ...string[]] | undefined;
1273
+ } | undefined;
1274
+ ldp_vc?: {
1275
+ [x: string]: unknown;
1276
+ proof_type_values?: [string, ...string[]] | undefined;
1277
+ cryptosuite_values?: [string, ...string[]] | undefined;
1278
+ } | undefined;
1279
+ mso_mdoc?: {
1280
+ [x: string]: unknown;
1281
+ issuer_signed_alg_values?: [number, ...number[]] | undefined;
1282
+ device_signed_alg_values?: [number, ...number[]] | undefined;
1283
+ issuerauth_alg_values?: [number, ...number[]] | undefined;
1284
+ deviceauth_alg_values?: [number, ...number[]] | undefined;
1285
+ } | undefined;
1286
+ } | undefined;
1287
+ encrypted_response_enc_values_supported?: string[] | undefined;
1288
+ } | undefined;
1289
+ state?: string | undefined;
1290
+ transaction_data?: string[] | undefined;
1291
+ trust_chain?: [string, ...string[]] | undefined;
1292
+ verifier_attestations?: {
1293
+ format: string;
1294
+ data: string | Record<string, unknown>;
1295
+ credential_ids?: string[] | undefined;
1296
+ }[] | undefined;
1297
+ verifier_info?: {
1298
+ format: string;
1299
+ data: string | Record<string, unknown>;
1300
+ credential_ids?: string[] | undefined;
1301
+ }[] | undefined;
1302
+ client_id?: string | undefined;
1303
+ expected_origins?: string[] | undefined;
1304
+ client_id_scheme?: undefined;
1305
+ scope?: undefined;
1306
+ } | {
1307
+ [x: string]: unknown;
1308
+ response_type: "vp_token";
1309
+ nonce: string;
1310
+ response_mode: "iae_post" | "iae_post.jwt";
1311
+ dcql_query: Record<string, any>;
1312
+ client_id?: string | undefined;
1313
+ scope?: undefined;
1314
+ client_metadata?: {
1315
+ [x: string]: unknown;
1316
+ logo_uri?: string | undefined;
1317
+ client_name?: string | undefined;
1318
+ authorization_signed_response_alg?: string | undefined;
1319
+ authorization_encrypted_response_alg?: string | undefined;
1320
+ authorization_encrypted_response_enc?: string | undefined;
1321
+ jwks_uri?: string | undefined;
1322
+ jwks?: {
1323
+ [x: string]: unknown;
1324
+ keys: {
1325
+ [x: string]: unknown;
1326
+ kty: string;
1327
+ crv?: string | undefined;
1328
+ x?: string | undefined;
1329
+ y?: string | undefined;
1330
+ e?: string | undefined;
1331
+ n?: string | undefined;
1332
+ alg?: string | undefined;
1333
+ d?: string | undefined;
1334
+ dp?: string | undefined;
1335
+ dq?: string | undefined;
1336
+ ext?: boolean | undefined;
1337
+ k?: string | undefined;
1338
+ key_ops?: string[] | undefined;
1339
+ kid?: string | undefined;
1340
+ oth?: {
1341
+ [x: string]: unknown;
1342
+ d?: string | undefined;
1343
+ r?: string | undefined;
1344
+ t?: string | undefined;
1345
+ }[] | undefined;
1346
+ p?: string | undefined;
1347
+ q?: string | undefined;
1348
+ qi?: string | undefined;
1349
+ use?: string | undefined;
1350
+ x5c?: string[] | undefined;
1351
+ x5t?: string | undefined;
1352
+ 'x5t#S256'?: string | undefined;
1353
+ x5u?: string | undefined;
1354
+ }[];
1355
+ } | undefined;
1356
+ vp_formats?: Record<string, {
1357
+ [x: string]: unknown;
1358
+ alg_values_supported?: string[] | undefined;
1359
+ }> | undefined;
1360
+ vp_formats_supported?: {
1361
+ [x: string]: {
1362
+ [x: string]: unknown;
1363
+ };
1364
+ 'dc+sd-jwt'?: {
1365
+ [x: string]: unknown;
1366
+ 'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
1367
+ 'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
1368
+ } | undefined;
1369
+ jwt_vc_json?: {
1370
+ [x: string]: unknown;
1371
+ alg_values?: [string, ...string[]] | undefined;
1372
+ } | undefined;
1373
+ ldp_vc?: {
1374
+ [x: string]: unknown;
1375
+ proof_type_values?: [string, ...string[]] | undefined;
1376
+ cryptosuite_values?: [string, ...string[]] | undefined;
1377
+ } | undefined;
1378
+ mso_mdoc?: {
1379
+ [x: string]: unknown;
1380
+ issuer_signed_alg_values?: [number, ...number[]] | undefined;
1381
+ device_signed_alg_values?: [number, ...number[]] | undefined;
1382
+ issuerauth_alg_values?: [number, ...number[]] | undefined;
1383
+ deviceauth_alg_values?: [number, ...number[]] | undefined;
1384
+ } | undefined;
1385
+ } | undefined;
1386
+ encrypted_response_enc_values_supported?: string[] | undefined;
1387
+ } | undefined;
1388
+ state?: string | undefined;
1389
+ transaction_data?: string[] | undefined;
1390
+ trust_chain?: [string, ...string[]] | undefined;
1391
+ client_id_scheme?: undefined;
1392
+ verifier_attestations?: {
1393
+ format: string;
1394
+ data: string | Record<string, unknown>;
1395
+ credential_ids?: string[] | undefined;
1396
+ }[] | undefined;
1397
+ verifier_info?: {
1398
+ format: string;
1399
+ data: string | Record<string, unknown>;
1400
+ credential_ids?: string[] | undefined;
1401
+ }[] | undefined;
1402
+ expected_url?: string | undefined;
1403
+ expected_origins?: undefined;
1404
+ };
1405
+ authorizationRequest: string;
1406
+ jar: undefined;
1407
+ }>;
1408
+ //#endregion
1409
+ //#region src/authorization-request/parse-authorization-request-params.d.ts
1410
+ interface ParsedJarRequest {
1411
+ type: 'jar';
1412
+ provided: 'uri' | 'jwt' | 'params';
1413
+ params: Openid4vpJarAuthorizationRequest;
1414
+ }
1415
+ interface ParsedOpenid4vpAuthorizationRequest {
1416
+ type: 'openid4vp';
1417
+ provided: 'uri' | 'jwt' | 'params';
1418
+ params: Openid4vpAuthorizationRequest;
1419
+ }
1420
+ interface ParsedOpenid4vpDcApiAuthorizationRequest {
1421
+ type: 'openid4vp_dc_api';
1422
+ provided: 'uri' | 'jwt' | 'params';
1423
+ params: Openid4vpAuthorizationRequestDcApi;
1424
+ }
1425
+ interface ParsedOpenid4vpIaeAuthorizationRequest {
1426
+ type: 'openid4vp_iae';
1427
+ provided: 'uri' | 'jwt' | 'params';
1428
+ params: Openid4vpAuthorizationRequestIae;
1429
+ }
1430
+ interface ParseOpenid4vpAuthorizationRequestOptions {
1431
+ authorizationRequest: string | Record<string, unknown>;
1432
+ }
1433
+ declare function parseOpenid4vpAuthorizationRequest(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest | ParsedOpenid4vpIaeAuthorizationRequest;
1434
+ //#endregion
1435
+ //#region src/jar/handle-jar-request/verify-jar-request.d.ts
1436
+ interface VerifiedJarRequest {
1437
+ authorizationRequestPayload: JarRequestObjectPayload;
1438
+ sendBy: 'value' | 'reference';
1439
+ decryptionJwk?: Jwk;
1440
+ signer: JwtSignerWithJwk;
1441
+ jwt: DecodeJwtResult<undefined, typeof zJarRequestObjectPayload>;
1442
+ }
1443
+ //#endregion
1444
+ //#region src/models/z-client-metadata.d.ts
1041
1445
  declare const zClientMetadata: z.ZodObject<{
1042
1446
  logo_uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
1043
1447
  client_name: z.ZodOptional<z.ZodString>;
@@ -1106,10 +1510,13 @@ type ClientMetadata = z.infer<typeof zClientMetadata>;
1106
1510
  /**
1107
1511
  * The Openid4vpVersionNumber
1108
1512
  *
1109
- * 100 means 1.0 final, all others are draft versions
1513
+ * 100 means 1.0 final
1514
+ * 101 means 1.1 draft 1
1515
+ * 110 will mean 1.1 final
1516
+ * all others are pre-1.0 draft versions
1110
1517
  */
1111
- type Openid4vpVersionNumber = 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 100;
1112
- declare function parseAuthorizationRequestVersion(request: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi): Openid4vpVersionNumber;
1518
+ type Openid4vpVersionNumber = 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 100 | 101;
1519
+ declare function parseAuthorizationRequestVersion(request: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae): Openid4vpVersionNumber;
1113
1520
  //#endregion
1114
1521
  //#region src/client-identifier-prefix/z-client-id-prefix.d.ts
1115
1522
  declare const zClientIdPrefix: z.ZodEnum<{
@@ -1232,7 +1639,7 @@ declare function getOpenid4vpClientId(options: GetOpenid4vpClientIdOptions): {
1232
1639
  */
1233
1640
  clientIdIdentifier: string;
1234
1641
  /**
1235
- * The client id prefix according to the latest verion of OpenID4VP. Older prefixes are
1642
+ * The client id prefix according to the latest version of OpenID4VP. Older prefixes are
1236
1643
  * transformed into a singular value. Do not use this for checking the actual client id prefix
1237
1644
  * used, but can be used to understand which method is used.
1238
1645
  *
@@ -1293,15 +1700,17 @@ declare function parseTransactionData(options: ParseTransactionDataOptions): Par
1293
1700
  //#endregion
1294
1701
  //#region src/authorization-request/resolve-authorization-request.d.ts
1295
1702
  interface ResolveOpenid4vpAuthorizationRequestOptions {
1296
- authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpJarAuthorizationRequest;
1703
+ authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae | Openid4vpJarAuthorizationRequest;
1297
1704
  wallet?: WalletVerificationOptions;
1298
- origin?: string;
1299
- disableOriginValidation?: boolean;
1705
+ /**
1706
+ * The response mode that is expected for the resolved presentation request.
1707
+ */
1708
+ responseMode: ExpectedResponseMode;
1300
1709
  callbacks: Pick<CallbackContext, 'verifyJwt' | 'decryptJwe' | 'getX509CertificateMetadata' | 'fetch' | 'hash'>;
1301
1710
  }
1302
1711
  type ResolvedOpenid4vpAuthorizationRequest = {
1303
1712
  transactionData?: ParsedTransactionDataEntry[];
1304
- authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi;
1713
+ authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae;
1305
1714
  jar: VerifiedJarRequest | undefined;
1306
1715
  client: ParsedClientIdentifier;
1307
1716
  pex?: {
@@ -1319,6 +1728,67 @@ type ResolvedOpenid4vpAuthorizationRequest = {
1319
1728
  version: Openid4vpVersionNumber;
1320
1729
  };
1321
1730
  declare function resolveOpenid4vpAuthorizationRequest(options: ResolveOpenid4vpAuthorizationRequestOptions): Promise<ResolvedOpenid4vpAuthorizationRequest>;
1731
+ type ExpectedResponseMode = {
1732
+ /**
1733
+ * Enforces the response is `iae` or `iae_post`, meaning the presentation
1734
+ * is created as part of an issuance session.
1735
+ */
1736
+ type: 'iae';
1737
+ /**
1738
+ * The expectedUrl for the IAE session. Must always be provided, but will
1739
+ * only be verified if the OpenID4VP request is signed (and thus MUST contain `expected_url`)
1740
+ */
1741
+ expectedUrl: string;
1742
+ } | {
1743
+ /**
1744
+ * Enforces the response is `dc_api` or `dc_api.jwt` (including legacy support for `w3c_dc_api` and `w3c_dc_api.jwt`),
1745
+ * meaning the presentation will be shared using the Digital Credentials API.
1746
+ */
1747
+ type: 'dc_api';
1748
+ /**
1749
+ * The expected origin for the DC API session. Must always be provided, but will
1750
+ * only be verified if the OpenID4VP request is signed (and thus MUST contain `expected_origins`)
1751
+ */
1752
+ expectedOrigin: string;
1753
+ } | {
1754
+ /**
1755
+ * Enforces the response is `direct_post` or `direct_post.jwt`
1756
+ */
1757
+ type: 'direct_post';
1758
+ };
1759
+ //#endregion
1760
+ //#region src/authorization-request/validate-authorization-request-dc-api.d.ts
1761
+ interface ValidateOpenid4vpAuthorizationRequestDcApiPayloadOptions {
1762
+ params: Openid4vpAuthorizationRequestDcApi;
1763
+ isJarRequest: boolean;
1764
+ disableOriginValidation?: boolean;
1765
+ origin?: string;
1766
+ }
1767
+ /**
1768
+ * Validate the OpenId4Vp Authorization Request parameters for the dc_api response mode
1769
+ */
1770
+ declare const validateOpenid4vpAuthorizationRequestDcApiPayload: (options: ValidateOpenid4vpAuthorizationRequestDcApiPayloadOptions) => void;
1771
+ //#endregion
1772
+ //#region src/authorization-request/validate-authorization-request-iae.d.ts
1773
+ interface ValidateOpenid4vpAuthorizationRequestIaePayloadOptions {
1774
+ params: Openid4vpAuthorizationRequestIae;
1775
+ isJarRequest: boolean;
1776
+ /** The URL of the endpoint that will receive the response (for validating expected_url) */
1777
+ expectedUrl?: string;
1778
+ disableExpectedUrlValidation?: boolean;
1779
+ }
1780
+ /**
1781
+ * Validate the OpenId4Vp Authorization Request parameters for the IAE (Interactive Authorization Endpoint) response mode
1782
+ *
1783
+ * The IAE flow is part of OpenID4VCI 1.1 and is used when the authorization server needs to
1784
+ * interact directly with the wallet during the authorization process.
1785
+ *
1786
+ * Key validation rules:
1787
+ * - For signed requests (JAR), expected_url parameter is validated against the actual endpoint URL
1788
+ * - expected_url is used instead of expected_origins to prevent replay attacks
1789
+ * - dcql_query must be present
1790
+ */
1791
+ declare const validateOpenid4vpAuthorizationRequestIaePayload: (options: ValidateOpenid4vpAuthorizationRequestIaePayloadOptions) => void;
1322
1792
  //#endregion
1323
1793
  //#region src/jarm/metadata/z-jarm-authorization-server-metadata.d.ts
1324
1794
  declare const zJarmServerMetadata: z.ZodObject<{
@@ -1681,7 +2151,7 @@ declare function submitOpenid4vpAuthorizationResponse(options: SubmitOpenid4vpAu
1681
2151
  //#endregion
1682
2152
  //#region src/authorization-response/validate-authorization-response.d.ts
1683
2153
  interface ValidateOpenid4vpAuthorizationResponseOptions {
1684
- authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi;
2154
+ authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae;
1685
2155
  authorizationResponsePayload: Openid4vpAuthorizationResponse;
1686
2156
  }
1687
2157
  /**
@@ -1805,7 +2275,7 @@ interface Openid4vpClientOptions {
1805
2275
  declare class Openid4vpClient {
1806
2276
  private options;
1807
2277
  constructor(options: Openid4vpClientOptions);
1808
- parseOpenid4vpAuthorizationRequest(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest;
2278
+ parseOpenid4vpAuthorizationRequest(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest | ParsedOpenid4vpIaeAuthorizationRequest;
1809
2279
  resolveOpenId4vpAuthorizationRequest(options: Omit<ResolveOpenid4vpAuthorizationRequestOptions, 'callbacks'>): Promise<ResolvedOpenid4vpAuthorizationRequest>;
1810
2280
  createOpenid4vpAuthorizationResponse(options: Omit<CreateOpenid4vpAuthorizationResponseOptions, 'callbacks'>): Promise<CreateOpenid4vpAuthorizationResponseResult>;
1811
2281
  submitOpenid4vpAuthorizationResponse(options: Omit<SubmitOpenid4vpAuthorizationResponseOptions, 'callbacks'>): Promise<{
@@ -1868,17 +2338,113 @@ declare class Openid4vpVerifier {
1868
2338
  authorizationRequestPayload: {
1869
2339
  [x: string]: unknown;
1870
2340
  response_type: "vp_token";
1871
- client_id: string;
2341
+ client_id: string;
2342
+ nonce: string;
2343
+ redirect_uri?: string | undefined;
2344
+ response_uri?: string | undefined;
2345
+ request_uri?: string | undefined;
2346
+ request_uri_method?: string | undefined;
2347
+ response_mode?: "direct_post" | "direct_post.jwt" | undefined;
2348
+ wallet_nonce?: string | undefined;
2349
+ scope?: string | undefined;
2350
+ presentation_definition?: any;
2351
+ presentation_definition_uri?: string | undefined;
2352
+ dcql_query?: any;
2353
+ client_metadata?: {
2354
+ [x: string]: unknown;
2355
+ logo_uri?: string | undefined;
2356
+ client_name?: string | undefined;
2357
+ authorization_signed_response_alg?: string | undefined;
2358
+ authorization_encrypted_response_alg?: string | undefined;
2359
+ authorization_encrypted_response_enc?: string | undefined;
2360
+ jwks_uri?: string | undefined;
2361
+ jwks?: {
2362
+ [x: string]: unknown;
2363
+ keys: {
2364
+ [x: string]: unknown;
2365
+ kty: string;
2366
+ crv?: string | undefined;
2367
+ x?: string | undefined;
2368
+ y?: string | undefined;
2369
+ e?: string | undefined;
2370
+ n?: string | undefined;
2371
+ alg?: string | undefined;
2372
+ d?: string | undefined;
2373
+ dp?: string | undefined;
2374
+ dq?: string | undefined;
2375
+ ext?: boolean | undefined;
2376
+ k?: string | undefined;
2377
+ key_ops?: string[] | undefined;
2378
+ kid?: string | undefined;
2379
+ oth?: {
2380
+ [x: string]: unknown;
2381
+ d?: string | undefined;
2382
+ r?: string | undefined;
2383
+ t?: string | undefined;
2384
+ }[] | undefined;
2385
+ p?: string | undefined;
2386
+ q?: string | undefined;
2387
+ qi?: string | undefined;
2388
+ use?: string | undefined;
2389
+ x5c?: string[] | undefined;
2390
+ x5t?: string | undefined;
2391
+ 'x5t#S256'?: string | undefined;
2392
+ x5u?: string | undefined;
2393
+ }[];
2394
+ } | undefined;
2395
+ vp_formats?: Record<string, {
2396
+ [x: string]: unknown;
2397
+ alg_values_supported?: string[] | undefined;
2398
+ }> | undefined;
2399
+ vp_formats_supported?: {
2400
+ [x: string]: {
2401
+ [x: string]: unknown;
2402
+ };
2403
+ 'dc+sd-jwt'?: {
2404
+ [x: string]: unknown;
2405
+ 'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
2406
+ 'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
2407
+ } | undefined;
2408
+ jwt_vc_json?: {
2409
+ [x: string]: unknown;
2410
+ alg_values?: [string, ...string[]] | undefined;
2411
+ } | undefined;
2412
+ ldp_vc?: {
2413
+ [x: string]: unknown;
2414
+ proof_type_values?: [string, ...string[]] | undefined;
2415
+ cryptosuite_values?: [string, ...string[]] | undefined;
2416
+ } | undefined;
2417
+ mso_mdoc?: {
2418
+ [x: string]: unknown;
2419
+ issuer_signed_alg_values?: [number, ...number[]] | undefined;
2420
+ device_signed_alg_values?: [number, ...number[]] | undefined;
2421
+ issuerauth_alg_values?: [number, ...number[]] | undefined;
2422
+ deviceauth_alg_values?: [number, ...number[]] | undefined;
2423
+ } | undefined;
2424
+ } | undefined;
2425
+ encrypted_response_enc_values_supported?: string[] | undefined;
2426
+ } | undefined;
2427
+ client_metadata_uri?: string | undefined;
2428
+ state?: string | undefined;
2429
+ transaction_data?: string[] | undefined;
2430
+ trust_chain?: [string, ...string[]] | undefined;
2431
+ client_id_scheme?: "redirect_uri" | "pre-registered" | "entity_id" | "did" | "verifier_attestation" | "x509_san_dns" | "x509_san_uri" | "x509_hash" | undefined;
2432
+ verifier_attestations?: {
2433
+ format: string;
2434
+ data: string | Record<string, unknown>;
2435
+ credential_ids?: string[] | undefined;
2436
+ }[] | undefined;
2437
+ verifier_info?: {
2438
+ format: string;
2439
+ data: string | Record<string, unknown>;
2440
+ credential_ids?: string[] | undefined;
2441
+ }[] | undefined;
2442
+ } | {
2443
+ [x: string]: unknown;
2444
+ response_type: "vp_token";
1872
2445
  nonce: string;
1873
- redirect_uri?: string | undefined;
1874
- response_uri?: string | undefined;
1875
- request_uri?: string | undefined;
1876
- request_uri_method?: string | undefined;
1877
- response_mode?: "direct_post" | "direct_post.jwt" | undefined;
1878
- wallet_nonce?: string | undefined;
1879
- scope?: string | undefined;
2446
+ response_mode: "dc_api" | "dc_api.jwt" | "w3c_dc_api.jwt" | "w3c_dc_api";
1880
2447
  presentation_definition?: any;
1881
- presentation_definition_uri?: string | undefined;
1882
2448
  dcql_query?: any;
1883
2449
  client_metadata?: {
1884
2450
  [x: string]: unknown;
@@ -1954,11 +2520,9 @@ declare class Openid4vpVerifier {
1954
2520
  } | undefined;
1955
2521
  encrypted_response_enc_values_supported?: string[] | undefined;
1956
2522
  } | undefined;
1957
- client_metadata_uri?: string | undefined;
1958
2523
  state?: string | undefined;
1959
2524
  transaction_data?: string[] | undefined;
1960
2525
  trust_chain?: [string, ...string[]] | undefined;
1961
- client_id_scheme?: "redirect_uri" | "pre-registered" | "entity_id" | "did" | "verifier_attestation" | "x509_san_dns" | "x509_san_uri" | "x509_hash" | undefined;
1962
2526
  verifier_attestations?: {
1963
2527
  format: string;
1964
2528
  data: string | Record<string, unknown>;
@@ -1969,13 +2533,18 @@ declare class Openid4vpVerifier {
1969
2533
  data: string | Record<string, unknown>;
1970
2534
  credential_ids?: string[] | undefined;
1971
2535
  }[] | undefined;
2536
+ client_id?: string | undefined;
2537
+ expected_origins?: string[] | undefined;
2538
+ client_id_scheme?: undefined;
2539
+ scope?: undefined;
1972
2540
  } | {
1973
2541
  [x: string]: unknown;
1974
2542
  response_type: "vp_token";
1975
2543
  nonce: string;
1976
- response_mode: "dc_api" | "dc_api.jwt" | "w3c_dc_api.jwt" | "w3c_dc_api";
1977
- presentation_definition?: any;
1978
- dcql_query?: any;
2544
+ response_mode: "iae_post" | "iae_post.jwt";
2545
+ dcql_query: Record<string, any>;
2546
+ client_id?: string | undefined;
2547
+ scope?: undefined;
1979
2548
  client_metadata?: {
1980
2549
  [x: string]: unknown;
1981
2550
  logo_uri?: string | undefined;
@@ -2053,6 +2622,7 @@ declare class Openid4vpVerifier {
2053
2622
  state?: string | undefined;
2054
2623
  transaction_data?: string[] | undefined;
2055
2624
  trust_chain?: [string, ...string[]] | undefined;
2625
+ client_id_scheme?: undefined;
2056
2626
  verifier_attestations?: {
2057
2627
  format: string;
2058
2628
  data: string | Record<string, unknown>;
@@ -2063,10 +2633,8 @@ declare class Openid4vpVerifier {
2063
2633
  data: string | Record<string, unknown>;
2064
2634
  credential_ids?: string[] | undefined;
2065
2635
  }[] | undefined;
2066
- client_id?: string | undefined;
2067
- expected_origins?: string[] | undefined;
2068
- client_id_scheme?: undefined;
2069
- scope?: undefined;
2636
+ expected_url?: string | undefined;
2637
+ expected_origins?: undefined;
2070
2638
  };
2071
2639
  authorizationRequestObject: {
2072
2640
  [x: string]: unknown;
@@ -2353,6 +2921,104 @@ declare class Openid4vpVerifier {
2353
2921
  expected_origins?: string[] | undefined;
2354
2922
  client_id_scheme?: undefined;
2355
2923
  scope?: undefined;
2924
+ } | {
2925
+ [x: string]: unknown;
2926
+ response_type: "vp_token";
2927
+ nonce: string;
2928
+ response_mode: "iae_post" | "iae_post.jwt";
2929
+ dcql_query: Record<string, any>;
2930
+ client_id?: string | undefined;
2931
+ scope?: undefined;
2932
+ client_metadata?: {
2933
+ [x: string]: unknown;
2934
+ logo_uri?: string | undefined;
2935
+ client_name?: string | undefined;
2936
+ authorization_signed_response_alg?: string | undefined;
2937
+ authorization_encrypted_response_alg?: string | undefined;
2938
+ authorization_encrypted_response_enc?: string | undefined;
2939
+ jwks_uri?: string | undefined;
2940
+ jwks?: {
2941
+ [x: string]: unknown;
2942
+ keys: {
2943
+ [x: string]: unknown;
2944
+ kty: string;
2945
+ crv?: string | undefined;
2946
+ x?: string | undefined;
2947
+ y?: string | undefined;
2948
+ e?: string | undefined;
2949
+ n?: string | undefined;
2950
+ alg?: string | undefined;
2951
+ d?: string | undefined;
2952
+ dp?: string | undefined;
2953
+ dq?: string | undefined;
2954
+ ext?: boolean | undefined;
2955
+ k?: string | undefined;
2956
+ key_ops?: string[] | undefined;
2957
+ kid?: string | undefined;
2958
+ oth?: {
2959
+ [x: string]: unknown;
2960
+ d?: string | undefined;
2961
+ r?: string | undefined;
2962
+ t?: string | undefined;
2963
+ }[] | undefined;
2964
+ p?: string | undefined;
2965
+ q?: string | undefined;
2966
+ qi?: string | undefined;
2967
+ use?: string | undefined;
2968
+ x5c?: string[] | undefined;
2969
+ x5t?: string | undefined;
2970
+ 'x5t#S256'?: string | undefined;
2971
+ x5u?: string | undefined;
2972
+ }[];
2973
+ } | undefined;
2974
+ vp_formats?: Record<string, {
2975
+ [x: string]: unknown;
2976
+ alg_values_supported?: string[] | undefined;
2977
+ }> | undefined;
2978
+ vp_formats_supported?: {
2979
+ [x: string]: {
2980
+ [x: string]: unknown;
2981
+ };
2982
+ 'dc+sd-jwt'?: {
2983
+ [x: string]: unknown;
2984
+ 'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
2985
+ 'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
2986
+ } | undefined;
2987
+ jwt_vc_json?: {
2988
+ [x: string]: unknown;
2989
+ alg_values?: [string, ...string[]] | undefined;
2990
+ } | undefined;
2991
+ ldp_vc?: {
2992
+ [x: string]: unknown;
2993
+ proof_type_values?: [string, ...string[]] | undefined;
2994
+ cryptosuite_values?: [string, ...string[]] | undefined;
2995
+ } | undefined;
2996
+ mso_mdoc?: {
2997
+ [x: string]: unknown;
2998
+ issuer_signed_alg_values?: [number, ...number[]] | undefined;
2999
+ device_signed_alg_values?: [number, ...number[]] | undefined;
3000
+ issuerauth_alg_values?: [number, ...number[]] | undefined;
3001
+ deviceauth_alg_values?: [number, ...number[]] | undefined;
3002
+ } | undefined;
3003
+ } | undefined;
3004
+ encrypted_response_enc_values_supported?: string[] | undefined;
3005
+ } | undefined;
3006
+ state?: string | undefined;
3007
+ transaction_data?: string[] | undefined;
3008
+ trust_chain?: [string, ...string[]] | undefined;
3009
+ client_id_scheme?: undefined;
3010
+ verifier_attestations?: {
3011
+ format: string;
3012
+ data: string | Record<string, unknown>;
3013
+ credential_ids?: string[] | undefined;
3014
+ }[] | undefined;
3015
+ verifier_info?: {
3016
+ format: string;
3017
+ data: string | Record<string, unknown>;
3018
+ credential_ids?: string[] | undefined;
3019
+ }[] | undefined;
3020
+ expected_url?: string | undefined;
3021
+ expected_origins?: undefined;
2356
3022
  };
2357
3023
  authorizationRequestObject: {
2358
3024
  [x: string]: unknown;
@@ -2556,11 +3222,109 @@ declare class Openid4vpVerifier {
2556
3222
  expected_origins?: string[] | undefined;
2557
3223
  client_id_scheme?: undefined;
2558
3224
  scope?: undefined;
3225
+ } | {
3226
+ [x: string]: unknown;
3227
+ response_type: "vp_token";
3228
+ nonce: string;
3229
+ response_mode: "iae_post" | "iae_post.jwt";
3230
+ dcql_query: Record<string, any>;
3231
+ client_id?: string | undefined;
3232
+ scope?: undefined;
3233
+ client_metadata?: {
3234
+ [x: string]: unknown;
3235
+ logo_uri?: string | undefined;
3236
+ client_name?: string | undefined;
3237
+ authorization_signed_response_alg?: string | undefined;
3238
+ authorization_encrypted_response_alg?: string | undefined;
3239
+ authorization_encrypted_response_enc?: string | undefined;
3240
+ jwks_uri?: string | undefined;
3241
+ jwks?: {
3242
+ [x: string]: unknown;
3243
+ keys: {
3244
+ [x: string]: unknown;
3245
+ kty: string;
3246
+ crv?: string | undefined;
3247
+ x?: string | undefined;
3248
+ y?: string | undefined;
3249
+ e?: string | undefined;
3250
+ n?: string | undefined;
3251
+ alg?: string | undefined;
3252
+ d?: string | undefined;
3253
+ dp?: string | undefined;
3254
+ dq?: string | undefined;
3255
+ ext?: boolean | undefined;
3256
+ k?: string | undefined;
3257
+ key_ops?: string[] | undefined;
3258
+ kid?: string | undefined;
3259
+ oth?: {
3260
+ [x: string]: unknown;
3261
+ d?: string | undefined;
3262
+ r?: string | undefined;
3263
+ t?: string | undefined;
3264
+ }[] | undefined;
3265
+ p?: string | undefined;
3266
+ q?: string | undefined;
3267
+ qi?: string | undefined;
3268
+ use?: string | undefined;
3269
+ x5c?: string[] | undefined;
3270
+ x5t?: string | undefined;
3271
+ 'x5t#S256'?: string | undefined;
3272
+ x5u?: string | undefined;
3273
+ }[];
3274
+ } | undefined;
3275
+ vp_formats?: Record<string, {
3276
+ [x: string]: unknown;
3277
+ alg_values_supported?: string[] | undefined;
3278
+ }> | undefined;
3279
+ vp_formats_supported?: {
3280
+ [x: string]: {
3281
+ [x: string]: unknown;
3282
+ };
3283
+ 'dc+sd-jwt'?: {
3284
+ [x: string]: unknown;
3285
+ 'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
3286
+ 'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
3287
+ } | undefined;
3288
+ jwt_vc_json?: {
3289
+ [x: string]: unknown;
3290
+ alg_values?: [string, ...string[]] | undefined;
3291
+ } | undefined;
3292
+ ldp_vc?: {
3293
+ [x: string]: unknown;
3294
+ proof_type_values?: [string, ...string[]] | undefined;
3295
+ cryptosuite_values?: [string, ...string[]] | undefined;
3296
+ } | undefined;
3297
+ mso_mdoc?: {
3298
+ [x: string]: unknown;
3299
+ issuer_signed_alg_values?: [number, ...number[]] | undefined;
3300
+ device_signed_alg_values?: [number, ...number[]] | undefined;
3301
+ issuerauth_alg_values?: [number, ...number[]] | undefined;
3302
+ deviceauth_alg_values?: [number, ...number[]] | undefined;
3303
+ } | undefined;
3304
+ } | undefined;
3305
+ encrypted_response_enc_values_supported?: string[] | undefined;
3306
+ } | undefined;
3307
+ state?: string | undefined;
3308
+ transaction_data?: string[] | undefined;
3309
+ trust_chain?: [string, ...string[]] | undefined;
3310
+ client_id_scheme?: undefined;
3311
+ verifier_attestations?: {
3312
+ format: string;
3313
+ data: string | Record<string, unknown>;
3314
+ credential_ids?: string[] | undefined;
3315
+ }[] | undefined;
3316
+ verifier_info?: {
3317
+ format: string;
3318
+ data: string | Record<string, unknown>;
3319
+ credential_ids?: string[] | undefined;
3320
+ }[] | undefined;
3321
+ expected_url?: string | undefined;
3322
+ expected_origins?: undefined;
2559
3323
  };
2560
3324
  authorizationRequest: string;
2561
3325
  jar: undefined;
2562
3326
  }>;
2563
- parseOpenid4vpAuthorizationRequestPayload(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest;
3327
+ parseOpenid4vpAuthorizationRequestPayload(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest | ParsedOpenid4vpIaeAuthorizationRequest;
2564
3328
  parseOpenid4vpAuthorizationResponse(options: ParseOpenid4vpAuthorizationResponseOptions): Promise<ParsedOpenid4vpAuthorizationResponse>;
2565
3329
  validateOpenid4vpAuthorizationResponsePayload(options: ValidateOpenid4vpAuthorizationResponseOptions): ValidateOpenid4VpAuthorizationResponseResult;
2566
3330
  parsePexVpToken(vpToken: unknown): [string | Record<string, any>, ...(string | Record<string, any>)[]];
@@ -2581,5 +3345,5 @@ declare class Openid4vpVerifier {
2581
3345
  declare function parsePexVpToken(vpToken: unknown): [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]];
2582
3346
  declare function parseDcqlVpToken(vpToken: unknown): Record<string, [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]]>;
2583
3347
  //#endregion
2584
- export { type ClientIdPrefix, type ClientMetadata, type CreateOpenid4vpAuthorizationRequestOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type CredentialFormat, type GetOpenid4vpClientIdOptions, type JarmClientMetadata, JarmMode, type Openid4vpAuthorizationRequest, type Openid4vpAuthorizationRequestDcApi, type Openid4vpAuthorizationResponse, Openid4vpClient, Openid4vpVerifier, type Openid4vpVersionNumber, type ParseJarmAuthorizationResponseOptions, type ParseOpenid4vpAuthorizationRequestOptions, type ParseOpenid4vpAuthorizationResponseOptions, type ParseTransactionDataOptions, type ParsedOpenid4vpAuthorizationResponse, type ProofFormat, type ResolveOpenid4vpAuthorizationRequestOptions, type ResolvedOpenid4vpAuthorizationRequest, type SubmitOpenid4vpAuthorizationResponseOptions, type TransactionDataEntry, type TransactionDataHashesCredentials, type ValidateOpenid4VpAuthorizationResponseResult, type ValidateOpenid4VpDcqlAuthorizationResponseResult, type ValidateOpenid4VpPexAuthorizationResponseResult, type ValidateOpenid4vpAuthorizationRequestPayloadOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type VerifiedTransactionDataEntry, type VerifierAttestation, type VerifierAttestations, type VerifyJarmAuthorizationResponseOptions, type VerifyTransactionDataOptions, type VpToken, type VpTokenDcql, type VpTokenPex, type VpTokenPresentationEntry, type WalletMetadata, type WalletVerificationOptions, calculateX509HashClientIdPrefixValue, createOpenid4vpAuthorizationRequest, createOpenid4vpAuthorizationResponse, extractEncryptionJwkFromJwks, getOpenid4vpClientId, isJarmResponseMode, isOpenid4vpAuthorizationRequestDcApi, parseAuthorizationRequestVersion, parseDcqlVpToken, parseJarmAuthorizationResponse, parseOpenid4VpAuthorizationResponsePayload, parseOpenid4vpAuthorizationRequest, parseOpenid4vpAuthorizationResponse, parsePexVpToken, parseTransactionData, resolveOpenid4vpAuthorizationRequest, submitOpenid4vpAuthorizationResponse, validateOpenid4vpAuthorizationRequestPayload, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zClientIdPrefix, zClientMetadata, zCredentialFormat, zJarmClientMetadata, zOpenid4vpAuthorizationResponse, zProofFormat, zVerifierAttestations, zWalletMetadata };
3348
+ export { type ClientIdPrefix, type ClientMetadata, type CreateOpenid4vpAuthorizationRequestOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type CredentialFormat, type GetOpenid4vpClientIdOptions, type JarmClientMetadata, JarmMode, type Openid4vpAuthorizationRequest, type Openid4vpAuthorizationRequestDcApi, type Openid4vpAuthorizationRequestIae, type Openid4vpAuthorizationResponse, Openid4vpClient, Openid4vpVerifier, type Openid4vpVersionNumber, type ParseJarmAuthorizationResponseOptions, type ParseOpenid4vpAuthorizationRequestOptions, type ParseOpenid4vpAuthorizationResponseOptions, type ParseTransactionDataOptions, type ParsedOpenid4vpAuthorizationResponse, type ProofFormat, type ResolveOpenid4vpAuthorizationRequestOptions, type ResolvedOpenid4vpAuthorizationRequest, type SubmitOpenid4vpAuthorizationResponseOptions, type TransactionDataEntry, type TransactionDataHashesCredentials, type ValidateOpenid4VpAuthorizationResponseResult, type ValidateOpenid4VpDcqlAuthorizationResponseResult, type ValidateOpenid4VpPexAuthorizationResponseResult, type ValidateOpenid4vpAuthorizationRequestDcApiPayloadOptions, type ValidateOpenid4vpAuthorizationRequestIaePayloadOptions, type ValidateOpenid4vpAuthorizationRequestPayloadOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type VerifiedTransactionDataEntry, type VerifierAttestation, type VerifierAttestations, type VerifyJarmAuthorizationResponseOptions, type VerifyTransactionDataOptions, type VpToken, type VpTokenDcql, type VpTokenPex, type VpTokenPresentationEntry, type WalletMetadata, type WalletVerificationOptions, calculateX509HashClientIdPrefixValue, createOpenid4vpAuthorizationRequest, createOpenid4vpAuthorizationResponse, extractEncryptionJwkFromJwks, getOpenid4vpClientId, isJarmResponseMode, isOpenid4vpAuthorizationRequestDcApi, isOpenid4vpAuthorizationRequestIae, parseAuthorizationRequestVersion, parseDcqlVpToken, parseJarmAuthorizationResponse, parseOpenid4VpAuthorizationResponsePayload, parseOpenid4vpAuthorizationRequest, parseOpenid4vpAuthorizationResponse, parsePexVpToken, parseTransactionData, resolveOpenid4vpAuthorizationRequest, submitOpenid4vpAuthorizationResponse, validateOpenid4vpAuthorizationRequestDcApiPayload, validateOpenid4vpAuthorizationRequestIaePayload, validateOpenid4vpAuthorizationRequestPayload, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zClientIdPrefix, zClientMetadata, zCredentialFormat, zJarmClientMetadata, zOpenid4vpAuthorizationResponse, zProofFormat, zVerifierAttestations, zWalletMetadata };
2585
3349
  //# sourceMappingURL=index.d.mts.map