@openid4vc/openid4vp 0.5.0-alpha-20260202131209 → 0.5.0-alpha-20260202155954
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.mts +852 -88
- package/dist/index.mjs +144 -40
- package/dist/index.mjs.map +1 -1
- package/package.json +3 -3
package/dist/index.d.mts
CHANGED
|
@@ -281,10 +281,115 @@ declare const zOpenid4vpAuthorizationRequestDcApi: z.ZodObject<{
|
|
|
281
281
|
type Openid4vpAuthorizationRequestDcApi = z.infer<typeof zOpenid4vpAuthorizationRequestDcApi>;
|
|
282
282
|
declare function isOpenid4vpAuthorizationRequestDcApi(request: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpJarAuthorizationRequest): request is Openid4vpAuthorizationRequestDcApi;
|
|
283
283
|
//#endregion
|
|
284
|
+
//#region src/authorization-request/z-authorization-request-iae.d.ts
|
|
285
|
+
/**
|
|
286
|
+
* Authorization Request schema for Interactive Authorization Endpoint (IAE) flow
|
|
287
|
+
*
|
|
288
|
+
* IAE is used in OpenID4VCI when the authorization server needs to interact
|
|
289
|
+
* directly with the wallet (e.g., requesting credential presentation) as part
|
|
290
|
+
* of the authorization process.
|
|
291
|
+
*
|
|
292
|
+
* Key differences from DC API:
|
|
293
|
+
* - Uses iae_post/iae_post.jwt response modes
|
|
294
|
+
* - Uses expected_url instead of expected_origins for signed requests
|
|
295
|
+
* - Response is sent back to the Interactive Authorization Endpoint
|
|
296
|
+
*/
|
|
297
|
+
declare const zOpenid4vpAuthorizationRequestIae: z.ZodObject<{
|
|
298
|
+
response_type: z.ZodLiteral<"vp_token">;
|
|
299
|
+
client_id: z.ZodOptional<z.ZodString>;
|
|
300
|
+
nonce: z.ZodString;
|
|
301
|
+
scope: z.ZodOptional<z.ZodNever>;
|
|
302
|
+
client_metadata: z.ZodOptional<z.ZodObject<{
|
|
303
|
+
logo_uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
|
|
304
|
+
client_name: z.ZodOptional<z.ZodString>;
|
|
305
|
+
authorization_signed_response_alg: z.ZodOptional<z.ZodString>;
|
|
306
|
+
authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
|
|
307
|
+
authorization_encrypted_response_enc: z.ZodOptional<z.ZodOptional<z.ZodString>>;
|
|
308
|
+
jwks_uri: z.ZodOptional<z.ZodURL>;
|
|
309
|
+
jwks: z.ZodOptional<z.ZodObject<{
|
|
310
|
+
keys: z.ZodArray<z.ZodObject<{
|
|
311
|
+
kty: z.ZodString;
|
|
312
|
+
crv: z.ZodOptional<z.ZodString>;
|
|
313
|
+
x: z.ZodOptional<z.ZodString>;
|
|
314
|
+
y: z.ZodOptional<z.ZodString>;
|
|
315
|
+
e: z.ZodOptional<z.ZodString>;
|
|
316
|
+
n: z.ZodOptional<z.ZodString>;
|
|
317
|
+
alg: z.ZodOptional<z.ZodString>;
|
|
318
|
+
d: z.ZodOptional<z.ZodString>;
|
|
319
|
+
dp: z.ZodOptional<z.ZodString>;
|
|
320
|
+
dq: z.ZodOptional<z.ZodString>;
|
|
321
|
+
ext: z.ZodOptional<z.ZodBoolean>;
|
|
322
|
+
k: z.ZodOptional<z.ZodString>;
|
|
323
|
+
key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
324
|
+
kid: z.ZodOptional<z.ZodString>;
|
|
325
|
+
oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
326
|
+
d: z.ZodOptional<z.ZodString>;
|
|
327
|
+
r: z.ZodOptional<z.ZodString>;
|
|
328
|
+
t: z.ZodOptional<z.ZodString>;
|
|
329
|
+
}, z.core.$loose>>>;
|
|
330
|
+
p: z.ZodOptional<z.ZodString>;
|
|
331
|
+
q: z.ZodOptional<z.ZodString>;
|
|
332
|
+
qi: z.ZodOptional<z.ZodString>;
|
|
333
|
+
use: z.ZodOptional<z.ZodString>;
|
|
334
|
+
x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
335
|
+
x5t: z.ZodOptional<z.ZodString>;
|
|
336
|
+
'x5t#S256': z.ZodOptional<z.ZodString>;
|
|
337
|
+
x5u: z.ZodOptional<z.ZodString>;
|
|
338
|
+
}, z.core.$loose>>;
|
|
339
|
+
}, z.core.$loose>>;
|
|
340
|
+
vp_formats: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
|
|
341
|
+
alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
342
|
+
}, z.core.$loose>>>;
|
|
343
|
+
vp_formats_supported: z.ZodOptional<z.ZodObject<{
|
|
344
|
+
'dc+sd-jwt': z.ZodOptional<z.ZodObject<{
|
|
345
|
+
'sd-jwt_alg_values': z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
|
|
346
|
+
'kb-jwt_alg_values': z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
|
|
347
|
+
}, z.core.$loose>>;
|
|
348
|
+
jwt_vc_json: z.ZodOptional<z.ZodObject<{
|
|
349
|
+
alg_values: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
|
|
350
|
+
}, z.core.$loose>>;
|
|
351
|
+
ldp_vc: z.ZodOptional<z.ZodObject<{
|
|
352
|
+
proof_type_values: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
|
|
353
|
+
cryptosuite_values: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
|
|
354
|
+
}, z.core.$loose>>;
|
|
355
|
+
mso_mdoc: z.ZodOptional<z.ZodObject<{
|
|
356
|
+
issuer_signed_alg_values: z.ZodOptional<z.ZodTuple<[z.ZodNumber], z.ZodNumber>>;
|
|
357
|
+
device_signed_alg_values: z.ZodOptional<z.ZodTuple<[z.ZodNumber], z.ZodNumber>>;
|
|
358
|
+
issuerauth_alg_values: z.ZodOptional<z.ZodTuple<[z.ZodNumber], z.ZodNumber>>;
|
|
359
|
+
deviceauth_alg_values: z.ZodOptional<z.ZodTuple<[z.ZodNumber], z.ZodNumber>>;
|
|
360
|
+
}, z.core.$loose>>;
|
|
361
|
+
}, z.core.$catchall<z.ZodObject<{}, z.core.$loose>>>>;
|
|
362
|
+
encrypted_response_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
363
|
+
}, z.core.$loose>>;
|
|
364
|
+
state: z.ZodOptional<z.ZodString>;
|
|
365
|
+
transaction_data: z.ZodOptional<z.ZodArray<z.ZodBase64URL>>;
|
|
366
|
+
trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
|
|
367
|
+
client_id_scheme: z.ZodOptional<z.ZodNever>;
|
|
368
|
+
verifier_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
369
|
+
format: z.ZodString;
|
|
370
|
+
data: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodString]>;
|
|
371
|
+
credential_ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
372
|
+
}, z.core.$strip>>>;
|
|
373
|
+
verifier_info: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
374
|
+
format: z.ZodString;
|
|
375
|
+
data: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodString]>;
|
|
376
|
+
credential_ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
377
|
+
}, z.core.$strip>>>;
|
|
378
|
+
response_mode: z.ZodEnum<{
|
|
379
|
+
iae_post: "iae_post";
|
|
380
|
+
"iae_post.jwt": "iae_post.jwt";
|
|
381
|
+
}>;
|
|
382
|
+
dcql_query: z.ZodRecord<z.ZodString, z.ZodAny>;
|
|
383
|
+
expected_url: z.ZodOptional<z.ZodString>;
|
|
384
|
+
expected_origins: z.ZodOptional<z.ZodNever>;
|
|
385
|
+
}, z.core.$loose>;
|
|
386
|
+
type Openid4vpAuthorizationRequestIae = z.infer<typeof zOpenid4vpAuthorizationRequestIae>;
|
|
387
|
+
declare function isOpenid4vpAuthorizationRequestIae(request: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestIae | Openid4vpJarAuthorizationRequest): request is Openid4vpAuthorizationRequestIae;
|
|
388
|
+
//#endregion
|
|
284
389
|
//#region src/authorization-request/create-authorization-request.d.ts
|
|
285
390
|
interface CreateOpenid4vpAuthorizationRequestOptions {
|
|
286
391
|
scheme?: string;
|
|
287
|
-
authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi;
|
|
392
|
+
authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae;
|
|
288
393
|
jar?: Pick<CreateJarAuthorizationRequestOptions, 'additionalJwtPayload' | 'requestUri' | 'jwtSigner' | 'expiresInSeconds'>;
|
|
289
394
|
wallet?: WalletVerificationOptions;
|
|
290
395
|
callbacks: Pick<CallbackContext, 'signJwt' | 'encryptJwe'>;
|
|
@@ -513,6 +618,104 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
|
|
|
513
618
|
expected_origins?: string[] | undefined;
|
|
514
619
|
client_id_scheme?: undefined;
|
|
515
620
|
scope?: undefined;
|
|
621
|
+
} | {
|
|
622
|
+
[x: string]: unknown;
|
|
623
|
+
response_type: "vp_token";
|
|
624
|
+
nonce: string;
|
|
625
|
+
response_mode: "iae_post" | "iae_post.jwt";
|
|
626
|
+
dcql_query: Record<string, any>;
|
|
627
|
+
client_id?: string | undefined;
|
|
628
|
+
scope?: undefined;
|
|
629
|
+
client_metadata?: {
|
|
630
|
+
[x: string]: unknown;
|
|
631
|
+
logo_uri?: string | undefined;
|
|
632
|
+
client_name?: string | undefined;
|
|
633
|
+
authorization_signed_response_alg?: string | undefined;
|
|
634
|
+
authorization_encrypted_response_alg?: string | undefined;
|
|
635
|
+
authorization_encrypted_response_enc?: string | undefined;
|
|
636
|
+
jwks_uri?: string | undefined;
|
|
637
|
+
jwks?: {
|
|
638
|
+
[x: string]: unknown;
|
|
639
|
+
keys: {
|
|
640
|
+
[x: string]: unknown;
|
|
641
|
+
kty: string;
|
|
642
|
+
crv?: string | undefined;
|
|
643
|
+
x?: string | undefined;
|
|
644
|
+
y?: string | undefined;
|
|
645
|
+
e?: string | undefined;
|
|
646
|
+
n?: string | undefined;
|
|
647
|
+
alg?: string | undefined;
|
|
648
|
+
d?: string | undefined;
|
|
649
|
+
dp?: string | undefined;
|
|
650
|
+
dq?: string | undefined;
|
|
651
|
+
ext?: boolean | undefined;
|
|
652
|
+
k?: string | undefined;
|
|
653
|
+
key_ops?: string[] | undefined;
|
|
654
|
+
kid?: string | undefined;
|
|
655
|
+
oth?: {
|
|
656
|
+
[x: string]: unknown;
|
|
657
|
+
d?: string | undefined;
|
|
658
|
+
r?: string | undefined;
|
|
659
|
+
t?: string | undefined;
|
|
660
|
+
}[] | undefined;
|
|
661
|
+
p?: string | undefined;
|
|
662
|
+
q?: string | undefined;
|
|
663
|
+
qi?: string | undefined;
|
|
664
|
+
use?: string | undefined;
|
|
665
|
+
x5c?: string[] | undefined;
|
|
666
|
+
x5t?: string | undefined;
|
|
667
|
+
'x5t#S256'?: string | undefined;
|
|
668
|
+
x5u?: string | undefined;
|
|
669
|
+
}[];
|
|
670
|
+
} | undefined;
|
|
671
|
+
vp_formats?: Record<string, {
|
|
672
|
+
[x: string]: unknown;
|
|
673
|
+
alg_values_supported?: string[] | undefined;
|
|
674
|
+
}> | undefined;
|
|
675
|
+
vp_formats_supported?: {
|
|
676
|
+
[x: string]: {
|
|
677
|
+
[x: string]: unknown;
|
|
678
|
+
};
|
|
679
|
+
'dc+sd-jwt'?: {
|
|
680
|
+
[x: string]: unknown;
|
|
681
|
+
'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
682
|
+
'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
683
|
+
} | undefined;
|
|
684
|
+
jwt_vc_json?: {
|
|
685
|
+
[x: string]: unknown;
|
|
686
|
+
alg_values?: [string, ...string[]] | undefined;
|
|
687
|
+
} | undefined;
|
|
688
|
+
ldp_vc?: {
|
|
689
|
+
[x: string]: unknown;
|
|
690
|
+
proof_type_values?: [string, ...string[]] | undefined;
|
|
691
|
+
cryptosuite_values?: [string, ...string[]] | undefined;
|
|
692
|
+
} | undefined;
|
|
693
|
+
mso_mdoc?: {
|
|
694
|
+
[x: string]: unknown;
|
|
695
|
+
issuer_signed_alg_values?: [number, ...number[]] | undefined;
|
|
696
|
+
device_signed_alg_values?: [number, ...number[]] | undefined;
|
|
697
|
+
issuerauth_alg_values?: [number, ...number[]] | undefined;
|
|
698
|
+
deviceauth_alg_values?: [number, ...number[]] | undefined;
|
|
699
|
+
} | undefined;
|
|
700
|
+
} | undefined;
|
|
701
|
+
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
702
|
+
} | undefined;
|
|
703
|
+
state?: string | undefined;
|
|
704
|
+
transaction_data?: string[] | undefined;
|
|
705
|
+
trust_chain?: [string, ...string[]] | undefined;
|
|
706
|
+
client_id_scheme?: undefined;
|
|
707
|
+
verifier_attestations?: {
|
|
708
|
+
format: string;
|
|
709
|
+
data: string | Record<string, unknown>;
|
|
710
|
+
credential_ids?: string[] | undefined;
|
|
711
|
+
}[] | undefined;
|
|
712
|
+
verifier_info?: {
|
|
713
|
+
format: string;
|
|
714
|
+
data: string | Record<string, unknown>;
|
|
715
|
+
credential_ids?: string[] | undefined;
|
|
716
|
+
}[] | undefined;
|
|
717
|
+
expected_url?: string | undefined;
|
|
718
|
+
expected_origins?: undefined;
|
|
516
719
|
};
|
|
517
720
|
authorizationRequestObject: {
|
|
518
721
|
[x: string]: unknown;
|
|
@@ -799,22 +1002,14 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
|
|
|
799
1002
|
expected_origins?: string[] | undefined;
|
|
800
1003
|
client_id_scheme?: undefined;
|
|
801
1004
|
scope?: undefined;
|
|
802
|
-
}
|
|
803
|
-
authorizationRequestObject: {
|
|
1005
|
+
} | {
|
|
804
1006
|
[x: string]: unknown;
|
|
805
1007
|
response_type: "vp_token";
|
|
806
|
-
client_id: string;
|
|
807
1008
|
nonce: string;
|
|
808
|
-
|
|
809
|
-
|
|
810
|
-
|
|
811
|
-
|
|
812
|
-
response_mode?: "direct_post" | "direct_post.jwt" | undefined;
|
|
813
|
-
wallet_nonce?: string | undefined;
|
|
814
|
-
scope?: string | undefined;
|
|
815
|
-
presentation_definition?: any;
|
|
816
|
-
presentation_definition_uri?: string | undefined;
|
|
817
|
-
dcql_query?: any;
|
|
1009
|
+
response_mode: "iae_post" | "iae_post.jwt";
|
|
1010
|
+
dcql_query: Record<string, any>;
|
|
1011
|
+
client_id?: string | undefined;
|
|
1012
|
+
scope?: undefined;
|
|
818
1013
|
client_metadata?: {
|
|
819
1014
|
[x: string]: unknown;
|
|
820
1015
|
logo_uri?: string | undefined;
|
|
@@ -889,11 +1084,10 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
|
|
|
889
1084
|
} | undefined;
|
|
890
1085
|
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
891
1086
|
} | undefined;
|
|
892
|
-
client_metadata_uri?: string | undefined;
|
|
893
1087
|
state?: string | undefined;
|
|
894
1088
|
transaction_data?: string[] | undefined;
|
|
895
1089
|
trust_chain?: [string, ...string[]] | undefined;
|
|
896
|
-
client_id_scheme?:
|
|
1090
|
+
client_id_scheme?: undefined;
|
|
897
1091
|
verifier_attestations?: {
|
|
898
1092
|
format: string;
|
|
899
1093
|
data: string | Record<string, unknown>;
|
|
@@ -904,12 +1098,23 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
|
|
|
904
1098
|
data: string | Record<string, unknown>;
|
|
905
1099
|
credential_ids?: string[] | undefined;
|
|
906
1100
|
}[] | undefined;
|
|
907
|
-
|
|
1101
|
+
expected_url?: string | undefined;
|
|
1102
|
+
expected_origins?: undefined;
|
|
1103
|
+
};
|
|
1104
|
+
authorizationRequestObject: {
|
|
908
1105
|
[x: string]: unknown;
|
|
909
1106
|
response_type: "vp_token";
|
|
1107
|
+
client_id: string;
|
|
910
1108
|
nonce: string;
|
|
911
|
-
|
|
1109
|
+
redirect_uri?: string | undefined;
|
|
1110
|
+
response_uri?: string | undefined;
|
|
1111
|
+
request_uri?: string | undefined;
|
|
1112
|
+
request_uri_method?: string | undefined;
|
|
1113
|
+
response_mode?: "direct_post" | "direct_post.jwt" | undefined;
|
|
1114
|
+
wallet_nonce?: string | undefined;
|
|
1115
|
+
scope?: string | undefined;
|
|
912
1116
|
presentation_definition?: any;
|
|
1117
|
+
presentation_definition_uri?: string | undefined;
|
|
913
1118
|
dcql_query?: any;
|
|
914
1119
|
client_metadata?: {
|
|
915
1120
|
[x: string]: unknown;
|
|
@@ -985,9 +1190,11 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
|
|
|
985
1190
|
} | undefined;
|
|
986
1191
|
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
987
1192
|
} | undefined;
|
|
1193
|
+
client_metadata_uri?: string | undefined;
|
|
988
1194
|
state?: string | undefined;
|
|
989
1195
|
transaction_data?: string[] | undefined;
|
|
990
1196
|
trust_chain?: [string, ...string[]] | undefined;
|
|
1197
|
+
client_id_scheme?: "redirect_uri" | "pre-registered" | "entity_id" | "did" | "verifier_attestation" | "x509_san_dns" | "x509_san_uri" | "x509_hash" | undefined;
|
|
991
1198
|
verifier_attestations?: {
|
|
992
1199
|
format: string;
|
|
993
1200
|
data: string | Record<string, unknown>;
|
|
@@ -998,46 +1205,243 @@ declare function createOpenid4vpAuthorizationRequest(options: CreateOpenid4vpAut
|
|
|
998
1205
|
data: string | Record<string, unknown>;
|
|
999
1206
|
credential_ids?: string[] | undefined;
|
|
1000
1207
|
}[] | undefined;
|
|
1001
|
-
|
|
1002
|
-
|
|
1003
|
-
|
|
1004
|
-
|
|
1005
|
-
|
|
1006
|
-
|
|
1007
|
-
|
|
1008
|
-
|
|
1009
|
-
|
|
1010
|
-
|
|
1011
|
-
|
|
1012
|
-
|
|
1013
|
-
|
|
1014
|
-
|
|
1015
|
-
|
|
1016
|
-
|
|
1017
|
-
|
|
1018
|
-
|
|
1019
|
-
|
|
1020
|
-
|
|
1021
|
-
|
|
1022
|
-
|
|
1023
|
-
|
|
1024
|
-
|
|
1025
|
-
|
|
1026
|
-
|
|
1027
|
-
|
|
1028
|
-
|
|
1029
|
-
|
|
1030
|
-
|
|
1031
|
-
|
|
1032
|
-
|
|
1033
|
-
|
|
1034
|
-
|
|
1035
|
-
|
|
1036
|
-
|
|
1037
|
-
|
|
1038
|
-
|
|
1039
|
-
|
|
1040
|
-
|
|
1208
|
+
} | {
|
|
1209
|
+
[x: string]: unknown;
|
|
1210
|
+
response_type: "vp_token";
|
|
1211
|
+
nonce: string;
|
|
1212
|
+
response_mode: "dc_api" | "dc_api.jwt" | "w3c_dc_api.jwt" | "w3c_dc_api";
|
|
1213
|
+
presentation_definition?: any;
|
|
1214
|
+
dcql_query?: any;
|
|
1215
|
+
client_metadata?: {
|
|
1216
|
+
[x: string]: unknown;
|
|
1217
|
+
logo_uri?: string | undefined;
|
|
1218
|
+
client_name?: string | undefined;
|
|
1219
|
+
authorization_signed_response_alg?: string | undefined;
|
|
1220
|
+
authorization_encrypted_response_alg?: string | undefined;
|
|
1221
|
+
authorization_encrypted_response_enc?: string | undefined;
|
|
1222
|
+
jwks_uri?: string | undefined;
|
|
1223
|
+
jwks?: {
|
|
1224
|
+
[x: string]: unknown;
|
|
1225
|
+
keys: {
|
|
1226
|
+
[x: string]: unknown;
|
|
1227
|
+
kty: string;
|
|
1228
|
+
crv?: string | undefined;
|
|
1229
|
+
x?: string | undefined;
|
|
1230
|
+
y?: string | undefined;
|
|
1231
|
+
e?: string | undefined;
|
|
1232
|
+
n?: string | undefined;
|
|
1233
|
+
alg?: string | undefined;
|
|
1234
|
+
d?: string | undefined;
|
|
1235
|
+
dp?: string | undefined;
|
|
1236
|
+
dq?: string | undefined;
|
|
1237
|
+
ext?: boolean | undefined;
|
|
1238
|
+
k?: string | undefined;
|
|
1239
|
+
key_ops?: string[] | undefined;
|
|
1240
|
+
kid?: string | undefined;
|
|
1241
|
+
oth?: {
|
|
1242
|
+
[x: string]: unknown;
|
|
1243
|
+
d?: string | undefined;
|
|
1244
|
+
r?: string | undefined;
|
|
1245
|
+
t?: string | undefined;
|
|
1246
|
+
}[] | undefined;
|
|
1247
|
+
p?: string | undefined;
|
|
1248
|
+
q?: string | undefined;
|
|
1249
|
+
qi?: string | undefined;
|
|
1250
|
+
use?: string | undefined;
|
|
1251
|
+
x5c?: string[] | undefined;
|
|
1252
|
+
x5t?: string | undefined;
|
|
1253
|
+
'x5t#S256'?: string | undefined;
|
|
1254
|
+
x5u?: string | undefined;
|
|
1255
|
+
}[];
|
|
1256
|
+
} | undefined;
|
|
1257
|
+
vp_formats?: Record<string, {
|
|
1258
|
+
[x: string]: unknown;
|
|
1259
|
+
alg_values_supported?: string[] | undefined;
|
|
1260
|
+
}> | undefined;
|
|
1261
|
+
vp_formats_supported?: {
|
|
1262
|
+
[x: string]: {
|
|
1263
|
+
[x: string]: unknown;
|
|
1264
|
+
};
|
|
1265
|
+
'dc+sd-jwt'?: {
|
|
1266
|
+
[x: string]: unknown;
|
|
1267
|
+
'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
1268
|
+
'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
1269
|
+
} | undefined;
|
|
1270
|
+
jwt_vc_json?: {
|
|
1271
|
+
[x: string]: unknown;
|
|
1272
|
+
alg_values?: [string, ...string[]] | undefined;
|
|
1273
|
+
} | undefined;
|
|
1274
|
+
ldp_vc?: {
|
|
1275
|
+
[x: string]: unknown;
|
|
1276
|
+
proof_type_values?: [string, ...string[]] | undefined;
|
|
1277
|
+
cryptosuite_values?: [string, ...string[]] | undefined;
|
|
1278
|
+
} | undefined;
|
|
1279
|
+
mso_mdoc?: {
|
|
1280
|
+
[x: string]: unknown;
|
|
1281
|
+
issuer_signed_alg_values?: [number, ...number[]] | undefined;
|
|
1282
|
+
device_signed_alg_values?: [number, ...number[]] | undefined;
|
|
1283
|
+
issuerauth_alg_values?: [number, ...number[]] | undefined;
|
|
1284
|
+
deviceauth_alg_values?: [number, ...number[]] | undefined;
|
|
1285
|
+
} | undefined;
|
|
1286
|
+
} | undefined;
|
|
1287
|
+
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
1288
|
+
} | undefined;
|
|
1289
|
+
state?: string | undefined;
|
|
1290
|
+
transaction_data?: string[] | undefined;
|
|
1291
|
+
trust_chain?: [string, ...string[]] | undefined;
|
|
1292
|
+
verifier_attestations?: {
|
|
1293
|
+
format: string;
|
|
1294
|
+
data: string | Record<string, unknown>;
|
|
1295
|
+
credential_ids?: string[] | undefined;
|
|
1296
|
+
}[] | undefined;
|
|
1297
|
+
verifier_info?: {
|
|
1298
|
+
format: string;
|
|
1299
|
+
data: string | Record<string, unknown>;
|
|
1300
|
+
credential_ids?: string[] | undefined;
|
|
1301
|
+
}[] | undefined;
|
|
1302
|
+
client_id?: string | undefined;
|
|
1303
|
+
expected_origins?: string[] | undefined;
|
|
1304
|
+
client_id_scheme?: undefined;
|
|
1305
|
+
scope?: undefined;
|
|
1306
|
+
} | {
|
|
1307
|
+
[x: string]: unknown;
|
|
1308
|
+
response_type: "vp_token";
|
|
1309
|
+
nonce: string;
|
|
1310
|
+
response_mode: "iae_post" | "iae_post.jwt";
|
|
1311
|
+
dcql_query: Record<string, any>;
|
|
1312
|
+
client_id?: string | undefined;
|
|
1313
|
+
scope?: undefined;
|
|
1314
|
+
client_metadata?: {
|
|
1315
|
+
[x: string]: unknown;
|
|
1316
|
+
logo_uri?: string | undefined;
|
|
1317
|
+
client_name?: string | undefined;
|
|
1318
|
+
authorization_signed_response_alg?: string | undefined;
|
|
1319
|
+
authorization_encrypted_response_alg?: string | undefined;
|
|
1320
|
+
authorization_encrypted_response_enc?: string | undefined;
|
|
1321
|
+
jwks_uri?: string | undefined;
|
|
1322
|
+
jwks?: {
|
|
1323
|
+
[x: string]: unknown;
|
|
1324
|
+
keys: {
|
|
1325
|
+
[x: string]: unknown;
|
|
1326
|
+
kty: string;
|
|
1327
|
+
crv?: string | undefined;
|
|
1328
|
+
x?: string | undefined;
|
|
1329
|
+
y?: string | undefined;
|
|
1330
|
+
e?: string | undefined;
|
|
1331
|
+
n?: string | undefined;
|
|
1332
|
+
alg?: string | undefined;
|
|
1333
|
+
d?: string | undefined;
|
|
1334
|
+
dp?: string | undefined;
|
|
1335
|
+
dq?: string | undefined;
|
|
1336
|
+
ext?: boolean | undefined;
|
|
1337
|
+
k?: string | undefined;
|
|
1338
|
+
key_ops?: string[] | undefined;
|
|
1339
|
+
kid?: string | undefined;
|
|
1340
|
+
oth?: {
|
|
1341
|
+
[x: string]: unknown;
|
|
1342
|
+
d?: string | undefined;
|
|
1343
|
+
r?: string | undefined;
|
|
1344
|
+
t?: string | undefined;
|
|
1345
|
+
}[] | undefined;
|
|
1346
|
+
p?: string | undefined;
|
|
1347
|
+
q?: string | undefined;
|
|
1348
|
+
qi?: string | undefined;
|
|
1349
|
+
use?: string | undefined;
|
|
1350
|
+
x5c?: string[] | undefined;
|
|
1351
|
+
x5t?: string | undefined;
|
|
1352
|
+
'x5t#S256'?: string | undefined;
|
|
1353
|
+
x5u?: string | undefined;
|
|
1354
|
+
}[];
|
|
1355
|
+
} | undefined;
|
|
1356
|
+
vp_formats?: Record<string, {
|
|
1357
|
+
[x: string]: unknown;
|
|
1358
|
+
alg_values_supported?: string[] | undefined;
|
|
1359
|
+
}> | undefined;
|
|
1360
|
+
vp_formats_supported?: {
|
|
1361
|
+
[x: string]: {
|
|
1362
|
+
[x: string]: unknown;
|
|
1363
|
+
};
|
|
1364
|
+
'dc+sd-jwt'?: {
|
|
1365
|
+
[x: string]: unknown;
|
|
1366
|
+
'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
1367
|
+
'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
1368
|
+
} | undefined;
|
|
1369
|
+
jwt_vc_json?: {
|
|
1370
|
+
[x: string]: unknown;
|
|
1371
|
+
alg_values?: [string, ...string[]] | undefined;
|
|
1372
|
+
} | undefined;
|
|
1373
|
+
ldp_vc?: {
|
|
1374
|
+
[x: string]: unknown;
|
|
1375
|
+
proof_type_values?: [string, ...string[]] | undefined;
|
|
1376
|
+
cryptosuite_values?: [string, ...string[]] | undefined;
|
|
1377
|
+
} | undefined;
|
|
1378
|
+
mso_mdoc?: {
|
|
1379
|
+
[x: string]: unknown;
|
|
1380
|
+
issuer_signed_alg_values?: [number, ...number[]] | undefined;
|
|
1381
|
+
device_signed_alg_values?: [number, ...number[]] | undefined;
|
|
1382
|
+
issuerauth_alg_values?: [number, ...number[]] | undefined;
|
|
1383
|
+
deviceauth_alg_values?: [number, ...number[]] | undefined;
|
|
1384
|
+
} | undefined;
|
|
1385
|
+
} | undefined;
|
|
1386
|
+
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
1387
|
+
} | undefined;
|
|
1388
|
+
state?: string | undefined;
|
|
1389
|
+
transaction_data?: string[] | undefined;
|
|
1390
|
+
trust_chain?: [string, ...string[]] | undefined;
|
|
1391
|
+
client_id_scheme?: undefined;
|
|
1392
|
+
verifier_attestations?: {
|
|
1393
|
+
format: string;
|
|
1394
|
+
data: string | Record<string, unknown>;
|
|
1395
|
+
credential_ids?: string[] | undefined;
|
|
1396
|
+
}[] | undefined;
|
|
1397
|
+
verifier_info?: {
|
|
1398
|
+
format: string;
|
|
1399
|
+
data: string | Record<string, unknown>;
|
|
1400
|
+
credential_ids?: string[] | undefined;
|
|
1401
|
+
}[] | undefined;
|
|
1402
|
+
expected_url?: string | undefined;
|
|
1403
|
+
expected_origins?: undefined;
|
|
1404
|
+
};
|
|
1405
|
+
authorizationRequest: string;
|
|
1406
|
+
jar: undefined;
|
|
1407
|
+
}>;
|
|
1408
|
+
//#endregion
|
|
1409
|
+
//#region src/authorization-request/parse-authorization-request-params.d.ts
|
|
1410
|
+
interface ParsedJarRequest {
|
|
1411
|
+
type: 'jar';
|
|
1412
|
+
provided: 'uri' | 'jwt' | 'params';
|
|
1413
|
+
params: Openid4vpJarAuthorizationRequest;
|
|
1414
|
+
}
|
|
1415
|
+
interface ParsedOpenid4vpAuthorizationRequest {
|
|
1416
|
+
type: 'openid4vp';
|
|
1417
|
+
provided: 'uri' | 'jwt' | 'params';
|
|
1418
|
+
params: Openid4vpAuthorizationRequest;
|
|
1419
|
+
}
|
|
1420
|
+
interface ParsedOpenid4vpDcApiAuthorizationRequest {
|
|
1421
|
+
type: 'openid4vp_dc_api';
|
|
1422
|
+
provided: 'uri' | 'jwt' | 'params';
|
|
1423
|
+
params: Openid4vpAuthorizationRequestDcApi;
|
|
1424
|
+
}
|
|
1425
|
+
interface ParsedOpenid4vpIaeAuthorizationRequest {
|
|
1426
|
+
type: 'openid4vp_iae';
|
|
1427
|
+
provided: 'uri' | 'jwt' | 'params';
|
|
1428
|
+
params: Openid4vpAuthorizationRequestIae;
|
|
1429
|
+
}
|
|
1430
|
+
interface ParseOpenid4vpAuthorizationRequestOptions {
|
|
1431
|
+
authorizationRequest: string | Record<string, unknown>;
|
|
1432
|
+
}
|
|
1433
|
+
declare function parseOpenid4vpAuthorizationRequest(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest | ParsedOpenid4vpIaeAuthorizationRequest;
|
|
1434
|
+
//#endregion
|
|
1435
|
+
//#region src/jar/handle-jar-request/verify-jar-request.d.ts
|
|
1436
|
+
interface VerifiedJarRequest {
|
|
1437
|
+
authorizationRequestPayload: JarRequestObjectPayload;
|
|
1438
|
+
sendBy: 'value' | 'reference';
|
|
1439
|
+
decryptionJwk?: Jwk;
|
|
1440
|
+
signer: JwtSignerWithJwk;
|
|
1441
|
+
jwt: DecodeJwtResult<undefined, typeof zJarRequestObjectPayload>;
|
|
1442
|
+
}
|
|
1443
|
+
//#endregion
|
|
1444
|
+
//#region src/models/z-client-metadata.d.ts
|
|
1041
1445
|
declare const zClientMetadata: z.ZodObject<{
|
|
1042
1446
|
logo_uri: z.ZodOptional<z.ZodUnion<[z.ZodURL, z.ZodString]>>;
|
|
1043
1447
|
client_name: z.ZodOptional<z.ZodString>;
|
|
@@ -1106,10 +1510,13 @@ type ClientMetadata = z.infer<typeof zClientMetadata>;
|
|
|
1106
1510
|
/**
|
|
1107
1511
|
* The Openid4vpVersionNumber
|
|
1108
1512
|
*
|
|
1109
|
-
* 100 means 1.0 final
|
|
1513
|
+
* 100 means 1.0 final
|
|
1514
|
+
* 101 means 1.1 draft 1
|
|
1515
|
+
* 110 will mean 1.1 final
|
|
1516
|
+
* all others are pre-1.0 draft versions
|
|
1110
1517
|
*/
|
|
1111
|
-
type Openid4vpVersionNumber = 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 100;
|
|
1112
|
-
declare function parseAuthorizationRequestVersion(request: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi): Openid4vpVersionNumber;
|
|
1518
|
+
type Openid4vpVersionNumber = 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 100 | 101;
|
|
1519
|
+
declare function parseAuthorizationRequestVersion(request: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae): Openid4vpVersionNumber;
|
|
1113
1520
|
//#endregion
|
|
1114
1521
|
//#region src/client-identifier-prefix/z-client-id-prefix.d.ts
|
|
1115
1522
|
declare const zClientIdPrefix: z.ZodEnum<{
|
|
@@ -1232,7 +1639,7 @@ declare function getOpenid4vpClientId(options: GetOpenid4vpClientIdOptions): {
|
|
|
1232
1639
|
*/
|
|
1233
1640
|
clientIdIdentifier: string;
|
|
1234
1641
|
/**
|
|
1235
|
-
* The client id prefix according to the latest
|
|
1642
|
+
* The client id prefix according to the latest version of OpenID4VP. Older prefixes are
|
|
1236
1643
|
* transformed into a singular value. Do not use this for checking the actual client id prefix
|
|
1237
1644
|
* used, but can be used to understand which method is used.
|
|
1238
1645
|
*
|
|
@@ -1293,15 +1700,17 @@ declare function parseTransactionData(options: ParseTransactionDataOptions): Par
|
|
|
1293
1700
|
//#endregion
|
|
1294
1701
|
//#region src/authorization-request/resolve-authorization-request.d.ts
|
|
1295
1702
|
interface ResolveOpenid4vpAuthorizationRequestOptions {
|
|
1296
|
-
authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpJarAuthorizationRequest;
|
|
1703
|
+
authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae | Openid4vpJarAuthorizationRequest;
|
|
1297
1704
|
wallet?: WalletVerificationOptions;
|
|
1298
|
-
|
|
1299
|
-
|
|
1705
|
+
/**
|
|
1706
|
+
* The response mode that is expected for the resolved presentation request.
|
|
1707
|
+
*/
|
|
1708
|
+
responseMode: ExpectedResponseMode;
|
|
1300
1709
|
callbacks: Pick<CallbackContext, 'verifyJwt' | 'decryptJwe' | 'getX509CertificateMetadata' | 'fetch' | 'hash'>;
|
|
1301
1710
|
}
|
|
1302
1711
|
type ResolvedOpenid4vpAuthorizationRequest = {
|
|
1303
1712
|
transactionData?: ParsedTransactionDataEntry[];
|
|
1304
|
-
authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi;
|
|
1713
|
+
authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae;
|
|
1305
1714
|
jar: VerifiedJarRequest | undefined;
|
|
1306
1715
|
client: ParsedClientIdentifier;
|
|
1307
1716
|
pex?: {
|
|
@@ -1319,6 +1728,67 @@ type ResolvedOpenid4vpAuthorizationRequest = {
|
|
|
1319
1728
|
version: Openid4vpVersionNumber;
|
|
1320
1729
|
};
|
|
1321
1730
|
declare function resolveOpenid4vpAuthorizationRequest(options: ResolveOpenid4vpAuthorizationRequestOptions): Promise<ResolvedOpenid4vpAuthorizationRequest>;
|
|
1731
|
+
type ExpectedResponseMode = {
|
|
1732
|
+
/**
|
|
1733
|
+
* Enforces the response is `iae` or `iae_post`, meaning the presentation
|
|
1734
|
+
* is created as part of an issuance session.
|
|
1735
|
+
*/
|
|
1736
|
+
type: 'iae';
|
|
1737
|
+
/**
|
|
1738
|
+
* The expectedUrl for the IAE session. Must always be provided, but will
|
|
1739
|
+
* only be verified if the OpenID4VP request is signed (and thus MUST contain `expected_url`)
|
|
1740
|
+
*/
|
|
1741
|
+
expectedUrl: string;
|
|
1742
|
+
} | {
|
|
1743
|
+
/**
|
|
1744
|
+
* Enforces the response is `dc_api` or `dc_api.jwt` (including legacy support for `w3c_dc_api` and `w3c_dc_api.jwt`),
|
|
1745
|
+
* meaning the presentation will be shared using the Digital Credentials API.
|
|
1746
|
+
*/
|
|
1747
|
+
type: 'dc_api';
|
|
1748
|
+
/**
|
|
1749
|
+
* The expected origin for the DC API session. Must always be provided, but will
|
|
1750
|
+
* only be verified if the OpenID4VP request is signed (and thus MUST contain `expected_origins`)
|
|
1751
|
+
*/
|
|
1752
|
+
expectedOrigin: string;
|
|
1753
|
+
} | {
|
|
1754
|
+
/**
|
|
1755
|
+
* Enforces the response is `direct_post` or `direct_post.jwt`
|
|
1756
|
+
*/
|
|
1757
|
+
type: 'direct_post';
|
|
1758
|
+
};
|
|
1759
|
+
//#endregion
|
|
1760
|
+
//#region src/authorization-request/validate-authorization-request-dc-api.d.ts
|
|
1761
|
+
interface ValidateOpenid4vpAuthorizationRequestDcApiPayloadOptions {
|
|
1762
|
+
params: Openid4vpAuthorizationRequestDcApi;
|
|
1763
|
+
isJarRequest: boolean;
|
|
1764
|
+
disableOriginValidation?: boolean;
|
|
1765
|
+
origin?: string;
|
|
1766
|
+
}
|
|
1767
|
+
/**
|
|
1768
|
+
* Validate the OpenId4Vp Authorization Request parameters for the dc_api response mode
|
|
1769
|
+
*/
|
|
1770
|
+
declare const validateOpenid4vpAuthorizationRequestDcApiPayload: (options: ValidateOpenid4vpAuthorizationRequestDcApiPayloadOptions) => void;
|
|
1771
|
+
//#endregion
|
|
1772
|
+
//#region src/authorization-request/validate-authorization-request-iae.d.ts
|
|
1773
|
+
interface ValidateOpenid4vpAuthorizationRequestIaePayloadOptions {
|
|
1774
|
+
params: Openid4vpAuthorizationRequestIae;
|
|
1775
|
+
isJarRequest: boolean;
|
|
1776
|
+
/** The URL of the endpoint that will receive the response (for validating expected_url) */
|
|
1777
|
+
expectedUrl?: string;
|
|
1778
|
+
disableExpectedUrlValidation?: boolean;
|
|
1779
|
+
}
|
|
1780
|
+
/**
|
|
1781
|
+
* Validate the OpenId4Vp Authorization Request parameters for the IAE (Interactive Authorization Endpoint) response mode
|
|
1782
|
+
*
|
|
1783
|
+
* The IAE flow is part of OpenID4VCI 1.1 and is used when the authorization server needs to
|
|
1784
|
+
* interact directly with the wallet during the authorization process.
|
|
1785
|
+
*
|
|
1786
|
+
* Key validation rules:
|
|
1787
|
+
* - For signed requests (JAR), expected_url parameter is validated against the actual endpoint URL
|
|
1788
|
+
* - expected_url is used instead of expected_origins to prevent replay attacks
|
|
1789
|
+
* - dcql_query must be present
|
|
1790
|
+
*/
|
|
1791
|
+
declare const validateOpenid4vpAuthorizationRequestIaePayload: (options: ValidateOpenid4vpAuthorizationRequestIaePayloadOptions) => void;
|
|
1322
1792
|
//#endregion
|
|
1323
1793
|
//#region src/jarm/metadata/z-jarm-authorization-server-metadata.d.ts
|
|
1324
1794
|
declare const zJarmServerMetadata: z.ZodObject<{
|
|
@@ -1681,7 +2151,7 @@ declare function submitOpenid4vpAuthorizationResponse(options: SubmitOpenid4vpAu
|
|
|
1681
2151
|
//#endregion
|
|
1682
2152
|
//#region src/authorization-response/validate-authorization-response.d.ts
|
|
1683
2153
|
interface ValidateOpenid4vpAuthorizationResponseOptions {
|
|
1684
|
-
authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi;
|
|
2154
|
+
authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | Openid4vpAuthorizationRequestIae;
|
|
1685
2155
|
authorizationResponsePayload: Openid4vpAuthorizationResponse;
|
|
1686
2156
|
}
|
|
1687
2157
|
/**
|
|
@@ -1805,7 +2275,7 @@ interface Openid4vpClientOptions {
|
|
|
1805
2275
|
declare class Openid4vpClient {
|
|
1806
2276
|
private options;
|
|
1807
2277
|
constructor(options: Openid4vpClientOptions);
|
|
1808
|
-
parseOpenid4vpAuthorizationRequest(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest;
|
|
2278
|
+
parseOpenid4vpAuthorizationRequest(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest | ParsedOpenid4vpIaeAuthorizationRequest;
|
|
1809
2279
|
resolveOpenId4vpAuthorizationRequest(options: Omit<ResolveOpenid4vpAuthorizationRequestOptions, 'callbacks'>): Promise<ResolvedOpenid4vpAuthorizationRequest>;
|
|
1810
2280
|
createOpenid4vpAuthorizationResponse(options: Omit<CreateOpenid4vpAuthorizationResponseOptions, 'callbacks'>): Promise<CreateOpenid4vpAuthorizationResponseResult>;
|
|
1811
2281
|
submitOpenid4vpAuthorizationResponse(options: Omit<SubmitOpenid4vpAuthorizationResponseOptions, 'callbacks'>): Promise<{
|
|
@@ -1868,17 +2338,113 @@ declare class Openid4vpVerifier {
|
|
|
1868
2338
|
authorizationRequestPayload: {
|
|
1869
2339
|
[x: string]: unknown;
|
|
1870
2340
|
response_type: "vp_token";
|
|
1871
|
-
client_id: string;
|
|
2341
|
+
client_id: string;
|
|
2342
|
+
nonce: string;
|
|
2343
|
+
redirect_uri?: string | undefined;
|
|
2344
|
+
response_uri?: string | undefined;
|
|
2345
|
+
request_uri?: string | undefined;
|
|
2346
|
+
request_uri_method?: string | undefined;
|
|
2347
|
+
response_mode?: "direct_post" | "direct_post.jwt" | undefined;
|
|
2348
|
+
wallet_nonce?: string | undefined;
|
|
2349
|
+
scope?: string | undefined;
|
|
2350
|
+
presentation_definition?: any;
|
|
2351
|
+
presentation_definition_uri?: string | undefined;
|
|
2352
|
+
dcql_query?: any;
|
|
2353
|
+
client_metadata?: {
|
|
2354
|
+
[x: string]: unknown;
|
|
2355
|
+
logo_uri?: string | undefined;
|
|
2356
|
+
client_name?: string | undefined;
|
|
2357
|
+
authorization_signed_response_alg?: string | undefined;
|
|
2358
|
+
authorization_encrypted_response_alg?: string | undefined;
|
|
2359
|
+
authorization_encrypted_response_enc?: string | undefined;
|
|
2360
|
+
jwks_uri?: string | undefined;
|
|
2361
|
+
jwks?: {
|
|
2362
|
+
[x: string]: unknown;
|
|
2363
|
+
keys: {
|
|
2364
|
+
[x: string]: unknown;
|
|
2365
|
+
kty: string;
|
|
2366
|
+
crv?: string | undefined;
|
|
2367
|
+
x?: string | undefined;
|
|
2368
|
+
y?: string | undefined;
|
|
2369
|
+
e?: string | undefined;
|
|
2370
|
+
n?: string | undefined;
|
|
2371
|
+
alg?: string | undefined;
|
|
2372
|
+
d?: string | undefined;
|
|
2373
|
+
dp?: string | undefined;
|
|
2374
|
+
dq?: string | undefined;
|
|
2375
|
+
ext?: boolean | undefined;
|
|
2376
|
+
k?: string | undefined;
|
|
2377
|
+
key_ops?: string[] | undefined;
|
|
2378
|
+
kid?: string | undefined;
|
|
2379
|
+
oth?: {
|
|
2380
|
+
[x: string]: unknown;
|
|
2381
|
+
d?: string | undefined;
|
|
2382
|
+
r?: string | undefined;
|
|
2383
|
+
t?: string | undefined;
|
|
2384
|
+
}[] | undefined;
|
|
2385
|
+
p?: string | undefined;
|
|
2386
|
+
q?: string | undefined;
|
|
2387
|
+
qi?: string | undefined;
|
|
2388
|
+
use?: string | undefined;
|
|
2389
|
+
x5c?: string[] | undefined;
|
|
2390
|
+
x5t?: string | undefined;
|
|
2391
|
+
'x5t#S256'?: string | undefined;
|
|
2392
|
+
x5u?: string | undefined;
|
|
2393
|
+
}[];
|
|
2394
|
+
} | undefined;
|
|
2395
|
+
vp_formats?: Record<string, {
|
|
2396
|
+
[x: string]: unknown;
|
|
2397
|
+
alg_values_supported?: string[] | undefined;
|
|
2398
|
+
}> | undefined;
|
|
2399
|
+
vp_formats_supported?: {
|
|
2400
|
+
[x: string]: {
|
|
2401
|
+
[x: string]: unknown;
|
|
2402
|
+
};
|
|
2403
|
+
'dc+sd-jwt'?: {
|
|
2404
|
+
[x: string]: unknown;
|
|
2405
|
+
'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
2406
|
+
'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
2407
|
+
} | undefined;
|
|
2408
|
+
jwt_vc_json?: {
|
|
2409
|
+
[x: string]: unknown;
|
|
2410
|
+
alg_values?: [string, ...string[]] | undefined;
|
|
2411
|
+
} | undefined;
|
|
2412
|
+
ldp_vc?: {
|
|
2413
|
+
[x: string]: unknown;
|
|
2414
|
+
proof_type_values?: [string, ...string[]] | undefined;
|
|
2415
|
+
cryptosuite_values?: [string, ...string[]] | undefined;
|
|
2416
|
+
} | undefined;
|
|
2417
|
+
mso_mdoc?: {
|
|
2418
|
+
[x: string]: unknown;
|
|
2419
|
+
issuer_signed_alg_values?: [number, ...number[]] | undefined;
|
|
2420
|
+
device_signed_alg_values?: [number, ...number[]] | undefined;
|
|
2421
|
+
issuerauth_alg_values?: [number, ...number[]] | undefined;
|
|
2422
|
+
deviceauth_alg_values?: [number, ...number[]] | undefined;
|
|
2423
|
+
} | undefined;
|
|
2424
|
+
} | undefined;
|
|
2425
|
+
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
2426
|
+
} | undefined;
|
|
2427
|
+
client_metadata_uri?: string | undefined;
|
|
2428
|
+
state?: string | undefined;
|
|
2429
|
+
transaction_data?: string[] | undefined;
|
|
2430
|
+
trust_chain?: [string, ...string[]] | undefined;
|
|
2431
|
+
client_id_scheme?: "redirect_uri" | "pre-registered" | "entity_id" | "did" | "verifier_attestation" | "x509_san_dns" | "x509_san_uri" | "x509_hash" | undefined;
|
|
2432
|
+
verifier_attestations?: {
|
|
2433
|
+
format: string;
|
|
2434
|
+
data: string | Record<string, unknown>;
|
|
2435
|
+
credential_ids?: string[] | undefined;
|
|
2436
|
+
}[] | undefined;
|
|
2437
|
+
verifier_info?: {
|
|
2438
|
+
format: string;
|
|
2439
|
+
data: string | Record<string, unknown>;
|
|
2440
|
+
credential_ids?: string[] | undefined;
|
|
2441
|
+
}[] | undefined;
|
|
2442
|
+
} | {
|
|
2443
|
+
[x: string]: unknown;
|
|
2444
|
+
response_type: "vp_token";
|
|
1872
2445
|
nonce: string;
|
|
1873
|
-
|
|
1874
|
-
response_uri?: string | undefined;
|
|
1875
|
-
request_uri?: string | undefined;
|
|
1876
|
-
request_uri_method?: string | undefined;
|
|
1877
|
-
response_mode?: "direct_post" | "direct_post.jwt" | undefined;
|
|
1878
|
-
wallet_nonce?: string | undefined;
|
|
1879
|
-
scope?: string | undefined;
|
|
2446
|
+
response_mode: "dc_api" | "dc_api.jwt" | "w3c_dc_api.jwt" | "w3c_dc_api";
|
|
1880
2447
|
presentation_definition?: any;
|
|
1881
|
-
presentation_definition_uri?: string | undefined;
|
|
1882
2448
|
dcql_query?: any;
|
|
1883
2449
|
client_metadata?: {
|
|
1884
2450
|
[x: string]: unknown;
|
|
@@ -1954,11 +2520,9 @@ declare class Openid4vpVerifier {
|
|
|
1954
2520
|
} | undefined;
|
|
1955
2521
|
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
1956
2522
|
} | undefined;
|
|
1957
|
-
client_metadata_uri?: string | undefined;
|
|
1958
2523
|
state?: string | undefined;
|
|
1959
2524
|
transaction_data?: string[] | undefined;
|
|
1960
2525
|
trust_chain?: [string, ...string[]] | undefined;
|
|
1961
|
-
client_id_scheme?: "redirect_uri" | "pre-registered" | "entity_id" | "did" | "verifier_attestation" | "x509_san_dns" | "x509_san_uri" | "x509_hash" | undefined;
|
|
1962
2526
|
verifier_attestations?: {
|
|
1963
2527
|
format: string;
|
|
1964
2528
|
data: string | Record<string, unknown>;
|
|
@@ -1969,13 +2533,18 @@ declare class Openid4vpVerifier {
|
|
|
1969
2533
|
data: string | Record<string, unknown>;
|
|
1970
2534
|
credential_ids?: string[] | undefined;
|
|
1971
2535
|
}[] | undefined;
|
|
2536
|
+
client_id?: string | undefined;
|
|
2537
|
+
expected_origins?: string[] | undefined;
|
|
2538
|
+
client_id_scheme?: undefined;
|
|
2539
|
+
scope?: undefined;
|
|
1972
2540
|
} | {
|
|
1973
2541
|
[x: string]: unknown;
|
|
1974
2542
|
response_type: "vp_token";
|
|
1975
2543
|
nonce: string;
|
|
1976
|
-
response_mode: "
|
|
1977
|
-
|
|
1978
|
-
|
|
2544
|
+
response_mode: "iae_post" | "iae_post.jwt";
|
|
2545
|
+
dcql_query: Record<string, any>;
|
|
2546
|
+
client_id?: string | undefined;
|
|
2547
|
+
scope?: undefined;
|
|
1979
2548
|
client_metadata?: {
|
|
1980
2549
|
[x: string]: unknown;
|
|
1981
2550
|
logo_uri?: string | undefined;
|
|
@@ -2053,6 +2622,7 @@ declare class Openid4vpVerifier {
|
|
|
2053
2622
|
state?: string | undefined;
|
|
2054
2623
|
transaction_data?: string[] | undefined;
|
|
2055
2624
|
trust_chain?: [string, ...string[]] | undefined;
|
|
2625
|
+
client_id_scheme?: undefined;
|
|
2056
2626
|
verifier_attestations?: {
|
|
2057
2627
|
format: string;
|
|
2058
2628
|
data: string | Record<string, unknown>;
|
|
@@ -2063,10 +2633,8 @@ declare class Openid4vpVerifier {
|
|
|
2063
2633
|
data: string | Record<string, unknown>;
|
|
2064
2634
|
credential_ids?: string[] | undefined;
|
|
2065
2635
|
}[] | undefined;
|
|
2066
|
-
|
|
2067
|
-
expected_origins?:
|
|
2068
|
-
client_id_scheme?: undefined;
|
|
2069
|
-
scope?: undefined;
|
|
2636
|
+
expected_url?: string | undefined;
|
|
2637
|
+
expected_origins?: undefined;
|
|
2070
2638
|
};
|
|
2071
2639
|
authorizationRequestObject: {
|
|
2072
2640
|
[x: string]: unknown;
|
|
@@ -2353,6 +2921,104 @@ declare class Openid4vpVerifier {
|
|
|
2353
2921
|
expected_origins?: string[] | undefined;
|
|
2354
2922
|
client_id_scheme?: undefined;
|
|
2355
2923
|
scope?: undefined;
|
|
2924
|
+
} | {
|
|
2925
|
+
[x: string]: unknown;
|
|
2926
|
+
response_type: "vp_token";
|
|
2927
|
+
nonce: string;
|
|
2928
|
+
response_mode: "iae_post" | "iae_post.jwt";
|
|
2929
|
+
dcql_query: Record<string, any>;
|
|
2930
|
+
client_id?: string | undefined;
|
|
2931
|
+
scope?: undefined;
|
|
2932
|
+
client_metadata?: {
|
|
2933
|
+
[x: string]: unknown;
|
|
2934
|
+
logo_uri?: string | undefined;
|
|
2935
|
+
client_name?: string | undefined;
|
|
2936
|
+
authorization_signed_response_alg?: string | undefined;
|
|
2937
|
+
authorization_encrypted_response_alg?: string | undefined;
|
|
2938
|
+
authorization_encrypted_response_enc?: string | undefined;
|
|
2939
|
+
jwks_uri?: string | undefined;
|
|
2940
|
+
jwks?: {
|
|
2941
|
+
[x: string]: unknown;
|
|
2942
|
+
keys: {
|
|
2943
|
+
[x: string]: unknown;
|
|
2944
|
+
kty: string;
|
|
2945
|
+
crv?: string | undefined;
|
|
2946
|
+
x?: string | undefined;
|
|
2947
|
+
y?: string | undefined;
|
|
2948
|
+
e?: string | undefined;
|
|
2949
|
+
n?: string | undefined;
|
|
2950
|
+
alg?: string | undefined;
|
|
2951
|
+
d?: string | undefined;
|
|
2952
|
+
dp?: string | undefined;
|
|
2953
|
+
dq?: string | undefined;
|
|
2954
|
+
ext?: boolean | undefined;
|
|
2955
|
+
k?: string | undefined;
|
|
2956
|
+
key_ops?: string[] | undefined;
|
|
2957
|
+
kid?: string | undefined;
|
|
2958
|
+
oth?: {
|
|
2959
|
+
[x: string]: unknown;
|
|
2960
|
+
d?: string | undefined;
|
|
2961
|
+
r?: string | undefined;
|
|
2962
|
+
t?: string | undefined;
|
|
2963
|
+
}[] | undefined;
|
|
2964
|
+
p?: string | undefined;
|
|
2965
|
+
q?: string | undefined;
|
|
2966
|
+
qi?: string | undefined;
|
|
2967
|
+
use?: string | undefined;
|
|
2968
|
+
x5c?: string[] | undefined;
|
|
2969
|
+
x5t?: string | undefined;
|
|
2970
|
+
'x5t#S256'?: string | undefined;
|
|
2971
|
+
x5u?: string | undefined;
|
|
2972
|
+
}[];
|
|
2973
|
+
} | undefined;
|
|
2974
|
+
vp_formats?: Record<string, {
|
|
2975
|
+
[x: string]: unknown;
|
|
2976
|
+
alg_values_supported?: string[] | undefined;
|
|
2977
|
+
}> | undefined;
|
|
2978
|
+
vp_formats_supported?: {
|
|
2979
|
+
[x: string]: {
|
|
2980
|
+
[x: string]: unknown;
|
|
2981
|
+
};
|
|
2982
|
+
'dc+sd-jwt'?: {
|
|
2983
|
+
[x: string]: unknown;
|
|
2984
|
+
'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
2985
|
+
'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
2986
|
+
} | undefined;
|
|
2987
|
+
jwt_vc_json?: {
|
|
2988
|
+
[x: string]: unknown;
|
|
2989
|
+
alg_values?: [string, ...string[]] | undefined;
|
|
2990
|
+
} | undefined;
|
|
2991
|
+
ldp_vc?: {
|
|
2992
|
+
[x: string]: unknown;
|
|
2993
|
+
proof_type_values?: [string, ...string[]] | undefined;
|
|
2994
|
+
cryptosuite_values?: [string, ...string[]] | undefined;
|
|
2995
|
+
} | undefined;
|
|
2996
|
+
mso_mdoc?: {
|
|
2997
|
+
[x: string]: unknown;
|
|
2998
|
+
issuer_signed_alg_values?: [number, ...number[]] | undefined;
|
|
2999
|
+
device_signed_alg_values?: [number, ...number[]] | undefined;
|
|
3000
|
+
issuerauth_alg_values?: [number, ...number[]] | undefined;
|
|
3001
|
+
deviceauth_alg_values?: [number, ...number[]] | undefined;
|
|
3002
|
+
} | undefined;
|
|
3003
|
+
} | undefined;
|
|
3004
|
+
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
3005
|
+
} | undefined;
|
|
3006
|
+
state?: string | undefined;
|
|
3007
|
+
transaction_data?: string[] | undefined;
|
|
3008
|
+
trust_chain?: [string, ...string[]] | undefined;
|
|
3009
|
+
client_id_scheme?: undefined;
|
|
3010
|
+
verifier_attestations?: {
|
|
3011
|
+
format: string;
|
|
3012
|
+
data: string | Record<string, unknown>;
|
|
3013
|
+
credential_ids?: string[] | undefined;
|
|
3014
|
+
}[] | undefined;
|
|
3015
|
+
verifier_info?: {
|
|
3016
|
+
format: string;
|
|
3017
|
+
data: string | Record<string, unknown>;
|
|
3018
|
+
credential_ids?: string[] | undefined;
|
|
3019
|
+
}[] | undefined;
|
|
3020
|
+
expected_url?: string | undefined;
|
|
3021
|
+
expected_origins?: undefined;
|
|
2356
3022
|
};
|
|
2357
3023
|
authorizationRequestObject: {
|
|
2358
3024
|
[x: string]: unknown;
|
|
@@ -2556,11 +3222,109 @@ declare class Openid4vpVerifier {
|
|
|
2556
3222
|
expected_origins?: string[] | undefined;
|
|
2557
3223
|
client_id_scheme?: undefined;
|
|
2558
3224
|
scope?: undefined;
|
|
3225
|
+
} | {
|
|
3226
|
+
[x: string]: unknown;
|
|
3227
|
+
response_type: "vp_token";
|
|
3228
|
+
nonce: string;
|
|
3229
|
+
response_mode: "iae_post" | "iae_post.jwt";
|
|
3230
|
+
dcql_query: Record<string, any>;
|
|
3231
|
+
client_id?: string | undefined;
|
|
3232
|
+
scope?: undefined;
|
|
3233
|
+
client_metadata?: {
|
|
3234
|
+
[x: string]: unknown;
|
|
3235
|
+
logo_uri?: string | undefined;
|
|
3236
|
+
client_name?: string | undefined;
|
|
3237
|
+
authorization_signed_response_alg?: string | undefined;
|
|
3238
|
+
authorization_encrypted_response_alg?: string | undefined;
|
|
3239
|
+
authorization_encrypted_response_enc?: string | undefined;
|
|
3240
|
+
jwks_uri?: string | undefined;
|
|
3241
|
+
jwks?: {
|
|
3242
|
+
[x: string]: unknown;
|
|
3243
|
+
keys: {
|
|
3244
|
+
[x: string]: unknown;
|
|
3245
|
+
kty: string;
|
|
3246
|
+
crv?: string | undefined;
|
|
3247
|
+
x?: string | undefined;
|
|
3248
|
+
y?: string | undefined;
|
|
3249
|
+
e?: string | undefined;
|
|
3250
|
+
n?: string | undefined;
|
|
3251
|
+
alg?: string | undefined;
|
|
3252
|
+
d?: string | undefined;
|
|
3253
|
+
dp?: string | undefined;
|
|
3254
|
+
dq?: string | undefined;
|
|
3255
|
+
ext?: boolean | undefined;
|
|
3256
|
+
k?: string | undefined;
|
|
3257
|
+
key_ops?: string[] | undefined;
|
|
3258
|
+
kid?: string | undefined;
|
|
3259
|
+
oth?: {
|
|
3260
|
+
[x: string]: unknown;
|
|
3261
|
+
d?: string | undefined;
|
|
3262
|
+
r?: string | undefined;
|
|
3263
|
+
t?: string | undefined;
|
|
3264
|
+
}[] | undefined;
|
|
3265
|
+
p?: string | undefined;
|
|
3266
|
+
q?: string | undefined;
|
|
3267
|
+
qi?: string | undefined;
|
|
3268
|
+
use?: string | undefined;
|
|
3269
|
+
x5c?: string[] | undefined;
|
|
3270
|
+
x5t?: string | undefined;
|
|
3271
|
+
'x5t#S256'?: string | undefined;
|
|
3272
|
+
x5u?: string | undefined;
|
|
3273
|
+
}[];
|
|
3274
|
+
} | undefined;
|
|
3275
|
+
vp_formats?: Record<string, {
|
|
3276
|
+
[x: string]: unknown;
|
|
3277
|
+
alg_values_supported?: string[] | undefined;
|
|
3278
|
+
}> | undefined;
|
|
3279
|
+
vp_formats_supported?: {
|
|
3280
|
+
[x: string]: {
|
|
3281
|
+
[x: string]: unknown;
|
|
3282
|
+
};
|
|
3283
|
+
'dc+sd-jwt'?: {
|
|
3284
|
+
[x: string]: unknown;
|
|
3285
|
+
'sd-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
3286
|
+
'kb-jwt_alg_values'?: [string, ...string[]] | undefined;
|
|
3287
|
+
} | undefined;
|
|
3288
|
+
jwt_vc_json?: {
|
|
3289
|
+
[x: string]: unknown;
|
|
3290
|
+
alg_values?: [string, ...string[]] | undefined;
|
|
3291
|
+
} | undefined;
|
|
3292
|
+
ldp_vc?: {
|
|
3293
|
+
[x: string]: unknown;
|
|
3294
|
+
proof_type_values?: [string, ...string[]] | undefined;
|
|
3295
|
+
cryptosuite_values?: [string, ...string[]] | undefined;
|
|
3296
|
+
} | undefined;
|
|
3297
|
+
mso_mdoc?: {
|
|
3298
|
+
[x: string]: unknown;
|
|
3299
|
+
issuer_signed_alg_values?: [number, ...number[]] | undefined;
|
|
3300
|
+
device_signed_alg_values?: [number, ...number[]] | undefined;
|
|
3301
|
+
issuerauth_alg_values?: [number, ...number[]] | undefined;
|
|
3302
|
+
deviceauth_alg_values?: [number, ...number[]] | undefined;
|
|
3303
|
+
} | undefined;
|
|
3304
|
+
} | undefined;
|
|
3305
|
+
encrypted_response_enc_values_supported?: string[] | undefined;
|
|
3306
|
+
} | undefined;
|
|
3307
|
+
state?: string | undefined;
|
|
3308
|
+
transaction_data?: string[] | undefined;
|
|
3309
|
+
trust_chain?: [string, ...string[]] | undefined;
|
|
3310
|
+
client_id_scheme?: undefined;
|
|
3311
|
+
verifier_attestations?: {
|
|
3312
|
+
format: string;
|
|
3313
|
+
data: string | Record<string, unknown>;
|
|
3314
|
+
credential_ids?: string[] | undefined;
|
|
3315
|
+
}[] | undefined;
|
|
3316
|
+
verifier_info?: {
|
|
3317
|
+
format: string;
|
|
3318
|
+
data: string | Record<string, unknown>;
|
|
3319
|
+
credential_ids?: string[] | undefined;
|
|
3320
|
+
}[] | undefined;
|
|
3321
|
+
expected_url?: string | undefined;
|
|
3322
|
+
expected_origins?: undefined;
|
|
2559
3323
|
};
|
|
2560
3324
|
authorizationRequest: string;
|
|
2561
3325
|
jar: undefined;
|
|
2562
3326
|
}>;
|
|
2563
|
-
parseOpenid4vpAuthorizationRequestPayload(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest;
|
|
3327
|
+
parseOpenid4vpAuthorizationRequestPayload(options: ParseOpenid4vpAuthorizationRequestOptions): ParsedOpenid4vpAuthorizationRequest | ParsedJarRequest | ParsedOpenid4vpDcApiAuthorizationRequest | ParsedOpenid4vpIaeAuthorizationRequest;
|
|
2564
3328
|
parseOpenid4vpAuthorizationResponse(options: ParseOpenid4vpAuthorizationResponseOptions): Promise<ParsedOpenid4vpAuthorizationResponse>;
|
|
2565
3329
|
validateOpenid4vpAuthorizationResponsePayload(options: ValidateOpenid4vpAuthorizationResponseOptions): ValidateOpenid4VpAuthorizationResponseResult;
|
|
2566
3330
|
parsePexVpToken(vpToken: unknown): [string | Record<string, any>, ...(string | Record<string, any>)[]];
|
|
@@ -2581,5 +3345,5 @@ declare class Openid4vpVerifier {
|
|
|
2581
3345
|
declare function parsePexVpToken(vpToken: unknown): [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]];
|
|
2582
3346
|
declare function parseDcqlVpToken(vpToken: unknown): Record<string, [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]]>;
|
|
2583
3347
|
//#endregion
|
|
2584
|
-
export { type ClientIdPrefix, type ClientMetadata, type CreateOpenid4vpAuthorizationRequestOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type CredentialFormat, type GetOpenid4vpClientIdOptions, type JarmClientMetadata, JarmMode, type Openid4vpAuthorizationRequest, type Openid4vpAuthorizationRequestDcApi, type Openid4vpAuthorizationResponse, Openid4vpClient, Openid4vpVerifier, type Openid4vpVersionNumber, type ParseJarmAuthorizationResponseOptions, type ParseOpenid4vpAuthorizationRequestOptions, type ParseOpenid4vpAuthorizationResponseOptions, type ParseTransactionDataOptions, type ParsedOpenid4vpAuthorizationResponse, type ProofFormat, type ResolveOpenid4vpAuthorizationRequestOptions, type ResolvedOpenid4vpAuthorizationRequest, type SubmitOpenid4vpAuthorizationResponseOptions, type TransactionDataEntry, type TransactionDataHashesCredentials, type ValidateOpenid4VpAuthorizationResponseResult, type ValidateOpenid4VpDcqlAuthorizationResponseResult, type ValidateOpenid4VpPexAuthorizationResponseResult, type ValidateOpenid4vpAuthorizationRequestPayloadOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type VerifiedTransactionDataEntry, type VerifierAttestation, type VerifierAttestations, type VerifyJarmAuthorizationResponseOptions, type VerifyTransactionDataOptions, type VpToken, type VpTokenDcql, type VpTokenPex, type VpTokenPresentationEntry, type WalletMetadata, type WalletVerificationOptions, calculateX509HashClientIdPrefixValue, createOpenid4vpAuthorizationRequest, createOpenid4vpAuthorizationResponse, extractEncryptionJwkFromJwks, getOpenid4vpClientId, isJarmResponseMode, isOpenid4vpAuthorizationRequestDcApi, parseAuthorizationRequestVersion, parseDcqlVpToken, parseJarmAuthorizationResponse, parseOpenid4VpAuthorizationResponsePayload, parseOpenid4vpAuthorizationRequest, parseOpenid4vpAuthorizationResponse, parsePexVpToken, parseTransactionData, resolveOpenid4vpAuthorizationRequest, submitOpenid4vpAuthorizationResponse, validateOpenid4vpAuthorizationRequestPayload, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zClientIdPrefix, zClientMetadata, zCredentialFormat, zJarmClientMetadata, zOpenid4vpAuthorizationResponse, zProofFormat, zVerifierAttestations, zWalletMetadata };
|
|
3348
|
+
export { type ClientIdPrefix, type ClientMetadata, type CreateOpenid4vpAuthorizationRequestOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type CredentialFormat, type GetOpenid4vpClientIdOptions, type JarmClientMetadata, JarmMode, type Openid4vpAuthorizationRequest, type Openid4vpAuthorizationRequestDcApi, type Openid4vpAuthorizationRequestIae, type Openid4vpAuthorizationResponse, Openid4vpClient, Openid4vpVerifier, type Openid4vpVersionNumber, type ParseJarmAuthorizationResponseOptions, type ParseOpenid4vpAuthorizationRequestOptions, type ParseOpenid4vpAuthorizationResponseOptions, type ParseTransactionDataOptions, type ParsedOpenid4vpAuthorizationResponse, type ProofFormat, type ResolveOpenid4vpAuthorizationRequestOptions, type ResolvedOpenid4vpAuthorizationRequest, type SubmitOpenid4vpAuthorizationResponseOptions, type TransactionDataEntry, type TransactionDataHashesCredentials, type ValidateOpenid4VpAuthorizationResponseResult, type ValidateOpenid4VpDcqlAuthorizationResponseResult, type ValidateOpenid4VpPexAuthorizationResponseResult, type ValidateOpenid4vpAuthorizationRequestDcApiPayloadOptions, type ValidateOpenid4vpAuthorizationRequestIaePayloadOptions, type ValidateOpenid4vpAuthorizationRequestPayloadOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type VerifiedTransactionDataEntry, type VerifierAttestation, type VerifierAttestations, type VerifyJarmAuthorizationResponseOptions, type VerifyTransactionDataOptions, type VpToken, type VpTokenDcql, type VpTokenPex, type VpTokenPresentationEntry, type WalletMetadata, type WalletVerificationOptions, calculateX509HashClientIdPrefixValue, createOpenid4vpAuthorizationRequest, createOpenid4vpAuthorizationResponse, extractEncryptionJwkFromJwks, getOpenid4vpClientId, isJarmResponseMode, isOpenid4vpAuthorizationRequestDcApi, isOpenid4vpAuthorizationRequestIae, parseAuthorizationRequestVersion, parseDcqlVpToken, parseJarmAuthorizationResponse, parseOpenid4VpAuthorizationResponsePayload, parseOpenid4vpAuthorizationRequest, parseOpenid4vpAuthorizationResponse, parsePexVpToken, parseTransactionData, resolveOpenid4vpAuthorizationRequest, submitOpenid4vpAuthorizationResponse, validateOpenid4vpAuthorizationRequestDcApiPayload, validateOpenid4vpAuthorizationRequestIaePayload, validateOpenid4vpAuthorizationRequestPayload, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zClientIdPrefix, zClientMetadata, zCredentialFormat, zJarmClientMetadata, zOpenid4vpAuthorizationResponse, zProofFormat, zVerifierAttestations, zWalletMetadata };
|
|
2585
3349
|
//# sourceMappingURL=index.d.mts.map
|