@pagopa/io-react-native-wallet 0.27.1 → 0.28.1

package/lib/typescript/trust/index.d.ts

@@ -1,14 +1,15 @@
-import { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration, CredentialIssuerEntityConfiguration, RelyingPartyEntityConfiguration, EntityConfiguration, EntityStatement } from "./types";
+import { CredentialIssuerEntityConfiguration, EntityConfiguration, EntityStatement, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration, WalletProviderEntityConfiguration } from "./types";
 import { validateTrustChain } from "./chain";
+import type { JWK } from "../utils/jwk";
 export type { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration, CredentialIssuerEntityConfiguration, RelyingPartyEntityConfiguration, EntityConfiguration, EntityStatement, };
 /**
  * Verify a given trust chain is actually valid.
  * It can handle fast chain renewal, which means we try to fetch a fresh version of each statement.
  *
  * @param trustAnchorEntity The entity configuration of the known trust anchor
- * @param chain The chain of statements to be validate
- * @param options.renewOnFail Whether to renew the provided chain if the validation fails at first. Default: true
- * @param options.appFetch Fetch api implementation. Default: the built-in implementation
+ * @param chain The chain of statements to be validated
+ * @param renewOnFail Whether to renew the provided chain if the validation fails at first. Default: true
+ * @param appFetch Fetch api implementation. Default: the built-in implementation
  * @returns The result of the chain validation
  * @throws {IoWalletError} When either validation or renewal fail
  */
@@ -20,7 +21,7 @@ export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityCon
  * Fetch the signed entity configuration token for an entity
  *
  * @param entityBaseUrl The url of the entity to fetch
- * @param param.appFetch (optional) fetch api implemention
+ * @param appFetch (optional) fetch api implementation
  * @returns The signed Entity Configuration token
  */
 export declare function getSignedEntityConfiguration(entityBaseUrl: string, { appFetch, }?: {
@@ -38,6 +39,7 @@ export declare function getSignedEntityConfiguration(entityBaseUrl: string, { ap
  *
  * @param entityBaseUrl The base url of the entity.
  * @param schema The expected schema of the entity configuration, according to the kind of entity we are fetching from.
+ * @param options An optional object with additional options.
  * @param options.appFetch An optional instance of the http client to be used.
  * @returns The parsed entity configuration object
  * @throws {IoWalletError} If the http request fails
@@ -59,11 +61,6 @@ declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema:
     appFetch?: GlobalFetch["fetch"];
 }): Promise<EntityConfiguration>;
 export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
         sub: string;
@@ -102,6 +99,9 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -117,6 +117,11 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         metadata: {
@@ -159,11 +164,6 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
     };
 }>;
 export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
         sub: string;
@@ -202,6 +202,9 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -217,6 +220,11 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         jwks: {
@@ -282,12 +290,12 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 revocation_endpoint: string;
                 status_attestation_endpoint: string;
                 credential_configurations_supported: Record<string, {
+                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
+                    scope: string;
                     display: {
                         name: string;
                         locale: string;
                     }[];
-                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
-                    scope: string;
                     claims: Record<string, {
                         value_type: string;
                         display: {
@@ -308,6 +316,7 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 }>;
             };
             oauth_authorization_server: {
+                request_object_signing_alg_values_supported: string[];
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -346,8 +355,80 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 response_modes_supported: string[];
                 token_endpoint_auth_methods_supported: string[];
                 token_endpoint_auth_signing_alg_values_supported: string[];
-                request_object_signing_alg_values_supported: string[];
             };
+            openid_credential_verifier?: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                application_type?: string | undefined;
+                client_id?: string | undefined;
+                client_name?: string | undefined;
+                contacts?: string[] | undefined;
+                presentation_definition?: {
+                    id: string;
+                    input_descriptors: {
+                        id: string;
+                        constraints: {
+                            fields?: {
+                                path: string[];
+                                id?: string | undefined;
+                                purpose?: string | undefined;
+                                name?: string | undefined;
+                                filter?: any;
+                                optional?: boolean | undefined;
+                                intent_to_retain?: boolean | undefined;
+                            }[] | undefined;
+                            limit_disclosure?: "required" | "preferred" | undefined;
+                        };
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        format?: Record<string, any> | undefined;
+                        group?: string | undefined;
+                    }[];
+                    name?: string | undefined;
+                    purpose?: string | undefined;
+                    submission_requirements?: {
+                        rule: string;
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        from?: string | undefined;
+                        from_nested?: {
+                            rule: string;
+                            from: string;
+                            name?: string | undefined;
+                            purpose?: string | undefined;
+                        }[] | undefined;
+                        count?: number | undefined;
+                    }[] | undefined;
+                } | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
+            } | undefined;
             wallet_relying_party?: {
                 jwks: {
                     keys: {
@@ -384,11 +465,6 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
     };
 }>;
 export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
         sub: string;
@@ -427,6 +503,9 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -442,13 +521,13 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
     } & {
         [k: string]: unknown;
     };
-}>;
-export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
     header: {
         alg: string;
         kid: string;
         typ: "entity-statement+jwt";
     };
+}>;
+export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
     payload: {
         iss: string;
         sub: string;
@@ -487,6 +566,9 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -502,10 +584,15 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         metadata: {
-            wallet_relying_party: {
+            openid_credential_verifier: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -536,16 +623,52 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
                 client_id?: string | undefined;
                 client_name?: string | undefined;
                 contacts?: string[] | undefined;
+                presentation_definition?: {
+                    id: string;
+                    input_descriptors: {
+                        id: string;
+                        constraints: {
+                            fields?: {
+                                path: string[];
+                                id?: string | undefined;
+                                purpose?: string | undefined;
+                                name?: string | undefined;
+                                filter?: any;
+                                optional?: boolean | undefined;
+                                intent_to_retain?: boolean | undefined;
+                            }[] | undefined;
+                            limit_disclosure?: "required" | "preferred" | undefined;
+                        };
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        format?: Record<string, any> | undefined;
+                        group?: string | undefined;
+                    }[];
+                    name?: string | undefined;
+                    purpose?: string | undefined;
+                    submission_requirements?: {
+                        rule: string;
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        from?: string | undefined;
+                        from_nested?: {
+                            rule: string;
+                            from: string;
+                            name?: string | undefined;
+                            purpose?: string | undefined;
+                        }[] | undefined;
+                        count?: number | undefined;
+                    }[] | undefined;
+                } | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             };
         };
     };
 }>;
 export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
         sub: string;
@@ -584,6 +707,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -599,12 +725,12 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     } & {
         [k: string]: unknown;
     };
-} | ({
     header: {
         alg: string;
         kid: string;
         typ: "entity-statement+jwt";
     };
+} | ({
     payload: {
         iss: string;
         sub: string;
@@ -643,6 +769,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -658,6 +787,11 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         jwks: {
@@ -723,12 +857,12 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 revocation_endpoint: string;
                 status_attestation_endpoint: string;
                 credential_configurations_supported: Record<string, {
+                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
+                    scope: string;
                     display: {
                         name: string;
                         locale: string;
                     }[];
-                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
-                    scope: string;
                     claims: Record<string, {
                         value_type: string;
                         display: {
@@ -749,6 +883,7 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 }>;
             };
             oauth_authorization_server: {
+                request_object_signing_alg_values_supported: string[];
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -787,8 +922,80 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 response_modes_supported: string[];
                 token_endpoint_auth_methods_supported: string[];
                 token_endpoint_auth_signing_alg_values_supported: string[];
-                request_object_signing_alg_values_supported: string[];
             };
+            openid_credential_verifier?: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                application_type?: string | undefined;
+                client_id?: string | undefined;
+                client_name?: string | undefined;
+                contacts?: string[] | undefined;
+                presentation_definition?: {
+                    id: string;
+                    input_descriptors: {
+                        id: string;
+                        constraints: {
+                            fields?: {
+                                path: string[];
+                                id?: string | undefined;
+                                purpose?: string | undefined;
+                                name?: string | undefined;
+                                filter?: any;
+                                optional?: boolean | undefined;
+                                intent_to_retain?: boolean | undefined;
+                            }[] | undefined;
+                            limit_disclosure?: "required" | "preferred" | undefined;
+                        };
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        format?: Record<string, any> | undefined;
+                        group?: string | undefined;
+                    }[];
+                    name?: string | undefined;
+                    purpose?: string | undefined;
+                    submission_requirements?: {
+                        rule: string;
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        from?: string | undefined;
+                        from_nested?: {
+                            rule: string;
+                            from: string;
+                            name?: string | undefined;
+                            purpose?: string | undefined;
+                        }[] | undefined;
+                        count?: number | undefined;
+                    }[] | undefined;
+                } | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
+            } | undefined;
             wallet_relying_party?: {
                 jwks: {
                     keys: {
@@ -824,11 +1031,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
         };
     };
 }) | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
         sub: string;
@@ -867,6 +1069,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -882,10 +1087,15 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         metadata: {
-            wallet_relying_party: {
+            openid_credential_verifier: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -916,15 +1126,51 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 client_id?: string | undefined;
                 client_name?: string | undefined;
                 contacts?: string[] | undefined;
+                presentation_definition?: {
+                    id: string;
+                    input_descriptors: {
+                        id: string;
+                        constraints: {
+                            fields?: {
+                                path: string[];
+                                id?: string | undefined;
+                                purpose?: string | undefined;
+                                name?: string | undefined;
+                                filter?: any;
+                                optional?: boolean | undefined;
+                                intent_to_retain?: boolean | undefined;
+                            }[] | undefined;
+                            limit_disclosure?: "required" | "preferred" | undefined;
+                        };
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        format?: Record<string, any> | undefined;
+                        group?: string | undefined;
+                    }[];
+                    name?: string | undefined;
+                    purpose?: string | undefined;
+                    submission_requirements?: {
+                        rule: string;
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        from?: string | undefined;
+                        from_nested?: {
+                            rule: string;
+                            from: string;
+                            name?: string | undefined;
+                            purpose?: string | undefined;
+                        }[] | undefined;
+                        count?: number | undefined;
+                    }[] | undefined;
+                } | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             };
         };
     };
 }) | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
         sub: string;
@@ -963,6 +1209,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -978,6 +1227,11 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         metadata: {
@@ -1022,9 +1276,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
 /**
  * Fetch and parse the entity statement document for a given federation entity.
  *
- * @param accreditationBodyBaseUrl The base url of the accreditaion body which holds and signs the required entity statement
+ * @param accreditationBodyBaseUrl The base url of the accreditation body which holds and signs the required entity statement
  * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity
- * @param options.appFetch An optional instance of the http client to be used.
+ * @param appFetch An optional instance of the http client to be used.
  * @returns The parsed entity configuration object
  * @throws {IoWalletError} If the http request fails
  * @throws Parse error if the document is not in the expected shape.
@@ -1032,11 +1286,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
 export declare function getEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
     appFetch?: GlobalFetch["fetch"];
 }): Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
         sub: string;
@@ -1068,22 +1317,49 @@ export declare function getEntityStatement(accreditationBodyBaseUrl: string, sub
                 x5u?: string | undefined;
             }[];
         };
-        trust_marks: {
+        trust_marks?: {
             id: string;
             trust_mark: string;
-        }[];
+        }[] | undefined;
+    };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
     };
 }>;
 /**
  * Fetch the entity statement document for a given federation entity.
  *
- * @param accreditationBodyBaseUrl The base url of the accreditaion body which holds and signs the required entity statement
- * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity
- * @param options.appFetch An optional instance of the http client to be used.
- * @returns The signed entity statement token
- * @throws {IoWalletError} If the http request fails
+ * @param federationFetchEndpoint The exact endpoint provided by the parent EC's metadata.
+ * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The signed entity statement token.
+ * @throws {IoWalletError} If the http request fails.
  */
-export declare function getSignedEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
+export declare function getSignedEntityStatement(federationFetchEndpoint: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
     appFetch?: GlobalFetch["fetch"];
 }): Promise<string>;
+/**
+ * Fetch the federation list document from a given endpoint.
+ *
+ * @param federationListEndpoint The URL of the federation list endpoint.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The federation list as an array of strings.
+ * @throws {IoWalletError} If the HTTP request fails or the response cannot be parsed.
+ */
+export declare function getFederationList(federationListEndpoint: string, { appFetch, }?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<string[]>;
+/**
+ * Build a not-verified trust chain for a given Relying Party (RP) entity.
+ *
+ * @param relyingPartyEntityBaseUrl The base URL of the RP entity
+ * @param trustAnchorKey The public key of the Trust Anchor (TA) entity
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns A list of signed tokens that represent the trust chain, in the order of the chain (from the RP to the Trust Anchor)
+ * @throws {IoWalletError} When an element of the chain fails to parse
+ * The result of this function can be used to validate the trust chain with {@link verifyTrustChain}
+ */
+export declare function buildTrustChain(relyingPartyEntityBaseUrl: string, trustAnchorKey: JWK, appFetch?: GlobalFetch["fetch"]): Promise<string[]>;
 //# sourceMappingURL=index.d.ts.map