@pagopa/io-react-native-wallet 1.7.1 → 2.0.0-next.0

package/lib/typescript/{entity/trust → trust}/index.d.ts

@@ -1,16 +1,17 @@
-import { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration, CredentialIssuerEntityConfiguration, RelyingPartyEntityConfiguration, EntityConfiguration, EntityStatement } from "./types";
+import { CredentialIssuerEntityConfiguration, EntityConfiguration, EntityStatement, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration, WalletProviderEntityConfiguration } from "./types";
 import { validateTrustChain } from "./chain";
+import type { JWK } from "../utils/jwk";
 export type { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration, CredentialIssuerEntityConfiguration, RelyingPartyEntityConfiguration, EntityConfiguration, EntityStatement, };
 /**
  * Verify a given trust chain is actually valid.
  * It can handle fast chain renewal, which means we try to fetch a fresh version of each statement.
  *
  * @param trustAnchorEntity The entity configuration of the known trust anchor
- * @param chain The chain of statements to be validate
- * @param options.renewOnFail Whether to renew the provided chain if the validation fails at first. Default: true
- * @param options.appFetch Fetch api implementation. Default: the built-in implementation
+ * @param chain The chain of statements to be validated
+ * @param renewOnFail Whether to renew the provided chain if the validation fails at first. Default: true
+ * @param appFetch Fetch api implementation. Default: the built-in implementation
  * @returns The result of the chain validation
- * @throws {IoWalletError} When either validation or renewal fail
+ * @throws {FederationError} If the chain is not valid
  */
 export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityConfiguration, chain: string[], { appFetch, renewOnFail, }?: {
     appFetch?: GlobalFetch["fetch"];
@@ -20,7 +21,7 @@ export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityCon
  * Fetch the signed entity configuration token for an entity
  *
  * @param entityBaseUrl The url of the entity to fetch
- * @param param.appFetch (optional) fetch api implemention
+ * @param appFetch (optional) fetch api implementation
  * @returns The signed Entity Configuration token
  */
 export declare function getSignedEntityConfiguration(entityBaseUrl: string, { appFetch, }?: {
@@ -38,6 +39,7 @@ export declare function getSignedEntityConfiguration(entityBaseUrl: string, { ap
  *
  * @param entityBaseUrl The base url of the entity.
  * @param schema The expected schema of the entity configuration, according to the kind of entity we are fetching from.
+ * @param options An optional object with additional options.
  * @param options.appFetch An optional instance of the http client to be used.
  * @returns The parsed entity configuration object
  * @throws {IoWalletError} If the http request fails
@@ -59,13 +61,11 @@ declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema:
     appFetch?: GlobalFetch["fetch"];
 }): Promise<EntityConfiguration>;
 export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -92,9 +92,6 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -102,6 +99,9 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -117,6 +117,11 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         metadata: {
@@ -159,13 +164,11 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
     };
 }>;
 export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -192,9 +195,6 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -202,6 +202,9 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -217,6 +220,11 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         jwks: {
@@ -247,45 +255,6 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
         };
         metadata: {
             openid_credential_issuer: {
-                display: {
-                    name: string;
-                    locale: string;
-                    logo?: {
-                        url: string;
-                        alt_text: string;
-                    } | undefined;
-                }[];
-                credential_configurations_supported: Record<string, {
-                    display: {
-                        name: string;
-                        locale: string;
-                        logo?: {
-                            url: string;
-                            alt_text: string;
-                        } | undefined;
-                        background_color?: string | undefined;
-                        text_color?: string | undefined;
-                    }[];
-                    scope: string;
-                    cryptographic_binding_methods_supported: string[];
-                    format: "vc+sd-jwt" | "mso_mdoc";
-                    credential_signing_alg_values_supported: string[];
-                    claims?: Record<string, {
-                        display: {
-                            name: string;
-                            locale: string;
-                        }[];
-                        value_type: string;
-                    }> | undefined;
-                    authentic_source?: string | undefined;
-                    issuance_errors_supported?: Record<string, {
-                        display: {
-                            title: string;
-                            locale: string;
-                            description: string;
-                        }[];
-                    }> | undefined;
-                }>;
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -312,13 +281,42 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                         x5u?: string | undefined;
                     }[];
                 };
+                display: {
+                    name: string;
+                    locale: string;
+                }[];
                 credential_issuer: string;
                 credential_endpoint: string;
                 revocation_endpoint: string;
                 status_attestation_endpoint: string;
+                credential_configurations_supported: Record<string, {
+                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
+                    scope: string;
+                    display: {
+                        name: string;
+                        locale: string;
+                    }[];
+                    claims: Record<string, {
+                        value_type: string;
+                        display: {
+                            name: string;
+                            locale: string;
+                        }[];
+                    }>;
+                    cryptographic_binding_methods_supported: string[];
+                    credential_signing_alg_values_supported: string[];
+                    authentic_source?: string | undefined;
+                    issuance_errors_supported?: Record<string, {
+                        display: {
+                            locale: string;
+                            title: string;
+                            description: string;
+                        }[];
+                    }> | undefined;
+                }>;
             };
             oauth_authorization_server: {
-                pushed_authorization_request_endpoint: string;
+                request_object_signing_alg_values_supported: string[];
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -346,8 +344,8 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                     }[];
                 };
                 authorization_endpoint: string;
+                pushed_authorization_request_endpoint: string;
                 token_endpoint: string;
-                request_object_signing_alg_values_supported: string[];
                 client_registration_types_supported: string[];
                 code_challenge_methods_supported: string[];
                 acr_values_supported: string[];
@@ -357,15 +355,8 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 response_modes_supported: string[];
                 token_endpoint_auth_methods_supported: string[];
                 token_endpoint_auth_signing_alg_values_supported: string[];
-                dpop_signing_alg_values_supported?: string[] | undefined;
-                introspection_endpoint?: string | undefined;
-                authorization_details_types_supported?: string[] | undefined;
-                request_parameter_supported?: boolean | undefined;
-                request_uri_parameter_supported?: boolean | undefined;
-                response_types_supported?: string[] | undefined;
-                subject_types_supported?: string[] | undefined;
             };
-            wallet_relying_party?: {
+            openid_credential_verifier?: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -433,19 +424,20 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                         count?: number | undefined;
                     }[] | undefined;
                 } | undefined;
-                presentation_definition_uri?: string | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             } | undefined;
         };
     };
 }>;
 export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -472,9 +464,6 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -482,6 +471,9 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -497,15 +489,18 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
     } & {
         [k: string]: unknown;
     };
-}>;
-export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
     header: {
         alg: string;
         kid: string;
         typ: "entity-statement+jwt";
     };
+}>;
+export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -532,9 +527,6 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -542,6 +534,9 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -557,10 +552,15 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         metadata: {
-            wallet_relying_party: {
+            openid_credential_verifier: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -628,19 +628,20 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
                         count?: number | undefined;
                     }[] | undefined;
                 } | undefined;
-                presentation_definition_uri?: string | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             };
         };
     };
 }>;
 export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -667,9 +668,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -677,6 +675,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -692,14 +693,17 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     } & {
         [k: string]: unknown;
     };
-} | ({
     header: {
         alg: string;
         kid: string;
         typ: "entity-statement+jwt";
     };
+} | ({
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -726,9 +730,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -736,6 +737,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -751,6 +755,11 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         jwks: {
@@ -781,45 +790,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
         };
         metadata: {
             openid_credential_issuer: {
-                display: {
-                    name: string;
-                    locale: string;
-                    logo?: {
-                        url: string;
-                        alt_text: string;
-                    } | undefined;
-                }[];
-                credential_configurations_supported: Record<string, {
-                    display: {
-                        name: string;
-                        locale: string;
-                        logo?: {
-                            url: string;
-                            alt_text: string;
-                        } | undefined;
-                        background_color?: string | undefined;
-                        text_color?: string | undefined;
-                    }[];
-                    scope: string;
-                    cryptographic_binding_methods_supported: string[];
-                    format: "vc+sd-jwt" | "mso_mdoc";
-                    credential_signing_alg_values_supported: string[];
-                    claims?: Record<string, {
-                        display: {
-                            name: string;
-                            locale: string;
-                        }[];
-                        value_type: string;
-                    }> | undefined;
-                    authentic_source?: string | undefined;
-                    issuance_errors_supported?: Record<string, {
-                        display: {
-                            title: string;
-                            locale: string;
-                            description: string;
-                        }[];
-                    }> | undefined;
-                }>;
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -846,13 +816,42 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                         x5u?: string | undefined;
                     }[];
                 };
+                display: {
+                    name: string;
+                    locale: string;
+                }[];
                 credential_issuer: string;
                 credential_endpoint: string;
                 revocation_endpoint: string;
                 status_attestation_endpoint: string;
+                credential_configurations_supported: Record<string, {
+                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
+                    scope: string;
+                    display: {
+                        name: string;
+                        locale: string;
+                    }[];
+                    claims: Record<string, {
+                        value_type: string;
+                        display: {
+                            name: string;
+                            locale: string;
+                        }[];
+                    }>;
+                    cryptographic_binding_methods_supported: string[];
+                    credential_signing_alg_values_supported: string[];
+                    authentic_source?: string | undefined;
+                    issuance_errors_supported?: Record<string, {
+                        display: {
+                            locale: string;
+                            title: string;
+                            description: string;
+                        }[];
+                    }> | undefined;
+                }>;
             };
             oauth_authorization_server: {
-                pushed_authorization_request_endpoint: string;
+                request_object_signing_alg_values_supported: string[];
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -880,8 +879,8 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                     }[];
                 };
                 authorization_endpoint: string;
+                pushed_authorization_request_endpoint: string;
                 token_endpoint: string;
-                request_object_signing_alg_values_supported: string[];
                 client_registration_types_supported: string[];
                 code_challenge_methods_supported: string[];
                 acr_values_supported: string[];
@@ -891,15 +890,8 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 response_modes_supported: string[];
                 token_endpoint_auth_methods_supported: string[];
                 token_endpoint_auth_signing_alg_values_supported: string[];
-                dpop_signing_alg_values_supported?: string[] | undefined;
-                introspection_endpoint?: string | undefined;
-                authorization_details_types_supported?: string[] | undefined;
-                request_parameter_supported?: boolean | undefined;
-                request_uri_parameter_supported?: boolean | undefined;
-                response_types_supported?: string[] | undefined;
-                subject_types_supported?: string[] | undefined;
             };
-            wallet_relying_party?: {
+            openid_credential_verifier?: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -967,18 +959,19 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                         count?: number | undefined;
                     }[] | undefined;
                 } | undefined;
-                presentation_definition_uri?: string | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             } | undefined;
         };
     };
 }) | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -1005,9 +998,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -1015,6 +1005,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -1030,10 +1023,15 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         metadata: {
-            wallet_relying_party: {
+            openid_credential_verifier: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -1101,18 +1099,19 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                         count?: number | undefined;
                     }[] | undefined;
                 } | undefined;
-                presentation_definition_uri?: string | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             };
         };
     };
 }) | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -1139,9 +1138,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -1149,6 +1145,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -1164,6 +1163,11 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     } & {
         [k: string]: unknown;
     };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
 } & {
     payload: {
         metadata: {
@@ -1208,23 +1212,20 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
 /**
  * Fetch and parse the entity statement document for a given federation entity.
  *
- * @param accreditationBodyBaseUrl The base url of the accreditaion body which holds and signs the required entity statement
+ * @param accreditationBodyBaseUrl The base url of the accreditation body which holds and signs the required entity statement
  * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity
- * @param options.appFetch An optional instance of the http client to be used.
+ * @param appFetch An optional instance of the http client to be used.
  * @returns The parsed entity configuration object
  * @throws {IoWalletError} If the http request fails
- * @throws Parse error if the document is not in the expected shape.
  */
 export declare function getEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
     appFetch?: GlobalFetch["fetch"];
 }): Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -1251,25 +1252,49 @@ export declare function getEntityStatement(accreditationBodyBaseUrl: string, sub
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
-        trust_marks: {
+        trust_marks?: {
             id: string;
             trust_mark: string;
-        }[];
+        }[] | undefined;
+    };
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
     };
 }>;
 /**
  * Fetch the entity statement document for a given federation entity.
  *
- * @param accreditationBodyBaseUrl The base url of the accreditaion body which holds and signs the required entity statement
- * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity
- * @param options.appFetch An optional instance of the http client to be used.
- * @returns The signed entity statement token
- * @throws {IoWalletError} If the http request fails
+ * @param federationFetchEndpoint The exact endpoint provided by the parent EC's metadata.
+ * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The signed entity statement token.
+ * @throws {IoWalletError} If the http request fails.
  */
-export declare function getSignedEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
+export declare function getSignedEntityStatement(federationFetchEndpoint: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
     appFetch?: GlobalFetch["fetch"];
 }): Promise<string>;
+/**
+ * Fetch the federation list document from a given endpoint.
+ *
+ * @param federationListEndpoint The URL of the federation list endpoint.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The federation list as an array of strings.
+ * @throws {IoWalletError} If the HTTP request fails.
+ * @throws {FederationError} If the result is not in the expected format.
+ */
+export declare function getFederationList(federationListEndpoint: string, { appFetch, }?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<string[]>;
+/**
+ * Build a not-verified trust chain for a given Relying Party (RP) entity.
+ *
+ * @param relyingPartyEntityBaseUrl The base URL of the RP entity
+ * @param trustAnchorKey The public key of the Trust Anchor (TA) entity
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns A list of signed tokens that represent the trust chain, in the order of the chain (from the RP to the Trust Anchor)
+ * @throws {FederationError} When an element of the chain fails to parse or other build steps fail.
+ */
+export declare function buildTrustChain(relyingPartyEntityBaseUrl: string, trustAnchorKey: JWK, appFetch?: GlobalFetch["fetch"]): Promise<string[]>;
 //# sourceMappingURL=index.d.ts.map