@pagopa/io-react-native-wallet 1.7.1 → 2.0.0-next.1

package/lib/typescript/{entity/trust → trust}/index.d.ts

@@ -1,18 +1,21 @@
-import { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration, CredentialIssuerEntityConfiguration, RelyingPartyEntityConfiguration, EntityConfiguration, EntityStatement } from "./types";
+import { CredentialIssuerEntityConfiguration, EntityConfiguration, EntityStatement, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration, WalletProviderEntityConfiguration } from "./types";
 import { validateTrustChain } from "./chain";
+import type { JWK } from "../utils/jwk";
+import type { X509CertificateOptions } from "@pagopa/io-react-native-crypto";
 export type { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration, CredentialIssuerEntityConfiguration, RelyingPartyEntityConfiguration, EntityConfiguration, EntityStatement, };
 /**
  * Verify a given trust chain is actually valid.
  * It can handle fast chain renewal, which means we try to fetch a fresh version of each statement.
  *
  * @param trustAnchorEntity The entity configuration of the known trust anchor
- * @param chain The chain of statements to be validate
- * @param options.renewOnFail Whether to renew the provided chain if the validation fails at first. Default: true
- * @param options.appFetch Fetch api implementation. Default: the built-in implementation
+ * @param chain The chain of statements to be validated
+ * @param x509Options Options for the verification process
+ * @param appFetch (optional) fetch api implementation
+ * @param renewOnFail Whether to attempt to renew the trust chain if the initial validation fails
  * @returns The result of the chain validation
- * @throws {IoWalletError} When either validation or renewal fail
+ * @throws {FederationError} If the chain is not valid
  */
-export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityConfiguration, chain: string[], { appFetch, renewOnFail, }?: {
+export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityConfiguration, chain: string[], x509Options?: X509CertificateOptions, { appFetch, renewOnFail, }?: {
     appFetch?: GlobalFetch["fetch"];
     renewOnFail?: boolean;
 }): Promise<ReturnType<typeof validateTrustChain>>;
@@ -20,7 +23,7 @@ export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityCon
  * Fetch the signed entity configuration token for an entity
  *
  * @param entityBaseUrl The url of the entity to fetch
- * @param param.appFetch (optional) fetch api implemention
+ * @param appFetch (optional) fetch api implementation
  * @returns The signed Entity Configuration token
  */
 export declare function getSignedEntityConfiguration(entityBaseUrl: string, { appFetch, }?: {
@@ -38,6 +41,7 @@ export declare function getSignedEntityConfiguration(entityBaseUrl: string, { ap
  *
  * @param entityBaseUrl The base url of the entity.
  * @param schema The expected schema of the entity configuration, according to the kind of entity we are fetching from.
+ * @param options An optional object with additional options.
  * @param options.appFetch An optional instance of the http client to be used.
  * @returns The parsed entity configuration object
  * @throws {IoWalletError} If the http request fails
@@ -66,6 +70,30 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
     };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -92,27 +120,6 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
         authority_hints?: string[] | undefined;
     } & {
         [k: string]: unknown;
@@ -166,35 +173,9 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
     };
     payload: {
         iss: string;
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
+        sub: string;
         iat: number;
         exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -202,6 +183,9 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -213,12 +197,6 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
         } & {
             [k: string]: unknown;
         };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} & {
-    payload: {
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -245,47 +223,14 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 x5u?: string | undefined;
             }[];
         };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} & {
+    payload: {
         metadata: {
             openid_credential_issuer: {
-                display: {
-                    name: string;
-                    locale: string;
-                    logo?: {
-                        url: string;
-                        alt_text: string;
-                    } | undefined;
-                }[];
-                credential_configurations_supported: Record<string, {
-                    display: {
-                        name: string;
-                        locale: string;
-                        logo?: {
-                            url: string;
-                            alt_text: string;
-                        } | undefined;
-                        background_color?: string | undefined;
-                        text_color?: string | undefined;
-                    }[];
-                    scope: string;
-                    cryptographic_binding_methods_supported: string[];
-                    format: "vc+sd-jwt" | "mso_mdoc";
-                    credential_signing_alg_values_supported: string[];
-                    claims?: Record<string, {
-                        display: {
-                            name: string;
-                            locale: string;
-                        }[];
-                        value_type: string;
-                    }> | undefined;
-                    authentic_source?: string | undefined;
-                    issuance_errors_supported?: Record<string, {
-                        display: {
-                            title: string;
-                            locale: string;
-                            description: string;
-                        }[];
-                    }> | undefined;
-                }>;
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -316,9 +261,37 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 credential_endpoint: string;
                 revocation_endpoint: string;
                 status_attestation_endpoint: string;
+                display: {
+                    name: string;
+                    locale: string;
+                }[];
+                credential_configurations_supported: Record<string, {
+                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
+                    display: {
+                        name: string;
+                        locale: string;
+                    }[];
+                    scope: string;
+                    claims: Record<string, {
+                        display: {
+                            name: string;
+                            locale: string;
+                        }[];
+                        value_type: string;
+                    }>;
+                    cryptographic_binding_methods_supported: string[];
+                    credential_signing_alg_values_supported: string[];
+                    authentic_source?: string | undefined;
+                    issuance_errors_supported?: Record<string, {
+                        display: {
+                            title: string;
+                            locale: string;
+                            description: string;
+                        }[];
+                    }> | undefined;
+                }>;
             };
             oauth_authorization_server: {
-                pushed_authorization_request_endpoint: string;
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -346,8 +319,8 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                     }[];
                 };
                 authorization_endpoint: string;
+                pushed_authorization_request_endpoint: string;
                 token_endpoint: string;
-                request_object_signing_alg_values_supported: string[];
                 client_registration_types_supported: string[];
                 code_challenge_methods_supported: string[];
                 acr_values_supported: string[];
@@ -357,15 +330,9 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                 response_modes_supported: string[];
                 token_endpoint_auth_methods_supported: string[];
                 token_endpoint_auth_signing_alg_values_supported: string[];
-                dpop_signing_alg_values_supported?: string[] | undefined;
-                introspection_endpoint?: string | undefined;
-                authorization_details_types_supported?: string[] | undefined;
-                request_parameter_supported?: boolean | undefined;
-                request_uri_parameter_supported?: boolean | undefined;
-                response_types_supported?: string[] | undefined;
-                subject_types_supported?: string[] | undefined;
+                request_object_signing_alg_values_supported: string[];
             };
-            wallet_relying_party?: {
+            openid_credential_verifier?: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -433,19 +400,12 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
                         count?: number | undefined;
                     }[] | undefined;
                 } | undefined;
-                presentation_definition_uri?: string | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             } | undefined;
         };
-    };
-}>;
-export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -472,9 +432,19 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
                 x5u?: string | undefined;
             }[];
         };
+    };
+}>;
+export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
         iat: number;
         exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -482,6 +452,9 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -493,19 +466,6 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
         } & {
             [k: string]: unknown;
         };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-}>;
-export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -532,9 +492,22 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
                 x5u?: string | undefined;
             }[];
         };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+}>;
+export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
         iat: number;
         exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -542,6 +515,9 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -553,6 +529,32 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
         } & {
             [k: string]: unknown;
         };
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
         authority_hints?: string[] | undefined;
     } & {
         [k: string]: unknown;
@@ -560,7 +562,7 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
 } & {
     payload: {
         metadata: {
-            wallet_relying_party: {
+            openid_credential_verifier: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -628,7 +630,10 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
                         count?: number | undefined;
                     }[] | undefined;
                 } | undefined;
-                presentation_definition_uri?: string | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             };
         };
     };
@@ -641,35 +646,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     };
     payload: {
         iss: string;
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
+        sub: string;
         iat: number;
         exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -677,6 +656,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -688,18 +670,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
         } & {
             [k: string]: unknown;
         };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -726,9 +696,21 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 x5u?: string | undefined;
             }[];
         };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} | ({
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
         iat: number;
         exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -736,6 +718,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -747,12 +732,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
         } & {
             [k: string]: unknown;
         };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} & {
-    payload: {
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -779,47 +758,14 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 x5u?: string | undefined;
             }[];
         };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} & {
+    payload: {
         metadata: {
             openid_credential_issuer: {
-                display: {
-                    name: string;
-                    locale: string;
-                    logo?: {
-                        url: string;
-                        alt_text: string;
-                    } | undefined;
-                }[];
-                credential_configurations_supported: Record<string, {
-                    display: {
-                        name: string;
-                        locale: string;
-                        logo?: {
-                            url: string;
-                            alt_text: string;
-                        } | undefined;
-                        background_color?: string | undefined;
-                        text_color?: string | undefined;
-                    }[];
-                    scope: string;
-                    cryptographic_binding_methods_supported: string[];
-                    format: "vc+sd-jwt" | "mso_mdoc";
-                    credential_signing_alg_values_supported: string[];
-                    claims?: Record<string, {
-                        display: {
-                            name: string;
-                            locale: string;
-                        }[];
-                        value_type: string;
-                    }> | undefined;
-                    authentic_source?: string | undefined;
-                    issuance_errors_supported?: Record<string, {
-                        display: {
-                            title: string;
-                            locale: string;
-                            description: string;
-                        }[];
-                    }> | undefined;
-                }>;
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -850,9 +796,37 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 credential_endpoint: string;
                 revocation_endpoint: string;
                 status_attestation_endpoint: string;
+                display: {
+                    name: string;
+                    locale: string;
+                }[];
+                credential_configurations_supported: Record<string, {
+                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
+                    display: {
+                        name: string;
+                        locale: string;
+                    }[];
+                    scope: string;
+                    claims: Record<string, {
+                        display: {
+                            name: string;
+                            locale: string;
+                        }[];
+                        value_type: string;
+                    }>;
+                    cryptographic_binding_methods_supported: string[];
+                    credential_signing_alg_values_supported: string[];
+                    authentic_source?: string | undefined;
+                    issuance_errors_supported?: Record<string, {
+                        display: {
+                            title: string;
+                            locale: string;
+                            description: string;
+                        }[];
+                    }> | undefined;
+                }>;
             };
             oauth_authorization_server: {
-                pushed_authorization_request_endpoint: string;
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -880,8 +854,8 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                     }[];
                 };
                 authorization_endpoint: string;
+                pushed_authorization_request_endpoint: string;
                 token_endpoint: string;
-                request_object_signing_alg_values_supported: string[];
                 client_registration_types_supported: string[];
                 code_challenge_methods_supported: string[];
                 acr_values_supported: string[];
@@ -891,15 +865,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 response_modes_supported: string[];
                 token_endpoint_auth_methods_supported: string[];
                 token_endpoint_auth_signing_alg_values_supported: string[];
-                dpop_signing_alg_values_supported?: string[] | undefined;
-                introspection_endpoint?: string | undefined;
-                authorization_details_types_supported?: string[] | undefined;
-                request_parameter_supported?: boolean | undefined;
-                request_uri_parameter_supported?: boolean | undefined;
-                response_types_supported?: string[] | undefined;
-                subject_types_supported?: string[] | undefined;
+                request_object_signing_alg_values_supported: string[];
             };
-            wallet_relying_party?: {
+            openid_credential_verifier?: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -967,18 +935,12 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                         count?: number | undefined;
                     }[] | undefined;
                 } | undefined;
-                presentation_definition_uri?: string | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             } | undefined;
         };
-    };
-}) | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -1005,9 +967,18 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 x5u?: string | undefined;
             }[];
         };
+    };
+}) | ({
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
         iat: number;
         exp: number;
-        sub: string;
         metadata: {
             federation_entity: {
                 federation_fetch_endpoint?: string | undefined;
@@ -1015,6 +986,9 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 federation_resolve_endpoint?: string | undefined;
                 federation_trust_mark_status_endpoint?: string | undefined;
                 federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
                 organization_name?: string | undefined;
                 homepage_uri?: string | undefined;
                 policy_uri?: string | undefined;
@@ -1026,6 +1000,32 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
         } & {
             [k: string]: unknown;
         };
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
         authority_hints?: string[] | undefined;
     } & {
         [k: string]: unknown;
@@ -1033,7 +1033,7 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
 } & {
     payload: {
         metadata: {
-            wallet_relying_party: {
+            openid_credential_verifier: {
                 jwks: {
                     keys: {
                         kty: "RSA" | "EC";
@@ -1101,7 +1101,10 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                         count?: number | undefined;
                     }[] | undefined;
                 } | undefined;
-                presentation_definition_uri?: string | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
             };
         };
     };
@@ -1113,6 +1116,30 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
     };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -1139,27 +1166,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
         authority_hints?: string[] | undefined;
     } & {
         [k: string]: unknown;
@@ -1208,12 +1214,11 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
 /**
  * Fetch and parse the entity statement document for a given federation entity.
  *
- * @param accreditationBodyBaseUrl The base url of the accreditaion body which holds and signs the required entity statement
+ * @param accreditationBodyBaseUrl The base url of the accreditation body which holds and signs the required entity statement
  * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity
- * @param options.appFetch An optional instance of the http client to be used.
+ * @param appFetch An optional instance of the http client to be used.
  * @returns The parsed entity configuration object
  * @throws {IoWalletError} If the http request fails
- * @throws Parse error if the document is not in the expected shape.
  */
 export declare function getEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
     appFetch?: GlobalFetch["fetch"];
@@ -1225,6 +1230,9 @@ export declare function getEntityStatement(accreditationBodyBaseUrl: string, sub
     };
     payload: {
         iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
         jwks: {
             keys: {
                 kty: "RSA" | "EC";
@@ -1251,25 +1259,44 @@ export declare function getEntityStatement(accreditationBodyBaseUrl: string, sub
                 x5u?: string | undefined;
             }[];
         };
-        iat: number;
-        exp: number;
-        sub: string;
-        trust_marks: {
+        trust_marks?: {
             id: string;
             trust_mark: string;
-        }[];
+        }[] | undefined;
     };
 }>;
 /**
  * Fetch the entity statement document for a given federation entity.
  *
- * @param accreditationBodyBaseUrl The base url of the accreditaion body which holds and signs the required entity statement
- * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity
- * @param options.appFetch An optional instance of the http client to be used.
- * @returns The signed entity statement token
- * @throws {IoWalletError} If the http request fails
+ * @param federationFetchEndpoint The exact endpoint provided by the parent EC's metadata.
+ * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The signed entity statement token.
+ * @throws {IoWalletError} If the http request fails.
  */
-export declare function getSignedEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
+export declare function getSignedEntityStatement(federationFetchEndpoint: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
     appFetch?: GlobalFetch["fetch"];
 }): Promise<string>;
+/**
+ * Fetch the federation list document from a given endpoint.
+ *
+ * @param federationListEndpoint The URL of the federation list endpoint.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The federation list as an array of strings.
+ * @throws {IoWalletError} If the HTTP request fails.
+ * @throws {FederationError} If the result is not in the expected format.
+ */
+export declare function getFederationList(federationListEndpoint: string, { appFetch, }?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<string[]>;
+/**
+ * Build a not-verified trust chain for a given Relying Party (RP) entity.
+ *
+ * @param relyingPartyEntityBaseUrl The base URL of the RP entity
+ * @param trustAnchorKey The public key of the Trust Anchor (TA) entity
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns A list of signed tokens that represent the trust chain, in the order of the chain (from the RP to the Trust Anchor)
+ * @throws {FederationError} When an element of the chain fails to parse or other build steps fail.
+ */
+export declare function buildTrustChain(relyingPartyEntityBaseUrl: string, trustAnchorKey: JWK, appFetch?: GlobalFetch["fetch"]): Promise<string[]>;
 //# sourceMappingURL=index.d.ts.map