@pagopa/io-react-native-wallet 2.0.0-next.0 → 2.0.0-next.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/commonjs/trust/README.md +147 -0
- package/lib/commonjs/trust/chain.js +47 -10
- package/lib/commonjs/trust/chain.js.map +1 -1
- package/lib/commonjs/trust/errors.js +24 -1
- package/lib/commonjs/trust/errors.js.map +1 -1
- package/lib/commonjs/trust/index.js +11 -5
- package/lib/commonjs/trust/index.js.map +1 -1
- package/lib/commonjs/trust/utils.js +30 -1
- package/lib/commonjs/trust/utils.js.map +1 -1
- package/lib/module/trust/README.md +147 -0
- package/lib/module/trust/chain.js +49 -12
- package/lib/module/trust/chain.js.map +1 -1
- package/lib/module/trust/errors.js +23 -2
- package/lib/module/trust/errors.js.map +1 -1
- package/lib/module/trust/index.js +11 -5
- package/lib/module/trust/index.js.map +1 -1
- package/lib/module/trust/utils.js +27 -0
- package/lib/module/trust/utils.js.map +1 -1
- package/lib/typescript/client/generated/wallet-provider.d.ts +12 -12
- package/lib/typescript/credential/presentation/types.d.ts +4 -4
- package/lib/typescript/credential/status/types.d.ts +6 -6
- package/lib/typescript/sd-jwt/index.d.ts +12 -12
- package/lib/typescript/sd-jwt/types.d.ts +6 -6
- package/lib/typescript/trust/chain.d.ts +8 -6
- package/lib/typescript/trust/chain.d.ts.map +1 -1
- package/lib/typescript/trust/errors.d.ts +22 -0
- package/lib/typescript/trust/errors.d.ts.map +1 -1
- package/lib/typescript/trust/index.d.ts +208 -206
- package/lib/typescript/trust/index.d.ts.map +1 -1
- package/lib/typescript/trust/types.d.ts +559 -559
- package/lib/typescript/trust/utils.d.ts +10 -0
- package/lib/typescript/trust/utils.d.ts.map +1 -1
- package/lib/typescript/wallet-instance-attestation/types.d.ts +25 -25
- package/package.json +2 -2
- package/src/trust/README.md +147 -0
- package/src/trust/chain.ts +91 -15
- package/src/trust/errors.ts +32 -1
- package/src/trust/index.ts +11 -4
- package/src/trust/utils.ts +35 -0
@@ -1 +1 @@
|
|
1
|
-
{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/trust/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,iBAAiB,CAAC;
|
1
|
+
{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/trust/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAElF;;GAEG;AACH,qBAAa,eAAgB,SAAQ,aAAa;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,eAAe;IACvD,IAAI,SAA+B;gBACvB,OAAO,SAAiC;CAGrD;AAED;;GAEG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC9D,IAAI,SAAuC;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;CAG1D;AAED;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,eAAe;IACzD,IAAI,SAAwC;gBAE1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE;CAIjE;AAED,qBAAa,wBAAyB,SAAQ,eAAe;IAC3D,IAAI,SAA0C;gBAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;CAG3E;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,eAAe;IACvD,IAAI,SAAsC;gBAExC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB;CAIJ;AAED;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,eAAe;IAC7D,IAAI,SAAsC;gBAC9B,OAAO,SAAgD;CAGpE;AAED;;GAEG;AACH,qBAAa,8BAA+B,SAAQ,eAAe;IACjE,IAAI,SAA0C;gBAE5C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;KAAE;CAIxE;AAED;;GAEG;AACH,qBAAa,mCAAoC,SAAQ,eAAe;IACtE,IAAI,SAA+C;gBAEjD,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE;CAIjE;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,eAAe;IACxD,IAAI,SAAgC;gBACxB,OAAO,EAAE,MAAM;CAG5B;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,IAAI,SAAoC;gBAEtC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,oBAAoB,CAAC,EAAE,2BAA2B,CAAC;QACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB;CAIJ"}
|
@@ -1,6 +1,7 @@
|
|
1
1
|
import { CredentialIssuerEntityConfiguration, EntityConfiguration, EntityStatement, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration, WalletProviderEntityConfiguration } from "./types";
|
2
2
|
import { validateTrustChain } from "./chain";
|
3
3
|
import type { JWK } from "../utils/jwk";
|
4
|
+
import type { X509CertificateOptions } from "@pagopa/io-react-native-crypto";
|
4
5
|
export type { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration, CredentialIssuerEntityConfiguration, RelyingPartyEntityConfiguration, EntityConfiguration, EntityStatement, };
|
5
6
|
/**
|
6
7
|
* Verify a given trust chain is actually valid.
|
@@ -8,12 +9,13 @@ export type { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration,
|
|
8
9
|
*
|
9
10
|
* @param trustAnchorEntity The entity configuration of the known trust anchor
|
10
11
|
* @param chain The chain of statements to be validated
|
11
|
-
* @param
|
12
|
-
* @param appFetch
|
12
|
+
* @param x509Options Options for the verification process
|
13
|
+
* @param appFetch (optional) fetch api implementation
|
14
|
+
* @param renewOnFail Whether to attempt to renew the trust chain if the initial validation fails
|
13
15
|
* @returns The result of the chain validation
|
14
16
|
* @throws {FederationError} If the chain is not valid
|
15
17
|
*/
|
16
|
-
export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityConfiguration, chain: string[], { appFetch, renewOnFail, }?: {
|
18
|
+
export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityConfiguration, chain: string[], x509Options?: X509CertificateOptions, { appFetch, renewOnFail, }?: {
|
17
19
|
appFetch?: GlobalFetch["fetch"];
|
18
20
|
renewOnFail?: boolean;
|
19
21
|
}): Promise<ReturnType<typeof validateTrustChain>>;
|
@@ -61,11 +63,37 @@ declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema:
|
|
61
63
|
appFetch?: GlobalFetch["fetch"];
|
62
64
|
}): Promise<EntityConfiguration>;
|
63
65
|
export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
|
66
|
+
header: {
|
67
|
+
alg: string;
|
68
|
+
kid: string;
|
69
|
+
typ: "entity-statement+jwt";
|
70
|
+
};
|
64
71
|
payload: {
|
65
72
|
iss: string;
|
66
73
|
sub: string;
|
67
74
|
iat: number;
|
68
75
|
exp: number;
|
76
|
+
metadata: {
|
77
|
+
federation_entity: {
|
78
|
+
federation_fetch_endpoint?: string | undefined;
|
79
|
+
federation_list_endpoint?: string | undefined;
|
80
|
+
federation_resolve_endpoint?: string | undefined;
|
81
|
+
federation_trust_mark_status_endpoint?: string | undefined;
|
82
|
+
federation_trust_mark_list_endpoint?: string | undefined;
|
83
|
+
federation_trust_mark_endpoint?: string | undefined;
|
84
|
+
federation_historical_keys_endpoint?: string | undefined;
|
85
|
+
endpoint_auth_signing_alg_values_supported?: string | undefined;
|
86
|
+
organization_name?: string | undefined;
|
87
|
+
homepage_uri?: string | undefined;
|
88
|
+
policy_uri?: string | undefined;
|
89
|
+
logo_uri?: string | undefined;
|
90
|
+
contacts?: string[] | undefined;
|
91
|
+
} & {
|
92
|
+
[k: string]: unknown;
|
93
|
+
};
|
94
|
+
} & {
|
95
|
+
[k: string]: unknown;
|
96
|
+
};
|
69
97
|
jwks: {
|
70
98
|
keys: {
|
71
99
|
kty: "RSA" | "EC";
|
@@ -92,36 +120,10 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
|
|
92
120
|
x5u?: string | undefined;
|
93
121
|
}[];
|
94
122
|
};
|
95
|
-
metadata: {
|
96
|
-
federation_entity: {
|
97
|
-
federation_fetch_endpoint?: string | undefined;
|
98
|
-
federation_list_endpoint?: string | undefined;
|
99
|
-
federation_resolve_endpoint?: string | undefined;
|
100
|
-
federation_trust_mark_status_endpoint?: string | undefined;
|
101
|
-
federation_trust_mark_list_endpoint?: string | undefined;
|
102
|
-
federation_trust_mark_endpoint?: string | undefined;
|
103
|
-
federation_historical_keys_endpoint?: string | undefined;
|
104
|
-
endpoint_auth_signing_alg_values_supported?: string | undefined;
|
105
|
-
organization_name?: string | undefined;
|
106
|
-
homepage_uri?: string | undefined;
|
107
|
-
policy_uri?: string | undefined;
|
108
|
-
logo_uri?: string | undefined;
|
109
|
-
contacts?: string[] | undefined;
|
110
|
-
} & {
|
111
|
-
[k: string]: unknown;
|
112
|
-
};
|
113
|
-
} & {
|
114
|
-
[k: string]: unknown;
|
115
|
-
};
|
116
123
|
authority_hints?: string[] | undefined;
|
117
124
|
} & {
|
118
125
|
[k: string]: unknown;
|
119
126
|
};
|
120
|
-
header: {
|
121
|
-
alg: string;
|
122
|
-
kid: string;
|
123
|
-
typ: "entity-statement+jwt";
|
124
|
-
};
|
125
127
|
} & {
|
126
128
|
payload: {
|
127
129
|
metadata: {
|
@@ -164,37 +166,16 @@ export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Param
|
|
164
166
|
};
|
165
167
|
}>;
|
166
168
|
export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
|
169
|
+
header: {
|
170
|
+
alg: string;
|
171
|
+
kid: string;
|
172
|
+
typ: "entity-statement+jwt";
|
173
|
+
};
|
167
174
|
payload: {
|
168
175
|
iss: string;
|
169
176
|
sub: string;
|
170
177
|
iat: number;
|
171
178
|
exp: number;
|
172
|
-
jwks: {
|
173
|
-
keys: {
|
174
|
-
kty: "RSA" | "EC";
|
175
|
-
alg?: string | undefined;
|
176
|
-
crv?: string | undefined;
|
177
|
-
d?: string | undefined;
|
178
|
-
dp?: string | undefined;
|
179
|
-
dq?: string | undefined;
|
180
|
-
e?: string | undefined;
|
181
|
-
ext?: boolean | undefined;
|
182
|
-
k?: string | undefined;
|
183
|
-
key_ops?: string[] | undefined;
|
184
|
-
kid?: string | undefined;
|
185
|
-
n?: string | undefined;
|
186
|
-
p?: string | undefined;
|
187
|
-
q?: string | undefined;
|
188
|
-
qi?: string | undefined;
|
189
|
-
use?: string | undefined;
|
190
|
-
x?: string | undefined;
|
191
|
-
y?: string | undefined;
|
192
|
-
x5c?: string[] | undefined;
|
193
|
-
x5t?: string | undefined;
|
194
|
-
"x5t#S256"?: string | undefined;
|
195
|
-
x5u?: string | undefined;
|
196
|
-
}[];
|
197
|
-
};
|
198
179
|
metadata: {
|
199
180
|
federation_entity: {
|
200
181
|
federation_fetch_endpoint?: string | undefined;
|
@@ -216,17 +197,6 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
|
|
216
197
|
} & {
|
217
198
|
[k: string]: unknown;
|
218
199
|
};
|
219
|
-
authority_hints?: string[] | undefined;
|
220
|
-
} & {
|
221
|
-
[k: string]: unknown;
|
222
|
-
};
|
223
|
-
header: {
|
224
|
-
alg: string;
|
225
|
-
kid: string;
|
226
|
-
typ: "entity-statement+jwt";
|
227
|
-
};
|
228
|
-
} & {
|
229
|
-
payload: {
|
230
200
|
jwks: {
|
231
201
|
keys: {
|
232
202
|
kty: "RSA" | "EC";
|
@@ -253,6 +223,12 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
|
|
253
223
|
x5u?: string | undefined;
|
254
224
|
}[];
|
255
225
|
};
|
226
|
+
authority_hints?: string[] | undefined;
|
227
|
+
} & {
|
228
|
+
[k: string]: unknown;
|
229
|
+
};
|
230
|
+
} & {
|
231
|
+
payload: {
|
256
232
|
metadata: {
|
257
233
|
openid_credential_issuer: {
|
258
234
|
jwks: {
|
@@ -281,42 +257,41 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
|
|
281
257
|
x5u?: string | undefined;
|
282
258
|
}[];
|
283
259
|
};
|
284
|
-
display: {
|
285
|
-
name: string;
|
286
|
-
locale: string;
|
287
|
-
}[];
|
288
260
|
credential_issuer: string;
|
289
261
|
credential_endpoint: string;
|
290
262
|
revocation_endpoint: string;
|
291
263
|
status_attestation_endpoint: string;
|
264
|
+
display: {
|
265
|
+
name: string;
|
266
|
+
locale: string;
|
267
|
+
}[];
|
292
268
|
credential_configurations_supported: Record<string, {
|
293
269
|
format: "vc+sd-jwt" | "vc+mdoc-cbor";
|
294
|
-
scope: string;
|
295
270
|
display: {
|
296
271
|
name: string;
|
297
272
|
locale: string;
|
298
273
|
}[];
|
274
|
+
scope: string;
|
299
275
|
claims: Record<string, {
|
300
|
-
value_type: string;
|
301
276
|
display: {
|
302
277
|
name: string;
|
303
278
|
locale: string;
|
304
279
|
}[];
|
280
|
+
value_type: string;
|
305
281
|
}>;
|
306
282
|
cryptographic_binding_methods_supported: string[];
|
307
283
|
credential_signing_alg_values_supported: string[];
|
308
284
|
authentic_source?: string | undefined;
|
309
285
|
issuance_errors_supported?: Record<string, {
|
310
286
|
display: {
|
311
|
-
locale: string;
|
312
287
|
title: string;
|
288
|
+
locale: string;
|
313
289
|
description: string;
|
314
290
|
}[];
|
315
291
|
}> | undefined;
|
316
292
|
}>;
|
317
293
|
};
|
318
294
|
oauth_authorization_server: {
|
319
|
-
request_object_signing_alg_values_supported: string[];
|
320
295
|
jwks: {
|
321
296
|
keys: {
|
322
297
|
kty: "RSA" | "EC";
|
@@ -355,6 +330,7 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
|
|
355
330
|
response_modes_supported: string[];
|
356
331
|
token_endpoint_auth_methods_supported: string[];
|
357
332
|
token_endpoint_auth_signing_alg_values_supported: string[];
|
333
|
+
request_object_signing_alg_values_supported: string[];
|
358
334
|
};
|
359
335
|
openid_credential_verifier?: {
|
360
336
|
jwks: {
|
@@ -430,14 +406,6 @@ export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Par
|
|
430
406
|
authorization_encrypted_response_enc?: string | undefined;
|
431
407
|
} | undefined;
|
432
408
|
};
|
433
|
-
};
|
434
|
-
}>;
|
435
|
-
export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
|
436
|
-
payload: {
|
437
|
-
iss: string;
|
438
|
-
sub: string;
|
439
|
-
iat: number;
|
440
|
-
exp: number;
|
441
409
|
jwks: {
|
442
410
|
keys: {
|
443
411
|
kty: "RSA" | "EC";
|
@@ -464,6 +432,19 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
|
|
464
432
|
x5u?: string | undefined;
|
465
433
|
}[];
|
466
434
|
};
|
435
|
+
};
|
436
|
+
}>;
|
437
|
+
export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
|
438
|
+
header: {
|
439
|
+
alg: string;
|
440
|
+
kid: string;
|
441
|
+
typ: "entity-statement+jwt";
|
442
|
+
};
|
443
|
+
payload: {
|
444
|
+
iss: string;
|
445
|
+
sub: string;
|
446
|
+
iat: number;
|
447
|
+
exp: number;
|
467
448
|
metadata: {
|
468
449
|
federation_entity: {
|
469
450
|
federation_fetch_endpoint?: string | undefined;
|
@@ -485,22 +466,6 @@ export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Paramete
|
|
485
466
|
} & {
|
486
467
|
[k: string]: unknown;
|
487
468
|
};
|
488
|
-
authority_hints?: string[] | undefined;
|
489
|
-
} & {
|
490
|
-
[k: string]: unknown;
|
491
|
-
};
|
492
|
-
header: {
|
493
|
-
alg: string;
|
494
|
-
kid: string;
|
495
|
-
typ: "entity-statement+jwt";
|
496
|
-
};
|
497
|
-
}>;
|
498
|
-
export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
|
499
|
-
payload: {
|
500
|
-
iss: string;
|
501
|
-
sub: string;
|
502
|
-
iat: number;
|
503
|
-
exp: number;
|
504
469
|
jwks: {
|
505
470
|
keys: {
|
506
471
|
kty: "RSA" | "EC";
|
@@ -527,6 +492,22 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
|
|
527
492
|
x5u?: string | undefined;
|
528
493
|
}[];
|
529
494
|
};
|
495
|
+
authority_hints?: string[] | undefined;
|
496
|
+
} & {
|
497
|
+
[k: string]: unknown;
|
498
|
+
};
|
499
|
+
}>;
|
500
|
+
export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
|
501
|
+
header: {
|
502
|
+
alg: string;
|
503
|
+
kid: string;
|
504
|
+
typ: "entity-statement+jwt";
|
505
|
+
};
|
506
|
+
payload: {
|
507
|
+
iss: string;
|
508
|
+
sub: string;
|
509
|
+
iat: number;
|
510
|
+
exp: number;
|
530
511
|
metadata: {
|
531
512
|
federation_entity: {
|
532
513
|
federation_fetch_endpoint?: string | undefined;
|
@@ -548,15 +529,36 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
|
|
548
529
|
} & {
|
549
530
|
[k: string]: unknown;
|
550
531
|
};
|
532
|
+
jwks: {
|
533
|
+
keys: {
|
534
|
+
kty: "RSA" | "EC";
|
535
|
+
alg?: string | undefined;
|
536
|
+
crv?: string | undefined;
|
537
|
+
d?: string | undefined;
|
538
|
+
dp?: string | undefined;
|
539
|
+
dq?: string | undefined;
|
540
|
+
e?: string | undefined;
|
541
|
+
ext?: boolean | undefined;
|
542
|
+
k?: string | undefined;
|
543
|
+
key_ops?: string[] | undefined;
|
544
|
+
kid?: string | undefined;
|
545
|
+
n?: string | undefined;
|
546
|
+
p?: string | undefined;
|
547
|
+
q?: string | undefined;
|
548
|
+
qi?: string | undefined;
|
549
|
+
use?: string | undefined;
|
550
|
+
x?: string | undefined;
|
551
|
+
y?: string | undefined;
|
552
|
+
x5c?: string[] | undefined;
|
553
|
+
x5t?: string | undefined;
|
554
|
+
"x5t#S256"?: string | undefined;
|
555
|
+
x5u?: string | undefined;
|
556
|
+
}[];
|
557
|
+
};
|
551
558
|
authority_hints?: string[] | undefined;
|
552
559
|
} & {
|
553
560
|
[k: string]: unknown;
|
554
561
|
};
|
555
|
-
header: {
|
556
|
-
alg: string;
|
557
|
-
kid: string;
|
558
|
-
typ: "entity-statement+jwt";
|
559
|
-
};
|
560
562
|
} & {
|
561
563
|
payload: {
|
562
564
|
metadata: {
|
@@ -637,37 +639,16 @@ export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Paramet
|
|
637
639
|
};
|
638
640
|
}>;
|
639
641
|
export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
|
642
|
+
header: {
|
643
|
+
alg: string;
|
644
|
+
kid: string;
|
645
|
+
typ: "entity-statement+jwt";
|
646
|
+
};
|
640
647
|
payload: {
|
641
648
|
iss: string;
|
642
649
|
sub: string;
|
643
650
|
iat: number;
|
644
651
|
exp: number;
|
645
|
-
jwks: {
|
646
|
-
keys: {
|
647
|
-
kty: "RSA" | "EC";
|
648
|
-
alg?: string | undefined;
|
649
|
-
crv?: string | undefined;
|
650
|
-
d?: string | undefined;
|
651
|
-
dp?: string | undefined;
|
652
|
-
dq?: string | undefined;
|
653
|
-
e?: string | undefined;
|
654
|
-
ext?: boolean | undefined;
|
655
|
-
k?: string | undefined;
|
656
|
-
key_ops?: string[] | undefined;
|
657
|
-
kid?: string | undefined;
|
658
|
-
n?: string | undefined;
|
659
|
-
p?: string | undefined;
|
660
|
-
q?: string | undefined;
|
661
|
-
qi?: string | undefined;
|
662
|
-
use?: string | undefined;
|
663
|
-
x?: string | undefined;
|
664
|
-
y?: string | undefined;
|
665
|
-
x5c?: string[] | undefined;
|
666
|
-
x5t?: string | undefined;
|
667
|
-
"x5t#S256"?: string | undefined;
|
668
|
-
x5u?: string | undefined;
|
669
|
-
}[];
|
670
|
-
};
|
671
652
|
metadata: {
|
672
653
|
federation_entity: {
|
673
654
|
federation_fetch_endpoint?: string | undefined;
|
@@ -689,21 +670,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
689
670
|
} & {
|
690
671
|
[k: string]: unknown;
|
691
672
|
};
|
692
|
-
authority_hints?: string[] | undefined;
|
693
|
-
} & {
|
694
|
-
[k: string]: unknown;
|
695
|
-
};
|
696
|
-
header: {
|
697
|
-
alg: string;
|
698
|
-
kid: string;
|
699
|
-
typ: "entity-statement+jwt";
|
700
|
-
};
|
701
|
-
} | ({
|
702
|
-
payload: {
|
703
|
-
iss: string;
|
704
|
-
sub: string;
|
705
|
-
iat: number;
|
706
|
-
exp: number;
|
707
673
|
jwks: {
|
708
674
|
keys: {
|
709
675
|
kty: "RSA" | "EC";
|
@@ -730,6 +696,21 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
730
696
|
x5u?: string | undefined;
|
731
697
|
}[];
|
732
698
|
};
|
699
|
+
authority_hints?: string[] | undefined;
|
700
|
+
} & {
|
701
|
+
[k: string]: unknown;
|
702
|
+
};
|
703
|
+
} | ({
|
704
|
+
header: {
|
705
|
+
alg: string;
|
706
|
+
kid: string;
|
707
|
+
typ: "entity-statement+jwt";
|
708
|
+
};
|
709
|
+
payload: {
|
710
|
+
iss: string;
|
711
|
+
sub: string;
|
712
|
+
iat: number;
|
713
|
+
exp: number;
|
733
714
|
metadata: {
|
734
715
|
federation_entity: {
|
735
716
|
federation_fetch_endpoint?: string | undefined;
|
@@ -751,17 +732,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
751
732
|
} & {
|
752
733
|
[k: string]: unknown;
|
753
734
|
};
|
754
|
-
authority_hints?: string[] | undefined;
|
755
|
-
} & {
|
756
|
-
[k: string]: unknown;
|
757
|
-
};
|
758
|
-
header: {
|
759
|
-
alg: string;
|
760
|
-
kid: string;
|
761
|
-
typ: "entity-statement+jwt";
|
762
|
-
};
|
763
|
-
} & {
|
764
|
-
payload: {
|
765
735
|
jwks: {
|
766
736
|
keys: {
|
767
737
|
kty: "RSA" | "EC";
|
@@ -788,6 +758,12 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
788
758
|
x5u?: string | undefined;
|
789
759
|
}[];
|
790
760
|
};
|
761
|
+
authority_hints?: string[] | undefined;
|
762
|
+
} & {
|
763
|
+
[k: string]: unknown;
|
764
|
+
};
|
765
|
+
} & {
|
766
|
+
payload: {
|
791
767
|
metadata: {
|
792
768
|
openid_credential_issuer: {
|
793
769
|
jwks: {
|
@@ -816,42 +792,41 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
816
792
|
x5u?: string | undefined;
|
817
793
|
}[];
|
818
794
|
};
|
819
|
-
display: {
|
820
|
-
name: string;
|
821
|
-
locale: string;
|
822
|
-
}[];
|
823
795
|
credential_issuer: string;
|
824
796
|
credential_endpoint: string;
|
825
797
|
revocation_endpoint: string;
|
826
798
|
status_attestation_endpoint: string;
|
799
|
+
display: {
|
800
|
+
name: string;
|
801
|
+
locale: string;
|
802
|
+
}[];
|
827
803
|
credential_configurations_supported: Record<string, {
|
828
804
|
format: "vc+sd-jwt" | "vc+mdoc-cbor";
|
829
|
-
scope: string;
|
830
805
|
display: {
|
831
806
|
name: string;
|
832
807
|
locale: string;
|
833
808
|
}[];
|
809
|
+
scope: string;
|
834
810
|
claims: Record<string, {
|
835
|
-
value_type: string;
|
836
811
|
display: {
|
837
812
|
name: string;
|
838
813
|
locale: string;
|
839
814
|
}[];
|
815
|
+
value_type: string;
|
840
816
|
}>;
|
841
817
|
cryptographic_binding_methods_supported: string[];
|
842
818
|
credential_signing_alg_values_supported: string[];
|
843
819
|
authentic_source?: string | undefined;
|
844
820
|
issuance_errors_supported?: Record<string, {
|
845
821
|
display: {
|
846
|
-
locale: string;
|
847
822
|
title: string;
|
823
|
+
locale: string;
|
848
824
|
description: string;
|
849
825
|
}[];
|
850
826
|
}> | undefined;
|
851
827
|
}>;
|
852
828
|
};
|
853
829
|
oauth_authorization_server: {
|
854
|
-
request_object_signing_alg_values_supported: string[];
|
855
830
|
jwks: {
|
856
831
|
keys: {
|
857
832
|
kty: "RSA" | "EC";
|
@@ -890,6 +865,7 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
890
865
|
response_modes_supported: string[];
|
891
866
|
token_endpoint_auth_methods_supported: string[];
|
892
867
|
token_endpoint_auth_signing_alg_values_supported: string[];
|
868
|
+
request_object_signing_alg_values_supported: string[];
|
893
869
|
};
|
894
870
|
openid_credential_verifier?: {
|
895
871
|
jwks: {
|
@@ -965,13 +941,6 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
965
941
|
authorization_encrypted_response_enc?: string | undefined;
|
966
942
|
} | undefined;
|
967
943
|
};
|
968
|
-
};
|
969
|
-
}) | ({
|
970
|
-
payload: {
|
971
|
-
iss: string;
|
972
|
-
sub: string;
|
973
|
-
iat: number;
|
974
|
-
exp: number;
|
975
944
|
jwks: {
|
976
945
|
keys: {
|
977
946
|
kty: "RSA" | "EC";
|
@@ -998,6 +967,18 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
998
967
|
x5u?: string | undefined;
|
999
968
|
}[];
|
1000
969
|
};
|
970
|
+
};
|
971
|
+
}) | ({
|
972
|
+
header: {
|
973
|
+
alg: string;
|
974
|
+
kid: string;
|
975
|
+
typ: "entity-statement+jwt";
|
976
|
+
};
|
977
|
+
payload: {
|
978
|
+
iss: string;
|
979
|
+
sub: string;
|
980
|
+
iat: number;
|
981
|
+
exp: number;
|
1001
982
|
metadata: {
|
1002
983
|
federation_entity: {
|
1003
984
|
federation_fetch_endpoint?: string | undefined;
|
@@ -1019,15 +1000,36 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
1019
1000
|
} & {
|
1020
1001
|
[k: string]: unknown;
|
1021
1002
|
};
|
1003
|
+
jwks: {
|
1004
|
+
keys: {
|
1005
|
+
kty: "RSA" | "EC";
|
1006
|
+
alg?: string | undefined;
|
1007
|
+
crv?: string | undefined;
|
1008
|
+
d?: string | undefined;
|
1009
|
+
dp?: string | undefined;
|
1010
|
+
dq?: string | undefined;
|
1011
|
+
e?: string | undefined;
|
1012
|
+
ext?: boolean | undefined;
|
1013
|
+
k?: string | undefined;
|
1014
|
+
key_ops?: string[] | undefined;
|
1015
|
+
kid?: string | undefined;
|
1016
|
+
n?: string | undefined;
|
1017
|
+
p?: string | undefined;
|
1018
|
+
q?: string | undefined;
|
1019
|
+
qi?: string | undefined;
|
1020
|
+
use?: string | undefined;
|
1021
|
+
x?: string | undefined;
|
1022
|
+
y?: string | undefined;
|
1023
|
+
x5c?: string[] | undefined;
|
1024
|
+
x5t?: string | undefined;
|
1025
|
+
"x5t#S256"?: string | undefined;
|
1026
|
+
x5u?: string | undefined;
|
1027
|
+
}[];
|
1028
|
+
};
|
1022
1029
|
authority_hints?: string[] | undefined;
|
1023
1030
|
} & {
|
1024
1031
|
[k: string]: unknown;
|
1025
1032
|
};
|
1026
|
-
header: {
|
1027
|
-
alg: string;
|
1028
|
-
kid: string;
|
1029
|
-
typ: "entity-statement+jwt";
|
1030
|
-
};
|
1031
1033
|
} & {
|
1032
1034
|
payload: {
|
1033
1035
|
metadata: {
|
@@ -1107,11 +1109,37 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
1107
1109
|
};
|
1108
1110
|
};
|
1109
1111
|
}) | ({
|
1112
|
+
header: {
|
1113
|
+
alg: string;
|
1114
|
+
kid: string;
|
1115
|
+
typ: "entity-statement+jwt";
|
1116
|
+
};
|
1110
1117
|
payload: {
|
1111
1118
|
iss: string;
|
1112
1119
|
sub: string;
|
1113
1120
|
iat: number;
|
1114
1121
|
exp: number;
|
1122
|
+
metadata: {
|
1123
|
+
federation_entity: {
|
1124
|
+
federation_fetch_endpoint?: string | undefined;
|
1125
|
+
federation_list_endpoint?: string | undefined;
|
1126
|
+
federation_resolve_endpoint?: string | undefined;
|
1127
|
+
federation_trust_mark_status_endpoint?: string | undefined;
|
1128
|
+
federation_trust_mark_list_endpoint?: string | undefined;
|
1129
|
+
federation_trust_mark_endpoint?: string | undefined;
|
1130
|
+
federation_historical_keys_endpoint?: string | undefined;
|
1131
|
+
endpoint_auth_signing_alg_values_supported?: string | undefined;
|
1132
|
+
organization_name?: string | undefined;
|
1133
|
+
homepage_uri?: string | undefined;
|
1134
|
+
policy_uri?: string | undefined;
|
1135
|
+
logo_uri?: string | undefined;
|
1136
|
+
contacts?: string[] | undefined;
|
1137
|
+
} & {
|
1138
|
+
[k: string]: unknown;
|
1139
|
+
};
|
1140
|
+
} & {
|
1141
|
+
[k: string]: unknown;
|
1142
|
+
};
|
1115
1143
|
jwks: {
|
1116
1144
|
keys: {
|
1117
1145
|
kty: "RSA" | "EC";
|
@@ -1138,36 +1166,10 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
1138
1166
|
x5u?: string | undefined;
|
1139
1167
|
}[];
|
1140
1168
|
};
|
1141
|
-
metadata: {
|
1142
|
-
federation_entity: {
|
1143
|
-
federation_fetch_endpoint?: string | undefined;
|
1144
|
-
federation_list_endpoint?: string | undefined;
|
1145
|
-
federation_resolve_endpoint?: string | undefined;
|
1146
|
-
federation_trust_mark_status_endpoint?: string | undefined;
|
1147
|
-
federation_trust_mark_list_endpoint?: string | undefined;
|
1148
|
-
federation_trust_mark_endpoint?: string | undefined;
|
1149
|
-
federation_historical_keys_endpoint?: string | undefined;
|
1150
|
-
endpoint_auth_signing_alg_values_supported?: string | undefined;
|
1151
|
-
organization_name?: string | undefined;
|
1152
|
-
homepage_uri?: string | undefined;
|
1153
|
-
policy_uri?: string | undefined;
|
1154
|
-
logo_uri?: string | undefined;
|
1155
|
-
contacts?: string[] | undefined;
|
1156
|
-
} & {
|
1157
|
-
[k: string]: unknown;
|
1158
|
-
};
|
1159
|
-
} & {
|
1160
|
-
[k: string]: unknown;
|
1161
|
-
};
|
1162
1169
|
authority_hints?: string[] | undefined;
|
1163
1170
|
} & {
|
1164
1171
|
[k: string]: unknown;
|
1165
1172
|
};
|
1166
|
-
header: {
|
1167
|
-
alg: string;
|
1168
|
-
kid: string;
|
1169
|
-
typ: "entity-statement+jwt";
|
1170
|
-
};
|
1171
1173
|
} & {
|
1172
1174
|
payload: {
|
1173
1175
|
metadata: {
|
@@ -1221,6 +1223,11 @@ export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof f
|
|
1221
1223
|
export declare function getEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
|
1222
1224
|
appFetch?: GlobalFetch["fetch"];
|
1223
1225
|
}): Promise<{
|
1226
|
+
header: {
|
1227
|
+
alg: string;
|
1228
|
+
kid: string;
|
1229
|
+
typ: "entity-statement+jwt";
|
1230
|
+
};
|
1224
1231
|
payload: {
|
1225
1232
|
iss: string;
|
1226
1233
|
sub: string;
|
@@ -1257,11 +1264,6 @@ export declare function getEntityStatement(accreditationBodyBaseUrl: string, sub
|
|
1257
1264
|
trust_mark: string;
|
1258
1265
|
}[] | undefined;
|
1259
1266
|
};
|
1260
|
-
header: {
|
1261
|
-
alg: string;
|
1262
|
-
kid: string;
|
1263
|
-
typ: "entity-statement+jwt";
|
1264
|
-
};
|
1265
1267
|
}>;
|
1266
1268
|
/**
|
1267
1269
|
* Fetch the entity statement document for a given federation entity.
|