@pagopa/io-react-native-wallet 2.0.0-next.1 → 2.0.0-next.3

package/lib/typescript/trust/build-chain.d.ts

@@ -0,0 +1,1300 @@
+import type { JWK } from "../utils/jwk";
+import { CredentialIssuerEntityConfiguration, EntityConfiguration, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration, WalletProviderEntityConfiguration } from "./types";
+/**
+ * Fetch and parse the entity configuration document for a given federation entity.
+ * This is an inner method to serve public interfaces.
+ *
+ * To add another entity configuration type (example: Foo entity type):
+ *  - create its zod schema and type by inherit from the base type (example: FooEntityConfiguration = BaseEntityConfiguration.and(...))
+ *  - add such type to EntityConfiguration union
+ *  - add an overload to this function
+ *  - create a public function which use such type (example: getFooEntityConfiguration = (url, options) => Promise<FooEntityConfiguration>)
+ *
+ * @param entityBaseUrl The base url of the entity.
+ * @param schema The expected schema of the entity configuration, according to the kind of entity we are fetching from.
+ * @param options An optional object with additional options.
+ * @param options.appFetch An optional instance of the http client to be used.
+ * @returns The parsed entity configuration object
+ * @throws {IoWalletError} If the http request fails
+ * @throws Parse error if the document is not in the expected shape.
+ */
+declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof WalletProviderEntityConfiguration, options?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<WalletProviderEntityConfiguration>;
+declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof RelyingPartyEntityConfiguration, options?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<RelyingPartyEntityConfiguration>;
+declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof TrustAnchorEntityConfiguration, options?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<TrustAnchorEntityConfiguration>;
+declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof CredentialIssuerEntityConfiguration, options?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<CredentialIssuerEntityConfiguration>;
+declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof EntityConfiguration, options?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<EntityConfiguration>;
+export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} & {
+    payload: {
+        metadata: {
+            wallet_provider: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                token_endpoint: string;
+                grant_types_supported: string[];
+                token_endpoint_auth_methods_supported: string[];
+                token_endpoint_auth_signing_alg_values_supported: string[];
+                aal_values_supported?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        };
+    };
+}>;
+export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} & {
+    payload: {
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            openid_credential_issuer: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                display: {
+                    name: string;
+                    locale: string;
+                }[];
+                credential_issuer: string;
+                credential_endpoint: string;
+                nonce_endpoint: string;
+                status_attestation_endpoint: string;
+                credential_configurations_supported: Record<string, ({
+                    vct: string;
+                    format: "dc+sd-jwt";
+                } | {
+                    format: "mso_mdoc";
+                    doctype: string;
+                }) & {
+                    scope: string;
+                    display: {
+                        name: string;
+                        locale: string;
+                    }[];
+                    claims: {
+                        path: string[];
+                        display: {
+                            name: string;
+                            locale: string;
+                        }[];
+                    }[];
+                    cryptographic_binding_methods_supported: string[];
+                    credential_signing_alg_values_supported: string[];
+                    authentic_source?: string | undefined;
+                    issuance_errors_supported?: Record<string, {
+                        display: {
+                            description: string;
+                            locale: string;
+                            title: string;
+                        }[];
+                    }> | undefined;
+                }>;
+                trust_frameworks_supported: string[];
+                evidence_supported: string[];
+                revocation_endpoint?: string | undefined;
+            };
+            oauth_authorization_server: {
+                request_object_signing_alg_values_supported: string[];
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                authorization_endpoint: string;
+                pushed_authorization_request_endpoint: string;
+                token_endpoint: string;
+                client_registration_types_supported: string[];
+                code_challenge_methods_supported: string[];
+                acr_values_supported: string[];
+                grant_types_supported: string[];
+                issuer: string;
+                scopes_supported: string[];
+                response_modes_supported: string[];
+                token_endpoint_auth_methods_supported: string[];
+                token_endpoint_auth_signing_alg_values_supported: string[];
+            };
+            openid_credential_verifier?: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                application_type?: string | undefined;
+                client_id?: string | undefined;
+                client_name?: string | undefined;
+                contacts?: string[] | undefined;
+                presentation_definition?: {
+                    id: string;
+                    input_descriptors: {
+                        id: string;
+                        constraints: {
+                            fields?: {
+                                path: string[];
+                                id?: string | undefined;
+                                purpose?: string | undefined;
+                                name?: string | undefined;
+                                filter?: any;
+                                optional?: boolean | undefined;
+                                intent_to_retain?: boolean | undefined;
+                            }[] | undefined;
+                            limit_disclosure?: "required" | "preferred" | undefined;
+                        };
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        format?: Record<string, any> | undefined;
+                        group?: string | undefined;
+                    }[];
+                    name?: string | undefined;
+                    purpose?: string | undefined;
+                    submission_requirements?: {
+                        rule: string;
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        from?: string | undefined;
+                        from_nested?: {
+                            rule: string;
+                            from: string;
+                            name?: string | undefined;
+                            purpose?: string | undefined;
+                        }[] | undefined;
+                        count?: number | undefined;
+                    }[] | undefined;
+                } | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
+            } | undefined;
+        };
+    };
+}>;
+export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+}>;
+export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} & {
+    payload: {
+        metadata: {
+            openid_credential_verifier: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                application_type?: string | undefined;
+                client_id?: string | undefined;
+                client_name?: string | undefined;
+                contacts?: string[] | undefined;
+                presentation_definition?: {
+                    id: string;
+                    input_descriptors: {
+                        id: string;
+                        constraints: {
+                            fields?: {
+                                path: string[];
+                                id?: string | undefined;
+                                purpose?: string | undefined;
+                                name?: string | undefined;
+                                filter?: any;
+                                optional?: boolean | undefined;
+                                intent_to_retain?: boolean | undefined;
+                            }[] | undefined;
+                            limit_disclosure?: "required" | "preferred" | undefined;
+                        };
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        format?: Record<string, any> | undefined;
+                        group?: string | undefined;
+                    }[];
+                    name?: string | undefined;
+                    purpose?: string | undefined;
+                    submission_requirements?: {
+                        rule: string;
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        from?: string | undefined;
+                        from_nested?: {
+                            rule: string;
+                            from: string;
+                            name?: string | undefined;
+                            purpose?: string | undefined;
+                        }[] | undefined;
+                        count?: number | undefined;
+                    }[] | undefined;
+                } | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
+            };
+        };
+    };
+}>;
+export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} | ({
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} & {
+    payload: {
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            openid_credential_issuer: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                display: {
+                    name: string;
+                    locale: string;
+                }[];
+                credential_issuer: string;
+                credential_endpoint: string;
+                nonce_endpoint: string;
+                status_attestation_endpoint: string;
+                credential_configurations_supported: Record<string, ({
+                    vct: string;
+                    format: "dc+sd-jwt";
+                } | {
+                    format: "mso_mdoc";
+                    doctype: string;
+                }) & {
+                    scope: string;
+                    display: {
+                        name: string;
+                        locale: string;
+                    }[];
+                    claims: {
+                        path: string[];
+                        display: {
+                            name: string;
+                            locale: string;
+                        }[];
+                    }[];
+                    cryptographic_binding_methods_supported: string[];
+                    credential_signing_alg_values_supported: string[];
+                    authentic_source?: string | undefined;
+                    issuance_errors_supported?: Record<string, {
+                        display: {
+                            description: string;
+                            locale: string;
+                            title: string;
+                        }[];
+                    }> | undefined;
+                }>;
+                trust_frameworks_supported: string[];
+                evidence_supported: string[];
+                revocation_endpoint?: string | undefined;
+            };
+            oauth_authorization_server: {
+                request_object_signing_alg_values_supported: string[];
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                authorization_endpoint: string;
+                pushed_authorization_request_endpoint: string;
+                token_endpoint: string;
+                client_registration_types_supported: string[];
+                code_challenge_methods_supported: string[];
+                acr_values_supported: string[];
+                grant_types_supported: string[];
+                issuer: string;
+                scopes_supported: string[];
+                response_modes_supported: string[];
+                token_endpoint_auth_methods_supported: string[];
+                token_endpoint_auth_signing_alg_values_supported: string[];
+            };
+            openid_credential_verifier?: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                application_type?: string | undefined;
+                client_id?: string | undefined;
+                client_name?: string | undefined;
+                contacts?: string[] | undefined;
+                presentation_definition?: {
+                    id: string;
+                    input_descriptors: {
+                        id: string;
+                        constraints: {
+                            fields?: {
+                                path: string[];
+                                id?: string | undefined;
+                                purpose?: string | undefined;
+                                name?: string | undefined;
+                                filter?: any;
+                                optional?: boolean | undefined;
+                                intent_to_retain?: boolean | undefined;
+                            }[] | undefined;
+                            limit_disclosure?: "required" | "preferred" | undefined;
+                        };
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        format?: Record<string, any> | undefined;
+                        group?: string | undefined;
+                    }[];
+                    name?: string | undefined;
+                    purpose?: string | undefined;
+                    submission_requirements?: {
+                        rule: string;
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        from?: string | undefined;
+                        from_nested?: {
+                            rule: string;
+                            from: string;
+                            name?: string | undefined;
+                            purpose?: string | undefined;
+                        }[] | undefined;
+                        count?: number | undefined;
+                    }[] | undefined;
+                } | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
+            } | undefined;
+        };
+    };
+}) | ({
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} & {
+    payload: {
+        metadata: {
+            openid_credential_verifier: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                application_type?: string | undefined;
+                client_id?: string | undefined;
+                client_name?: string | undefined;
+                contacts?: string[] | undefined;
+                presentation_definition?: {
+                    id: string;
+                    input_descriptors: {
+                        id: string;
+                        constraints: {
+                            fields?: {
+                                path: string[];
+                                id?: string | undefined;
+                                purpose?: string | undefined;
+                                name?: string | undefined;
+                                filter?: any;
+                                optional?: boolean | undefined;
+                                intent_to_retain?: boolean | undefined;
+                            }[] | undefined;
+                            limit_disclosure?: "required" | "preferred" | undefined;
+                        };
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        format?: Record<string, any> | undefined;
+                        group?: string | undefined;
+                    }[];
+                    name?: string | undefined;
+                    purpose?: string | undefined;
+                    submission_requirements?: {
+                        rule: string;
+                        name?: string | undefined;
+                        purpose?: string | undefined;
+                        from?: string | undefined;
+                        from_nested?: {
+                            rule: string;
+                            from: string;
+                            name?: string | undefined;
+                            purpose?: string | undefined;
+                        }[] | undefined;
+                        count?: number | undefined;
+                    }[] | undefined;
+                } | undefined;
+                request_uris?: string[] | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
+            };
+        };
+    };
+}) | ({
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        metadata: {
+            federation_entity: {
+                federation_fetch_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                organization_name?: string | undefined;
+                homepage_uri?: string | undefined;
+                policy_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                contacts?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        } & {
+            [k: string]: unknown;
+        };
+        authority_hints?: string[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+} & {
+    payload: {
+        metadata: {
+            wallet_provider: {
+                jwks: {
+                    keys: {
+                        kty: "RSA" | "EC";
+                        alg?: string | undefined;
+                        crv?: string | undefined;
+                        d?: string | undefined;
+                        dp?: string | undefined;
+                        dq?: string | undefined;
+                        e?: string | undefined;
+                        ext?: boolean | undefined;
+                        k?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        kid?: string | undefined;
+                        n?: string | undefined;
+                        p?: string | undefined;
+                        q?: string | undefined;
+                        qi?: string | undefined;
+                        use?: string | undefined;
+                        x?: string | undefined;
+                        y?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                token_endpoint: string;
+                grant_types_supported: string[];
+                token_endpoint_auth_methods_supported: string[];
+                token_endpoint_auth_signing_alg_values_supported: string[];
+                aal_values_supported?: string[] | undefined;
+            } & {
+                [k: string]: unknown;
+            };
+        };
+    };
+})>;
+/**
+ * Fetch and parse the entity statement document for a given federation entity.
+ *
+ * @param accreditationBodyBaseUrl The base url of the accreditation body which holds and signs the required entity statement
+ * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The parsed entity configuration object
+ * @throws {IoWalletError} If the http request fails
+ */
+export declare function getEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<{
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        iss: string;
+        sub: string;
+        iat: number;
+        exp: number;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                y?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+            }[];
+        };
+        trust_marks?: {
+            id: string;
+            trust_mark: string;
+        }[] | undefined;
+    };
+}>;
+/**
+ * Fetch the signed entity configuration token for an entity
+ *
+ * @param entityBaseUrl The url of the entity to fetch
+ * @param appFetch (optional) fetch api implementation
+ * @returns The signed Entity Configuration token
+ */
+export declare function getSignedEntityConfiguration(entityBaseUrl: string, { appFetch, }?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<string>;
+/**
+ * Fetch the entity statement document for a given federation entity.
+ *
+ * @param federationFetchEndpoint The exact endpoint provided by the parent EC's metadata.
+ * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The signed entity statement token.
+ * @throws {IoWalletError} If the http request fails.
+ */
+export declare function getSignedEntityStatement(federationFetchEndpoint: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<string>;
+/**
+ * Fetch the federation list document from a given endpoint.
+ *
+ * @param federationListEndpoint The URL of the federation list endpoint.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The federation list as an array of strings.
+ * @throws {IoWalletError} If the HTTP request fails.
+ * @throws {FederationError} If the result is not in the expected format.
+ */
+export declare function getFederationList(federationListEndpoint: string, { appFetch, }?: {
+    appFetch?: GlobalFetch["fetch"];
+}): Promise<string[]>;
+/**
+ * Build a not-verified trust chain for a given Relying Party (RP) entity.
+ *
+ * @param relyingPartyEntityBaseUrl The base URL of the RP entity
+ * @param trustAnchorKey The public key of the Trust Anchor (TA) entity
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns A list of signed tokens that represent the trust chain, in the order of the chain (from the RP to the Trust Anchor)
+ * @throws {FederationError} When an element of the chain fails to parse or other build steps fail.
+ */
+export declare function buildTrustChain(relyingPartyEntityBaseUrl: string, trustAnchorKey: JWK, appFetch?: GlobalFetch["fetch"]): Promise<string[]>;
+export {};
+//# sourceMappingURL=build-chain.d.ts.map