@pagopa/io-react-native-wallet 2.0.0-next.1 → 2.0.0-next.3

package/lib/typescript/trust/index.d.ts

@@ -1,1302 +1,6 @@
-import { CredentialIssuerEntityConfiguration, EntityConfiguration, EntityStatement, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration, WalletProviderEntityConfiguration } from "./types";
-import { validateTrustChain } from "./chain";
-import type { JWK } from "../utils/jwk";
-import type { X509CertificateOptions } from "@pagopa/io-react-native-crypto";
-export type { WalletProviderEntityConfiguration, TrustAnchorEntityConfiguration, CredentialIssuerEntityConfiguration, RelyingPartyEntityConfiguration, EntityConfiguration, EntityStatement, };
-/**
- * Verify a given trust chain is actually valid.
- * It can handle fast chain renewal, which means we try to fetch a fresh version of each statement.
- *
- * @param trustAnchorEntity The entity configuration of the known trust anchor
- * @param chain The chain of statements to be validated
- * @param x509Options Options for the verification process
- * @param appFetch (optional) fetch api implementation
- * @param renewOnFail Whether to attempt to renew the trust chain if the initial validation fails
- * @returns The result of the chain validation
- * @throws {FederationError} If the chain is not valid
- */
-export declare function verifyTrustChain(trustAnchorEntity: TrustAnchorEntityConfiguration, chain: string[], x509Options?: X509CertificateOptions, { appFetch, renewOnFail, }?: {
-    appFetch?: GlobalFetch["fetch"];
-    renewOnFail?: boolean;
-}): Promise<ReturnType<typeof validateTrustChain>>;
-/**
- * Fetch the signed entity configuration token for an entity
- *
- * @param entityBaseUrl The url of the entity to fetch
- * @param appFetch (optional) fetch api implementation
- * @returns The signed Entity Configuration token
- */
-export declare function getSignedEntityConfiguration(entityBaseUrl: string, { appFetch, }?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<string>;
-/**
- * Fetch and parse the entity configuration document for a given federation entity.
- * This is an inner method to serve public interfaces.
- *
- * To add another entity configuration type (example: Foo entity type):
- *  - create its zod schema and type by inherit from the base type (example: FooEntityConfiguration = BaseEntityConfiguration.and(...))
- *  - add such type to EntityConfiguration union
- *  - add an overload to this function
- *  - create a public function which use such type (example: getFooEntityConfiguration = (url, options) => Promise<FooEntityConfiguration>)
- *
- * @param entityBaseUrl The base url of the entity.
- * @param schema The expected schema of the entity configuration, according to the kind of entity we are fetching from.
- * @param options An optional object with additional options.
- * @param options.appFetch An optional instance of the http client to be used.
- * @returns The parsed entity configuration object
- * @throws {IoWalletError} If the http request fails
- * @throws Parse error if the document is not in the expected shape.
- */
-declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof WalletProviderEntityConfiguration, options?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<WalletProviderEntityConfiguration>;
-declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof RelyingPartyEntityConfiguration, options?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<RelyingPartyEntityConfiguration>;
-declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof TrustAnchorEntityConfiguration, options?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<TrustAnchorEntityConfiguration>;
-declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof CredentialIssuerEntityConfiguration, options?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<CredentialIssuerEntityConfiguration>;
-declare function fetchAndParseEntityConfiguration(entityBaseUrl: string, schema: typeof EntityConfiguration, options?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<EntityConfiguration>;
-export declare const getWalletProviderEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                federation_trust_mark_endpoint?: string | undefined;
-                federation_historical_keys_endpoint?: string | undefined;
-                endpoint_auth_signing_alg_values_supported?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} & {
-    payload: {
-        metadata: {
-            wallet_provider: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                token_endpoint: string;
-                grant_types_supported: string[];
-                token_endpoint_auth_methods_supported: string[];
-                token_endpoint_auth_signing_alg_values_supported: string[];
-                aal_values_supported?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        };
-    };
-}>;
-export declare const getCredentialIssuerEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                federation_trust_mark_endpoint?: string | undefined;
-                federation_historical_keys_endpoint?: string | undefined;
-                endpoint_auth_signing_alg_values_supported?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} & {
-    payload: {
-        metadata: {
-            openid_credential_issuer: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                credential_issuer: string;
-                credential_endpoint: string;
-                revocation_endpoint: string;
-                status_attestation_endpoint: string;
-                display: {
-                    name: string;
-                    locale: string;
-                }[];
-                credential_configurations_supported: Record<string, {
-                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
-                    display: {
-                        name: string;
-                        locale: string;
-                    }[];
-                    scope: string;
-                    claims: Record<string, {
-                        display: {
-                            name: string;
-                            locale: string;
-                        }[];
-                        value_type: string;
-                    }>;
-                    cryptographic_binding_methods_supported: string[];
-                    credential_signing_alg_values_supported: string[];
-                    authentic_source?: string | undefined;
-                    issuance_errors_supported?: Record<string, {
-                        display: {
-                            title: string;
-                            locale: string;
-                            description: string;
-                        }[];
-                    }> | undefined;
-                }>;
-            };
-            oauth_authorization_server: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                authorization_endpoint: string;
-                pushed_authorization_request_endpoint: string;
-                token_endpoint: string;
-                client_registration_types_supported: string[];
-                code_challenge_methods_supported: string[];
-                acr_values_supported: string[];
-                grant_types_supported: string[];
-                issuer: string;
-                scopes_supported: string[];
-                response_modes_supported: string[];
-                token_endpoint_auth_methods_supported: string[];
-                token_endpoint_auth_signing_alg_values_supported: string[];
-                request_object_signing_alg_values_supported: string[];
-            };
-            openid_credential_verifier?: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                application_type?: string | undefined;
-                client_id?: string | undefined;
-                client_name?: string | undefined;
-                contacts?: string[] | undefined;
-                presentation_definition?: {
-                    id: string;
-                    input_descriptors: {
-                        id: string;
-                        constraints: {
-                            fields?: {
-                                path: string[];
-                                id?: string | undefined;
-                                purpose?: string | undefined;
-                                name?: string | undefined;
-                                filter?: any;
-                                optional?: boolean | undefined;
-                                intent_to_retain?: boolean | undefined;
-                            }[] | undefined;
-                            limit_disclosure?: "required" | "preferred" | undefined;
-                        };
-                        name?: string | undefined;
-                        purpose?: string | undefined;
-                        format?: Record<string, any> | undefined;
-                        group?: string | undefined;
-                    }[];
-                    name?: string | undefined;
-                    purpose?: string | undefined;
-                    submission_requirements?: {
-                        rule: string;
-                        name?: string | undefined;
-                        purpose?: string | undefined;
-                        from?: string | undefined;
-                        from_nested?: {
-                            rule: string;
-                            from: string;
-                            name?: string | undefined;
-                            purpose?: string | undefined;
-                        }[] | undefined;
-                        count?: number | undefined;
-                    }[] | undefined;
-                } | undefined;
-                request_uris?: string[] | undefined;
-                authorization_signed_response_alg?: string | undefined;
-                authorization_encrypted_response_alg?: string | undefined;
-                authorization_encrypted_response_enc?: string | undefined;
-            } | undefined;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-    };
-}>;
-export declare const getTrustAnchorEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                federation_trust_mark_endpoint?: string | undefined;
-                federation_historical_keys_endpoint?: string | undefined;
-                endpoint_auth_signing_alg_values_supported?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-}>;
-export declare const getRelyingPartyEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                federation_trust_mark_endpoint?: string | undefined;
-                federation_historical_keys_endpoint?: string | undefined;
-                endpoint_auth_signing_alg_values_supported?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} & {
-    payload: {
-        metadata: {
-            openid_credential_verifier: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                application_type?: string | undefined;
-                client_id?: string | undefined;
-                client_name?: string | undefined;
-                contacts?: string[] | undefined;
-                presentation_definition?: {
-                    id: string;
-                    input_descriptors: {
-                        id: string;
-                        constraints: {
-                            fields?: {
-                                path: string[];
-                                id?: string | undefined;
-                                purpose?: string | undefined;
-                                name?: string | undefined;
-                                filter?: any;
-                                optional?: boolean | undefined;
-                                intent_to_retain?: boolean | undefined;
-                            }[] | undefined;
-                            limit_disclosure?: "required" | "preferred" | undefined;
-                        };
-                        name?: string | undefined;
-                        purpose?: string | undefined;
-                        format?: Record<string, any> | undefined;
-                        group?: string | undefined;
-                    }[];
-                    name?: string | undefined;
-                    purpose?: string | undefined;
-                    submission_requirements?: {
-                        rule: string;
-                        name?: string | undefined;
-                        purpose?: string | undefined;
-                        from?: string | undefined;
-                        from_nested?: {
-                            rule: string;
-                            from: string;
-                            name?: string | undefined;
-                            purpose?: string | undefined;
-                        }[] | undefined;
-                        count?: number | undefined;
-                    }[] | undefined;
-                } | undefined;
-                request_uris?: string[] | undefined;
-                authorization_signed_response_alg?: string | undefined;
-                authorization_encrypted_response_alg?: string | undefined;
-                authorization_encrypted_response_enc?: string | undefined;
-            };
-        };
-    };
-}>;
-export declare const getEntityConfiguration: (entityBaseUrl: Parameters<typeof fetchAndParseEntityConfiguration>[0], options?: Parameters<typeof fetchAndParseEntityConfiguration>[2]) => Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                federation_trust_mark_endpoint?: string | undefined;
-                federation_historical_keys_endpoint?: string | undefined;
-                endpoint_auth_signing_alg_values_supported?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                federation_trust_mark_endpoint?: string | undefined;
-                federation_historical_keys_endpoint?: string | undefined;
-                endpoint_auth_signing_alg_values_supported?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} & {
-    payload: {
-        metadata: {
-            openid_credential_issuer: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                credential_issuer: string;
-                credential_endpoint: string;
-                revocation_endpoint: string;
-                status_attestation_endpoint: string;
-                display: {
-                    name: string;
-                    locale: string;
-                }[];
-                credential_configurations_supported: Record<string, {
-                    format: "vc+sd-jwt" | "vc+mdoc-cbor";
-                    display: {
-                        name: string;
-                        locale: string;
-                    }[];
-                    scope: string;
-                    claims: Record<string, {
-                        display: {
-                            name: string;
-                            locale: string;
-                        }[];
-                        value_type: string;
-                    }>;
-                    cryptographic_binding_methods_supported: string[];
-                    credential_signing_alg_values_supported: string[];
-                    authentic_source?: string | undefined;
-                    issuance_errors_supported?: Record<string, {
-                        display: {
-                            title: string;
-                            locale: string;
-                            description: string;
-                        }[];
-                    }> | undefined;
-                }>;
-            };
-            oauth_authorization_server: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                authorization_endpoint: string;
-                pushed_authorization_request_endpoint: string;
-                token_endpoint: string;
-                client_registration_types_supported: string[];
-                code_challenge_methods_supported: string[];
-                acr_values_supported: string[];
-                grant_types_supported: string[];
-                issuer: string;
-                scopes_supported: string[];
-                response_modes_supported: string[];
-                token_endpoint_auth_methods_supported: string[];
-                token_endpoint_auth_signing_alg_values_supported: string[];
-                request_object_signing_alg_values_supported: string[];
-            };
-            openid_credential_verifier?: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                application_type?: string | undefined;
-                client_id?: string | undefined;
-                client_name?: string | undefined;
-                contacts?: string[] | undefined;
-                presentation_definition?: {
-                    id: string;
-                    input_descriptors: {
-                        id: string;
-                        constraints: {
-                            fields?: {
-                                path: string[];
-                                id?: string | undefined;
-                                purpose?: string | undefined;
-                                name?: string | undefined;
-                                filter?: any;
-                                optional?: boolean | undefined;
-                                intent_to_retain?: boolean | undefined;
-                            }[] | undefined;
-                            limit_disclosure?: "required" | "preferred" | undefined;
-                        };
-                        name?: string | undefined;
-                        purpose?: string | undefined;
-                        format?: Record<string, any> | undefined;
-                        group?: string | undefined;
-                    }[];
-                    name?: string | undefined;
-                    purpose?: string | undefined;
-                    submission_requirements?: {
-                        rule: string;
-                        name?: string | undefined;
-                        purpose?: string | undefined;
-                        from?: string | undefined;
-                        from_nested?: {
-                            rule: string;
-                            from: string;
-                            name?: string | undefined;
-                            purpose?: string | undefined;
-                        }[] | undefined;
-                        count?: number | undefined;
-                    }[] | undefined;
-                } | undefined;
-                request_uris?: string[] | undefined;
-                authorization_signed_response_alg?: string | undefined;
-                authorization_encrypted_response_alg?: string | undefined;
-                authorization_encrypted_response_enc?: string | undefined;
-            } | undefined;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-    };
-}) | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                federation_trust_mark_endpoint?: string | undefined;
-                federation_historical_keys_endpoint?: string | undefined;
-                endpoint_auth_signing_alg_values_supported?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} & {
-    payload: {
-        metadata: {
-            openid_credential_verifier: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                application_type?: string | undefined;
-                client_id?: string | undefined;
-                client_name?: string | undefined;
-                contacts?: string[] | undefined;
-                presentation_definition?: {
-                    id: string;
-                    input_descriptors: {
-                        id: string;
-                        constraints: {
-                            fields?: {
-                                path: string[];
-                                id?: string | undefined;
-                                purpose?: string | undefined;
-                                name?: string | undefined;
-                                filter?: any;
-                                optional?: boolean | undefined;
-                                intent_to_retain?: boolean | undefined;
-                            }[] | undefined;
-                            limit_disclosure?: "required" | "preferred" | undefined;
-                        };
-                        name?: string | undefined;
-                        purpose?: string | undefined;
-                        format?: Record<string, any> | undefined;
-                        group?: string | undefined;
-                    }[];
-                    name?: string | undefined;
-                    purpose?: string | undefined;
-                    submission_requirements?: {
-                        rule: string;
-                        name?: string | undefined;
-                        purpose?: string | undefined;
-                        from?: string | undefined;
-                        from_nested?: {
-                            rule: string;
-                            from: string;
-                            name?: string | undefined;
-                            purpose?: string | undefined;
-                        }[] | undefined;
-                        count?: number | undefined;
-                    }[] | undefined;
-                } | undefined;
-                request_uris?: string[] | undefined;
-                authorization_signed_response_alg?: string | undefined;
-                authorization_encrypted_response_alg?: string | undefined;
-                authorization_encrypted_response_enc?: string | undefined;
-            };
-        };
-    };
-}) | ({
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        metadata: {
-            federation_entity: {
-                federation_fetch_endpoint?: string | undefined;
-                federation_list_endpoint?: string | undefined;
-                federation_resolve_endpoint?: string | undefined;
-                federation_trust_mark_status_endpoint?: string | undefined;
-                federation_trust_mark_list_endpoint?: string | undefined;
-                federation_trust_mark_endpoint?: string | undefined;
-                federation_historical_keys_endpoint?: string | undefined;
-                endpoint_auth_signing_alg_values_supported?: string | undefined;
-                organization_name?: string | undefined;
-                homepage_uri?: string | undefined;
-                policy_uri?: string | undefined;
-                logo_uri?: string | undefined;
-                contacts?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        } & {
-            [k: string]: unknown;
-        };
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        authority_hints?: string[] | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-} & {
-    payload: {
-        metadata: {
-            wallet_provider: {
-                jwks: {
-                    keys: {
-                        kty: "RSA" | "EC";
-                        alg?: string | undefined;
-                        crv?: string | undefined;
-                        d?: string | undefined;
-                        dp?: string | undefined;
-                        dq?: string | undefined;
-                        e?: string | undefined;
-                        ext?: boolean | undefined;
-                        k?: string | undefined;
-                        key_ops?: string[] | undefined;
-                        kid?: string | undefined;
-                        n?: string | undefined;
-                        p?: string | undefined;
-                        q?: string | undefined;
-                        qi?: string | undefined;
-                        use?: string | undefined;
-                        x?: string | undefined;
-                        y?: string | undefined;
-                        x5c?: string[] | undefined;
-                        x5t?: string | undefined;
-                        "x5t#S256"?: string | undefined;
-                        x5u?: string | undefined;
-                    }[];
-                };
-                token_endpoint: string;
-                grant_types_supported: string[];
-                token_endpoint_auth_methods_supported: string[];
-                token_endpoint_auth_signing_alg_values_supported: string[];
-                aal_values_supported?: string[] | undefined;
-            } & {
-                [k: string]: unknown;
-            };
-        };
-    };
-})>;
-/**
- * Fetch and parse the entity statement document for a given federation entity.
- *
- * @param accreditationBodyBaseUrl The base url of the accreditation body which holds and signs the required entity statement
- * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity
- * @param appFetch An optional instance of the http client to be used.
- * @returns The parsed entity configuration object
- * @throws {IoWalletError} If the http request fails
- */
-export declare function getEntityStatement(accreditationBodyBaseUrl: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<{
-    header: {
-        alg: string;
-        kid: string;
-        typ: "entity-statement+jwt";
-    };
-    payload: {
-        iss: string;
-        sub: string;
-        iat: number;
-        exp: number;
-        jwks: {
-            keys: {
-                kty: "RSA" | "EC";
-                alg?: string | undefined;
-                crv?: string | undefined;
-                d?: string | undefined;
-                dp?: string | undefined;
-                dq?: string | undefined;
-                e?: string | undefined;
-                ext?: boolean | undefined;
-                k?: string | undefined;
-                key_ops?: string[] | undefined;
-                kid?: string | undefined;
-                n?: string | undefined;
-                p?: string | undefined;
-                q?: string | undefined;
-                qi?: string | undefined;
-                use?: string | undefined;
-                x?: string | undefined;
-                y?: string | undefined;
-                x5c?: string[] | undefined;
-                x5t?: string | undefined;
-                "x5t#S256"?: string | undefined;
-                x5u?: string | undefined;
-            }[];
-        };
-        trust_marks?: {
-            id: string;
-            trust_mark: string;
-        }[] | undefined;
-    };
-}>;
-/**
- * Fetch the entity statement document for a given federation entity.
- *
- * @param federationFetchEndpoint The exact endpoint provided by the parent EC's metadata.
- * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity.
- * @param appFetch An optional instance of the http client to be used.
- * @returns The signed entity statement token.
- * @throws {IoWalletError} If the http request fails.
- */
-export declare function getSignedEntityStatement(federationFetchEndpoint: string, subordinatedEntityBaseUrl: string, { appFetch, }?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<string>;
-/**
- * Fetch the federation list document from a given endpoint.
- *
- * @param federationListEndpoint The URL of the federation list endpoint.
- * @param appFetch An optional instance of the http client to be used.
- * @returns The federation list as an array of strings.
- * @throws {IoWalletError} If the HTTP request fails.
- * @throws {FederationError} If the result is not in the expected format.
- */
-export declare function getFederationList(federationListEndpoint: string, { appFetch, }?: {
-    appFetch?: GlobalFetch["fetch"];
-}): Promise<string[]>;
-/**
- * Build a not-verified trust chain for a given Relying Party (RP) entity.
- *
- * @param relyingPartyEntityBaseUrl The base URL of the RP entity
- * @param trustAnchorKey The public key of the Trust Anchor (TA) entity
- * @param appFetch An optional instance of the http client to be used.
- * @returns A list of signed tokens that represent the trust chain, in the order of the chain (from the RP to the Trust Anchor)
- * @throws {FederationError} When an element of the chain fails to parse or other build steps fail.
- */
-export declare function buildTrustChain(relyingPartyEntityBaseUrl: string, trustAnchorKey: JWK, appFetch?: GlobalFetch["fetch"]): Promise<string[]>;
+import * as Build from "./build-chain";
+import * as Verify from "./verify-chain";
+import * as Errors from "./errors";
+import * as Types from "./types";
+export { Build, Verify, Errors, Types };
 //# sourceMappingURL=index.d.ts.map