@pagopa/io-react-native-wallet 2.0.0-next.9 → 2.0.0

package/src/credential/status/03-verify-and-parse-status-assertion.ts

@@ -17,12 +17,13 @@ import { Logger, LogLevel } from "../../utils/logging";
 import type { ObtainCredential } from "../issuance";
 import { extractJwkFromCredential } from "../../utils/credentials";
 import { isSameThumbprint } from "../../utils/jwk";
+import type { SupportedSdJwtLegacyFormat } from "../../sd-jwt/types";
 
 export type VerifyAndParseStatusAssertion = (
   issuerConf: Out<EvaluateIssuerTrust>["issuerConf"],
   statusAssertion: Out<StatusAssertion>,
   credential: Out<ObtainCredential>["credential"],
-  format: Out<ObtainCredential>["format"]
+  format: Out<ObtainCredential>["format"] | SupportedSdJwtLegacyFormat
 ) => Promise<{ parsedStatusAssertion: ParsedStatusAssertion }>;
 
 /**

package/src/sd-jwt/types.ts

@@ -20,6 +20,13 @@ export const Disclosure = z.tuple([
   /* claim value */ z.unknown(),
 ]);
 
+/**
+ * For backward compatibility reasons it is still necessary to support the legacy SD-JWT
+ * in a few flows (for instance status assertion and presentation of the old eID).
+ */
+export type SupportedSdJwtLegacyFormat = typeof LEGACY_SD_JWT;
+export const LEGACY_SD_JWT = "vc+sd-jwt";
+
 /**
  * Encoding depends on the serialization algorithm used when generating the disclosure tokens.
  * The SD-JWT reference itself take no decision about how to handle whitespaces in serialized objects.
@@ -44,7 +51,7 @@ const StatusAssertion = z.object({
 export type SdJwt4VC = z.infer<typeof SdJwt4VC>;
 export const SdJwt4VC = z.object({
   header: z.object({
-    typ: z.enum(["vc+sd-jwt", "dc+sd-jwt"]),
+    typ: z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
     alg: z.string(),
     kid: z.string(),
     trust_chain: z.array(z.string()).optional(),
@@ -62,7 +69,7 @@ export const SdJwt4VC = z.object({
         .union([
           // Credentials v1.0
           z.object({ status_assertion: StatusAssertion }),
-          // Credentials v0.7.1
+          // Legacy credentials v0.7.1
           z.object({ status_attestation: StatusAssertion }),
         ])
         .optional(),

package/src/trust/types.ts

@@ -71,6 +71,10 @@ const SupportedCredentialMetadata = z.intersection(
   })
 );
 
+/**
+ * Supported formats for credentials issued by the Issuer API 1.0,
+ * compliant with IT-Wallet technical specifications 1.0.
+ */
 export type SupportedCredentialFormat = z.infer<
   typeof SupportedCredentialMetadata
 >["format"];

package/src/utils/credentials.ts

@@ -4,8 +4,12 @@ import type { Out } from "./misc";
 import type { ObtainCredential } from "../credential/issuance";
 import type { JWK } from "./jwk";
 import { IoWalletError } from "./errors";
+import {
+  LEGACY_SD_JWT,
+  type SupportedSdJwtLegacyFormat,
+} from "../sd-jwt/types";
 
-const SD_JWT = ["vc+sd-jwt", "dc+sd-jwt"];
+const SD_JWT = ["dc+sd-jwt", LEGACY_SD_JWT];
 
 /**
  * Extracts a JWK from a credential.
@@ -15,7 +19,7 @@ const SD_JWT = ["vc+sd-jwt", "dc+sd-jwt"];
  */
 export const extractJwkFromCredential = async (
   credential: Out<ObtainCredential>["credential"],
-  format: Out<ObtainCredential>["format"]
+  format: Out<ObtainCredential>["format"] | SupportedSdJwtLegacyFormat
 ): Promise<JWK> => {
   if (SD_JWT.includes(format)) {
     // 1. SD-JWT case

package/src/utils/misc.ts

@@ -78,3 +78,6 @@ export const safeJsonParse = <T>(text: string, withDefault?: T): T | null => {
     return withDefault ?? null;
   }
 };
+
+export const isObject = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null && !Array.isArray(value);