@pagopa/io-react-native-wallet 2.5.0 → 3.0.0

package/lib/commonjs/credential/presentation/v1.3.3/05-evaluate-dcql-query.js

@@ -0,0 +1,105 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.evaluateDcqlQuery = void 0;
+var _dcql = require("dcql");
+var _valibot = require("valibot");
+var _errors = require("../common/errors");
+var mdocUtils = _interopRequireWildcard(require("./utils.mdoc"));
+var sdJwtUtils = _interopRequireWildcard(require("../common/utils/sd-jwt"));
+var _dcql2 = require("../common/utils/dcql");
+function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
+function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
+const evaluateDcqlQuery = async function (query, credentialsSdJwt) {
+  let credentialsMdoc = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : [];
+  const credentials = (await Promise.all([sdJwtUtils.mapCredentialsToObj(credentialsSdJwt), mdocUtils.mapCredentialsToObj(credentialsMdoc)])).flat();
+
+  // Build a dictionary <id>:<credential> to map DCQL matches with the raw credential
+  const credentialsById = credentials.reduce((acc, c) => ({
+    ...acc,
+    ["vct" in c ? c.vct : c.doctype]: c.original_credential
+  }), {});
+  try {
+    // Validate the query
+    const parsedQuery = _dcql.DcqlQuery.parse(query);
+    _dcql.DcqlQuery.validate(parsedQuery);
+    const queryResult = _dcql.DcqlQuery.query(parsedQuery, credentials);
+    if (!queryResult.can_be_satisfied) {
+      throw new _errors.CredentialsNotFoundError((0, _dcql2.extractFailedCredentialsDetails)(queryResult));
+    }
+    return (0, _dcql2.getDcqlQueryMatches)(queryResult).map(_ref => {
+      var _queryResult$credenti, _match$valid_credenti;
+      let [id, match] = _ref;
+      const purposes = (_queryResult$credenti = queryResult.credential_sets) === null || _queryResult$credenti === void 0 || (_queryResult$credenti = _queryResult$credenti.filter(set => {
+        var _set$matching_options;
+        return (_set$matching_options = set.matching_options) === null || _set$matching_options === void 0 ? void 0 : _set$matching_options.flat().includes(id);
+      })) === null || _queryResult$credenti === void 0 ? void 0 : _queryResult$credenti.map(credentialSet => {
+        var _credentialSet$purpos;
+        return {
+          description: (_credentialSet$purpos = credentialSet.purpose) === null || _credentialSet$purpos === void 0 ? void 0 : _credentialSet$purpos.toString(),
+          required: Boolean(credentialSet.required)
+        };
+      });
+      const matchOutput = (_match$valid_credenti = match.valid_credentials[0]) === null || _match$valid_credenti === void 0 ? void 0 : _match$valid_credenti.meta.output;
+      if ((matchOutput === null || matchOutput === void 0 ? void 0 : matchOutput.credential_format) === "dc+sd-jwt") {
+        const {
+          vct
+        } = matchOutput;
+        const [keyTag, credential] = credentialsById[vct];
+        const requiredDisclosures = (0, mdocUtils.getClaimsFromDcqlMatch)(match);
+        const presentationFrame = (0, _dcql2.getPresentationFrameFromDcqlMatch)(match, parsedQuery);
+        return {
+          id,
+          vct,
+          keyTag,
+          format: matchOutput.credential_format,
+          credential,
+          requiredDisclosures,
+          presentationFrame,
+          // When it is a match but no credential_sets are found, the credential is required by default
+          // See https://openid.net/specs/openid-4-verifiable-presentations-1_0.html#section-6.4.2
+          purposes: purposes ?? [{
+            required: true
+          }]
+        };
+      }
+      if ((matchOutput === null || matchOutput === void 0 ? void 0 : matchOutput.credential_format) === "mso_mdoc") {
+        const {
+          doctype
+        } = matchOutput;
+        const [keyTag, credential] = credentialsById[doctype];
+        const requiredDisclosures = mdocUtils.getClaimsFromDcqlMatch(match);
+        const presentationFrame = mdocUtils.getPresentationFrameFromClaims(requiredDisclosures, doctype);
+        return {
+          id,
+          doctype,
+          keyTag,
+          format: matchOutput.credential_format,
+          credential,
+          requiredDisclosures,
+          presentationFrame,
+          purposes: purposes ?? [{
+            required: true
+          }]
+        };
+      }
+      throw new Error(`Unsupported credential format: ${matchOutput === null || matchOutput === void 0 ? void 0 : matchOutput.credential_format}`);
+    });
+  } catch (error) {
+    // Invalid DCQL query structure. Remap to `DcqlError` for consistency.
+    if ((0, _valibot.isValiError)(error)) {
+      throw new _dcql.DcqlError({
+        message: "Failed to parse the provided DCQL query",
+        code: "PARSE_ERROR",
+        cause: error.issues
+      });
+    }
+
+    // Let other errors propagate so they can be caught with `err instanceof DcqlError`
+    throw error;
+  }
+};
+exports.evaluateDcqlQuery = evaluateDcqlQuery;
+//# sourceMappingURL=05-evaluate-dcql-query.js.map

package/lib/commonjs/credential/presentation/v1.3.3/05-evaluate-dcql-query.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_dcql","require","_valibot","_errors","mdocUtils","_interopRequireWildcard","sdJwtUtils","_dcql2","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","evaluateDcqlQuery","query","credentialsSdJwt","credentialsMdoc","arguments","length","undefined","credentials","Promise","all","mapCredentialsToObj","flat","credentialsById","reduce","acc","c","vct","doctype","original_credential","parsedQuery","DcqlQuery","parse","validate","queryResult","can_be_satisfied","CredentialsNotFoundError","extractFailedCredentialsDetails","getDcqlQueryMatches","map","_ref","_queryResult$credenti","_match$valid_credenti","id","match","purposes","credential_sets","filter","_set$matching_options","matching_options","includes","credentialSet","_credentialSet$purpos","description","purpose","toString","required","Boolean","matchOutput","valid_credentials","meta","output","credential_format","keyTag","credential","requiredDisclosures","getClaimsFromDcqlMatch","presentationFrame","getPresentationFrameFromDcqlMatch","format","getPresentationFrameFromClaims","Error","error","isValiError","DcqlError","message","code","cause","issues","exports"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/05-evaluate-dcql-query.ts"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAEA,IAAAG,SAAA,GAAAC,uBAAA,CAAAJ,OAAA;AAEA,IAAAK,UAAA,GAAAD,uBAAA,CAAAJ,OAAA;AAEA,IAAAM,MAAA,GAAAN,OAAA;AAI8B,SAAAO,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAJ,wBAAAQ,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAEvB,MAAMW,iBAA6D,GACxE,eAAAA,CAAOC,KAAK,EAAEC,gBAAgB,EAA2B;EAAA,IAAzBC,eAAe,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,EAAE;EAClD,MAAMG,WAAW,GAAG,CAClB,MAAMC,OAAO,CAACC,GAAG,CAAC,CAChBjC,UAAU,CAACkC,mBAAmB,CAACR,gBAAgB,CAAC,EAChD5B,SAAS,CAACoC,mBAAmB,CAACP,eAAe,CAAC,CAC/C,CAAC,EACFQ,IAAI,CAAC,CAAC;;EAER;EACA,MAAMC,eAAe,GAAGL,WAAW,CAACM,MAAM,CACxC,CAACC,GAAG,EAAEC,CAAC,MAAM;IACX,GAAGD,GAAG;IACN,CAAC,KAAK,IAAIC,CAAC,GAAGA,CAAC,CAACC,GAAG,GAAGD,CAAC,CAACE,OAAO,GAAGF,CAAC,CAACG;EACtC,CAAC,CAAC,EACF,CAAC,CACH,CAAC;EAED,IAAI;IACF;IACA,MAAMC,WAAW,GAAGC,eAAS,CAACC,KAAK,CAACpB,KAAK,CAAC;IAC1CmB,eAAS,CAACE,QAAQ,CAACH,WAAW,CAAC;IAE/B,MAAMI,WAAW,GAAGH,eAAS,CAACnB,KAAK,CAACkB,WAAW,EAAEZ,WAAW,CAAC;IAE7D,IAAI,CAACgB,WAAW,CAACC,gBAAgB,EAAE;MACjC,MAAM,IAAIC,gCAAwB,CAChC,IAAAC,sCAA+B,EAACH,WAAW,CAC7C,CAAC;IACH;IAEA,OAAO,IAAAI,0BAAmB,EAACJ,WAAW,CAAC,CAACK,GAAG,CAACC,IAAA,IAAiB;MAAA,IAAAC,qBAAA,EAAAC,qBAAA;MAAA,IAAhB,CAACC,EAAE,EAAEC,KAAK,CAAC,GAAAJ,IAAA;MACtD,MAAMK,QAAQ,IAAAJ,qBAAA,GAAGP,WAAW,CAACY,eAAe,cAAAL,qBAAA,gBAAAA,qBAAA,GAA3BA,qBAAA,CACbM,MAAM,CAAErC,GAAG;QAAA,IAAAsC,qBAAA;QAAA,QAAAA,qBAAA,GAAKtC,GAAG,CAACuC,gBAAgB,cAAAD,qBAAA,uBAApBA,qBAAA,CAAsB1B,IAAI,CAAC,CAAC,CAAC4B,QAAQ,CAACP,EAAE,CAAC;MAAA,EAAC,cAAAF,qBAAA,uBAD7CA,qBAAA,CAEbF,GAAG,CAAqBY,aAAa;QAAA,IAAAC,qBAAA;QAAA,OAAM;UAC3CC,WAAW,GAAAD,qBAAA,GAAED,aAAa,CAACG,OAAO,cAAAF,qBAAA,uBAArBA,qBAAA,CAAuBG,QAAQ,CAAC,CAAC;UAC9CC,QAAQ,EAAEC,OAAO,CAACN,aAAa,CAACK,QAAQ;QAC1C,CAAC;MAAA,CAAC,CAAC;MAEL,MAAME,WAAW,IAAAhB,qBAAA,GAAGE,KAAK,CAACe,iBAAiB,CAAC,CAAC,CAAC,cAAAjB,qBAAA,uBAA1BA,qBAAA,CAA4BkB,IAAI,CAACC,MAAM;MAE3D,IAAI,CAAAH,WAAW,aAAXA,WAAW,uBAAXA,WAAW,CAAEI,iBAAiB,MAAK,WAAW,EAAE;QAClD,MAAM;UAAEnC;QAAI,CAAC,GAAG+B,WAAW;QAC3B,MAAM,CAACK,MAAM,EAAEC,UAAU,CAAC,GAAGzC,eAAe,CAACI,GAAG,CAAE;QAElD,MAAMsC,mBAAmB,GAAG,IAAAC,gCAAsB,EAACtB,KAAK,CAAC;QACzD,MAAMuB,iBAAiB,GAAG,IAAAC,wCAAiC,EACzDxB,KAAK,EACLd,WACF,CAAC;QAED,OAAO;UACLa,EAAE;UACFhB,GAAG;UACHoC,MAAM;UACNM,MAAM,EAAEX,WAAW,CAACI,iBAAiB;UACrCE,UAAU;UACVC,mBAAmB;UACnBE,iBAAiB;UACjB;UACA;UACAtB,QAAQ,EAAEA,QAAQ,IAAI,CAAC;YAAEW,QAAQ,EAAE;UAAK,CAAC;QAC3C,CAAC;MACH;MAEA,IAAI,CAAAE,WAAW,aAAXA,WAAW,uBAAXA,WAAW,CAAEI,iBAAiB,MAAK,UAAU,EAAE;QACjD,MAAM;UAAElC;QAAQ,CAAC,GAAG8B,WAAW;QAC/B,MAAM,CAACK,MAAM,EAAEC,UAAU,CAAC,GAAGzC,eAAe,CAACK,OAAO,CAAE;QAEtD,MAAMqC,mBAAmB,GAAGhF,SAAS,CAACiF,sBAAsB,CAACtB,KAAK,CAAC;QACnE,MAAMuB,iBAAiB,GAAGlF,SAAS,CAACqF,8BAA8B,CAChEL,mBAAmB,EACnBrC,OACF,CAAC;QAED,OAAO;UACLe,EAAE;UACFf,OAAO;UACPmC,MAAM;UACNM,MAAM,EAAEX,WAAW,CAACI,iBAAiB;UACrCE,UAAU;UACVC,mBAAmB;UACnBE,iBAAiB;UACjBtB,QAAQ,EAAEA,QAAQ,IAAI,CAAC;YAAEW,QAAQ,EAAE;UAAK,CAAC;QAC3C,CAAC;MACH;MAEA,MAAM,IAAIe,KAAK,CACZ,kCAAiCb,WAAW,aAAXA,WAAW,uBAAXA,WAAW,CAAEI,iBAAkB,EACnE,CAAC;IACH,CAAC,CAAC;EACJ,CAAC,CAAC,OAAOU,KAAK,EAAE;IACd;IACA,IAAI,IAAAC,oBAAW,EAACD,KAAK,CAAC,EAAE;MACtB,MAAM,IAAIE,eAAS,CAAC;QAClBC,OAAO,EAAE,yCAAyC;QAClDC,IAAI,EAAE,aAAa;QACnBC,KAAK,EAAEL,KAAK,CAACM;MACf,CAAC,CAAC;IACJ;;IAEA;IACA,MAAMN,KAAK;EACb;AACF,CAAC;AAACO,OAAA,CAAApE,iBAAA,GAAAA,iBAAA"}

package/lib/commonjs/credential/presentation/v1.3.3/06-send-authorization-response.js

@@ -0,0 +1,137 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.sendAuthorizationResponse = exports.sendAuthorizationErrorResponse = exports.prepareRemotePresentations = void 0;
+var _ioWalletOid4vp = require("@pagopa/io-wallet-oid4vp");
+var _callbacks = require("../../../utils/callbacks");
+var _sdkErrorMapper = require("./sdkErrorMapper");
+var _misc = require("../../../utils/misc");
+var _errors = require("../../../utils/errors");
+var _types = require("./types");
+var _http = require("../common/utils/http");
+var _sdJwt = require("../../../sd-jwt");
+var _crypto = require("../../../utils/crypto");
+var _mdoc = require("../../../mdoc");
+/**
+ * Prepares remote presentations for a set of credentials.
+ *
+ * For each credential, this function:
+ * - Validates the credential format (currently supports 'mso_mdoc' or 'dc+sd-jwt').
+ * - Generates a verifiable presentation token (vpToken) using the appropriate method.
+ * - For ISO 18013-7, generates a special nonce with minimum entropy of 16.
+ *
+ * @param credentials - An array of credential items containing format, credential data, requested claims, and key information.
+ * @param authRequestObject - The authentication request object containing nonce, clientId, and responseUri.
+ * @returns A promise that resolves to an object containing an array of presentations and the generated nonce.
+ * @throws {CredentialNotFoundError} When the credential format is unsupported.
+ */
+const prepareRemotePresentations = async (credentials, authRequestObject) => {
+  // In case of ISO 18013-7 we need a nonce, it shall have a minimum entropy of 16
+  const generatedNonce = (0, _misc.generateRandomAlphaNumericString)(16);
+  const presentations = await Promise.all(credentials.map(async item => {
+    const {
+      format
+    } = item;
+    if (format === "dc+sd-jwt") {
+      const {
+        vp_token
+      } = await (0, _sdJwt.prepareVpToken)(authRequestObject.nonce, authRequestObject.clientId, [item.credential, item.presentationFrame, (0, _crypto.createCryptoContextFor)(item.keyTag)]);
+      return {
+        requestedClaims: item.requiredDisclosures.map(_ref => {
+          let {
+            name
+          } = _ref;
+          return name;
+        }),
+        credentialId: item.id,
+        vpToken: vp_token,
+        format
+      };
+    }
+    if (format === "mso_mdoc") {
+      const {
+        vp_token
+      } = await (0, _mdoc.prepareVpTokenMdoc)(authRequestObject.nonce, generatedNonce, authRequestObject.clientId, authRequestObject.responseUri, item.doctype, item.keyTag, [item.credential, item.presentationFrame, (0, _crypto.createCryptoContextFor)(item.keyTag)]);
+      return {
+        requestedClaims: item.requiredDisclosures.map(_ref2 => {
+          let {
+            name
+          } = _ref2;
+          return name;
+        }),
+        credentialId: item.id,
+        vpToken: vp_token,
+        format: "mso_mdoc"
+      };
+    }
+    throw new _errors.IoWalletError(`${format} format is not supported.`);
+  }));
+  return {
+    presentations,
+    generatedNonce
+  };
+};
+exports.prepareRemotePresentations = prepareRemotePresentations;
+const sendAuthorizationResponse = async function (requestObject, remotePresentation, rpConf) {
+  let {
+    appFetch = fetch
+  } = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
+  try {
+    const {
+      presentations
+    } = remotePresentation;
+    const rpJwks = {
+      jwks: rpConf.jwks,
+      encrypted_response_enc_values_supported: rpConf.encrypted_response_enc_values_supported
+    };
+    const vp_token = presentations.reduce((acc, p) => {
+      (acc[p.credentialId] ??= []).push(p.vpToken);
+      return acc;
+    }, {});
+    const {
+      jarm
+    } = await (0, _ioWalletOid4vp.createAuthorizationResponse)({
+      requestObject,
+      rpJwks,
+      vp_token,
+      callbacks: {
+        encryptJwe: _callbacks.partialCallbacks.encryptJwe,
+        generateRandom: _callbacks.partialCallbacks.generateRandom
+      }
+    });
+    return await (0, _ioWalletOid4vp.fetchAuthorizationResponse)({
+      authorizationResponseJarm: jarm.responseJwe,
+      presentationResponseUri: requestObject.response_uri,
+      callbacks: {
+        fetch: appFetch
+      }
+    });
+  } catch (err) {
+    throw (0, _sdkErrorMapper.mapSdkAuthorizationResponseError)(err);
+  }
+};
+exports.sendAuthorizationResponse = sendAuthorizationResponse;
+const sendAuthorizationErrorResponse = async function (requestObject, _ref3) {
+  let {
+    error,
+    errorDescription
+  } = _ref3;
+  let {
+    appFetch = fetch
+  } = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {};
+  const requestBody = await (0, _http.buildDirectPostBody)(requestObject, {
+    error,
+    error_description: errorDescription
+  });
+  return await appFetch(requestObject.response_uri, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: requestBody
+  }).then((0, _misc.hasStatusOrThrow)(200, _errors.RelyingPartyResponseError)).then(res => res.json()).then(_types.AuthorizationResponse.parse);
+};
+exports.sendAuthorizationErrorResponse = sendAuthorizationErrorResponse;
+//# sourceMappingURL=06-send-authorization-response.js.map

package/lib/commonjs/credential/presentation/v1.3.3/06-send-authorization-response.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_ioWalletOid4vp","require","_callbacks","_sdkErrorMapper","_misc","_errors","_types","_http","_sdJwt","_crypto","_mdoc","prepareRemotePresentations","credentials","authRequestObject","generatedNonce","generateRandomAlphaNumericString","presentations","Promise","all","map","item","format","vp_token","prepareVpToken","nonce","clientId","credential","presentationFrame","createCryptoContextFor","keyTag","requestedClaims","requiredDisclosures","_ref","name","credentialId","id","vpToken","prepareVpTokenMdoc","responseUri","doctype","_ref2","IoWalletError","exports","sendAuthorizationResponse","requestObject","remotePresentation","rpConf","appFetch","fetch","arguments","length","undefined","rpJwks","jwks","encrypted_response_enc_values_supported","reduce","acc","p","push","jarm","sdkCreateAuthorizationResponse","callbacks","encryptJwe","partialCallbacks","generateRandom","sdkFetchAuthorizationResponse","authorizationResponseJarm","responseJwe","presentationResponseUri","response_uri","err","mapSdkAuthorizationResponseError","sendAuthorizationErrorResponse","_ref3","error","errorDescription","requestBody","buildDirectPostBody","error_description","method","headers","body","then","hasStatusOrThrow","RelyingPartyResponseError","res","json","AuthorizationResponse","parse"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/06-send-authorization-response.ts"],"mappings":";;;;;;AAAA,IAAAA,eAAA,GAAAC,OAAA;AAKA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,eAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AAIA,IAAAI,OAAA,GAAAJ,OAAA;AAIA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,KAAA,GAAAN,OAAA;AACA,IAAAO,MAAA,GAAAP,OAAA;AACA,IAAAQ,OAAA,GAAAR,OAAA;AACA,IAAAS,KAAA,GAAAT,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMU,0BAA+E,GAC1F,MAAAA,CAAOC,WAAW,EAAEC,iBAAiB,KAAK;EACxC;EACA,MAAMC,cAAc,GAAG,IAAAC,sCAAgC,EAAC,EAAE,CAAC;EAE3D,MAAMC,aAAa,GAAG,MAAMC,OAAO,CAACC,GAAG,CACrCN,WAAW,CAACO,GAAG,CAAC,MAAOC,IAAI,IAAK;IAC9B,MAAM;MAAEC;IAAO,CAAC,GAAGD,IAAI;IAEvB,IAAIC,MAAM,KAAK,WAAW,EAAE;MAC1B,MAAM;QAAEC;MAAS,CAAC,GAAG,MAAM,IAAAC,qBAAc,EACvCV,iBAAiB,CAACW,KAAK,EACvBX,iBAAiB,CAACY,QAAQ,EAC1B,CACEL,IAAI,CAACM,UAAU,EACfN,IAAI,CAACO,iBAAiB,EACtB,IAAAC,8BAAsB,EAACR,IAAI,CAACS,MAAM,CAAC,CAEvC,CAAC;MAED,OAAO;QACLC,eAAe,EAAEV,IAAI,CAACW,mBAAmB,CAACZ,GAAG,CAACa,IAAA;UAAA,IAAC;YAAEC;UAAK,CAAC,GAAAD,IAAA;UAAA,OAAKC,IAAI;QAAA,EAAC;QACjEC,YAAY,EAAEd,IAAI,CAACe,EAAE;QACrBC,OAAO,EAAEd,QAAQ;QACjBD;MACF,CAAC;IACH;IAEA,IAAIA,MAAM,KAAK,UAAU,EAAE;MACzB,MAAM;QAAEC;MAAS,CAAC,GAAG,MAAM,IAAAe,wBAAkB,EAC3CxB,iBAAiB,CAACW,KAAK,EACvBV,cAAc,EACdD,iBAAiB,CAACY,QAAQ,EAC1BZ,iBAAiB,CAACyB,WAAW,EAC7BlB,IAAI,CAACmB,OAAO,EACZnB,IAAI,CAACS,MAAM,EACX,CACET,IAAI,CAACM,UAAU,EACfN,IAAI,CAACO,iBAAiB,EACtB,IAAAC,8BAAsB,EAACR,IAAI,CAACS,MAAM,CAAC,CAEvC,CAAC;MAED,OAAO;QACLC,eAAe,EAAEV,IAAI,CAACW,mBAAmB,CAACZ,GAAG,CAACqB,KAAA;UAAA,IAAC;YAAEP;UAAK,CAAC,GAAAO,KAAA;UAAA,OAAKP,IAAI;QAAA,EAAC;QACjEC,YAAY,EAAEd,IAAI,CAACe,EAAE;QACrBC,OAAO,EAAEd,QAAQ;QACjBD,MAAM,EAAE;MACV,CAAC;IACH;IAEA,MAAM,IAAIoB,qBAAa,CAAE,GAAEpB,MAAO,2BAA0B,CAAC;EAC/D,CAAC,CACH,CAAC;EAED,OAAO;IACLL,aAAa;IACbF;EACF,CAAC;AACH,CAAC;AAAC4B,OAAA,CAAA/B,0BAAA,GAAAA,0BAAA;AAEG,MAAMgC,yBAA6E,GACxF,eAAAA,CACEC,aAAa,EACbC,kBAAkB,EAClBC,MAAM,EAEH;EAAA,IADH;IAAEC,QAAQ,GAAGC;EAAM,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEzB,IAAI;IACF,MAAM;MAAEjC;IAAc,CAAC,GAAG6B,kBAAkB;IAC5C,MAAMO,MAAM,GAAG;MACbC,IAAI,EAAEP,MAAM,CAACO,IAAI;MACjBC,uCAAuC,EACrCR,MAAM,CAACQ;IACX,CAAC;IAED,MAAMhC,QAAQ,GAAGN,aAAa,CAACuC,MAAM,CACnC,CAACC,GAAG,EAAEC,CAAC,KAAK;MACV,CAACD,GAAG,CAACC,CAAC,CAACvB,YAAY,CAAC,KAAK,EAAE,EAAEwB,IAAI,CAACD,CAAC,CAACrB,OAAO,CAAC;MAC5C,OAAOoB,GAAG;IACZ,CAAC,EACD,CAAC,CACH,CAAC;IAED,MAAM;MAAEG;IAAK,CAAC,GAAG,MAAM,IAAAC,2CAA8B,EAAC;MACpDhB,aAAa;MACbQ,MAAM;MACN9B,QAAQ;MACRuC,SAAS,EAAE;QACTC,UAAU,EAAEC,2BAAgB,CAACD,UAAU;QACvCE,cAAc,EAAED,2BAAgB,CAACC;MACnC;IACF,CAAC,CAAC;IAEF,OAAO,MAAM,IAAAC,0CAA6B,EAAC;MACzCC,yBAAyB,EAAEP,IAAI,CAACQ,WAAW;MAC3CC,uBAAuB,EAAExB,aAAa,CAACyB,YAAY;MACnDR,SAAS,EAAE;QAAEb,KAAK,EAAED;MAAS;IAC/B,CAAC,CAAC;EACJ,CAAC,CAAC,OAAOuB,GAAG,EAAE;IACZ,MAAM,IAAAC,gDAAgC,EAACD,GAAG,CAAC;EAC7C;AACF,CAAC;AAAC5B,OAAA,CAAAC,yBAAA,GAAAA,yBAAA;AAEG,MAAM6B,8BAAuF,GAClG,eAAAA,CACE5B,aAAa,EAAA6B,KAAA,EAGV;EAAA,IAFH;IAAEC,KAAK;IAAEC;EAAiB,CAAC,GAAAF,KAAA;EAAA,IAC3B;IAAE1B,QAAQ,GAAGC;EAAM,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEzB,MAAM2B,WAAW,GAAG,MAAM,IAAAC,yBAAmB,EAACjC,aAAa,EAAE;IAC3D8B,KAAK;IACLI,iBAAiB,EAAEH;EACrB,CAAC,CAAC;EAEF,OAAO,MAAM5B,QAAQ,CAACH,aAAa,CAACyB,YAAY,EAAE;IAChDU,MAAM,EAAE,MAAM;IACdC,OAAO,EAAE;MACP,cAAc,EAAE;IAClB,CAAC;IACDC,IAAI,EAAEL;EACR,CAAC,CAAC,CACCM,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,EAAEC,iCAAyB,CAAC,CAAC,CACtDF,IAAI,CAAEG,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBJ,IAAI,CAACK,4BAAqB,CAACC,KAAK,CAAC;AACtC,CAAC;AAAC9C,OAAA,CAAA8B,8BAAA,GAAAA,8BAAA"}

package/lib/commonjs/credential/presentation/v1.3.3/index.js

@@ -0,0 +1,24 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.RemotePresentation = void 0;
+var _startFlow = require("./01-start-flow");
+var _evaluateRpTrust = require("./02-evaluate-rp-trust");
+var _getRequestObject = require("./03-get-request-object");
+var _verifyRequestObject = require("./04-verify-request-object");
+var _evaluateDcqlQuery = require("./05-evaluate-dcql-query");
+var _sendAuthorizationResponse = require("./06-send-authorization-response");
+const RemotePresentation = {
+  startFlowFromQR: _startFlow.startFlowFromQR,
+  evaluateRelyingPartyTrust: _evaluateRpTrust.evaluateRelyingPartyTrust,
+  getRequestObject: _getRequestObject.getRequestObject,
+  verifyRequestObject: _verifyRequestObject.verifyRequestObject,
+  evaluateDcqlQuery: _evaluateDcqlQuery.evaluateDcqlQuery,
+  prepareRemotePresentations: _sendAuthorizationResponse.prepareRemotePresentations,
+  sendAuthorizationResponse: _sendAuthorizationResponse.sendAuthorizationResponse,
+  sendAuthorizationErrorResponse: _sendAuthorizationResponse.sendAuthorizationErrorResponse
+};
+exports.RemotePresentation = RemotePresentation;
+//# sourceMappingURL=index.js.map

package/lib/commonjs/credential/presentation/v1.3.3/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_startFlow","require","_evaluateRpTrust","_getRequestObject","_verifyRequestObject","_evaluateDcqlQuery","_sendAuthorizationResponse","RemotePresentation","startFlowFromQR","evaluateRelyingPartyTrust","getRequestObject","verifyRequestObject","evaluateDcqlQuery","prepareRemotePresentations","sendAuthorizationResponse","sendAuthorizationErrorResponse","exports"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/index.ts"],"mappings":";;;;;;AACA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,gBAAA,GAAAD,OAAA;AACA,IAAAE,iBAAA,GAAAF,OAAA;AACA,IAAAG,oBAAA,GAAAH,OAAA;AACA,IAAAI,kBAAA,GAAAJ,OAAA;AACA,IAAAK,0BAAA,GAAAL,OAAA;AAMO,MAAMM,kBAAyC,GAAG;EACvDC,eAAe,EAAfA,0BAAe;EACfC,yBAAyB,EAAzBA,0CAAyB;EACzBC,gBAAgB,EAAhBA,kCAAgB;EAChBC,mBAAmB,EAAnBA,wCAAmB;EACnBC,iBAAiB,EAAjBA,oCAAiB;EACjBC,0BAA0B,EAA1BA,qDAA0B;EAC1BC,yBAAyB,EAAzBA,oDAAyB;EACzBC,8BAA8B,EAA9BA;AACF,CAAC;AAACC,OAAA,CAAAT,kBAAA,GAAAA,kBAAA"}

package/lib/commonjs/credential/presentation/v1.3.3/mappers.js

@@ -0,0 +1,32 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.mapToRequestObject = exports.mapToRelyingPartyConfig = void 0;
+var _mappers = require("../../../utils/mappers");
+const mapToRelyingPartyConfig = (0, _mappers.createMapper)(x => {
+  const {
+    federation_entity,
+    openid_credential_verifier
+  } = x.payload.metadata;
+  return {
+    subject: x.payload.sub,
+    jwks: openid_credential_verifier.jwks,
+    federation_entity,
+    encrypted_response_enc_values_supported: openid_credential_verifier.encrypted_response_enc_values_supported
+  };
+});
+exports.mapToRelyingPartyConfig = mapToRelyingPartyConfig;
+const mapToRequestObject = (0, _mappers.createMapper)(x => ({
+  iss: x.iss,
+  client_id: x.client_id,
+  dcql_query: x.dcql_query,
+  nonce: x.nonce,
+  response_uri: x.response_uri,
+  state: x.state,
+  response_mode: x.response_mode,
+  response_type: x.response_type
+}));
+exports.mapToRequestObject = mapToRequestObject;
+//# sourceMappingURL=mappers.js.map

package/lib/commonjs/credential/presentation/v1.3.3/mappers.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_mappers","require","mapToRelyingPartyConfig","createMapper","x","federation_entity","openid_credential_verifier","payload","metadata","subject","sub","jwks","encrypted_response_enc_values_supported","exports","mapToRequestObject","iss","client_id","dcql_query","nonce","response_uri","state","response_mode","response_type"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/mappers.ts"],"mappings":";;;;;;AACA,IAAAA,QAAA,GAAAC,OAAA;AAKO,MAAMC,uBAAuB,GAAG,IAAAC,qBAAY,EAGhDC,CAAC,IAAK;EACP,MAAM;IAAEC,iBAAiB;IAAEC;EAA2B,CAAC,GAAGF,CAAC,CAACG,OAAO,CAACC,QAAQ;EAE5E,OAAO;IACLC,OAAO,EAAEL,CAAC,CAACG,OAAO,CAACG,GAAG;IACtBC,IAAI,EAAEL,0BAA0B,CAACK,IAAI;IACrCN,iBAAiB;IACjBO,uCAAuC,EACrCN,0BAA0B,CAACM;EAC/B,CAAC;AACH,CAAC,CAAC;AAACC,OAAA,CAAAX,uBAAA,GAAAA,uBAAA;AAEI,MAAMY,kBAAkB,GAAG,IAAAX,qBAAY,EAG3CC,CAAC,KAAM;EACRW,GAAG,EAAEX,CAAC,CAACW,GAAG;EACVC,SAAS,EAAEZ,CAAC,CAACY,SAAS;EACtBC,UAAU,EAAEb,CAAC,CAACa,UAAU;EACxBC,KAAK,EAAEd,CAAC,CAACc,KAAK;EACdC,YAAY,EAAEf,CAAC,CAACe,YAAY;EAC5BC,KAAK,EAAEhB,CAAC,CAACgB,KAAK;EACdC,aAAa,EAAEjB,CAAC,CAACiB,aAAa;EAC9BC,aAAa,EAAElB,CAAC,CAACkB;AACnB,CAAC,CAAC,CAAC;AAACT,OAAA,CAAAC,kBAAA,GAAAA,kBAAA"}

package/lib/commonjs/credential/presentation/v1.3.3/sdkErrorMapper.js

@@ -0,0 +1,74 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.mapSdkRequestObjectError = exports.mapSdkFetchAuthRequestError = exports.mapSdkAuthorizationResponseError = void 0;
+var _utils = require("@openid4vc/utils");
+var _ioWalletOid4vp = require("@pagopa/io-wallet-oid4vp");
+var _errors = require("../../../utils/errors");
+var _ioWalletOauth = require("@pagopa/io-wallet-oauth2");
+var _errors2 = require("../common/errors");
+var _ioWalletUtils = require("@pagopa/io-wallet-utils");
+/**
+ * Helper to create a generic RelyingPartyResponseError
+ */
+const toRelyingPartyResponseError = function (message, statusCode) {
+  let code = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : _errors.RelyingPartyResponseErrorCodes.RelyingPartyGenericError;
+  return new _errors.RelyingPartyResponseError({
+    code,
+    message,
+    reason: message,
+    statusCode
+  });
+};
+
+/**
+ * Mapping Sdk errors during Request Object retrieval (Fetch/QR)
+ */
+const mapSdkFetchAuthRequestError = err => {
+  if (err instanceof _ioWalletUtils.UnexpectedStatusCodeError) {
+    throw toRelyingPartyResponseError(err.message, err.statusCode);
+  }
+  throw err;
+};
+
+/**
+ * Mapping Sdk errors during JWT parsing and verification
+ */
+exports.mapSdkFetchAuthRequestError = mapSdkFetchAuthRequestError;
+const mapSdkRequestObjectError = err => {
+  if (err instanceof _utils.ValidationError) {
+    throw new _errors2.InvalidRequestObjectError("The Request Object structure is invalid", err.message);
+  }
+  if (err instanceof _ioWalletOauth.Oauth2JwtParseError) {
+    throw new _errors2.InvalidRequestObjectError("The Request Object is not a valid JWT");
+  }
+  const message = err instanceof Error ? err.message : String(err);
+  throw new _errors2.InvalidRequestObjectError(message);
+};
+
+/**
+ * Mapping Sdk errors during Authorization Response submission (JARM / Post)
+ */
+exports.mapSdkRequestObjectError = mapSdkRequestObjectError;
+const mapSdkAuthorizationResponseError = err => {
+  if (err instanceof _ioWalletUtils.UnexpectedStatusCodeError) {
+    throw new _errors.ResponseErrorBuilder(_errors.RelyingPartyResponseError).handle(400, {
+      code: _errors.RelyingPartyResponseErrorCodes.InvalidAuthorizationResponse,
+      message: "The Authorization Response contains invalid parameters or it is malformed"
+    }).handle(403, {
+      code: _errors.RelyingPartyResponseErrorCodes.InvalidAuthorizationResponse,
+      message: "The Authorization Response was forbidden"
+    }).handle("*", {
+      code: _errors.RelyingPartyResponseErrorCodes.RelyingPartyGenericError,
+      message: "Unable to successfully send the Authorization Response"
+    }).buildFrom(err);
+  }
+  if (err instanceof _ioWalletOid4vp.CreateAuthorizationResponseError || err instanceof _ioWalletOid4vp.FetchAuthorizationResponseError) {
+    throw toRelyingPartyResponseError(err.message, err.statusCode ?? 400);
+  }
+  throw err;
+};
+exports.mapSdkAuthorizationResponseError = mapSdkAuthorizationResponseError;
+//# sourceMappingURL=sdkErrorMapper.js.map

package/lib/commonjs/credential/presentation/v1.3.3/sdkErrorMapper.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_utils","require","_ioWalletOid4vp","_errors","_ioWalletOauth","_errors2","_ioWalletUtils","toRelyingPartyResponseError","message","statusCode","code","arguments","length","undefined","RelyingPartyResponseErrorCodes","RelyingPartyGenericError","RelyingPartyResponseError","reason","mapSdkFetchAuthRequestError","err","SdkUnexpectedStatusCodeError","exports","mapSdkRequestObjectError","SdkValidationError","InvalidRequestObjectError","SdkOauth2JwtParseError","Error","String","mapSdkAuthorizationResponseError","ResponseErrorBuilder","handle","InvalidAuthorizationResponse","buildFrom","SdkCreateAuthorizationResponseError","SdkFetchAuthorizationResponseError"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/sdkErrorMapper.ts"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAD,OAAA;AAIA,IAAAE,OAAA,GAAAF,OAAA;AAKA,IAAAG,cAAA,GAAAH,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,cAAA,GAAAL,OAAA;AAGA;AACA;AACA;AACA,MAAMM,2BAA2B,GAAG,SAAAA,CAClCC,OAAe,EACfC,UAAkB;EAAA,IAClBC,IAAmC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,sCAA8B,CAACC,wBAAwB;EAAA,OAE7F,IAAIC,iCAAyB,CAAC;IAC5BN,IAAI;IACJF,OAAO;IACPS,MAAM,EAAET,OAAO;IACfC;EACF,CAAC,CAAC;AAAA;;AAEJ;AACA;AACA;AACO,MAAMS,2BAA2B,GAAIC,GAAY,IAAK;EAC3D,IAAIA,GAAG,YAAYC,wCAA4B,EAAE;IAC/C,MAAMb,2BAA2B,CAACY,GAAG,CAACX,OAAO,EAAEW,GAAG,CAACV,UAAU,CAAC;EAChE;EAEA,MAAMU,GAAG;AACX,CAAC;;AAED;AACA;AACA;AAFAE,OAAA,CAAAH,2BAAA,GAAAA,2BAAA;AAGO,MAAMI,wBAAwB,GAAIH,GAAY,IAAK;EACxD,IAAIA,GAAG,YAAYI,sBAAkB,EAAE;IACrC,MAAM,IAAIC,kCAAyB,CACjC,yCAAyC,EACzCL,GAAG,CAACX,OACN,CAAC;EACH;EAEA,IAAIW,GAAG,YAAYM,kCAAsB,EAAE;IACzC,MAAM,IAAID,kCAAyB,CACjC,uCACF,CAAC;EACH;EAEA,MAAMhB,OAAO,GAAGW,GAAG,YAAYO,KAAK,GAAGP,GAAG,CAACX,OAAO,GAAGmB,MAAM,CAACR,GAAG,CAAC;EAChE,MAAM,IAAIK,kCAAyB,CAAChB,OAAO,CAAC;AAC9C,CAAC;;AAED;AACA;AACA;AAFAa,OAAA,CAAAC,wBAAA,GAAAA,wBAAA;AAGO,MAAMM,gCAAgC,GAAIT,GAAY,IAAK;EAChE,IAAIA,GAAG,YAAYC,wCAA4B,EAAE;IAC/C,MAAM,IAAIS,4BAAoB,CAACb,iCAAyB,CAAC,CACtDc,MAAM,CAAC,GAAG,EAAE;MACXpB,IAAI,EAAEI,sCAA8B,CAACiB,4BAA4B;MACjEvB,OAAO,EACL;IACJ,CAAC,CAAC,CACDsB,MAAM,CAAC,GAAG,EAAE;MACXpB,IAAI,EAAEI,sCAA8B,CAACiB,4BAA4B;MACjEvB,OAAO,EAAE;IACX,CAAC,CAAC,CACDsB,MAAM,CAAC,GAAG,EAAE;MACXpB,IAAI,EAAEI,sCAA8B,CAACC,wBAAwB;MAC7DP,OAAO,EAAE;IACX,CAAC,CAAC,CACDwB,SAAS,CAACb,GAAG,CAAC;EACnB;EAEA,IACEA,GAAG,YAAYc,gDAAmC,IAClDd,GAAG,YAAYe,+CAAkC,EACjD;IACA,MAAM3B,2BAA2B,CAACY,GAAG,CAACX,OAAO,EAAEW,GAAG,CAACV,UAAU,IAAI,GAAG,CAAC;EACvE;EAEA,MAAMU,GAAG;AACX,CAAC;AAACE,OAAA,CAAAO,gCAAA,GAAAA,gCAAA"}

package/lib/commonjs/credential/presentation/v1.3.3/types.js

@@ -0,0 +1,19 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.RequestObjectPayload = exports.AuthorizationResponse = void 0;
+var z = _interopRequireWildcard(require("zod"));
+var _ioWalletOid4vp = require("@pagopa/io-wallet-oid4vp");
+function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
+function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
+const RequestObjectPayload = _ioWalletOid4vp.zOpenid4vpAuthorizationRequestPayload;
+exports.RequestObjectPayload = RequestObjectPayload;
+const AuthorizationResponse = z.object({
+  status: z.string().optional(),
+  response_code: z.string().optional(),
+  redirect_uri: z.string().optional()
+});
+exports.AuthorizationResponse = AuthorizationResponse;
+//# sourceMappingURL=types.js.map

package/lib/commonjs/credential/presentation/v1.3.3/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","_interopRequireWildcard","require","_ioWalletOid4vp","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","RequestObjectPayload","sdkRequestObjectPayload","exports","AuthorizationResponse","object","status","string","optional","response_code","redirect_uri"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/types.ts"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,eAAA,GAAAD,OAAA;AAA4G,SAAAE,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAJ,wBAAAQ,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAGrG,MAAMW,oBAAoB,GAAGC,qDAAuB;AAACC,OAAA,CAAAF,oBAAA,GAAAA,oBAAA;AAGrD,MAAMG,qBAAqB,GAAG7B,CAAC,CAAC8B,MAAM,CAAC;EAC5CC,MAAM,EAAE/B,CAAC,CAACgC,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAC7BC,aAAa,EAAElC,CAAC,CAACgC,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACpCE,YAAY,EAAEnC,CAAC,CAACgC,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC;AACpC,CAAC,CAAC;AAACL,OAAA,CAAAC,qBAAA,GAAAA,qBAAA"}

package/lib/commonjs/credential/presentation/v1.3.3/utils.mdoc.js

@@ -0,0 +1,88 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.mapCredentialsToObj = exports.getPresentationFrameFromClaims = exports.getClaimsFromDcqlMatch = void 0;
+var _ioReactNativeIso = require("@pagopa/io-react-native-iso18013");
+var _jsrsasign = require("jsrsasign");
+var _dcql = require("../common/utils/dcql");
+/**
+ * Convert a list of credential in mdoc format to a list of objects
+ * with namespaces for correct parsing by the `dcql` library.
+ * @param credentials The raw mdoc credentials
+ * @returns List of `dcql` compatible objects
+ */
+const mapCredentialsToObj = async credentialsMdoc => {
+  return await Promise.all(credentialsMdoc.map(async credential => {
+    const issuerSigned = await _ioReactNativeIso.CBOR.decodeIssuerSigned((0, _jsrsasign.b64utob64)(credential[1]));
+    const namespaces = Object.entries(issuerSigned.nameSpaces).reduce((acc, _ref) => {
+      let [ns, nsClaims] = _ref;
+      const flattenNsClaims = Object.entries(nsClaims).reduce((ac, _ref2) => {
+        let [, el] = _ref2;
+        return {
+          ...ac,
+          [el.elementIdentifier]: el.elementValue
+        };
+      }, {});
+      return {
+        ...acc,
+        [ns]: flattenNsClaims
+      };
+    }, {});
+    return {
+      credential_format: "mso_mdoc",
+      doctype: issuerSigned.issuerAuth.payload.docType || "missing_doctype",
+      cryptographic_holder_binding: true,
+      namespaces,
+      original_credential: credential
+    };
+  }));
+};
+
+/**
+ * Extract a compact list of claims from the `dcql` result.
+ * @param match The DCQL query match
+ * @returns The list of claims in {@link EvaluatedDisclosure} format
+ */
+exports.mapCredentialsToObj = mapCredentialsToObj;
+const getClaimsFromDcqlMatch = match => (0, _dcql.getValidDcqlClaims)(match).flatMap(_ref3 => {
+  let {
+    output
+  } = _ref3;
+  return Object.entries(output).flatMap(_ref4 => {
+    let [ns, nsClaims] = _ref4;
+    return Object.keys(nsClaims).map(claimName => ({
+      namespace: ns,
+      name: claimName,
+      value: nsClaims[claimName]
+    }));
+  });
+});
+
+/**
+ * Build a presentation frame from the requested claims for selective disclosure.
+ * @param requestedClaims Claims in {@link EvaluatedDisclosure} format
+ * @param docType mdoc doctype
+ * @returns A presentation frame for ISO18013
+ * @example { "org.iso.18013.5.1.mDL": { "org.iso.18013.5.1": { first_name: true } } }
+ */
+exports.getClaimsFromDcqlMatch = getClaimsFromDcqlMatch;
+const getPresentationFrameFromClaims = (requestedClaims, docType) => ({
+  [docType]: requestedClaims.reduce((acc, _ref5) => {
+    let {
+      name,
+      namespace
+    } = _ref5;
+    if (namespace) {
+      acc[namespace] ??= {};
+      const existingNamespace = acc[namespace];
+      existingNamespace[name] = true;
+    } else {
+      acc[name] = true;
+    }
+    return acc;
+  }, {})
+});
+exports.getPresentationFrameFromClaims = getPresentationFrameFromClaims;
+//# sourceMappingURL=utils.mdoc.js.map

package/lib/commonjs/credential/presentation/v1.3.3/utils.mdoc.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_ioReactNativeIso","require","_jsrsasign","_dcql","mapCredentialsToObj","credentialsMdoc","Promise","all","map","credential","issuerSigned","CBOR","decodeIssuerSigned","b64utob64","namespaces","Object","entries","nameSpaces","reduce","acc","_ref","ns","nsClaims","flattenNsClaims","ac","_ref2","el","elementIdentifier","elementValue","credential_format","doctype","issuerAuth","payload","docType","cryptographic_holder_binding","original_credential","exports","getClaimsFromDcqlMatch","match","getValidDcqlClaims","flatMap","_ref3","output","_ref4","keys","claimName","namespace","name","value","getPresentationFrameFromClaims","requestedClaims","_ref5","existingNamespace"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/utils.mdoc.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAOA,IAAAE,KAAA,GAAAF,OAAA;AAMA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMG,mBAAmB,GAAG,MACjCC,eAAkC,IACM;EACxC,OAAO,MAAMC,OAAO,CAACC,GAAG,CACtBF,eAAe,CAACG,GAAG,CAAC,MAAOC,UAAU,IAAK;IACxC,MAAMC,YAAY,GAAG,MAAMC,sBAAI,CAACC,kBAAkB,CAChD,IAAAC,oBAAS,EAACJ,UAAU,CAAC,CAAC,CAAC,CACzB,CAAC;IAED,MAAMK,UAAU,GAAGC,MAAM,CAACC,OAAO,CAACN,YAAY,CAACO,UAAU,CAAC,CAACC,MAAM,CAC/D,CAACC,GAAG,EAAAC,IAAA,KAAqB;MAAA,IAAnB,CAACC,EAAE,EAAEC,QAAQ,CAAC,GAAAF,IAAA;MAClB,MAAMG,eAAe,GAAGR,MAAM,CAACC,OAAO,CAACM,QAAQ,CAAC,CAACJ,MAAM,CACrD,CAACM,EAAE,EAAAC,KAAA;QAAA,IAAE,GAAGC,EAAE,CAAC,GAAAD,KAAA;QAAA,OAAM;UACf,GAAGD,EAAE;UACL,CAACE,EAAE,CAACC,iBAAiB,GAAGD,EAAE,CAACE;QAC7B,CAAC;MAAA,CAAC,EACF,CAAC,CACH,CAAC;MAED,OAAO;QACL,GAAGT,GAAG;QACN,CAACE,EAAE,GAAGE;MACR,CAAC;IACH,CAAC,EACD,CAAC,CACH,CAAC;IAED,OAAO;MACLM,iBAAiB,EAAE,UAAU;MAC7BC,OAAO,EAAEpB,YAAY,CAACqB,UAAU,CAACC,OAAO,CAACC,OAAO,IAAI,iBAAiB;MACrEC,4BAA4B,EAAE,IAAI;MAClCpB,UAAU;MACVqB,mBAAmB,EAAE1B;IACvB,CAAC;EACH,CAAC,CACH,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA;AAJA2B,OAAA,CAAAhC,mBAAA,GAAAA,mBAAA;AAKO,MAAMiC,sBAAsB,GACjCC,KAAsC,IAEtC,IAAAC,wBAAkB,EAACD,KAAK,CAAC,CAACE,OAAO,CAACC,KAAA;EAAA,IAAC;IAAEC;EAAO,CAAC,GAAAD,KAAA;EAAA,OAC3C1B,MAAM,CAACC,OAAO,CAAC0B,MAAM,CAAC,CAACF,OAAO,CAACG,KAAA;IAAA,IAAC,CAACtB,EAAE,EAAEC,QAAQ,CAAC,GAAAqB,KAAA;IAAA,OAC5C5B,MAAM,CAAC6B,IAAI,CAACtB,QAAQ,CAAC,CAACd,GAAG,CAAEqC,SAAS,KAAM;MACxCC,SAAS,EAAEzB,EAAE;MACb0B,IAAI,EAAEF,SAAS;MACfG,KAAK,EAAE1B,QAAQ,CAACuB,SAAS;IAC3B,CAAC,CAAC,CAAC;EAAA,CACL,CAAC;AAAA,CACH,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AACA;AANAT,OAAA,CAAAC,sBAAA,GAAAA,sBAAA;AAOO,MAAMY,8BAA8B,GAAGA,CAC5CC,eAAsC,EACtCjB,OAAe,MACQ;EACvB,CAACA,OAAO,GAAGiB,eAAe,CAAChC,MAAM,CAAC,CAACC,GAAG,EAAAgC,KAAA,KAA0B;IAAA,IAAxB;MAAEJ,IAAI;MAAED;IAAU,CAAC,GAAAK,KAAA;IACzD,IAAIL,SAAS,EAAE;MACb3B,GAAG,CAAC2B,SAAS,CAAC,KAAK,CAAC,CAAC;MACrB,MAAMM,iBAAiB,GAAGjC,GAAG,CAAC2B,SAAS,CAA4B;MACnEM,iBAAiB,CAACL,IAAI,CAAC,GAAG,IAAI;IAChC,CAAC,MAAM;MACL5B,GAAG,CAAC4B,IAAI,CAAC,GAAG,IAAI;IAClB;IACA,OAAO5B,GAAG;EACZ,CAAC,EAAE,CAAC,CAAsB;AAC5B,CAAC,CAAC;AAACiB,OAAA,CAAAa,8BAAA,GAAAA,8BAAA"}