@pagopa/io-react-native-wallet 2.5.0 → 3.0.0

package/lib/commonjs/sd-jwt/index.js

@@ -5,26 +5,14 @@ Object.defineProperty(exports, "__esModule", {
 });
 var _exportNames = {
   decode: true,
-  disclose: true,
-  verify: true,
-  prepareVpToken: true,
-  SdJwt4VC: true,
-  Errors: true
+  prepareVpToken: true
 };
-exports.Errors = void 0;
-Object.defineProperty(exports, "SdJwt4VC", {
-  enumerable: true,
-  get: function () {
-    return _types.SdJwt4VC;
-  }
-});
-exports.verify = exports.prepareVpToken = exports.disclose = exports.decode = void 0;
+exports.prepareVpToken = exports.decode = void 0;
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
+var _decode = require("@sd-jwt/decode");
+var _present = require("@sd-jwt/present");
+var _cryptoNodejs = require("@sd-jwt/crypto-nodejs");
 var _types = require("./types");
-var _verifier = require("./verifier");
-var Errors = _interopRequireWildcard(require("./errors"));
-exports.Errors = Errors;
-var _jsBase = require("js-base64");
 var _utils = require("./utils");
 Object.keys(_utils).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;
@@ -37,160 +25,31 @@ Object.keys(_utils).forEach(function (key) {
     }
   });
 });
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-const decodeDisclosure = encoded => {
-  const utf8String = _jsBase.Base64.decode(encoded); // Decode Base64 into UTF-8 string
-  const decoded = _types.Disclosure.parse(JSON.parse(utf8String));
-  return {
-    decoded,
-    encoded
-  };
-};
-
 /**
  * Decode a given SD-JWT with Disclosures to get the parsed SD-JWT object they define.
  * It ensures provided data is in a valid shape.
  *
  * It DOES NOT verify token signature nor check disclosures are correctly referenced by the SD-JWT.
- * Use {@link verify} instead
  *
- * @function
  * @param token The encoded token that represents a valid sd-jwt for verifiable credentials
- * @param customSchema (optional) Schema to use to parse the SD-JWT. Default: SdJwt4VC
- *
  * @returns The parsed SD-JWT token and the parsed disclosures
- *
  */
-const decode = (token, customSchema) => {
-  // token are expected in the form "sd-jwt~disclosure0~disclosure1~...~disclosureN~"
-  if (token.slice(-1) === "~") {
-    token = token.slice(0, -1);
-  }
-  const [rawSdJwt = "", ...rawDisclosures] = token.split("~");
-
-  // get the sd-jwt as object
-  // validate it's a valid SD-JWT for Verifiable Credentials
-  const decodedJwt = (0, _ioReactNativeJwt.decode)(rawSdJwt);
-
-  // use a custom parsed if provided, otherwise use base SdJwt4VC
-  const parser = customSchema || _types.SdJwt4VC;
-  const sdJwt = parser.parse({
-    header: decodedJwt.protectedHeader,
-    payload: decodedJwt.payload
+const decode = token => {
+  const decoded = (0, _decode.decodeSdJwtSync)(token, _cryptoNodejs.digest);
+  const sdJwt = _types.SdJwt4VCBase.parse({
+    header: decoded.jwt.header,
+    payload: decoded.jwt.payload
   });
-
-  // get disclosures as list of triples
-  // validate each triple
-  // throw a validation error if at least one fails to parse
-  const disclosures = rawDisclosures.map(decodeDisclosure);
+  const disclosures = decoded.disclosures.map(disclosure => ({
+    encoded: disclosure._digest,
+    decoded: [disclosure.salt, disclosure.key, disclosure.value]
+  }));
   return {
     sdJwt,
     disclosures
   };
 };
 
-/**
- * Select disclosures from a given SD-JWT with Disclosures.
- * Claims relate with disclosures by their name.
- *
- * @function
- * @param token The encoded token that represents a valid sd-jwt for verifiable credentials
- * @param claims The list of claims to be disclosed
- *
- * @throws {ClaimsNotFoundBetweenDisclosures} When one or more claims does not relate to any discloure.
- * @throws {ClaimsNotFoundInToken} When one or more claims are not contained in the SD-JWT token.
- * @returns The encoded token with only the requested disclosures, along with the path each claim can be found on the SD-JWT token
- *
- */
-exports.decode = decode;
-const disclose = async (token, claims) => {
-  const [rawSdJwt, ...rawDisclosures] = token.split("~");
-  const {
-    sdJwt,
-    disclosures
-  } = decode(token, _types.SdJwt4VC);
-
-  // for each claim, return the path on which they are located in the SD-JWT token
-  const paths = await Promise.all(claims.map(async claim => {
-    const disclosure = disclosures.find(_ref => {
-      let {
-        decoded: [, name]
-      } = _ref;
-      return name === claim;
-    });
-
-    // check every claim represents a known disclosure
-    if (!disclosure) {
-      throw new Errors.ClaimsNotFoundBetweenDisclosures(claim);
-    }
-    const hash = await (0, _ioReactNativeJwt.sha256ToBase64)(disclosure.encoded);
-
-    // _sd is defined in verified_claims.claims and verified_claims.verification
-    // we must look into both
-    if (sdJwt.payload._sd.includes(hash)) {
-      const index = sdJwt.payload._sd.indexOf(hash);
-      return {
-        claim,
-        path: `verified_claims.claims._sd[${index}]`
-      };
-    }
-    throw new Errors.ClaimsNotFoundInToken(claim);
-  }));
-
-  // The disclosures in the new SD-JWT aligned with version 1.0
-  // include a trailing "~" character.
-  // To avoid parsing errors, it is necessary to filter the array
-  // to remove any empty strings
-  const filteredDisclosures = rawDisclosures.filter(Boolean).filter(d => {
-    const {
-      decoded: [, name]
-    } = decodeDisclosure(d);
-    return claims.includes(name);
-  });
-
-  // compose the final disclosed token
-  const disclosedToken = [rawSdJwt, ...filteredDisclosures].join("~");
-  return {
-    token: disclosedToken,
-    paths
-  };
-};
-
-/**
- * Verify a given SD-JWT with Disclosures
- * Same as {@link decode} plus:
- *   - token signature verification
- *   - ensure disclosures are well-defined inside the SD-JWT
- *
- * @async @function
- *
- *
- * @param token The encoded token that represents a valid sd-jwt for verifiable credentials
- * @param publicKey The single public key or an array of public keys to validate the signature.
- * @param customSchema Schema to use to parse the SD-JWT
- *
- * @returns The parsed SD-JWT token and the parsed disclosures
- *
- */
-exports.disclose = disclose;
-const verify = async (token, publicKey, customSchema) => {
-  // get decoded data
-  const [rawSdJwt = ""] = token.split("~");
-  const decoded = decode(token, customSchema);
-
-  //Check signature
-  await (0, _ioReactNativeJwt.verify)(rawSdJwt, publicKey);
-
-  //Check disclosures in sd-jwt
-  const claims = [...decoded.sdJwt.payload._sd];
-  await Promise.all(decoded.disclosures.map(async disclosure => await (0, _verifier.verifyDisclosure)(disclosure, claims)));
-  return {
-    sdJwt: decoded.sdJwt,
-    disclosures: decoded.disclosures.map(d => d.decoded)
-  };
-};
-
 /**
  * Prepares a Verified Presentation (VP) token to be sent as part of an
  * authorization response in an OpenID 4 Verifiable Presentations flow.
@@ -206,16 +65,14 @@ const verify = async (token, publicKey, customSchema) => {
  *  2. A KB-JWT is then signed, including sd_hash and `nonce`.
  *  3. The `vp_token` is composed of the disclosed VP and the KB-JWT.
  */
-exports.verify = verify;
-const prepareVpToken = async (nonce, client_id, _ref2) => {
-  let [verifiableCredential, requestedClaims, cryptoContext] = _ref2;
+exports.decode = decode;
+const prepareVpToken = async (nonce, client_id, _ref) => {
+  let [verifiableCredential, presentationFrame, cryptoContext] = _ref;
   // Produce a VP token with only requested claims from the verifiable credential
-  const {
-    token: vp
-  } = await disclose(verifiableCredential, requestedClaims);
+  const vp = await (0, _present.present)(verifiableCredential, presentationFrame, _cryptoNodejs.digest);
 
   // <Issuer-signed JWT>~<Disclosure 1>~<Disclosure N>~
-  const sd_hash = await (0, _ioReactNativeJwt.sha256ToBase64)(`${vp}~`);
+  const sd_hash = await (0, _ioReactNativeJwt.sha256ToBase64)(vp);
   const kbJwt = await new _ioReactNativeJwt.SignJWT(cryptoContext).setProtectedHeader({
     typ: "kb+jwt",
     alg: "ES256"
@@ -223,9 +80,8 @@ const prepareVpToken = async (nonce, client_id, _ref2) => {
     sd_hash,
     nonce: nonce
   }).setAudience(client_id).setIssuedAt().sign();
-
   // <Issuer-signed JWT>~<Disclosure 1>~...~<Disclosure N>~<KB-JWT>
-  const vp_token = [vp, kbJwt].join("~");
+  const vp_token = [vp, kbJwt].join("");
   return {
     vp_token
   };

package/lib/commonjs/sd-jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_types","_verifier","Errors","_interopRequireWildcard","exports","_jsBase","_utils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","defineProperty","enumerable","get","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","newObj","hasPropertyDescriptor","getOwnPropertyDescriptor","desc","set","decodeDisclosure","encoded","utf8String","Base64","decode","decoded","Disclosure","parse","JSON","token","customSchema","slice","rawSdJwt","rawDisclosures","split","decodedJwt","decodeJwt","parser","SdJwt4VC","sdJwt","header","protectedHeader","payload","disclosures","map","disclose","claims","paths","Promise","all","claim","disclosure","find","_ref","name","ClaimsNotFoundBetweenDisclosures","hash","sha256ToBase64","_sd","includes","index","indexOf","path","ClaimsNotFoundInToken","filteredDisclosures","filter","Boolean","d","disclosedToken","join","verify","publicKey","verifyJwt","verifyDisclosure","prepareVpToken","nonce","client_id","_ref2","verifiableCredential","requestedClaims","cryptoContext","vp","sd_hash","kbJwt","SignJWT","setProtectedHeader","typ","alg","setPayload","setAudience","setIssuedAt","sign","vp_token"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAEA,IAAAA,iBAAA,GAAAC,OAAA;AAMA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AAEA,IAAAG,MAAA,GAAAC,uBAAA,CAAAJ,OAAA;AAAmCK,OAAA,CAAAF,MAAA,GAAAA,MAAA;AACnC,IAAAG,OAAA,GAAAN,OAAA;AAGA,IAAAO,MAAA,GAAAP,OAAA;AAAAQ,MAAA,CAAAC,IAAA,CAAAF,MAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAN,OAAA,IAAAA,OAAA,CAAAM,GAAA,MAAAJ,MAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAQ,cAAA,CAAAX,OAAA,EAAAM,GAAA;IAAAM,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAX,MAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAAwB,SAAAQ,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAhB,wBAAAoB,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAT,GAAA,CAAAM,GAAA,SAAAK,MAAA,WAAAC,qBAAA,GAAAtB,MAAA,CAAAQ,cAAA,IAAAR,MAAA,CAAAuB,wBAAA,WAAApB,GAAA,IAAAa,GAAA,QAAAb,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAU,GAAA,EAAAb,GAAA,SAAAqB,IAAA,GAAAF,qBAAA,GAAAtB,MAAA,CAAAuB,wBAAA,CAAAP,GAAA,EAAAb,GAAA,cAAAqB,IAAA,KAAAA,IAAA,CAAAd,GAAA,IAAAc,IAAA,CAAAC,GAAA,KAAAzB,MAAA,CAAAQ,cAAA,CAAAa,MAAA,EAAAlB,GAAA,EAAAqB,IAAA,YAAAH,MAAA,CAAAlB,GAAA,IAAAa,GAAA,CAAAb,GAAA,SAAAkB,MAAA,CAAAH,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAM,GAAA,CAAAT,GAAA,EAAAK,MAAA,YAAAA,MAAA;AAExB,MAAMK,gBAAgB,GAAIC,OAAe,IAA4B;EACnE,MAAMC,UAAU,GAAGC,cAAM,CAACC,MAAM,CAACH,OAAO,CAAC,CAAC,CAAC;EAC3C,MAAMI,OAAO,GAAGC,iBAAU,CAACC,KAAK,CAACC,IAAI,CAACD,KAAK,CAACL,UAAU,CAAC,CAAC;EACxD,OAAO;IAAEG,OAAO;IAAEJ;EAAQ,CAAC;AAC7B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMG,MAAM,GAAGA,CACpBK,KAAa,EACbC,YAAgB,KAIb;EACH;EACA,IAAID,KAAK,CAACE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;IAC3BF,KAAK,GAAGA,KAAK,CAACE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;EAC5B;EACA,MAAM,CAACC,QAAQ,GAAG,EAAE,EAAE,GAAGC,cAAc,CAAC,GAAGJ,KAAK,CAACK,KAAK,CAAC,GAAG,CAAC;;EAE3D;EACA;EACA,MAAMC,UAAU,GAAG,IAAAC,wBAAS,EAACJ,QAAQ,CAAC;;EAEtC;EACA,MAAMK,MAAM,GAAGP,YAAY,IAAIQ,eAAQ;EAEvC,MAAMC,KAAK,GAAGF,MAAM,CAACV,KAAK,CAAC;IACzBa,MAAM,EAAEL,UAAU,CAACM,eAAe;IAClCC,OAAO,EAAEP,UAAU,CAACO;EACtB,CAAC,CAAC;;EAEF;EACA;EACA;EACA,MAAMC,WAAW,GAAGV,cAAc,CAACW,GAAG,CAACxB,gBAAgB,CAAC;EAExD,OAAO;IAAEmB,KAAK;IAAEI;EAAY,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAZApD,OAAA,CAAAiC,MAAA,GAAAA,MAAA;AAaO,MAAMqB,QAAQ,GAAG,MAAAA,CACtBhB,KAAa,EACbiB,MAAgB,KACyD;EACzE,MAAM,CAACd,QAAQ,EAAE,GAAGC,cAAc,CAAC,GAAGJ,KAAK,CAACK,KAAK,CAAC,GAAG,CAAC;EACtD,MAAM;IAAEK,KAAK;IAAEI;EAAY,CAAC,GAAGnB,MAAM,CAACK,KAAK,EAAES,eAAQ,CAAC;;EAEtD;EACA,MAAMS,KAAK,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC7BH,MAAM,CAACF,GAAG,CAAC,MAAOM,KAAK,IAAK;IAC1B,MAAMC,UAAU,GAAGR,WAAW,CAACS,IAAI,CACjCC,IAAA;MAAA,IAAC;QAAE5B,OAAO,EAAE,GAAG6B,IAAI;MAAE,CAAC,GAAAD,IAAA;MAAA,OAAKC,IAAI,KAAKJ,KAAK;IAAA,CAC3C,CAAC;;IAED;IACA,IAAI,CAACC,UAAU,EAAE;MACf,MAAM,IAAI9D,MAAM,CAACkE,gCAAgC,CAACL,KAAK,CAAC;IAC1D;IAEA,MAAMM,IAAI,GAAG,MAAM,IAAAC,gCAAc,EAACN,UAAU,CAAC9B,OAAO,CAAC;;IAErD;IACA;IACA,IAAIkB,KAAK,CAACG,OAAO,CAACgB,GAAG,CAACC,QAAQ,CAACH,IAAI,CAAC,EAAE;MACpC,MAAMI,KAAK,GAAGrB,KAAK,CAACG,OAAO,CAACgB,GAAG,CAACG,OAAO,CAACL,IAAI,CAAC;MAC7C,OAAO;QAAEN,KAAK;QAAEY,IAAI,EAAG,8BAA6BF,KAAM;MAAG,CAAC;IAChE;IAEA,MAAM,IAAIvE,MAAM,CAAC0E,qBAAqB,CAACb,KAAK,CAAC;EAC/C,CAAC,CACH,CAAC;;EAED;EACA;EACA;EACA;EACA,MAAMc,mBAAmB,GAAG/B,cAAc,CAACgC,MAAM,CAACC,OAAO,CAAC,CAACD,MAAM,CAAEE,CAAC,IAAK;IACvE,MAAM;MACJ1C,OAAO,EAAE,GAAG6B,IAAI;IAClB,CAAC,GAAGlC,gBAAgB,CAAC+C,CAAC,CAAC;IACvB,OAAOrB,MAAM,CAACa,QAAQ,CAACL,IAAI,CAAC;EAC9B,CAAC,CAAC;;EAEF;EACA,MAAMc,cAAc,GAAG,CAACpC,QAAQ,EAAE,GAAGgC,mBAAmB,CAAC,CAACK,IAAI,CAAC,GAAG,CAAC;EACnE,OAAO;IAAExC,KAAK,EAAEuC,cAAc;IAAErB;EAAM,CAAC;AACzC,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAfAxD,OAAA,CAAAsD,QAAA,GAAAA,QAAA;AAgBO,MAAMyB,MAAM,GAAG,MAAAA,CACpBzC,KAAa,EACb0C,SAAsB,EACtBzC,YAAgB,KAC8C;EAC9D;EACA,MAAM,CAACE,QAAQ,GAAG,EAAE,CAAC,GAAGH,KAAK,CAACK,KAAK,CAAC,GAAG,CAAC;EACxC,MAAMT,OAAO,GAAGD,MAAM,CAACK,KAAK,EAAEC,YAAY,CAAC;;EAE3C;EACA,MAAM,IAAA0C,wBAAS,EAACxC,QAAQ,EAAEuC,SAAS,CAAC;;EAEpC;EACA,MAAMzB,MAAM,GAAG,CAAC,GAAGrB,OAAO,CAACc,KAAK,CAACG,OAAO,CAACgB,GAAG,CAAC;EAE7C,MAAMV,OAAO,CAACC,GAAG,CACfxB,OAAO,CAACkB,WAAW,CAACC,GAAG,CACrB,MAAOO,UAAU,IAAK,MAAM,IAAAsB,0BAAgB,EAACtB,UAAU,EAAEL,MAAM,CACjE,CACF,CAAC;EAED,OAAO;IACLP,KAAK,EAAEd,OAAO,CAACc,KAAK;IACpBI,WAAW,EAAElB,OAAO,CAACkB,WAAW,CAACC,GAAG,CAAEuB,CAAC,IAAKA,CAAC,CAAC1C,OAAO;EACvD,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAdAlC,OAAA,CAAA+E,MAAA,GAAAA,MAAA;AAeO,MAAMI,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,KAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,eAAe,EAAEC,aAAa,CAAe,GAAAH,KAAA;EAIpE;EACA,MAAM;IAAEhD,KAAK,EAAEoD;EAAG,CAAC,GAAG,MAAMpC,QAAQ,CAACiC,oBAAoB,EAAEC,eAAe,CAAC;;EAE3E;EACA,MAAMG,OAAO,GAAG,MAAM,IAAAzB,gCAAc,EAAE,GAAEwB,EAAG,GAAE,CAAC;EAE9C,MAAME,KAAK,GAAG,MAAM,IAAIC,yBAAO,CAACJ,aAAa,CAAC,CAC3CK,kBAAkB,CAAC;IAClBC,GAAG,EAAE,QAAQ;IACbC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVN,OAAO;IACPP,KAAK,EAAEA;EACT,CAAC,CAAC,CACDc,WAAW,CAACb,SAAS,CAAC,CACtBc,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;;EAET;EACA,MAAMC,QAAQ,GAAG,CAACX,EAAE,EAAEE,KAAK,CAAC,CAACd,IAAI,CAAC,GAAG,CAAC;EAEtC,OAAO;IAAEuB;EAAS,CAAC;AACrB,CAAC;AAACrG,OAAA,CAAAmF,cAAA,GAAAA,cAAA"}
+{"version":3,"names":["_ioReactNativeJwt","require","_decode","_present","_cryptoNodejs","_types","_utils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","decode","token","decoded","decodeSdJwtSync","digest","sdJwt","SdJwt4VCBase","parse","header","jwt","payload","disclosures","map","disclosure","encoded","_digest","salt","value","prepareVpToken","nonce","client_id","_ref","verifiableCredential","presentationFrame","cryptoContext","vp","present","sd_hash","sha256ToBase64","kbJwt","SignJWT","setProtectedHeader","typ","alg","setPayload","setAudience","setIssuedAt","sign","vp_token","join"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":";;;;;;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,aAAA,GAAAH,OAAA;AAEA,IAAAI,MAAA,GAAAJ,OAAA;AAEA,IAAAK,MAAA,GAAAL,OAAA;AAAAM,MAAA,CAAAC,IAAA,CAAAF,MAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,MAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,MAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMS,MAAM,GAAIC,KAAa,IAAK;EACvC,MAAMC,OAAO,GAAG,IAAAC,uBAAe,EAACF,KAAK,EAAEG,oBAAM,CAAC;EAE9C,MAAMC,KAAK,GAAGC,mBAAY,CAACC,KAAK,CAAC;IAC/BC,MAAM,EAAEN,OAAO,CAACO,GAAG,CAACD,MAAM;IAC1BE,OAAO,EAAER,OAAO,CAACO,GAAG,CAACC;EACvB,CAAC,CAAC;EACF,MAAMC,WAAW,GAAGT,OAAO,CAACS,WAAW,CAACC,GAAG,CAAEC,UAAU,KAAM;IAC3DC,OAAO,EAAED,UAAU,CAACE,OAAO;IAC3Bb,OAAO,EAAE,CAACW,UAAU,CAACG,IAAI,EAAEH,UAAU,CAACtB,GAAG,EAAEsB,UAAU,CAACI,KAAK;EAC7D,CAAC,CAAC,CAAC;EACH,OAAO;IAAEZ,KAAK;IAAEM;EAAY,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAdAf,OAAA,CAAAI,MAAA,GAAAA,MAAA;AAeO,MAAMkB,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,IAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,EAAEC,aAAa,CAAe,GAAAH,IAAA;EAItE;EACA,MAAMI,EAAE,GAAG,MAAM,IAAAC,gBAAO,EAACJ,oBAAoB,EAAEC,iBAAiB,EAAEnB,oBAAM,CAAC;;EAEzE;EACA,MAAMuB,OAAO,GAAG,MAAM,IAAAC,gCAAc,EAACH,EAAE,CAAC;EAExC,MAAMI,KAAK,GAAG,MAAM,IAAIC,yBAAO,CAACN,aAAa,CAAC,CAC3CO,kBAAkB,CAAC;IAClBC,GAAG,EAAE,QAAQ;IACbC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVP,OAAO;IACPR,KAAK,EAAEA;EACT,CAAC,CAAC,CACDgB,WAAW,CAACf,SAAS,CAAC,CACtBgB,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;EACT;EACA,MAAMC,QAAQ,GAAG,CAACb,EAAE,EAAEI,KAAK,CAAC,CAACU,IAAI,CAAC,EAAE,CAAC;EAErC,OAAO;IAAED;EAAS,CAAC;AACrB,CAAC;AAAC1C,OAAA,CAAAsB,cAAA,GAAAA,cAAA"}

package/lib/commonjs/sd-jwt/types.js

@@ -3,50 +3,31 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.Verification = exports.UnixTime = exports.TypeMetadata = exports.SdJwt4VC = exports.ObfuscatedDisclosures = exports.LEGACY_SD_JWT = exports.Disclosure = void 0;
-var _jwk = require("../utils/jwk");
+exports.Verification = exports.TypeMetadata = exports.SdJwt4VCBase = exports.LEGACY_SD_JWT = void 0;
 var _zod = require("zod");
-const UnixTime = _zod.z.number().min(0).max(2147483647000);
-exports.UnixTime = UnixTime;
-const ObfuscatedDisclosures = _zod.z.object({
-  _sd: _zod.z.array(_zod.z.string())
-});
-
-/**
- * A triple of values in the form of {salt, claim name, claim value} that represent a parsed disclosure.
- *
- * @see https://datatracker.ietf.org/doc/html/draft-ietf-oauth-selective-disclosure-jwt-04
- * @see https://vcstuff.github.io/draft-terbu-sd-jwt-vc/draft-terbu-oauth-sd-jwt-vc.html
- */
-exports.ObfuscatedDisclosures = ObfuscatedDisclosures;
-const Disclosure = _zod.z.tuple([/* salt */_zod.z.string(), /* claim name */_zod.z.string(), /* claim value */_zod.z.unknown()]);
-
+var _zod2 = require("../utils/zod");
+var _jwk = require("../utils/jwk");
 /**
  * For backward compatibility reasons it is still necessary to support the legacy SD-JWT
  * in a few flows (for instance status assertion and presentation of the old eID).
  */
-exports.Disclosure = Disclosure;
-const LEGACY_SD_JWT = "vc+sd-jwt";
 
-/**
- * Encoding depends on the serialization algorithm used when generating the disclosure tokens.
- * The SD-JWT reference itself take no decision about how to handle whitespaces in serialized objects.
- * For such reason, we may find conveninent to have encoded and decode values stored explicitly in the same structure.
- * Please note that `encoded` can always decode into `decode`, but `decode` may or may not be encoded with the same value of `encoded`
- *
- * @see https://www.ietf.org/archive/id/draft-ietf-oauth-selective-disclosure-jwt-05.html#name-disclosures-for-object-prop
- */
+const LEGACY_SD_JWT = "vc+sd-jwt";
 exports.LEGACY_SD_JWT = LEGACY_SD_JWT;
 const StatusAssertion = _zod.z.object({
   credential_hash_alg: _zod.z.literal("sha-256")
 });
+const StatusList = _zod.z.object({
+  idx: _zod.z.string(),
+  uri: _zod.z.string()
+});
 
 /**
- * Type for a Verifiable Credential in SD-JWT format.
- * It supports both the older and the new data model for backward compatibility.
+ * Type for a Verifiable Credential base SD-JWT.
+ * It only contains common claims across versions.
  */
 
-const SdJwt4VC = _zod.z.object({
+const SdJwt4VCBase = _zod.z.object({
   header: _zod.z.object({
     typ: _zod.z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
     alg: _zod.z.string(),
@@ -55,36 +36,32 @@ const SdJwt4VC = _zod.z.object({
     x5c: _zod.z.array(_zod.z.string()).optional(),
     vctm: _zod.z.array(_zod.z.string()).optional()
   }),
-  payload: _zod.z.intersection(_zod.z.object({
+  payload: _zod.z.object({
+    _sd: _zod.z.array(_zod.z.string()),
+    _sd_alg: _zod.z.literal("sha-256"),
     iss: _zod.z.string(),
     sub: _zod.z.string(),
-    iat: UnixTime.optional(),
-    exp: UnixTime,
-    _sd_alg: _zod.z.literal("sha-256"),
-    status: _zod.z.union([
-    // Credentials v1.0
-    _zod.z.object({
-      status_assertion: StatusAssertion
-    }),
-    // Legacy credentials v0.7.1
-    _zod.z.object({
-      status_attestation: StatusAssertion
-    })]).optional(),
+    iat: _zod2.UnixTime.optional(),
+    exp: _zod2.UnixTime,
     cnf: _zod.z.object({
       jwk: _jwk.JWK
     }),
+    status: _zod.z.union([_zod.z.object({
+      status_list: StatusList
+    }), _zod.z.object({
+      /** @deprecated Use `status.status_list` */
+      status_assertion: StatusAssertion
+    })]),
     vct: _zod.z.string(),
-    "vct#integrity": _zod.z.string().optional(),
-    issuing_authority: _zod.z.string().optional(),
-    issuing_country: _zod.z.string().optional()
-  }), ObfuscatedDisclosures)
+    "vct#integrity": _zod.z.string().optional()
+  })
 });
 
 /**
  * Object containing User authentication and User data verification information.
  * Useful to extract the assurance level to determine L2/L3 authentication.
  */
-exports.SdJwt4VC = SdJwt4VC;
+exports.SdJwt4VCBase = SdJwt4VCBase;
 const Verification = _zod.z.object({
   trust_framework: _zod.z.string(),
   assurance_level: _zod.z.string(),
@@ -106,7 +83,7 @@ const Verification = _zod.z.object({
 /**
  * Metadata for a digital credential. This information is retrieved from the URL defined in the `vct` claim.
  *
- * @see https://italia.github.io/eid-wallet-it-docs/v0.9.1/en/pid-eaa-data-model.html#digital-credential-metadata-type
+ * @see https://italia.github.io/eid-wallet-it-docs/releases/1.0.1/en/credential-data-model.html#digital-credential-metadata-type
  */
 exports.Verification = Verification;
 const TypeMetadata = _zod.z.object({
@@ -122,7 +99,6 @@ const TypeMetadata = _zod.z.object({
       logo_uri: _zod.z.string().url()
     })
   })
-  // TODO: add more fields
 });
 exports.TypeMetadata = TypeMetadata;
 //# sourceMappingURL=types.js.map

package/lib/commonjs/sd-jwt/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["_jwk","require","_zod","UnixTime","z","number","min","max","exports","ObfuscatedDisclosures","object","_sd","array","string","Disclosure","tuple","unknown","LEGACY_SD_JWT","StatusAssertion","credential_hash_alg","literal","SdJwt4VC","header","typ","enum","alg","kid","trust_chain","optional","x5c","vctm","payload","intersection","iss","sub","iat","exp","_sd_alg","status","union","status_assertion","status_attestation","cnf","jwk","JWK","vct","issuing_authority","issuing_country","Verification","trust_framework","assurance_level","evidence","type","time","attestation","reference_number","date_of_issuance","voucher","organization","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,IAAA,GAAAD,OAAA;AAEO,MAAME,QAAQ,GAAGC,MAAC,CAACC,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACC,GAAG,CAAC,aAAa,CAAC;AAACC,OAAA,CAAAL,QAAA,GAAAA,QAAA;AAItD,MAAMM,qBAAqB,GAAGL,MAAC,CAACM,MAAM,CAAC;EAAEC,GAAG,EAAEP,MAAC,CAACQ,KAAK,CAACR,MAAC,CAACS,MAAM,CAAC,CAAC;AAAE,CAAC,CAAC;;AAE3E;AACA;AACA;AACA;AACA;AACA;AALAL,OAAA,CAAAC,qBAAA,GAAAA,qBAAA;AAOO,MAAMK,UAAU,GAAGV,MAAC,CAACW,KAAK,CAAC,CAChC,UAAWX,MAAC,CAACS,MAAM,CAAC,CAAC,EACrB,gBAAiBT,MAAC,CAACS,MAAM,CAAC,CAAC,EAC3B,iBAAkBT,MAAC,CAACY,OAAO,CAAC,CAAC,CAC9B,CAAC;;AAEF;AACA;AACA;AACA;AAHAR,OAAA,CAAAM,UAAA,GAAAA,UAAA;AAKO,MAAMG,aAAa,GAAG,WAAW;;AAExC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAT,OAAA,CAAAS,aAAA,GAAAA,aAAA;AAaA,MAAMC,eAAe,GAAGd,MAAC,CAACM,MAAM,CAAC;EAC/BS,mBAAmB,EAAEf,MAAC,CAACgB,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEO,MAAMC,QAAQ,GAAGjB,MAAC,CAACM,MAAM,CAAC;EAC/BY,MAAM,EAAElB,MAAC,CAACM,MAAM,CAAC;IACfa,GAAG,EAAEnB,MAAC,CAACoB,IAAI,CAAC,CAAC,WAAW,EAAEP,aAAa,CAAC,CAAC;IACzCQ,GAAG,EAAErB,MAAC,CAACS,MAAM,CAAC,CAAC;IACfa,GAAG,EAAEtB,MAAC,CAACS,MAAM,CAAC,CAAC;IACfc,WAAW,EAAEvB,MAAC,CAACQ,KAAK,CAACR,MAAC,CAACS,MAAM,CAAC,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEzB,MAAC,CAACQ,KAAK,CAACR,MAAC,CAACS,MAAM,CAAC,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAE1B,MAAC,CAACQ,KAAK,CAACR,MAAC,CAACS,MAAM,CAAC,CAAC,CAAC,CAACe,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAE3B,MAAC,CAAC4B,YAAY,CACrB5B,MAAC,CAACM,MAAM,CAAC;IACPuB,GAAG,EAAE7B,MAAC,CAACS,MAAM,CAAC,CAAC;IACfqB,GAAG,EAAE9B,MAAC,CAACS,MAAM,CAAC,CAAC;IACfsB,GAAG,EAAEhC,QAAQ,CAACyB,QAAQ,CAAC,CAAC;IACxBQ,GAAG,EAAEjC,QAAQ;IACbkC,OAAO,EAAEjC,MAAC,CAACgB,OAAO,CAAC,SAAS,CAAC;IAC7BkB,MAAM,EAAElC,MAAC,CACNmC,KAAK,CAAC;IACL;IACAnC,MAAC,CAACM,MAAM,CAAC;MAAE8B,gBAAgB,EAAEtB;IAAgB,CAAC,CAAC;IAC/C;IACAd,MAAC,CAACM,MAAM,CAAC;MAAE+B,kBAAkB,EAAEvB;IAAgB,CAAC,CAAC,CAClD,CAAC,CACDU,QAAQ,CAAC,CAAC;IACbc,GAAG,EAAEtC,MAAC,CAACM,MAAM,CAAC;MACZiC,GAAG,EAAEC;IACP,CAAC,CAAC;IACFC,GAAG,EAAEzC,MAAC,CAACS,MAAM,CAAC,CAAC;IACf,eAAe,EAAET,MAAC,CAACS,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IACtCkB,iBAAiB,EAAE1C,MAAC,CAACS,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IACxCmB,eAAe,EAAE3C,MAAC,CAACS,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC;EACvC,CAAC,CAAC,EACFnB,qBACF;AACF,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AAHAD,OAAA,CAAAa,QAAA,GAAAA,QAAA;AAKO,MAAM2B,YAAY,GAAG5C,MAAC,CAACM,MAAM,CAAC;EACnCuC,eAAe,EAAE7C,MAAC,CAACS,MAAM,CAAC,CAAC;EAC3BqC,eAAe,EAAE9C,MAAC,CAACS,MAAM,CAAC,CAAC;EAC3BsC,QAAQ,EAAE/C,MAAC,CAACQ,KAAK,CACfR,MAAC,CAACM,MAAM,CAAC;IACP0C,IAAI,EAAEhD,MAAC,CAACgB,OAAO,CAAC,OAAO,CAAC;IACxB;IACAiC,IAAI,EAAEjD,MAAC,CAACmC,KAAK,CAAC,CAACnC,MAAC,CAACS,MAAM,CAAC,CAAC,EAAET,MAAC,CAACC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvCiD,WAAW,EAAElD,MAAC,CAACM,MAAM,CAAC;MACpB0C,IAAI,EAAEhD,MAAC,CAACgB,OAAO,CAAC,qBAAqB,CAAC;MACtCmC,gBAAgB,EAAEnD,MAAC,CAACS,MAAM,CAAC,CAAC;MAC5B2C,gBAAgB,EAAEpD,MAAC,CAACS,MAAM,CAAC,CAAC;MAC5B4C,OAAO,EAAErD,MAAC,CAACM,MAAM,CAAC;QAAEgD,YAAY,EAAEtD,MAAC,CAACS,MAAM,CAAC;MAAE,CAAC;IAChD,CAAC;EACH,CAAC,CACH;AACF,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AAJAL,OAAA,CAAAwC,YAAA,GAAAA,YAAA;AAMO,MAAMW,YAAY,GAAGvD,MAAC,CAACM,MAAM,CAAC;EACnCkD,IAAI,EAAExD,MAAC,CAACS,MAAM,CAAC,CAAC;EAChBgD,WAAW,EAAEzD,MAAC,CAACS,MAAM,CAAC,CAAC;EACvBiD,WAAW,EAAE1D,MAAC,CAACM,MAAM,CAAC;IACpBuC,eAAe,EAAE7C,MAAC,CAACS,MAAM,CAAC,CAAC;IAC3BkD,gBAAgB,EAAE3D,MAAC,CAACM,MAAM,CAAC;MACzBsD,iBAAiB,EAAE5D,MAAC,CAACS,MAAM,CAAC,CAAC;MAC7BoD,iBAAiB,EAAE7D,MAAC,CAACS,MAAM,CAAC,CAAC;MAC7BqD,QAAQ,EAAE9D,MAAC,CAACQ,KAAK,CAACR,MAAC,CAACS,MAAM,CAAC,CAAC,CAAC;MAC7BsD,YAAY,EAAE/D,MAAC,CAACS,MAAM,CAAC,CAAC,CAACuD,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEjE,MAAC,CAACS,MAAM,CAAC,CAAC,CAACuD,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;EACD;AACF,CAAC,CAAC;AAAC5D,OAAA,CAAAmD,YAAA,GAAAA,YAAA"}
+{"version":3,"names":["_zod","require","_zod2","_jwk","LEGACY_SD_JWT","exports","StatusAssertion","z","object","credential_hash_alg","literal","StatusList","idx","string","uri","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","UnixTime","exp","cnf","jwk","JWK","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","evidence","type","time","number","attestation","reference_number","date_of_issuance","voucher","organization","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,IAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;;AAEO,MAAMG,aAAa,GAAG,WAAW;AAACC,OAAA,CAAAD,aAAA,GAAAA,aAAA;AAEzC,MAAME,eAAe,GAAGC,MAAC,CAACC,MAAM,CAAC;EAC/BC,mBAAmB,EAAEF,MAAC,CAACG,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGJ,MAAC,CAACC,MAAM,CAAC;EAC1BI,GAAG,EAAEL,MAAC,CAACM,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEP,MAAC,CAACM,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEO,MAAME,YAAY,GAAGR,MAAC,CAACC,MAAM,CAAC;EACnCQ,MAAM,EAAET,MAAC,CAACC,MAAM,CAAC;IACfS,GAAG,EAAEV,MAAC,CAACW,IAAI,CAAC,CAAC,WAAW,EAAEd,aAAa,CAAC,CAAC;IACzCe,GAAG,EAAEZ,MAAC,CAACM,MAAM,CAAC,CAAC;IACfO,GAAG,EAAEb,MAAC,CAACM,MAAM,CAAC,CAAC;IACfQ,WAAW,EAAEd,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEjB,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAElB,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAEnB,MAAC,CAACC,MAAM,CAAC;IAChBmB,GAAG,EAAEpB,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC;IACxBe,OAAO,EAAErB,MAAC,CAACG,OAAO,CAAC,SAAS,CAAC;IAC7BmB,GAAG,EAAEtB,MAAC,CAACM,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAEvB,MAAC,CAACM,MAAM,CAAC,CAAC;IACfkB,GAAG,EAAEC,cAAQ,CAACT,QAAQ,CAAC,CAAC;IACxBU,GAAG,EAAED,cAAQ;IACbE,GAAG,EAAE3B,MAAC,CAACC,MAAM,CAAC;MACZ2B,GAAG,EAAEC;IACP,CAAC,CAAC;IACFC,MAAM,EAAE9B,MAAC,CAAC+B,KAAK,CAAC,CACd/B,MAAC,CAACC,MAAM,CAAC;MACP+B,WAAW,EAAE5B;IACf,CAAC,CAAC,EACFJ,MAAC,CAACC,MAAM,CAAC;MACP;MACAgC,gBAAgB,EAAElC;IACpB,CAAC,CAAC,CACH,CAAC;IACFmC,GAAG,EAAElC,MAAC,CAACM,MAAM,CAAC,CAAC;IACf,eAAe,EAAEN,MAAC,CAACM,MAAM,CAAC,CAAC,CAACU,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AAHAlB,OAAA,CAAAU,YAAA,GAAAA,YAAA;AAKO,MAAM2B,YAAY,GAAGnC,MAAC,CAACC,MAAM,CAAC;EACnCmC,eAAe,EAAEpC,MAAC,CAACM,MAAM,CAAC,CAAC;EAC3B+B,eAAe,EAAErC,MAAC,CAACM,MAAM,CAAC,CAAC;EAC3BgC,QAAQ,EAAEtC,MAAC,CAACe,KAAK,CACff,MAAC,CAACC,MAAM,CAAC;IACPsC,IAAI,EAAEvC,MAAC,CAACG,OAAO,CAAC,OAAO,CAAC;IACxB;IACAqC,IAAI,EAAExC,MAAC,CAAC+B,KAAK,CAAC,CAAC/B,MAAC,CAACM,MAAM,CAAC,CAAC,EAAEN,MAAC,CAACyC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvCC,WAAW,EAAE1C,MAAC,CAACC,MAAM,CAAC;MACpBsC,IAAI,EAAEvC,MAAC,CAACG,OAAO,CAAC,qBAAqB,CAAC;MACtCwC,gBAAgB,EAAE3C,MAAC,CAACM,MAAM,CAAC,CAAC;MAC5BsC,gBAAgB,EAAE5C,MAAC,CAACM,MAAM,CAAC,CAAC;MAC5BuC,OAAO,EAAE7C,MAAC,CAACC,MAAM,CAAC;QAAE6C,YAAY,EAAE9C,MAAC,CAACM,MAAM,CAAC;MAAE,CAAC;IAChD,CAAC;EACH,CAAC,CACH;AACF,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AAJAR,OAAA,CAAAqC,YAAA,GAAAA,YAAA;AAMO,MAAMY,YAAY,GAAG/C,MAAC,CAACC,MAAM,CAAC;EACnC+C,IAAI,EAAEhD,MAAC,CAACM,MAAM,CAAC,CAAC;EAChB2C,WAAW,EAAEjD,MAAC,CAACM,MAAM,CAAC,CAAC;EACvB4C,WAAW,EAAElD,MAAC,CAACC,MAAM,CAAC;IACpBmC,eAAe,EAAEpC,MAAC,CAACM,MAAM,CAAC,CAAC;IAC3B6C,gBAAgB,EAAEnD,MAAC,CAACC,MAAM,CAAC;MACzBmD,iBAAiB,EAAEpD,MAAC,CAACM,MAAM,CAAC,CAAC;MAC7B+C,iBAAiB,EAAErD,MAAC,CAACM,MAAM,CAAC,CAAC;MAC7BgD,QAAQ,EAAEtD,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC;MAC7BiD,YAAY,EAAEvD,MAAC,CAACM,MAAM,CAAC,CAAC,CAACkD,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEzD,MAAC,CAACM,MAAM,CAAC,CAAC,CAACkD,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC;AAAC1D,OAAA,CAAAiD,YAAA,GAAAA,YAAA"}

package/lib/commonjs/sd-jwt/utils.js

@@ -5,11 +5,11 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.getVerification = exports.fetchTypeMetadata = void 0;
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
+var _decode = require("@sd-jwt/decode");
+var _cryptoNodejs = require("@sd-jwt/crypto-nodejs");
 var _misc = require("../utils/misc");
 var _types = require("./types");
 var _errors = require("../utils/errors");
-var _ = require(".");
-var _converters = require("./converters");
 /**
  * Retrieve the Type Metadata for a credential and verify its integrity.
  * @param vct The VCT as a valid HTTPS url
@@ -54,11 +54,9 @@ const fetchTypeMetadata = async function (vct, vctIntegrity) {
  */
 exports.fetchTypeMetadata = fetchTypeMetadata;
 const getVerification = credentialSdJwt => {
-  const {
-    disclosures
-  } = (0, _.decode)(credentialSdJwt);
-  const verificationDisclosure = (0, _converters.getValueFromDisclosures)(disclosures.map(d => d.decoded), "verification");
-  return verificationDisclosure ? _types.Verification.parse(verificationDisclosure) : undefined;
+  const decoded = (0, _decode.decodeSdJwtSync)(credentialSdJwt, _cryptoNodejs.digest);
+  const claims = (0, _decode.getClaimsSync)(decoded.jwt.payload, decoded.disclosures, _cryptoNodejs.digest);
+  return claims.verification ? _types.Verification.parse(claims.verification) : undefined;
 };
 exports.getVerification = getVerification;
 //# sourceMappingURL=utils.js.map

package/lib/commonjs/sd-jwt/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_misc","_types","_errors","_","_converters","fetchTypeMetadata","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","origin","pathname","URL","metadata","headers","then","hasStatusOrThrow","IssuerResponseError","res","json","TypeMetadata","parse","alg","hash","split","IoWalletError","metadataHash","sha256ToBase64","JSON","stringify","ValidationFailed","message","reason","exports","getVerification","credentialSdJwt","disclosures","decode","verificationDisclosure","getValueFromDisclosures","map","d","decoded","Verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AAKA,IAAAI,CAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMM,iBAAiB,GAAG,eAAAA,CAC/BC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EACpC,MAAM;IAAEM,MAAM;IAAEC;EAAS,CAAC,GAAG,IAAIC,GAAG,CAACV,GAAG,CAAC;EAEzC,MAAMW,QAAQ,GAAG,MAAML,QAAQ,CAAE,GAAEE,MAAO,mBAAkBC,QAAS,EAAC,EAAE;IACtEG,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,EAAEC,2BAAmB,CAAC,CAAC,CAChDF,IAAI,CAAEG,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBJ,IAAI,CAACK,mBAAY,CAACC,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGpB,YAAY,CAACqB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAIG,qBAAa,CAAE,GAAEH,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMI,YAAY,GAAG,MAAM,IAAAC,gCAAc,EAACC,IAAI,CAACC,SAAS,CAAChB,QAAQ,CAAC,CAAC;EAEnE,IAAIa,YAAY,KAAKH,IAAI,EAAE;IACzB,MAAM,IAAIO,wBAAgB,CAAC;MACzBC,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOnB,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AAJAoB,OAAA,CAAAhC,iBAAA,GAAAA,iBAAA;AAKO,MAAMiC,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAM;IAAEC;EAAY,CAAC,GAAG,IAAAC,QAAM,EAACF,eAAe,CAAC;EAC/C,MAAMG,sBAAsB,GAAG,IAAAC,mCAAuB,EACpDH,WAAW,CAACI,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAACC,OAAO,CAAC,EACjC,cACF,CAAC;EACD,OAAOJ,sBAAsB,GACzBK,mBAAY,CAACtB,KAAK,CAACiB,sBAAsB,CAAC,GAC1C/B,SAAS;AACf,CAAC;AAAC0B,OAAA,CAAAC,eAAA,GAAAA,eAAA"}
+{"version":3,"names":["_ioReactNativeJwt","require","_decode","_cryptoNodejs","_misc","_types","_errors","fetchTypeMetadata","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","origin","pathname","URL","metadata","headers","then","hasStatusOrThrow","IssuerResponseError","res","json","TypeMetadata","parse","alg","hash","split","IoWalletError","metadataHash","sha256ToBase64","JSON","stringify","ValidationFailed","message","reason","exports","getVerification","credentialSdJwt","decoded","decodeSdJwtSync","digest","claims","getClaimsSync","jwt","payload","disclosures","verification","Verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AACA,IAAAI,MAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMM,iBAAiB,GAAG,eAAAA,CAC/BC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EACpC,MAAM;IAAEM,MAAM;IAAEC;EAAS,CAAC,GAAG,IAAIC,GAAG,CAACV,GAAG,CAAC;EAEzC,MAAMW,QAAQ,GAAG,MAAML,QAAQ,CAAE,GAAEE,MAAO,mBAAkBC,QAAS,EAAC,EAAE;IACtEG,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,EAAEC,2BAAmB,CAAC,CAAC,CAChDF,IAAI,CAAEG,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBJ,IAAI,CAACK,mBAAY,CAACC,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGpB,YAAY,CAACqB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAIG,qBAAa,CAAE,GAAEH,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMI,YAAY,GAAG,MAAM,IAAAC,gCAAc,EAACC,IAAI,CAACC,SAAS,CAAChB,QAAQ,CAAC,CAAC;EAEnE,IAAIa,YAAY,KAAKH,IAAI,EAAE;IACzB,MAAM,IAAIO,wBAAgB,CAAC;MACzBC,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOnB,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AAJAoB,OAAA,CAAAhC,iBAAA,GAAAA,iBAAA;AAKO,MAAMiC,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAMC,OAAO,GAAG,IAAAC,uBAAe,EAACF,eAAe,EAAEG,oBAAM,CAAC;EAExD,MAAMC,MAAM,GAAG,IAAAC,qBAAa,EAC1BJ,OAAO,CAACK,GAAG,CAACC,OAAO,EACnBN,OAAO,CAACO,WAAW,EACnBL,oBACF,CAAC;EAED,OAAOC,MAAM,CAACK,YAAY,GACtBC,mBAAY,CAACxB,KAAK,CAACkB,MAAM,CAACK,YAAY,CAAC,GACvCrC,SAAS;AACf,CAAC;AAAC0B,OAAA,CAAAC,eAAA,GAAAA,eAAA"}

package/lib/commonjs/trust/README.md

@@ -38,15 +38,24 @@ sequenceDiagram
 ### Validate a trust chain
 
 ```ts
-import { validateTrustChain } from "./trust";
+import { IoWallet } from "@pagopa/io-react-native-wallet";
 import { trustAnchorEntityConfiguration } from "./your-data";
 import { chain } from "./your-data"; // array of JWTs, starting from leaf
 
-const result = await validateTrustChain(trustAnchorEntityConfiguration, chain, {
+const wallet = new IoWallet({ version: "1.0.0" });
+
+const result = await wallet.Trust.verifyTrustChain(
+  trustAnchorEntityConfiguration, 
+  chain, 
+  {
     connectTimeout: 3000,
     readTimeout: 3000,
     requireCrl: false,
-});
+  },
+  {
+    renewOnFail: true // Optional trust chain renewal
+  }
+);
 ```
 
 * The `chain` must be an array of signed JWT strings.
@@ -55,6 +64,9 @@ const result = await validateTrustChain(trustAnchorEntityConfiguration, chain, {
 
 ### Renew a trust chain
 
+[>!NOTE]
+> Internal only
+
 ```ts
 import { renewTrustChain } from "./trust";
 
@@ -66,9 +78,11 @@ This will fetch updated JWTs from each authority in the chain.
 ### Build a trust chain
 
 ```ts
-import { buildTrustChain } from "./trust";
+import { IoWallet } from "@pagopa/io-react-native-wallet";
 
-const chain = await buildTrustChain({
+const wallet = new IoWallet({ version: "1.0.0" });
+
+const chain = await wallet.Trust.buildTrustChain({
   leaf: "https://example-leaf",
   trustAnchor: trustAnchorEntityConfiguration,
 });
@@ -90,18 +104,17 @@ const chain = await buildTrustChain({
 ### Build and Validate Example
 
 ```ts
-import {
-  buildTrustChain,
-  validateTrustChain,
-} from "./trust";
+import { IoWallet } from "@pagopa/io-react-native-wallet";
 import { trustAnchorEntityConfiguration } from "./your-data";
 
-const chain = await buildTrustChain({
+const wallet = new IoWallet({ version: "1.0.0" });
+
+const chain = await wallet.Trust.buildTrustChain({
   leaf: "https://example-leaf",
   trustAnchor: trustAnchorEntityConfiguration,
 });
 
-const result = await validateTrustChain(trustAnchorEntityConfiguration, chain, {
+const result = await wallet.Trust.verifyTrustChain(trustAnchorEntityConfiguration, chain, {
   connectTimeout: 3000,
   readTimeout: 3000,
   requireCrl: true,

package/lib/commonjs/trust/api/TrustAnchorConfig.js

@@ -0,0 +1,29 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.TrustAnchorConfig = void 0;
+var z = _interopRequireWildcard(require("zod"));
+var _jwk = require("../../utils/jwk");
+var _types = require("../common/types");
+function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
+function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
+/**
+ * Common Trust Anchor configuration
+ * @public
+ */
+
+const TrustAnchorConfig = z.object({
+  jwt: z.object({
+    header: z.object({
+      typ: z.literal("entity-statement+jwt"),
+      alg: z.string(),
+      kid: z.string()
+    })
+  }),
+  keys: z.array(_jwk.JWK),
+  federation_entity: _types.FederationEntityMetadata
+});
+exports.TrustAnchorConfig = TrustAnchorConfig;
+//# sourceMappingURL=TrustAnchorConfig.js.map

package/lib/commonjs/trust/api/TrustAnchorConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","_interopRequireWildcard","require","_jwk","_types","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","TrustAnchorConfig","object","jwt","header","typ","literal","alg","string","kid","keys","array","JWK","federation_entity","FederationEntityMetadata","exports"],"sourceRoot":"../../../../src","sources":["trust/api/TrustAnchorConfig.ts"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AAA2D,SAAAG,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAL,wBAAAS,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAE3D;AACA;AACA;AACA;;AAEO,MAAMW,iBAAiB,GAAG3B,CAAC,CAAC4B,MAAM,CAAC;EACxCC,GAAG,EAAE7B,CAAC,CAAC4B,MAAM,CAAC;IACZE,MAAM,EAAE9B,CAAC,CAAC4B,MAAM,CAAC;MACfG,GAAG,EAAE/B,CAAC,CAACgC,OAAO,CAAC,sBAAsB,CAAC;MACtCC,GAAG,EAAEjC,CAAC,CAACkC,MAAM,CAAC,CAAC;MACfC,GAAG,EAAEnC,CAAC,CAACkC,MAAM,CAAC;IAChB,CAAC;EACH,CAAC,CAAC;EACFE,IAAI,EAAEpC,CAAC,CAACqC,KAAK,CAACC,QAAG,CAAC;EAClBC,iBAAiB,EAAEC;AACrB,CAAC,CAAC;AAACC,OAAA,CAAAd,iBAAA,GAAAA,iBAAA"}

package/lib/commonjs/trust/api/index.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=index.js.map

package/lib/commonjs/trust/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["trust/api/index.ts"],"mappings":""}