@pagopa/io-react-native-wallet 2.5.1 → 3.0.0

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["fixBase64EncodingOnKey","Credential","CredentialsCatalogue","PID","SdJwt","Mdoc","Errors","WalletInstanceAttestation","Trust","WalletInstance","Logging","AuthorizationDetail","AuthorizationDetails","createCryptoContextFor"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":"AACA,SAASA,sBAAsB,QAAQ,aAAa;AACpD;AACA;AACA,OAAO,gCAAgC;AAEvC,OAAO,KAAKC,UAAU,MAAM,cAAc;AAC1C,OAAO,KAAKC,oBAAoB,MAAM,yBAAyB;AAC/D,OAAO,KAAKC,GAAG,MAAM,OAAO;AAC5B,OAAO,KAAKC,KAAK,MAAM,UAAU;AACjC,OAAO,KAAKC,IAAI,MAAM,QAAQ;AAC9B,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,yBAAyB,MAAM,+BAA+B;AAC1E,OAAO,KAAKC,KAAK,MAAM,SAAS;AAChC,OAAO,KAAKC,cAAc,MAAM,mBAAmB;AACnD,OAAO,KAAKC,OAAO,MAAM,iBAAiB;AAC1C,SAASC,mBAAmB,EAAEC,oBAAoB,QAAQ,aAAa;AACvE,SAASC,sBAAsB,QAAQ,gBAAgB;AAGvD,SACET,KAAK,EACLC,IAAI,EACJF,GAAG,EACHF,UAAU,EACVC,oBAAoB,EACpBK,yBAAyB,EACzBE,cAAc,EACdH,MAAM,EACNE,KAAK,EACLK,sBAAsB,EACtBF,mBAAmB,EACnBC,oBAAoB,EACpBZ,sBAAsB,EACtBU,OAAO"}
+{"version":3,"names":["fixBase64EncodingOnKey","Trust","CredentialsCatalogue","CredentialIssuance","CredentialOffer","CredentialStatus","RemotePresentation","Trustmark","SdJwt","Mdoc","Errors","WalletInstanceAttestation","WalletInstance","Logging","AuthorizationDetail","AuthorizationDetails","createCryptoContextFor","IoWallet"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":"AACA,SAASA,sBAAsB,QAAQ,aAAa;AACpD;AACA;AACA,OAAO,gCAAgC;AAEvC,OAAO,KAAKC,KAAK,MAAM,SAAS;AAChC,OAAO,KAAKC,oBAAoB,MAAM,yBAAyB;AAC/D,OAAO,KAAKC,kBAAkB,MAAM,uBAAuB;AAC3D,OAAO,KAAKC,eAAe,MAAM,oBAAoB;AACrD,OAAO,KAAKC,gBAAgB,MAAM,qBAAqB;AACvD,OAAO,KAAKC,kBAAkB,MAAM,2BAA2B;AAC/D,OAAO,KAAKC,SAAS,MAAM,wBAAwB;AACnD,OAAO,KAAKC,KAAK,MAAM,UAAU;AACjC,OAAO,KAAKC,IAAI,MAAM,QAAQ;AAC9B,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,yBAAyB,MAAM,+BAA+B;AAC1E,OAAO,KAAKC,cAAc,MAAM,mBAAmB;AACnD,OAAO,KAAKC,OAAO,MAAM,iBAAiB;AAC1C,SAASC,mBAAmB,EAAEC,oBAAoB,QAAQ,aAAa;AACvE,SAASC,sBAAsB,QAAQ,gBAAgB;AAGvD,SACEf,KAAK,EACLE,kBAAkB,EAClBC,eAAe,EACfF,oBAAoB,EACpBG,gBAAgB,EAChBC,kBAAkB,EAClBE,KAAK,EACLC,IAAI,EACJE,yBAAyB,EACzBC,cAAc,EACdL,SAAS,EACTG,MAAM,EACNM,sBAAsB,EACtBF,mBAAmB,EACnBC,oBAAoB,EACpBf,sBAAsB,EACtBa,OAAO;AAOT;AACA,SAASI,QAAQ,QAAQ,YAAY"}

package/lib/module/mdoc/index.js

@@ -1,9 +1,10 @@
-import { CBOR, COSE } from "@pagopa/io-react-native-iso18013";
+import { CBOR, COSE, ISO18013_7 } from "@pagopa/io-react-native-iso18013";
 import { b64utob64 } from "jsrsasign";
 import { verifyCertificateChain } from "@pagopa/io-react-native-crypto";
-import { MissingX509CertsError, X509ValidationError } from "../trust/errors";
+import { MissingX509CertsError, X509ValidationError } from "../trust/common/errors";
 import { IoWalletError } from "../utils/errors";
 import { convertBase64DerToPem, getSigninJwkFromCert } from "../utils/crypto";
+import { removePadding } from "@pagopa/io-react-native-jwt";
 export * from "./utils";
 export const verify = async (token, x509CertRoot) => {
   var _issuerSigned$issuerA;
@@ -65,4 +66,20 @@ const verifyMdocSignature = async (coseSign1, cert) => {
   const signatureCorrect = await COSE.verify(coseSign1, jwk);
   if (!signatureCorrect) throw new Error("Invalid mDoc signature");
 };
+export const prepareVpTokenMdoc = async (requestNonce, generatedNonce, clientId, responseUri, docType, keyTag, _ref) => {
+  let [verifiableCredential, presentationFrame] = _ref;
+  /* verifiableCredential is a IssuerSigned structure */
+  const documents = [{
+    issuerSignedContent: b64utob64(verifiableCredential),
+    alias: keyTag,
+    docType
+  }];
+
+  /* clientId,responseUri,requestNonce are retrieved by Auth Request Object */
+  /* create DeviceResponse as { documents: { docType, issuerSigned, deviceSigned }, version, status } */
+  const vp_token = await ISO18013_7.generateOID4VPDeviceResponse(clientId, responseUri, requestNonce, generatedNonce, documents, presentationFrame);
+  return {
+    vp_token: removePadding(vp_token)
+  };
+};
 //# sourceMappingURL=index.js.map

package/lib/module/mdoc/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["CBOR","COSE","b64utob64","verifyCertificateChain","MissingX509CertsError","X509ValidationError","IoWalletError","convertBase64DerToPem","getSigninJwkFromCert","verify","token","x509CertRoot","_issuerSigned$issuerA","issuerSigned","decodeIssuerSigned","issuerAuth","unprotectedHeader","x5chain","Array","isArray","length","map","verifyX5chain","coseSign1","rawValue","verifyMdocSignature","options","arguments","undefined","connectTimeout","readTimeout","requireCrl","x509ValidationResult","isValid","validationStatus","errorMessage","x509ValidationStatus","x509ErrorMessage","cert","pemcert","jwk","x","y","signatureCorrect","Error"],"sourceRoot":"../../../src","sources":["mdoc/index.ts"],"mappings":"AAAA,SAASA,IAAI,EAAEC,IAAI,QAAQ,kCAAkC;AAC7D,SAASC,SAAS,QAAQ,WAAW;AACrC,SACEC,sBAAsB,QAIjB,gCAAgC;AACvC,SAASC,qBAAqB,EAAEC,mBAAmB,QAAQ,iBAAiB;AAC5E,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,qBAAqB,EAAEC,oBAAoB,QAAQ,iBAAiB;AAC7E,cAAc,SAAS;AAEvB,OAAO,MAAMC,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,YAAoB,KAC6B;EAAA,IAAAC,qBAAA;EACjD;EACA,MAAMC,YAAY,GAAG,MAAMb,IAAI,CAACc,kBAAkB,CAACJ,KAAK,CAAC;EAEzD,IAAI,CAACG,YAAY,EAAE;IACjB,MAAM,IAAIP,aAAa,CAAC,cAAc,CAAC;EACzC;EAEA,IACE,GAAAM,qBAAA,GAACC,YAAY,CAACE,UAAU,CAACC,iBAAiB,cAAAJ,qBAAA,eAAzCA,qBAAA,CAA2CK,OAAO,MAClD,CAACC,KAAK,CAACC,OAAO,CAACN,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAAC,IAChEJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACG,MAAM,KAAK,CAAC,CAAC,EACjE;IACA,MAAM,IAAIhB,qBAAqB,CAAC,2BAA2B,CAAC;EAC9D;EACA,MAAMa,OAAO,GACXJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACI,GAAG,CAACnB,SAAS,CAAC;EAClE;EACA,MAAMoB,aAAa,CAACL,OAAO,EAAEN,YAAY,CAAC;EAE1C,MAAMY,SAAS,GAAGV,YAAY,CAACE,UAAU,CAACS,QAAQ;EAElD,IAAI,CAACD,SAAS,EAAE;IACd,MAAM,IAAIjB,aAAa,CAAC,mBAAmB,CAAC;EAC9C;EACA;EACA,MAAMmB,mBAAmB,CAACF,SAAS,EAAEN,OAAO,CAAC,CAAC,CAAE,CAAC;EAEjD,OAAO;IAAEJ;EAAa,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMS,aAAa,GAAG,eAAAA,CACpBL,OAAiB,EACjBN,YAAoB,EAMjB;EAAA,IALHe,OAA+B,GAAAC,SAAA,CAAAP,MAAA,QAAAO,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG;IAChCE,cAAc,EAAE,KAAK;IACrBC,WAAW,EAAE,KAAK;IAClBC,UAAU,EAAE;EACd,CAAC;EAED,MAAMC,oBAAiD,GACrD,MAAM7B,sBAAsB,CAACc,OAAO,EAAEN,YAAY,EAAEe,OAAO,CAAC;EAE9D,IAAI,CAACM,oBAAoB,CAACC,OAAO,EAAE;IACjC,MAAM,IAAI5B,mBAAmB,CAC1B,sDAAqD2B,oBAAoB,CAACE,gBAAiB,YAAWF,oBAAoB,CAACG,YAAa,EAAC,EAC1I;MACEC,oBAAoB,EAAEJ,oBAAoB,CAACE,gBAAgB;MAC3DG,gBAAgB,EAAEL,oBAAoB,CAACG;IACzC,CACF,CAAC;EACH;AACF,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMV,mBAAmB,GAAG,MAAAA,CAAOF,SAAiB,EAAEe,IAAY,KAAK;EACrE,MAAMC,OAAO,GAAGhC,qBAAqB,CAAC+B,IAAI,CAAC;EAC3C,MAAME,GAAG,GAAGhC,oBAAoB,CAAC+B,OAAO,CAAC;EAEzCC,GAAG,CAACC,CAAC,GAAGvC,SAAS,CAACsC,GAAG,CAACC,CAAE,CAAC;EACzBD,GAAG,CAACE,CAAC,GAAGxC,SAAS,CAACsC,GAAG,CAACE,CAAE,CAAC;EAEzB,MAAMC,gBAAgB,GAAG,MAAM1C,IAAI,CAACQ,MAAM,CAACc,SAAS,EAAEiB,GAAgB,CAAC;EAEvE,IAAI,CAACG,gBAAgB,EAAE,MAAM,IAAIC,KAAK,CAAC,wBAAwB,CAAC;AAClE,CAAC"}
+{"version":3,"names":["CBOR","COSE","ISO18013_7","b64utob64","verifyCertificateChain","MissingX509CertsError","X509ValidationError","IoWalletError","convertBase64DerToPem","getSigninJwkFromCert","removePadding","verify","token","x509CertRoot","_issuerSigned$issuerA","issuerSigned","decodeIssuerSigned","issuerAuth","unprotectedHeader","x5chain","Array","isArray","length","map","verifyX5chain","coseSign1","rawValue","verifyMdocSignature","options","arguments","undefined","connectTimeout","readTimeout","requireCrl","x509ValidationResult","isValid","validationStatus","errorMessage","x509ValidationStatus","x509ErrorMessage","cert","pemcert","jwk","x","y","signatureCorrect","Error","prepareVpTokenMdoc","requestNonce","generatedNonce","clientId","responseUri","docType","keyTag","_ref","verifiableCredential","presentationFrame","documents","issuerSignedContent","alias","vp_token","generateOID4VPDeviceResponse"],"sourceRoot":"../../../src","sources":["mdoc/index.ts"],"mappings":"AAAA,SAASA,IAAI,EAAEC,IAAI,EAAEC,UAAU,QAAQ,kCAAkC;AACzE,SAASC,SAAS,QAAQ,WAAW;AACrC,SACEC,sBAAsB,QAIjB,gCAAgC;AACvC,SACEC,qBAAqB,EACrBC,mBAAmB,QACd,wBAAwB;AAC/B,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,qBAAqB,EAAEC,oBAAoB,QAAQ,iBAAiB;AAE7E,SAASC,aAAa,QAAQ,6BAA6B;AAC3D,cAAc,SAAS;AAEvB,OAAO,MAAMC,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,YAAoB,KAC6B;EAAA,IAAAC,qBAAA;EACjD;EACA,MAAMC,YAAY,GAAG,MAAMf,IAAI,CAACgB,kBAAkB,CAACJ,KAAK,CAAC;EAEzD,IAAI,CAACG,YAAY,EAAE;IACjB,MAAM,IAAIR,aAAa,CAAC,cAAc,CAAC;EACzC;EAEA,IACE,GAAAO,qBAAA,GAACC,YAAY,CAACE,UAAU,CAACC,iBAAiB,cAAAJ,qBAAA,eAAzCA,qBAAA,CAA2CK,OAAO,MAClD,CAACC,KAAK,CAACC,OAAO,CAACN,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAAC,IAChEJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACG,MAAM,KAAK,CAAC,CAAC,EACjE;IACA,MAAM,IAAIjB,qBAAqB,CAAC,2BAA2B,CAAC;EAC9D;EACA,MAAMc,OAAO,GACXJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACI,GAAG,CAACpB,SAAS,CAAC;EAClE;EACA,MAAMqB,aAAa,CAACL,OAAO,EAAEN,YAAY,CAAC;EAE1C,MAAMY,SAAS,GAAGV,YAAY,CAACE,UAAU,CAACS,QAAQ;EAElD,IAAI,CAACD,SAAS,EAAE;IACd,MAAM,IAAIlB,aAAa,CAAC,mBAAmB,CAAC;EAC9C;EACA;EACA,MAAMoB,mBAAmB,CAACF,SAAS,EAAEN,OAAO,CAAC,CAAC,CAAE,CAAC;EAEjD,OAAO;IAAEJ;EAAa,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMS,aAAa,GAAG,eAAAA,CACpBL,OAAiB,EACjBN,YAAoB,EAMjB;EAAA,IALHe,OAA+B,GAAAC,SAAA,CAAAP,MAAA,QAAAO,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG;IAChCE,cAAc,EAAE,KAAK;IACrBC,WAAW,EAAE,KAAK;IAClBC,UAAU,EAAE;EACd,CAAC;EAED,MAAMC,oBAAiD,GACrD,MAAM9B,sBAAsB,CAACe,OAAO,EAAEN,YAAY,EAAEe,OAAO,CAAC;EAE9D,IAAI,CAACM,oBAAoB,CAACC,OAAO,EAAE;IACjC,MAAM,IAAI7B,mBAAmB,CAC1B,sDAAqD4B,oBAAoB,CAACE,gBAAiB,YAAWF,oBAAoB,CAACG,YAAa,EAAC,EAC1I;MACEC,oBAAoB,EAAEJ,oBAAoB,CAACE,gBAAgB;MAC3DG,gBAAgB,EAAEL,oBAAoB,CAACG;IACzC,CACF,CAAC;EACH;AACF,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMV,mBAAmB,GAAG,MAAAA,CAAOF,SAAiB,EAAEe,IAAY,KAAK;EACrE,MAAMC,OAAO,GAAGjC,qBAAqB,CAACgC,IAAI,CAAC;EAC3C,MAAME,GAAG,GAAGjC,oBAAoB,CAACgC,OAAO,CAAC;EAEzCC,GAAG,CAACC,CAAC,GAAGxC,SAAS,CAACuC,GAAG,CAACC,CAAE,CAAC;EACzBD,GAAG,CAACE,CAAC,GAAGzC,SAAS,CAACuC,GAAG,CAACE,CAAE,CAAC;EAEzB,MAAMC,gBAAgB,GAAG,MAAM5C,IAAI,CAACU,MAAM,CAACc,SAAS,EAAEiB,GAAgB,CAAC;EAEvE,IAAI,CAACG,gBAAgB,EAAE,MAAM,IAAIC,KAAK,CAAC,wBAAwB,CAAC;AAClE,CAAC;AAED,OAAO,MAAMC,kBAAkB,GAAG,MAAAA,CAChCC,YAAoB,EACpBC,cAAsB,EACtBC,QAAgB,EAChBC,WAAmB,EACnBC,OAAe,EACfC,MAAc,EAAAC,IAAA,KAIV;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,CAAe,GAAAF,IAAA;EAIvD;EACA,MAAMG,SAAS,GAAG,CAChB;IACEC,mBAAmB,EAAEvD,SAAS,CAACoD,oBAAoB,CAAC;IACpDI,KAAK,EAAEN,MAAM;IACbD;EACF,CAAC,CACF;;EAED;EACA;EACA,MAAMQ,QAAQ,GAAG,MAAM1D,UAAU,CAAC2D,4BAA4B,CAC5DX,QAAQ,EACRC,WAAW,EACXH,YAAY,EACZC,cAAc,EACdQ,SAAS,EACTD,iBACF,CAAC;EAED,OAAO;IACLI,QAAQ,EAAElD,aAAa,CAACkD,QAAQ;EAClC,CAAC;AACH,CAAC"}

package/lib/module/mdoc/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["CBOR","Verification","MDOC_DEFAULT_NAMESPACE","getParsedCredentialClaimKey","namespace","key","getVerificationFromParsedCredential","parsedCredential","_parsedCredential$ver","verificationKey","verification","value","parse","undefined","getVerification","token","_namespace$find","issuerSigned","decodeIssuerSigned","nameSpaces","find","x","elementIdentifier","elementValue"],"sourceRoot":"../../../src","sources":["mdoc/utils.ts"],"mappings":"AAAA,SAASA,IAAI,QAAQ,kCAAkC;AACvD,SAASC,YAAY,QAAQ,iBAAiB;AAG9C,SAASC,sBAAsB,QAAQ,SAAS;;AAEhD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,2BAA2B,GAAGA,CAACC,SAAiB,EAAEC,GAAW,KACvE,GAAED,SAAU,IAAGC,GAAI,EAAC;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mCAAmC,GAC9CC,gBAAmE,IAChE;EAAA,IAAAC,qBAAA;EACH,MAAMC,eAAe,GAAGN,2BAA2B,CAChD,GAAED,sBAAuB,KAAI,EAC9B,cACF,CAAC;EACD,MAAMQ,YAAY,IAAAF,qBAAA,GAAGD,gBAAgB,CAACE,eAAe,CAAC,cAAAD,qBAAA,uBAAjCA,qBAAA,CAAmCG,KAAK;EAC7D,OAAOD,YAAY,GAAGT,YAAY,CAACW,KAAK,CAACF,YAAY,CAAC,GAAGG,SAAS;AACpE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,eAAe,GAAG,MAAOC,KAAa,IAAK;EAAA,IAAAC,eAAA;EACtD,MAAMC,YAAY,GAAG,MAAMjB,IAAI,CAACkB,kBAAkB,CAACH,KAAK,CAAC;EACzD,MAAMX,SAAS,GAAGa,YAAY,CAACE,UAAU,CAAE,GAAEjB,sBAAuB,KAAI,CAAC;EACzE,MAAMQ,YAAY,GAAGN,SAAS,aAATA,SAAS,gBAAAY,eAAA,GAATZ,SAAS,CAAEgB,IAAI,CACjCC,CAAC,IAAKA,CAAC,CAACC,iBAAiB,KAAK,cACjC,CAAC,cAAAN,eAAA,uBAFoBA,eAAA,CAElBO,YAAY;EAEf,OAAOb,YAAY,GAAGT,YAAY,CAACW,KAAK,CAACF,YAAY,CAAC,GAAGG,SAAS;AACpE,CAAC"}
+{"version":3,"names":["CBOR","Verification","MDOC_DEFAULT_NAMESPACE","getParsedCredentialClaimKey","namespace","key","getVerificationFromParsedCredential","parsedCredential","_parsedCredential$ver","verificationKey","verification","value","parse","undefined","getVerification","token","_namespace$find","issuerSigned","decodeIssuerSigned","nameSpaces","find","x","elementIdentifier","elementValue"],"sourceRoot":"../../../src","sources":["mdoc/utils.ts"],"mappings":"AAAA,SAASA,IAAI,QAAQ,kCAAkC;AACvD,SAASC,YAAY,QAAQ,iBAAiB;AAG9C,SAASC,sBAAsB,QAAQ,SAAS;;AAEhD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,2BAA2B,GAAGA,CAACC,SAAiB,EAAEC,GAAW,KACvE,GAAED,SAAU,IAAGC,GAAI,EAAC;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mCAAmC,GAC9CC,gBAEqB,IAClB;EAAA,IAAAC,qBAAA;EACH,MAAMC,eAAe,GAAGN,2BAA2B,CAChD,GAAED,sBAAuB,KAAI,EAC9B,cACF,CAAC;EACD,MAAMQ,YAAY,IAAAF,qBAAA,GAAGD,gBAAgB,CAACE,eAAe,CAAC,cAAAD,qBAAA,uBAAjCA,qBAAA,CAAmCG,KAAK;EAC7D,OAAOD,YAAY,GAAGT,YAAY,CAACW,KAAK,CAACF,YAAY,CAAC,GAAGG,SAAS;AACpE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,eAAe,GAAG,MAAOC,KAAa,IAAK;EAAA,IAAAC,eAAA;EACtD,MAAMC,YAAY,GAAG,MAAMjB,IAAI,CAACkB,kBAAkB,CAACH,KAAK,CAAC;EACzD,MAAMX,SAAS,GAAGa,YAAY,CAACE,UAAU,CAAE,GAAEjB,sBAAuB,KAAI,CAAC;EACzE,MAAMQ,YAAY,GAAGN,SAAS,aAATA,SAAS,gBAAAY,eAAA,GAATZ,SAAS,CAAEgB,IAAI,CACjCC,CAAC,IAAKA,CAAC,CAACC,iBAAiB,KAAK,cACjC,CAAC,cAAAN,eAAA,uBAFoBA,eAAA,CAElBO,YAAY;EAEf,OAAOb,YAAY,GAAGT,YAAY,CAACW,KAAK,CAACF,YAAY,CAAC,GAAGG,SAAS;AACpE,CAAC"}

package/lib/module/sd-jwt/__test__/types.test.js

@@ -1,65 +1,4 @@
-import { Disclosure, SdJwt4VC, Verification } from "../types";
-describe("SdJwt4VC", () => {
-  it("should accept a valid token", () => {
-    // example provided at https://italia.github.io/eidas-it-wallet-docs/en/pid-data-model.html
-    const token = {
-      header: {
-        typ: "dc+sd-jwt",
-        alg: "RS512",
-        kid: "dB67gL7ck3TFiIAf7N6_7SHvqk0MDYMEQcoGGlkUAAw"
-      },
-      payload: {
-        _sd: ["0q1D5Jmav6pQaEh_J_Fcv_uNNMQIgCyhQOxqlY4l3qU", "KCJ-AVNv88d-xj6sUIAOJxFnbUh3rHXDKkIH1lFqbRs", "M9lo9YxDNIXrAq2qWeiCA40zpJ_zYfFdR_4AEALcRtU", "czgjUk0nqRCswShChCjdS6A1-v47d_qTCSFIvIHhMoI", "nGnQr7clm3tfTp8yjL_uHrDSOtzR2PVb8S7GeLdAqBQ", "xNIVwlpSsaZ8CJSf0gz5x_75VRWWc6V1mlpejdCrqUs"],
-        sub: "216f8946-9ecb-4819-9309-c076f34a7e11",
-        _sd_alg: "sha-256",
-        vct: "PersonIdentificationData",
-        "vct#integrity": "13e25888ac7b8a3a6d61440da787fccc81654e61085732bcacd89b36aec32675",
-        iss: "https://pidprovider.example.com",
-        issuing_country: "IT",
-        issuing_authority: "Istituto Poligrafico e Zecca dello Stato",
-        cnf: {
-          jwk: {
-            kty: "EC",
-            crv: "P-256",
-            kid: "zEv_qGSL5r0_F67j2dwEgUJmBgbMNSEJ5K_iH1PYc7A",
-            x: "0Pj7v_afNp9ETJx11JbYgkI7yQpd0rtiYuo5feuAN2o",
-            y: "XB62Um02vHqedkOzSfJ5hdtjPz-zmV9jmWh4sKgdD9o"
-          }
-        },
-        exp: 1751107255,
-        status: {
-          status_assertion: {
-            credential_hash_alg: "sha-256"
-          }
-        }
-      }
-    };
-    const {
-      success
-    } = SdJwt4VC.safeParse(token);
-    expect(success).toBe(true);
-  });
-});
-describe("Disclosure", () => {
-  it("should accept a valid disclosure", () => {
-    // example provided at https://italia.github.io/eidas-it-wallet-docs/en/pid-data-model.html
-    const value = ["2GLC42sKQveCfGfryNRN9w", "evidence", [{
-      type: "electronic_record",
-      record: {
-        type: "eidas.it.cie",
-        source: {
-          organization_name: "Ministero dell'Interno",
-          organization_id: "m_it",
-          country_code: "IT"
-        }
-      }
-    }]];
-    const {
-      success
-    } = Disclosure.safeParse(value);
-    expect(success).toBe(true);
-  });
-});
+import { Verification } from "../types";
 describe("Verification.time", () => {
   test.each([["ISO string", "2025-09-09T10:00:00Z"], ["unix seconds", 1752122400], ["unix milliseconds", 1752122400000]])("accepts %s", (_label, time) => {
     const value = {

package/lib/module/sd-jwt/__test__/types.test.js.map

@@ -1 +1 @@
-{"version":3,"names":["Disclosure","SdJwt4VC","Verification","describe","it","token","header","typ","alg","kid","payload","_sd","sub","_sd_alg","vct","iss","issuing_country","issuing_authority","cnf","jwk","kty","crv","x","y","exp","status","status_assertion","credential_hash_alg","success","safeParse","expect","toBe","value","type","record","source","organization_name","organization_id","country_code","test","each","_label","time","trust_framework","assurance_level","evidence","attestation","reference_number","date_of_issuance","voucher","organization"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/types.test.ts"],"mappings":"AAAA,SAASA,UAAU,EAAEC,QAAQ,EAAEC,YAAY,QAAQ,UAAU;AAE7DC,QAAQ,CAAC,UAAU,EAAE,MAAM;EACzBC,EAAE,CAAC,6BAA6B,EAAE,MAAM;IACtC;IACA,MAAMC,KAAK,GAAG;MACZC,MAAM,EAAE;QACNC,GAAG,EAAE,WAAW;QAChBC,GAAG,EAAE,OAAO;QACZC,GAAG,EAAE;MACP,CAAC;MACDC,OAAO,EAAE;QACPC,GAAG,EAAE,CACH,6CAA6C,EAC7C,6CAA6C,EAC7C,6CAA6C,EAC7C,6CAA6C,EAC7C,6CAA6C,EAC7C,6CAA6C,CAC9C;QACDC,GAAG,EAAE,sCAAsC;QAC3CC,OAAO,EAAE,SAAS;QAClBC,GAAG,EAAE,0BAA0B;QAC/B,eAAe,EACb,kEAAkE;QACpEC,GAAG,EAAE,iCAAiC;QACtCC,eAAe,EAAE,IAAI;QACrBC,iBAAiB,EAAE,0CAA0C;QAC7DC,GAAG,EAAE;UACHC,GAAG,EAAE;YACHC,GAAG,EAAE,IAAI;YACTC,GAAG,EAAE,OAAO;YACZZ,GAAG,EAAE,6CAA6C;YAClDa,CAAC,EAAE,6CAA6C;YAChDC,CAAC,EAAE;UACL;QACF,CAAC;QACDC,GAAG,EAAE,UAAU;QACfC,MAAM,EAAE;UACNC,gBAAgB,EAAE;YAChBC,mBAAmB,EAAE;UACvB;QACF;MACF;IACF,CAAC;IAED,MAAM;MAAEC;IAAQ,CAAC,GAAG3B,QAAQ,CAAC4B,SAAS,CAACxB,KAAK,CAAC;IAE7CyB,MAAM,CAACF,OAAO,CAAC,CAACG,IAAI,CAAC,IAAI,CAAC;EAC5B,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF5B,QAAQ,CAAC,YAAY,EAAE,MAAM;EAC3BC,EAAE,CAAC,kCAAkC,EAAE,MAAM;IAC3C;IACA,MAAM4B,KAAK,GAAG,CACZ,wBAAwB,EACxB,UAAU,EACV,CACE;MACEC,IAAI,EAAE,mBAAmB;MACzBC,MAAM,EAAE;QACND,IAAI,EAAE,cAAc;QACpBE,MAAM,EAAE;UACNC,iBAAiB,EAAE,wBAAwB;UAC3CC,eAAe,EAAE,MAAM;UACvBC,YAAY,EAAE;QAChB;MACF;IACF,CAAC,CACF,CACF;IAED,MAAM;MAAEV;IAAQ,CAAC,GAAG5B,UAAU,CAAC6B,SAAS,CAACG,KAAK,CAAC;IAC/CF,MAAM,CAACF,OAAO,CAAC,CAACG,IAAI,CAAC,IAAI,CAAC;EAC5B,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF5B,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAClCoC,IAAI,CAACC,IAAI,CAAC,CACR,CAAC,YAAY,EAAE,sBAAsB,CAAC,EACtC,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CACrC,CAAC,CAAC,YAAY,EAAE,CAACC,MAAM,EAAEC,IAAI,KAAK;IACjC,MAAMV,KAAK,GAAG;MACZW,eAAe,EAAE,OAAO;MACxBC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEZ,IAAI,EAAE,OAAO;QACbS,IAAI;QACJI,WAAW,EAAE;UACXb,IAAI,EAAE,qBAAqB;UAC3Bc,gBAAgB,EAAE,KAAK;UACvBC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC;MACF,CAAC;IAEL,CAAC;IAEDpB,MAAM,CAAC5B,YAAY,CAAC2B,SAAS,CAACG,KAAK,CAAC,CAACJ,OAAO,CAAC,CAACG,IAAI,CAAC,IAAI,CAAC;EAC1D,CAAC,CAAC;EAEF3B,EAAE,CAAC,sBAAsB,EAAE,MAAM;IAC/B,MAAM4B,KAAK,GAAG;MACZW,eAAe,EAAE,OAAO;MACxBC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEZ,IAAI,EAAE,OAAO;QACbS,IAAI,EAAE,IAAI;QACVI,WAAW,EAAE;UACXb,IAAI,EAAE,qBAAqB;UAC3Bc,gBAAgB,EAAE,KAAK;UACvBC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC;MACF,CAAC;IAEL,CAAC;IAEDpB,MAAM,CAAC5B,YAAY,CAAC2B,SAAS,CAACG,KAAK,CAAC,CAACJ,OAAO,CAAC,CAACG,IAAI,CAAC,KAAK,CAAC;EAC3D,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"names":["Verification","describe","test","each","_label","time","value","trust_framework","assurance_level","evidence","type","attestation","reference_number","date_of_issuance","voucher","organization","expect","safeParse","success","toBe","it"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/types.test.ts"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAU;AAEvCC,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAClCC,IAAI,CAACC,IAAI,CAAC,CACR,CAAC,YAAY,EAAE,sBAAsB,CAAC,EACtC,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CACrC,CAAC,CAAC,YAAY,EAAE,CAACC,MAAM,EAAEC,IAAI,KAAK;IACjC,MAAMC,KAAK,GAAG;MACZC,eAAe,EAAE,OAAO;MACxBC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEC,IAAI,EAAE,OAAO;QACbL,IAAI;QACJM,WAAW,EAAE;UACXD,IAAI,EAAE,qBAAqB;UAC3BE,gBAAgB,EAAE,KAAK;UACvBC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC;MACF,CAAC;IAEL,CAAC;IAEDC,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;EAC1D,CAAC,CAAC;EAEFC,EAAE,CAAC,sBAAsB,EAAE,MAAM;IAC/B,MAAMd,KAAK,GAAG;MACZC,eAAe,EAAE,OAAO;MACxBC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEC,IAAI,EAAE,OAAO;QACbL,IAAI,EAAE,IAAI;QACVM,WAAW,EAAE;UACXD,IAAI,EAAE,qBAAqB;UAC3BE,gBAAgB,EAAE,KAAK;UACvBC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC;MACF,CAAC;IAEL,CAAC;IAEDC,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,KAAK,CAAC;EAC3D,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/lib/module/sd-jwt/__test__/utils.test.js

@@ -1,13 +1,8 @@
+import { legacyPid, pid } from "../__mocks__/sd-jwt";
 import { getVerification } from "..";
-import { pid } from "../__mocks__/sd-jwt";
-const {
-  signed,
-  token
-} = pid;
 describe("SD-JWT getVerification", () => {
   it("extracts the verification claims correctly", () => {
-    const disclosure = "WyJxTGxVdkNKY3hwX3d4MVY5dHFPbFFRIiwidmVyaWZpY2F0aW9uIix7ImV2aWRlbmNlIjpbeyJhdHRlc3RhdGlvbiI6eyJkYXRlX29mX2lzc3VhbmNlIjoiMjAyNS0wNi0yMyIsInZvdWNoZXIiOnsib3JnYW5pemF0aW9uIjoiTWluaXN0ZXJvIGRlbGwnSW50ZXJubyJ9LCJ0eXBlIjoiZGlnaXRhbF9hdHRlc3RhdGlvbiIsInJlZmVyZW5jZV9udW1iZXIiOiIxMjM0NTY3ODkifSwidGltZSI6IjIwMjUtMDYtMjNUMTM6MTQ6MjVaIiwidHlwZSI6InZvdWNoIn1dLCJ0cnVzdF9mcmFtZXdvcmsiOiJpdF9jaWUiLCJhc3N1cmFuY2VfbGV2ZWwiOiJoaWdoIn1d";
-    expect(getVerification(`${signed}~${disclosure}`)).toEqual({
+    expect(getVerification(pid)).toEqual({
       evidence: [{
         attestation: {
           date_of_issuance: "2025-06-23",
@@ -25,11 +20,7 @@ describe("SD-JWT getVerification", () => {
     });
   });
   it("returns undefined when the verification claim is not found", () => {
-    expect(getVerification(token)).toBeUndefined();
-  });
-  it("throws when the verification claim is invalid", () => {
-    const disclosure = "WyJxTGxVdkNKY3hwX3d4MVY5dHFPbFFRIiwidmVyaWZpY2F0aW9uIix7InRydXN0X2ZyYW1ld29yayI6ICJpdF9jaWUiLCJhc3N1cmFuY2VfbGV2ZWwiOiAic3Vic3RhbnRpYWwifV0";
-    expect(() => getVerification(`${signed}~${disclosure}`)).toThrow();
+    expect(getVerification(legacyPid)).toBeUndefined();
   });
 });
 //# sourceMappingURL=utils.test.js.map

package/lib/module/sd-jwt/__test__/utils.test.js.map

@@ -1 +1 @@
-{"version":3,"names":["getVerification","pid","signed","token","describe","it","disclosure","expect","toEqual","evidence","attestation","date_of_issuance","voucher","organization","type","reference_number","time","trust_framework","assurance_level","toBeUndefined","toThrow"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/utils.test.ts"],"mappings":"AAAA,SAASA,eAAe,QAAQ,IAAI;AACpC,SAASC,GAAG,QAAQ,qBAAqB;AAEzC,MAAM;EAAEC,MAAM;EAAEC;AAAM,CAAC,GAAGF,GAAG;AAE7BG,QAAQ,CAAC,wBAAwB,EAAE,MAAM;EACvCC,EAAE,CAAC,4CAA4C,EAAE,MAAM;IACrD,MAAMC,UAAU,GACd,saAAsa;IACxaC,MAAM,CAACP,eAAe,CAAE,GAAEE,MAAO,IAAGI,UAAW,EAAC,CAAC,CAAC,CAACE,OAAO,CAAC;MACzDC,QAAQ,EAAE,CACR;QACEC,WAAW,EAAE;UACXC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAyB,CAAC;UACnDC,IAAI,EAAE,qBAAqB;UAC3BC,gBAAgB,EAAE;QACpB,CAAC;QACDC,IAAI,EAAE,sBAAsB;QAC5BF,IAAI,EAAE;MACR,CAAC,CACF;MACDG,eAAe,EAAE,QAAQ;MACzBC,eAAe,EAAE;IACnB,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFb,EAAE,CAAC,4DAA4D,EAAE,MAAM;IACrEE,MAAM,CAACP,eAAe,CAACG,KAAK,CAAC,CAAC,CAACgB,aAAa,CAAC,CAAC;EAChD,CAAC,CAAC;EAEFd,EAAE,CAAC,+CAA+C,EAAE,MAAM;IACxD,MAAMC,UAAU,GACd,6IAA6I;IAC/IC,MAAM,CAAC,MAAMP,eAAe,CAAE,GAAEE,MAAO,IAAGI,UAAW,EAAC,CAAC,CAAC,CAACc,OAAO,CAAC,CAAC;EACpE,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"names":["legacyPid","pid","getVerification","describe","it","expect","toEqual","evidence","attestation","date_of_issuance","voucher","organization","type","reference_number","time","trust_framework","assurance_level","toBeUndefined"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/utils.test.ts"],"mappings":"AAAA,SAASA,SAAS,EAAEC,GAAG,QAAQ,qBAAqB;AACpD,SAASC,eAAe,QAAQ,IAAI;AAEpCC,QAAQ,CAAC,wBAAwB,EAAE,MAAM;EACvCC,EAAE,CAAC,4CAA4C,EAAE,MAAM;IACrDC,MAAM,CAACH,eAAe,CAACD,GAAG,CAAC,CAAC,CAACK,OAAO,CAAC;MACnCC,QAAQ,EAAE,CACR;QACEC,WAAW,EAAE;UACXC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAyB,CAAC;UACnDC,IAAI,EAAE,qBAAqB;UAC3BC,gBAAgB,EAAE;QACpB,CAAC;QACDC,IAAI,EAAE,sBAAsB;QAC5BF,IAAI,EAAE;MACR,CAAC,CACF;MACDG,eAAe,EAAE,QAAQ;MACzBC,eAAe,EAAE;IACnB,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFZ,EAAE,CAAC,4DAA4D,EAAE,MAAM;IACrEC,MAAM,CAACH,eAAe,CAACF,SAAS,CAAC,CAAC,CAACiB,aAAa,CAAC,CAAC;EACpD,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/lib/module/sd-jwt/index.js

@@ -1,159 +1,35 @@
-import { decode as decodeJwt, sha256ToBase64, SignJWT, verify as verifyJwt } from "@pagopa/io-react-native-jwt";
-import { Disclosure, SdJwt4VC } from "./types";
-import { verifyDisclosure } from "./verifier";
-import * as Errors from "./errors";
-import { Base64 } from "js-base64";
+import { sha256ToBase64, SignJWT } from "@pagopa/io-react-native-jwt";
+import { decodeSdJwtSync } from "@sd-jwt/decode";
+import { present } from "@sd-jwt/present";
+import { digest } from "@sd-jwt/crypto-nodejs";
+import { SdJwt4VCBase } from "./types";
 export * from "./utils";
-const decodeDisclosure = encoded => {
-  const utf8String = Base64.decode(encoded); // Decode Base64 into UTF-8 string
-  const decoded = Disclosure.parse(JSON.parse(utf8String));
-  return {
-    decoded,
-    encoded
-  };
-};
 
 /**
  * Decode a given SD-JWT with Disclosures to get the parsed SD-JWT object they define.
  * It ensures provided data is in a valid shape.
  *
  * It DOES NOT verify token signature nor check disclosures are correctly referenced by the SD-JWT.
- * Use {@link verify} instead
  *
- * @function
  * @param token The encoded token that represents a valid sd-jwt for verifiable credentials
- * @param customSchema (optional) Schema to use to parse the SD-JWT. Default: SdJwt4VC
- *
  * @returns The parsed SD-JWT token and the parsed disclosures
- *
  */
-export const decode = (token, customSchema) => {
-  // token are expected in the form "sd-jwt~disclosure0~disclosure1~...~disclosureN~"
-  if (token.slice(-1) === "~") {
-    token = token.slice(0, -1);
-  }
-  const [rawSdJwt = "", ...rawDisclosures] = token.split("~");
-
-  // get the sd-jwt as object
-  // validate it's a valid SD-JWT for Verifiable Credentials
-  const decodedJwt = decodeJwt(rawSdJwt);
-
-  // use a custom parsed if provided, otherwise use base SdJwt4VC
-  const parser = customSchema || SdJwt4VC;
-  const sdJwt = parser.parse({
-    header: decodedJwt.protectedHeader,
-    payload: decodedJwt.payload
+export const decode = token => {
+  const decoded = decodeSdJwtSync(token, digest);
+  const sdJwt = SdJwt4VCBase.parse({
+    header: decoded.jwt.header,
+    payload: decoded.jwt.payload
   });
-
-  // get disclosures as list of triples
-  // validate each triple
-  // throw a validation error if at least one fails to parse
-  const disclosures = rawDisclosures.map(decodeDisclosure);
+  const disclosures = decoded.disclosures.map(disclosure => ({
+    encoded: disclosure._digest,
+    decoded: [disclosure.salt, disclosure.key, disclosure.value]
+  }));
   return {
     sdJwt,
     disclosures
   };
 };
 
-/**
- * Select disclosures from a given SD-JWT with Disclosures.
- * Claims relate with disclosures by their name.
- *
- * @function
- * @param token The encoded token that represents a valid sd-jwt for verifiable credentials
- * @param claims The list of claims to be disclosed
- *
- * @throws {ClaimsNotFoundBetweenDisclosures} When one or more claims does not relate to any discloure.
- * @throws {ClaimsNotFoundInToken} When one or more claims are not contained in the SD-JWT token.
- * @returns The encoded token with only the requested disclosures, along with the path each claim can be found on the SD-JWT token
- *
- */
-export const disclose = async (token, claims) => {
-  const [rawSdJwt, ...rawDisclosures] = token.split("~");
-  const {
-    sdJwt,
-    disclosures
-  } = decode(token, SdJwt4VC);
-
-  // for each claim, return the path on which they are located in the SD-JWT token
-  const paths = await Promise.all(claims.map(async claim => {
-    const disclosure = disclosures.find(_ref => {
-      let {
-        decoded: [, name]
-      } = _ref;
-      return name === claim;
-    });
-
-    // check every claim represents a known disclosure
-    if (!disclosure) {
-      throw new Errors.ClaimsNotFoundBetweenDisclosures(claim);
-    }
-    const hash = await sha256ToBase64(disclosure.encoded);
-
-    // _sd is defined in verified_claims.claims and verified_claims.verification
-    // we must look into both
-    if (sdJwt.payload._sd.includes(hash)) {
-      const index = sdJwt.payload._sd.indexOf(hash);
-      return {
-        claim,
-        path: `verified_claims.claims._sd[${index}]`
-      };
-    }
-    throw new Errors.ClaimsNotFoundInToken(claim);
-  }));
-
-  // The disclosures in the new SD-JWT aligned with version 1.0
-  // include a trailing "~" character.
-  // To avoid parsing errors, it is necessary to filter the array
-  // to remove any empty strings
-  const filteredDisclosures = rawDisclosures.filter(Boolean).filter(d => {
-    const {
-      decoded: [, name]
-    } = decodeDisclosure(d);
-    return claims.includes(name);
-  });
-
-  // compose the final disclosed token
-  const disclosedToken = [rawSdJwt, ...filteredDisclosures].join("~");
-  return {
-    token: disclosedToken,
-    paths
-  };
-};
-
-/**
- * Verify a given SD-JWT with Disclosures
- * Same as {@link decode} plus:
- *   - token signature verification
- *   - ensure disclosures are well-defined inside the SD-JWT
- *
- * @async @function
- *
- *
- * @param token The encoded token that represents a valid sd-jwt for verifiable credentials
- * @param publicKey The single public key or an array of public keys to validate the signature.
- * @param customSchema Schema to use to parse the SD-JWT
- *
- * @returns The parsed SD-JWT token and the parsed disclosures
- *
- */
-export const verify = async (token, publicKey, customSchema) => {
-  // get decoded data
-  const [rawSdJwt = ""] = token.split("~");
-  const decoded = decode(token, customSchema);
-
-  //Check signature
-  await verifyJwt(rawSdJwt, publicKey);
-
-  //Check disclosures in sd-jwt
-  const claims = [...decoded.sdJwt.payload._sd];
-  await Promise.all(decoded.disclosures.map(async disclosure => await verifyDisclosure(disclosure, claims)));
-  return {
-    sdJwt: decoded.sdJwt,
-    disclosures: decoded.disclosures.map(d => d.decoded)
-  };
-};
-
 /**
  * Prepares a Verified Presentation (VP) token to be sent as part of an
  * authorization response in an OpenID 4 Verifiable Presentations flow.
@@ -169,15 +45,13 @@ export const verify = async (token, publicKey, customSchema) => {
  *  2. A KB-JWT is then signed, including sd_hash and `nonce`.
  *  3. The `vp_token` is composed of the disclosed VP and the KB-JWT.
  */
-export const prepareVpToken = async (nonce, client_id, _ref2) => {
-  let [verifiableCredential, requestedClaims, cryptoContext] = _ref2;
+export const prepareVpToken = async (nonce, client_id, _ref) => {
+  let [verifiableCredential, presentationFrame, cryptoContext] = _ref;
   // Produce a VP token with only requested claims from the verifiable credential
-  const {
-    token: vp
-  } = await disclose(verifiableCredential, requestedClaims);
+  const vp = await present(verifiableCredential, presentationFrame, digest);
 
   // <Issuer-signed JWT>~<Disclosure 1>~<Disclosure N>~
-  const sd_hash = await sha256ToBase64(`${vp}~`);
+  const sd_hash = await sha256ToBase64(vp);
   const kbJwt = await new SignJWT(cryptoContext).setProtectedHeader({
     typ: "kb+jwt",
     alg: "ES256"
@@ -185,12 +59,10 @@ export const prepareVpToken = async (nonce, client_id, _ref2) => {
     sd_hash,
     nonce: nonce
   }).setAudience(client_id).setIssuedAt().sign();
-
   // <Issuer-signed JWT>~<Disclosure 1>~...~<Disclosure N>~<KB-JWT>
-  const vp_token = [vp, kbJwt].join("~");
+  const vp_token = [vp, kbJwt].join("");
   return {
     vp_token
   };
 };
-export { SdJwt4VC, Errors };
 //# sourceMappingURL=index.js.map

package/lib/module/sd-jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["decode","decodeJwt","sha256ToBase64","SignJWT","verify","verifyJwt","Disclosure","SdJwt4VC","verifyDisclosure","Errors","Base64","decodeDisclosure","encoded","utf8String","decoded","parse","JSON","token","customSchema","slice","rawSdJwt","rawDisclosures","split","decodedJwt","parser","sdJwt","header","protectedHeader","payload","disclosures","map","disclose","claims","paths","Promise","all","claim","disclosure","find","_ref","name","ClaimsNotFoundBetweenDisclosures","hash","_sd","includes","index","indexOf","path","ClaimsNotFoundInToken","filteredDisclosures","filter","Boolean","d","disclosedToken","join","publicKey","prepareVpToken","nonce","client_id","_ref2","verifiableCredential","requestedClaims","cryptoContext","vp","sd_hash","kbJwt","setProtectedHeader","typ","alg","setPayload","setAudience","setIssuedAt","sign","vp_token"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":"AAEA,SACEA,MAAM,IAAIC,SAAS,EACnBC,cAAc,EACdC,OAAO,EACPC,MAAM,IAAIC,SAAS,QACd,6BAA6B;AACpC,SAASC,UAAU,EAA8BC,QAAQ,QAAQ,SAAS;AAC1E,SAASC,gBAAgB,QAAQ,YAAY;AAE7C,OAAO,KAAKC,MAAM,MAAM,UAAU;AAClC,SAASC,MAAM,QAAQ,WAAW;AAGlC,cAAc,SAAS;AAEvB,MAAMC,gBAAgB,GAAIC,OAAe,IAA4B;EACnE,MAAMC,UAAU,GAAGH,MAAM,CAACV,MAAM,CAACY,OAAO,CAAC,CAAC,CAAC;EAC3C,MAAME,OAAO,GAAGR,UAAU,CAACS,KAAK,CAACC,IAAI,CAACD,KAAK,CAACF,UAAU,CAAC,CAAC;EACxD,OAAO;IAAEC,OAAO;IAAEF;EAAQ,CAAC;AAC7B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMZ,MAAM,GAAGA,CACpBiB,KAAa,EACbC,YAAgB,KAIb;EACH;EACA,IAAID,KAAK,CAACE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;IAC3BF,KAAK,GAAGA,KAAK,CAACE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;EAC5B;EACA,MAAM,CAACC,QAAQ,GAAG,EAAE,EAAE,GAAGC,cAAc,CAAC,GAAGJ,KAAK,CAACK,KAAK,CAAC,GAAG,CAAC;;EAE3D;EACA;EACA,MAAMC,UAAU,GAAGtB,SAAS,CAACmB,QAAQ,CAAC;;EAEtC;EACA,MAAMI,MAAM,GAAGN,YAAY,IAAIX,QAAQ;EAEvC,MAAMkB,KAAK,GAAGD,MAAM,CAACT,KAAK,CAAC;IACzBW,MAAM,EAAEH,UAAU,CAACI,eAAe;IAClCC,OAAO,EAAEL,UAAU,CAACK;EACtB,CAAC,CAAC;;EAEF;EACA;EACA;EACA,MAAMC,WAAW,GAAGR,cAAc,CAACS,GAAG,CAACnB,gBAAgB,CAAC;EAExD,OAAO;IAAEc,KAAK;IAAEI;EAAY,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAME,QAAQ,GAAG,MAAAA,CACtBd,KAAa,EACbe,MAAgB,KACyD;EACzE,MAAM,CAACZ,QAAQ,EAAE,GAAGC,cAAc,CAAC,GAAGJ,KAAK,CAACK,KAAK,CAAC,GAAG,CAAC;EACtD,MAAM;IAAEG,KAAK;IAAEI;EAAY,CAAC,GAAG7B,MAAM,CAACiB,KAAK,EAAEV,QAAQ,CAAC;;EAEtD;EACA,MAAM0B,KAAK,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC7BH,MAAM,CAACF,GAAG,CAAC,MAAOM,KAAK,IAAK;IAC1B,MAAMC,UAAU,GAAGR,WAAW,CAACS,IAAI,CACjCC,IAAA;MAAA,IAAC;QAAEzB,OAAO,EAAE,GAAG0B,IAAI;MAAE,CAAC,GAAAD,IAAA;MAAA,OAAKC,IAAI,KAAKJ,KAAK;IAAA,CAC3C,CAAC;;IAED;IACA,IAAI,CAACC,UAAU,EAAE;MACf,MAAM,IAAI5B,MAAM,CAACgC,gCAAgC,CAACL,KAAK,CAAC;IAC1D;IAEA,MAAMM,IAAI,GAAG,MAAMxC,cAAc,CAACmC,UAAU,CAACzB,OAAO,CAAC;;IAErD;IACA;IACA,IAAIa,KAAK,CAACG,OAAO,CAACe,GAAG,CAACC,QAAQ,CAACF,IAAI,CAAC,EAAE;MACpC,MAAMG,KAAK,GAAGpB,KAAK,CAACG,OAAO,CAACe,GAAG,CAACG,OAAO,CAACJ,IAAI,CAAC;MAC7C,OAAO;QAAEN,KAAK;QAAEW,IAAI,EAAG,8BAA6BF,KAAM;MAAG,CAAC;IAChE;IAEA,MAAM,IAAIpC,MAAM,CAACuC,qBAAqB,CAACZ,KAAK,CAAC;EAC/C,CAAC,CACH,CAAC;;EAED;EACA;EACA;EACA;EACA,MAAMa,mBAAmB,GAAG5B,cAAc,CAAC6B,MAAM,CAACC,OAAO,CAAC,CAACD,MAAM,CAAEE,CAAC,IAAK;IACvE,MAAM;MACJtC,OAAO,EAAE,GAAG0B,IAAI;IAClB,CAAC,GAAG7B,gBAAgB,CAACyC,CAAC,CAAC;IACvB,OAAOpB,MAAM,CAACY,QAAQ,CAACJ,IAAI,CAAC;EAC9B,CAAC,CAAC;;EAEF;EACA,MAAMa,cAAc,GAAG,CAACjC,QAAQ,EAAE,GAAG6B,mBAAmB,CAAC,CAACK,IAAI,CAAC,GAAG,CAAC;EACnE,OAAO;IAAErC,KAAK,EAAEoC,cAAc;IAAEpB;EAAM,CAAC;AACzC,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAM7B,MAAM,GAAG,MAAAA,CACpBa,KAAa,EACbsC,SAAsB,EACtBrC,YAAgB,KAC8C;EAC9D;EACA,MAAM,CAACE,QAAQ,GAAG,EAAE,CAAC,GAAGH,KAAK,CAACK,KAAK,CAAC,GAAG,CAAC;EACxC,MAAMR,OAAO,GAAGd,MAAM,CAACiB,KAAK,EAAEC,YAAY,CAAC;;EAE3C;EACA,MAAMb,SAAS,CAACe,QAAQ,EAAEmC,SAAS,CAAC;;EAEpC;EACA,MAAMvB,MAAM,GAAG,CAAC,GAAGlB,OAAO,CAACW,KAAK,CAACG,OAAO,CAACe,GAAG,CAAC;EAE7C,MAAMT,OAAO,CAACC,GAAG,CACfrB,OAAO,CAACe,WAAW,CAACC,GAAG,CACrB,MAAOO,UAAU,IAAK,MAAM7B,gBAAgB,CAAC6B,UAAU,EAAEL,MAAM,CACjE,CACF,CAAC;EAED,OAAO;IACLP,KAAK,EAAEX,OAAO,CAACW,KAAK;IACpBI,WAAW,EAAEf,OAAO,CAACe,WAAW,CAACC,GAAG,CAAEsB,CAAC,IAAKA,CAAC,CAACtC,OAAO;EACvD,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAM0C,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,KAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,eAAe,EAAEC,aAAa,CAAe,GAAAH,KAAA;EAIpE;EACA,MAAM;IAAE1C,KAAK,EAAE8C;EAAG,CAAC,GAAG,MAAMhC,QAAQ,CAAC6B,oBAAoB,EAAEC,eAAe,CAAC;;EAE3E;EACA,MAAMG,OAAO,GAAG,MAAM9D,cAAc,CAAE,GAAE6D,EAAG,GAAE,CAAC;EAE9C,MAAME,KAAK,GAAG,MAAM,IAAI9D,OAAO,CAAC2D,aAAa,CAAC,CAC3CI,kBAAkB,CAAC;IAClBC,GAAG,EAAE,QAAQ;IACbC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVL,OAAO;IACPP,KAAK,EAAEA;EACT,CAAC,CAAC,CACDa,WAAW,CAACZ,SAAS,CAAC,CACtBa,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;;EAET;EACA,MAAMC,QAAQ,GAAG,CAACV,EAAE,EAAEE,KAAK,CAAC,CAACX,IAAI,CAAC,GAAG,CAAC;EAEtC,OAAO;IAAEmB;EAAS,CAAC;AACrB,CAAC;AAED,SAASlE,QAAQ,EAAEE,MAAM"}
+{"version":3,"names":["sha256ToBase64","SignJWT","decodeSdJwtSync","present","digest","SdJwt4VCBase","decode","token","decoded","sdJwt","parse","header","jwt","payload","disclosures","map","disclosure","encoded","_digest","salt","key","value","prepareVpToken","nonce","client_id","_ref","verifiableCredential","presentationFrame","cryptoContext","vp","sd_hash","kbJwt","setProtectedHeader","typ","alg","setPayload","setAudience","setIssuedAt","sign","vp_token","join"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":"AAAA,SAASA,cAAc,EAAEC,OAAO,QAAQ,6BAA6B;AACrE,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,OAAO,QAAQ,iBAAiB;AACzC,SAASC,MAAM,QAAQ,uBAAuB;AAE9C,SAASC,YAAY,QAAQ,SAAS;AAEtC,cAAc,SAAS;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,MAAM,GAAIC,KAAa,IAAK;EACvC,MAAMC,OAAO,GAAGN,eAAe,CAACK,KAAK,EAAEH,MAAM,CAAC;EAE9C,MAAMK,KAAK,GAAGJ,YAAY,CAACK,KAAK,CAAC;IAC/BC,MAAM,EAAEH,OAAO,CAACI,GAAG,CAACD,MAAM;IAC1BE,OAAO,EAAEL,OAAO,CAACI,GAAG,CAACC;EACvB,CAAC,CAAC;EACF,MAAMC,WAAW,GAAGN,OAAO,CAACM,WAAW,CAACC,GAAG,CAAEC,UAAU,KAAM;IAC3DC,OAAO,EAAED,UAAU,CAACE,OAAO;IAC3BV,OAAO,EAAE,CAACQ,UAAU,CAACG,IAAI,EAAEH,UAAU,CAACI,GAAG,EAAEJ,UAAU,CAACK,KAAK;EAC7D,CAAC,CAAC,CAAC;EACH,OAAO;IAAEZ,KAAK;IAAEK;EAAY,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMQ,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,IAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,EAAEC,aAAa,CAAe,GAAAH,IAAA;EAItE;EACA,MAAMI,EAAE,GAAG,MAAM1B,OAAO,CAACuB,oBAAoB,EAAEC,iBAAiB,EAAEvB,MAAM,CAAC;;EAEzE;EACA,MAAM0B,OAAO,GAAG,MAAM9B,cAAc,CAAC6B,EAAE,CAAC;EAExC,MAAME,KAAK,GAAG,MAAM,IAAI9B,OAAO,CAAC2B,aAAa,CAAC,CAC3CI,kBAAkB,CAAC;IAClBC,GAAG,EAAE,QAAQ;IACbC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVL,OAAO;IACPP,KAAK,EAAEA;EACT,CAAC,CAAC,CACDa,WAAW,CAACZ,SAAS,CAAC,CACtBa,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;EACT;EACA,MAAMC,QAAQ,GAAG,CAACV,EAAE,EAAEE,KAAK,CAAC,CAACS,IAAI,CAAC,EAAE,CAAC;EAErC,OAAO;IAAED;EAAS,CAAC;AACrB,CAAC"}

package/lib/module/sd-jwt/types.js

@@ -1,18 +1,6 @@
-import { JWK } from "../utils/jwk";
 import { z } from "zod";
-export const UnixTime = z.number().min(0).max(2147483647000);
-export const ObfuscatedDisclosures = z.object({
-  _sd: z.array(z.string())
-});
-
-/**
- * A triple of values in the form of {salt, claim name, claim value} that represent a parsed disclosure.
- *
- * @see https://datatracker.ietf.org/doc/html/draft-ietf-oauth-selective-disclosure-jwt-04
- * @see https://vcstuff.github.io/draft-terbu-sd-jwt-vc/draft-terbu-oauth-sd-jwt-vc.html
- */
-
-export const Disclosure = z.tuple([/* salt */z.string(), /* claim name */z.string(), /* claim value */z.unknown()]);
+import { UnixTime } from "../utils/zod";
+import { JWK } from "../utils/jwk";
 
 /**
  * For backward compatibility reasons it is still necessary to support the legacy SD-JWT
@@ -20,26 +8,20 @@ export const Disclosure = z.tuple([/* salt */z.string(), /* claim name */z.strin
  */
 
 export const LEGACY_SD_JWT = "vc+sd-jwt";
-
-/**
- * Encoding depends on the serialization algorithm used when generating the disclosure tokens.
- * The SD-JWT reference itself take no decision about how to handle whitespaces in serialized objects.
- * For such reason, we may find conveninent to have encoded and decode values stored explicitly in the same structure.
- * Please note that `encoded` can always decode into `decode`, but `decode` may or may not be encoded with the same value of `encoded`
- *
- * @see https://www.ietf.org/archive/id/draft-ietf-oauth-selective-disclosure-jwt-05.html#name-disclosures-for-object-prop
- */
-
 const StatusAssertion = z.object({
   credential_hash_alg: z.literal("sha-256")
 });
+const StatusList = z.object({
+  idx: z.string(),
+  uri: z.string()
+});
 
 /**
- * Type for a Verifiable Credential in SD-JWT format.
- * It supports both the older and the new data model for backward compatibility.
+ * Type for a Verifiable Credential base SD-JWT.
+ * It only contains common claims across versions.
  */
 
-export const SdJwt4VC = z.object({
+export const SdJwt4VCBase = z.object({
   header: z.object({
     typ: z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
     alg: z.string(),
@@ -48,29 +30,25 @@ export const SdJwt4VC = z.object({
     x5c: z.array(z.string()).optional(),
     vctm: z.array(z.string()).optional()
   }),
-  payload: z.intersection(z.object({
+  payload: z.object({
+    _sd: z.array(z.string()),
+    _sd_alg: z.literal("sha-256"),
     iss: z.string(),
     sub: z.string(),
     iat: UnixTime.optional(),
     exp: UnixTime,
-    _sd_alg: z.literal("sha-256"),
-    status: z.union([
-    // Credentials v1.0
-    z.object({
-      status_assertion: StatusAssertion
-    }),
-    // Legacy credentials v0.7.1
-    z.object({
-      status_attestation: StatusAssertion
-    })]).optional(),
     cnf: z.object({
       jwk: JWK
     }),
+    status: z.union([z.object({
+      status_list: StatusList
+    }), z.object({
+      /** @deprecated Use `status.status_list` */
+      status_assertion: StatusAssertion
+    })]),
     vct: z.string(),
-    "vct#integrity": z.string().optional(),
-    issuing_authority: z.string().optional(),
-    issuing_country: z.string().optional()
-  }), ObfuscatedDisclosures)
+    "vct#integrity": z.string().optional()
+  })
 });
 
 /**
@@ -99,7 +77,7 @@ export const Verification = z.object({
 /**
  * Metadata for a digital credential. This information is retrieved from the URL defined in the `vct` claim.
  *
- * @see https://italia.github.io/eid-wallet-it-docs/v0.9.1/en/pid-eaa-data-model.html#digital-credential-metadata-type
+ * @see https://italia.github.io/eid-wallet-it-docs/releases/1.0.1/en/credential-data-model.html#digital-credential-metadata-type
  */
 
 export const TypeMetadata = z.object({
@@ -115,6 +93,5 @@ export const TypeMetadata = z.object({
       logo_uri: z.string().url()
     })
   })
-  // TODO: add more fields
 });
 //# sourceMappingURL=types.js.map

package/lib/module/sd-jwt/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["JWK","z","UnixTime","number","min","max","ObfuscatedDisclosures","object","_sd","array","string","Disclosure","tuple","unknown","LEGACY_SD_JWT","StatusAssertion","credential_hash_alg","literal","SdJwt4VC","header","typ","enum","alg","kid","trust_chain","optional","x5c","vctm","payload","intersection","iss","sub","iat","exp","_sd_alg","status","union","status_assertion","status_attestation","cnf","jwk","vct","issuing_authority","issuing_country","Verification","trust_framework","assurance_level","evidence","type","time","attestation","reference_number","date_of_issuance","voucher","organization","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":"AAAA,SAASA,GAAG,QAAQ,cAAc;AAClC,SAASC,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,QAAQ,GAAGD,CAAC,CAACE,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACC,GAAG,CAAC,aAAa,CAAC;AAI5D,OAAO,MAAMC,qBAAqB,GAAGL,CAAC,CAACM,MAAM,CAAC;EAAEC,GAAG,EAAEP,CAAC,CAACQ,KAAK,CAACR,CAAC,CAACS,MAAM,CAAC,CAAC;AAAE,CAAC,CAAC;;AAE3E;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,UAAU,GAAGV,CAAC,CAACW,KAAK,CAAC,CAChC,UAAWX,CAAC,CAACS,MAAM,CAAC,CAAC,EACrB,gBAAiBT,CAAC,CAACS,MAAM,CAAC,CAAC,EAC3B,iBAAkBT,CAAC,CAACY,OAAO,CAAC,CAAC,CAC9B,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,aAAa,GAAG,WAAW;;AAExC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,MAAMC,eAAe,GAAGd,CAAC,CAACM,MAAM,CAAC;EAC/BS,mBAAmB,EAAEf,CAAC,CAACgB,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,QAAQ,GAAGjB,CAAC,CAACM,MAAM,CAAC;EAC/BY,MAAM,EAAElB,CAAC,CAACM,MAAM,CAAC;IACfa,GAAG,EAAEnB,CAAC,CAACoB,IAAI,CAAC,CAAC,WAAW,EAAEP,aAAa,CAAC,CAAC;IACzCQ,GAAG,EAAErB,CAAC,CAACS,MAAM,CAAC,CAAC;IACfa,GAAG,EAAEtB,CAAC,CAACS,MAAM,CAAC,CAAC;IACfc,WAAW,EAAEvB,CAAC,CAACQ,KAAK,CAACR,CAAC,CAACS,MAAM,CAAC,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEzB,CAAC,CAACQ,KAAK,CAACR,CAAC,CAACS,MAAM,CAAC,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAE1B,CAAC,CAACQ,KAAK,CAACR,CAAC,CAACS,MAAM,CAAC,CAAC,CAAC,CAACe,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAE3B,CAAC,CAAC4B,YAAY,CACrB5B,CAAC,CAACM,MAAM,CAAC;IACPuB,GAAG,EAAE7B,CAAC,CAACS,MAAM,CAAC,CAAC;IACfqB,GAAG,EAAE9B,CAAC,CAACS,MAAM,CAAC,CAAC;IACfsB,GAAG,EAAE9B,QAAQ,CAACuB,QAAQ,CAAC,CAAC;IACxBQ,GAAG,EAAE/B,QAAQ;IACbgC,OAAO,EAAEjC,CAAC,CAACgB,OAAO,CAAC,SAAS,CAAC;IAC7BkB,MAAM,EAAElC,CAAC,CACNmC,KAAK,CAAC;IACL;IACAnC,CAAC,CAACM,MAAM,CAAC;MAAE8B,gBAAgB,EAAEtB;IAAgB,CAAC,CAAC;IAC/C;IACAd,CAAC,CAACM,MAAM,CAAC;MAAE+B,kBAAkB,EAAEvB;IAAgB,CAAC,CAAC,CAClD,CAAC,CACDU,QAAQ,CAAC,CAAC;IACbc,GAAG,EAAEtC,CAAC,CAACM,MAAM,CAAC;MACZiC,GAAG,EAAExC;IACP,CAAC,CAAC;IACFyC,GAAG,EAAExC,CAAC,CAACS,MAAM,CAAC,CAAC;IACf,eAAe,EAAET,CAAC,CAACS,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IACtCiB,iBAAiB,EAAEzC,CAAC,CAACS,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IACxCkB,eAAe,EAAE1C,CAAC,CAACS,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC;EACvC,CAAC,CAAC,EACFnB,qBACF;AACF,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMsC,YAAY,GAAG3C,CAAC,CAACM,MAAM,CAAC;EACnCsC,eAAe,EAAE5C,CAAC,CAACS,MAAM,CAAC,CAAC;EAC3BoC,eAAe,EAAE7C,CAAC,CAACS,MAAM,CAAC,CAAC;EAC3BqC,QAAQ,EAAE9C,CAAC,CAACQ,KAAK,CACfR,CAAC,CAACM,MAAM,CAAC;IACPyC,IAAI,EAAE/C,CAAC,CAACgB,OAAO,CAAC,OAAO,CAAC;IACxB;IACAgC,IAAI,EAAEhD,CAAC,CAACmC,KAAK,CAAC,CAACnC,CAAC,CAACS,MAAM,CAAC,CAAC,EAAET,CAAC,CAACE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvC+C,WAAW,EAAEjD,CAAC,CAACM,MAAM,CAAC;MACpByC,IAAI,EAAE/C,CAAC,CAACgB,OAAO,CAAC,qBAAqB,CAAC;MACtCkC,gBAAgB,EAAElD,CAAC,CAACS,MAAM,CAAC,CAAC;MAC5B0C,gBAAgB,EAAEnD,CAAC,CAACS,MAAM,CAAC,CAAC;MAC5B2C,OAAO,EAAEpD,CAAC,CAACM,MAAM,CAAC;QAAE+C,YAAY,EAAErD,CAAC,CAACS,MAAM,CAAC;MAAE,CAAC;IAChD,CAAC;EACH,CAAC,CACH;AACF,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAM6C,YAAY,GAAGtD,CAAC,CAACM,MAAM,CAAC;EACnCiD,IAAI,EAAEvD,CAAC,CAACS,MAAM,CAAC,CAAC;EAChB+C,WAAW,EAAExD,CAAC,CAACS,MAAM,CAAC,CAAC;EACvBgD,WAAW,EAAEzD,CAAC,CAACM,MAAM,CAAC;IACpBsC,eAAe,EAAE5C,CAAC,CAACS,MAAM,CAAC,CAAC;IAC3BiD,gBAAgB,EAAE1D,CAAC,CAACM,MAAM,CAAC;MACzBqD,iBAAiB,EAAE3D,CAAC,CAACS,MAAM,CAAC,CAAC;MAC7BmD,iBAAiB,EAAE5D,CAAC,CAACS,MAAM,CAAC,CAAC;MAC7BoD,QAAQ,EAAE7D,CAAC,CAACQ,KAAK,CAACR,CAAC,CAACS,MAAM,CAAC,CAAC,CAAC;MAC7BqD,YAAY,EAAE9D,CAAC,CAACS,MAAM,CAAC,CAAC,CAACsD,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEhE,CAAC,CAACS,MAAM,CAAC,CAAC,CAACsD,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;EACD;AACF,CAAC,CAAC"}
+{"version":3,"names":["z","UnixTime","JWK","LEGACY_SD_JWT","StatusAssertion","object","credential_hash_alg","literal","StatusList","idx","string","uri","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","exp","cnf","jwk","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","evidence","type","time","number","attestation","reference_number","date_of_issuance","voucher","organization","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AACvB,SAASC,QAAQ,QAAQ,cAAc;AACvC,SAASC,GAAG,QAAQ,cAAc;;AAElC;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,aAAa,GAAG,WAAW;AAExC,MAAMC,eAAe,GAAGJ,CAAC,CAACK,MAAM,CAAC;EAC/BC,mBAAmB,EAAEN,CAAC,CAACO,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGR,CAAC,CAACK,MAAM,CAAC;EAC1BI,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEX,CAAC,CAACU,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAME,YAAY,GAAGZ,CAAC,CAACK,MAAM,CAAC;EACnCQ,MAAM,EAAEb,CAAC,CAACK,MAAM,CAAC;IACfS,GAAG,EAAEd,CAAC,CAACe,IAAI,CAAC,CAAC,WAAW,EAAEZ,aAAa,CAAC,CAAC;IACzCa,GAAG,EAAEhB,CAAC,CAACU,MAAM,CAAC,CAAC;IACfO,GAAG,EAAEjB,CAAC,CAACU,MAAM,CAAC,CAAC;IACfQ,WAAW,EAAElB,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAErB,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAEtB,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAEvB,CAAC,CAACK,MAAM,CAAC;IAChBmB,GAAG,EAAExB,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC;IACxBe,OAAO,EAAEzB,CAAC,CAACO,OAAO,CAAC,SAAS,CAAC;IAC7BmB,GAAG,EAAE1B,CAAC,CAACU,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAE3B,CAAC,CAACU,MAAM,CAAC,CAAC;IACfkB,GAAG,EAAE3B,QAAQ,CAACmB,QAAQ,CAAC,CAAC;IACxBS,GAAG,EAAE5B,QAAQ;IACb6B,GAAG,EAAE9B,CAAC,CAACK,MAAM,CAAC;MACZ0B,GAAG,EAAE7B;IACP,CAAC,CAAC;IACF8B,MAAM,EAAEhC,CAAC,CAACiC,KAAK,CAAC,CACdjC,CAAC,CAACK,MAAM,CAAC;MACP6B,WAAW,EAAE1B;IACf,CAAC,CAAC,EACFR,CAAC,CAACK,MAAM,CAAC;MACP;MACA8B,gBAAgB,EAAE/B;IACpB,CAAC,CAAC,CACH,CAAC;IACFgC,GAAG,EAAEpC,CAAC,CAACU,MAAM,CAAC,CAAC;IACf,eAAe,EAAEV,CAAC,CAACU,MAAM,CAAC,CAAC,CAACU,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMiB,YAAY,GAAGrC,CAAC,CAACK,MAAM,CAAC;EACnCiC,eAAe,EAAEtC,CAAC,CAACU,MAAM,CAAC,CAAC;EAC3B6B,eAAe,EAAEvC,CAAC,CAACU,MAAM,CAAC,CAAC;EAC3B8B,QAAQ,EAAExC,CAAC,CAACmB,KAAK,CACfnB,CAAC,CAACK,MAAM,CAAC;IACPoC,IAAI,EAAEzC,CAAC,CAACO,OAAO,CAAC,OAAO,CAAC;IACxB;IACAmC,IAAI,EAAE1C,CAAC,CAACiC,KAAK,CAAC,CAACjC,CAAC,CAACU,MAAM,CAAC,CAAC,EAAEV,CAAC,CAAC2C,MAAM,CAAC,CAAC,CAAC,CAAC;IACvCC,WAAW,EAAE5C,CAAC,CAACK,MAAM,CAAC;MACpBoC,IAAI,EAAEzC,CAAC,CAACO,OAAO,CAAC,qBAAqB,CAAC;MACtCsC,gBAAgB,EAAE7C,CAAC,CAACU,MAAM,CAAC,CAAC;MAC5BoC,gBAAgB,EAAE9C,CAAC,CAACU,MAAM,CAAC,CAAC;MAC5BqC,OAAO,EAAE/C,CAAC,CAACK,MAAM,CAAC;QAAE2C,YAAY,EAAEhD,CAAC,CAACU,MAAM,CAAC;MAAE,CAAC;IAChD,CAAC;EACH,CAAC,CACH;AACF,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAMuC,YAAY,GAAGjD,CAAC,CAACK,MAAM,CAAC;EACnC6C,IAAI,EAAElD,CAAC,CAACU,MAAM,CAAC,CAAC;EAChByC,WAAW,EAAEnD,CAAC,CAACU,MAAM,CAAC,CAAC;EACvB0C,WAAW,EAAEpD,CAAC,CAACK,MAAM,CAAC;IACpBiC,eAAe,EAAEtC,CAAC,CAACU,MAAM,CAAC,CAAC;IAC3B2C,gBAAgB,EAAErD,CAAC,CAACK,MAAM,CAAC;MACzBiD,iBAAiB,EAAEtD,CAAC,CAACU,MAAM,CAAC,CAAC;MAC7B6C,iBAAiB,EAAEvD,CAAC,CAACU,MAAM,CAAC,CAAC;MAC7B8C,QAAQ,EAAExD,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC;MAC7B+C,YAAY,EAAEzD,CAAC,CAACU,MAAM,CAAC,CAAC,CAACgD,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAE3D,CAAC,CAACU,MAAM,CAAC,CAAC,CAACgD,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC"}

package/lib/module/sd-jwt/utils.js

@@ -1,9 +1,9 @@
 import { sha256ToBase64 } from "@pagopa/io-react-native-jwt";
+import { decodeSdJwtSync, getClaimsSync } from "@sd-jwt/decode";
+import { digest } from "@sd-jwt/crypto-nodejs";
 import { hasStatusOrThrow } from "../utils/misc";
 import { TypeMetadata, Verification } from "./types";
 import { IoWalletError, IssuerResponseError, ValidationFailed } from "../utils/errors";
-import { decode } from ".";
-import { getValueFromDisclosures } from "./converters";
 
 /**
  * Retrieve the Type Metadata for a credential and verify its integrity.
@@ -48,10 +48,8 @@ export const fetchTypeMetadata = async function (vct, vctIntegrity) {
  * @returns The verification claim or undefined if it wasn't found
  */
 export const getVerification = credentialSdJwt => {
-  const {
-    disclosures
-  } = decode(credentialSdJwt);
-  const verificationDisclosure = getValueFromDisclosures(disclosures.map(d => d.decoded), "verification");
-  return verificationDisclosure ? Verification.parse(verificationDisclosure) : undefined;
+  const decoded = decodeSdJwtSync(credentialSdJwt, digest);
+  const claims = getClaimsSync(decoded.jwt.payload, decoded.disclosures, digest);
+  return claims.verification ? Verification.parse(claims.verification) : undefined;
 };
 //# sourceMappingURL=utils.js.map

package/lib/module/sd-jwt/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["sha256ToBase64","hasStatusOrThrow","TypeMetadata","Verification","IoWalletError","IssuerResponseError","ValidationFailed","decode","getValueFromDisclosures","fetchTypeMetadata","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","origin","pathname","URL","metadata","headers","then","res","json","parse","alg","hash","split","metadataHash","JSON","stringify","message","reason","getVerification","credentialSdJwt","disclosures","verificationDisclosure","map","d","decoded"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":"AAAA,SAASA,cAAc,QAAQ,6BAA6B;AAC5D,SAASC,gBAAgB,QAAQ,eAAe;AAChD,SAASC,YAAY,EAAEC,YAAY,QAAQ,SAAS;AACpD,SACEC,aAAa,EACbC,mBAAmB,EACnBC,gBAAgB,QACX,iBAAiB;AACxB,SAASC,MAAM,QAAQ,GAAG;AAC1B,SAASC,uBAAuB,QAAQ,cAAc;;AAEtD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,GAAG,eAAAA,CAC/BC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EACpC,MAAM;IAAEM,MAAM;IAAEC;EAAS,CAAC,GAAG,IAAIC,GAAG,CAACV,GAAG,CAAC;EAEzC,MAAMW,QAAQ,GAAG,MAAML,QAAQ,CAAE,GAAEE,MAAO,mBAAkBC,QAAS,EAAC,EAAE;IACtEG,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAACtB,gBAAgB,CAAC,GAAG,EAAEI,mBAAmB,CAAC,CAAC,CAChDkB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBF,IAAI,CAACrB,YAAY,CAACwB,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGjB,YAAY,CAACkB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAIvB,aAAa,CAAE,GAAEuB,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMG,YAAY,GAAG,MAAM9B,cAAc,CAAC+B,IAAI,CAACC,SAAS,CAACX,QAAQ,CAAC,CAAC;EAEnE,IAAIS,YAAY,KAAKF,IAAI,EAAE;IACzB,MAAM,IAAItB,gBAAgB,CAAC;MACzB2B,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOb,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMc,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAM;IAAEC;EAAY,CAAC,GAAG9B,MAAM,CAAC6B,eAAe,CAAC;EAC/C,MAAME,sBAAsB,GAAG9B,uBAAuB,CACpD6B,WAAW,CAACE,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAACC,OAAO,CAAC,EACjC,cACF,CAAC;EACD,OAAOH,sBAAsB,GACzBnC,YAAY,CAACuB,KAAK,CAACY,sBAAsB,CAAC,GAC1CvB,SAAS;AACf,CAAC"}
+{"version":3,"names":["sha256ToBase64","decodeSdJwtSync","getClaimsSync","digest","hasStatusOrThrow","TypeMetadata","Verification","IoWalletError","IssuerResponseError","ValidationFailed","fetchTypeMetadata","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","origin","pathname","URL","metadata","headers","then","res","json","parse","alg","hash","split","metadataHash","JSON","stringify","message","reason","getVerification","credentialSdJwt","decoded","claims","jwt","payload","disclosures","verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":"AAAA,SAASA,cAAc,QAAQ,6BAA6B;AAC5D,SAASC,eAAe,EAAEC,aAAa,QAAQ,gBAAgB;AAC/D,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,gBAAgB,QAAQ,eAAe;AAChD,SAASC,YAAY,EAAEC,YAAY,QAAQ,SAAS;AACpD,SACEC,aAAa,EACbC,mBAAmB,EACnBC,gBAAgB,QACX,iBAAiB;;AAExB;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,GAAG,eAAAA,CAC/BC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EACpC,MAAM;IAAEM,MAAM;IAAEC;EAAS,CAAC,GAAG,IAAIC,GAAG,CAACV,GAAG,CAAC;EAEzC,MAAMW,QAAQ,GAAG,MAAML,QAAQ,CAAE,GAAEE,MAAO,mBAAkBC,QAAS,EAAC,EAAE;IACtEG,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAACpB,gBAAgB,CAAC,GAAG,EAAEI,mBAAmB,CAAC,CAAC,CAChDgB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBF,IAAI,CAACnB,YAAY,CAACsB,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGjB,YAAY,CAACkB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAIrB,aAAa,CAAE,GAAEqB,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMG,YAAY,GAAG,MAAM/B,cAAc,CAACgC,IAAI,CAACC,SAAS,CAACX,QAAQ,CAAC,CAAC;EAEnE,IAAIS,YAAY,KAAKF,IAAI,EAAE;IACzB,MAAM,IAAIpB,gBAAgB,CAAC;MACzByB,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOb,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMc,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAMC,OAAO,GAAGrC,eAAe,CAACoC,eAAe,EAAElC,MAAM,CAAC;EAExD,MAAMoC,MAAM,GAAGrC,aAAa,CAC1BoC,OAAO,CAACE,GAAG,CAACC,OAAO,EACnBH,OAAO,CAACI,WAAW,EACnBvC,MACF,CAAC;EAED,OAAOoC,MAAM,CAACI,YAAY,GACtBrC,YAAY,CAACqB,KAAK,CAACY,MAAM,CAACI,YAAY,CAAC,GACvC3B,SAAS;AACf,CAAC"}