@pagopa/io-react-native-wallet 3.2.0 → 3.4.0

package/lib/commonjs/credential/issuance/v1.3.3/03-complete-user-authorization.js

@@ -3,13 +3,12 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.parseAuthorizationResponse = exports.getRequestedCredentialToBePresented = exports.continueUserAuthorizationWithMRTDPoPChallenge = exports.completeUserAuthorizationWithQueryMode = exports.completeUserAuthorizationWithFormPostJwtMode = exports.buildAuthorizationUrl = void 0;
+exports.parseAuthorizationResponse = exports.getRequestedCredentialToBePresented = exports.continueUserAuthorizationWithMRTDPoPChallenge = exports.completeUserAuthorizationWithFormPostJwtMode = exports.completePidUserAuthorizationWithQueryMode = exports.completeEaaUserAuthorizationWithQueryMode = exports.buildAuthorizationUrl = void 0;
 var _auth = require("../../../utils/auth");
 var _parseUrl = _interopRequireDefault(require("parse-url"));
 var _ioWalletOid4vp = require("@pagopa/io-wallet-oid4vp");
 var _ioWalletOid4vci = require("@pagopa/io-wallet-oid4vci");
 var _ioWalletOauth = require("@pagopa/io-wallet-oauth2");
-var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
 var _errors = require("../common/errors");
 var _logging = require("../../../utils/logging");
 var _v = require("../../presentation/v1.3.3");
@@ -17,9 +16,10 @@ var _callbacks = require("../../../utils/callbacks");
 var _config = require("../../../utils/config");
 var _errors2 = require("../../../utils/errors");
 var _mappers = require("./mappers");
+var _misc = require("../../../utils/misc");
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 const continueUserAuthorizationWithMRTDPoPChallenge = async authRedirectUrl => {
-  _logging.Logger.log(_logging.LogLevel.DEBUG, `The requested credential is a PersonIdentificationData and requires MRTD PoP, starting MRTD PoP validation from auth redirect`);
+  _logging.Logger.log(_logging.LogLevel.DEBUG, "The requested credential is a PID and requires MRTD PoP, starting MRTD PoP validation from auth redirect");
   try {
     const parsedChallenge = (0, _ioWalletOauth.parseMrtdChallenge)({
       redirectUrl: authRedirectUrl
@@ -49,55 +49,47 @@ const buildAuthorizationUrl = async (issuerRequestUri, clientId, issuerConf, idp
   };
 };
 exports.buildAuthorizationUrl = buildAuthorizationUrl;
-const completeUserAuthorizationWithQueryMode = async authRedirectUrl => {
-  _logging.Logger.log(_logging.LogLevel.DEBUG, `The requested credential is a PersonIdentificationData, completing the user authorization with query mode`);
+const completePidUserAuthorizationWithQueryMode = async authRedirectUrl => {
+  _logging.Logger.log(_logging.LogLevel.DEBUG, "The requested credential is a PID, completing the user authorization with query mode");
   const query = (0, _parseUrl.default)(authRedirectUrl).query;
   return parseAuthorizationResponse(query);
 };
-exports.completeUserAuthorizationWithQueryMode = completeUserAuthorizationWithQueryMode;
+exports.completePidUserAuthorizationWithQueryMode = completePidUserAuthorizationWithQueryMode;
 const getRequestedCredentialToBePresented = async function (issuerRequestUri, clientId, issuerConf) {
   let appFetch = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : fetch;
-  _logging.Logger.log(_logging.LogLevel.DEBUG, `The requeste credential is not a PersonIdentificationData, requesting the credential to be presented`);
+  _logging.Logger.log(_logging.LogLevel.DEBUG, "The requested credential is not a PID, requesting the credential to be presented");
   const authzRequestEndpoint = issuerConf.authorization_endpoint;
   const params = new URLSearchParams({
     client_id: clientId,
     request_uri: issuerRequestUri
   });
   _logging.Logger.log(_logging.LogLevel.DEBUG, `Requesting the request object to ${authzRequestEndpoint}?${params.toString()}`);
-  const authRequest = await (0, _ioWalletOid4vp.fetchAuthorizationRequest)({
-    authorizeRequestUrl: `${authzRequestEndpoint}?${params.toString()}`,
-    callbacks: {
-      fetch: appFetch
-    }
-  }).catch(_errors2.sdkUnexpectedStatusCodeToIssuerError);
+  const requestObjectJwt = await appFetch(`${authzRequestEndpoint}?${params.toString()}`, {
+    method: "GET"
+  }).then((0, _misc.hasStatusOrThrow)(200, _errors2.IssuerResponseError)).then(res => res.text());
   const parsedAuthRequest = await (0, _ioWalletOid4vp.parseAuthorizeRequest)({
     config: _config.sdkConfigV1_3,
-    requestObjectJwt: authRequest.requestObjectJwt,
-    callbacks: _callbacks.partialCallbacks
+    requestObjectJwt,
+    callbacks: {
+      verifyJwt: (0, _callbacks.createVerifyJwtFromJwks)(issuerConf.keys)
+    }
   });
   return (0, _mappers.mapToRequestObject)(parsedAuthRequest);
 };
+
+// NOTE: this function is not used in the 1.3 issuance flow. It may be removed in the future.
 exports.getRequestedCredentialToBePresented = getRequestedCredentialToBePresented;
 const completeUserAuthorizationWithFormPostJwtMode = async (requestObject, issuerConfig, pid, _ref) => {
   let {
-    wiaCryptoContext,
-    pidKeyTag,
     appFetch = fetch
   } = _ref;
-  _logging.Logger.log(_logging.LogLevel.DEBUG, `The requeste credential is not a PersonIdentificationData, completing the user authorization with form_post.jwt mode`);
-  const dcqlQueryResult = await _v.RemotePresentation.evaluateDcqlQuery(requestObject.dcql_query, [[pidKeyTag, pid]]);
-  const authRequestObject = {
-    nonce: requestObject.nonce,
-    clientId: requestObject.client_id,
-    responseUri: requestObject.response_uri
-  };
-  const remotePresentation = await _v.RemotePresentation.prepareRemotePresentations(dcqlQueryResult, authRequestObject);
-  const authzResponsePayload = await createAuthzResponsePayload({
-    state: requestObject.state,
-    remotePresentation,
-    wiaCryptoContext
+  _logging.Logger.log(_logging.LogLevel.DEBUG, "The requested credential is not a PID, completing the user authorization with form_post.jwt mode");
+  const authzResponse = await processPidPresentationAndCreateAuthzResponse({
+    requestObject,
+    issuerConfig,
+    pid
   });
-  _logging.Logger.log(_logging.LogLevel.DEBUG, `Authz response payload: ${authzResponsePayload}`);
+  _logging.Logger.log(_logging.LogLevel.DEBUG, `Authz response: ${authzResponse}`);
   const issuerSigKey = issuerConfig.keys.find(key => key.use === "sig");
   if (!issuerSigKey) {
     const errorMessage = "No signature key found in Issuer Metadata JWKS";
@@ -105,13 +97,13 @@ const completeUserAuthorizationWithFormPostJwtMode = async (requestObject, issue
     throw new _errors2.IoWalletError(errorMessage);
   }
   return (0, _ioWalletOid4vci.sendAuthorizationResponseAndExtractCode)({
-    authorizationResponseJarm: authzResponsePayload,
+    authorizationResponseJarm: authzResponse.jarm.responseJwe,
     callbacks: {
       ..._callbacks.partialCallbacks,
       fetch: appFetch
     },
     iss: requestObject.iss,
-    state: requestObject.state,
+    state: requestObject.state ?? "",
     presentationResponseUri: requestObject.response_uri,
     signer: {
       alg: "ES256",
@@ -120,6 +112,47 @@ const completeUserAuthorizationWithFormPostJwtMode = async (requestObject, issue
     }
   });
 };
+exports.completeUserAuthorizationWithFormPostJwtMode = completeUserAuthorizationWithFormPostJwtMode;
+const completeEaaUserAuthorizationWithQueryMode = async function (requestObject, issuerConfig, pid, clientRedirectUri) {
+  let {
+    appFetch = fetch
+  } = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : {};
+  _logging.Logger.log(_logging.LogLevel.DEBUG, "The requested credential is not a PID, completing the user authorization with query mode");
+  const authzResponse = await processPidPresentationAndCreateAuthzResponse({
+    requestObject,
+    issuerConfig,
+    pid
+  });
+  _logging.Logger.log(_logging.LogLevel.DEBUG, `Authz response: ${authzResponse}`);
+  const {
+    redirect_uri
+  } = await (0, _ioWalletOid4vp.fetchAuthorizationResponse)({
+    authorizationResponseJarm: authzResponse.jarm.responseJwe,
+    presentationResponseUri: requestObject.response_uri,
+    callbacks: {
+      ..._callbacks.partialCallbacks,
+      fetch: appFetch
+    }
+  });
+  if (!redirect_uri) {
+    const errorMessage = "The authorization server did not return a redirect_uri to continue the authorization flow";
+    _logging.Logger.log(_logging.LogLevel.ERROR, errorMessage);
+    throw new _errors.AuthorizationError(errorMessage);
+  }
+  const response = await appFetch(redirect_uri).catch(() => null);
+  if (!response || !response.ok) {
+    const errorMessage = `An error occurred while completing the authorization flow. Ensure ${clientRedirectUri} is a valid HTTP url for redirect`;
+    _logging.Logger.log(_logging.LogLevel.ERROR, errorMessage);
+    throw new _errors.AuthorizationError(errorMessage);
+  }
+  const finalRedirectUri = response.url;
+  if (!finalRedirectUri || !finalRedirectUri.startsWith(clientRedirectUri)) {
+    const errorMessage = `The authorization server did not redirect to the provided client redirect URI. Expected: ${clientRedirectUri}, got: ${finalRedirectUri}`;
+    _logging.Logger.log(_logging.LogLevel.ERROR, errorMessage);
+    throw new _errors.AuthorizationError(errorMessage);
+  }
+  return parseAuthorizationResponse((0, _parseUrl.default)(finalRedirectUri).query);
+};
 
 /**
  * Parse the authorization response and return the result which contains code, state and iss.
@@ -128,7 +161,7 @@ const completeUserAuthorizationWithFormPostJwtMode = async (requestObject, issue
  * @param authRes the authorization response to be parsed
  * @returns the authorization result which contains code, state and iss
  */
-exports.completeUserAuthorizationWithFormPostJwtMode = completeUserAuthorizationWithFormPostJwtMode;
+exports.completeEaaUserAuthorizationWithQueryMode = completeEaaUserAuthorizationWithQueryMode;
 const parseAuthorizationResponse = authRes => {
   const authResParsed = _auth.AuthorizationResultShape.safeParse(authRes);
   if (!authResParsed.success) {
@@ -145,45 +178,51 @@ const parseAuthorizationResponse = authRes => {
 };
 
 /**
- * Creates the authorization response payload to be sent.
- * This payload includes the state and the VP tokens for the presented credentials.
- * The payload is encoded in Base64.
- * @param state - The state parameter from the request object (optional).
- * @param remotePresentation The presentations to send, each with their VP token
- * @returns The Base64 encoded authorization response payload.
+ * Utility function to process the DCQL query for PID presentation and to create the authorization response to send to the Issuer.
+ * @param params.requestObject - The request object containing the DCQL query
+ * @param params.issuerConfig - The Issuer unified configuration
+ * @param params.pid - The PID credential to be presented, as a tuple of [keyTag, credential]
+ * @returns The authorization response containing the JARM to be sent to the Issuer
  */
 exports.parseAuthorizationResponse = parseAuthorizationResponse;
-const createAuthzResponsePayload = async _ref2 => {
+const processPidPresentationAndCreateAuthzResponse = async _ref2 => {
   let {
-    state,
-    remotePresentation,
-    wiaCryptoContext
+    requestObject,
+    issuerConfig,
+    pid
   } = _ref2;
-  const {
-    kid
-  } = await wiaCryptoContext.getPublicKey();
-  return new _ioReactNativeJwt.SignJWT(wiaCryptoContext).setProtectedHeader({
-    typ: "jwt",
-    kid
-  }).setPayload({
-    /**
-     * TODO [SIW-2264]: `state` coming from `requestObject` is marked as `optional`
-     * At the moment, it is not entirely clear whether this value can indeed be omitted
-     * and, if so, what the consequences of its absence might be.
-     */
-    ...(state ? {
-      state
-    } : {}),
-    vp_token: remotePresentation.presentations.reduce((vp_token, _ref3) => {
-      let {
-        credentialId,
-        vpToken
-      } = _ref3;
-      return {
-        ...vp_token,
-        [credentialId]: [vpToken]
-      };
-    }, {})
-  }).setIssuedAt().setExpirationTime("1h").sign();
+  const dcqlQueryResult = await _v.RemotePresentation.evaluateDcqlQuery(requestObject.dcql_query, [pid]);
+  const remotePresentation = await _v.RemotePresentation.prepareRemotePresentations(dcqlQueryResult, {
+    clientId: requestObject.client_id,
+    nonce: requestObject.nonce,
+    responseUri: requestObject.response_uri
+  });
+  const vp_token = remotePresentation.presentations.reduce((acc, _ref3) => {
+    let {
+      credentialId,
+      vpToken
+    } = _ref3;
+    return {
+      ...acc,
+      [credentialId]: [vpToken]
+    };
+  }, {});
+  return (0, _ioWalletOid4vp.createAuthorizationResponse)({
+    // The SDK 1.4 config is used here in order to resolve the encryption data from the Request Object
+    // client_metadata, otherwise OpenID Federation clients always ignore client_metadata as per 1.3.3 specs.
+    config: _config.sdkConfigV1_4,
+    requestObject,
+    rpJwks: {
+      jwks: {
+        keys: issuerConfig.keys
+      },
+      encrypted_response_enc_values_supported: issuerConfig.encrypted_response_enc_values_supported
+    },
+    vp_token,
+    callbacks: {
+      encryptJwe: _callbacks.partialCallbacks.encryptJwe,
+      generateRandom: _callbacks.partialCallbacks.generateRandom
+    }
+  });
 };
 //# sourceMappingURL=03-complete-user-authorization.js.map

package/lib/commonjs/credential/issuance/v1.3.3/03-complete-user-authorization.js.map

@@ -1 +1 @@
-{"version":3,"names":["_auth","require","_parseUrl","_interopRequireDefault","_ioWalletOid4vp","_ioWalletOid4vci","_ioWalletOauth","_ioReactNativeJwt","_errors","_logging","_v","_callbacks","_config","_errors2","_mappers","obj","__esModule","default","continueUserAuthorizationWithMRTDPoPChallenge","authRedirectUrl","Logger","log","LogLevel","DEBUG","parsedChallenge","parseMrtdChallenge","redirectUrl","challenge_info","challengeJwt","err","errorMessage","Error","message","ERROR","AuthorizationError","exports","buildAuthorizationUrl","issuerRequestUri","clientId","issuerConf","idpHint","authzRequestEndpoint","authorization_endpoint","params","URLSearchParams","client_id","request_uri","append","authUrl","completeUserAuthorizationWithQueryMode","query","parseUrl","parseAuthorizationResponse","getRequestedCredentialToBePresented","appFetch","arguments","length","undefined","fetch","toString","authRequest","fetchAuthorizationRequest","authorizeRequestUrl","callbacks","catch","sdkUnexpectedStatusCodeToIssuerError","parsedAuthRequest","parseAuthorizeRequest","config","sdkConfigV1_3","requestObjectJwt","partialCallbacks","mapToRequestObject","completeUserAuthorizationWithFormPostJwtMode","requestObject","issuerConfig","pid","_ref","wiaCryptoContext","pidKeyTag","dcqlQueryResult","RemotePresentationFlow","evaluateDcqlQuery","dcql_query","authRequestObject","nonce","responseUri","response_uri","remotePresentation","prepareRemotePresentations","authzResponsePayload","createAuthzResponsePayload","state","issuerSigKey","keys","find","key","use","IoWalletError","sendAuthorizationResponseAndExtractCode","authorizationResponseJarm","iss","presentationResponseUri","signer","alg","method","publicJwk","authRes","authResParsed","AuthorizationResultShape","safeParse","success","authErr","AuthorizationErrorShape","error","JSON","stringify","AuthorizationIdpError","data","error_description","_ref2","kid","getPublicKey","SignJWT","setProtectedHeader","typ","setPayload","vp_token","presentations","reduce","_ref3","credentialId","vpToken","setIssuedAt","setExpirationTime","sign"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/03-complete-user-authorization.ts"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AAKA,IAAAC,SAAA,GAAAC,sBAAA,CAAAF,OAAA;AAEA,IAAAG,eAAA,GAAAH,OAAA;AAIA,IAAAI,gBAAA,GAAAJ,OAAA;AACA,IAAAK,cAAA,GAAAL,OAAA;AACA,IAAAM,iBAAA,GAAAN,OAAA;AACA,IAAAO,OAAA,GAAAP,OAAA;AACA,IAAAQ,QAAA,GAAAR,OAAA;AACA,IAAAS,EAAA,GAAAT,OAAA;AACA,IAAAU,UAAA,GAAAV,OAAA;AACA,IAAAW,OAAA,GAAAX,OAAA;AACA,IAAAY,QAAA,GAAAZ,OAAA;AAKA,IAAAa,QAAA,GAAAb,OAAA;AAA+C,SAAAE,uBAAAY,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAGxC,MAAMG,6CAA2G,GACtH,MAAOC,eAAe,IAAK;EACzBC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,+HACH,CAAC;EACD,IAAI;IACF,MAAMC,eAAe,GAAG,IAAAC,iCAAkB,EAAC;MACzCC,WAAW,EAAEP;IACf,CAAC,CAAC;IACF,OAAO;MAAEQ,cAAc,EAAEH,eAAe,CAACI;IAAa,CAAC;EACzD,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAMC,YAAY,GAChBD,GAAG,YAAYE,KAAK,GAAGF,GAAG,CAACG,OAAO,GAAG,+BAA+B;IACtEZ,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACW,KAAK,EACb,mDAAkDH,YAAa,EAClE,CAAC;IACD,MAAM,IAAII,0BAAkB,CAACJ,YAAY,CAAC;EAC5C;AACF,CAAC;AAACK,OAAA,CAAAjB,6CAAA,GAAAA,6CAAA;AAEG,MAAMkB,qBAA2D,GACtE,MAAAA,CAAOC,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,OAAO,KAAK;EACzD,MAAMC,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAE9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEF,IAAIG,OAAO,EAAE;IACXG,MAAM,CAACI,MAAM,CAAC,SAAS,EAAEP,OAAO,CAAC;EACnC;EAEA,MAAMQ,OAAO,GAAI,GAAEP,oBAAqB,IAAGE,MAAO,EAAC;EAEnD,OAAO;IAAEK;EAAQ,CAAC;AACpB,CAAC;AAACb,OAAA,CAAAC,qBAAA,GAAAA,qBAAA;AAEG,MAAMa,sCAA6F,GACxG,MAAO9B,eAAe,IAAK;EACzBC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,2GACH,CAAC;EACD,MAAM2B,KAAK,GAAG,IAAAC,iBAAQ,EAAChC,eAAe,CAAC,CAAC+B,KAAK;EAE7C,OAAOE,0BAA0B,CAACF,KAAK,CAAC;AAC1C,CAAC;AAACf,OAAA,CAAAc,sCAAA,GAAAA,sCAAA;AAEG,MAAMI,mCAAuF,GAClG,eAAAA,CAAOhB,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAuB;EAAA,IAArBe,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;EAC7DtC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,sGACH,CAAC;EAED,MAAMkB,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAC9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEFjB,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,oCAAmCkB,oBAAqB,IAAGE,MAAM,CAACgB,QAAQ,CAAC,CAAE,EAChF,CAAC;EAED,MAAMC,WAAW,GAAG,MAAM,IAAAC,yCAAyB,EAAC;IAClDC,mBAAmB,EAAG,GAAErB,oBAAqB,IAAGE,MAAM,CAACgB,QAAQ,CAAC,CAAE,EAAC;IACnEI,SAAS,EAAE;MACTL,KAAK,EAAEJ;IACT;EACF,CAAC,CAAC,CAACU,KAAK,CAACC,6CAAoC,CAAC;EAE9C,MAAMC,iBAAiB,GAAG,MAAM,IAAAC,qCAAqB,EAAC;IACpDC,MAAM,EAAEC,qBAAa;IACrBC,gBAAgB,EAAEV,WAAW,CAACU,gBAAgB;IAC9CP,SAAS,EAAEQ;EACb,CAAC,CAAC;EAEF,OAAO,IAAAC,2BAAkB,EAACN,iBAAiB,CAAC;AAC9C,CAAC;AAAC/B,OAAA,CAAAkB,mCAAA,GAAAA,mCAAA;AAEG,MAAMoB,4CAAyG,GACpH,MAAAA,CACEC,aAAa,EACbC,YAAY,EACZC,GAAG,EAAAC,IAAA,KAEA;EAAA,IADH;IAAEC,gBAAgB;IAAEC,SAAS;IAAEzB,QAAQ,GAAGI;EAAM,CAAC,GAAAmB,IAAA;EAEjDzD,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,sHACH,CAAC;EAED,MAAMyD,eAAe,GAAG,MAAMC,qBAAsB,CAACC,iBAAiB,CACpER,aAAa,CAACS,UAAU,EACxB,CAAC,CAACJ,SAAS,EAAEH,GAAG,CAAC,CACnB,CAAC;EAED,MAAMQ,iBAAiB,GAAG;IACxBC,KAAK,EAAEX,aAAa,CAACW,KAAK;IAC1B/C,QAAQ,EAAEoC,aAAa,CAAC7B,SAAS;IACjCyC,WAAW,EAAEZ,aAAa,CAACa;EAC7B,CAAC;EAED,MAAMC,kBAAkB,GACtB,MAAMP,qBAAsB,CAACQ,0BAA0B,CACrDT,eAAe,EACfI,iBACF,CAAC;EAEH,MAAMM,oBAAoB,GAAG,MAAMC,0BAA0B,CAAC;IAC5DC,KAAK,EAAElB,aAAa,CAACkB,KAAK;IAC1BJ,kBAAkB;IAClBV;EACF,CAAC,CAAC;EAEF1D,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,2BAA0BmE,oBAAqB,EAClD,CAAC;EAED,MAAMG,YAAY,GAAGlB,YAAY,CAACmB,IAAI,CAACC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,GAAG,KAAK,KAAK,CAAC;EACvE,IAAI,CAACJ,YAAY,EAAE;IACjB,MAAM/D,YAAY,GAAG,gDAAgD;IACrEV,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACW,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIoE,sBAAa,CAACpE,YAAY,CAAC;EACvC;EAEA,OAAO,IAAAqE,wDAAuC,EAAC;IAC7CC,yBAAyB,EAAEV,oBAAoB;IAC/C3B,SAAS,EAAE;MACT,GAAGQ,2BAAgB;MACnBb,KAAK,EAAEJ;IACT,CAAC;IACD+C,GAAG,EAAE3B,aAAa,CAAC2B,GAAG;IACtBT,KAAK,EAAElB,aAAa,CAACkB,KAAM;IAC3BU,uBAAuB,EAAE5B,aAAa,CAACa,YAAY;IACnDgB,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZC,MAAM,EAAE,KAAK;MACbC,SAAS,EAAEb;IACb;EACF,CAAC,CAAC;AACJ,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AACA;AANA1D,OAAA,CAAAsC,4CAAA,GAAAA,4CAAA;AAOO,MAAMrB,0BAA0B,GACrCuD,OAAgB,IACQ;EACxB,MAAMC,aAAa,GAAGC,8BAAwB,CAACC,SAAS,CAACH,OAAO,CAAC;EACjE,IAAI,CAACC,aAAa,CAACG,OAAO,EAAE;IAC1B,MAAMC,OAAO,GAAGC,6BAAuB,CAACH,SAAS,CAACH,OAAO,CAAC;IAC1D,IAAI,CAACK,OAAO,CAACD,OAAO,EAAE;MACpB3F,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACW,KAAK,EACb,mDAAkD2E,aAAa,CAACM,KAAK,CAAClF,OAAQ,EACjF,CAAC;MACD,MAAM,IAAIE,0BAAkB,CAAC0E,aAAa,CAACM,KAAK,CAAClF,OAAO,CAAC,CAAC,CAAC;IAC7D;;IACAZ,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACW,KAAK,EACb,2CAA0CkF,IAAI,CAACC,SAAS,CAACJ,OAAO,CAAE,EACrE,CAAC;IACD,MAAM,IAAIK,6BAAqB,CAC7BL,OAAO,CAACM,IAAI,CAACJ,KAAK,EAClBF,OAAO,CAACM,IAAI,CAACC,iBACf,CAAC;EACH;EACA,OAAOX,aAAa,CAACU,IAAI;AAC3B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAnF,OAAA,CAAAiB,0BAAA,GAAAA,0BAAA;AAQA,MAAMuC,0BAA0B,GAAG,MAAA6B,KAAA,IAQZ;EAAA,IARmB;IACxC5B,KAAK;IACLJ,kBAAkB;IAClBV;EAKF,CAAC,GAAA0C,KAAA;EACC,MAAM;IAAEC;EAAI,CAAC,GAAG,MAAM3C,gBAAgB,CAAC4C,YAAY,CAAC,CAAC;EAErD,OAAO,IAAIC,yBAAO,CAAC7C,gBAAgB,CAAC,CACjC8C,kBAAkB,CAAC;IAClBC,GAAG,EAAE,KAAK;IACVJ;EACF,CAAC,CAAC,CACDK,UAAU,CAAC;IACV;AACN;AACA;AACA;AACA;IACM,IAAIlC,KAAK,GAAG;MAAEA;IAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3BmC,QAAQ,EAAEvC,kBAAkB,CAACwC,aAAa,CAACC,MAAM,CAC/C,CAACF,QAAQ,EAAAG,KAAA;MAAA,IAAE;QAAEC,YAAY;QAAEC;MAAQ,CAAC,GAAAF,KAAA;MAAA,OAAM;QACxC,GAAGH,QAAQ;QACX,CAACI,YAAY,GAAG,CAACC,OAAO;MAC1B,CAAC;IAAA,CAAC,EACF,CAAC,CACH;EACF,CAAC,CAAC,CACDC,WAAW,CAAC,CAAC,CACbC,iBAAiB,CAAC,IAAI,CAAC,CACvBC,IAAI,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"names":["_auth","require","_parseUrl","_interopRequireDefault","_ioWalletOid4vp","_ioWalletOid4vci","_ioWalletOauth","_errors","_logging","_v","_callbacks","_config","_errors2","_mappers","_misc","obj","__esModule","default","continueUserAuthorizationWithMRTDPoPChallenge","authRedirectUrl","Logger","log","LogLevel","DEBUG","parsedChallenge","parseMrtdChallenge","redirectUrl","challenge_info","challengeJwt","err","errorMessage","Error","message","ERROR","AuthorizationError","exports","buildAuthorizationUrl","issuerRequestUri","clientId","issuerConf","idpHint","authzRequestEndpoint","authorization_endpoint","params","URLSearchParams","client_id","request_uri","append","authUrl","completePidUserAuthorizationWithQueryMode","query","parseUrl","parseAuthorizationResponse","getRequestedCredentialToBePresented","appFetch","arguments","length","undefined","fetch","toString","requestObjectJwt","method","then","hasStatusOrThrow","IssuerResponseError","res","text","parsedAuthRequest","parseAuthorizeRequest","config","sdkConfigV1_3","callbacks","verifyJwt","createVerifyJwtFromJwks","keys","mapToRequestObject","completeUserAuthorizationWithFormPostJwtMode","requestObject","issuerConfig","pid","_ref","authzResponse","processPidPresentationAndCreateAuthzResponse","issuerSigKey","find","key","use","IoWalletError","sendAuthorizationResponseAndExtractCode","authorizationResponseJarm","jarm","responseJwe","partialCallbacks","iss","state","presentationResponseUri","response_uri","signer","alg","publicJwk","completeEaaUserAuthorizationWithQueryMode","clientRedirectUri","redirect_uri","fetchAuthorizationResponse","response","catch","ok","finalRedirectUri","url","startsWith","authRes","authResParsed","AuthorizationResultShape","safeParse","success","authErr","AuthorizationErrorShape","error","JSON","stringify","AuthorizationIdpError","data","error_description","_ref2","dcqlQueryResult","RemotePresentationFlow","evaluateDcqlQuery","dcql_query","remotePresentation","prepareRemotePresentations","nonce","responseUri","vp_token","presentations","reduce","acc","_ref3","credentialId","vpToken","createAuthorizationResponse","sdkConfigV1_4","rpJwks","jwks","encrypted_response_enc_values_supported","encryptJwe","generateRandom"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/03-complete-user-authorization.ts"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AAKA,IAAAC,SAAA,GAAAC,sBAAA,CAAAF,OAAA;AAEA,IAAAG,eAAA,GAAAH,OAAA;AAMA,IAAAI,gBAAA,GAAAJ,OAAA;AAEA,IAAAK,cAAA,GAAAL,OAAA;AACA,IAAAM,OAAA,GAAAN,OAAA;AACA,IAAAO,QAAA,GAAAP,OAAA;AACA,IAAAQ,EAAA,GAAAR,OAAA;AACA,IAAAS,UAAA,GAAAT,OAAA;AAIA,IAAAU,OAAA,GAAAV,OAAA;AACA,IAAAW,QAAA,GAAAX,OAAA;AAEA,IAAAY,QAAA,GAAAZ,OAAA;AAEA,IAAAa,KAAA,GAAAb,OAAA;AAAuD,SAAAE,uBAAAY,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAEhD,MAAMG,6CAA2G,GACtH,MAAOC,eAAe,IAAK;EACzBC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACd,0GACF,CAAC;EACD,IAAI;IACF,MAAMC,eAAe,GAAG,IAAAC,iCAAkB,EAAC;MACzCC,WAAW,EAAEP;IACf,CAAC,CAAC;IACF,OAAO;MAAEQ,cAAc,EAAEH,eAAe,CAACI;IAAa,CAAC;EACzD,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAMC,YAAY,GAChBD,GAAG,YAAYE,KAAK,GAAGF,GAAG,CAACG,OAAO,GAAG,+BAA+B;IACtEZ,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACW,KAAK,EACb,mDAAkDH,YAAa,EAClE,CAAC;IACD,MAAM,IAAII,0BAAkB,CAACJ,YAAY,CAAC;EAC5C;AACF,CAAC;AAACK,OAAA,CAAAjB,6CAAA,GAAAA,6CAAA;AAEG,MAAMkB,qBAA2D,GACtE,MAAAA,CAAOC,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,OAAO,KAAK;EACzD,MAAMC,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAE9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEF,IAAIG,OAAO,EAAE;IACXG,MAAM,CAACI,MAAM,CAAC,SAAS,EAAEP,OAAO,CAAC;EACnC;EAEA,MAAMQ,OAAO,GAAI,GAAEP,oBAAqB,IAAGE,MAAO,EAAC;EAEnD,OAAO;IAAEK;EAAQ,CAAC;AACpB,CAAC;AAACb,OAAA,CAAAC,qBAAA,GAAAA,qBAAA;AAEG,MAAMa,yCAAmG,GAC9G,MAAO9B,eAAe,IAAK;EACzBC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACd,sFACF,CAAC;EACD,MAAM2B,KAAK,GAAG,IAAAC,iBAAQ,EAAChC,eAAe,CAAC,CAAC+B,KAAK;EAE7C,OAAOE,0BAA0B,CAACF,KAAK,CAAC;AAC1C,CAAC;AAACf,OAAA,CAAAc,yCAAA,GAAAA,yCAAA;AAEG,MAAMI,mCAAuF,GAClG,eAAAA,CAAOhB,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAuB;EAAA,IAArBe,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;EAC7DtC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACd,kFACF,CAAC;EAED,MAAMkB,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAC9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEFjB,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,oCAAmCkB,oBAAqB,IAAGE,MAAM,CAACgB,QAAQ,CAAC,CAAE,EAChF,CAAC;EAED,MAAMC,gBAAgB,GAAG,MAAMN,QAAQ,CACpC,GAAEb,oBAAqB,IAAGE,MAAM,CAACgB,QAAQ,CAAC,CAAE,EAAC,EAC9C;IAAEE,MAAM,EAAE;EAAM,CAClB,CAAC,CACEC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,EAAEC,4BAAmB,CAAC,CAAC,CAChDF,IAAI,CAAEG,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;EAE5B,MAAMC,iBAAiB,GAAG,MAAM,IAAAC,qCAAqB,EAAC;IACpDC,MAAM,EAAEC,qBAAa;IACrBV,gBAAgB;IAChBW,SAAS,EAAE;MACTC,SAAS,EAAE,IAAAC,kCAAuB,EAAClC,UAAU,CAACmC,IAAI;IACpD;EACF,CAAC,CAAC;EAEF,OAAO,IAAAC,2BAAkB,EAACR,iBAAiB,CAAC;AAC9C,CAAC;;AAEH;AAAAhC,OAAA,CAAAkB,mCAAA,GAAAA,mCAAA;AACO,MAAMuB,4CAAyG,GACpH,MAAAA,CAAOC,aAAa,EAAEC,YAAY,EAAEC,GAAG,EAAAC,IAAA,KAA2B;EAAA,IAAzB;IAAE1B,QAAQ,GAAGI;EAAM,CAAC,GAAAsB,IAAA;EAC3D5D,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACd,kGACF,CAAC;EAED,MAAM0D,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEL,aAAa;IACbC,YAAY;IACZC;EACF,CAAC,CAAC;EAEF3D,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAG,mBAAkB0D,aAAc,EAAC,CAAC;EAE9D,MAAME,YAAY,GAAGL,YAAY,CAACJ,IAAI,CAACU,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,GAAG,KAAK,KAAK,CAAC;EACvE,IAAI,CAACH,YAAY,EAAE;IACjB,MAAMrD,YAAY,GAAG,gDAAgD;IACrEV,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACW,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIyD,sBAAa,CAACzD,YAAY,CAAC;EACvC;EAEA,OAAO,IAAA0D,wDAAuC,EAAC;IAC7CC,yBAAyB,EAAER,aAAa,CAACS,IAAI,CAACC,WAAW;IACzDpB,SAAS,EAAE;MACT,GAAGqB,2BAAgB;MACnBlC,KAAK,EAAEJ;IACT,CAAC;IACDuC,GAAG,EAAEhB,aAAa,CAACgB,GAAG;IACtBC,KAAK,EAAEjB,aAAa,CAACiB,KAAK,IAAI,EAAE;IAChCC,uBAAuB,EAAElB,aAAa,CAACmB,YAAY;IACnDC,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZrC,MAAM,EAAE,KAAK;MACbsC,SAAS,EAAEhB;IACb;EACF,CAAC,CAAC;AACJ,CAAC;AAAChD,OAAA,CAAAyC,4CAAA,GAAAA,4CAAA;AAEG,MAAMwB,yCAAmG,GAC9G,eAAAA,CACEvB,aAAa,EACbC,YAAY,EACZC,GAAG,EACHsB,iBAAiB,EAEd;EAAA,IADH;IAAE/C,QAAQ,GAAGI;EAAM,CAAC,GAAAH,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEzBnC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACd,0FACF,CAAC;EAED,MAAM0D,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEL,aAAa;IACbC,YAAY;IACZC;EACF,CAAC,CAAC;EAEF3D,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAG,mBAAkB0D,aAAc,EAAC,CAAC;EAE9D,MAAM;IAAEqB;EAAa,CAAC,GAAG,MAAM,IAAAC,0CAA0B,EAAC;IACxDd,yBAAyB,EAAER,aAAa,CAACS,IAAI,CAACC,WAAW;IACzDI,uBAAuB,EAAElB,aAAa,CAACmB,YAAY;IACnDzB,SAAS,EAAE;MACT,GAAGqB,2BAAgB;MACnBlC,KAAK,EAAEJ;IACT;EACF,CAAC,CAAC;EAEF,IAAI,CAACgD,YAAY,EAAE;IACjB,MAAMxE,YAAY,GAChB,2FAA2F;IAC7FV,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACW,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAII,0BAAkB,CAACJ,YAAY,CAAC;EAC5C;EAEA,MAAM0E,QAAQ,GAAG,MAAMlD,QAAQ,CAACgD,YAAY,CAAC,CAACG,KAAK,CAAC,MAAM,IAAI,CAAC;EAE/D,IAAI,CAACD,QAAQ,IAAI,CAACA,QAAQ,CAACE,EAAE,EAAE;IAC7B,MAAM5E,YAAY,GAAI,qEAAoEuE,iBAAkB,mCAAkC;IAC9IjF,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACW,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAII,0BAAkB,CAACJ,YAAY,CAAC;EAC5C;EAEA,MAAM6E,gBAAgB,GAAGH,QAAQ,CAACI,GAAG;EAErC,IAAI,CAACD,gBAAgB,IAAI,CAACA,gBAAgB,CAACE,UAAU,CAACR,iBAAiB,CAAC,EAAE;IACxE,MAAMvE,YAAY,GAAI,4FAA2FuE,iBAAkB,UAASM,gBAAiB,EAAC;IAC9JvF,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACW,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAII,0BAAkB,CAACJ,YAAY,CAAC;EAC5C;EAEA,OAAOsB,0BAA0B,CAAC,IAAAD,iBAAQ,EAACwD,gBAAgB,CAAC,CAACzD,KAAK,CAAC;AACrE,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AACA;AANAf,OAAA,CAAAiE,yCAAA,GAAAA,yCAAA;AAOO,MAAMhD,0BAA0B,GACrC0D,OAAgB,IACQ;EACxB,MAAMC,aAAa,GAAGC,8BAAwB,CAACC,SAAS,CAACH,OAAO,CAAC;EACjE,IAAI,CAACC,aAAa,CAACG,OAAO,EAAE;IAC1B,MAAMC,OAAO,GAAGC,6BAAuB,CAACH,SAAS,CAACH,OAAO,CAAC;IAC1D,IAAI,CAACK,OAAO,CAACD,OAAO,EAAE;MACpB9F,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACW,KAAK,EACb,mDAAkD8E,aAAa,CAACM,KAAK,CAACrF,OAAQ,EACjF,CAAC;MACD,MAAM,IAAIE,0BAAkB,CAAC6E,aAAa,CAACM,KAAK,CAACrF,OAAO,CAAC,CAAC,CAAC;IAC7D;;IACAZ,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACW,KAAK,EACb,2CAA0CqF,IAAI,CAACC,SAAS,CAACJ,OAAO,CAAE,EACrE,CAAC;IACD,MAAM,IAAIK,6BAAqB,CAC7BL,OAAO,CAACM,IAAI,CAACJ,KAAK,EAClBF,OAAO,CAACM,IAAI,CAACC,iBACf,CAAC;EACH;EACA,OAAOX,aAAa,CAACU,IAAI;AAC3B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AANAtF,OAAA,CAAAiB,0BAAA,GAAAA,0BAAA;AAOA,MAAM8B,4CAA4C,GAAG,MAAAyC,KAAA,IAQH;EAAA,IARU;IAC1D9C,aAAa;IACbC,YAAY;IACZC;EAKF,CAAC,GAAA4C,KAAA;EACC,MAAMC,eAAe,GAAG,MAAMC,qBAAsB,CAACC,iBAAiB,CACpEjD,aAAa,CAACkD,UAAU,EACxB,CAAChD,GAAG,CACN,CAAC;EAED,MAAMiD,kBAAkB,GACtB,MAAMH,qBAAsB,CAACI,0BAA0B,CAACL,eAAe,EAAE;IACvEtF,QAAQ,EAAEuC,aAAa,CAAChC,SAAS;IACjCqF,KAAK,EAAErD,aAAa,CAACqD,KAAK;IAC1BC,WAAW,EAAEtD,aAAa,CAACmB;EAC7B,CAAC,CAAC;EAEJ,MAAMoC,QAAQ,GAAGJ,kBAAkB,CAACK,aAAa,CAACC,MAAM,CACtD,CAACC,GAAG,EAAAC,KAAA;IAAA,IAAE;MAAEC,YAAY;MAAEC;IAAQ,CAAC,GAAAF,KAAA;IAAA,OAAM;MAAE,GAAGD,GAAG;MAAE,CAACE,YAAY,GAAG,CAACC,OAAO;IAAE,CAAC;EAAA,CAAC,EAC3E,CAAC,CACH,CAAC;EAED,OAAO,IAAAC,2CAA2B,EAAC;IACjC;IACA;IACAtE,MAAM,EAAEuE,qBAAa;IACrB/D,aAAa;IACbgE,MAAM,EAAE;MACNC,IAAI,EAAE;QAAEpE,IAAI,EAAEI,YAAY,CAACJ;MAAK,CAAkB;MAClDqE,uCAAuC,EACrCjE,YAAY,CAACiE;IACjB,CAAC;IACDX,QAAQ;IACR7D,SAAS,EAAE;MACTyE,UAAU,EAAEpD,2BAAgB,CAACoD,UAAU;MACvCC,cAAc,EAAErD,2BAAgB,CAACqD;IACnC;EACF,CAAC,CAAC;AACJ,CAAC"}

package/lib/commonjs/credential/issuance/v1.3.3/04-authorize-access.js

@@ -4,15 +4,11 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.authorizeAccess = void 0;
-var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
 var _ioWalletOauth = require("@pagopa/io-wallet-oauth2");
 var _uuid = require("uuid");
-var _pop = require("../../../utils/pop");
-var WalletInstanceAttestation = _interopRequireWildcard(require("../../../wallet-instance-attestation/v1.0.0/utils"));
 var _callbacks = require("../../../utils/callbacks");
 var _errors = require("../../../utils/errors");
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
+var _config = require("../../../utils/config");
 const authorizeAccess = async (issuerConf, code, redirectUri, codeVerifier, context) => {
   const {
     appFetch = fetch,
@@ -20,31 +16,36 @@ const authorizeAccess = async (issuerConf, code, redirectUri, codeVerifier, cont
     wiaCryptoContext,
     dPopCryptoContext
   } = context;
-  const dPopSignerJwk = await dPopCryptoContext.getPublicKey();
   const tokenDPoP = await (0, _ioWalletOauth.createTokenDPoP)({
     callbacks: {
       ..._callbacks.partialCallbacks,
-      signJwt: async (_, payload) => ({
-        jwt: await new _ioReactNativeJwt.SignJWT(wiaCryptoContext).setPayload(payload).sign(),
-        signerJwk: dPopSignerJwk
-      })
+      signJwt: (0, _callbacks.createSignJwtFromCryptoContext)(dPopCryptoContext)
     },
     signer: {
-      alg: "ES256",
       method: "jwk",
-      publicJwk: dPopSignerJwk
+      alg: "ES256",
+      publicJwk: await dPopCryptoContext.getPublicKey()
     },
+    jti: (0, _uuid.v4)(),
     tokenRequest: {
       method: "POST",
       url: issuerConf.token_endpoint
     }
   });
-  const iss = WalletInstanceAttestation.decode(walletInstanceAttestation).payload.cnf.jwk.kid;
-  const signedWiaPoP = await (0, _pop.createPopToken)({
-    jti: (0, _uuid.v4)(),
-    aud: issuerConf.credential_issuer,
-    iss
-  }, wiaCryptoContext);
+  const clientAttestationDPoP = await (0, _ioWalletOauth.createClientAttestationPopJwt)({
+    config: _config.sdkConfigV1_3,
+    callbacks: {
+      generateRandom: _callbacks.partialCallbacks.generateRandom,
+      signJwt: (0, _callbacks.createSignJwtFromCryptoContext)(wiaCryptoContext)
+    },
+    clientAttestation: walletInstanceAttestation,
+    authorizationServer: issuerConf.credential_issuer,
+    signer: {
+      method: "jwk",
+      alg: "ES256",
+      publicJwk: await wiaCryptoContext.getPublicKey()
+    }
+  });
   const tokenResponse = await (0, _ioWalletOauth.fetchTokenResponse)({
     accessTokenEndpoint: issuerConf.token_endpoint,
     callbacks: {
@@ -53,7 +54,7 @@ const authorizeAccess = async (issuerConf, code, redirectUri, codeVerifier, cont
     },
     walletAttestation: walletInstanceAttestation,
     dPoP: tokenDPoP.jwt,
-    clientAttestationDPoP: signedWiaPoP,
+    clientAttestationDPoP,
     accessTokenRequest: {
       code,
       grant_type: "authorization_code",

package/lib/commonjs/credential/issuance/v1.3.3/04-authorize-access.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_ioWalletOauth","_uuid","_pop","WalletInstanceAttestation","_interopRequireWildcard","_callbacks","_errors","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","authorizeAccess","issuerConf","code","redirectUri","codeVerifier","context","appFetch","fetch","walletInstanceAttestation","wiaCryptoContext","dPopCryptoContext","dPopSignerJwk","getPublicKey","tokenDPoP","createTokenDPoP","callbacks","partialCallbacks","signJwt","_","payload","jwt","SignJWT","setPayload","sign","signerJwk","signer","alg","method","publicJwk","tokenRequest","url","token_endpoint","iss","decode","cnf","jwk","kid","signedWiaPoP","createPopToken","jti","uuidv4","aud","credential_issuer","tokenResponse","fetchTokenResponse","accessTokenEndpoint","walletAttestation","dPoP","clientAttestationDPoP","accessTokenRequest","grant_type","code_verifier","redirect_uri","authorization_details","IoWalletError","accessToken","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/04-authorize-access.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,cAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,IAAA,GAAAH,OAAA;AACA,IAAAI,yBAAA,GAAAC,uBAAA,CAAAL,OAAA;AACA,IAAAM,UAAA,GAAAN,OAAA;AACA,IAAAO,OAAA,GAAAP,OAAA;AAAsD,SAAAQ,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAJ,wBAAAQ,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAG/C,MAAMW,eAA+C,GAAG,MAAAA,CAC7DC,UAAU,EACVC,IAAI,EACJC,WAAW,EACXC,YAAY,EACZC,OAAO,KACJ;EACH,MAAM;IACJC,QAAQ,GAAGC,KAAK;IAChBC,yBAAyB;IACzBC,gBAAgB;IAChBC;EACF,CAAC,GAAGL,OAAO;EAEX,MAAMM,aAAa,GAAG,MAAMD,iBAAiB,CAACE,YAAY,CAAC,CAAC;EAC5D,MAAMC,SAAS,GAAG,MAAM,IAAAC,8BAAe,EAAC;IACtCC,SAAS,EAAE;MACT,GAAGC,2BAAgB;MACnBC,OAAO,EAAE,MAAAA,CAAOC,CAAC,EAAEC,OAAO,MAAM;QAC9BC,GAAG,EAAE,MAAM,IAAIC,yBAAO,CAACZ,gBAAgB,CAAC,CAACa,UAAU,CAACH,OAAO,CAAC,CAACI,IAAI,CAAC,CAAC;QACnEC,SAAS,EAAEb;MACb,CAAC;IACH,CAAC;IACDc,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZC,MAAM,EAAE,KAAK;MACbC,SAAS,EAAEjB;IACb,CAAC;IACDkB,YAAY,EAAE;MACZF,MAAM,EAAE,MAAM;MACdG,GAAG,EAAE7B,UAAU,CAAC8B;IAClB;EACF,CAAC,CAAC;EAEF,MAAMC,GAAG,GAAG1D,yBAAyB,CAAC2D,MAAM,CAACzB,yBAAyB,CAAC,CACpEW,OAAO,CAACe,GAAG,CAACC,GAAG,CAACC,GAAG;EAEtB,MAAMC,YAAY,GAAG,MAAM,IAAAC,mBAAc,EACvC;IACEC,GAAG,EAAE,IAAAC,QAAM,EAAC,CAAC;IACbC,GAAG,EAAExC,UAAU,CAACyC,iBAAiB;IACjCV;EACF,CAAC,EACDvB,gBACF,CAAC;EAED,MAAMkC,aAAa,GAAG,MAAM,IAAAC,iCAAkB,EAAC;IAC7CC,mBAAmB,EAAE5C,UAAU,CAAC8B,cAAc;IAC9ChB,SAAS,EAAE;MACT,GAAGC,2BAAgB;MACnBT,KAAK,EAAED;IACT,CAAC;IACDwC,iBAAiB,EAAEtC,yBAAyB;IAC5CuC,IAAI,EAAElC,SAAS,CAACO,GAAG;IACnB4B,qBAAqB,EAAEX,YAAY;IACnCY,kBAAkB,EAAE;MAClB/C,IAAI;MACJgD,UAAU,EAAE,oBAAoB;MAChCC,aAAa,EAAE/C,YAAY;MAC3BgD,YAAY,EAAEjD;IAChB;EACF,CAAC,CAAC;;EAEF;EACA;EACA,IAAI,CAACwC,aAAa,CAACU,qBAAqB,EAAE;IACxC,MAAM,IAAIC,qBAAa,CACrB,6DACF,CAAC;EACH;EAEA,OAAO;IACLC,WAAW,EAAEZ;EACf,CAAC;AACH,CAAC;AAACa,OAAA,CAAAxD,eAAA,GAAAA,eAAA"}
+{"version":3,"names":["_ioWalletOauth","require","_uuid","_callbacks","_errors","_config","authorizeAccess","issuerConf","code","redirectUri","codeVerifier","context","appFetch","fetch","walletInstanceAttestation","wiaCryptoContext","dPopCryptoContext","tokenDPoP","createTokenDPoP","callbacks","partialCallbacks","signJwt","createSignJwtFromCryptoContext","signer","method","alg","publicJwk","getPublicKey","jti","uuidv4","tokenRequest","url","token_endpoint","clientAttestationDPoP","createClientAttestationPopJwt","config","sdkConfigV1_3","generateRandom","clientAttestation","authorizationServer","credential_issuer","tokenResponse","fetchTokenResponse","accessTokenEndpoint","walletAttestation","dPoP","jwt","accessTokenRequest","grant_type","code_verifier","redirect_uri","authorization_details","IoWalletError","accessToken","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/04-authorize-access.ts"],"mappings":";;;;;;AAAA,IAAAA,cAAA,GAAAC,OAAA;AAKA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AAIA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AAGO,MAAMK,eAA+C,GAAG,MAAAA,CAC7DC,UAAU,EACVC,IAAI,EACJC,WAAW,EACXC,YAAY,EACZC,OAAO,KACJ;EACH,MAAM;IACJC,QAAQ,GAAGC,KAAK;IAChBC,yBAAyB;IACzBC,gBAAgB;IAChBC;EACF,CAAC,GAAGL,OAAO;EAEX,MAAMM,SAAS,GAAG,MAAM,IAAAC,8BAAe,EAAC;IACtCC,SAAS,EAAE;MACT,GAAGC,2BAAgB;MACnBC,OAAO,EAAE,IAAAC,yCAA8B,EAACN,iBAAiB;IAC3D,CAAC;IACDO,MAAM,EAAE;MACNC,MAAM,EAAE,KAAK;MACbC,GAAG,EAAE,OAAO;MACZC,SAAS,EAAE,MAAMV,iBAAiB,CAACW,YAAY,CAAC;IAClD,CAAC;IACDC,GAAG,EAAE,IAAAC,QAAM,EAAC,CAAC;IACbC,YAAY,EAAE;MACZN,MAAM,EAAE,MAAM;MACdO,GAAG,EAAExB,UAAU,CAACyB;IAClB;EACF,CAAC,CAAC;EAEF,MAAMC,qBAAqB,GAAG,MAAM,IAAAC,4CAA6B,EAAC;IAChEC,MAAM,EAAEC,qBAAa;IACrBjB,SAAS,EAAE;MACTkB,cAAc,EAAEjB,2BAAgB,CAACiB,cAAc;MAC/ChB,OAAO,EAAE,IAAAC,yCAA8B,EAACP,gBAAgB;IAC1D,CAAC;IACDuB,iBAAiB,EAAExB,yBAAyB;IAC5CyB,mBAAmB,EAAEhC,UAAU,CAACiC,iBAAiB;IACjDjB,MAAM,EAAE;MACNC,MAAM,EAAE,KAAK;MACbC,GAAG,EAAE,OAAO;MACZC,SAAS,EAAE,MAAMX,gBAAgB,CAACY,YAAY,CAAC;IACjD;EACF,CAAC,CAAC;EAEF,MAAMc,aAAa,GAAG,MAAM,IAAAC,iCAAkB,EAAC;IAC7CC,mBAAmB,EAAEpC,UAAU,CAACyB,cAAc;IAC9Cb,SAAS,EAAE;MACT,GAAGC,2BAAgB;MACnBP,KAAK,EAAED;IACT,CAAC;IACDgC,iBAAiB,EAAE9B,yBAAyB;IAC5C+B,IAAI,EAAE5B,SAAS,CAAC6B,GAAG;IACnBb,qBAAqB;IACrBc,kBAAkB,EAAE;MAClBvC,IAAI;MACJwC,UAAU,EAAE,oBAAoB;MAChCC,aAAa,EAAEvC,YAAY;MAC3BwC,YAAY,EAAEzC;IAChB;EACF,CAAC,CAAC;;EAEF;EACA;EACA,IAAI,CAACgC,aAAa,CAACU,qBAAqB,EAAE;IACxC,MAAM,IAAIC,qBAAa,CACrB,6DACF,CAAC;EACH;EAEA,OAAO;IACLC,WAAW,EAAEZ;EACf,CAAC;AACH,CAAC;AAACa,OAAA,CAAAhD,eAAA,GAAAA,eAAA"}

package/lib/commonjs/credential/issuance/v1.3.3/05-obtain-credential.js

@@ -8,6 +8,7 @@ var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
 var _ioWalletOauth = require("@pagopa/io-wallet-oauth2");
 var _ioWalletOid4vci = require("@pagopa/io-wallet-oid4vci");
 var _ioWalletUtils = require("@pagopa/io-wallet-utils");
+var _uuid = require("uuid");
 var _misc = require("../../../utils/misc");
 var _errors = require("../../../utils/errors");
 var _logging = require("../../../utils/logging");
@@ -89,26 +90,23 @@ const requestCredentials = async _ref => {
     },
     clientId,
     credential_identifier: credentialIdentifier,
-    issuerIdentifier: issuerConf.credential_issuer,
+    issuerIdentifier: issuerConf.credential_endpoint,
     maxBatchSize: issuerConf.credential_issuance_batch_size,
     nonce: c_nonce,
     keyAttestation: keyAttestationJwt,
     signers
   });
-  const dPopSignerJwk = await dPopCryptoContext.getPublicKey();
   const credentialDPoP = await (0, _ioWalletOauth.createTokenDPoP)({
     callbacks: {
       ..._callbacks.partialCallbacks,
-      signJwt: async (_, payload) => ({
-        jwt: await new _ioReactNativeJwt.SignJWT(dPopCryptoContext).setPayload(payload).sign(),
-        signerJwk: dPopSignerJwk
-      })
+      signJwt: (0, _callbacks.createSignJwtFromCryptoContext)(dPopCryptoContext)
     },
     signer: {
       method: "jwk",
       alg: "ES256",
-      publicJwk: dPopSignerJwk
+      publicJwk: await dPopCryptoContext.getPublicKey()
     },
+    jti: (0, _uuid.v4)(),
     tokenRequest: {
       method: "POST",
       url: issuerConf.credential_endpoint

package/lib/commonjs/credential/issuance/v1.3.3/05-obtain-credential.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_ioWalletOauth","_ioWalletOid4vci","_ioWalletUtils","_misc","_errors","_logging","_config","_callbacks","_types","requestCredentials","_ref","issuerConf","accessToken","credentialIdentifier","clientId","keyAttestationJwt","credentialCryptoContexts","dPopCryptoContext","appFetch","fetch","c_nonce","nonce_endpoint","method","headers","then","hasStatusOrThrow","res","json","NonceResponse","parse","keys","Promise","all","map","ctx","publicJwk","getPublicKey","cryptoContext","signJwt","jwtSigner","_ref2","header","payload","IoWalletError","find","_ref3","kid","jwt","SignJWT","setProtectedHeader","setPayload","sign","signerJwk","signers","_ref4","alg","credentialRequest","createCredentialRequest","config","sdkConfigV1_3","callbacks","hash","partialCallbacks","credential_identifier","issuerIdentifier","credential_issuer","maxBatchSize","credential_issuance_batch_size","nonce","keyAttestation","dPopSignerJwk","credentialDPoP","createTokenDPoP","_","signer","tokenRequest","url","credential_endpoint","access_token","fetchCredentialResponse","credentialEndpoint","dPoP","catch","handleObtainCredentialError","exports","obtainCredential","credentialDefinition","context","credentialCryptoContext","walletUnitAttestation","ValidationFailed","message","credential_configuration_id","containsCredentialDefinition","authorization_details","some","c","credential_identifiers","includes","Logger","log","LogLevel","ERROR","credentialRes","DEBUG","JSON","stringify","issuerCredentialConfig","credential_configurations_supported","credential","credentials","at","format","obtainCredentialsBatch","_ref5","e","SdkUnexpectedStatusCodeError","ResponseErrorBuilder","IssuerResponseError","handle","code","IssuerResponseErrorCodes","CredentialInvalidStatus","CredentialRequestFailed","buildFrom"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/05-obtain-credential.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,cAAA,GAAAD,OAAA;AAKA,IAAAE,gBAAA,GAAAF,OAAA;AAIA,IAAAG,cAAA,GAAAH,OAAA;AACA,IAAAI,KAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AAOA,IAAAM,QAAA,GAAAN,OAAA;AACA,IAAAO,OAAA,GAAAP,OAAA;AACA,IAAAQ,UAAA,GAAAR,OAAA;AAEA,IAAAS,MAAA,GAAAT,OAAA;AAcA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMU,kBAAkB,GAAG,MAAAC,IAAA,IASP;EAAA,IATc;IACvCC,UAAU;IACVC,WAAW;IACXC,oBAAoB;IACpBC,QAAQ;IACRC,iBAAiB;IACjBC,wBAAwB;IACxBC,iBAAiB;IACjBC,QAAQ,GAAGC;EACQ,CAAC,GAAAT,IAAA;EACpB,MAAM;IAAEU;EAAQ,CAAC,GAAG,MAAMF,QAAQ,CAACP,UAAU,CAACU,cAAc,EAAE;IAC5DC,MAAM,EAAE,MAAM;IACdC,OAAO,EAAE;MAAE,cAAc,EAAE;IAAmB;EAChD,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBH,IAAI,CAACI,oBAAa,CAACC,KAAK,CAAC;EAE5B,MAAMC,IAAI,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC5BhB,wBAAwB,CAACiB,GAAG,CAAC,MAAOC,GAAG,IAAK;IAC1C,MAAMC,SAAS,GAAG,MAAMD,GAAG,CAACE,YAAY,CAAC,CAAC;IAC1C,OAAO;MAAED,SAAS;MAAEE,aAAa,EAAEH;IAAI,CAAC;EAC1C,CAAC,CACH,CAAC;EAED,MAAMI,OAAmC,GAAG,MAAAA,CAC1CC,SAAS,EAAAC,KAAA,KAEN;IAAA,IADH;MAAEC,MAAM;MAAEC;IAAQ,CAAC,GAAAF,KAAA;IAEnB,IAAID,SAAS,CAACjB,MAAM,KAAK,KAAK,EAAE;MAC9B,MAAM,IAAIqB,qBAAa,CAAE,8BAA6BJ,SAAS,CAACjB,MAAO,EAAC,CAAC;IAC3E;IAEA,MAAM;MAAEe;IAAc,CAAC,GACrBP,IAAI,CAACc,IAAI,CAACC,KAAA;MAAA,IAAC;QAAEV;MAAU,CAAC,GAAAU,KAAA;MAAA,OAAKV,SAAS,CAACW,GAAG,KAAKP,SAAS,CAACJ,SAAS,CAACW,GAAG;IAAA,EAAC,IACvE,CAAC,CAAC;IAEJ,IAAI,CAACT,aAAa,EAAE;MAClB,MAAM,IAAIM,qBAAa,CACpB,wCAAuCJ,SAAS,CAACJ,SAAS,CAACW,GAAI,EAClE,CAAC;IACH;IAEA,OAAO;MACLC,GAAG,EAAE,MAAM,IAAIC,yBAAO,CAACX,aAAa,CAAC,CAClCY,kBAAkB,CAACR,MAAM,CAAC,CAC1BS,UAAU,CAACR,OAAO,CAAC,CACnBS,IAAI,CAAC,CAAC;MACTC,SAAS,EAAEb,SAAS,CAACJ;IACvB,CAAC;EACH,CAAC;EAED,MAAMkB,OAAO,GAAGvB,IAAI,CAACG,GAAG,CAAeqB,KAAA;IAAA,IAAC;MAAEnB;IAAU,CAAC,GAAAmB,KAAA;IAAA,OAAM;MACzDC,GAAG,EAAE,OAAO;MACZjC,MAAM,EAAE,KAAK;MACba;IACF,CAAC;EAAA,CAAC,CAAC;EAEH,MAAMqB,iBAAiB,GAAG,MAAM,IAAAC,wCAAuB,EAAC;IACtDC,MAAM,EAAEC,qBAAa;IACrBC,SAAS,EAAE;MACTC,IAAI,EAAEC,2BAAgB,CAACD,IAAI;MAC3BvB;IACF,CAAC;IACDxB,QAAQ;IACRiD,qBAAqB,EAAElD,oBAAoB;IAC3CmD,gBAAgB,EAAErD,UAAU,CAACsD,iBAAiB;IAC9CC,YAAY,EAAEvD,UAAU,CAACwD,8BAA8B;IACvDC,KAAK,EAAEhD,OAAO;IACdiD,cAAc,EAAEtD,iBAAiB;IACjCsC;EACF,CAAC,CAAC;EAEF,MAAMiB,aAAa,GAAG,MAAMrD,iBAAiB,CAACmB,YAAY,CAAC,CAAC;EAE5D,MAAMmC,cAAc,GAAG,MAAM,IAAAC,8BAAe,EAAC;IAC3CZ,SAAS,EAAE;MACT,GAAGE,2BAAgB;MACnBxB,OAAO,EAAE,MAAAA,CAAOmC,CAAC,EAAE/B,OAAO,MAAM;QAC9BK,GAAG,EAAE,MAAM,IAAIC,yBAAO,CAAC/B,iBAAiB,CAAC,CAACiC,UAAU,CAACR,OAAO,CAAC,CAACS,IAAI,CAAC,CAAC;QACpEC,SAAS,EAAEkB;MACb,CAAC;IACH,CAAC;IACDI,MAAM,EAAE;MACNpD,MAAM,EAAE,KAAK;MACbiC,GAAG,EAAE,OAAO;MACZpB,SAAS,EAAEmC;IACb,CAAC;IACDK,YAAY,EAAE;MACZrD,MAAM,EAAE,MAAM;MACdsD,GAAG,EAAEjE,UAAU,CAACkE;IAClB,CAAC;IACDjE,WAAW,EAAEA,WAAW,CAACkE;EAC3B,CAAC,CAAC;EAEF,OAAO,MAAM,IAAAC,wCAAuB,EAAC;IACnCnB,SAAS,EAAE;MACTzC,KAAK,EAAED;IACT,CAAC;IACD8D,kBAAkB,EAAErE,UAAU,CAACkE,mBAAmB;IAClDrB,iBAAiB,EAAEA,iBAAiB;IACpC5C,WAAW,EAAEA,WAAW,CAACkE,YAAY;IACrCG,IAAI,EAAEV,cAAc,CAACxB;EACvB,CAAC,CAAC,CAACmC,KAAK,CAACC,2BAA2B,CAAC;AACvC,CAAC;AAACC,OAAA,CAAA3E,kBAAA,GAAAA,kBAAA;AAEK,MAAM4E,gBAAiD,GAAG,MAAAA,CAC/D1E,UAAU,EACVC,WAAW,EACXE,QAAQ,EACRwE,oBAAoB,EACpBC,OAAO,KACJ;EACH,MAAM;IACJC,uBAAuB;IACvBvE,iBAAiB;IACjBwE,qBAAqB;IACrBvE,QAAQ,GAAGC;EACb,CAAC,GAAGoE,OAAO;EACX,IAAI,CAACE,qBAAqB,EAAE;IAC1B,MAAM,IAAIC,wBAAgB,CAAC;MACzBC,OAAO,EACL;IACJ,CAAC,CAAC;EACJ;EAEA,MAAM;IAAEC,2BAA2B;IAAE7B;EAAsB,CAAC,GAC1DuB,oBAAoB;;EAEtB;EACA,MAAMO,4BAA4B,GAAGjF,WAAW,CAACkF,qBAAqB,CAACC,IAAI,CACxEC,CAAC,IACAA,CAAC,CAACJ,2BAA2B,KAAKA,2BAA2B,KAC5D7B,qBAAqB,GAClBiC,CAAC,CAACC,sBAAsB,CAACC,QAAQ,CAACnC,qBAAqB,CAAC,GACxD,IAAI,CACZ,CAAC;EAED,IAAI,CAAC8B,4BAA4B,EAAE;IACjCM,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,gEAA+D1F,WAAW,CAACkF,qBAAsB,EACpG,CAAC;IACD,MAAM,IAAIJ,wBAAgB,CAAC;MACzBC,OAAO,EACL;IACJ,CAAC,CAAC;EACJ;EAEA,MAAMY,aAAa,GAAG,MAAM9F,kBAAkB,CAAC;IAC7CE,UAAU;IACVC,WAAW;IACXE,QAAQ;IACRE,wBAAwB,EAAE,CAACwE,uBAAuB,CAAC;IACnD3E,oBAAoB,EAAEkD,qBAAsB;IAC5C9C,iBAAiB;IACjBF,iBAAiB,EAAE0E,qBAAqB;IACxCvE;EACF,CAAC,CAAC;EAEFiF,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACG,KAAK,EACb,wBAAuBC,IAAI,CAACC,SAAS,CAACH,aAAa,CAAE,EACxD,CAAC;;EAED;EACA,MAAMI,sBAAsB,GAC1BhG,UAAU,CAACiG,mCAAmC,CAAChB,2BAA2B,CAAC;EAE7E,IAAI,gBAAgB,IAAIW,aAAa,EAAE;IACrC,MAAM,IAAI5D,qBAAa,CAAC,oCAAoC,CAAC;EAC/D;;EAEA;EACA,OAAO;IACLkE,UAAU,EAAEN,aAAa,CAACO,WAAW,CAACC,EAAE,CAAC,CAAC,CAAC,CAAEF,UAAU;IACvDG,MAAM,EAAEL,sBAAsB,CAAEK;EAClC,CAAC;AACH,CAAC;AAAC5B,OAAA,CAAAC,gBAAA,GAAAA,gBAAA;AAEK,MAAM4B,sBAA6D,GACxE,MAAAA,CAAOtG,UAAU,EAAEC,WAAW,EAAEE,QAAQ,EAAEwE,oBAAoB,EAAEC,OAAO,KAAK;EAC1E,MAAM;IACJvE,wBAAwB;IACxBC,iBAAiB;IACjBwE,qBAAqB;IACrBvE,QAAQ,GAAGC;EACb,CAAC,GAAGoE,OAAO;EACX,IAAI,CAACE,qBAAqB,EAAE;IAC1B,MAAM,IAAIC,wBAAgB,CAAC;MACzBC,OAAO,EACL;IACJ,CAAC,CAAC;EACJ;EAEA,MAAM;IAAEC,2BAA2B;IAAE7B;EAAsB,CAAC,GAC1DuB,oBAAoB;EAEtB,MAAMiB,aAAa,GAAG,MAAM9F,kBAAkB,CAAC;IAC7CE,UAAU;IACVC,WAAW;IACXE,QAAQ;IACRE,wBAAwB;IACxBH,oBAAoB,EAAEkD,qBAAqB;IAC3C9C,iBAAiB;IACjBF,iBAAiB,EAAE0E,qBAAqB;IACxCvE;EACF,CAAC,CAAC;;EAEF;EACA,MAAMyF,sBAAsB,GAC1BhG,UAAU,CAACiG,mCAAmC,CAC5ChB,2BAA2B,CAC5B;EAEH,IAAI,gBAAgB,IAAIW,aAAa,EAAE;IACrC,MAAM,IAAI5D,qBAAa,CAAC,8CAA8C,CAAC;EACzE;EAEA,OAAO4D,aAAa,CAACO,WAAW,CAAC7E,GAAG,CAACiF,KAAA;IAAA,IAAC;MAAEL;IAAW,CAAC,GAAAK,KAAA;IAAA,OAAM;MACxDL,UAAU;MACVG,MAAM,EAAEL,sBAAsB,CAAEK;IAClC,CAAC;EAAA,CAAC,CAAC;AACL,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AALA5B,OAAA,CAAA6B,sBAAA,GAAAA,sBAAA;AAMA,MAAM9B,2BAA2B,GAAIgC,CAAU,IAAK;EAClDhB,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAG,8CAA6Ca,CAAE,EAAC,CAAC;EAE7E,IAAI,EAAEA,CAAC,YAAYC,wCAA4B,CAAC,EAAE;IAChD,MAAMD,CAAC;EACT;EAEA,MAAM,IAAIE,4BAAoB,CAACC,2BAAmB,CAAC,CAChDC,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACC,uBAAuB;IACtD/B,OAAO,EAAE;EACX,CAAC,CAAC,CACD4B,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACC,uBAAuB;IACtD/B,OAAO,EAAE;EACX,CAAC,CAAC,CACD4B,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACE,uBAAuB;IACtDhC,OAAO,EAAE;EACX,CAAC,CAAC,CACDiC,SAAS,CAACT,CAAC,CAAC;AACjB,CAAC"}
+{"version":3,"names":["_ioReactNativeJwt","require","_ioWalletOauth","_ioWalletOid4vci","_ioWalletUtils","_uuid","_misc","_errors","_logging","_config","_callbacks","_types","requestCredentials","_ref","issuerConf","accessToken","credentialIdentifier","clientId","keyAttestationJwt","credentialCryptoContexts","dPopCryptoContext","appFetch","fetch","c_nonce","nonce_endpoint","method","headers","then","hasStatusOrThrow","res","json","NonceResponse","parse","keys","Promise","all","map","ctx","publicJwk","getPublicKey","cryptoContext","signJwt","jwtSigner","_ref2","header","payload","IoWalletError","find","_ref3","kid","jwt","SignJWT","setProtectedHeader","setPayload","sign","signerJwk","signers","_ref4","alg","credentialRequest","createCredentialRequest","config","sdkConfigV1_3","callbacks","hash","partialCallbacks","credential_identifier","issuerIdentifier","credential_endpoint","maxBatchSize","credential_issuance_batch_size","nonce","keyAttestation","credentialDPoP","createTokenDPoP","createSignJwtFromCryptoContext","signer","jti","uuidv4","tokenRequest","url","access_token","fetchCredentialResponse","credentialEndpoint","dPoP","catch","handleObtainCredentialError","exports","obtainCredential","credentialDefinition","context","credentialCryptoContext","walletUnitAttestation","ValidationFailed","message","credential_configuration_id","containsCredentialDefinition","authorization_details","some","c","credential_identifiers","includes","Logger","log","LogLevel","ERROR","credentialRes","DEBUG","JSON","stringify","issuerCredentialConfig","credential_configurations_supported","credential","credentials","at","format","obtainCredentialsBatch","_ref5","e","SdkUnexpectedStatusCodeError","ResponseErrorBuilder","IssuerResponseError","handle","code","IssuerResponseErrorCodes","CredentialInvalidStatus","CredentialRequestFailed","buildFrom"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/05-obtain-credential.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,cAAA,GAAAD,OAAA;AAKA,IAAAE,gBAAA,GAAAF,OAAA;AAIA,IAAAG,cAAA,GAAAH,OAAA;AACA,IAAAI,KAAA,GAAAJ,OAAA;AACA,IAAAK,KAAA,GAAAL,OAAA;AACA,IAAAM,OAAA,GAAAN,OAAA;AAOA,IAAAO,QAAA,GAAAP,OAAA;AACA,IAAAQ,OAAA,GAAAR,OAAA;AACA,IAAAS,UAAA,GAAAT,OAAA;AAKA,IAAAU,MAAA,GAAAV,OAAA;AAcA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMW,kBAAkB,GAAG,MAAAC,IAAA,IASP;EAAA,IATc;IACvCC,UAAU;IACVC,WAAW;IACXC,oBAAoB;IACpBC,QAAQ;IACRC,iBAAiB;IACjBC,wBAAwB;IACxBC,iBAAiB;IACjBC,QAAQ,GAAGC;EACQ,CAAC,GAAAT,IAAA;EACpB,MAAM;IAAEU;EAAQ,CAAC,GAAG,MAAMF,QAAQ,CAACP,UAAU,CAACU,cAAc,EAAE;IAC5DC,MAAM,EAAE,MAAM;IACdC,OAAO,EAAE;MAAE,cAAc,EAAE;IAAmB;EAChD,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBH,IAAI,CAACI,oBAAa,CAACC,KAAK,CAAC;EAE5B,MAAMC,IAAI,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC5BhB,wBAAwB,CAACiB,GAAG,CAAC,MAAOC,GAAG,IAAK;IAC1C,MAAMC,SAAS,GAAG,MAAMD,GAAG,CAACE,YAAY,CAAC,CAAC;IAC1C,OAAO;MAAED,SAAS;MAAEE,aAAa,EAAEH;IAAI,CAAC;EAC1C,CAAC,CACH,CAAC;EAED,MAAMI,OAAmC,GAAG,MAAAA,CAC1CC,SAAS,EAAAC,KAAA,KAEN;IAAA,IADH;MAAEC,MAAM;MAAEC;IAAQ,CAAC,GAAAF,KAAA;IAEnB,IAAID,SAAS,CAACjB,MAAM,KAAK,KAAK,EAAE;MAC9B,MAAM,IAAIqB,qBAAa,CAAE,8BAA6BJ,SAAS,CAACjB,MAAO,EAAC,CAAC;IAC3E;IAEA,MAAM;MAAEe;IAAc,CAAC,GACrBP,IAAI,CAACc,IAAI,CAACC,KAAA;MAAA,IAAC;QAAEV;MAAU,CAAC,GAAAU,KAAA;MAAA,OAAKV,SAAS,CAACW,GAAG,KAAKP,SAAS,CAACJ,SAAS,CAACW,GAAG;IAAA,EAAC,IACvE,CAAC,CAAC;IAEJ,IAAI,CAACT,aAAa,EAAE;MAClB,MAAM,IAAIM,qBAAa,CACpB,wCAAuCJ,SAAS,CAACJ,SAAS,CAACW,GAAI,EAClE,CAAC;IACH;IAEA,OAAO;MACLC,GAAG,EAAE,MAAM,IAAIC,yBAAO,CAACX,aAAa,CAAC,CAClCY,kBAAkB,CAACR,MAAM,CAAC,CAC1BS,UAAU,CAACR,OAAO,CAAC,CACnBS,IAAI,CAAC,CAAC;MACTC,SAAS,EAAEb,SAAS,CAACJ;IACvB,CAAC;EACH,CAAC;EAED,MAAMkB,OAAO,GAAGvB,IAAI,CAACG,GAAG,CAAeqB,KAAA;IAAA,IAAC;MAAEnB;IAAU,CAAC,GAAAmB,KAAA;IAAA,OAAM;MACzDC,GAAG,EAAE,OAAO;MACZjC,MAAM,EAAE,KAAK;MACba;IACF,CAAC;EAAA,CAAC,CAAC;EAEH,MAAMqB,iBAAiB,GAAG,MAAM,IAAAC,wCAAuB,EAAC;IACtDC,MAAM,EAAEC,qBAAa;IACrBC,SAAS,EAAE;MACTC,IAAI,EAAEC,2BAAgB,CAACD,IAAI;MAC3BvB;IACF,CAAC;IACDxB,QAAQ;IACRiD,qBAAqB,EAAElD,oBAAoB;IAC3CmD,gBAAgB,EAAErD,UAAU,CAACsD,mBAAmB;IAChDC,YAAY,EAAEvD,UAAU,CAACwD,8BAA8B;IACvDC,KAAK,EAAEhD,OAAO;IACdiD,cAAc,EAAEtD,iBAAiB;IACjCsC;EACF,CAAC,CAAC;EAEF,MAAMiB,cAAc,GAAG,MAAM,IAAAC,8BAAe,EAAC;IAC3CX,SAAS,EAAE;MACT,GAAGE,2BAAgB;MACnBxB,OAAO,EAAE,IAAAkC,yCAA8B,EAACvD,iBAAiB;IAC3D,CAAC;IACDwD,MAAM,EAAE;MACNnD,MAAM,EAAE,KAAK;MACbiC,GAAG,EAAE,OAAO;MACZpB,SAAS,EAAE,MAAMlB,iBAAiB,CAACmB,YAAY,CAAC;IAClD,CAAC;IACDsC,GAAG,EAAE,IAAAC,QAAM,EAAC,CAAC;IACbC,YAAY,EAAE;MACZtD,MAAM,EAAE,MAAM;MACduD,GAAG,EAAElE,UAAU,CAACsD;IAClB,CAAC;IACDrD,WAAW,EAAEA,WAAW,CAACkE;EAC3B,CAAC,CAAC;EAEF,OAAO,MAAM,IAAAC,wCAAuB,EAAC;IACnCnB,SAAS,EAAE;MACTzC,KAAK,EAAED;IACT,CAAC;IACD8D,kBAAkB,EAAErE,UAAU,CAACsD,mBAAmB;IAClDT,iBAAiB,EAAEA,iBAAiB;IACpC5C,WAAW,EAAEA,WAAW,CAACkE,YAAY;IACrCG,IAAI,EAAEX,cAAc,CAACvB;EACvB,CAAC,CAAC,CAACmC,KAAK,CAACC,2BAA2B,CAAC;AACvC,CAAC;AAACC,OAAA,CAAA3E,kBAAA,GAAAA,kBAAA;AAEK,MAAM4E,gBAAiD,GAAG,MAAAA,CAC/D1E,UAAU,EACVC,WAAW,EACXE,QAAQ,EACRwE,oBAAoB,EACpBC,OAAO,KACJ;EACH,MAAM;IACJC,uBAAuB;IACvBvE,iBAAiB;IACjBwE,qBAAqB;IACrBvE,QAAQ,GAAGC;EACb,CAAC,GAAGoE,OAAO;EACX,IAAI,CAACE,qBAAqB,EAAE;IAC1B,MAAM,IAAIC,wBAAgB,CAAC;MACzBC,OAAO,EACL;IACJ,CAAC,CAAC;EACJ;EAEA,MAAM;IAAEC,2BAA2B;IAAE7B;EAAsB,CAAC,GAC1DuB,oBAAoB;;EAEtB;EACA,MAAMO,4BAA4B,GAAGjF,WAAW,CAACkF,qBAAqB,CAACC,IAAI,CACxEC,CAAC,IACAA,CAAC,CAACJ,2BAA2B,KAAKA,2BAA2B,KAC5D7B,qBAAqB,GAClBiC,CAAC,CAACC,sBAAsB,CAACC,QAAQ,CAACnC,qBAAqB,CAAC,GACxD,IAAI,CACZ,CAAC;EAED,IAAI,CAAC8B,4BAA4B,EAAE;IACjCM,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,gEAA+D1F,WAAW,CAACkF,qBAAsB,EACpG,CAAC;IACD,MAAM,IAAIJ,wBAAgB,CAAC;MACzBC,OAAO,EACL;IACJ,CAAC,CAAC;EACJ;EAEA,MAAMY,aAAa,GAAG,MAAM9F,kBAAkB,CAAC;IAC7CE,UAAU;IACVC,WAAW;IACXE,QAAQ;IACRE,wBAAwB,EAAE,CAACwE,uBAAuB,CAAC;IACnD3E,oBAAoB,EAAEkD,qBAAsB;IAC5C9C,iBAAiB;IACjBF,iBAAiB,EAAE0E,qBAAqB;IACxCvE;EACF,CAAC,CAAC;EAEFiF,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACG,KAAK,EACb,wBAAuBC,IAAI,CAACC,SAAS,CAACH,aAAa,CAAE,EACxD,CAAC;;EAED;EACA,MAAMI,sBAAsB,GAC1BhG,UAAU,CAACiG,mCAAmC,CAAChB,2BAA2B,CAAC;EAE7E,IAAI,gBAAgB,IAAIW,aAAa,EAAE;IACrC,MAAM,IAAI5D,qBAAa,CAAC,oCAAoC,CAAC;EAC/D;;EAEA;EACA,OAAO;IACLkE,UAAU,EAAEN,aAAa,CAACO,WAAW,CAACC,EAAE,CAAC,CAAC,CAAC,CAAEF,UAAU;IACvDG,MAAM,EAAEL,sBAAsB,CAAEK;EAClC,CAAC;AACH,CAAC;AAAC5B,OAAA,CAAAC,gBAAA,GAAAA,gBAAA;AAEK,MAAM4B,sBAA6D,GACxE,MAAAA,CAAOtG,UAAU,EAAEC,WAAW,EAAEE,QAAQ,EAAEwE,oBAAoB,EAAEC,OAAO,KAAK;EAC1E,MAAM;IACJvE,wBAAwB;IACxBC,iBAAiB;IACjBwE,qBAAqB;IACrBvE,QAAQ,GAAGC;EACb,CAAC,GAAGoE,OAAO;EACX,IAAI,CAACE,qBAAqB,EAAE;IAC1B,MAAM,IAAIC,wBAAgB,CAAC;MACzBC,OAAO,EACL;IACJ,CAAC,CAAC;EACJ;EAEA,MAAM;IAAEC,2BAA2B;IAAE7B;EAAsB,CAAC,GAC1DuB,oBAAoB;EAEtB,MAAMiB,aAAa,GAAG,MAAM9F,kBAAkB,CAAC;IAC7CE,UAAU;IACVC,WAAW;IACXE,QAAQ;IACRE,wBAAwB;IACxBH,oBAAoB,EAAEkD,qBAAqB;IAC3C9C,iBAAiB;IACjBF,iBAAiB,EAAE0E,qBAAqB;IACxCvE;EACF,CAAC,CAAC;;EAEF;EACA,MAAMyF,sBAAsB,GAC1BhG,UAAU,CAACiG,mCAAmC,CAC5ChB,2BAA2B,CAC5B;EAEH,IAAI,gBAAgB,IAAIW,aAAa,EAAE;IACrC,MAAM,IAAI5D,qBAAa,CAAC,8CAA8C,CAAC;EACzE;EAEA,OAAO4D,aAAa,CAACO,WAAW,CAAC7E,GAAG,CAACiF,KAAA;IAAA,IAAC;MAAEL;IAAW,CAAC,GAAAK,KAAA;IAAA,OAAM;MACxDL,UAAU;MACVG,MAAM,EAAEL,sBAAsB,CAAEK;IAClC,CAAC;EAAA,CAAC,CAAC;AACL,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AALA5B,OAAA,CAAA6B,sBAAA,GAAAA,sBAAA;AAMA,MAAM9B,2BAA2B,GAAIgC,CAAU,IAAK;EAClDhB,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAG,8CAA6Ca,CAAE,EAAC,CAAC;EAE7E,IAAI,EAAEA,CAAC,YAAYC,wCAA4B,CAAC,EAAE;IAChD,MAAMD,CAAC;EACT;EAEA,MAAM,IAAIE,4BAAoB,CAACC,2BAAmB,CAAC,CAChDC,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACC,uBAAuB;IACtD/B,OAAO,EAAE;EACX,CAAC,CAAC,CACD4B,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACC,uBAAuB;IACtD/B,OAAO,EAAE;EACX,CAAC,CAAC,CACD4B,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACE,uBAAuB;IACtDhC,OAAO,EAAE;EACX,CAAC,CAAC,CACDiC,SAAS,CAACT,CAAC,CAAC;AACjB,CAAC"}

package/lib/commonjs/credential/issuance/v1.3.3/06-verify-and-parse-credential.js

@@ -15,7 +15,10 @@ const verifyAndParseCredential = async (issuerConf, credential, credentialConfig
     case "dc+sd-jwt":
       {
         _logging.Logger.log(_logging.LogLevel.DEBUG, "Parsing credential in dc+sd-jwt format");
-        return (0, _verifyAndParseCredential2.verifyAndParseCredentialSdJwt)(issuerConf, credential, credentialConfigurationId, context);
+        return (0, _verifyAndParseCredential2.verifyAndParseCredentialSdJwt)(issuerConf, credential, credentialConfigurationId, {
+          validateCertificateChain: true,
+          ...context
+        }, x509CertRoot);
       }
     case "mso_mdoc":
       {

package/lib/commonjs/credential/issuance/v1.3.3/06-verify-and-parse-credential.js.map

@@ -1 +1 @@
-{"version":3,"names":["_errors","require","_logging","_verifyAndParseCredential","_verifyAndParseCredential2","verifyAndParseCredential","issuerConf","credential","credentialConfigurationId","context","x509CertRoot","_issuerConf$credentia","format","credential_configurations_supported","Logger","log","LogLevel","DEBUG","verifyAndParseCredentialSdJwt","verifyAndParseCredentialMDoc","message","ERROR","IoWalletError","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/06-verify-and-parse-credential.ts"],"mappings":";;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAEA,IAAAE,yBAAA,GAAAF,OAAA;AACA,IAAAG,0BAAA,GAAAH,OAAA;AAEO,MAAMI,wBAAiE,GAC5E,MAAAA,CACEC,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OAAO,EACPC,YAAY,KACT;EAAA,IAAAC,qBAAA;EACH,MAAMC,MAAM,IAAAD,qBAAA,GACVL,UAAU,CAACO,mCAAmC,CAACL,yBAAyB,CAAC,cAAAG,qBAAA,uBAAzEA,qBAAA,CACIC,MAAM;EAEZ,QAAQA,MAAM;IACZ,KAAK,WAAW;MAAE;QAChBE,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAE,wCAAwC,CAAC;QACpE,OAAO,IAAAC,wDAA6B,EAClCZ,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OACF,CAAC;MACH;IACA,KAAK,UAAU;MAAE;QACfK,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAE,uCAAuC,CAAC;QACnE,OAAO,IAAAE,sDAA4B,EACjCb,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OAAO,EACPC,YACF,CAAC;MACH;IAEA;MAAS;QACP,MAAMU,OAAO,GAAI,kCAAiCR,MAAO,EAAC;QAC1DE,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACK,KAAK,EAAED,OAAO,CAAC;QACnC,MAAM,IAAIE,qBAAa,CAACF,OAAO,CAAC;MAClC;EACF;AACF,CAAC;AAACG,OAAA,CAAAlB,wBAAA,GAAAA,wBAAA"}
+{"version":3,"names":["_errors","require","_logging","_verifyAndParseCredential","_verifyAndParseCredential2","verifyAndParseCredential","issuerConf","credential","credentialConfigurationId","context","x509CertRoot","_issuerConf$credentia","format","credential_configurations_supported","Logger","log","LogLevel","DEBUG","verifyAndParseCredentialSdJwt","validateCertificateChain","verifyAndParseCredentialMDoc","message","ERROR","IoWalletError","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/06-verify-and-parse-credential.ts"],"mappings":";;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAEA,IAAAE,yBAAA,GAAAF,OAAA;AACA,IAAAG,0BAAA,GAAAH,OAAA;AAEO,MAAMI,wBAAiE,GAC5E,MAAAA,CACEC,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OAAO,EACPC,YAAY,KACT;EAAA,IAAAC,qBAAA;EACH,MAAMC,MAAM,IAAAD,qBAAA,GACVL,UAAU,CAACO,mCAAmC,CAACL,yBAAyB,CAAC,cAAAG,qBAAA,uBAAzEA,qBAAA,CACIC,MAAM;EAEZ,QAAQA,MAAM;IACZ,KAAK,WAAW;MAAE;QAChBE,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAE,wCAAwC,CAAC;QACpE,OAAO,IAAAC,wDAA6B,EAClCZ,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzB;UAAEW,wBAAwB,EAAE,IAAI;UAAE,GAAGV;QAAQ,CAAC,EAC9CC,YACF,CAAC;MACH;IACA,KAAK,UAAU;MAAE;QACfI,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAE,uCAAuC,CAAC;QACnE,OAAO,IAAAG,sDAA4B,EACjCd,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OAAO,EACPC,YACF,CAAC;MACH;IAEA;MAAS;QACP,MAAMW,OAAO,GAAI,kCAAiCT,MAAO,EAAC;QAC1DE,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACM,KAAK,EAAED,OAAO,CAAC;QACnC,MAAM,IAAIE,qBAAa,CAACF,OAAO,CAAC;MAClC;EACF;AACF,CAAC;AAACG,OAAA,CAAAnB,wBAAA,GAAAA,wBAAA"}

package/lib/commonjs/credential/issuance/v1.3.3/index.js

@@ -15,7 +15,8 @@ const Issuance = {
   evaluateIssuerTrust: _evaluateIssuerTrust.evaluateIssuerTrust,
   startUserAuthorization: _startUserAuthorization.startUserAuthorization,
   buildAuthorizationUrl: _completeUserAuthorization.buildAuthorizationUrl,
-  completeUserAuthorizationWithQueryMode: _completeUserAuthorization.completeUserAuthorizationWithQueryMode,
+  completePidUserAuthorizationWithQueryMode: _completeUserAuthorization.completePidUserAuthorizationWithQueryMode,
+  completeEaaUserAuthorizationWithQueryMode: _completeUserAuthorization.completeEaaUserAuthorizationWithQueryMode,
   continueUserAuthorizationWithMRTDPoPChallenge: _completeUserAuthorization.continueUserAuthorizationWithMRTDPoPChallenge,
   getRequestedCredentialToBePresented: _completeUserAuthorization.getRequestedCredentialToBePresented,
   completeUserAuthorizationWithFormPostJwtMode: _completeUserAuthorization.completeUserAuthorizationWithFormPostJwtMode,
@@ -23,7 +24,7 @@ const Issuance = {
   obtainCredential: _obtainCredential.obtainCredential,
   obtainCredentialsBatch: _obtainCredential.obtainCredentialsBatch,
   verifyAndParseCredential: _verifyAndParseCredential.verifyAndParseCredential,
-  MRTDPoP: _mrtdPop.MRTDPoP
+  MRTDPoP: _mrtdPop.MRTDPoPv1_3
 };
 exports.Issuance = Issuance;
 //# sourceMappingURL=index.js.map

package/lib/commonjs/credential/issuance/v1.3.3/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_evaluateIssuerTrust","require","_startUserAuthorization","_completeUserAuthorization","_authorizeAccess","_obtainCredential","_verifyAndParseCredential","_mrtdPop","Issuance","evaluateIssuerTrust","startUserAuthorization","buildAuthorizationUrl","completeUserAuthorizationWithQueryMode","continueUserAuthorizationWithMRTDPoPChallenge","getRequestedCredentialToBePresented","completeUserAuthorizationWithFormPostJwtMode","authorizeAccess","obtainCredential","obtainCredentialsBatch","verifyAndParseCredential","MRTDPoP","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/index.ts"],"mappings":";;;;;;AACA,IAAAA,oBAAA,GAAAC,OAAA;AACA,IAAAC,uBAAA,GAAAD,OAAA;AACA,IAAAE,0BAAA,GAAAF,OAAA;AAOA,IAAAG,gBAAA,GAAAH,OAAA;AACA,IAAAI,iBAAA,GAAAJ,OAAA;AAIA,IAAAK,yBAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAN,OAAA;AAEO,MAAMO,QAAqB,GAAG;EACnCC,mBAAmB,EAAnBA,wCAAmB;EACnBC,sBAAsB,EAAtBA,8CAAsB;EACtBC,qBAAqB,EAArBA,gDAAqB;EACrBC,sCAAsC,EAAtCA,iEAAsC;EACtCC,6CAA6C,EAA7CA,wEAA6C;EAC7CC,mCAAmC,EAAnCA,8DAAmC;EACnCC,4CAA4C,EAA5CA,uEAA4C;EAC5CC,eAAe,EAAfA,gCAAe;EACfC,gBAAgB,EAAhBA,kCAAgB;EAChBC,sBAAsB,EAAtBA,wCAAsB;EACtBC,wBAAwB,EAAxBA,kDAAwB;EACxBC,OAAO,EAAPA;AACF,CAAC;AAACC,OAAA,CAAAb,QAAA,GAAAA,QAAA"}
+{"version":3,"names":["_evaluateIssuerTrust","require","_startUserAuthorization","_completeUserAuthorization","_authorizeAccess","_obtainCredential","_verifyAndParseCredential","_mrtdPop","Issuance","evaluateIssuerTrust","startUserAuthorization","buildAuthorizationUrl","completePidUserAuthorizationWithQueryMode","completeEaaUserAuthorizationWithQueryMode","continueUserAuthorizationWithMRTDPoPChallenge","getRequestedCredentialToBePresented","completeUserAuthorizationWithFormPostJwtMode","authorizeAccess","obtainCredential","obtainCredentialsBatch","verifyAndParseCredential","MRTDPoP","MRTDPoPv1_3","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/index.ts"],"mappings":";;;;;;AACA,IAAAA,oBAAA,GAAAC,OAAA;AACA,IAAAC,uBAAA,GAAAD,OAAA;AACA,IAAAE,0BAAA,GAAAF,OAAA;AAQA,IAAAG,gBAAA,GAAAH,OAAA;AACA,IAAAI,iBAAA,GAAAJ,OAAA;AAIA,IAAAK,yBAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAN,OAAA;AAEO,MAAMO,QAAqB,GAAG;EACnCC,mBAAmB,EAAnBA,wCAAmB;EACnBC,sBAAsB,EAAtBA,8CAAsB;EACtBC,qBAAqB,EAArBA,gDAAqB;EACrBC,yCAAyC,EAAzCA,oEAAyC;EACzCC,yCAAyC,EAAzCA,oEAAyC;EACzCC,6CAA6C,EAA7CA,wEAA6C;EAC7CC,mCAAmC,EAAnCA,8DAAmC;EACnCC,4CAA4C,EAA5CA,uEAA4C;EAC5CC,eAAe,EAAfA,gCAAe;EACfC,gBAAgB,EAAhBA,kCAAgB;EAChBC,sBAAsB,EAAtBA,wCAAsB;EACtBC,wBAAwB,EAAxBA,kDAAwB;EACxBC,OAAO,EAAEC;AACX,CAAC;AAACC,OAAA,CAAAf,QAAA,GAAAA,QAAA"}

package/lib/commonjs/credential/issuance/v1.3.3/mappers.js

@@ -32,6 +32,7 @@ const mapToIssuerConfig = (0, _mappers.createMapper)(x => {
   const {
     oauth_authorization_server,
     openid_credential_issuer,
+    openid_credential_verifier,
     federation_entity
   } = x.metadata;
   (0, _misc.assert)(oauth_authorization_server, "oauth_authorization_server is required in Issuer metadata");
@@ -41,12 +42,13 @@ const mapToIssuerConfig = (0, _mappers.createMapper)(x => {
     credential_endpoint: openid_credential_issuer.credential_endpoint,
     credential_issuer: openid_credential_issuer.credential_issuer,
     credential_configurations_supported: mapCredentialConfigurationsSupported(openid_credential_issuer),
-    keys: openid_credential_issuer.jwks.keys,
+    keys: [...openid_credential_issuer.jwks.keys, ...oauth_authorization_server.jwks.keys],
     pushed_authorization_request_endpoint: oauth_authorization_server.pushed_authorization_request_endpoint,
     token_endpoint: oauth_authorization_server.token_endpoint,
-    nonce_endpoint: openid_credential_issuer.nonce_endpoint,
+    nonce_endpoint: openid_credential_issuer.nonce_endpoint ?? "",
     federation_entity: federation_entity ?? {},
-    credential_issuance_batch_size: (_openid_credential_is = openid_credential_issuer.batch_credential_issuance) === null || _openid_credential_is === void 0 ? void 0 : _openid_credential_is.batch_size
+    credential_issuance_batch_size: (_openid_credential_is = openid_credential_issuer.batch_credential_issuance) === null || _openid_credential_is === void 0 ? void 0 : _openid_credential_is.batch_size,
+    encrypted_response_enc_values_supported: openid_credential_verifier === null || openid_credential_verifier === void 0 ? void 0 : openid_credential_verifier.encrypted_response_enc_values_supported
   };
 }, {
   outputSchema: _IssuerConfig.IssuerConfig
@@ -55,17 +57,14 @@ const mapToIssuerConfig = (0, _mappers.createMapper)(x => {
 exports.mapToIssuerConfig = mapToIssuerConfig;
 const mapToRequestObject = (0, _mappers.createMapper)(_ref2 => {
   let {
+    header,
     payload
   } = _ref2;
   return {
-    iss: payload.iss ?? "UNKNOWN_ISSUER",
-    client_id: payload.client_id,
-    dcql_query: payload.dcql_query,
-    nonce: payload.nonce,
-    response_uri: payload.response_uri,
-    state: payload.state,
-    response_mode: payload.response_mode,
-    response_type: payload.response_type
+    ...payload,
+    iss: payload.iss ?? "",
+    trust_chain: header.trust_chain,
+    x5c: header.x5c
   };
 });
 exports.mapToRequestObject = mapToRequestObject;