@pagopa/io-react-native-wallet 3.4.1 → 3.4.3

package/lib/module/credential/issuance/v1.3.3/03-complete-user-authorization.js.map

@@ -1 +1 @@
-{"version":3,"names":["AuthorizationErrorShape","AuthorizationResultShape","parseUrl","createAuthorizationResponse","parseAuthorizeRequest","fetchAuthorizationResponse","sendAuthorizationResponseAndExtractCode","parseMrtdChallenge","AuthorizationError","AuthorizationIdpError","LogLevel","Logger","RemotePresentation","RemotePresentationFlow","createVerifyJwtFromJwks","partialCallbacks","sdkConfigV1_3","sdkConfigV1_4","IoWalletError","IssuerResponseError","mapToRequestObject","hasStatusOrThrow","continueUserAuthorizationWithMRTDPoPChallenge","authRedirectUrl","log","DEBUG","parsedChallenge","redirectUrl","challenge_info","challengeJwt","err","errorMessage","Error","message","ERROR","buildAuthorizationUrl","issuerRequestUri","clientId","issuerConf","idpHint","authzRequestEndpoint","authorization_endpoint","params","URLSearchParams","client_id","request_uri","append","authUrl","completePidUserAuthorizationWithQueryMode","query","parseAuthorizationResponse","getRequestedCredentialToBePresented","appFetch","arguments","length","undefined","fetch","toString","requestObjectJwt","method","then","res","text","parsedAuthRequest","config","callbacks","verifyJwt","keys","completeUserAuthorizationWithFormPostJwtMode","requestObject","issuerConfig","pid","_ref","authzResponse","processPidPresentationAndCreateAuthzResponse","issuerSigKey","find","key","use","authorizationResponseJarm","jarm","responseJwe","iss","state","presentationResponseUri","response_uri","signer","alg","publicJwk","completeEaaUserAuthorizationWithQueryMode","clientRedirectUri","JSON","stringify","redirect_uri","response","catch","ok","finalRedirectUri","url","startsWith","authRes","authResParsed","safeParse","success","authErr","error","data","error_description","_ref2","dcqlQueryResult","evaluateDcqlQuery","dcql_query","remotePresentation","prepareRemotePresentations","nonce","responseUri","vp_token","presentations","reduce","acc","_ref3","credentialId","vpToken","rpJwks","jwks","encrypted_response_enc_values_supported","encryptJwe","generateRandom"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/03-complete-user-authorization.ts"],"mappings":"AAAA,SACEA,uBAAuB,EACvBC,wBAAwB,QAEnB,qBAAqB;AAC5B,OAAOC,QAAQ,MAAM,WAAW;AAEhC,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,0BAA0B,QAErB,0BAA0B;AACjC,SAASC,uCAAuC,QAAQ,2BAA2B;AAEnF,SAASC,kBAAkB,QAAQ,0BAA0B;AAC7D,SAASC,kBAAkB,EAAEC,qBAAqB,QAAQ,kBAAkB;AAC5E,SAASC,QAAQ,EAAEC,MAAM,QAAQ,wBAAwB;AACzD,SAASC,kBAAkB,IAAIC,sBAAsB,QAAQ,2BAA2B;AACxF,SACEC,uBAAuB,EACvBC,gBAAgB,QACX,0BAA0B;AACjC,SAASC,aAAa,EAAEC,aAAa,QAAQ,uBAAuB;AACpE,SAASC,aAAa,EAAEC,mBAAmB,QAAQ,uBAAuB;AAE1E,SAASC,kBAAkB,QAAQ,WAAW;AAE9C,SAASC,gBAAgB,QAAQ,qBAAqB;AAEtD,OAAO,MAAMC,6CAA2G,GACtH,MAAOC,eAAe,IAAK;EACzBZ,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,0GACF,CAAC;EACD,IAAI;IACF,MAAMC,eAAe,GAAGnB,kBAAkB,CAAC;MACzCoB,WAAW,EAAEJ;IACf,CAAC,CAAC;IACF,OAAO;MAAEK,cAAc,EAAEF,eAAe,CAACG;IAAa,CAAC;EACzD,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAMC,YAAY,GAChBD,GAAG,YAAYE,KAAK,GAAGF,GAAG,CAACG,OAAO,GAAG,+BAA+B;IACtEtB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,mDAAkDH,YAAa,EAClE,CAAC;IACD,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;AACF,CAAC;AAEH,OAAO,MAAMI,qBAA2D,GACtE,MAAAA,CAAOC,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,OAAO,KAAK;EACzD,MAAMC,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAE9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEF,IAAIG,OAAO,EAAE;IACXG,MAAM,CAACI,MAAM,CAAC,SAAS,EAAEP,OAAO,CAAC;EACnC;EAEA,MAAMQ,OAAO,GAAI,GAAEP,oBAAqB,IAAGE,MAAO,EAAC;EAEnD,OAAO;IAAEK;EAAQ,CAAC;AACpB,CAAC;AAEH,OAAO,MAAMC,yCAAmG,GAC9G,MAAOzB,eAAe,IAAK;EACzBZ,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,sFACF,CAAC;EACD,MAAMwB,KAAK,GAAG/C,QAAQ,CAACqB,eAAe,CAAC,CAAC0B,KAAK;EAE7C,OAAOC,0BAA0B,CAACD,KAAK,CAAC;AAC1C,CAAC;AAEH,OAAO,MAAME,mCAAuF,GAClG,eAAAA,CAAOf,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAuB;EAAA,IAArBc,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;EAC7D7C,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,kFACF,CAAC;EAED,MAAMe,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAC9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEFzB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACb,oCAAmCe,oBAAqB,IAAGE,MAAM,CAACe,QAAQ,CAAC,CAAE,EAChF,CAAC;EAED,MAAMC,gBAAgB,GAAG,MAAMN,QAAQ,CACpC,GAAEZ,oBAAqB,IAAGE,MAAM,CAACe,QAAQ,CAAC,CAAE,EAAC,EAC9C;IAAEE,MAAM,EAAE;EAAM,CAClB,CAAC,CACEC,IAAI,CAACvC,gBAAgB,CAAC,GAAG,EAAEF,mBAAmB,CAAC,CAAC,CAChDyC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;EAE5B,MAAMC,iBAAiB,GAAG,MAAM3D,qBAAqB,CAAC;IACpD4D,MAAM,EAAEhD,aAAa;IACrB0C,gBAAgB;IAChBO,SAAS,EAAE;MACTC,SAAS,EAAEpD,uBAAuB,CAACwB,UAAU,CAAC6B,IAAI;IACpD;EACF,CAAC,CAAC;EAEF,OAAO/C,kBAAkB,CAAC2C,iBAAiB,CAAC;AAC9C,CAAC;;AAEH;AACA,OAAO,MAAMK,4CAAyG,GACpH,MAAAA,CAAOC,aAAa,EAAEC,YAAY,EAAEC,GAAG,EAAAC,IAAA,KAA2B;EAAA,IAAzB;IAAEpB,QAAQ,GAAGI;EAAM,CAAC,GAAAgB,IAAA;EAC3D7D,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,kGACF,CAAC;EAED,MAAMgD,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEL,aAAa;IACbC,YAAY;IACZC;EACF,CAAC,CAAC;EAEF5D,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACe,KAAK,EAAG,mBAAkBgD,aAAc,EAAC,CAAC;EAE9D,MAAME,YAAY,GAAGL,YAAY,CAACH,IAAI,CAACS,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,GAAG,KAAK,KAAK,CAAC;EACvE,IAAI,CAACH,YAAY,EAAE;IACjB,MAAM5C,YAAY,GAAG,gDAAgD;IACrEpB,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIb,aAAa,CAACa,YAAY,CAAC;EACvC;EAEA,OAAOzB,uCAAuC,CAAC;IAC7CyE,yBAAyB,EAAEN,aAAa,CAACO,IAAI,CAACC,WAAW;IACzDhB,SAAS,EAAE;MACT,GAAGlD,gBAAgB;MACnByC,KAAK,EAAEJ;IACT,CAAC;IACD8B,GAAG,EAAEb,aAAa,CAACa,GAAG;IACtBC,KAAK,EAAEd,aAAa,CAACc,KAAK,IAAI,EAAE;IAChCC,uBAAuB,EAAEf,aAAa,CAACgB,YAAY;IACnDC,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZ5B,MAAM,EAAE,KAAK;MACb6B,SAAS,EAAEb;IACb;EACF,CAAC,CAAC;AACJ,CAAC;AAEH,OAAO,MAAMc,yCAAmG,GAC9G,eAAAA,CACEpB,aAAa,EACbC,YAAY,EACZC,GAAG,EACHmB,iBAAiB,EAEd;EAAA,IADH;IAAEtC,QAAQ,GAAGI;EAAM,CAAC,GAAAH,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEzB1C,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,0FACF,CAAC;EAED,MAAMgD,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEL,aAAa;IACbC,YAAY;IACZC;EACF,CAAC,CAAC;EAEF5D,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACb,mBAAkBkE,IAAI,CAACC,SAAS,CAACnB,aAAa,CAAE,EACnD,CAAC;EAED,MAAM;IAAEoB;EAAa,CAAC,GAAG,MAAMxF,0BAA0B,CAAC;IACxD0E,yBAAyB,EAAEN,aAAa,CAACO,IAAI,CAACC,WAAW;IACzDG,uBAAuB,EAAEf,aAAa,CAACgB,YAAY;IACnDpB,SAAS,EAAE;MACT,GAAGlD,gBAAgB;MACnByC,KAAK,EAAEJ;IACT;EACF,CAAC,CAAC;EAEF,IAAI,CAACyC,YAAY,EAAE;IACjB,MAAM9D,YAAY,GAChB,2FAA2F;IAC7FpB,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;EAEA,MAAM+D,QAAQ,GAAG,MAAM1C,QAAQ,CAACyC,YAAY,CAAC,CAACE,KAAK,CAAC,MAAM,IAAI,CAAC;EAE/D,IAAI,CAACD,QAAQ,IAAI,CAACA,QAAQ,CAACE,EAAE,EAAE;IAC7B,MAAMjE,YAAY,GAAI,qEAAoE2D,iBAAkB,mCAAkC;IAC9I/E,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;EAEA,MAAMkE,gBAAgB,GAAGH,QAAQ,CAACI,GAAG;EAErC,IAAI,CAACD,gBAAgB,IAAI,CAACA,gBAAgB,CAACE,UAAU,CAACT,iBAAiB,CAAC,EAAE;IACxE,MAAM3D,YAAY,GAAI,4FAA2F2D,iBAAkB,UAASO,gBAAiB,EAAC;IAC9JtF,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;EAEA,OAAOmB,0BAA0B,CAAChD,QAAQ,CAAC+F,gBAAgB,CAAC,CAAChD,KAAK,CAAC;AACrE,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,0BAA0B,GACrCkD,OAAgB,IACQ;EACxB,MAAMC,aAAa,GAAGpG,wBAAwB,CAACqG,SAAS,CAACF,OAAO,CAAC;EACjE,IAAI,CAACC,aAAa,CAACE,OAAO,EAAE;IAC1B,MAAMC,OAAO,GAAGxG,uBAAuB,CAACsG,SAAS,CAACF,OAAO,CAAC;IAC1D,IAAI,CAACI,OAAO,CAACD,OAAO,EAAE;MACpB5F,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,mDAAkDmE,aAAa,CAACI,KAAK,CAACxE,OAAQ,EACjF,CAAC;MACD,MAAM,IAAIzB,kBAAkB,CAAC6F,aAAa,CAACI,KAAK,CAACxE,OAAO,CAAC,CAAC,CAAC;IAC7D;;IACAtB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,2CAA0CyD,IAAI,CAACC,SAAS,CAACY,OAAO,CAAE,EACrE,CAAC;IACD,MAAM,IAAI/F,qBAAqB,CAC7B+F,OAAO,CAACE,IAAI,CAACD,KAAK,EAClBD,OAAO,CAACE,IAAI,CAACC,iBACf,CAAC;EACH;EACA,OAAON,aAAa,CAACK,IAAI;AAC3B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMhC,4CAA4C,GAAG,MAAAkC,KAAA,IAQH;EAAA,IARU;IAC1DvC,aAAa;IACbC,YAAY;IACZC;EAKF,CAAC,GAAAqC,KAAA;EACC,MAAMC,eAAe,GAAG,MAAMhG,sBAAsB,CAACiG,iBAAiB,CACpEzC,aAAa,CAAC0C,UAAU,EACxB,CAACxC,GAAG,CACN,CAAC;EAED,MAAMyC,kBAAkB,GACtB,MAAMnG,sBAAsB,CAACoG,0BAA0B,CAACJ,eAAe,EAAE;IACvExE,QAAQ,EAAEgC,aAAa,CAACzB,SAAS;IACjCsE,KAAK,EAAE7C,aAAa,CAAC6C,KAAK;IAC1BC,WAAW,EAAE9C,aAAa,CAACgB;EAC7B,CAAC,CAAC;EAEJ,MAAM+B,QAAQ,GAAGJ,kBAAkB,CAACK,aAAa,CAACC,MAAM,CACtD,CAACC,GAAG,EAAAC,KAAA;IAAA,IAAE;MAAEC,YAAY;MAAEC;IAAQ,CAAC,GAAAF,KAAA;IAAA,OAAM;MAAE,GAAGD,GAAG;MAAE,CAACE,YAAY,GAAG,CAACC,OAAO;IAAE,CAAC;EAAA,CAAC,EAC3E,CAAC,CACH,CAAC;EAED,OAAOvH,2BAA2B,CAAC;IACjC;IACA;IACA6D,MAAM,EAAE/C,aAAa;IACrBoD,aAAa;IACbsD,MAAM,EAAE;MACNC,IAAI,EAAE;QAAEzD,IAAI,EAAEG,YAAY,CAACH;MAAK,CAAkB;MAClD0D,uCAAuC,EACrCvD,YAAY,CAACuD;IACjB,CAAC;IACDT,QAAQ;IACRnD,SAAS,EAAE;MACT6D,UAAU,EAAE/G,gBAAgB,CAAC+G,UAAU;MACvCC,cAAc,EAAEhH,gBAAgB,CAACgH;IACnC;EACF,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"names":["AuthorizationErrorShape","AuthorizationResultShape","parseUrl","createAuthorizationResponse","parseAuthorizeRequest","fetchAuthorizationResponse","sendAuthorizationResponseAndExtractCode","parseMrtdChallenge","AuthorizationError","AuthorizationIdpError","LogLevel","Logger","RemotePresentation","RemotePresentationFlow","createVerifyJwtFromJwks","partialCallbacks","sdkConfigV1_3","sdkConfigV1_4","IoWalletError","IssuerResponseError","mapToRequestObject","hasStatusOrThrow","continueUserAuthorizationWithMRTDPoPChallenge","authRedirectUrl","log","DEBUG","parsedChallenge","redirectUrl","challenge_info","challengeJwt","err","errorMessage","Error","message","ERROR","buildAuthorizationUrl","issuerRequestUri","clientId","issuerConf","idpHint","authzRequestEndpoint","authorization_endpoint","params","URLSearchParams","client_id","request_uri","append","authUrl","completePidUserAuthorizationWithQueryMode","query","parseAuthorizationResponse","getRequestedCredentialToBePresented","appFetch","arguments","length","undefined","fetch","toString","requestObjectJwt","method","then","res","text","parsedAuthRequest","config","callbacks","verifyJwt","keys","completeUserAuthorizationWithFormPostJwtMode","requestObject","issuerConfig","pid","_ref","authzResponse","processPidPresentationAndCreateAuthzResponse","issuerSigKey","find","key","use","authorizationResponseJarm","jarm","responseJwe","iss","state","presentationResponseUri","response_uri","signer","alg","publicJwk","completeEaaUserAuthorizationWithQueryMode","clientRedirectUri","fetchFinalRedirectUri","JSON","stringify","redirect_uri","finalRedirectUri","response","catch","ok","url","startsWith","authRes","authResParsed","safeParse","success","authErr","error","data","error_description","_ref2","dcqlQueryResult","evaluateDcqlQuery","dcql_query","remotePresentation","prepareRemotePresentations","nonce","responseUri","vp_token","presentations","reduce","acc","_ref3","credentialId","vpToken","rpJwks","jwks","encrypted_response_enc_values_supported","encryptJwe","generateRandom"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/03-complete-user-authorization.ts"],"mappings":"AAAA,SACEA,uBAAuB,EACvBC,wBAAwB,QAEnB,qBAAqB;AAC5B,OAAOC,QAAQ,MAAM,WAAW;AAEhC,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,0BAA0B,QAErB,0BAA0B;AACjC,SAASC,uCAAuC,QAAQ,2BAA2B;AAEnF,SAASC,kBAAkB,QAAQ,0BAA0B;AAC7D,SAASC,kBAAkB,EAAEC,qBAAqB,QAAQ,kBAAkB;AAC5E,SAASC,QAAQ,EAAEC,MAAM,QAAQ,wBAAwB;AACzD,SAASC,kBAAkB,IAAIC,sBAAsB,QAAQ,2BAA2B;AACxF,SACEC,uBAAuB,EACvBC,gBAAgB,QACX,0BAA0B;AACjC,SAASC,aAAa,EAAEC,aAAa,QAAQ,uBAAuB;AACpE,SAASC,aAAa,EAAEC,mBAAmB,QAAQ,uBAAuB;AAE1E,SAASC,kBAAkB,QAAQ,WAAW;AAE9C,SAASC,gBAAgB,QAAQ,qBAAqB;AAEtD,OAAO,MAAMC,6CAA2G,GACtH,MAAOC,eAAe,IAAK;EACzBZ,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,0GACF,CAAC;EACD,IAAI;IACF,MAAMC,eAAe,GAAGnB,kBAAkB,CAAC;MACzCoB,WAAW,EAAEJ;IACf,CAAC,CAAC;IACF,OAAO;MAAEK,cAAc,EAAEF,eAAe,CAACG;IAAa,CAAC;EACzD,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAMC,YAAY,GAChBD,GAAG,YAAYE,KAAK,GAAGF,GAAG,CAACG,OAAO,GAAG,+BAA+B;IACtEtB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,mDAAkDH,YAAa,EAClE,CAAC;IACD,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;AACF,CAAC;AAEH,OAAO,MAAMI,qBAA2D,GACtE,MAAAA,CAAOC,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,OAAO,KAAK;EACzD,MAAMC,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAE9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEF,IAAIG,OAAO,EAAE;IACXG,MAAM,CAACI,MAAM,CAAC,SAAS,EAAEP,OAAO,CAAC;EACnC;EAEA,MAAMQ,OAAO,GAAI,GAAEP,oBAAqB,IAAGE,MAAO,EAAC;EAEnD,OAAO;IAAEK;EAAQ,CAAC;AACpB,CAAC;AAEH,OAAO,MAAMC,yCAAmG,GAC9G,MAAOzB,eAAe,IAAK;EACzBZ,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,sFACF,CAAC;EACD,MAAMwB,KAAK,GAAG/C,QAAQ,CAACqB,eAAe,CAAC,CAAC0B,KAAK;EAE7C,OAAOC,0BAA0B,CAACD,KAAK,CAAC;AAC1C,CAAC;AAEH,OAAO,MAAME,mCAAuF,GAClG,eAAAA,CAAOf,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAuB;EAAA,IAArBc,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;EAC7D7C,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,kFACF,CAAC;EAED,MAAMe,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAC9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEFzB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACb,oCAAmCe,oBAAqB,IAAGE,MAAM,CAACe,QAAQ,CAAC,CAAE,EAChF,CAAC;EAED,MAAMC,gBAAgB,GAAG,MAAMN,QAAQ,CACpC,GAAEZ,oBAAqB,IAAGE,MAAM,CAACe,QAAQ,CAAC,CAAE,EAAC,EAC9C;IAAEE,MAAM,EAAE;EAAM,CAClB,CAAC,CACEC,IAAI,CAACvC,gBAAgB,CAAC,GAAG,EAAEF,mBAAmB,CAAC,CAAC,CAChDyC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;EAE5B,MAAMC,iBAAiB,GAAG,MAAM3D,qBAAqB,CAAC;IACpD4D,MAAM,EAAEhD,aAAa;IACrB0C,gBAAgB;IAChBO,SAAS,EAAE;MACTC,SAAS,EAAEpD,uBAAuB,CAACwB,UAAU,CAAC6B,IAAI;IACpD;EACF,CAAC,CAAC;EAEF,OAAO/C,kBAAkB,CAAC2C,iBAAiB,CAAC;AAC9C,CAAC;;AAEH;AACA,OAAO,MAAMK,4CAAyG,GACpH,MAAAA,CAAOC,aAAa,EAAEC,YAAY,EAAEC,GAAG,EAAAC,IAAA,KAA2B;EAAA,IAAzB;IAAEpB,QAAQ,GAAGI;EAAM,CAAC,GAAAgB,IAAA;EAC3D7D,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,kGACF,CAAC;EAED,MAAMgD,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEL,aAAa;IACbC,YAAY;IACZC;EACF,CAAC,CAAC;EAEF5D,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACe,KAAK,EAAG,mBAAkBgD,aAAc,EAAC,CAAC;EAE9D,MAAME,YAAY,GAAGL,YAAY,CAACH,IAAI,CAACS,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,GAAG,KAAK,KAAK,CAAC;EACvE,IAAI,CAACH,YAAY,EAAE;IACjB,MAAM5C,YAAY,GAAG,gDAAgD;IACrEpB,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIb,aAAa,CAACa,YAAY,CAAC;EACvC;EAEA,OAAOzB,uCAAuC,CAAC;IAC7CyE,yBAAyB,EAAEN,aAAa,CAACO,IAAI,CAACC,WAAW;IACzDhB,SAAS,EAAE;MACT,GAAGlD,gBAAgB;MACnByC,KAAK,EAAEJ;IACT,CAAC;IACD8B,GAAG,EAAEb,aAAa,CAACa,GAAG;IACtBC,KAAK,EAAEd,aAAa,CAACc,KAAK,IAAI,EAAE;IAChCC,uBAAuB,EAAEf,aAAa,CAACgB,YAAY;IACnDC,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZ5B,MAAM,EAAE,KAAK;MACb6B,SAAS,EAAEb;IACb;EACF,CAAC,CAAC;AACJ,CAAC;AAEH,OAAO,MAAMc,yCAAmG,GAC9G,eAAAA,CACEpB,aAAa,EACbC,YAAY,EACZC,GAAG,EACHmB,iBAAiB,EAEd;EAAA,IADH;IAAEtC,QAAQ,GAAGI,KAAK;IAAEmC;EAAsB,CAAC,GAAAtC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEhD1C,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,0FACF,CAAC;EAED,MAAMgD,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEL,aAAa;IACbC,YAAY;IACZC;EACF,CAAC,CAAC;EAEF5D,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACb,mBAAkBmE,IAAI,CAACC,SAAS,CAACpB,aAAa,CAAE,EACnD,CAAC;EAED,MAAM;IAAEqB;EAAa,CAAC,GAAG,MAAMzF,0BAA0B,CAAC;IACxD0E,yBAAyB,EAAEN,aAAa,CAACO,IAAI,CAACC,WAAW;IACzDG,uBAAuB,EAAEf,aAAa,CAACgB,YAAY;IACnDpB,SAAS,EAAE;MACT,GAAGlD,gBAAgB;MACnByC,KAAK,EAAEJ;IACT;EACF,CAAC,CAAC;EAEF,IAAI,CAAC0C,YAAY,EAAE;IACjB,MAAM/D,YAAY,GAChB,2FAA2F;IAC7FpB,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;EAEA,IAAIgE,gBAAoC;EAExC,IAAIJ,qBAAqB,EAAE;IACzBI,gBAAgB,GAAG,MAAMJ,qBAAqB,CAACG,YAAY,CAAC;EAC9D,CAAC,MAAM;IACL,MAAME,QAAQ,GAAG,MAAM5C,QAAQ,CAAC0C,YAAY,CAAC,CAACG,KAAK,CAAC,MAAM,IAAI,CAAC;IAC/D,IAAI,CAACD,QAAQ,IAAI,CAACA,QAAQ,CAACE,EAAE,EAAE;MAC7B,MAAMnE,YAAY,GAAI,qEAAoE2D,iBAAkB,mCAAkC;MAC9I/E,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;MACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;IAC5C;IACAgE,gBAAgB,GAAGC,QAAQ,CAACG,GAAG;EACjC;EAEA,IAAI,CAACJ,gBAAgB,IAAI,CAACA,gBAAgB,CAACK,UAAU,CAACV,iBAAiB,CAAC,EAAE;IACxE,MAAM3D,YAAY,GAAI,4FAA2F2D,iBAAkB,UAASK,gBAAiB,EAAC;IAC9JpF,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;EAEA,OAAOmB,0BAA0B,CAAChD,QAAQ,CAAC6F,gBAAgB,CAAC,CAAC9C,KAAK,CAAC;AACrE,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,0BAA0B,GACrCmD,OAAgB,IACQ;EACxB,MAAMC,aAAa,GAAGrG,wBAAwB,CAACsG,SAAS,CAACF,OAAO,CAAC;EACjE,IAAI,CAACC,aAAa,CAACE,OAAO,EAAE;IAC1B,MAAMC,OAAO,GAAGzG,uBAAuB,CAACuG,SAAS,CAACF,OAAO,CAAC;IAC1D,IAAI,CAACI,OAAO,CAACD,OAAO,EAAE;MACpB7F,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,mDAAkDoE,aAAa,CAACI,KAAK,CAACzE,OAAQ,EACjF,CAAC;MACD,MAAM,IAAIzB,kBAAkB,CAAC8F,aAAa,CAACI,KAAK,CAACzE,OAAO,CAAC,CAAC,CAAC;IAC7D;;IACAtB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,2CAA0C0D,IAAI,CAACC,SAAS,CAACY,OAAO,CAAE,EACrE,CAAC;IACD,MAAM,IAAIhG,qBAAqB,CAC7BgG,OAAO,CAACE,IAAI,CAACD,KAAK,EAClBD,OAAO,CAACE,IAAI,CAACC,iBACf,CAAC;EACH;EACA,OAAON,aAAa,CAACK,IAAI;AAC3B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMjC,4CAA4C,GAAG,MAAAmC,KAAA,IAQH;EAAA,IARU;IAC1DxC,aAAa;IACbC,YAAY;IACZC;EAKF,CAAC,GAAAsC,KAAA;EACC,MAAMC,eAAe,GAAG,MAAMjG,sBAAsB,CAACkG,iBAAiB,CACpE1C,aAAa,CAAC2C,UAAU,EACxB,CAACzC,GAAG,CACN,CAAC;EAED,MAAM0C,kBAAkB,GACtB,MAAMpG,sBAAsB,CAACqG,0BAA0B,CAACJ,eAAe,EAAE;IACvEzE,QAAQ,EAAEgC,aAAa,CAACzB,SAAS;IACjCuE,KAAK,EAAE9C,aAAa,CAAC8C,KAAK;IAC1BC,WAAW,EAAE/C,aAAa,CAACgB;EAC7B,CAAC,CAAC;EAEJ,MAAMgC,QAAQ,GAAGJ,kBAAkB,CAACK,aAAa,CAACC,MAAM,CACtD,CAACC,GAAG,EAAAC,KAAA;IAAA,IAAE;MAAEC,YAAY;MAAEC;IAAQ,CAAC,GAAAF,KAAA;IAAA,OAAM;MAAE,GAAGD,GAAG;MAAE,CAACE,YAAY,GAAG,CAACC,OAAO;IAAE,CAAC;EAAA,CAAC,EAC3E,CAAC,CACH,CAAC;EAED,OAAOxH,2BAA2B,CAAC;IACjC;IACA;IACA6D,MAAM,EAAE/C,aAAa;IACrBoD,aAAa;IACbuD,MAAM,EAAE;MACNC,IAAI,EAAE;QAAE1D,IAAI,EAAEG,YAAY,CAACH;MAAK,CAAkB;MAClD2D,uCAAuC,EACrCxD,YAAY,CAACwD;IACjB,CAAC;IACDT,QAAQ;IACRpD,SAAS,EAAE;MACT8D,UAAU,EAAEhH,gBAAgB,CAACgH,UAAU;MACvCC,cAAc,EAAEjH,gBAAgB,CAACiH;IACnC;EACF,CAAC,CAAC;AACJ,CAAC"}

package/lib/module/credential/issuance/v1.3.3/mappers.js

@@ -22,23 +22,31 @@ const mapCredentialConfigurationsSupported = oidIssuer => Object.entries(oidIssu
   return acc;
 }, {});
 export const mapToIssuerConfig = createMapper(x => {
-  var _openid_credential_is;
+  var _x$authorization_serv, _openid_credential_is;
   const {
     oauth_authorization_server,
     openid_credential_issuer,
     openid_credential_verifier,
     federation_entity
   } = x.metadata;
-  assert(oauth_authorization_server, "oauth_authorization_server is required in Issuer metadata");
+
+  // The Issuer's own `oauth_authorization_server` always describes the Issuer
+  // itself. When a credential offer selected a *different* Authorization
+  // Server, its metadata is surfaced separately through that server's
+  // federation claims, and the Authorization Server endpoints must be taken
+  // from there. Fall back to the Issuer's own server otherwise.
+  const oauthAuthorizationServer = ((_x$authorization_serv = x.authorization_server_federation_claims) === null || _x$authorization_serv === void 0 || (_x$authorization_serv = _x$authorization_serv.metadata) === null || _x$authorization_serv === void 0 ? void 0 : _x$authorization_serv.oauth_authorization_server) ?? oauth_authorization_server;
+  assert(oauthAuthorizationServer, "oauth_authorization_server is required in Issuer metadata");
   assert(openid_credential_issuer, "openid_credential_issuer is required in Issuer metadata");
   return {
-    authorization_endpoint: oauth_authorization_server.authorization_endpoint,
+    authorization_endpoint: oauthAuthorizationServer.authorization_endpoint,
     credential_endpoint: openid_credential_issuer.credential_endpoint,
     credential_issuer: openid_credential_issuer.credential_issuer,
+    authorization_servers: openid_credential_issuer.authorization_servers,
     credential_configurations_supported: mapCredentialConfigurationsSupported(openid_credential_issuer),
-    keys: [...openid_credential_issuer.jwks.keys, ...oauth_authorization_server.jwks.keys],
-    pushed_authorization_request_endpoint: oauth_authorization_server.pushed_authorization_request_endpoint,
-    token_endpoint: oauth_authorization_server.token_endpoint,
+    keys: [...openid_credential_issuer.jwks.keys, ...oauthAuthorizationServer.jwks.keys],
+    pushed_authorization_request_endpoint: oauthAuthorizationServer.pushed_authorization_request_endpoint,
+    token_endpoint: oauthAuthorizationServer.token_endpoint,
     nonce_endpoint: openid_credential_issuer.nonce_endpoint ?? "",
     federation_entity: federation_entity ?? {},
     credential_issuance_batch_size: (_openid_credential_is = openid_credential_issuer.batch_credential_issuance) === null || _openid_credential_is === void 0 ? void 0 : _openid_credential_is.batch_size,

package/lib/module/credential/issuance/v1.3.3/mappers.js.map

@@ -1 +1 @@
-{"version":3,"names":["assert","createMapper","IssuerConfig","mapCredentialConfigurationsSupported","oidIssuer","Object","entries","credential_configurations_supported","reduce","acc","_ref","_config$credential_me","key","config","format","vct","doctype","scope","display","credential_metadata","claims","map","claim","path","mapToIssuerConfig","x","_openid_credential_is","oauth_authorization_server","openid_credential_issuer","openid_credential_verifier","federation_entity","metadata","authorization_endpoint","credential_endpoint","credential_issuer","keys","jwks","pushed_authorization_request_endpoint","token_endpoint","nonce_endpoint","credential_issuance_batch_size","batch_credential_issuance","batch_size","encrypted_response_enc_values_supported","outputSchema","mapToRequestObject","_ref2","header","payload","iss","trust_chain","x5c"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/mappers.ts"],"mappings":"AAEA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,YAAY,QAAQ,wBAAwB;AAGrD,SAASC,YAAY,QAAQ,qBAAqB;AAOlD,MAAMC,oCAAoC,GACxCC,SAA8C,IAE9CC,MAAM,CAACC,OAAO,CAACF,SAAS,CAACG,mCAAmC,CAAC,CAACC,MAAM,CAClE,CAACC,GAAG,EAAAC,IAAA,KAAoB;EAAA,IAAAC,qBAAA;EAAA,IAAlB,CAACC,GAAG,EAAEC,MAAM,CAAC,GAAAH,IAAA;EACjBD,GAAG,CAACG,GAAG,CAAC,GAAG;IACT,IAAIC,MAAM,CAACC,MAAM,KAAK,WAAW,GAC7B;MAAEA,MAAM,EAAED,MAAM,CAACC,MAAM;MAAEC,GAAG,EAAEF,MAAM,CAACE;IAAI,CAAC,GAC1C;MAAED,MAAM,EAAED,MAAM,CAACC,MAAM;MAAEE,OAAO,EAAEH,MAAM,CAACG;IAAQ,CAAC,CAAC;IACvDC,KAAK,EAAEJ,MAAM,CAACI,KAAK;IACnBC,OAAO,EAAEL,MAAM,CAACM,mBAAmB,CAACD,OAAQ;IAC5CE,MAAM,EACJ,EAAAT,qBAAA,GAAAE,MAAM,CAACM,mBAAmB,CAACC,MAAM,cAAAT,qBAAA,uBAAjCA,qBAAA,CAAmCU,GAAG,CAAEC,KAAK,KAAM;MACjDC,IAAI,EAAED,KAAK,CAACC,IAAI;MAChBL,OAAO,EAAEI,KAAK,CAACJ,OAAO,IAAI;IAC5B,CAAC,CAAC,CAAC,KAAI;EACX,CAAC;EACD,OAAOT,GAAG;AACZ,CAAC,EACD,CAAC,CACH,CAAC;AAEH,OAAO,MAAMe,iBAAiB,GAAGvB,YAAY,CAI1CwB,CAAC,IAAK;EAAA,IAAAC,qBAAA;EACL,MAAM;IACJC,0BAA0B;IAC1BC,wBAAwB;IACxBC,0BAA0B;IAC1BC;EACF,CAAC,GAAGL,CAAC,CAACM,QAAQ;EAEd/B,MAAM,CACJ2B,0BAA0B,EAC1B,2DACF,CAAC;EACD3B,MAAM,CACJ4B,wBAAwB,EACxB,yDACF,CAAC;EAED,OAAO;IACLI,sBAAsB,EAAEL,0BAA0B,CAACK,sBAAsB;IACzEC,mBAAmB,EAAEL,wBAAwB,CAACK,mBAAmB;IACjEC,iBAAiB,EAAEN,wBAAwB,CAACM,iBAAiB;IAC7D3B,mCAAmC,EAAEJ,oCAAoC,CACvEyB,wBACF,CAAC;IACDO,IAAI,EAAE,CACJ,GAAGP,wBAAwB,CAACQ,IAAI,CAACD,IAAI,EACrC,GAAGR,0BAA0B,CAACS,IAAI,CAACD,IAAI,CAC/B;IACVE,qCAAqC,EACnCV,0BAA0B,CAACU,qCAAqC;IAClEC,cAAc,EAAEX,0BAA0B,CAACW,cAAc;IACzDC,cAAc,EAAEX,wBAAwB,CAACW,cAAc,IAAI,EAAE;IAC7DT,iBAAiB,EAAEA,iBAAiB,IAAI,CAAC,CAAC;IAC1CU,8BAA8B,GAAAd,qBAAA,GAC5BE,wBAAwB,CAACa,yBAAyB,cAAAf,qBAAA,uBAAlDA,qBAAA,CAAoDgB,UAAU;IAChEC,uCAAuC,EACrCd,0BAA0B,aAA1BA,0BAA0B,uBAA1BA,0BAA0B,CAAEc;EAChC,CAAC;AACH,CAAC,EACD;EAAEC,YAAY,EAAE1C;AAAa,CAAC,CAAC;AACjC,CAAC;;AAED,OAAO,MAAM2C,kBAAkB,GAAG5C,YAAY,CAG5C6C,KAAA;EAAA,IAAC;IAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAAF,KAAA;EAAA,OAAM;IAC1B,GAAGE,OAAO;IACVC,GAAG,EAAED,OAAO,CAACC,GAAG,IAAI,EAAE;IACtBC,WAAW,EAAEH,MAAM,CAACG,WAAW;IAC/BC,GAAG,EAAEJ,MAAM,CAACI;EACd,CAAC;AAAA,CAAC,CAAC"}
+{"version":3,"names":["assert","createMapper","IssuerConfig","mapCredentialConfigurationsSupported","oidIssuer","Object","entries","credential_configurations_supported","reduce","acc","_ref","_config$credential_me","key","config","format","vct","doctype","scope","display","credential_metadata","claims","map","claim","path","mapToIssuerConfig","x","_x$authorization_serv","_openid_credential_is","oauth_authorization_server","openid_credential_issuer","openid_credential_verifier","federation_entity","metadata","oauthAuthorizationServer","authorization_server_federation_claims","authorization_endpoint","credential_endpoint","credential_issuer","authorization_servers","keys","jwks","pushed_authorization_request_endpoint","token_endpoint","nonce_endpoint","credential_issuance_batch_size","batch_credential_issuance","batch_size","encrypted_response_enc_values_supported","outputSchema","mapToRequestObject","_ref2","header","payload","iss","trust_chain","x5c"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/mappers.ts"],"mappings":"AAEA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,YAAY,QAAQ,wBAAwB;AAGrD,SAASC,YAAY,QAAQ,qBAAqB;AAOlD,MAAMC,oCAAoC,GACxCC,SAA8C,IAE9CC,MAAM,CAACC,OAAO,CAACF,SAAS,CAACG,mCAAmC,CAAC,CAACC,MAAM,CAClE,CAACC,GAAG,EAAAC,IAAA,KAAoB;EAAA,IAAAC,qBAAA;EAAA,IAAlB,CAACC,GAAG,EAAEC,MAAM,CAAC,GAAAH,IAAA;EACjBD,GAAG,CAACG,GAAG,CAAC,GAAG;IACT,IAAIC,MAAM,CAACC,MAAM,KAAK,WAAW,GAC7B;MAAEA,MAAM,EAAED,MAAM,CAACC,MAAM;MAAEC,GAAG,EAAEF,MAAM,CAACE;IAAI,CAAC,GAC1C;MAAED,MAAM,EAAED,MAAM,CAACC,MAAM;MAAEE,OAAO,EAAEH,MAAM,CAACG;IAAQ,CAAC,CAAC;IACvDC,KAAK,EAAEJ,MAAM,CAACI,KAAK;IACnBC,OAAO,EAAEL,MAAM,CAACM,mBAAmB,CAACD,OAAQ;IAC5CE,MAAM,EACJ,EAAAT,qBAAA,GAAAE,MAAM,CAACM,mBAAmB,CAACC,MAAM,cAAAT,qBAAA,uBAAjCA,qBAAA,CAAmCU,GAAG,CAAEC,KAAK,KAAM;MACjDC,IAAI,EAAED,KAAK,CAACC,IAAI;MAChBL,OAAO,EAAEI,KAAK,CAACJ,OAAO,IAAI;IAC5B,CAAC,CAAC,CAAC,KAAI;EACX,CAAC;EACD,OAAOT,GAAG;AACZ,CAAC,EACD,CAAC,CACH,CAAC;AAEH,OAAO,MAAMe,iBAAiB,GAAGvB,YAAY,CAI1CwB,CAAC,IAAK;EAAA,IAAAC,qBAAA,EAAAC,qBAAA;EACL,MAAM;IACJC,0BAA0B;IAC1BC,wBAAwB;IACxBC,0BAA0B;IAC1BC;EACF,CAAC,GAAGN,CAAC,CAACO,QAAQ;;EAEd;EACA;EACA;EACA;EACA;EACA,MAAMC,wBAAwB,GAC5B,EAAAP,qBAAA,GAAAD,CAAC,CAACS,sCAAsC,cAAAR,qBAAA,gBAAAA,qBAAA,GAAxCA,qBAAA,CAA0CM,QAAQ,cAAAN,qBAAA,uBAAlDA,qBAAA,CACIE,0BAA0B,KAAIA,0BAA0B;EAE9D5B,MAAM,CACJiC,wBAAwB,EACxB,2DACF,CAAC;EACDjC,MAAM,CACJ6B,wBAAwB,EACxB,yDACF,CAAC;EAED,OAAO;IACLM,sBAAsB,EAAEF,wBAAwB,CAACE,sBAAsB;IACvEC,mBAAmB,EAAEP,wBAAwB,CAACO,mBAAmB;IACjEC,iBAAiB,EAAER,wBAAwB,CAACQ,iBAAiB;IAC7DC,qBAAqB,EAAET,wBAAwB,CAACS,qBAAqB;IACrE/B,mCAAmC,EAAEJ,oCAAoC,CACvE0B,wBACF,CAAC;IACDU,IAAI,EAAE,CACJ,GAAGV,wBAAwB,CAACW,IAAI,CAACD,IAAI,EACrC,GAAGN,wBAAwB,CAACO,IAAI,CAACD,IAAI,CAC7B;IACVE,qCAAqC,EACnCR,wBAAwB,CAACQ,qCAAqC;IAChEC,cAAc,EAAET,wBAAwB,CAACS,cAAc;IACvDC,cAAc,EAAEd,wBAAwB,CAACc,cAAc,IAAI,EAAE;IAC7DZ,iBAAiB,EAAEA,iBAAiB,IAAI,CAAC,CAAC;IAC1Ca,8BAA8B,GAAAjB,qBAAA,GAC5BE,wBAAwB,CAACgB,yBAAyB,cAAAlB,qBAAA,uBAAlDA,qBAAA,CAAoDmB,UAAU;IAChEC,uCAAuC,EACrCjB,0BAA0B,aAA1BA,0BAA0B,uBAA1BA,0BAA0B,CAAEiB;EAChC,CAAC;AACH,CAAC,EACD;EAAEC,YAAY,EAAE9C;AAAa,CAAC,CAAC;AACjC,CAAC;;AAED,OAAO,MAAM+C,kBAAkB,GAAGhD,YAAY,CAG5CiD,KAAA;EAAA,IAAC;IAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAAF,KAAA;EAAA,OAAM;IAC1B,GAAGE,OAAO;IACVC,GAAG,EAAED,OAAO,CAACC,GAAG,IAAI,EAAE;IACtBC,WAAW,EAAEH,MAAM,CAACG,WAAW;IAC/BC,GAAG,EAAEJ,MAAM,CAACI;EACd,CAAC;AAAA,CAAC,CAAC"}

package/lib/module/credential/offer/api/03-validate-credential-offer.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=03-validate-credential-offer.js.map

package/lib/module/credential/offer/api/03-validate-credential-offer.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../../../src","sources":["credential/offer/api/03-validate-credential-offer.ts"],"mappings":""}

package/lib/module/credential/offer/api/index.js.map

@@ -1 +1 @@
-{"version":3,"names":[],"sourceRoot":"../../../../../src","sources":["credential/offer/api/index.ts"],"mappings":"AAOA,cAAc,SAAS;AAAC"}
+{"version":3,"names":[],"sourceRoot":"../../../../../src","sources":["credential/offer/api/index.ts"],"mappings":"AASA,cAAc,SAAS;AAAC"}

package/lib/module/credential/offer/v1.0.0/index.js

@@ -5,6 +5,9 @@ export const Offer = {
   },
   extractGrantDetails() {
     throw new UnimplementedFeatureError("extractGrantDetails", "1.0.0");
+  },
+  validateCredentialOffer() {
+    throw new UnimplementedFeatureError("validateCredentialOffer", "1.0.0");
   }
 };
 //# sourceMappingURL=index.js.map

package/lib/module/credential/offer/v1.0.0/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["UnimplementedFeatureError","Offer","resolveCredentialOffer","extractGrantDetails"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.0.0/index.ts"],"mappings":"AAAA,SAASA,yBAAyB,QAAQ,uBAAuB;AAGjE,OAAO,MAAMC,KAAe,GAAG;EAC7B,MAAMC,sBAAsBA,CAAA,EAAG;IAC7B,MAAM,IAAIF,yBAAyB,CAAC,wBAAwB,EAAE,OAAO,CAAC;EACxE,CAAC;EACDG,mBAAmBA,CAAA,EAAG;IACpB,MAAM,IAAIH,yBAAyB,CAAC,qBAAqB,EAAE,OAAO,CAAC;EACrE;AACF,CAAC"}
+{"version":3,"names":["UnimplementedFeatureError","Offer","resolveCredentialOffer","extractGrantDetails","validateCredentialOffer"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.0.0/index.ts"],"mappings":"AAAA,SAASA,yBAAyB,QAAQ,uBAAuB;AAGjE,OAAO,MAAMC,KAAe,GAAG;EAC7B,MAAMC,sBAAsBA,CAAA,EAAG;IAC7B,MAAM,IAAIF,yBAAyB,CAAC,wBAAwB,EAAE,OAAO,CAAC;EACxE,CAAC;EACDG,mBAAmBA,CAAA,EAAG;IACpB,MAAM,IAAIH,yBAAyB,CAAC,qBAAqB,EAAE,OAAO,CAAC;EACrE,CAAC;EACDI,uBAAuBA,CAAA,EAAG;IACxB,MAAM,IAAIJ,yBAAyB,CAAC,yBAAyB,EAAE,OAAO,CAAC;EACzE;AACF,CAAC"}

package/lib/module/credential/offer/v1.3.3/01-resolve-credential-offer.js

@@ -1,26 +1,22 @@
-import { resolveCredentialOffer as sdkResolveCredentialOffer, validateCredentialOffer, CredentialOfferError } from "@pagopa/io-wallet-oid4vci";
-import { InvalidQRCodeError, InvalidCredentialOfferError } from "../common/errors";
+import { resolveCredentialOffer as sdkResolveCredentialOffer, CredentialOfferError } from "@pagopa/io-wallet-oid4vci";
+import { InvalidQRCodeError } from "../common/errors";
+import { sdkConfigV1_3 } from "../../../utils/config";
+
 /**
  * v1.3.3 implementation — first step of the User Request Flow
  * (IT-Wallet spec, Section 12.1.2).
  *
  * Delegates to the SDK's {@link sdkResolveCredentialOffer} for URI parsing
- * and by-reference fetching, then to {@link validateCredentialOffer} for
- * IT-Wallet v1.3 structural checks:
- * - `credential_issuer` must be an HTTPS URL
- * - `grants` object is required
- * - `authorization_code` grant is required
- * - `scope` is required within `authorization_code`
+ * and by-reference fetching of the Credential Offer.
  *
  * Supported URI schemes: `openid-credential-offer://`, `haip-vci://`, `https://`.
  *
- * Cross-validation against Credential Issuer metadata (e.g. matching
- * `credential_configuration_ids` or `authorization_server`) is **not** performed
- * here; per the spec it belongs to the Issuance Flow.
+ * Structural validation and cross-validation against the Credential Issuer
+ * metadata are **not** performed here; they belong to the dedicated
+ * validate-credential-offer step of the flow.
  *
  * Resolution errors (bad scheme, missing params, network failure) are mapped
- * to {@link InvalidQRCodeError}; validation errors are mapped to
- * {@link InvalidCredentialOfferError}.
+ * to {@link InvalidQRCodeError}.
  */
 export const resolveCredentialOffer = async function (credentialOffer) {
   let callbacks = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
@@ -30,6 +26,7 @@ export const resolveCredentialOffer = async function (credentialOffer) {
 
   // Parse the URI and fetch the offer when transmitted by reference
   const resolved = await sdkResolveCredentialOffer({
+    config: sdkConfigV1_3,
     credentialOffer,
     callbacks: {
       fetch: fetchFn
@@ -40,16 +37,6 @@ export const resolveCredentialOffer = async function (credentialOffer) {
     }
     throw e;
   });
-
-  // Structural validation (no metadata cross-checks at this stage)
-  await validateCredentialOffer({
-    credentialOffer: resolved
-  }).catch(e => {
-    if (e instanceof CredentialOfferError) {
-      throw new InvalidCredentialOfferError(e.message);
-    }
-    throw e;
-  });
   return resolved;
 };
 //# sourceMappingURL=01-resolve-credential-offer.js.map

package/lib/module/credential/offer/v1.3.3/01-resolve-credential-offer.js.map

@@ -1 +1 @@
-{"version":3,"names":["resolveCredentialOffer","sdkResolveCredentialOffer","validateCredentialOffer","CredentialOfferError","InvalidQRCodeError","InvalidCredentialOfferError","credentialOffer","callbacks","arguments","length","undefined","fetch","fetchFn","resolved","catch","e","message"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.3.3/01-resolve-credential-offer.ts"],"mappings":"AAAA,SACEA,sBAAsB,IAAIC,yBAAyB,EACnDC,uBAAuB,EACvBC,oBAAoB,QACf,2BAA2B;AAClC,SACEC,kBAAkB,EAClBC,2BAA2B,QACtB,kBAAkB;AAGzB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAML,sBAA0D,GACrE,eAAAA,CAAOM,eAAe,EAAqB;EAAA,IAAnBC,SAAS,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EACpC,MAAM;IAAEG,KAAK,EAAEC,OAAO,GAAGD;EAAM,CAAC,GAAGJ,SAAS;;EAE5C;EACA,MAAMM,QAAQ,GAAG,MAAMZ,yBAAyB,CAAC;IAC/CK,eAAe;IACfC,SAAS,EAAE;MAAEI,KAAK,EAAEC;IAAQ;EAC9B,CAAC,CAAC,CAACE,KAAK,CAAEC,CAAU,IAAK;IACvB,IAAIA,CAAC,YAAYZ,oBAAoB,EAAE;MACrC,MAAM,IAAIC,kBAAkB,CAACW,CAAC,CAACC,OAAO,CAAC;IACzC;IACA,MAAMD,CAAC;EACT,CAAC,CAAC;;EAEF;EACA,MAAMb,uBAAuB,CAAC;IAC5BI,eAAe,EAAEO;EACnB,CAAC,CAAC,CAACC,KAAK,CAAEC,CAAU,IAAK;IACvB,IAAIA,CAAC,YAAYZ,oBAAoB,EAAE;MACrC,MAAM,IAAIE,2BAA2B,CAACU,CAAC,CAACC,OAAO,CAAC;IAClD;IACA,MAAMD,CAAC;EACT,CAAC,CAAC;EAEF,OAAOF,QAAQ;AACjB,CAAC"}
+{"version":3,"names":["resolveCredentialOffer","sdkResolveCredentialOffer","CredentialOfferError","InvalidQRCodeError","sdkConfigV1_3","credentialOffer","callbacks","arguments","length","undefined","fetch","fetchFn","resolved","config","catch","e","message"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.3.3/01-resolve-credential-offer.ts"],"mappings":"AAAA,SACEA,sBAAsB,IAAIC,yBAAyB,EACnDC,oBAAoB,QACf,2BAA2B;AAClC,SAASC,kBAAkB,QAAQ,kBAAkB;AAErD,SAASC,aAAa,QAAQ,uBAAuB;;AAErD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMJ,sBAA0D,GACrE,eAAAA,CAAOK,eAAe,EAAqB;EAAA,IAAnBC,SAAS,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EACpC,MAAM;IAAEG,KAAK,EAAEC,OAAO,GAAGD;EAAM,CAAC,GAAGJ,SAAS;;EAE5C;EACA,MAAMM,QAAQ,GAAG,MAAMX,yBAAyB,CAAC;IAC/CY,MAAM,EAAET,aAAa;IACrBC,eAAe;IACfC,SAAS,EAAE;MAAEI,KAAK,EAAEC;IAAQ;EAC9B,CAAC,CAAC,CAACG,KAAK,CAAEC,CAAU,IAAK;IACvB,IAAIA,CAAC,YAAYb,oBAAoB,EAAE;MACrC,MAAM,IAAIC,kBAAkB,CAACY,CAAC,CAACC,OAAO,CAAC;IACzC;IACA,MAAMD,CAAC;EACT,CAAC,CAAC;EAEF,OAAOH,QAAQ;AACjB,CAAC"}

package/lib/module/credential/offer/v1.3.3/02-extract-grant-details.js

@@ -1,6 +1,8 @@
 import { extractGrantDetails as sdkExtractGrantDetails, CredentialOfferError } from "@pagopa/io-wallet-oid4vci";
 import { InvalidCredentialOfferError } from "../common/errors";
 import { withMappedErrors } from "../../../utils/errors";
+import { sdkConfigV1_3 } from "../../../utils/config";
+
 /**
  * v1.3.3 implementation — second and final step of the User Request Flow
  * (IT-Wallet spec, Section 12.1.2).
@@ -14,5 +16,8 @@ import { withMappedErrors } from "../../../utils/errors";
  * Delegates directly to the SDK's {@link sdkExtractGrantDetails} — no local
  * mapping is needed because the SDK already returns `ExtractGrantDetailsResult`.
  */
-export const extractGrantDetails = offer => withMappedErrors(() => sdkExtractGrantDetails(offer), CredentialOfferError, e => new InvalidCredentialOfferError(e.message));
+export const extractGrantDetails = offer => withMappedErrors(() => sdkExtractGrantDetails({
+  config: sdkConfigV1_3,
+  credentialOffer: offer
+}), CredentialOfferError, e => new InvalidCredentialOfferError(e.message));
 //# sourceMappingURL=02-extract-grant-details.js.map

package/lib/module/credential/offer/v1.3.3/02-extract-grant-details.js.map

@@ -1 +1 @@
-{"version":3,"names":["extractGrantDetails","sdkExtractGrantDetails","CredentialOfferError","InvalidCredentialOfferError","withMappedErrors","offer","e","message"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.3.3/02-extract-grant-details.ts"],"mappings":"AAAA,SACEA,mBAAmB,IAAIC,sBAAsB,EAC7CC,oBAAoB,QACf,2BAA2B;AAClC,SAASC,2BAA2B,QAAQ,kBAAkB;AAC9D,SAASC,gBAAgB,QAAQ,uBAAuB;AAGxD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMJ,mBAAoD,GAAIK,KAAK,IACxED,gBAAgB,CACd,MAAMH,sBAAsB,CAACI,KAAK,CAAC,EACnCH,oBAAoB,EACnBI,CAAC,IAAK,IAAIH,2BAA2B,CAACG,CAAC,CAACC,OAAO,CAClD,CAAC"}
+{"version":3,"names":["extractGrantDetails","sdkExtractGrantDetails","CredentialOfferError","InvalidCredentialOfferError","withMappedErrors","sdkConfigV1_3","offer","config","credentialOffer","e","message"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.3.3/02-extract-grant-details.ts"],"mappings":"AAAA,SACEA,mBAAmB,IAAIC,sBAAsB,EAC7CC,oBAAoB,QACf,2BAA2B;AAClC,SAASC,2BAA2B,QAAQ,kBAAkB;AAC9D,SAASC,gBAAgB,QAAQ,uBAAuB;AAExD,SAASC,aAAa,QAAQ,uBAAuB;;AAErD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAML,mBAAoD,GAAIM,KAAK,IACxEF,gBAAgB,CACd,MACEH,sBAAsB,CAAC;EACrBM,MAAM,EAAEF,aAAa;EACrBG,eAAe,EAAEF;AACnB,CAAC,CAAC,EACJJ,oBAAoB,EACnBO,CAAC,IAAK,IAAIN,2BAA2B,CAACM,CAAC,CAACC,OAAO,CAClD,CAAC"}

package/lib/module/credential/offer/v1.3.3/03-validate-credential-offer.js

@@ -0,0 +1,33 @@
+import { validateCredentialOffer as sdkValidateCredentialOffer, CredentialOfferError } from "@pagopa/io-wallet-oid4vci";
+import { InvalidCredentialOfferError } from "../common/errors";
+import { sdkConfigV1_3 } from "../../../utils/config";
+
+/**
+ * v1.3.3 implementation — validates a resolved Credential Offer against the
+ * Credential Issuer metadata (IT-Wallet spec, Section 12.1.2).
+ *
+ * Performs the IT-Wallet v1.3 structural checks on the offer and, when the
+ * Credential Issuer relies on multiple Authorization Servers, ensures the
+ * `authorization_server` selected by the offer matches one of the advertised
+ * `authorization_servers`.
+ *
+ * Delegates to the SDK's {@link sdkValidateCredentialOffer}; validation errors
+ * are mapped to {@link InvalidCredentialOfferError}.
+ */
+export const validateCredentialOffer = async _ref => {
+  let {
+    offer,
+    credentialIssuerMetadata
+  } = _ref;
+  await sdkValidateCredentialOffer({
+    config: sdkConfigV1_3,
+    credentialOffer: offer,
+    credentialIssuerMetadata
+  }).catch(e => {
+    if (e instanceof CredentialOfferError) {
+      throw new InvalidCredentialOfferError(e.message);
+    }
+    throw e;
+  });
+};
+//# sourceMappingURL=03-validate-credential-offer.js.map

package/lib/module/credential/offer/v1.3.3/03-validate-credential-offer.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["validateCredentialOffer","sdkValidateCredentialOffer","CredentialOfferError","InvalidCredentialOfferError","sdkConfigV1_3","_ref","offer","credentialIssuerMetadata","config","credentialOffer","catch","e","message"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.3.3/03-validate-credential-offer.ts"],"mappings":"AAAA,SACEA,uBAAuB,IAAIC,0BAA0B,EACrDC,oBAAoB,QACf,2BAA2B;AAClC,SAASC,2BAA2B,QAAQ,kBAAkB;AAE9D,SAASC,aAAa,QAAQ,uBAAuB;;AAErD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMJ,uBAA4D,GACvE,MAAAK,IAAA,IAA+C;EAAA,IAAxC;IAAEC,KAAK;IAAEC;EAAyB,CAAC,GAAAF,IAAA;EACxC,MAAMJ,0BAA0B,CAAC;IAC/BO,MAAM,EAAEJ,aAAa;IACrBK,eAAe,EAAEH,KAAK;IACtBC;EACF,CAAC,CAAC,CAACG,KAAK,CAAEC,CAAU,IAAK;IACvB,IAAIA,CAAC,YAAYT,oBAAoB,EAAE;MACrC,MAAM,IAAIC,2BAA2B,CAACQ,CAAC,CAACC,OAAO,CAAC;IAClD;IACA,MAAMD,CAAC;EACT,CAAC,CAAC;AACJ,CAAC"}

package/lib/module/credential/offer/v1.3.3/index.js

@@ -1,7 +1,9 @@
 import { resolveCredentialOffer } from "./01-resolve-credential-offer";
 import { extractGrantDetails } from "./02-extract-grant-details";
+import { validateCredentialOffer } from "./03-validate-credential-offer";
 export const Offer = {
   resolveCredentialOffer,
-  extractGrantDetails
+  extractGrantDetails,
+  validateCredentialOffer
 };
 //# sourceMappingURL=index.js.map

package/lib/module/credential/offer/v1.3.3/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["resolveCredentialOffer","extractGrantDetails","Offer"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.3.3/index.ts"],"mappings":"AACA,SAASA,sBAAsB,QAAQ,+BAA+B;AACtE,SAASC,mBAAmB,QAAQ,4BAA4B;AAEhE,OAAO,MAAMC,KAAe,GAAG;EAC7BF,sBAAsB;EACtBC;AACF,CAAC"}
+{"version":3,"names":["resolveCredentialOffer","extractGrantDetails","validateCredentialOffer","Offer"],"sourceRoot":"../../../../../src","sources":["credential/offer/v1.3.3/index.ts"],"mappings":"AACA,SAASA,sBAAsB,QAAQ,+BAA+B;AACtE,SAASC,mBAAmB,QAAQ,4BAA4B;AAChE,SAASC,uBAAuB,QAAQ,gCAAgC;AAExE,OAAO,MAAMC,KAAe,GAAG;EAC7BH,sBAAsB;EACtBC,mBAAmB;EACnBC;AACF,CAAC"}

package/lib/typescript/credential/issuance/api/01-evaluate-issuer-trust.d.ts

@@ -7,10 +7,14 @@ export interface EvaluateIssuerTrustApi {
      *
      * @param issuerUrl The base url of the Issuer
      * @param context.appFetch (optional) fetch api implementation. Default: built-in fetch
+     * @param context.authorizationServer (optional) Authorization Server URL selected
+     *   from a credential offer. When provided it must match one of the Credential
+     *   Issuer metadata `authorization_servers`. Only honored from v1.3.3 onwards.
      * @returns The Issuer's configuration
      */
     evaluateIssuerTrust(issuerUrl: string, ctx?: {
         appFetch?: GlobalFetch["fetch"];
+        authorizationServer?: string;
     }): Promise<{
         issuerConf: IssuerConfig;
     }>;

package/lib/typescript/credential/issuance/api/01-evaluate-issuer-trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"01-evaluate-issuer-trust.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/api/01-evaluate-issuer-trust.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;OAQG;IACH,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;KAAE,GACxC,OAAO,CAAC;QAAE,UAAU,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;CAC1C"}
+{"version":3,"file":"01-evaluate-issuer-trust.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/api/01-evaluate-issuer-trust.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;;;OAWG;IACH,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,GACtE,OAAO,CAAC;QAAE,UAAU,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;CAC1C"}

package/lib/typescript/credential/issuance/api/02-start-user-authorization.d.ts

@@ -26,6 +26,8 @@ export interface StartUserAuthorizationApi {
      * @param context.walletInstanceAttestation: the Wallet Instance's attestation
      * @param context.redirectUri: the redirect URI
      * @param context.appFetch: (optional) the fetch implementation
+     * @param context.scope: (optional) the OAuth 2.0 scope, forwarded to the PAR. When the issuance is started from a Credential Offer, it comes from the `authorization_code` grant.
+     * @param context.issuerState: (optional) the issuer state, forwarded to the PAR to correlate the authorization request with the Credential Offer.
      * @returns The URI to which the end user should be redirected to start the authentication flow, along with additional authentication parameters
      */
     startUserAuthorization(issuerConf: IssuerConfig, credentialIds: string[], proof: {
@@ -38,6 +40,8 @@ export interface StartUserAuthorizationApi {
         walletInstanceAttestation: string;
         redirectUri: string;
         appFetch?: GlobalFetch["fetch"];
+        scope?: string;
+        issuerState?: string;
     }): Promise<{
         issuerRequestUri: string;
         clientId: string;

package/lib/typescript/credential/issuance/api/02-start-user-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"02-start-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/api/02-start-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,sBAAsB,CACpB,UAAU,EAAE,YAAY,EACxB,aAAa,EAAE,MAAM,EAAE,EACvB,KAAK,EACD;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GACrB;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EACjD,OAAO,EAAE;QACP,gBAAgB,EAAE,aAAa,CAAC;QAChC,yBAAyB,EAAE,MAAM,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;KACjC,GACA,OAAO,CAAC;QACT,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;QAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;CACJ"}
+{"version":3,"file":"02-start-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/api/02-start-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,sBAAsB,CACpB,UAAU,EAAE,YAAY,EACxB,aAAa,EAAE,MAAM,EAAE,EACvB,KAAK,EACD;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GACrB;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EACjD,OAAO,EAAE;QACP,gBAAgB,EAAE,aAAa,CAAC;QAChC,yBAAyB,EAAE,MAAM,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GACA,OAAO,CAAC;QACT,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;QAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;CACJ"}

package/lib/typescript/credential/issuance/api/03-complete-user-authorization.d.ts

@@ -39,11 +39,13 @@ export interface CompleteUserAuthorizationApi {
      * @param issuerConfig The issuer configuration returned by {@link evaluateIssuerTrust}
      * @param pid The PID to present as a tuple [keyTag, credential].
      * @param redirectUri The client redirect URI to which the authorization server will redirect after completing the authorization process.
-     * @param appFetch (optional) fetch api implementation. Default: built-in fetch
      * @returns The authorization response which contains code, state and iss
      */
     completeEaaUserAuthorizationWithQueryMode(requestObject: RequestObject, issuerConf: IssuerConfig, pid: [keyTag: string, credential: string], redirectUri: string, context?: {
+        /** Fetch api implementation. Default: built-in fetch. */
         appFetch?: GlobalFetch["fetch"];
+        /** Function to fetch the final redirect uri; it allows full control on how redirects are handled. If not provided, `appFetch` is used. */
+        fetchFinalRedirectUri?: (url: string) => Promise<string | undefined>;
     }): Promise<AuthorizationResult>;
     /**
      * WARNING: This function must be called after {@link getRequestedCredentialToBePresented}. The next function to be called is {@link authorizeAccess}.

package/lib/typescript/credential/issuance/api/03-complete-user-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"03-complete-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/api/03-complete-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EACV,4BAA4B,EAC5B,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,4BAA4B;IAC3C;;;;;;;;;;;;;;OAcG;IACH,mCAAmC,CACjC,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,YAAY,EACxB,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,GAC9B,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B;;;;;;;;;OASG;IACH,yCAAyC,CACvC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;;;;;;OAWG;IACH,yCAAyC,CACvC,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,YAAY,EACxB,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EACzC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;KACjC,GACA,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;;;;;;;;OAaG;IACH,4CAA4C,CAC1C,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,YAAY,EACxB,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EACzC,OAAO,EAAE;QACP,gBAAgB,EAAE,aAAa,CAAC;QAChC,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;KACjC,GACA,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;;OAOG;IACH,6CAA6C,CAC3C,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAEzC;;;;;;;;;;;;OAYG;IACH,qBAAqB,CACnB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,YAAY,EACxB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjC"}
+{"version":3,"file":"03-complete-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/api/03-complete-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EACV,4BAA4B,EAC5B,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,4BAA4B;IAC3C;;;;;;;;;;;;;;OAcG;IACH,mCAAmC,CACjC,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,YAAY,EACxB,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,GAC9B,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B;;;;;;;;;OASG;IACH,yCAAyC,CACvC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;;;;;OAUG;IACH,yCAAyC,CACvC,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,YAAY,EACxB,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EACzC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QACR,yDAAyD;QACzD,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAChC,0IAA0I;QAC1I,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;KACtE,GACA,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;;;;;;;;OAaG;IACH,4CAA4C,CAC1C,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,YAAY,EACxB,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EACzC,OAAO,EAAE;QACP,gBAAgB,EAAE,aAAa,CAAC;QAChC,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;KACjC,GACA,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;;OAOG;IACH,6CAA6C,CAC3C,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAEzC;;;;;;;;;;;;OAYG;IACH,qBAAqB,CACnB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,YAAY,EACxB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjC"}

package/lib/typescript/credential/issuance/api/IssuerConfig.d.ts

@@ -5,6 +5,7 @@ import { z } from "zod";
 export type IssuerConfig = z.infer<typeof IssuerConfig>;
 export declare const IssuerConfig: z.ZodObject<{
     credential_issuer: z.ZodString;
+    authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
     pushed_authorization_request_endpoint: z.ZodString;
     authorization_endpoint: z.ZodString;
     token_endpoint: z.ZodString;

package/lib/typescript/credential/issuance/api/IssuerConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IssuerConfig.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/api/IssuerConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8CxB;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBvB,CAAC"}
+{"version":3,"file":"IssuerConfig.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/api/IssuerConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8CxB;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBvB,CAAC"}

package/lib/typescript/credential/issuance/v1.0.0/mappers.d.ts

@@ -297,6 +297,7 @@ export declare const mapToIssuerConfig: (input: {
         logo_uri?: string | undefined;
         contacts?: string[] | undefined;
     };
+    authorization_servers?: [string, ...string[]] | undefined;
     status_assertion_endpoint?: string | undefined;
     credential_issuance_batch_size?: number | undefined;
     encrypted_response_enc_values_supported?: string[] | undefined;

package/lib/typescript/credential/issuance/v1.0.0/mappers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mappers.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/v1.0.0/mappers.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgC5B,CAAC"}
+{"version":3,"file":"mappers.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/v1.0.0/mappers.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgC5B,CAAC"}

package/lib/typescript/credential/issuance/v1.3.3/01-evaluate-issuer-trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"01-evaluate-issuer-trust.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/v1.3.3/01-evaluate-issuer-trust.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAG1C,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,qBAAqB,CAalE,CAAC"}
+{"version":3,"file":"01-evaluate-issuer-trust.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/v1.3.3/01-evaluate-issuer-trust.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAG1C,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,qBAAqB,CAclE,CAAC"}

package/lib/typescript/credential/issuance/v1.3.3/02-start-user-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"02-start-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/v1.3.3/02-start-user-authorization.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAS1C,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,wBAAwB,CA+FtE,CAAC"}
+{"version":3,"file":"02-start-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/v1.3.3/02-start-user-authorization.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAS1C,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,wBAAwB,CAsGtE,CAAC"}

package/lib/typescript/credential/issuance/v1.3.3/03-complete-user-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"03-complete-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/v1.3.3/03-complete-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAqB7B,OAAO,KAAK,EAAE,WAAW,EAAgB,MAAM,QAAQ,CAAC;AAKxD,eAAO,MAAM,6CAA6C,EAAE,WAAW,CAAC,+CAA+C,CAoBpH,CAAC;AAEJ,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,uBAAuB,CAgBpE,CAAC;AAEJ,eAAO,MAAM,yCAAyC,EAAE,WAAW,CAAC,2CAA2C,CAS5G,CAAC;AAEJ,eAAO,MAAM,mCAAmC,EAAE,WAAW,CAAC,qCAAqC,CAkChG,CAAC;AAGJ,eAAO,MAAM,4CAA4C,EAAE,WAAW,CAAC,8CAA8C,CAqClH,CAAC;AAEJ,eAAO,MAAM,yCAAyC,EAAE,WAAW,CAAC,2CAA2C,CAyD5G,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,GACrC,SAAS,OAAO,KACf,mBAqBF,CAAC"}
+{"version":3,"file":"03-complete-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/v1.3.3/03-complete-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAqB7B,OAAO,KAAK,EAAE,WAAW,EAAgB,MAAM,QAAQ,CAAC;AAKxD,eAAO,MAAM,6CAA6C,EAAE,WAAW,CAAC,+CAA+C,CAoBpH,CAAC;AAEJ,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,uBAAuB,CAgBpE,CAAC;AAEJ,eAAO,MAAM,yCAAyC,EAAE,WAAW,CAAC,2CAA2C,CAS5G,CAAC;AAEJ,eAAO,MAAM,mCAAmC,EAAE,WAAW,CAAC,qCAAqC,CAkChG,CAAC;AAGJ,eAAO,MAAM,4CAA4C,EAAE,WAAW,CAAC,8CAA8C,CAqClH,CAAC;AAEJ,eAAO,MAAM,yCAAyC,EAAE,WAAW,CAAC,2CAA2C,CA6D5G,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,GACrC,SAAS,OAAO,KACf,mBAqBF,CAAC"}