@pagopa/io-react-native-wallet 3.6.1 → 3.6.2

package/lib/commonjs/credential/presentation/v1.3.3/04-verify-certificate-chain.js

@@ -18,14 +18,21 @@ const verifyAuthRequestCertificateChain = async (requestObjectJwt, _ref) => {
     readTimeout: 10_000
   };
   const requestObject = (0, _ioReactNativeJwt.decode)(requestObjectJwt);
-  const certChain = requestObject.protectedHeader.x5c;
-  if (!certChain) {
+  const x5c = requestObject.protectedHeader.x5c;
+  if (!x5c) {
     throw new _errors.MissingX509CertsError("No certificate chain (x5c) found in the Request Object");
   }
+
+  // The native validator expects the chain to include the leaf and any
+  // intermediates, excluding the trust anchor (supplied separately as
+  // `caRootCert`). Some RPs include the anchor as the last entry of x5c,
+  // which must be stripped or the native validator (notably on iOS) treats
+  // it as an extraneous/unexpected trailing certificate and fails.
+  const certChain = x5c.length > 1 && x5c.at(-1) === caRootCert ? x5c.slice(0, -1) : x5c;
   const validationResult = await (0, _ioReactNativeCrypto.verifyCertificateChain)(certChain, caRootCert, x509Options);
   if (!validationResult.isValid) {
     _logging.Logger.log(_logging.LogLevel.ERROR, `Certificate chain failure: ${validationResult.validationStatus} - ${validationResult.errorMessage}`);
-    throw new _errors.X509ValidationError("X.509 certificate chain validation failed");
+    throw new _errors.X509ValidationError(`X.509 certificate chain validation failed. Status: ${validationResult.validationStatus}. Error: ${validationResult.errorMessage}`);
   }
   return validationResult;
 };

package/lib/commonjs/credential/presentation/v1.3.3/04-verify-certificate-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_ioReactNativeCrypto","_errors","_logging","verifyAuthRequestCertificateChain","requestObjectJwt","_ref","caRootCert","x509Options","requireCrl","connectTimeout","readTimeout","requestObject","decode","certChain","protectedHeader","x5c","MissingX509CertsError","validationResult","verifyCertificateChain","isValid","Logger","log","LogLevel","ERROR","validationStatus","errorMessage","X509ValidationError","exports"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/04-verify-certificate-chain.ts"],"mappings":";;;;;;AACA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,oBAAA,GAAAD,OAAA;AAIA,IAAAE,OAAA,GAAAF,OAAA;AAIA,IAAAG,QAAA,GAAAH,OAAA;AAEO,MAAMI,iCAA6F,GACxG,MAAAA,CAAOC,gBAAgB,EAAAC,IAAA,KAAqB;EAAA,IAAnB;IAAEC;EAAW,CAAC,GAAAD,IAAA;EACrC,MAAME,WAAmC,GAAG;IAC1CC,UAAU,EAAE,KAAK;IACjBC,cAAc,EAAE,MAAM;IACtBC,WAAW,EAAE;EACf,CAAC;EAED,MAAMC,aAAa,GAAG,IAAAC,wBAAM,EAACR,gBAAgB,CAAC;EAE9C,MAAMS,SAAS,GAAGF,aAAa,CAACG,eAAe,CAACC,GAAG;EAEnD,IAAI,CAACF,SAAS,EAAE;IACd,MAAM,IAAIG,6BAAqB,CAC7B,wDACF,CAAC;EACH;EAEA,MAAMC,gBAAgB,GAAG,MAAM,IAAAC,2CAAsB,EACnDL,SAAS,EACTP,UAAU,EACVC,WACF,CAAC;EAED,IAAI,CAACU,gBAAgB,CAACE,OAAO,EAAE;IAC7BC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,8BAA6BN,gBAAgB,CAACO,gBAAiB,MAAKP,gBAAgB,CAACQ,YAAa,EACrG,CAAC;IAED,MAAM,IAAIC,2BAAmB,CAC3B,2CACF,CAAC;EACH;EAEA,OAAOT,gBAAgB;AACzB,CAAC;AAACU,OAAA,CAAAxB,iCAAA,GAAAA,iCAAA"}
+{"version":3,"names":["_ioReactNativeJwt","require","_ioReactNativeCrypto","_errors","_logging","verifyAuthRequestCertificateChain","requestObjectJwt","_ref","caRootCert","x509Options","requireCrl","connectTimeout","readTimeout","requestObject","decode","x5c","protectedHeader","MissingX509CertsError","certChain","length","at","slice","validationResult","verifyCertificateChain","isValid","Logger","log","LogLevel","ERROR","validationStatus","errorMessage","X509ValidationError","exports"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/04-verify-certificate-chain.ts"],"mappings":";;;;;;AACA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,oBAAA,GAAAD,OAAA;AAIA,IAAAE,OAAA,GAAAF,OAAA;AAIA,IAAAG,QAAA,GAAAH,OAAA;AAEO,MAAMI,iCAA6F,GACxG,MAAAA,CAAOC,gBAAgB,EAAAC,IAAA,KAAqB;EAAA,IAAnB;IAAEC;EAAW,CAAC,GAAAD,IAAA;EACrC,MAAME,WAAmC,GAAG;IAC1CC,UAAU,EAAE,KAAK;IACjBC,cAAc,EAAE,MAAM;IACtBC,WAAW,EAAE;EACf,CAAC;EAED,MAAMC,aAAa,GAAG,IAAAC,wBAAM,EAACR,gBAAgB,CAAC;EAE9C,MAAMS,GAAG,GAAGF,aAAa,CAACG,eAAe,CAACD,GAAG;EAE7C,IAAI,CAACA,GAAG,EAAE;IACR,MAAM,IAAIE,6BAAqB,CAC7B,wDACF,CAAC;EACH;;EAEA;EACA;EACA;EACA;EACA;EACA,MAAMC,SAAS,GACbH,GAAG,CAACI,MAAM,GAAG,CAAC,IAAIJ,GAAG,CAACK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAKZ,UAAU,GAAGO,GAAG,CAACM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAGN,GAAG;EAEtE,MAAMO,gBAAgB,GAAG,MAAM,IAAAC,2CAAsB,EACnDL,SAAS,EACTV,UAAU,EACVC,WACF,CAAC;EAED,IAAI,CAACa,gBAAgB,CAACE,OAAO,EAAE;IAC7BC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,8BAA6BN,gBAAgB,CAACO,gBAAiB,MAAKP,gBAAgB,CAACQ,YAAa,EACrG,CAAC;IAED,MAAM,IAAIC,2BAAmB,CAC1B,sDAAqDT,gBAAgB,CAACO,gBAAiB,YAAWP,gBAAgB,CAACQ,YAAa,EACnI,CAAC;EACH;EAEA,OAAOR,gBAAgB;AACzB,CAAC;AAACU,OAAA,CAAA3B,iCAAA,GAAAA,iCAAA"}

package/lib/commonjs/credential/status/v1.3.3/01-status-list.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.getStatusListByUri = exports.getStatusList = void 0;
+exports.getStatusListEntry = exports.getStatusListByUri = exports.getStatusList = void 0;
 var _ioReactNativeIso = require("@pagopa/io-react-native-iso18013");
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
 var _jwtStatusList = require("@sd-jwt/jwt-status-list");
@@ -25,6 +25,7 @@ const getStatusListEntry = async (credential, format) => {
   }
   return statusListEntry;
 };
+exports.getStatusListEntry = getStatusListEntry;
 const fetchStatusList = function (uri, appFetch) {
   let options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {};
   return appFetch(uri, {

package/lib/commonjs/credential/status/v1.3.3/01-status-list.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeIso","require","_ioReactNativeJwt","_jwtStatusList","_errors","_misc","getStatusListEntry","credential","format","statusListEntry","_decoded$issuerAuth","decoded","CBOR","decode","issuerAuth","payload","status","status_list","getStatusListFromJWT","IoWalletError","fetchStatusList","uri","appFetch","options","arguments","length","undefined","headers","Accept","cacheDisabled","then","hasStatusOrThrow","response","text","getStatusListByUri","fetch","statusList","decodeJwt","exp","Math","floor","Date","now","exports","getStatusList","context","idx"],"sourceRoot":"../../../../../src","sources":["credential/status/v1.3.3/01-status-list.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAD,OAAA;AACA,IAAAE,cAAA,GAAAF,OAAA;AAIA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,KAAA,GAAAJ,OAAA;AAIA,MAAMK,kBAAkB,GAAG,MAAAA,CACzBC,UAAkB,EAClBC,MAAwB,KACK;EAC7B,IAAIC,eAA4C;EAEhD,IAAID,MAAM,KAAK,UAAU,EAAE;IAAA,IAAAE,mBAAA;IACzB;IACA,MAAMC,OAAO,GAAG,MAAMC,sBAAI,CAACC,MAAM,CAACN,UAAU,CAAC;IAC7CE,eAAe,IAAAC,mBAAA,GAAGC,OAAO,CAACG,UAAU,cAAAJ,mBAAA,gBAAAA,mBAAA,GAAlBA,mBAAA,CAAoBK,OAAO,cAAAL,mBAAA,gBAAAA,mBAAA,GAA3BA,mBAAA,CAA6BM,MAAM,cAAAN,mBAAA,uBAAnCA,mBAAA,CAAqCO,WAAW;EACpE;EAEA,IAAIT,MAAM,KAAK,WAAW,EAAE;IAC1BC,eAAe,GAAG,IAAAS,mCAAoB,EAACX,UAAU,CAAC;EACpD;EAEA,IAAI,CAACE,eAAe,EAAE;IACpB,MAAM,IAAIU,qBAAa,CAAC,+CAA+C,CAAC;EAC1E;EAEA,OAAOV,eAAe;AACxB,CAAC;AAED,MAAMW,eAAe,GAAG,SAAAA,CACtBC,GAAW,EACXC,QAA8B;EAAA,IAC9BC,OAAoC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAAA,OAEzCF,QAAQ,CAACD,GAAG,EAAE;IACZM,OAAO,EAAE;MACPC,MAAM,EAAE,4BAA4B;MACpC,IAAIL,OAAO,CAACM,aAAa,IAAI;QAAE,eAAe,EAAE;MAAW,CAAC;IAC9D;EACF,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,QAAQ,IAAKA,QAAQ,CAACC,IAAI,CAAC,CAAC,CAAC;AAAA;AAEjC,MAAMC,kBAA6C,GAAG,eAAAA,CAC3Db,GAAG,EAEA;EAAA,IADH;IAAEC,QAAQ,GAAGa;EAAM,CAAC,GAAAX,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEzB;EACA,IAAIY,UAAU,GAAG,MAAMhB,eAAe,CAACC,GAAG,EAAEC,QAAQ,CAAC;EACrD,MAAMX,OAAO,GAAG,IAAA0B,wBAAS,EAACD,UAAU,CAAC;EAErC,MAAM;IAAEE;EAAI,CAAC,GAAG3B,OAAO,CAACI,OAAO;;EAE/B;EACA;EACA,IAAIuB,GAAG,IAAIA,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE;IAC9CN,UAAU,GAAG,MAAMhB,eAAe,CAACC,GAAG,EAAEC,QAAQ,EAAE;MAAEO,aAAa,EAAE;IAAK,CAAC,CAAC;EAC5E;EAEA,OAAOO,UAAU;AACnB,CAAC;AAACO,OAAA,CAAAT,kBAAA,GAAAA,kBAAA;AAEK,MAAMU,aAAmC,GAAG,MAAAA,CACjDrC,UAAU,EACVC,MAAM,EACNqC,OAAO,KACJ;EACH,MAAM;IAAExB,GAAG;IAAEyB;EAAI,CAAC,GAAG,MAAMxC,kBAAkB,CAACC,UAAU,EAAEC,MAAM,CAAC;EACjE,MAAM4B,UAAU,GAAG,MAAMF,kBAAkB,CAACb,GAAG,EAAEwB,OAAO,CAAC;EACzD,OAAO;IAAExB,GAAG;IAAEyB,GAAG;IAAEV,UAAU;IAAE5B,MAAM,EAAE;EAAM,CAAC;AAChD,CAAC;AAACmC,OAAA,CAAAC,aAAA,GAAAA,aAAA"}
+{"version":3,"names":["_ioReactNativeIso","require","_ioReactNativeJwt","_jwtStatusList","_errors","_misc","getStatusListEntry","credential","format","statusListEntry","_decoded$issuerAuth","decoded","CBOR","decode","issuerAuth","payload","status","status_list","getStatusListFromJWT","IoWalletError","exports","fetchStatusList","uri","appFetch","options","arguments","length","undefined","headers","Accept","cacheDisabled","then","hasStatusOrThrow","response","text","getStatusListByUri","fetch","statusList","decodeJwt","exp","Math","floor","Date","now","getStatusList","context","idx"],"sourceRoot":"../../../../../src","sources":["credential/status/v1.3.3/01-status-list.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAD,OAAA;AACA,IAAAE,cAAA,GAAAF,OAAA;AAIA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,KAAA,GAAAJ,OAAA;AAGO,MAAMK,kBAAuD,GAAG,MAAAA,CACrEC,UAAU,EACVC,MAAM,KACH;EACH,IAAIC,eAA4C;EAEhD,IAAID,MAAM,KAAK,UAAU,EAAE;IAAA,IAAAE,mBAAA;IACzB;IACA,MAAMC,OAAO,GAAG,MAAMC,sBAAI,CAACC,MAAM,CAACN,UAAU,CAAC;IAC7CE,eAAe,IAAAC,mBAAA,GAAGC,OAAO,CAACG,UAAU,cAAAJ,mBAAA,gBAAAA,mBAAA,GAAlBA,mBAAA,CAAoBK,OAAO,cAAAL,mBAAA,gBAAAA,mBAAA,GAA3BA,mBAAA,CAA6BM,MAAM,cAAAN,mBAAA,uBAAnCA,mBAAA,CAAqCO,WAAW;EACpE;EAEA,IAAIT,MAAM,KAAK,WAAW,EAAE;IAC1BC,eAAe,GAAG,IAAAS,mCAAoB,EAACX,UAAU,CAAC;EACpD;EAEA,IAAI,CAACE,eAAe,EAAE;IACpB,MAAM,IAAIU,qBAAa,CAAC,+CAA+C,CAAC;EAC1E;EAEA,OAAOV,eAAe;AACxB,CAAC;AAACW,OAAA,CAAAd,kBAAA,GAAAA,kBAAA;AAEF,MAAMe,eAAe,GAAG,SAAAA,CACtBC,GAAW,EACXC,QAA8B;EAAA,IAC9BC,OAAoC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAAA,OAEzCF,QAAQ,CAACD,GAAG,EAAE;IACZM,OAAO,EAAE;MACPC,MAAM,EAAE,4BAA4B;MACpC,IAAIL,OAAO,CAACM,aAAa,IAAI;QAAE,eAAe,EAAE;MAAW,CAAC;IAC9D;EACF,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,QAAQ,IAAKA,QAAQ,CAACC,IAAI,CAAC,CAAC,CAAC;AAAA;AAEjC,MAAMC,kBAA6C,GAAG,eAAAA,CAC3Db,GAAG,EAEA;EAAA,IADH;IAAEC,QAAQ,GAAGa;EAAM,CAAC,GAAAX,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEzB;EACA,IAAIY,UAAU,GAAG,MAAMhB,eAAe,CAACC,GAAG,EAAEC,QAAQ,CAAC;EACrD,MAAMZ,OAAO,GAAG,IAAA2B,wBAAS,EAACD,UAAU,CAAC;EAErC,MAAM;IAAEE;EAAI,CAAC,GAAG5B,OAAO,CAACI,OAAO;;EAE/B;EACA;EACA,IAAIwB,GAAG,IAAIA,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE;IAC9CN,UAAU,GAAG,MAAMhB,eAAe,CAACC,GAAG,EAAEC,QAAQ,EAAE;MAAEO,aAAa,EAAE;IAAK,CAAC,CAAC;EAC5E;EAEA,OAAOO,UAAU;AACnB,CAAC;AAACjB,OAAA,CAAAe,kBAAA,GAAAA,kBAAA;AAEK,MAAMS,aAAmC,GAAG,MAAAA,CACjDrC,UAAU,EACVC,MAAM,EACNqC,OAAO,KACJ;EACH,MAAM;IAAEvB,GAAG;IAAEwB;EAAI,CAAC,GAAG,MAAMxC,kBAAkB,CAACC,UAAU,EAAEC,MAAM,CAAC;EACjE,MAAM6B,UAAU,GAAG,MAAMF,kBAAkB,CAACb,GAAG,EAAEuB,OAAO,CAAC;EACzD,OAAO;IAAEvB,GAAG;IAAEwB,GAAG;IAAET,UAAU;IAAE7B,MAAM,EAAE;EAAM,CAAC;AAChD,CAAC;AAACY,OAAA,CAAAwB,aAAA,GAAAA,aAAA"}

package/lib/commonjs/credential/status/v1.3.3/index.js

@@ -16,7 +16,8 @@ const CredentialStatus = {
     get: _statusList.getStatusList,
     getByUri: _statusList.getStatusListByUri,
     verifyAndParse: _verifyAndParseStatusList.verifyAndParseStatusList,
-    getStatus: _getStatus.getStatus
+    getStatus: _getStatus.getStatus,
+    getStatusListEntry: _statusList.getStatusListEntry
   }
 };
 exports.CredentialStatus = CredentialStatus;

package/lib/commonjs/credential/status/v1.3.3/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_statusList","require","_verifyAndParseStatusList","_getStatus","CredentialStatus","statusAssertion","isSupported","statusList","get","getStatusList","getByUri","getStatusListByUri","verifyAndParse","verifyAndParseStatusList","getStatus","exports"],"sourceRoot":"../../../../../src","sources":["credential/status/v1.3.3/index.ts"],"mappings":";;;;;;AACA,IAAAA,WAAA,GAAAC,OAAA;AACA,IAAAC,yBAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AAEO,MAAMG,gBAAqC,GAAG;EACnDC,eAAe,EAAE;IACfC,WAAW,EAAE;EACf,CAAC;EACDC,UAAU,EAAE;IACVD,WAAW,EAAE,IAAI;IACjBE,GAAG,EAAEC,yBAAa;IAClBC,QAAQ,EAAEC,8BAAkB;IAC5BC,cAAc,EAAEC,kDAAwB;IACxCC,SAAS,EAATA;EACF;AACF,CAAC;AAACC,OAAA,CAAAX,gBAAA,GAAAA,gBAAA"}
+{"version":3,"names":["_statusList","require","_verifyAndParseStatusList","_getStatus","CredentialStatus","statusAssertion","isSupported","statusList","get","getStatusList","getByUri","getStatusListByUri","verifyAndParse","verifyAndParseStatusList","getStatus","getStatusListEntry","exports"],"sourceRoot":"../../../../../src","sources":["credential/status/v1.3.3/index.ts"],"mappings":";;;;;;AACA,IAAAA,WAAA,GAAAC,OAAA;AAKA,IAAAC,yBAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AAEO,MAAMG,gBAAqC,GAAG;EACnDC,eAAe,EAAE;IACfC,WAAW,EAAE;EACf,CAAC;EACDC,UAAU,EAAE;IACVD,WAAW,EAAE,IAAI;IACjBE,GAAG,EAAEC,yBAAa;IAClBC,QAAQ,EAAEC,8BAAkB;IAC5BC,cAAc,EAAEC,kDAAwB;IACxCC,SAAS,EAATA,oBAAS;IACTC,kBAAkB,EAAlBA;EACF;AACF,CAAC;AAACC,OAAA,CAAAZ,gBAAA,GAAAA,gBAAA"}

package/lib/commonjs/sd-jwt/types.js

@@ -18,7 +18,7 @@ const StatusAssertion = _zod.z.object({
   credential_hash_alg: _zod.z.literal("sha-256")
 });
 const StatusList = _zod.z.object({
-  idx: _zod.z.string(),
+  idx: _zod.z.number(),
   uri: _zod.z.string()
 });
 

package/lib/commonjs/sd-jwt/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["_zod","require","_zod2","_jwk","LEGACY_SD_JWT","exports","StatusAssertion","z","object","credential_hash_alg","literal","StatusList","idx","string","uri","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","UnixTime","exp","cnf","jwk","JWK","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,IAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;;AAEO,MAAMG,aAAa,GAAG,WAAW;AAACC,OAAA,CAAAD,aAAA,GAAAA,aAAA;AAEzC,MAAME,eAAe,GAAGC,MAAC,CAACC,MAAM,CAAC;EAC/BC,mBAAmB,EAAEF,MAAC,CAACG,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGJ,MAAC,CAACC,MAAM,CAAC;EAC1BI,GAAG,EAAEL,MAAC,CAACM,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEP,MAAC,CAACM,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEO,MAAME,YAAY,GAAGR,MAAC,CAACC,MAAM,CAAC;EACnCQ,MAAM,EAAET,MAAC,CAACC,MAAM,CAAC;IACfS,GAAG,EAAEV,MAAC,CAACW,IAAI,CAAC,CAAC,WAAW,EAAEd,aAAa,CAAC,CAAC;IACzCe,GAAG,EAAEZ,MAAC,CAACM,MAAM,CAAC,CAAC;IACfO,GAAG,EAAEb,MAAC,CAACM,MAAM,CAAC,CAAC;IACfQ,WAAW,EAAEd,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEjB,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAElB,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAEnB,MAAC,CAACC,MAAM,CAAC;IAChBmB,GAAG,EAAEpB,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC;IACxBe,OAAO,EAAErB,MAAC,CAACG,OAAO,CAAC,SAAS,CAAC;IAC7BmB,GAAG,EAAEtB,MAAC,CAACM,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAEvB,MAAC,CAACM,MAAM,CAAC,CAAC;IACfkB,GAAG,EAAEC,cAAQ,CAACT,QAAQ,CAAC,CAAC;IACxBU,GAAG,EAAED,cAAQ;IACbE,GAAG,EAAE3B,MAAC,CAACC,MAAM,CAAC;MACZ2B,GAAG,EAAEC;IACP,CAAC,CAAC;IACFC,MAAM,EAAE9B,MAAC,CAAC+B,KAAK,CAAC,CACd/B,MAAC,CAACC,MAAM,CAAC;MACP+B,WAAW,EAAE5B;IACf,CAAC,CAAC,EACFJ,MAAC,CAACC,MAAM,CAAC;MACP;MACAgC,gBAAgB,EAAElC;IACpB,CAAC,CAAC,CACH,CAAC;IACFmC,GAAG,EAAElC,MAAC,CAACM,MAAM,CAAC,CAAC;IACf,eAAe,EAAEN,MAAC,CAACM,MAAM,CAAC,CAAC,CAACU,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AAHAlB,OAAA,CAAAU,YAAA,GAAAA,YAAA;AAKO,MAAM2B,YAAY,GAAGnC,MAAC,CAACC,MAAM,CAAC;EACnCmC,eAAe,EAAEpC,MAAC,CAACM,MAAM,CAAC,CAAC;EAC3B+B,eAAe,EAAErC,MAAC,CAACM,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AAJAR,OAAA,CAAAqC,YAAA,GAAAA,YAAA;AAMO,MAAMG,YAAY,GAAGtC,MAAC,CAACC,MAAM,CAAC;EACnCsC,IAAI,EAAEvC,MAAC,CAACM,MAAM,CAAC,CAAC;EAChBkC,WAAW,EAAExC,MAAC,CAACM,MAAM,CAAC,CAAC;EACvBmC,WAAW,EAAEzC,MAAC,CAACC,MAAM,CAAC;IACpBmC,eAAe,EAAEpC,MAAC,CAACM,MAAM,CAAC,CAAC;IAC3BoC,gBAAgB,EAAE1C,MAAC,CAACC,MAAM,CAAC;MACzB0C,iBAAiB,EAAE3C,MAAC,CAACM,MAAM,CAAC,CAAC;MAC7BsC,iBAAiB,EAAE5C,MAAC,CAACM,MAAM,CAAC,CAAC;MAC7BuC,QAAQ,EAAE7C,MAAC,CAACe,KAAK,CAACf,MAAC,CAACM,MAAM,CAAC,CAAC,CAAC;MAC7BwC,YAAY,EAAE9C,MAAC,CAACM,MAAM,CAAC,CAAC,CAACyC,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEhD,MAAC,CAACM,MAAM,CAAC,CAAC,CAACyC,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC;AAACjD,OAAA,CAAAwC,YAAA,GAAAA,YAAA"}
+{"version":3,"names":["_zod","require","_zod2","_jwk","LEGACY_SD_JWT","exports","StatusAssertion","z","object","credential_hash_alg","literal","StatusList","idx","number","uri","string","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","UnixTime","exp","cnf","jwk","JWK","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,IAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;;AAEO,MAAMG,aAAa,GAAG,WAAW;AAACC,OAAA,CAAAD,aAAA,GAAAA,aAAA;AAEzC,MAAME,eAAe,GAAGC,MAAC,CAACC,MAAM,CAAC;EAC/BC,mBAAmB,EAAEF,MAAC,CAACG,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGJ,MAAC,CAACC,MAAM,CAAC;EAC1BI,GAAG,EAAEL,MAAC,CAACM,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEP,MAAC,CAACQ,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEO,MAAMC,YAAY,GAAGT,MAAC,CAACC,MAAM,CAAC;EACnCS,MAAM,EAAEV,MAAC,CAACC,MAAM,CAAC;IACfU,GAAG,EAAEX,MAAC,CAACY,IAAI,CAAC,CAAC,WAAW,EAAEf,aAAa,CAAC,CAAC;IACzCgB,GAAG,EAAEb,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfM,GAAG,EAAEd,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfO,WAAW,EAAEf,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAElB,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAEnB,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAEpB,MAAC,CAACC,MAAM,CAAC;IAChBoB,GAAG,EAAErB,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC;IACxBc,OAAO,EAAEtB,MAAC,CAACG,OAAO,CAAC,SAAS,CAAC;IAC7BoB,GAAG,EAAEvB,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfgB,GAAG,EAAExB,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAEC,cAAQ,CAACT,QAAQ,CAAC,CAAC;IACxBU,GAAG,EAAED,cAAQ;IACbE,GAAG,EAAE5B,MAAC,CAACC,MAAM,CAAC;MACZ4B,GAAG,EAAEC;IACP,CAAC,CAAC;IACFC,MAAM,EAAE/B,MAAC,CAACgC,KAAK,CAAC,CACdhC,MAAC,CAACC,MAAM,CAAC;MACPgC,WAAW,EAAE7B;IACf,CAAC,CAAC,EACFJ,MAAC,CAACC,MAAM,CAAC;MACP;MACAiC,gBAAgB,EAAEnC;IACpB,CAAC,CAAC,CACH,CAAC;IACFoC,GAAG,EAAEnC,MAAC,CAACQ,MAAM,CAAC,CAAC;IACf,eAAe,EAAER,MAAC,CAACQ,MAAM,CAAC,CAAC,CAACS,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AAHAnB,OAAA,CAAAW,YAAA,GAAAA,YAAA;AAKO,MAAM2B,YAAY,GAAGpC,MAAC,CAACC,MAAM,CAAC;EACnCoC,eAAe,EAAErC,MAAC,CAACQ,MAAM,CAAC,CAAC;EAC3B8B,eAAe,EAAEtC,MAAC,CAACQ,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AAJAV,OAAA,CAAAsC,YAAA,GAAAA,YAAA;AAMO,MAAMG,YAAY,GAAGvC,MAAC,CAACC,MAAM,CAAC;EACnCuC,IAAI,EAAExC,MAAC,CAACQ,MAAM,CAAC,CAAC;EAChBiC,WAAW,EAAEzC,MAAC,CAACQ,MAAM,CAAC,CAAC;EACvBkC,WAAW,EAAE1C,MAAC,CAACC,MAAM,CAAC;IACpBoC,eAAe,EAAErC,MAAC,CAACQ,MAAM,CAAC,CAAC;IAC3BmC,gBAAgB,EAAE3C,MAAC,CAACC,MAAM,CAAC;MACzB2C,iBAAiB,EAAE5C,MAAC,CAACQ,MAAM,CAAC,CAAC;MAC7BqC,iBAAiB,EAAE7C,MAAC,CAACQ,MAAM,CAAC,CAAC;MAC7BsC,QAAQ,EAAE9C,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC;MAC7BuC,YAAY,EAAE/C,MAAC,CAACQ,MAAM,CAAC,CAAC,CAACwC,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEjD,MAAC,CAACQ,MAAM,CAAC,CAAC,CAACwC,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC;AAAClD,OAAA,CAAAyC,YAAA,GAAAA,YAAA"}

package/lib/module/credential/presentation/v1.3.3/04-verify-certificate-chain.js

@@ -12,14 +12,21 @@ export const verifyAuthRequestCertificateChain = async (requestObjectJwt, _ref)
     readTimeout: 10_000
   };
   const requestObject = decode(requestObjectJwt);
-  const certChain = requestObject.protectedHeader.x5c;
-  if (!certChain) {
+  const x5c = requestObject.protectedHeader.x5c;
+  if (!x5c) {
     throw new MissingX509CertsError("No certificate chain (x5c) found in the Request Object");
   }
+
+  // The native validator expects the chain to include the leaf and any
+  // intermediates, excluding the trust anchor (supplied separately as
+  // `caRootCert`). Some RPs include the anchor as the last entry of x5c,
+  // which must be stripped or the native validator (notably on iOS) treats
+  // it as an extraneous/unexpected trailing certificate and fails.
+  const certChain = x5c.length > 1 && x5c.at(-1) === caRootCert ? x5c.slice(0, -1) : x5c;
   const validationResult = await verifyCertificateChain(certChain, caRootCert, x509Options);
   if (!validationResult.isValid) {
     Logger.log(LogLevel.ERROR, `Certificate chain failure: ${validationResult.validationStatus} - ${validationResult.errorMessage}`);
-    throw new X509ValidationError("X.509 certificate chain validation failed");
+    throw new X509ValidationError(`X.509 certificate chain validation failed. Status: ${validationResult.validationStatus}. Error: ${validationResult.errorMessage}`);
   }
   return validationResult;
 };

package/lib/module/credential/presentation/v1.3.3/04-verify-certificate-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["decode","verifyCertificateChain","MissingX509CertsError","X509ValidationError","Logger","LogLevel","verifyAuthRequestCertificateChain","requestObjectJwt","_ref","caRootCert","x509Options","requireCrl","connectTimeout","readTimeout","requestObject","certChain","protectedHeader","x5c","validationResult","isValid","log","ERROR","validationStatus","errorMessage"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/04-verify-certificate-chain.ts"],"mappings":"AACA,SAASA,MAAM,QAAQ,6BAA6B;AACpD,SACEC,sBAAsB,QAEjB,gCAAgC;AACvC,SACEC,qBAAqB,EACrBC,mBAAmB,QACd,8BAA8B;AACrC,SAASC,MAAM,EAAEC,QAAQ,QAAQ,wBAAwB;AAEzD,OAAO,MAAMC,iCAA6F,GACxG,MAAAA,CAAOC,gBAAgB,EAAAC,IAAA,KAAqB;EAAA,IAAnB;IAAEC;EAAW,CAAC,GAAAD,IAAA;EACrC,MAAME,WAAmC,GAAG;IAC1CC,UAAU,EAAE,KAAK;IACjBC,cAAc,EAAE,MAAM;IACtBC,WAAW,EAAE;EACf,CAAC;EAED,MAAMC,aAAa,GAAGd,MAAM,CAACO,gBAAgB,CAAC;EAE9C,MAAMQ,SAAS,GAAGD,aAAa,CAACE,eAAe,CAACC,GAAG;EAEnD,IAAI,CAACF,SAAS,EAAE;IACd,MAAM,IAAIb,qBAAqB,CAC7B,wDACF,CAAC;EACH;EAEA,MAAMgB,gBAAgB,GAAG,MAAMjB,sBAAsB,CACnDc,SAAS,EACTN,UAAU,EACVC,WACF,CAAC;EAED,IAAI,CAACQ,gBAAgB,CAACC,OAAO,EAAE;IAC7Bf,MAAM,CAACgB,GAAG,CACRf,QAAQ,CAACgB,KAAK,EACb,8BAA6BH,gBAAgB,CAACI,gBAAiB,MAAKJ,gBAAgB,CAACK,YAAa,EACrG,CAAC;IAED,MAAM,IAAIpB,mBAAmB,CAC3B,2CACF,CAAC;EACH;EAEA,OAAOe,gBAAgB;AACzB,CAAC"}
+{"version":3,"names":["decode","verifyCertificateChain","MissingX509CertsError","X509ValidationError","Logger","LogLevel","verifyAuthRequestCertificateChain","requestObjectJwt","_ref","caRootCert","x509Options","requireCrl","connectTimeout","readTimeout","requestObject","x5c","protectedHeader","certChain","length","at","slice","validationResult","isValid","log","ERROR","validationStatus","errorMessage"],"sourceRoot":"../../../../../src","sources":["credential/presentation/v1.3.3/04-verify-certificate-chain.ts"],"mappings":"AACA,SAASA,MAAM,QAAQ,6BAA6B;AACpD,SACEC,sBAAsB,QAEjB,gCAAgC;AACvC,SACEC,qBAAqB,EACrBC,mBAAmB,QACd,8BAA8B;AACrC,SAASC,MAAM,EAAEC,QAAQ,QAAQ,wBAAwB;AAEzD,OAAO,MAAMC,iCAA6F,GACxG,MAAAA,CAAOC,gBAAgB,EAAAC,IAAA,KAAqB;EAAA,IAAnB;IAAEC;EAAW,CAAC,GAAAD,IAAA;EACrC,MAAME,WAAmC,GAAG;IAC1CC,UAAU,EAAE,KAAK;IACjBC,cAAc,EAAE,MAAM;IACtBC,WAAW,EAAE;EACf,CAAC;EAED,MAAMC,aAAa,GAAGd,MAAM,CAACO,gBAAgB,CAAC;EAE9C,MAAMQ,GAAG,GAAGD,aAAa,CAACE,eAAe,CAACD,GAAG;EAE7C,IAAI,CAACA,GAAG,EAAE;IACR,MAAM,IAAIb,qBAAqB,CAC7B,wDACF,CAAC;EACH;;EAEA;EACA;EACA;EACA;EACA;EACA,MAAMe,SAAS,GACbF,GAAG,CAACG,MAAM,GAAG,CAAC,IAAIH,GAAG,CAACI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAKV,UAAU,GAAGM,GAAG,CAACK,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAGL,GAAG;EAEtE,MAAMM,gBAAgB,GAAG,MAAMpB,sBAAsB,CACnDgB,SAAS,EACTR,UAAU,EACVC,WACF,CAAC;EAED,IAAI,CAACW,gBAAgB,CAACC,OAAO,EAAE;IAC7BlB,MAAM,CAACmB,GAAG,CACRlB,QAAQ,CAACmB,KAAK,EACb,8BAA6BH,gBAAgB,CAACI,gBAAiB,MAAKJ,gBAAgB,CAACK,YAAa,EACrG,CAAC;IAED,MAAM,IAAIvB,mBAAmB,CAC1B,sDAAqDkB,gBAAgB,CAACI,gBAAiB,YAAWJ,gBAAgB,CAACK,YAAa,EACnI,CAAC;EACH;EAEA,OAAOL,gBAAgB;AACzB,CAAC"}

package/lib/module/credential/status/v1.3.3/01-status-list.js

@@ -3,7 +3,7 @@ import { decode as decodeJwt } from "@pagopa/io-react-native-jwt";
 import { getStatusListFromJWT } from "@sd-jwt/jwt-status-list";
 import { IoWalletError } from "../../../utils/errors";
 import { hasStatusOrThrow } from "../../../utils/misc";
-const getStatusListEntry = async (credential, format) => {
+export const getStatusListEntry = async (credential, format) => {
   let statusListEntry;
   if (format === "mso_mdoc") {
     var _decoded$issuerAuth;

package/lib/module/credential/status/v1.3.3/01-status-list.js.map

@@ -1 +1 @@
-{"version":3,"names":["CBOR","decode","decodeJwt","getStatusListFromJWT","IoWalletError","hasStatusOrThrow","getStatusListEntry","credential","format","statusListEntry","_decoded$issuerAuth","decoded","issuerAuth","payload","status","status_list","fetchStatusList","uri","appFetch","options","arguments","length","undefined","headers","Accept","cacheDisabled","then","response","text","getStatusListByUri","fetch","statusList","exp","Math","floor","Date","now","getStatusList","context","idx"],"sourceRoot":"../../../../../src","sources":["credential/status/v1.3.3/01-status-list.ts"],"mappings":"AAAA,SAASA,IAAI,QAAQ,kCAAkC;AACvD,SAASC,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;AACjE,SACEC,oBAAoB,QAEf,yBAAyB;AAChC,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,gBAAgB,QAAQ,qBAAqB;AAItD,MAAMC,kBAAkB,GAAG,MAAAA,CACzBC,UAAkB,EAClBC,MAAwB,KACK;EAC7B,IAAIC,eAA4C;EAEhD,IAAID,MAAM,KAAK,UAAU,EAAE;IAAA,IAAAE,mBAAA;IACzB;IACA,MAAMC,OAAO,GAAG,MAAMX,IAAI,CAACC,MAAM,CAACM,UAAU,CAAC;IAC7CE,eAAe,IAAAC,mBAAA,GAAGC,OAAO,CAACC,UAAU,cAAAF,mBAAA,gBAAAA,mBAAA,GAAlBA,mBAAA,CAAoBG,OAAO,cAAAH,mBAAA,gBAAAA,mBAAA,GAA3BA,mBAAA,CAA6BI,MAAM,cAAAJ,mBAAA,uBAAnCA,mBAAA,CAAqCK,WAAW;EACpE;EAEA,IAAIP,MAAM,KAAK,WAAW,EAAE;IAC1BC,eAAe,GAAGN,oBAAoB,CAACI,UAAU,CAAC;EACpD;EAEA,IAAI,CAACE,eAAe,EAAE;IACpB,MAAM,IAAIL,aAAa,CAAC,+CAA+C,CAAC;EAC1E;EAEA,OAAOK,eAAe;AACxB,CAAC;AAED,MAAMO,eAAe,GAAG,SAAAA,CACtBC,GAAW,EACXC,QAA8B;EAAA,IAC9BC,OAAoC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAAA,OAEzCF,QAAQ,CAACD,GAAG,EAAE;IACZM,OAAO,EAAE;MACPC,MAAM,EAAE,4BAA4B;MACpC,IAAIL,OAAO,CAACM,aAAa,IAAI;QAAE,eAAe,EAAE;MAAW,CAAC;IAC9D;EACF,CAAC,CAAC,CACCC,IAAI,CAACrB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BqB,IAAI,CAAEC,QAAQ,IAAKA,QAAQ,CAACC,IAAI,CAAC,CAAC,CAAC;AAAA;AAExC,OAAO,MAAMC,kBAA6C,GAAG,eAAAA,CAC3DZ,GAAG,EAEA;EAAA,IADH;IAAEC,QAAQ,GAAGY;EAAM,CAAC,GAAAV,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEzB;EACA,IAAIW,UAAU,GAAG,MAAMf,eAAe,CAACC,GAAG,EAAEC,QAAQ,CAAC;EACrD,MAAMP,OAAO,GAAGT,SAAS,CAAC6B,UAAU,CAAC;EAErC,MAAM;IAAEC;EAAI,CAAC,GAAGrB,OAAO,CAACE,OAAO;;EAE/B;EACA;EACA,IAAImB,GAAG,IAAIA,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE;IAC9CL,UAAU,GAAG,MAAMf,eAAe,CAACC,GAAG,EAAEC,QAAQ,EAAE;MAAEO,aAAa,EAAE;IAAK,CAAC,CAAC;EAC5E;EAEA,OAAOM,UAAU;AACnB,CAAC;AAED,OAAO,MAAMM,aAAmC,GAAG,MAAAA,CACjD9B,UAAU,EACVC,MAAM,EACN8B,OAAO,KACJ;EACH,MAAM;IAAErB,GAAG;IAAEsB;EAAI,CAAC,GAAG,MAAMjC,kBAAkB,CAACC,UAAU,EAAEC,MAAM,CAAC;EACjE,MAAMuB,UAAU,GAAG,MAAMF,kBAAkB,CAACZ,GAAG,EAAEqB,OAAO,CAAC;EACzD,OAAO;IAAErB,GAAG;IAAEsB,GAAG;IAAER,UAAU;IAAEvB,MAAM,EAAE;EAAM,CAAC;AAChD,CAAC"}
+{"version":3,"names":["CBOR","decode","decodeJwt","getStatusListFromJWT","IoWalletError","hasStatusOrThrow","getStatusListEntry","credential","format","statusListEntry","_decoded$issuerAuth","decoded","issuerAuth","payload","status","status_list","fetchStatusList","uri","appFetch","options","arguments","length","undefined","headers","Accept","cacheDisabled","then","response","text","getStatusListByUri","fetch","statusList","exp","Math","floor","Date","now","getStatusList","context","idx"],"sourceRoot":"../../../../../src","sources":["credential/status/v1.3.3/01-status-list.ts"],"mappings":"AAAA,SAASA,IAAI,QAAQ,kCAAkC;AACvD,SAASC,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;AACjE,SACEC,oBAAoB,QAEf,yBAAyB;AAChC,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,gBAAgB,QAAQ,qBAAqB;AAGtD,OAAO,MAAMC,kBAAuD,GAAG,MAAAA,CACrEC,UAAU,EACVC,MAAM,KACH;EACH,IAAIC,eAA4C;EAEhD,IAAID,MAAM,KAAK,UAAU,EAAE;IAAA,IAAAE,mBAAA;IACzB;IACA,MAAMC,OAAO,GAAG,MAAMX,IAAI,CAACC,MAAM,CAACM,UAAU,CAAC;IAC7CE,eAAe,IAAAC,mBAAA,GAAGC,OAAO,CAACC,UAAU,cAAAF,mBAAA,gBAAAA,mBAAA,GAAlBA,mBAAA,CAAoBG,OAAO,cAAAH,mBAAA,gBAAAA,mBAAA,GAA3BA,mBAAA,CAA6BI,MAAM,cAAAJ,mBAAA,uBAAnCA,mBAAA,CAAqCK,WAAW;EACpE;EAEA,IAAIP,MAAM,KAAK,WAAW,EAAE;IAC1BC,eAAe,GAAGN,oBAAoB,CAACI,UAAU,CAAC;EACpD;EAEA,IAAI,CAACE,eAAe,EAAE;IACpB,MAAM,IAAIL,aAAa,CAAC,+CAA+C,CAAC;EAC1E;EAEA,OAAOK,eAAe;AACxB,CAAC;AAED,MAAMO,eAAe,GAAG,SAAAA,CACtBC,GAAW,EACXC,QAA8B;EAAA,IAC9BC,OAAoC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAAA,OAEzCF,QAAQ,CAACD,GAAG,EAAE;IACZM,OAAO,EAAE;MACPC,MAAM,EAAE,4BAA4B;MACpC,IAAIL,OAAO,CAACM,aAAa,IAAI;QAAE,eAAe,EAAE;MAAW,CAAC;IAC9D;EACF,CAAC,CAAC,CACCC,IAAI,CAACrB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BqB,IAAI,CAAEC,QAAQ,IAAKA,QAAQ,CAACC,IAAI,CAAC,CAAC,CAAC;AAAA;AAExC,OAAO,MAAMC,kBAA6C,GAAG,eAAAA,CAC3DZ,GAAG,EAEA;EAAA,IADH;IAAEC,QAAQ,GAAGY;EAAM,CAAC,GAAAV,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEzB;EACA,IAAIW,UAAU,GAAG,MAAMf,eAAe,CAACC,GAAG,EAAEC,QAAQ,CAAC;EACrD,MAAMP,OAAO,GAAGT,SAAS,CAAC6B,UAAU,CAAC;EAErC,MAAM;IAAEC;EAAI,CAAC,GAAGrB,OAAO,CAACE,OAAO;;EAE/B;EACA;EACA,IAAImB,GAAG,IAAIA,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE;IAC9CL,UAAU,GAAG,MAAMf,eAAe,CAACC,GAAG,EAAEC,QAAQ,EAAE;MAAEO,aAAa,EAAE;IAAK,CAAC,CAAC;EAC5E;EAEA,OAAOM,UAAU;AACnB,CAAC;AAED,OAAO,MAAMM,aAAmC,GAAG,MAAAA,CACjD9B,UAAU,EACVC,MAAM,EACN8B,OAAO,KACJ;EACH,MAAM;IAAErB,GAAG;IAAEsB;EAAI,CAAC,GAAG,MAAMjC,kBAAkB,CAACC,UAAU,EAAEC,MAAM,CAAC;EACjE,MAAMuB,UAAU,GAAG,MAAMF,kBAAkB,CAACZ,GAAG,EAAEqB,OAAO,CAAC;EACzD,OAAO;IAAErB,GAAG;IAAEsB,GAAG;IAAER,UAAU;IAAEvB,MAAM,EAAE;EAAM,CAAC;AAChD,CAAC"}

package/lib/module/credential/status/v1.3.3/index.js

@@ -1,4 +1,4 @@
-import { getStatusList, getStatusListByUri } from "./01-status-list";
+import { getStatusList, getStatusListByUri, getStatusListEntry } from "./01-status-list";
 import { verifyAndParseStatusList } from "./02-verify-and-parse-status-list";
 import { getStatus } from "./03-get-status";
 export const CredentialStatus = {
@@ -10,7 +10,8 @@ export const CredentialStatus = {
     get: getStatusList,
     getByUri: getStatusListByUri,
     verifyAndParse: verifyAndParseStatusList,
-    getStatus
+    getStatus,
+    getStatusListEntry
   }
 };
 //# sourceMappingURL=index.js.map

package/lib/module/credential/status/v1.3.3/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["getStatusList","getStatusListByUri","verifyAndParseStatusList","getStatus","CredentialStatus","statusAssertion","isSupported","statusList","get","getByUri","verifyAndParse"],"sourceRoot":"../../../../../src","sources":["credential/status/v1.3.3/index.ts"],"mappings":"AACA,SAASA,aAAa,EAAEC,kBAAkB,QAAQ,kBAAkB;AACpE,SAASC,wBAAwB,QAAQ,mCAAmC;AAC5E,SAASC,SAAS,QAAQ,iBAAiB;AAE3C,OAAO,MAAMC,gBAAqC,GAAG;EACnDC,eAAe,EAAE;IACfC,WAAW,EAAE;EACf,CAAC;EACDC,UAAU,EAAE;IACVD,WAAW,EAAE,IAAI;IACjBE,GAAG,EAAER,aAAa;IAClBS,QAAQ,EAAER,kBAAkB;IAC5BS,cAAc,EAAER,wBAAwB;IACxCC;EACF;AACF,CAAC"}
+{"version":3,"names":["getStatusList","getStatusListByUri","getStatusListEntry","verifyAndParseStatusList","getStatus","CredentialStatus","statusAssertion","isSupported","statusList","get","getByUri","verifyAndParse"],"sourceRoot":"../../../../../src","sources":["credential/status/v1.3.3/index.ts"],"mappings":"AACA,SACEA,aAAa,EACbC,kBAAkB,EAClBC,kBAAkB,QACb,kBAAkB;AACzB,SAASC,wBAAwB,QAAQ,mCAAmC;AAC5E,SAASC,SAAS,QAAQ,iBAAiB;AAE3C,OAAO,MAAMC,gBAAqC,GAAG;EACnDC,eAAe,EAAE;IACfC,WAAW,EAAE;EACf,CAAC;EACDC,UAAU,EAAE;IACVD,WAAW,EAAE,IAAI;IACjBE,GAAG,EAAET,aAAa;IAClBU,QAAQ,EAAET,kBAAkB;IAC5BU,cAAc,EAAER,wBAAwB;IACxCC,SAAS;IACTF;EACF;AACF,CAAC"}

package/lib/module/sd-jwt/types.js

@@ -12,7 +12,7 @@ const StatusAssertion = z.object({
   credential_hash_alg: z.literal("sha-256")
 });
 const StatusList = z.object({
-  idx: z.string(),
+  idx: z.number(),
   uri: z.string()
 });
 

package/lib/module/sd-jwt/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","UnixTime","JWK","LEGACY_SD_JWT","StatusAssertion","object","credential_hash_alg","literal","StatusList","idx","string","uri","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","exp","cnf","jwk","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AACvB,SAASC,QAAQ,QAAQ,cAAc;AACvC,SAASC,GAAG,QAAQ,cAAc;;AAElC;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,aAAa,GAAG,WAAW;AAExC,MAAMC,eAAe,GAAGJ,CAAC,CAACK,MAAM,CAAC;EAC/BC,mBAAmB,EAAEN,CAAC,CAACO,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGR,CAAC,CAACK,MAAM,CAAC;EAC1BI,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEX,CAAC,CAACU,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAME,YAAY,GAAGZ,CAAC,CAACK,MAAM,CAAC;EACnCQ,MAAM,EAAEb,CAAC,CAACK,MAAM,CAAC;IACfS,GAAG,EAAEd,CAAC,CAACe,IAAI,CAAC,CAAC,WAAW,EAAEZ,aAAa,CAAC,CAAC;IACzCa,GAAG,EAAEhB,CAAC,CAACU,MAAM,CAAC,CAAC;IACfO,GAAG,EAAEjB,CAAC,CAACU,MAAM,CAAC,CAAC;IACfQ,WAAW,EAAElB,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAErB,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAEtB,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC,CAACU,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAEvB,CAAC,CAACK,MAAM,CAAC;IAChBmB,GAAG,EAAExB,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC;IACxBe,OAAO,EAAEzB,CAAC,CAACO,OAAO,CAAC,SAAS,CAAC;IAC7BmB,GAAG,EAAE1B,CAAC,CAACU,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAE3B,CAAC,CAACU,MAAM,CAAC,CAAC;IACfkB,GAAG,EAAE3B,QAAQ,CAACmB,QAAQ,CAAC,CAAC;IACxBS,GAAG,EAAE5B,QAAQ;IACb6B,GAAG,EAAE9B,CAAC,CAACK,MAAM,CAAC;MACZ0B,GAAG,EAAE7B;IACP,CAAC,CAAC;IACF8B,MAAM,EAAEhC,CAAC,CAACiC,KAAK,CAAC,CACdjC,CAAC,CAACK,MAAM,CAAC;MACP6B,WAAW,EAAE1B;IACf,CAAC,CAAC,EACFR,CAAC,CAACK,MAAM,CAAC;MACP;MACA8B,gBAAgB,EAAE/B;IACpB,CAAC,CAAC,CACH,CAAC;IACFgC,GAAG,EAAEpC,CAAC,CAACU,MAAM,CAAC,CAAC;IACf,eAAe,EAAEV,CAAC,CAACU,MAAM,CAAC,CAAC,CAACU,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMiB,YAAY,GAAGrC,CAAC,CAACK,MAAM,CAAC;EACnCiC,eAAe,EAAEtC,CAAC,CAACU,MAAM,CAAC,CAAC;EAC3B6B,eAAe,EAAEvC,CAAC,CAACU,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAM8B,YAAY,GAAGxC,CAAC,CAACK,MAAM,CAAC;EACnCoC,IAAI,EAAEzC,CAAC,CAACU,MAAM,CAAC,CAAC;EAChBgC,WAAW,EAAE1C,CAAC,CAACU,MAAM,CAAC,CAAC;EACvBiC,WAAW,EAAE3C,CAAC,CAACK,MAAM,CAAC;IACpBiC,eAAe,EAAEtC,CAAC,CAACU,MAAM,CAAC,CAAC;IAC3BkC,gBAAgB,EAAE5C,CAAC,CAACK,MAAM,CAAC;MACzBwC,iBAAiB,EAAE7C,CAAC,CAACU,MAAM,CAAC,CAAC;MAC7BoC,iBAAiB,EAAE9C,CAAC,CAACU,MAAM,CAAC,CAAC;MAC7BqC,QAAQ,EAAE/C,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACU,MAAM,CAAC,CAAC,CAAC;MAC7BsC,YAAY,EAAEhD,CAAC,CAACU,MAAM,CAAC,CAAC,CAACuC,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAElD,CAAC,CAACU,MAAM,CAAC,CAAC,CAACuC,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"names":["z","UnixTime","JWK","LEGACY_SD_JWT","StatusAssertion","object","credential_hash_alg","literal","StatusList","idx","number","uri","string","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","exp","cnf","jwk","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AACvB,SAASC,QAAQ,QAAQ,cAAc;AACvC,SAASC,GAAG,QAAQ,cAAc;;AAElC;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,aAAa,GAAG,WAAW;AAExC,MAAMC,eAAe,GAAGJ,CAAC,CAACK,MAAM,CAAC;EAC/BC,mBAAmB,EAAEN,CAAC,CAACO,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGR,CAAC,CAACK,MAAM,CAAC;EAC1BI,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEX,CAAC,CAACY,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,YAAY,GAAGb,CAAC,CAACK,MAAM,CAAC;EACnCS,MAAM,EAAEd,CAAC,CAACK,MAAM,CAAC;IACfU,GAAG,EAAEf,CAAC,CAACgB,IAAI,CAAC,CAAC,WAAW,EAAEb,aAAa,CAAC,CAAC;IACzCc,GAAG,EAAEjB,CAAC,CAACY,MAAM,CAAC,CAAC;IACfM,GAAG,EAAElB,CAAC,CAACY,MAAM,CAAC,CAAC;IACfO,WAAW,EAAEnB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEtB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAEvB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAExB,CAAC,CAACK,MAAM,CAAC;IAChBoB,GAAG,EAAEzB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;IACxBc,OAAO,EAAE1B,CAAC,CAACO,OAAO,CAAC,SAAS,CAAC;IAC7BoB,GAAG,EAAE3B,CAAC,CAACY,MAAM,CAAC,CAAC;IACfgB,GAAG,EAAE5B,CAAC,CAACY,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAE5B,QAAQ,CAACoB,QAAQ,CAAC,CAAC;IACxBS,GAAG,EAAE7B,QAAQ;IACb8B,GAAG,EAAE/B,CAAC,CAACK,MAAM,CAAC;MACZ2B,GAAG,EAAE9B;IACP,CAAC,CAAC;IACF+B,MAAM,EAAEjC,CAAC,CAACkC,KAAK,CAAC,CACdlC,CAAC,CAACK,MAAM,CAAC;MACP8B,WAAW,EAAE3B;IACf,CAAC,CAAC,EACFR,CAAC,CAACK,MAAM,CAAC;MACP;MACA+B,gBAAgB,EAAEhC;IACpB,CAAC,CAAC,CACH,CAAC;IACFiC,GAAG,EAAErC,CAAC,CAACY,MAAM,CAAC,CAAC;IACf,eAAe,EAAEZ,CAAC,CAACY,MAAM,CAAC,CAAC,CAACS,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMiB,YAAY,GAAGtC,CAAC,CAACK,MAAM,CAAC;EACnCkC,eAAe,EAAEvC,CAAC,CAACY,MAAM,CAAC,CAAC;EAC3B4B,eAAe,EAAExC,CAAC,CAACY,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAM6B,YAAY,GAAGzC,CAAC,CAACK,MAAM,CAAC;EACnCqC,IAAI,EAAE1C,CAAC,CAACY,MAAM,CAAC,CAAC;EAChB+B,WAAW,EAAE3C,CAAC,CAACY,MAAM,CAAC,CAAC;EACvBgC,WAAW,EAAE5C,CAAC,CAACK,MAAM,CAAC;IACpBkC,eAAe,EAAEvC,CAAC,CAACY,MAAM,CAAC,CAAC;IAC3BiC,gBAAgB,EAAE7C,CAAC,CAACK,MAAM,CAAC;MACzByC,iBAAiB,EAAE9C,CAAC,CAACY,MAAM,CAAC,CAAC;MAC7BmC,iBAAiB,EAAE/C,CAAC,CAACY,MAAM,CAAC,CAAC;MAC7BoC,QAAQ,EAAEhD,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;MAC7BqC,YAAY,EAAEjD,CAAC,CAACY,MAAM,CAAC,CAAC,CAACsC,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEnD,CAAC,CAACY,MAAM,CAAC,CAAC,CAACsC,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC"}

package/lib/typescript/credential/presentation/v1.3.3/04-verify-certificate-chain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"04-verify-certificate-chain.d.ts","sourceRoot":"","sources":["../../../../../src/credential/presentation/v1.3.3/04-verify-certificate-chain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAYpD,eAAO,MAAM,iCAAiC,EAAE,qBAAqB,CAAC,mCAAmC,CAoCtG,CAAC"}
+{"version":3,"file":"04-verify-certificate-chain.d.ts","sourceRoot":"","sources":["../../../../../src/credential/presentation/v1.3.3/04-verify-certificate-chain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAYpD,eAAO,MAAM,iCAAiC,EAAE,qBAAqB,CAAC,mCAAmC,CA4CtG,CAAC"}

package/lib/typescript/credential/status/api/status-list.d.ts

@@ -58,5 +58,18 @@ export interface StatusListApi {
         rawStatus: string;
         status: string;
     };
+    /**
+     * Extracts the status list entry from a raw credential, i.e. the object containing `uri` and `ìdx`.
+     *
+     * This method **does not perform any HTTP request** to fetch the list. Use {@link get} or {@link getByUri} instead to fetch it.
+     * @since 1.3.3
+     * @param credential The raw credential
+     * @param format The credential format
+     * @returns The status list entry extracted from the credential
+     */
+    getStatusListEntry(credential: string, format: CredentialFormat): Promise<{
+        idx: number;
+        uri: string;
+    }>;
 }
 //# sourceMappingURL=status-list.d.ts.map

package/lib/typescript/credential/status/api/status-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status-list.d.ts","sourceRoot":"","sources":["../../../../../src/credential/status/api/status-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,IAAI,CAAC;IAElB;;;;;;;;;;;;;;;;;OAiBG;IACH,GAAG,CACD,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;KACjC,GACA,OAAO,CAAC;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;KACjC,GACA,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB;;;;;;OAMG;IACH,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAErE;;;;;;OAMG;IACH,SAAS,CACP,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,EACrC,GAAG,EAAE,MAAM,GACV;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH"}
+{"version":3,"file":"status-list.d.ts","sourceRoot":"","sources":["../../../../../src/credential/status/api/status-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,IAAI,CAAC;IAElB;;;;;;;;;;;;;;;;;OAiBG;IACH,GAAG,CACD,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;KACjC,GACA,OAAO,CAAC;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;KACjC,GACA,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB;;;;;;OAMG;IACH,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAErE;;;;;;OAMG;IACH,SAAS,CACP,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,EACrC,GAAG,EAAE,MAAM,GACV;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAEF;;;;;;;;OAQG;IACH,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1C"}

package/lib/typescript/credential/status/v1.3.3/01-status-list.d.ts

@@ -1,4 +1,5 @@
 import type { StatusListApi } from "../api/status-list";
+export declare const getStatusListEntry: StatusListApi["getStatusListEntry"];
 export declare const getStatusListByUri: StatusListApi["getByUri"];
 export declare const getStatusList: StatusListApi["get"];
 //# sourceMappingURL=01-status-list.d.ts.map

package/lib/typescript/credential/status/v1.3.3/01-status-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"01-status-list.d.ts","sourceRoot":"","sources":["../../../../../src/credential/status/v1.3.3/01-status-list.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAuCxD,eAAO,MAAM,kBAAkB,EAAE,aAAa,CAAC,UAAU,CAiBxD,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,KAAK,CAQ9C,CAAC"}
+{"version":3,"file":"01-status-list.d.ts","sourceRoot":"","sources":["../../../../../src/credential/status/v1.3.3/01-status-list.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,eAAO,MAAM,kBAAkB,EAAE,aAAa,CAAC,oBAAoB,CAqBlE,CAAC;AAgBF,eAAO,MAAM,kBAAkB,EAAE,aAAa,CAAC,UAAU,CAiBxD,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,KAAK,CAQ9C,CAAC"}

package/lib/typescript/credential/status/v1.3.3/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/credential/status/v1.3.3/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAKlD,eAAO,MAAM,gBAAgB,EAAE,mBAW9B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/credential/status/v1.3.3/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AASlD,eAAO,MAAM,gBAAgB,EAAE,mBAY9B,CAAC"}

package/lib/typescript/sd-jwt/index.d.ts

@@ -53,7 +53,7 @@ export declare const decode: (token: string) => {
             };
             status: {
                 status_list: {
-                    idx: string;
+                    idx: number;
                     uri: string;
                 };
             } | {

package/lib/typescript/sd-jwt/types.d.ts

@@ -60,7 +60,7 @@ export declare const SdJwt4VCBase: z.ZodObject<{
         }, z.core.$strip>;
         status: z.ZodUnion<readonly [z.ZodObject<{
             status_list: z.ZodObject<{
-                idx: z.ZodString;
+                idx: z.ZodNumber;
                 uri: z.ZodString;
             }, z.core.$strip>;
         }, z.core.$strip>, z.ZodObject<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pagopa/io-react-native-wallet",
-  "version": "3.6.1",
+  "version": "3.6.2",
   "description": "Provide data structures, helpers and API for IO Wallet",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",

package/src/credential/presentation/v1.3.3/04-verify-certificate-chain.ts

@@ -20,14 +20,22 @@ export const verifyAuthRequestCertificateChain: RemotePresentationApi["verifyAut
 
     const requestObject = decode(requestObjectJwt);
 
-    const certChain = requestObject.protectedHeader.x5c;
+    const x5c = requestObject.protectedHeader.x5c;
 
-    if (!certChain) {
+    if (!x5c) {
       throw new MissingX509CertsError(
         "No certificate chain (x5c) found in the Request Object"
       );
     }
 
+    // The native validator expects the chain to include the leaf and any
+    // intermediates, excluding the trust anchor (supplied separately as
+    // `caRootCert`). Some RPs include the anchor as the last entry of x5c,
+    // which must be stripped or the native validator (notably on iOS) treats
+    // it as an extraneous/unexpected trailing certificate and fails.
+    const certChain =
+      x5c.length > 1 && x5c.at(-1) === caRootCert ? x5c.slice(0, -1) : x5c;
+
     const validationResult = await verifyCertificateChain(
       certChain,
       caRootCert,
@@ -41,7 +49,7 @@ export const verifyAuthRequestCertificateChain: RemotePresentationApi["verifyAut
       );
 
       throw new X509ValidationError(
-        "X.509 certificate chain validation failed"
+        `X.509 certificate chain validation failed. Status: ${validationResult.validationStatus}. Error: ${validationResult.errorMessage}`
       );
     }
 

package/src/credential/status/api/status-list.ts

@@ -73,4 +73,18 @@ export interface StatusListApi {
     rawStatus: string;
     status: string;
   };
+
+  /**
+   * Extracts the status list entry from a raw credential, i.e. the object containing `uri` and `ìdx`.
+   *
+   * This method **does not perform any HTTP request** to fetch the list. Use {@link get} or {@link getByUri} instead to fetch it.
+   * @since 1.3.3
+   * @param credential The raw credential
+   * @param format The credential format
+   * @returns The status list entry extracted from the credential
+   */
+  getStatusListEntry(
+    credential: string,
+    format: CredentialFormat
+  ): Promise<{ idx: number; uri: string }>;
 }

package/src/credential/status/v1.3.3/01-status-list.ts

@@ -6,13 +6,12 @@ import {
 } from "@sd-jwt/jwt-status-list";
 import { IoWalletError } from "../../../utils/errors";
 import { hasStatusOrThrow } from "../../../utils/misc";
-import type { CredentialFormat } from "../../../credential/issuance/api";
 import type { StatusListApi } from "../api/status-list";
 
-const getStatusListEntry = async (
-  credential: string,
-  format: CredentialFormat
-): Promise<StatusListEntry> => {
+export const getStatusListEntry: StatusListApi["getStatusListEntry"] = async (
+  credential,
+  format
+) => {
   let statusListEntry: StatusListEntry | undefined;
 
   if (format === "mso_mdoc") {

package/src/credential/status/v1.3.3/index.ts

@@ -1,5 +1,9 @@
 import type { CredentialStatusApi } from "../api";
-import { getStatusList, getStatusListByUri } from "./01-status-list";
+import {
+  getStatusList,
+  getStatusListByUri,
+  getStatusListEntry,
+} from "./01-status-list";
 import { verifyAndParseStatusList } from "./02-verify-and-parse-status-list";
 import { getStatus } from "./03-get-status";
 
@@ -13,5 +17,6 @@ export const CredentialStatus: CredentialStatusApi = {
     getByUri: getStatusListByUri,
     verifyAndParse: verifyAndParseStatusList,
     getStatus,
+    getStatusListEntry,
   },
 };

package/src/sd-jwt/types.ts

@@ -14,7 +14,7 @@ const StatusAssertion = z.object({
 });
 
 const StatusList = z.object({
-  idx: z.string(),
+  idx: z.number(),
   uri: z.string(),
 });