@pagopa/io-react-native-wallet 3.6.2 → 3.6.4

package/lib/module/credential/issuance/v1.0.0/index.js

@@ -1,23 +1,23 @@
+import { MRTDPoPv1_0 } from "../mrtd-pop";
 import { evaluateIssuerTrust } from "./01-evaluate-issuer-trust";
 import { startUserAuthorization } from "./02-start-user-authorization";
-import { continueUserAuthorizationWithMRTDPoPChallenge, completePidUserAuthorizationWithQueryMode, completeEaaUserAuthorizationWithQueryMode, completeUserAuthorizationWithFormPostJwtMode, buildAuthorizationUrl, getRequestedCredentialToBePresented } from "./03-complete-user-authorization";
+import { buildAuthorizationUrl, completeEaaUserAuthorizationWithQueryMode, completePidUserAuthorizationWithQueryMode, completeUserAuthorizationWithFormPostJwtMode, continueUserAuthorizationWithMRTDPoPChallenge, getRequestedCredentialToBePresented } from "./03-complete-user-authorization";
 import { authorizeAccess } from "./04-authorize-access";
 import { obtainCredential, obtainCredentialsBatch } from "./05-obtain-credential";
 import { verifyAndParseCredential } from "./06-verify-and-parse-credential";
-import { MRTDPoPv1_0 } from "../mrtd-pop";
 export const Issuance = {
-  evaluateIssuerTrust,
-  startUserAuthorization,
+  authorizeAccess,
   buildAuthorizationUrl,
-  completePidUserAuthorizationWithQueryMode,
   completeEaaUserAuthorizationWithQueryMode,
+  completePidUserAuthorizationWithQueryMode,
+  completeUserAuthorizationWithFormPostJwtMode,
   continueUserAuthorizationWithMRTDPoPChallenge,
+  evaluateIssuerTrust,
   getRequestedCredentialToBePresented,
-  completeUserAuthorizationWithFormPostJwtMode,
-  authorizeAccess,
+  MRTDPoP: MRTDPoPv1_0,
   obtainCredential,
   obtainCredentialsBatch,
-  verifyAndParseCredential,
-  MRTDPoP: MRTDPoPv1_0
+  startUserAuthorization,
+  verifyAndParseCredential
 };
 //# sourceMappingURL=index.js.map

package/lib/module/credential/issuance/v1.0.0/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["evaluateIssuerTrust","startUserAuthorization","continueUserAuthorizationWithMRTDPoPChallenge","completePidUserAuthorizationWithQueryMode","completeEaaUserAuthorizationWithQueryMode","completeUserAuthorizationWithFormPostJwtMode","buildAuthorizationUrl","getRequestedCredentialToBePresented","authorizeAccess","obtainCredential","obtainCredentialsBatch","verifyAndParseCredential","MRTDPoPv1_0","Issuance","MRTDPoP"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/index.ts"],"mappings":"AACA,SAASA,mBAAmB,QAAQ,4BAA4B;AAChE,SAASC,sBAAsB,QAAQ,+BAA+B;AACtE,SACEC,6CAA6C,EAC7CC,yCAAyC,EACzCC,yCAAyC,EACzCC,4CAA4C,EAC5CC,qBAAqB,EACrBC,mCAAmC,QAC9B,kCAAkC;AACzC,SAASC,eAAe,QAAQ,uBAAuB;AACvD,SACEC,gBAAgB,EAChBC,sBAAsB,QACjB,wBAAwB;AAC/B,SAASC,wBAAwB,QAAQ,kCAAkC;AAC3E,SAASC,WAAW,QAAQ,aAAa;AAEzC,OAAO,MAAMC,QAAqB,GAAG;EACnCb,mBAAmB;EACnBC,sBAAsB;EACtBK,qBAAqB;EACrBH,yCAAyC;EACzCC,yCAAyC;EACzCF,6CAA6C;EAC7CK,mCAAmC;EACnCF,4CAA4C;EAC5CG,eAAe;EACfC,gBAAgB;EAChBC,sBAAsB;EACtBC,wBAAwB;EACxBG,OAAO,EAAEF;AACX,CAAC"}
+{"version":3,"names":["MRTDPoPv1_0","evaluateIssuerTrust","startUserAuthorization","buildAuthorizationUrl","completeEaaUserAuthorizationWithQueryMode","completePidUserAuthorizationWithQueryMode","completeUserAuthorizationWithFormPostJwtMode","continueUserAuthorizationWithMRTDPoPChallenge","getRequestedCredentialToBePresented","authorizeAccess","obtainCredential","obtainCredentialsBatch","verifyAndParseCredential","Issuance","MRTDPoP"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/index.ts"],"mappings":"AAEA,SAASA,WAAW,QAAQ,aAAa;AACzC,SAASC,mBAAmB,QAAQ,4BAA4B;AAChE,SAASC,sBAAsB,QAAQ,+BAA+B;AACtE,SACEC,qBAAqB,EACrBC,yCAAyC,EACzCC,yCAAyC,EACzCC,4CAA4C,EAC5CC,6CAA6C,EAC7CC,mCAAmC,QAC9B,kCAAkC;AACzC,SAASC,eAAe,QAAQ,uBAAuB;AACvD,SACEC,gBAAgB,EAChBC,sBAAsB,QACjB,wBAAwB;AAC/B,SAASC,wBAAwB,QAAQ,kCAAkC;AAE3E,OAAO,MAAMC,QAAqB,GAAG;EACnCJ,eAAe;EACfN,qBAAqB;EACrBC,yCAAyC;EACzCC,yCAAyC;EACzCC,4CAA4C;EAC5CC,6CAA6C;EAC7CN,mBAAmB;EACnBO,mCAAmC;EACnCM,OAAO,EAAEd,WAAW;EACpBU,gBAAgB;EAChBC,sBAAsB;EACtBT,sBAAsB;EACtBU;AACF,CAAC"}

package/lib/module/credential/issuance/v1.0.0/mappers.js

@@ -1,23 +1,23 @@
 import { createMapper } from "../../../utils/mappers";
 export const mapToIssuerConfig = createMapper(x => {
   const {
+    federation_entity,
     oauth_authorization_server,
     openid_credential_issuer,
-    openid_credential_verifier,
-    federation_entity
+    openid_credential_verifier
   } = x.payload.metadata;
   return {
     authorization_endpoint: oauth_authorization_server.authorization_endpoint,
+    credential_configurations_supported: openid_credential_issuer.credential_configurations_supported,
     credential_endpoint: openid_credential_issuer.credential_endpoint,
     credential_issuer: openid_credential_issuer.credential_issuer,
-    credential_configurations_supported: openid_credential_issuer.credential_configurations_supported,
+    encrypted_response_enc_values_supported: openid_credential_verifier !== null && openid_credential_verifier !== void 0 && openid_credential_verifier.authorization_encrypted_response_enc ? [openid_credential_verifier.authorization_encrypted_response_enc] : undefined,
+    federation_entity,
     keys: [...openid_credential_issuer.jwks.keys, ...oauth_authorization_server.jwks.keys],
+    nonce_endpoint: openid_credential_issuer.nonce_endpoint,
     pushed_authorization_request_endpoint: oauth_authorization_server.pushed_authorization_request_endpoint,
-    token_endpoint: oauth_authorization_server.token_endpoint,
     status_assertion_endpoint: openid_credential_issuer.status_attestation_endpoint,
-    nonce_endpoint: openid_credential_issuer.nonce_endpoint,
-    federation_entity,
-    encrypted_response_enc_values_supported: openid_credential_verifier !== null && openid_credential_verifier !== void 0 && openid_credential_verifier.authorization_encrypted_response_enc ? [openid_credential_verifier.authorization_encrypted_response_enc] : undefined
+    token_endpoint: oauth_authorization_server.token_endpoint
   };
 });
 //# sourceMappingURL=mappers.js.map

package/lib/module/credential/issuance/v1.0.0/mappers.js.map

@@ -1 +1 @@
-{"version":3,"names":["createMapper","mapToIssuerConfig","x","oauth_authorization_server","openid_credential_issuer","openid_credential_verifier","federation_entity","payload","metadata","authorization_endpoint","credential_endpoint","credential_issuer","credential_configurations_supported","keys","jwks","pushed_authorization_request_endpoint","token_endpoint","status_assertion_endpoint","status_attestation_endpoint","nonce_endpoint","encrypted_response_enc_values_supported","authorization_encrypted_response_enc","undefined"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/mappers.ts"],"mappings":"AACA,SAASA,YAAY,QAAQ,wBAAwB;AAGrD,OAAO,MAAMC,iBAAiB,GAAGD,YAAY,CAG1CE,CAAC,IAAK;EACP,MAAM;IACJC,0BAA0B;IAC1BC,wBAAwB;IACxBC,0BAA0B;IAC1BC;EACF,CAAC,GAAGJ,CAAC,CAACK,OAAO,CAACC,QAAQ;EACtB,OAAO;IACLC,sBAAsB,EAAEN,0BAA0B,CAACM,sBAAsB;IACzEC,mBAAmB,EAAEN,wBAAwB,CAACM,mBAAmB;IACjEC,iBAAiB,EAAEP,wBAAwB,CAACO,iBAAiB;IAC7DC,mCAAmC,EACjCR,wBAAwB,CAACQ,mCAAmC;IAC9DC,IAAI,EAAE,CACJ,GAAGT,wBAAwB,CAACU,IAAI,CAACD,IAAI,EACrC,GAAGV,0BAA0B,CAACW,IAAI,CAACD,IAAI,CACxC;IACDE,qCAAqC,EACnCZ,0BAA0B,CAACY,qCAAqC;IAClEC,cAAc,EAAEb,0BAA0B,CAACa,cAAc;IACzDC,yBAAyB,EACvBb,wBAAwB,CAACc,2BAA2B;IACtDC,cAAc,EAAEf,wBAAwB,CAACe,cAAc;IACvDb,iBAAiB;IACjBc,uCAAuC,EACrCf,0BAA0B,aAA1BA,0BAA0B,eAA1BA,0BAA0B,CAAEgB,oCAAoC,GAC5D,CAAChB,0BAA0B,CAACgB,oCAAoC,CAAC,GACjEC;EACR,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"names":["createMapper","mapToIssuerConfig","x","federation_entity","oauth_authorization_server","openid_credential_issuer","openid_credential_verifier","payload","metadata","authorization_endpoint","credential_configurations_supported","credential_endpoint","credential_issuer","encrypted_response_enc_values_supported","authorization_encrypted_response_enc","undefined","keys","jwks","nonce_endpoint","pushed_authorization_request_endpoint","status_assertion_endpoint","status_attestation_endpoint","token_endpoint"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/mappers.ts"],"mappings":"AAGA,SAASA,YAAY,QAAQ,wBAAwB;AAErD,OAAO,MAAMC,iBAAiB,GAAGD,YAAY,CAG1CE,CAAC,IAAK;EACP,MAAM;IACJC,iBAAiB;IACjBC,0BAA0B;IAC1BC,wBAAwB;IACxBC;EACF,CAAC,GAAGJ,CAAC,CAACK,OAAO,CAACC,QAAQ;EACtB,OAAO;IACLC,sBAAsB,EAAEL,0BAA0B,CAACK,sBAAsB;IACzEC,mCAAmC,EACjCL,wBAAwB,CAACK,mCAAmC;IAC9DC,mBAAmB,EAAEN,wBAAwB,CAACM,mBAAmB;IACjEC,iBAAiB,EAAEP,wBAAwB,CAACO,iBAAiB;IAC7DC,uCAAuC,EACrCP,0BAA0B,aAA1BA,0BAA0B,eAA1BA,0BAA0B,CAAEQ,oCAAoC,GAC5D,CAACR,0BAA0B,CAACQ,oCAAoC,CAAC,GACjEC,SAAS;IACfZ,iBAAiB;IACjBa,IAAI,EAAE,CACJ,GAAGX,wBAAwB,CAACY,IAAI,CAACD,IAAI,EACrC,GAAGZ,0BAA0B,CAACa,IAAI,CAACD,IAAI,CACxC;IACDE,cAAc,EAAEb,wBAAwB,CAACa,cAAc;IACvDC,qCAAqC,EACnCf,0BAA0B,CAACe,qCAAqC;IAClEC,yBAAyB,EACvBf,wBAAwB,CAACgB,2BAA2B;IACtDC,cAAc,EAAElB,0BAA0B,CAACkB;EAC7C,CAAC;AACH,CAAC,CAAC"}

package/lib/module/credential/issuance/v1.0.0/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","AuthorizationDetail","TokenResponse","CredentialResponse","object","credentials","array","credential","string","notification_id","optional","ResponseUriResultShape","redirect_uri","NonceResponse","c_nonce"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/types.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AACxB,SAASC,mBAAmB,EAAEC,aAAa,QAAQ,cAAc;;AAEjE;AACA,SAASD,mBAAmB,EAAEC,aAAa;AAI3C,OAAO,MAAMC,kBAAkB,GAAGH,CAAC,CAACI,MAAM,CAAC;EACzCC,WAAW,EAAEL,CAAC,CAACM,KAAK,CAClBN,CAAC,CAACI,MAAM,CAAC;IACPG,UAAU,EAAEP,CAAC,CAACQ,MAAM,CAAC;EACvB,CAAC,CACH,CAAC;EACDC,eAAe,EAAET,CAAC,CAACQ,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC;AACvC,CAAC,CAAC;;AAEF;AACA;AACA;AACA,OAAO,MAAMC,sBAAsB,GAAGX,CAAC,CAACI,MAAM,CAAC;EAC7CQ,YAAY,EAAEZ,CAAC,CAACQ,MAAM,CAAC;AACzB,CAAC,CAAC;AAGF,OAAO,MAAMK,aAAa,GAAGb,CAAC,CAACI,MAAM,CAAC;EACpCU,OAAO,EAAEd,CAAC,CAACQ,MAAM,CAAC;AACpB,CAAC,CAAC"}
+{"version":3,"names":["z","AuthorizationDetail","TokenResponse","CredentialResponse","object","credentials","array","credential","string","notification_id","optional","ResponseUriResultShape","redirect_uri","NonceResponse","c_nonce"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/types.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AAExB,SAASC,mBAAmB,EAAEC,aAAa,QAAQ,cAAc;;AAEjE;AACA,SAASD,mBAAmB,EAAEC,aAAa;AAI3C,OAAO,MAAMC,kBAAkB,GAAGH,CAAC,CAACI,MAAM,CAAC;EACzCC,WAAW,EAAEL,CAAC,CAACM,KAAK,CAClBN,CAAC,CAACI,MAAM,CAAC;IACPG,UAAU,EAAEP,CAAC,CAACQ,MAAM,CAAC;EACvB,CAAC,CACH,CAAC;EACDC,eAAe,EAAET,CAAC,CAACQ,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC;AACvC,CAAC,CAAC;;AAEF;AACA;AACA;AACA,OAAO,MAAMC,sBAAsB,GAAGX,CAAC,CAACI,MAAM,CAAC;EAC7CQ,YAAY,EAAEZ,CAAC,CAACQ,MAAM,CAAC;AACzB,CAAC,CAAC;AAGF,OAAO,MAAMK,aAAa,GAAGb,CAAC,CAACI,MAAM,CAAC;EACpCU,OAAO,EAAEd,CAAC,CAACQ,MAAM,CAAC;AACpB,CAAC,CAAC"}

package/lib/module/credential/issuance/v1.3.3/01-evaluate-issuer-trust.js

@@ -1,15 +1,15 @@
 import { fetchMetadata } from "@pagopa/io-wallet-oid4vci";
-import { sdkConfigV1_3 } from "../../../utils/config";
+import { sdkConfigV1_4 } from "../../../utils/config";
 import { mapToIssuerConfig } from "./mappers";
 export const evaluateIssuerTrust = async function (issuerUrl) {
   let context = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
   const issuerMetadata = await fetchMetadata({
-    config: sdkConfigV1_3,
-    credentialIssuerUrl: issuerUrl,
     authorizationServer: context.authorizationServer,
     callbacks: {
       fetch: context.appFetch
-    }
+    },
+    config: sdkConfigV1_4,
+    credentialIssuerUrl: issuerUrl
   });
   return {
     issuerConf: mapToIssuerConfig(issuerMetadata)

package/lib/module/credential/issuance/v1.3.3/01-evaluate-issuer-trust.js.map

@@ -1 +1 @@
-{"version":3,"names":["fetchMetadata","sdkConfigV1_3","mapToIssuerConfig","evaluateIssuerTrust","issuerUrl","context","arguments","length","undefined","issuerMetadata","config","credentialIssuerUrl","authorizationServer","callbacks","fetch","appFetch","issuerConf"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/01-evaluate-issuer-trust.ts"],"mappings":"AAAA,SACEA,aAAa,QAER,2BAA2B;AAClC,SAASC,aAAa,QAAQ,uBAAuB;AAErD,SAASC,iBAAiB,QAAQ,WAAW;AAE7C,OAAO,MAAMC,mBAAuD,GAAG,eAAAA,CACrEC,SAAS,EAEN;EAAA,IADHC,OAAO,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEZ,MAAMG,cAAc,GAAI,MAAMT,aAAa,CAAC;IAC1CU,MAAM,EAAET,aAAa;IACrBU,mBAAmB,EAAEP,SAAS;IAC9BQ,mBAAmB,EAAEP,OAAO,CAACO,mBAAmB;IAChDC,SAAS,EAAE;MACTC,KAAK,EAAET,OAAO,CAACU;IACjB;EACF,CAAC,CAA0B;EAE3B,OAAO;IAAEC,UAAU,EAAEd,iBAAiB,CAACO,cAAc;EAAE,CAAC;AAC1D,CAAC"}
+{"version":3,"names":["fetchMetadata","sdkConfigV1_4","mapToIssuerConfig","evaluateIssuerTrust","issuerUrl","context","arguments","length","undefined","issuerMetadata","authorizationServer","callbacks","fetch","appFetch","config","credentialIssuerUrl","issuerConf"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/01-evaluate-issuer-trust.ts"],"mappings":"AAAA,SACEA,aAAa,QAER,2BAA2B;AAIlC,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,iBAAiB,QAAQ,WAAW;AAE7C,OAAO,MAAMC,mBAAuD,GAAG,eAAAA,CACrEC,SAAS,EAEN;EAAA,IADHC,OAAO,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEZ,MAAMG,cAAc,GAAI,MAAMT,aAAa,CAAC;IAC1CU,mBAAmB,EAAEL,OAAO,CAACK,mBAAmB;IAChDC,SAAS,EAAE;MACTC,KAAK,EAAEP,OAAO,CAACQ;IACjB,CAAC;IACDC,MAAM,EAAEb,aAAa;IACrBc,mBAAmB,EAAEX;EACvB,CAAC,CAA0B;EAE3B,OAAO;IAAEY,UAAU,EAAEd,iBAAiB,CAACO,cAAc;EAAE,CAAC;AAC1D,CAAC"}

package/lib/module/credential/issuance/v1.3.3/02-start-user-authorization.js

@@ -1,18 +1,18 @@
-import { createPushedAuthorizationRequest, fetchPushedAuthorizationResponse, createClientAttestationPopJwt } from "@pagopa/io-wallet-oauth2";
+import { createClientAttestationPopJwt, createPushedAuthorizationRequest, fetchPushedAuthorizationResponse } from "@pagopa/io-wallet-oauth2";
 import { v4 as uuidv4 } from "uuid";
-import { LogLevel, Logger } from "../../../utils/logging";
 import { createSignJwtFromCryptoContext, partialCallbacks } from "../../../utils/callbacks";
-import { IoWalletError } from "../../../utils/errors";
 import { sdkConfigV1_3 } from "../../../utils/config";
+import { IoWalletError } from "../../../utils/errors";
+import { Logger, LogLevel } from "../../../utils/logging";
 import { selectCredentialDefinition } from "../common/02-start-user-authorization";
 export const startUserAuthorization = async (issuerConf, credentialIds, proof, ctx) => {
   const {
-    wiaCryptoContext,
-    walletInstanceAttestation,
-    redirectUri,
     appFetch = fetch,
+    issuerState,
+    redirectUri,
     scope,
-    issuerState
+    walletInstanceAttestation,
+    wiaCryptoContext
   } = ctx;
   const clientId = await wiaCryptoContext.getPublicKey().then(_ => _.kid);
   if (!clientId) {
@@ -28,52 +28,52 @@ export const startUserAuthorization = async (issuerConf, credentialIds, proof, c
      * See https://italia.github.io/eid-wallet-it-docs/versione-corrente/en/credential-issuance-endpoint.html#pushed-authorization-request-endpoint
      */
     credentialDefinition.push({
-      type: "it_l2+document_proof",
-      idphinting: proof.idpHinting,
       challenge_method: "mrtd+ias",
-      challenge_redirect_uri: redirectUri
+      challenge_redirect_uri: redirectUri,
+      idphinting: proof.idpHinting,
+      type: "it_l2+document_proof"
     });
   }
   const wiaSigner = {
-    method: "jwk",
     alg: "ES256",
+    method: "jwk",
     publicJwk: await wiaCryptoContext.getPublicKey()
   };
   const signJwt = createSignJwtFromCryptoContext(wiaCryptoContext);
   const parRequest = await createPushedAuthorizationRequest({
-    config: sdkConfigV1_3,
+    audience: issuerConf.credential_issuer,
+    authorization_details: credentialDefinition,
+    authorizationServerMetadata: {
+      require_signed_request_object: true
+    },
     callbacks: {
       ...partialCallbacks,
       signJwt
     },
-    authorizationServerMetadata: {
-      require_signed_request_object: true
-    },
-    jti: uuidv4(),
     clientId,
-    audience: issuerConf.credential_issuer,
-    authorization_details: credentialDefinition,
     codeChallengeMethodsSupported: ["S256"],
+    config: sdkConfigV1_3,
+    dpop: {
+      signer: wiaSigner
+    },
+    issuerState,
+    jti: uuidv4(),
     redirectUri,
     // When the issuance is started from a Credential Offer, the `scope` and
     // `issuer_state` carried by the authorization_code grant are forwarded to
     // the PAR. They are `undefined` (and thus omitted) for the regular flow.
-    scope,
-    issuerState,
-    dpop: {
-      signer: wiaSigner
-    }
+    scope
   });
   const clientAttestationPoP = await createClientAttestationPopJwt({
-    config: sdkConfigV1_3,
+    authorizationServer: issuerConf.credential_issuer,
     callbacks: {
       generateRandom: partialCallbacks.generateRandom,
       signJwt
     },
     clientAttestation: walletInstanceAttestation,
-    authorizationServer: issuerConf.credential_issuer,
-    signer: wiaSigner,
-    jti: uuidv4()
+    config: sdkConfigV1_3,
+    jti: uuidv4(),
+    signer: wiaSigner
   });
   const {
     request_uri
@@ -81,16 +81,16 @@ export const startUserAuthorization = async (issuerConf, credentialIds, proof, c
     callbacks: {
       fetch: appFetch
     },
-    pushedAuthorizationRequestEndpoint: issuerConf.pushed_authorization_request_endpoint,
-    pushedAuthorizationRequest: parRequest,
     clientAttestationDPoP: clientAttestationPoP,
+    pushedAuthorizationRequest: parRequest,
+    pushedAuthorizationRequestEndpoint: issuerConf.pushed_authorization_request_endpoint,
     walletAttestation: walletInstanceAttestation
   });
   return {
-    issuerRequestUri: request_uri,
     clientId,
     codeVerifier: parRequest.pkceCodeVerifier,
-    credentialDefinition
+    credentialDefinition,
+    issuerRequestUri: request_uri
   };
 };
 //# sourceMappingURL=02-start-user-authorization.js.map

package/lib/module/credential/issuance/v1.3.3/02-start-user-authorization.js.map

@@ -1 +1 @@
-{"version":3,"names":["createPushedAuthorizationRequest","fetchPushedAuthorizationResponse","createClientAttestationPopJwt","v4","uuidv4","LogLevel","Logger","createSignJwtFromCryptoContext","partialCallbacks","IoWalletError","sdkConfigV1_3","selectCredentialDefinition","startUserAuthorization","issuerConf","credentialIds","proof","ctx","wiaCryptoContext","walletInstanceAttestation","redirectUri","appFetch","fetch","scope","issuerState","clientId","getPublicKey","then","_","kid","log","ERROR","credentialDefinition","map","c","proofType","push","type","idphinting","idpHinting","challenge_method","challenge_redirect_uri","wiaSigner","method","alg","publicJwk","signJwt","parRequest","config","callbacks","authorizationServerMetadata","require_signed_request_object","jti","audience","credential_issuer","authorization_details","codeChallengeMethodsSupported","dpop","signer","clientAttestationPoP","generateRandom","clientAttestation","authorizationServer","request_uri","pushedAuthorizationRequestEndpoint","pushed_authorization_request_endpoint","pushedAuthorizationRequest","clientAttestationDPoP","walletAttestation","issuerRequestUri","codeVerifier","pkceCodeVerifier"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/02-start-user-authorization.ts"],"mappings":"AAAA,SACEA,gCAAgC,EAChCC,gCAAgC,EAChCC,6BAA6B,QACxB,0BAA0B;AAEjC,SAASC,EAAE,IAAIC,MAAM,QAAQ,MAAM;AACnC,SAASC,QAAQ,EAAEC,MAAM,QAAQ,wBAAwB;AAEzD,SACEC,8BAA8B,EAC9BC,gBAAgB,QACX,0BAA0B;AACjC,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,0BAA0B,QAAQ,uCAAuC;AAElF,OAAO,MAAMC,sBAA6D,GACxE,MAAAA,CAAOC,UAAU,EAAEC,aAAa,EAAEC,KAAK,EAAEC,GAAG,KAAK;EAC/C,MAAM;IACJC,gBAAgB;IAChBC,yBAAyB;IACzBC,WAAW;IACXC,QAAQ,GAAGC,KAAK;IAChBC,KAAK;IACLC;EACF,CAAC,GAAGP,GAAG;EAEP,MAAMQ,QAAQ,GAAG,MAAMP,gBAAgB,CAACQ,YAAY,CAAC,CAAC,CAACC,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACC,GAAG,CAAC;EAEzE,IAAI,CAACJ,QAAQ,EAAE;IACblB,MAAM,CAACuB,GAAG,CACRxB,QAAQ,CAACyB,KAAK,EACb,kCAAiCN,QAAS,0BAC7C,CAAC;IACD,MAAM,IAAIf,aAAa,CAAC,qBAAqB,CAAC;EAChD;EAEA,MAAMsB,oBAAoB,GAAGjB,aAAa,CAACkB,GAAG,CAAEC,CAAC,IAC/CtB,0BAA0B,CAACE,UAAU,EAAEoB,CAAC,CAC1C,CAAC;EAED,IAAIlB,KAAK,CAACmB,SAAS,KAAK,UAAU,EAAE;IAClC;AACN;AACA;AACA;AACA;AACA;IACMH,oBAAoB,CAACI,IAAI,CAAC;MACxBC,IAAI,EAAE,sBAAsB;MAC5BC,UAAU,EAAEtB,KAAK,CAACuB,UAAU;MAC5BC,gBAAgB,EAAE,UAAU;MAC5BC,sBAAsB,EAAErB;IAC1B,CAAC,CAAC;EACJ;EAEA,MAAMsB,SAAuB,GAAG;IAC9BC,MAAM,EAAE,KAAK;IACbC,GAAG,EAAE,OAAO;IACZC,SAAS,EAAE,MAAM3B,gBAAgB,CAACQ,YAAY,CAAC;EACjD,CAAC;EAED,MAAMoB,OAAO,GAAGtC,8BAA8B,CAACU,gBAAgB,CAAC;EAEhE,MAAM6B,UAAU,GAAG,MAAM9C,gCAAgC,CAAC;IACxD+C,MAAM,EAAErC,aAAa;IACrBsC,SAAS,EAAE;MACT,GAAGxC,gBAAgB;MACnBqC;IACF,CAAC;IACDI,2BAA2B,EAAE;MAC3BC,6BAA6B,EAAE;IACjC,CAAC;IACDC,GAAG,EAAE/C,MAAM,CAAC,CAAC;IACboB,QAAQ;IACR4B,QAAQ,EAAEvC,UAAU,CAACwC,iBAAiB;IACtCC,qBAAqB,EAAEvB,oBAAoB;IAC3CwB,6BAA6B,EAAE,CAAC,MAAM,CAAC;IACvCpC,WAAW;IACX;IACA;IACA;IACAG,KAAK;IACLC,WAAW;IACXiC,IAAI,EAAE;MACJC,MAAM,EAAEhB;IACV;EACF,CAAC,CAAC;EAEF,MAAMiB,oBAAoB,GAAG,MAAMxD,6BAA6B,CAAC;IAC/D6C,MAAM,EAAErC,aAAa;IACrBsC,SAAS,EAAE;MACTW,cAAc,EAAEnD,gBAAgB,CAACmD,cAAc;MAC/Cd;IACF,CAAC;IACDe,iBAAiB,EAAE1C,yBAAyB;IAC5C2C,mBAAmB,EAAEhD,UAAU,CAACwC,iBAAiB;IACjDI,MAAM,EAAEhB,SAAS;IACjBU,GAAG,EAAE/C,MAAM,CAAC;EACd,CAAC,CAAC;EAEF,MAAM;IAAE0D;EAAY,CAAC,GAAG,MAAM7D,gCAAgC,CAAC;IAC7D+C,SAAS,EAAE;MACT3B,KAAK,EAAED;IACT,CAAC;IACD2C,kCAAkC,EAChClD,UAAU,CAACmD,qCAAqC;IAClDC,0BAA0B,EAAEnB,UAAU;IACtCoB,qBAAqB,EAAER,oBAAoB;IAC3CS,iBAAiB,EAAEjD;EACrB,CAAC,CAAC;EAEF,OAAO;IACLkD,gBAAgB,EAAEN,WAAW;IAC7BtC,QAAQ;IACR6C,YAAY,EAAEvB,UAAU,CAACwB,gBAAgB;IACzCvC;EACF,CAAC;AACH,CAAC"}
+{"version":3,"names":["createClientAttestationPopJwt","createPushedAuthorizationRequest","fetchPushedAuthorizationResponse","v4","uuidv4","createSignJwtFromCryptoContext","partialCallbacks","sdkConfigV1_3","IoWalletError","Logger","LogLevel","selectCredentialDefinition","startUserAuthorization","issuerConf","credentialIds","proof","ctx","appFetch","fetch","issuerState","redirectUri","scope","walletInstanceAttestation","wiaCryptoContext","clientId","getPublicKey","then","_","kid","log","ERROR","credentialDefinition","map","c","proofType","push","challenge_method","challenge_redirect_uri","idphinting","idpHinting","type","wiaSigner","alg","method","publicJwk","signJwt","parRequest","audience","credential_issuer","authorization_details","authorizationServerMetadata","require_signed_request_object","callbacks","codeChallengeMethodsSupported","config","dpop","signer","jti","clientAttestationPoP","authorizationServer","generateRandom","clientAttestation","request_uri","clientAttestationDPoP","pushedAuthorizationRequest","pushedAuthorizationRequestEndpoint","pushed_authorization_request_endpoint","walletAttestation","codeVerifier","pkceCodeVerifier","issuerRequestUri"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/02-start-user-authorization.ts"],"mappings":"AAEA,SACEA,6BAA6B,EAC7BC,gCAAgC,EAChCC,gCAAgC,QAC3B,0BAA0B;AACjC,SAASC,EAAE,IAAIC,MAAM,QAAQ,MAAM;AAInC,SACEC,8BAA8B,EAC9BC,gBAAgB,QACX,0BAA0B;AACjC,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,MAAM,EAAEC,QAAQ,QAAQ,wBAAwB;AACzD,SAASC,0BAA0B,QAAQ,uCAAuC;AAElF,OAAO,MAAMC,sBAA6D,GACxE,MAAAA,CAAOC,UAAU,EAAEC,aAAa,EAAEC,KAAK,EAAEC,GAAG,KAAK;EAC/C,MAAM;IACJC,QAAQ,GAAGC,KAAK;IAChBC,WAAW;IACXC,WAAW;IACXC,KAAK;IACLC,yBAAyB;IACzBC;EACF,CAAC,GAAGP,GAAG;EAEP,MAAMQ,QAAQ,GAAG,MAAMD,gBAAgB,CAACE,YAAY,CAAC,CAAC,CAACC,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACC,GAAG,CAAC;EAEzE,IAAI,CAACJ,QAAQ,EAAE;IACbf,MAAM,CAACoB,GAAG,CACRnB,QAAQ,CAACoB,KAAK,EACb,kCAAiCN,QAAS,0BAC7C,CAAC;IACD,MAAM,IAAIhB,aAAa,CAAC,qBAAqB,CAAC;EAChD;EAEA,MAAMuB,oBAAoB,GAAGjB,aAAa,CAACkB,GAAG,CAAEC,CAAC,IAC/CtB,0BAA0B,CAACE,UAAU,EAAEoB,CAAC,CAC1C,CAAC;EAED,IAAIlB,KAAK,CAACmB,SAAS,KAAK,UAAU,EAAE;IAClC;AACN;AACA;AACA;AACA;AACA;IACMH,oBAAoB,CAACI,IAAI,CAAC;MACxBC,gBAAgB,EAAE,UAAU;MAC5BC,sBAAsB,EAAEjB,WAAW;MACnCkB,UAAU,EAAEvB,KAAK,CAACwB,UAAU;MAC5BC,IAAI,EAAE;IACR,CAAC,CAAC;EACJ;EAEA,MAAMC,SAAuB,GAAG;IAC9BC,GAAG,EAAE,OAAO;IACZC,MAAM,EAAE,KAAK;IACbC,SAAS,EAAE,MAAMrB,gBAAgB,CAACE,YAAY,CAAC;EACjD,CAAC;EAED,MAAMoB,OAAO,GAAGxC,8BAA8B,CAACkB,gBAAgB,CAAC;EAEhE,MAAMuB,UAAU,GAAG,MAAM7C,gCAAgC,CAAC;IACxD8C,QAAQ,EAAElC,UAAU,CAACmC,iBAAiB;IACtCC,qBAAqB,EAAElB,oBAAoB;IAC3CmB,2BAA2B,EAAE;MAC3BC,6BAA6B,EAAE;IACjC,CAAC;IACDC,SAAS,EAAE;MACT,GAAG9C,gBAAgB;MACnBuC;IACF,CAAC;IACDrB,QAAQ;IACR6B,6BAA6B,EAAE,CAAC,MAAM,CAAC;IACvCC,MAAM,EAAE/C,aAAa;IACrBgD,IAAI,EAAE;MACJC,MAAM,EAAEf;IACV,CAAC;IACDtB,WAAW;IACXsC,GAAG,EAAErD,MAAM,CAAC,CAAC;IACbgB,WAAW;IACX;IACA;IACA;IACAC;EACF,CAAC,CAAC;EAEF,MAAMqC,oBAAoB,GAAG,MAAM1D,6BAA6B,CAAC;IAC/D2D,mBAAmB,EAAE9C,UAAU,CAACmC,iBAAiB;IACjDI,SAAS,EAAE;MACTQ,cAAc,EAAEtD,gBAAgB,CAACsD,cAAc;MAC/Cf;IACF,CAAC;IACDgB,iBAAiB,EAAEvC,yBAAyB;IAC5CgC,MAAM,EAAE/C,aAAa;IACrBkD,GAAG,EAAErD,MAAM,CAAC,CAAC;IACboD,MAAM,EAAEf;EACV,CAAC,CAAC;EAEF,MAAM;IAAEqB;EAAY,CAAC,GAAG,MAAM5D,gCAAgC,CAAC;IAC7DkD,SAAS,EAAE;MACTlC,KAAK,EAAED;IACT,CAAC;IACD8C,qBAAqB,EAAEL,oBAAoB;IAC3CM,0BAA0B,EAAElB,UAAU;IACtCmB,kCAAkC,EAChCpD,UAAU,CAACqD,qCAAqC;IAClDC,iBAAiB,EAAE7C;EACrB,CAAC,CAAC;EAEF,OAAO;IACLE,QAAQ;IACR4C,YAAY,EAAEtB,UAAU,CAACuB,gBAAgB;IACzCtC,oBAAoB;IACpBuC,gBAAgB,EAAER;EACpB,CAAC;AACH,CAAC"}

package/lib/module/credential/issuance/v1.3.3/03-complete-user-authorization.js

@@ -1,16 +1,16 @@
-import { AuthorizationErrorShape, AuthorizationResultShape } from "../../../utils/auth";
-import parseUrl from "parse-url";
-import { createAuthorizationResponse, parseAuthorizeRequest, fetchAuthorizationResponse } from "@pagopa/io-wallet-oid4vp";
-import { sendAuthorizationResponseAndExtractCode } from "@pagopa/io-wallet-oid4vci";
 import { parseMrtdChallenge } from "@pagopa/io-wallet-oauth2";
-import { AuthorizationError, AuthorizationIdpError } from "../common/errors";
-import { LogLevel, Logger } from "../../../utils/logging";
-import { RemotePresentation as RemotePresentationFlow } from "../../presentation/v1.3.3";
+import { sendAuthorizationResponseAndExtractCode } from "@pagopa/io-wallet-oid4vci";
+import { createAuthorizationResponse, fetchAuthorizationResponse, parseAuthorizeRequest } from "@pagopa/io-wallet-oid4vp";
+import parseUrl from "parse-url";
+import { AuthorizationErrorShape, AuthorizationResultShape } from "../../../utils/auth";
 import { createVerifyJwtFromJwks, partialCallbacks } from "../../../utils/callbacks";
 import { sdkConfigV1_3, sdkConfigV1_4 } from "../../../utils/config";
 import { IoWalletError, IssuerResponseError } from "../../../utils/errors";
-import { mapToRequestObject } from "./mappers";
+import { Logger, LogLevel } from "../../../utils/logging";
 import { hasStatusOrThrow } from "../../../utils/misc";
+import { RemotePresentation as RemotePresentationFlow } from "../../presentation/v1.3.3";
+import { AuthorizationError, AuthorizationIdpError } from "../common/errors";
+import { mapToRequestObject } from "./mappers";
 export const continueUserAuthorizationWithMRTDPoPChallenge = async authRedirectUrl => {
   Logger.log(LogLevel.DEBUG, "The requested credential is a PID and requires MRTD PoP, starting MRTD PoP validation from auth redirect");
   try {
@@ -58,11 +58,11 @@ export const getRequestedCredentialToBePresented = async function (issuerRequest
     method: "GET"
   }).then(hasStatusOrThrow(200, IssuerResponseError)).then(res => res.text());
   const parsedAuthRequest = await parseAuthorizeRequest({
-    config: sdkConfigV1_3,
-    requestObjectJwt,
     callbacks: {
       verifyJwt: createVerifyJwtFromJwks(issuerConf.keys)
-    }
+    },
+    config: sdkConfigV1_3,
+    requestObjectJwt
   });
   return mapToRequestObject(parsedAuthRequest);
 };
@@ -74,9 +74,9 @@ export const completeUserAuthorizationWithFormPostJwtMode = async (requestObject
   } = _ref;
   Logger.log(LogLevel.DEBUG, "The requested credential is not a PID, completing the user authorization with form_post.jwt mode");
   const authzResponse = await processPidPresentationAndCreateAuthzResponse({
-    requestObject,
+    evaluatedDcqlQuery,
     issuerConfig,
-    evaluatedDcqlQuery
+    requestObject
   });
   Logger.log(LogLevel.DEBUG, `Authz response: ${authzResponse}`);
   const issuerSigKey = issuerConfig.keys.find(key => key.use === "sig");
@@ -92,13 +92,13 @@ export const completeUserAuthorizationWithFormPostJwtMode = async (requestObject
       fetch: appFetch
     },
     iss: requestObject.iss,
-    state: requestObject.state ?? "",
     presentationResponseUri: requestObject.response_uri,
     signer: {
       alg: "ES256",
       method: "jwk",
       publicJwk: issuerSigKey
-    }
+    },
+    state: requestObject.state ?? ""
   });
 };
 export const completeEaaUserAuthorizationWithQueryMode = async function (requestObject, issuerConfig, evaluatedDcqlQuery, clientRedirectUri) {
@@ -108,20 +108,20 @@ export const completeEaaUserAuthorizationWithQueryMode = async function (request
   } = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : {};
   Logger.log(LogLevel.DEBUG, "The requested credential is not a PID, completing the user authorization with query mode");
   const authzResponse = await processPidPresentationAndCreateAuthzResponse({
-    requestObject,
+    evaluatedDcqlQuery,
     issuerConfig,
-    evaluatedDcqlQuery
+    requestObject
   });
   Logger.log(LogLevel.DEBUG, `Authz response: ${JSON.stringify(authzResponse)}`);
   const {
     redirect_uri
   } = await fetchAuthorizationResponse({
     authorizationResponseJarm: authzResponse.jarm.responseJwe,
-    presentationResponseUri: requestObject.response_uri,
     callbacks: {
       ...partialCallbacks,
       fetch: appFetch
-    }
+    },
+    presentationResponseUri: requestObject.response_uri
   });
   if (!redirect_uri) {
     const errorMessage = "The authorization server did not return a redirect_uri to continue the authorization flow";
@@ -179,9 +179,9 @@ export const parseAuthorizationResponse = authRes => {
  */
 const processPidPresentationAndCreateAuthzResponse = async _ref2 => {
   let {
-    requestObject,
+    evaluatedDcqlQuery,
     issuerConfig,
-    evaluatedDcqlQuery
+    requestObject
   } = _ref2;
   const remotePresentation = await RemotePresentationFlow.prepareRemotePresentations(evaluatedDcqlQuery, {
     clientId: requestObject.client_id,
@@ -199,21 +199,21 @@ const processPidPresentationAndCreateAuthzResponse = async _ref2 => {
     };
   }, {});
   return createAuthorizationResponse({
+    callbacks: {
+      encryptJwe: partialCallbacks.encryptJwe,
+      generateRandom: partialCallbacks.generateRandom
+    },
     // The SDK 1.4 config is used here in order to resolve the encryption data from the Request Object
     // client_metadata, otherwise OpenID Federation clients always ignore client_metadata as per 1.3.3 specs.
     config: sdkConfigV1_4,
     requestObject,
     rpJwks: {
+      encrypted_response_enc_values_supported: issuerConfig.encrypted_response_enc_values_supported,
       jwks: {
         keys: issuerConfig.keys
-      },
-      encrypted_response_enc_values_supported: issuerConfig.encrypted_response_enc_values_supported
+      }
     },
-    vp_token,
-    callbacks: {
-      encryptJwe: partialCallbacks.encryptJwe,
-      generateRandom: partialCallbacks.generateRandom
-    }
+    vp_token
   });
 };
 //# sourceMappingURL=03-complete-user-authorization.js.map

package/lib/module/credential/issuance/v1.3.3/03-complete-user-authorization.js.map

@@ -1 +1 @@
-{"version":3,"names":["AuthorizationErrorShape","AuthorizationResultShape","parseUrl","createAuthorizationResponse","parseAuthorizeRequest","fetchAuthorizationResponse","sendAuthorizationResponseAndExtractCode","parseMrtdChallenge","AuthorizationError","AuthorizationIdpError","LogLevel","Logger","RemotePresentation","RemotePresentationFlow","createVerifyJwtFromJwks","partialCallbacks","sdkConfigV1_3","sdkConfigV1_4","IoWalletError","IssuerResponseError","mapToRequestObject","hasStatusOrThrow","continueUserAuthorizationWithMRTDPoPChallenge","authRedirectUrl","log","DEBUG","parsedChallenge","redirectUrl","challenge_info","challengeJwt","err","errorMessage","Error","message","ERROR","buildAuthorizationUrl","issuerRequestUri","clientId","issuerConf","idpHint","authzRequestEndpoint","authorization_endpoint","params","URLSearchParams","client_id","request_uri","append","authUrl","completePidUserAuthorizationWithQueryMode","query","parseAuthorizationResponse","getRequestedCredentialToBePresented","appFetch","arguments","length","undefined","fetch","toString","requestObjectJwt","method","then","res","text","parsedAuthRequest","config","callbacks","verifyJwt","keys","completeUserAuthorizationWithFormPostJwtMode","requestObject","issuerConfig","evaluatedDcqlQuery","_ref","authzResponse","processPidPresentationAndCreateAuthzResponse","issuerSigKey","find","key","use","authorizationResponseJarm","jarm","responseJwe","iss","state","presentationResponseUri","response_uri","signer","alg","publicJwk","completeEaaUserAuthorizationWithQueryMode","clientRedirectUri","fetchFinalRedirectUri","JSON","stringify","redirect_uri","finalRedirectUri","response","catch","ok","url","startsWith","authRes","authResParsed","safeParse","success","authErr","error","data","error_description","_ref2","remotePresentation","prepareRemotePresentations","nonce","responseUri","vp_token","presentations","reduce","acc","_ref3","credentialId","vpToken","rpJwks","jwks","encrypted_response_enc_values_supported","encryptJwe","generateRandom"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/03-complete-user-authorization.ts"],"mappings":"AAAA,SACEA,uBAAuB,EACvBC,wBAAwB,QAEnB,qBAAqB;AAC5B,OAAOC,QAAQ,MAAM,WAAW;AAChC,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,0BAA0B,QAErB,0BAA0B;AACjC,SAASC,uCAAuC,QAAQ,2BAA2B;AAEnF,SAASC,kBAAkB,QAAQ,0BAA0B;AAC7D,SAASC,kBAAkB,EAAEC,qBAAqB,QAAQ,kBAAkB;AAC5E,SAASC,QAAQ,EAAEC,MAAM,QAAQ,wBAAwB;AACzD,SAASC,kBAAkB,IAAIC,sBAAsB,QAAQ,2BAA2B;AACxF,SACEC,uBAAuB,EACvBC,gBAAgB,QACX,0BAA0B;AACjC,SAASC,aAAa,EAAEC,aAAa,QAAQ,uBAAuB;AACpE,SAASC,aAAa,EAAEC,mBAAmB,QAAQ,uBAAuB;AAE1E,SAASC,kBAAkB,QAAQ,WAAW;AAE9C,SAASC,gBAAgB,QAAQ,qBAAqB;AAEtD,OAAO,MAAMC,6CAA2G,GACtH,MAAOC,eAAe,IAAK;EACzBZ,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,0GACF,CAAC;EACD,IAAI;IACF,MAAMC,eAAe,GAAGnB,kBAAkB,CAAC;MACzCoB,WAAW,EAAEJ;IACf,CAAC,CAAC;IACF,OAAO;MAAEK,cAAc,EAAEF,eAAe,CAACG;IAAa,CAAC;EACzD,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAMC,YAAY,GAChBD,GAAG,YAAYE,KAAK,GAAGF,GAAG,CAACG,OAAO,GAAG,+BAA+B;IACtEtB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,mDAAkDH,YAAa,EAClE,CAAC;IACD,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;AACF,CAAC;AAEH,OAAO,MAAMI,qBAA2D,GACtE,MAAAA,CAAOC,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,OAAO,KAAK;EACzD,MAAMC,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAE9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEF,IAAIG,OAAO,EAAE;IACXG,MAAM,CAACI,MAAM,CAAC,SAAS,EAAEP,OAAO,CAAC;EACnC;EAEA,MAAMQ,OAAO,GAAI,GAAEP,oBAAqB,IAAGE,MAAO,EAAC;EAEnD,OAAO;IAAEK;EAAQ,CAAC;AACpB,CAAC;AAEH,OAAO,MAAMC,yCAAmG,GAC9G,MAAOzB,eAAe,IAAK;EACzBZ,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,sFACF,CAAC;EACD,MAAMwB,KAAK,GAAG/C,QAAQ,CAACqB,eAAe,CAAC,CAAC0B,KAAK;EAE7C,OAAOC,0BAA0B,CAACD,KAAK,CAAC;AAC1C,CAAC;AAEH,OAAO,MAAME,mCAAuF,GAClG,eAAAA,CAAOf,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAuB;EAAA,IAArBc,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;EAC7D7C,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,kFACF,CAAC;EAED,MAAMe,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAC9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEFzB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACb,oCAAmCe,oBAAqB,IAAGE,MAAM,CAACe,QAAQ,CAAC,CAAE,EAChF,CAAC;EAED,MAAMC,gBAAgB,GAAG,MAAMN,QAAQ,CACpC,GAAEZ,oBAAqB,IAAGE,MAAM,CAACe,QAAQ,CAAC,CAAE,EAAC,EAC9C;IAAEE,MAAM,EAAE;EAAM,CAClB,CAAC,CACEC,IAAI,CAACvC,gBAAgB,CAAC,GAAG,EAAEF,mBAAmB,CAAC,CAAC,CAChDyC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;EAE5B,MAAMC,iBAAiB,GAAG,MAAM3D,qBAAqB,CAAC;IACpD4D,MAAM,EAAEhD,aAAa;IACrB0C,gBAAgB;IAChBO,SAAS,EAAE;MACTC,SAAS,EAAEpD,uBAAuB,CAACwB,UAAU,CAAC6B,IAAI;IACpD;EACF,CAAC,CAAC;EAEF,OAAO/C,kBAAkB,CAAC2C,iBAAiB,CAAC;AAC9C,CAAC;;AAEH;AACA,OAAO,MAAMK,4CAAyG,GACpH,MAAAA,CACEC,aAAa,EACbC,YAAY,EACZC,kBAAkB,EAAAC,IAAA,KAEf;EAAA,IADH;IAAEpB,QAAQ,GAAGI;EAAM,CAAC,GAAAgB,IAAA;EAEpB7D,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,kGACF,CAAC;EAED,MAAMgD,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEL,aAAa;IACbC,YAAY;IACZC;EACF,CAAC,CAAC;EAEF5D,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACe,KAAK,EAAG,mBAAkBgD,aAAc,EAAC,CAAC;EAE9D,MAAME,YAAY,GAAGL,YAAY,CAACH,IAAI,CAACS,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,GAAG,KAAK,KAAK,CAAC;EACvE,IAAI,CAACH,YAAY,EAAE;IACjB,MAAM5C,YAAY,GAAG,gDAAgD;IACrEpB,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIb,aAAa,CAACa,YAAY,CAAC;EACvC;EAEA,OAAOzB,uCAAuC,CAAC;IAC7CyE,yBAAyB,EAAEN,aAAa,CAACO,IAAI,CAACC,WAAW;IACzDhB,SAAS,EAAE;MACT,GAAGlD,gBAAgB;MACnByC,KAAK,EAAEJ;IACT,CAAC;IACD8B,GAAG,EAAEb,aAAa,CAACa,GAAG;IACtBC,KAAK,EAAEd,aAAa,CAACc,KAAK,IAAI,EAAE;IAChCC,uBAAuB,EAAEf,aAAa,CAACgB,YAAY;IACnDC,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZ5B,MAAM,EAAE,KAAK;MACb6B,SAAS,EAAEb;IACb;EACF,CAAC,CAAC;AACJ,CAAC;AAEH,OAAO,MAAMc,yCAAmG,GAC9G,eAAAA,CACEpB,aAAa,EACbC,YAAY,EACZC,kBAAkB,EAClBmB,iBAAiB,EAEd;EAAA,IADH;IAAEtC,QAAQ,GAAGI,KAAK;IAAEmC;EAAsB,CAAC,GAAAtC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEhD1C,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACd,0FACF,CAAC;EAED,MAAMgD,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEL,aAAa;IACbC,YAAY;IACZC;EACF,CAAC,CAAC;EAEF5D,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACe,KAAK,EACb,mBAAkBmE,IAAI,CAACC,SAAS,CAACpB,aAAa,CAAE,EACnD,CAAC;EAED,MAAM;IAAEqB;EAAa,CAAC,GAAG,MAAMzF,0BAA0B,CAAC;IACxD0E,yBAAyB,EAAEN,aAAa,CAACO,IAAI,CAACC,WAAW;IACzDG,uBAAuB,EAAEf,aAAa,CAACgB,YAAY;IACnDpB,SAAS,EAAE;MACT,GAAGlD,gBAAgB;MACnByC,KAAK,EAAEJ;IACT;EACF,CAAC,CAAC;EAEF,IAAI,CAAC0C,YAAY,EAAE;IACjB,MAAM/D,YAAY,GAChB,2FAA2F;IAC7FpB,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;EAEA,IAAIgE,gBAAoC;EAExC,IAAIJ,qBAAqB,EAAE;IACzBI,gBAAgB,GAAG,MAAMJ,qBAAqB,CAACG,YAAY,CAAC;EAC9D,CAAC,MAAM;IACL,MAAME,QAAQ,GAAG,MAAM5C,QAAQ,CAAC0C,YAAY,CAAC,CAACG,KAAK,CAAC,MAAM,IAAI,CAAC;IAC/D,IAAI,CAACD,QAAQ,IAAI,CAACA,QAAQ,CAACE,EAAE,EAAE;MAC7B,MAAMnE,YAAY,GAAI,qEAAoE2D,iBAAkB,mCAAkC;MAC9I/E,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;MACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;IAC5C;IACAgE,gBAAgB,GAAGC,QAAQ,CAACG,GAAG;EACjC;EAEA,IAAI,CAACJ,gBAAgB,IAAI,CAACA,gBAAgB,CAACK,UAAU,CAACV,iBAAiB,CAAC,EAAE;IACxE,MAAM3D,YAAY,GAAI,4FAA2F2D,iBAAkB,UAASK,gBAAiB,EAAC;IAC9JpF,MAAM,CAACa,GAAG,CAACd,QAAQ,CAACwB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIvB,kBAAkB,CAACuB,YAAY,CAAC;EAC5C;EAEA,OAAOmB,0BAA0B,CAAChD,QAAQ,CAAC6F,gBAAgB,CAAC,CAAC9C,KAAK,CAAC;AACrE,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,0BAA0B,GACrCmD,OAAgB,IACQ;EACxB,MAAMC,aAAa,GAAGrG,wBAAwB,CAACsG,SAAS,CAACF,OAAO,CAAC;EACjE,IAAI,CAACC,aAAa,CAACE,OAAO,EAAE;IAC1B,MAAMC,OAAO,GAAGzG,uBAAuB,CAACuG,SAAS,CAACF,OAAO,CAAC;IAC1D,IAAI,CAACI,OAAO,CAACD,OAAO,EAAE;MACpB7F,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,mDAAkDoE,aAAa,CAACI,KAAK,CAACzE,OAAQ,EACjF,CAAC;MACD,MAAM,IAAIzB,kBAAkB,CAAC8F,aAAa,CAACI,KAAK,CAACzE,OAAO,CAAC,CAAC,CAAC;IAC7D;;IACAtB,MAAM,CAACa,GAAG,CACRd,QAAQ,CAACwB,KAAK,EACb,2CAA0C0D,IAAI,CAACC,SAAS,CAACY,OAAO,CAAE,EACrE,CAAC;IACD,MAAM,IAAIhG,qBAAqB,CAC7BgG,OAAO,CAACE,IAAI,CAACD,KAAK,EAClBD,OAAO,CAACE,IAAI,CAACC,iBACf,CAAC;EACH;EACA,OAAON,aAAa,CAACK,IAAI;AAC3B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMjC,4CAA4C,GAAG,MAAAmC,KAAA,IAQH;EAAA,IARU;IAC1DxC,aAAa;IACbC,YAAY;IACZC;EAKF,CAAC,GAAAsC,KAAA;EACC,MAAMC,kBAAkB,GACtB,MAAMjG,sBAAsB,CAACkG,0BAA0B,CACrDxC,kBAAkB,EAClB;IACElC,QAAQ,EAAEgC,aAAa,CAACzB,SAAS;IACjCoE,KAAK,EAAE3C,aAAa,CAAC2C,KAAK;IAC1BC,WAAW,EAAE5C,aAAa,CAACgB;EAC7B,CACF,CAAC;EAEH,MAAM6B,QAAQ,GAAGJ,kBAAkB,CAACK,aAAa,CAACC,MAAM,CACtD,CAACC,GAAG,EAAAC,KAAA;IAAA,IAAE;MAAEC,YAAY;MAAEC;IAAQ,CAAC,GAAAF,KAAA;IAAA,OAAM;MAAE,GAAGD,GAAG;MAAE,CAACE,YAAY,GAAG,CAACC,OAAO;IAAE,CAAC;EAAA,CAAC,EAC3E,CAAC,CACH,CAAC;EAED,OAAOrH,2BAA2B,CAAC;IACjC;IACA;IACA6D,MAAM,EAAE/C,aAAa;IACrBoD,aAAa;IACboD,MAAM,EAAE;MACNC,IAAI,EAAE;QAAEvD,IAAI,EAAEG,YAAY,CAACH;MAAK,CAAkB;MAClDwD,uCAAuC,EACrCrD,YAAY,CAACqD;IACjB,CAAC;IACDT,QAAQ;IACRjD,SAAS,EAAE;MACT2D,UAAU,EAAE7G,gBAAgB,CAAC6G,UAAU;MACvCC,cAAc,EAAE9G,gBAAgB,CAAC8G;IACnC;EACF,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"names":["parseMrtdChallenge","sendAuthorizationResponseAndExtractCode","createAuthorizationResponse","fetchAuthorizationResponse","parseAuthorizeRequest","parseUrl","AuthorizationErrorShape","AuthorizationResultShape","createVerifyJwtFromJwks","partialCallbacks","sdkConfigV1_3","sdkConfigV1_4","IoWalletError","IssuerResponseError","Logger","LogLevel","hasStatusOrThrow","RemotePresentation","RemotePresentationFlow","AuthorizationError","AuthorizationIdpError","mapToRequestObject","continueUserAuthorizationWithMRTDPoPChallenge","authRedirectUrl","log","DEBUG","parsedChallenge","redirectUrl","challenge_info","challengeJwt","err","errorMessage","Error","message","ERROR","buildAuthorizationUrl","issuerRequestUri","clientId","issuerConf","idpHint","authzRequestEndpoint","authorization_endpoint","params","URLSearchParams","client_id","request_uri","append","authUrl","completePidUserAuthorizationWithQueryMode","query","parseAuthorizationResponse","getRequestedCredentialToBePresented","appFetch","arguments","length","undefined","fetch","toString","requestObjectJwt","method","then","res","text","parsedAuthRequest","callbacks","verifyJwt","keys","config","completeUserAuthorizationWithFormPostJwtMode","requestObject","issuerConfig","evaluatedDcqlQuery","_ref","authzResponse","processPidPresentationAndCreateAuthzResponse","issuerSigKey","find","key","use","authorizationResponseJarm","jarm","responseJwe","iss","presentationResponseUri","response_uri","signer","alg","publicJwk","state","completeEaaUserAuthorizationWithQueryMode","clientRedirectUri","fetchFinalRedirectUri","JSON","stringify","redirect_uri","finalRedirectUri","response","catch","ok","url","startsWith","authRes","authResParsed","safeParse","success","authErr","error","data","error_description","_ref2","remotePresentation","prepareRemotePresentations","nonce","responseUri","vp_token","presentations","reduce","acc","_ref3","credentialId","vpToken","encryptJwe","generateRandom","rpJwks","encrypted_response_enc_values_supported","jwks"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/03-complete-user-authorization.ts"],"mappings":"AAEA,SAASA,kBAAkB,QAAQ,0BAA0B;AAC7D,SAASC,uCAAuC,QAAQ,2BAA2B;AACnF,SACEC,2BAA2B,EAE3BC,0BAA0B,EAC1BC,qBAAqB,QAChB,0BAA0B;AACjC,OAAOC,QAAQ,MAAM,WAAW;AAKhC,SACEC,uBAAuB,EAEvBC,wBAAwB,QACnB,qBAAqB;AAC5B,SACEC,uBAAuB,EACvBC,gBAAgB,QACX,0BAA0B;AACjC,SAASC,aAAa,EAAEC,aAAa,QAAQ,uBAAuB;AACpE,SAASC,aAAa,EAAEC,mBAAmB,QAAQ,uBAAuB;AAC1E,SAASC,MAAM,EAAEC,QAAQ,QAAQ,wBAAwB;AACzD,SAASC,gBAAgB,QAAQ,qBAAqB;AACtD,SAASC,kBAAkB,IAAIC,sBAAsB,QAAQ,2BAA2B;AACxF,SAASC,kBAAkB,EAAEC,qBAAqB,QAAQ,kBAAkB;AAC5E,SAASC,kBAAkB,QAAQ,WAAW;AAE9C,OAAO,MAAMC,6CAA2G,GACtH,MAAOC,eAAe,IAAK;EACzBT,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACU,KAAK,EACd,0GACF,CAAC;EACD,IAAI;IACF,MAAMC,eAAe,GAAG1B,kBAAkB,CAAC;MACzC2B,WAAW,EAAEJ;IACf,CAAC,CAAC;IACF,OAAO;MAAEK,cAAc,EAAEF,eAAe,CAACG;IAAa,CAAC;EACzD,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAMC,YAAY,GAChBD,GAAG,YAAYE,KAAK,GAAGF,GAAG,CAACG,OAAO,GAAG,+BAA+B;IACtEnB,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACmB,KAAK,EACb,mDAAkDH,YAAa,EAClE,CAAC;IACD,MAAM,IAAIZ,kBAAkB,CAACY,YAAY,CAAC;EAC5C;AACF,CAAC;AAEH,OAAO,MAAMI,qBAA2D,GACtE,MAAAA,CAAOC,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,OAAO,KAAK;EACzD,MAAMC,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAE9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEF,IAAIG,OAAO,EAAE;IACXG,MAAM,CAACI,MAAM,CAAC,SAAS,EAAEP,OAAO,CAAC;EACnC;EAEA,MAAMQ,OAAO,GAAI,GAAEP,oBAAqB,IAAGE,MAAO,EAAC;EAEnD,OAAO;IAAEK;EAAQ,CAAC;AACpB,CAAC;AAEH,OAAO,MAAMC,yCAAmG,GAC9G,MAAOzB,eAAe,IAAK;EACzBT,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACU,KAAK,EACd,sFACF,CAAC;EACD,MAAMwB,KAAK,GAAG5C,QAAQ,CAACkB,eAAe,CAAC,CAAC0B,KAAK;EAE7C,OAAOC,0BAA0B,CAACD,KAAK,CAAC;AAC1C,CAAC;AAEH,OAAO,MAAME,mCAAuF,GAClG,eAAAA,CAAOf,gBAAgB,EAAEC,QAAQ,EAAEC,UAAU,EAAuB;EAAA,IAArBc,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;EAC7D1C,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACU,KAAK,EACd,kFACF,CAAC;EAED,MAAMe,oBAAoB,GAAGF,UAAU,CAACG,sBAAsB;EAC9D,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;IACjCC,SAAS,EAAEP,QAAQ;IACnBQ,WAAW,EAAET;EACf,CAAC,CAAC;EAEFtB,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACU,KAAK,EACb,oCAAmCe,oBAAqB,IAAGE,MAAM,CAACe,QAAQ,CAAC,CAAE,EAChF,CAAC;EAED,MAAMC,gBAAgB,GAAG,MAAMN,QAAQ,CACpC,GAAEZ,oBAAqB,IAAGE,MAAM,CAACe,QAAQ,CAAC,CAAE,EAAC,EAC9C;IAAEE,MAAM,EAAE;EAAM,CAClB,CAAC,CACEC,IAAI,CAAC5C,gBAAgB,CAAC,GAAG,EAAEH,mBAAmB,CAAC,CAAC,CAChD+C,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;EAE5B,MAAMC,iBAAiB,GAAG,MAAM3D,qBAAqB,CAAC;IACpD4D,SAAS,EAAE;MACTC,SAAS,EAAEzD,uBAAuB,CAAC8B,UAAU,CAAC4B,IAAI;IACpD,CAAC;IACDC,MAAM,EAAEzD,aAAa;IACrBgD;EACF,CAAC,CAAC;EAEF,OAAOrC,kBAAkB,CAAC0C,iBAAiB,CAAC;AAC9C,CAAC;;AAEH;AACA,OAAO,MAAMK,4CAAyG,GACpH,MAAAA,CACEC,aAAa,EACbC,YAAY,EACZC,kBAAkB,EAAAC,IAAA,KAEf;EAAA,IADH;IAAEpB,QAAQ,GAAGI;EAAM,CAAC,GAAAgB,IAAA;EAEpB1D,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACU,KAAK,EACd,kGACF,CAAC;EAED,MAAMgD,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEH,kBAAkB;IAClBD,YAAY;IACZD;EACF,CAAC,CAAC;EAEFvD,MAAM,CAACU,GAAG,CAACT,QAAQ,CAACU,KAAK,EAAG,mBAAkBgD,aAAc,EAAC,CAAC;EAE9D,MAAME,YAAY,GAAGL,YAAY,CAACJ,IAAI,CAACU,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,GAAG,KAAK,KAAK,CAAC;EACvE,IAAI,CAACH,YAAY,EAAE;IACjB,MAAM5C,YAAY,GAAG,gDAAgD;IACrEjB,MAAM,CAACU,GAAG,CAACT,QAAQ,CAACmB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAInB,aAAa,CAACmB,YAAY,CAAC;EACvC;EAEA,OAAO9B,uCAAuC,CAAC;IAC7C8E,yBAAyB,EAAEN,aAAa,CAACO,IAAI,CAACC,WAAW;IACzDjB,SAAS,EAAE;MACT,GAAGvD,gBAAgB;MACnB+C,KAAK,EAAEJ;IACT,CAAC;IACD8B,GAAG,EAAEb,aAAa,CAACa,GAAG;IACtBC,uBAAuB,EAAEd,aAAa,CAACe,YAAY;IACnDC,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZ3B,MAAM,EAAE,KAAK;MACb4B,SAAS,EAAEZ;IACb,CAAC;IACDa,KAAK,EAAEnB,aAAa,CAACmB,KAAK,IAAI;EAChC,CAAC,CAAC;AACJ,CAAC;AAEH,OAAO,MAAMC,yCAAmG,GAC9G,eAAAA,CACEpB,aAAa,EACbC,YAAY,EACZC,kBAAkB,EAClBmB,iBAAiB,EAEd;EAAA,IADH;IAAEtC,QAAQ,GAAGI,KAAK;IAAEmC;EAAsB,CAAC,GAAAtC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEhDvC,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACU,KAAK,EACd,0FACF,CAAC;EAED,MAAMgD,aAAa,GAAG,MAAMC,4CAA4C,CAAC;IACvEH,kBAAkB;IAClBD,YAAY;IACZD;EACF,CAAC,CAAC;EAEFvD,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACU,KAAK,EACb,mBAAkBmE,IAAI,CAACC,SAAS,CAACpB,aAAa,CAAE,EACnD,CAAC;EAED,MAAM;IAAEqB;EAAa,CAAC,GAAG,MAAM3F,0BAA0B,CAAC;IACxD4E,yBAAyB,EAAEN,aAAa,CAACO,IAAI,CAACC,WAAW;IACzDjB,SAAS,EAAE;MACT,GAAGvD,gBAAgB;MACnB+C,KAAK,EAAEJ;IACT,CAAC;IACD+B,uBAAuB,EAAEd,aAAa,CAACe;EACzC,CAAC,CAAC;EAEF,IAAI,CAACU,YAAY,EAAE;IACjB,MAAM/D,YAAY,GAChB,2FAA2F;IAC7FjB,MAAM,CAACU,GAAG,CAACT,QAAQ,CAACmB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIZ,kBAAkB,CAACY,YAAY,CAAC;EAC5C;EAEA,IAAIgE,gBAAoC;EAExC,IAAIJ,qBAAqB,EAAE;IACzBI,gBAAgB,GAAG,MAAMJ,qBAAqB,CAACG,YAAY,CAAC;EAC9D,CAAC,MAAM;IACL,MAAME,QAAQ,GAAG,MAAM5C,QAAQ,CAAC0C,YAAY,CAAC,CAACG,KAAK,CAAC,MAAM,IAAI,CAAC;IAC/D,IAAI,CAACD,QAAQ,IAAI,CAACA,QAAQ,CAACE,EAAE,EAAE;MAC7B,MAAMnE,YAAY,GAAI,qEAAoE2D,iBAAkB,mCAAkC;MAC9I5E,MAAM,CAACU,GAAG,CAACT,QAAQ,CAACmB,KAAK,EAAEH,YAAY,CAAC;MACxC,MAAM,IAAIZ,kBAAkB,CAACY,YAAY,CAAC;IAC5C;IACAgE,gBAAgB,GAAGC,QAAQ,CAACG,GAAG;EACjC;EAEA,IAAI,CAACJ,gBAAgB,IAAI,CAACA,gBAAgB,CAACK,UAAU,CAACV,iBAAiB,CAAC,EAAE;IACxE,MAAM3D,YAAY,GAAI,4FAA2F2D,iBAAkB,UAASK,gBAAiB,EAAC;IAC9JjF,MAAM,CAACU,GAAG,CAACT,QAAQ,CAACmB,KAAK,EAAEH,YAAY,CAAC;IACxC,MAAM,IAAIZ,kBAAkB,CAACY,YAAY,CAAC;EAC5C;EAEA,OAAOmB,0BAA0B,CAAC7C,QAAQ,CAAC0F,gBAAgB,CAAC,CAAC9C,KAAK,CAAC;AACrE,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,0BAA0B,GACrCmD,OAAgB,IACQ;EACxB,MAAMC,aAAa,GAAG/F,wBAAwB,CAACgG,SAAS,CAACF,OAAO,CAAC;EACjE,IAAI,CAACC,aAAa,CAACE,OAAO,EAAE;IAC1B,MAAMC,OAAO,GAAGnG,uBAAuB,CAACiG,SAAS,CAACF,OAAO,CAAC;IAC1D,IAAI,CAACI,OAAO,CAACD,OAAO,EAAE;MACpB1F,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACmB,KAAK,EACb,mDAAkDoE,aAAa,CAACI,KAAK,CAACzE,OAAQ,EACjF,CAAC;MACD,MAAM,IAAId,kBAAkB,CAACmF,aAAa,CAACI,KAAK,CAACzE,OAAO,CAAC,CAAC,CAAC;IAC7D;;IACAnB,MAAM,CAACU,GAAG,CACRT,QAAQ,CAACmB,KAAK,EACb,2CAA0C0D,IAAI,CAACC,SAAS,CAACY,OAAO,CAAE,EACrE,CAAC;IACD,MAAM,IAAIrF,qBAAqB,CAC7BqF,OAAO,CAACE,IAAI,CAACD,KAAK,EAClBD,OAAO,CAACE,IAAI,CAACC,iBACf,CAAC;EACH;EACA,OAAON,aAAa,CAACK,IAAI;AAC3B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMjC,4CAA4C,GAAG,MAAAmC,KAAA,IAQH;EAAA,IARU;IAC1DtC,kBAAkB;IAClBD,YAAY;IACZD;EAKF,CAAC,GAAAwC,KAAA;EACC,MAAMC,kBAAkB,GACtB,MAAM5F,sBAAsB,CAAC6F,0BAA0B,CACrDxC,kBAAkB,EAClB;IACElC,QAAQ,EAAEgC,aAAa,CAACzB,SAAS;IACjCoE,KAAK,EAAE3C,aAAa,CAAC2C,KAAK;IAC1BC,WAAW,EAAE5C,aAAa,CAACe;EAC7B,CACF,CAAC;EAEH,MAAM8B,QAAQ,GAAGJ,kBAAkB,CAACK,aAAa,CAACC,MAAM,CACtD,CAACC,GAAG,EAAAC,KAAA;IAAA,IAAE;MAAEC,YAAY;MAAEC;IAAQ,CAAC,GAAAF,KAAA;IAAA,OAAM;MAAE,GAAGD,GAAG;MAAE,CAACE,YAAY,GAAG,CAACC,OAAO;IAAE,CAAC;EAAA,CAAC,EAC3E,CAAC,CACH,CAAC;EAED,OAAOtH,2BAA2B,CAAC;IACjC8D,SAAS,EAAE;MACTyD,UAAU,EAAEhH,gBAAgB,CAACgH,UAAU;MACvCC,cAAc,EAAEjH,gBAAgB,CAACiH;IACnC,CAAC;IACD;IACA;IACAvD,MAAM,EAAExD,aAAa;IACrB0D,aAAa;IACbsD,MAAM,EAAE;MACNC,uCAAuC,EACrCtD,YAAY,CAACsD,uCAAuC;MACtDC,IAAI,EAAE;QAAE3D,IAAI,EAAEI,YAAY,CAACJ;MAAK;IAClC,CAAC;IACDgD;EACF,CAAC,CAAC;AACJ,CAAC"}

package/lib/module/credential/issuance/v1.3.3/04-authorize-access.js

@@ -1,60 +1,60 @@
 import { createClientAttestationPopJwt, createTokenDPoP, fetchTokenResponse } from "@pagopa/io-wallet-oauth2";
 import { v4 as uuidv4 } from "uuid";
 import { createSignJwtFromCryptoContext, partialCallbacks } from "../../../utils/callbacks";
-import { IoWalletError } from "../../../utils/errors";
 import { sdkConfigV1_3 } from "../../../utils/config";
+import { IoWalletError } from "../../../utils/errors";
 export const authorizeAccess = async (issuerConf, code, redirectUri, codeVerifier, context) => {
   const {
     appFetch = fetch,
+    dPopCryptoContext,
     walletInstanceAttestation,
-    wiaCryptoContext,
-    dPopCryptoContext
+    wiaCryptoContext
   } = context;
   const tokenDPoP = await createTokenDPoP({
     callbacks: {
       ...partialCallbacks,
       signJwt: createSignJwtFromCryptoContext(dPopCryptoContext)
     },
+    jti: uuidv4(),
     signer: {
-      method: "jwk",
       alg: "ES256",
+      method: "jwk",
       publicJwk: await dPopCryptoContext.getPublicKey()
     },
-    jti: uuidv4(),
     tokenRequest: {
       method: "POST",
       url: issuerConf.token_endpoint
     }
   });
   const clientAttestationDPoP = await createClientAttestationPopJwt({
-    config: sdkConfigV1_3,
+    authorizationServer: issuerConf.credential_issuer,
     callbacks: {
       generateRandom: partialCallbacks.generateRandom,
       signJwt: createSignJwtFromCryptoContext(wiaCryptoContext)
     },
     clientAttestation: walletInstanceAttestation,
-    authorizationServer: issuerConf.credential_issuer,
+    config: sdkConfigV1_3,
     signer: {
-      method: "jwk",
       alg: "ES256",
+      method: "jwk",
       publicJwk: await wiaCryptoContext.getPublicKey()
     }
   });
   const tokenResponse = await fetchTokenResponse({
     accessTokenEndpoint: issuerConf.token_endpoint,
+    accessTokenRequest: {
+      code,
+      code_verifier: codeVerifier,
+      grant_type: "authorization_code",
+      redirect_uri: redirectUri
+    },
     callbacks: {
       ...partialCallbacks,
       fetch: appFetch
     },
-    walletAttestation: walletInstanceAttestation,
-    dPoP: tokenDPoP.jwt,
     clientAttestationDPoP,
-    accessTokenRequest: {
-      code,
-      grant_type: "authorization_code",
-      code_verifier: codeVerifier,
-      redirect_uri: redirectUri
-    }
+    dPoP: tokenDPoP.jwt,
+    walletAttestation: walletInstanceAttestation
   });
 
   // `authorization_details` might be undefined if the PAR used `scope`.

package/lib/module/credential/issuance/v1.3.3/04-authorize-access.js.map

@@ -1 +1 @@
-{"version":3,"names":["createClientAttestationPopJwt","createTokenDPoP","fetchTokenResponse","v4","uuidv4","createSignJwtFromCryptoContext","partialCallbacks","IoWalletError","sdkConfigV1_3","authorizeAccess","issuerConf","code","redirectUri","codeVerifier","context","appFetch","fetch","walletInstanceAttestation","wiaCryptoContext","dPopCryptoContext","tokenDPoP","callbacks","signJwt","signer","method","alg","publicJwk","getPublicKey","jti","tokenRequest","url","token_endpoint","clientAttestationDPoP","config","generateRandom","clientAttestation","authorizationServer","credential_issuer","tokenResponse","accessTokenEndpoint","walletAttestation","dPoP","jwt","accessTokenRequest","grant_type","code_verifier","redirect_uri","authorization_details","accessToken"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/04-authorize-access.ts"],"mappings":"AAAA,SACEA,6BAA6B,EAC7BC,eAAe,EACfC,kBAAkB,QACb,0BAA0B;AACjC,SAASC,EAAE,IAAIC,MAAM,QAAQ,MAAM;AACnC,SACEC,8BAA8B,EAC9BC,gBAAgB,QACX,0BAA0B;AACjC,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,aAAa,QAAQ,uBAAuB;AAGrD,OAAO,MAAMC,eAA+C,GAAG,MAAAA,CAC7DC,UAAU,EACVC,IAAI,EACJC,WAAW,EACXC,YAAY,EACZC,OAAO,KACJ;EACH,MAAM;IACJC,QAAQ,GAAGC,KAAK;IAChBC,yBAAyB;IACzBC,gBAAgB;IAChBC;EACF,CAAC,GAAGL,OAAO;EAEX,MAAMM,SAAS,GAAG,MAAMnB,eAAe,CAAC;IACtCoB,SAAS,EAAE;MACT,GAAGf,gBAAgB;MACnBgB,OAAO,EAAEjB,8BAA8B,CAACc,iBAAiB;IAC3D,CAAC;IACDI,MAAM,EAAE;MACNC,MAAM,EAAE,KAAK;MACbC,GAAG,EAAE,OAAO;MACZC,SAAS,EAAE,MAAMP,iBAAiB,CAACQ,YAAY,CAAC;IAClD,CAAC;IACDC,GAAG,EAAExB,MAAM,CAAC,CAAC;IACbyB,YAAY,EAAE;MACZL,MAAM,EAAE,MAAM;MACdM,GAAG,EAAEpB,UAAU,CAACqB;IAClB;EACF,CAAC,CAAC;EAEF,MAAMC,qBAAqB,GAAG,MAAMhC,6BAA6B,CAAC;IAChEiC,MAAM,EAAEzB,aAAa;IACrBa,SAAS,EAAE;MACTa,cAAc,EAAE5B,gBAAgB,CAAC4B,cAAc;MAC/CZ,OAAO,EAAEjB,8BAA8B,CAACa,gBAAgB;IAC1D,CAAC;IACDiB,iBAAiB,EAAElB,yBAAyB;IAC5CmB,mBAAmB,EAAE1B,UAAU,CAAC2B,iBAAiB;IACjDd,MAAM,EAAE;MACNC,MAAM,EAAE,KAAK;MACbC,GAAG,EAAE,OAAO;MACZC,SAAS,EAAE,MAAMR,gBAAgB,CAACS,YAAY,CAAC;IACjD;EACF,CAAC,CAAC;EAEF,MAAMW,aAAa,GAAG,MAAMpC,kBAAkB,CAAC;IAC7CqC,mBAAmB,EAAE7B,UAAU,CAACqB,cAAc;IAC9CV,SAAS,EAAE;MACT,GAAGf,gBAAgB;MACnBU,KAAK,EAAED;IACT,CAAC;IACDyB,iBAAiB,EAAEvB,yBAAyB;IAC5CwB,IAAI,EAAErB,SAAS,CAACsB,GAAG;IACnBV,qBAAqB;IACrBW,kBAAkB,EAAE;MAClBhC,IAAI;MACJiC,UAAU,EAAE,oBAAoB;MAChCC,aAAa,EAAEhC,YAAY;MAC3BiC,YAAY,EAAElC;IAChB;EACF,CAAC,CAAC;;EAEF;EACA;EACA,IAAI,CAAC0B,aAAa,CAACS,qBAAqB,EAAE;IACxC,MAAM,IAAIxC,aAAa,CACrB,6DACF,CAAC;EACH;EAEA,OAAO;IACLyC,WAAW,EAAEV;EACf,CAAC;AACH,CAAC"}
+{"version":3,"names":["createClientAttestationPopJwt","createTokenDPoP","fetchTokenResponse","v4","uuidv4","createSignJwtFromCryptoContext","partialCallbacks","sdkConfigV1_3","IoWalletError","authorizeAccess","issuerConf","code","redirectUri","codeVerifier","context","appFetch","fetch","dPopCryptoContext","walletInstanceAttestation","wiaCryptoContext","tokenDPoP","callbacks","signJwt","jti","signer","alg","method","publicJwk","getPublicKey","tokenRequest","url","token_endpoint","clientAttestationDPoP","authorizationServer","credential_issuer","generateRandom","clientAttestation","config","tokenResponse","accessTokenEndpoint","accessTokenRequest","code_verifier","grant_type","redirect_uri","dPoP","jwt","walletAttestation","authorization_details","accessToken"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/04-authorize-access.ts"],"mappings":"AAAA,SACEA,6BAA6B,EAC7BC,eAAe,EACfC,kBAAkB,QACb,0BAA0B;AACjC,SAASC,EAAE,IAAIC,MAAM,QAAQ,MAAM;AAInC,SACEC,8BAA8B,EAC9BC,gBAAgB,QACX,0BAA0B;AACjC,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,aAAa,QAAQ,uBAAuB;AAErD,OAAO,MAAMC,eAA+C,GAAG,MAAAA,CAC7DC,UAAU,EACVC,IAAI,EACJC,WAAW,EACXC,YAAY,EACZC,OAAO,KACJ;EACH,MAAM;IACJC,QAAQ,GAAGC,KAAK;IAChBC,iBAAiB;IACjBC,yBAAyB;IACzBC;EACF,CAAC,GAAGL,OAAO;EAEX,MAAMM,SAAS,GAAG,MAAMnB,eAAe,CAAC;IACtCoB,SAAS,EAAE;MACT,GAAGf,gBAAgB;MACnBgB,OAAO,EAAEjB,8BAA8B,CAACY,iBAAiB;IAC3D,CAAC;IACDM,GAAG,EAAEnB,MAAM,CAAC,CAAC;IACboB,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZC,MAAM,EAAE,KAAK;MACbC,SAAS,EAAE,MAAMV,iBAAiB,CAACW,YAAY,CAAC;IAClD,CAAC;IACDC,YAAY,EAAE;MACZH,MAAM,EAAE,MAAM;MACdI,GAAG,EAAEpB,UAAU,CAACqB;IAClB;EACF,CAAC,CAAC;EAEF,MAAMC,qBAAqB,GAAG,MAAMhC,6BAA6B,CAAC;IAChEiC,mBAAmB,EAAEvB,UAAU,CAACwB,iBAAiB;IACjDb,SAAS,EAAE;MACTc,cAAc,EAAE7B,gBAAgB,CAAC6B,cAAc;MAC/Cb,OAAO,EAAEjB,8BAA8B,CAACc,gBAAgB;IAC1D,CAAC;IACDiB,iBAAiB,EAAElB,yBAAyB;IAC5CmB,MAAM,EAAE9B,aAAa;IACrBiB,MAAM,EAAE;MACNC,GAAG,EAAE,OAAO;MACZC,MAAM,EAAE,KAAK;MACbC,SAAS,EAAE,MAAMR,gBAAgB,CAACS,YAAY,CAAC;IACjD;EACF,CAAC,CAAC;EAEF,MAAMU,aAAa,GAAG,MAAMpC,kBAAkB,CAAC;IAC7CqC,mBAAmB,EAAE7B,UAAU,CAACqB,cAAc;IAC9CS,kBAAkB,EAAE;MAClB7B,IAAI;MACJ8B,aAAa,EAAE5B,YAAY;MAC3B6B,UAAU,EAAE,oBAAoB;MAChCC,YAAY,EAAE/B;IAChB,CAAC;IACDS,SAAS,EAAE;MACT,GAAGf,gBAAgB;MACnBU,KAAK,EAAED;IACT,CAAC;IACDiB,qBAAqB;IACrBY,IAAI,EAAExB,SAAS,CAACyB,GAAG;IACnBC,iBAAiB,EAAE5B;EACrB,CAAC,CAAC;;EAEF;EACA;EACA,IAAI,CAACoB,aAAa,CAACS,qBAAqB,EAAE;IACxC,MAAM,IAAIvC,aAAa,CACrB,6DACF,CAAC;EACH;EAEA,OAAO;IACLwC,WAAW,EAAEV;EACf,CAAC;AACH,CAAC"}