@pagopa/io-react-native-wallet 3.6.2 → 3.6.4

package/lib/module/trust/common/utils.js

@@ -10,8 +10,8 @@ export const verify = async (token, kid, jwks) => {
     throw new Error(`Invalid kid: ${kid}, token: ${token}`);
   }
   const {
-    protectedHeader: header,
-    payload
+    payload,
+    protectedHeader: header
   } = await verifyJwt(token, jwk);
   return {
     header,
@@ -25,8 +25,8 @@ export const verify = async (token, kid, jwks) => {
  */
 export const decode = token => {
   const {
-    protectedHeader: header,
-    payload
+    payload,
+    protectedHeader: header
   } = decodeJwt(token);
   return {
     header,
@@ -35,28 +35,29 @@ export const decode = token => {
 };
 
 /**
- * Extracts the X.509 Trust Anchor certificate (Base64 encoded) from the
- * Trust Anchor's Entity Configuration.
+ * Fetch the federation list document from a given endpoint.
  *
- * @param trustAnchorEntity The entity configuration of the known trust anchor.
- * @returns The Base64 encoded X.509 certificate string.
- * @throws {FederationError} If the certificate cannot be derived.
+ * @param federationListEndpoint The URL of the federation list endpoint.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The federation list as an array of strings.
+ * @throws {IoWalletError} If the HTTP request fails.
+ * @throws {FederationError} If the result is not in the expected format.
  */
-export function getTrustAnchorX509Certificate(trustAnchorEntity) {
-  const taHeaderKid = trustAnchorEntity.jwt.header.kid;
-  const taSigningJwk = trustAnchorEntity.keys.find(key => key.kid === taHeaderKid);
-  if (!taSigningJwk) {
-    throw new FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' not found in Trust Anchor's JWKS.`, {
-      trustAnchorKid: taHeaderKid,
-      reason: "JWK not found for header kid"
-    });
-  }
-  if (taSigningJwk.x5c && taSigningJwk.x5c.length > 0 && taSigningJwk.x5c[0]) {
-    return taSigningJwk.x5c[0];
-  }
-  throw new FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' does not contain a valid 'x5c' certificate array.`, {
-    trustAnchorKid: taHeaderKid,
-    reason: "Missing or empty x5c in JWK"
+export async function getFederationList(federationListEndpoint) {
+  let {
+    appFetch = fetch
+  } = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
+  return await appFetch(federationListEndpoint, {
+    method: "GET"
+  }).then(hasStatusOrThrow(200)).then(res => res.json()).then(json => {
+    const result = FederationListResponse.safeParse(json);
+    if (!result.success) {
+      throw new FederationListParseError(`Invalid federation list format received from ${federationListEndpoint}. Error: ${result.error.message}`, {
+        parseError: result.error.toString(),
+        url: federationListEndpoint
+      });
+    }
+    return result.data;
   });
 }
 
@@ -98,29 +99,28 @@ export async function getSignedEntityStatement(federationFetchEndpoint, subordin
 }
 
 /**
- * Fetch the federation list document from a given endpoint.
+ * Extracts the X.509 Trust Anchor certificate (Base64 encoded) from the
+ * Trust Anchor's Entity Configuration.
  *
- * @param federationListEndpoint The URL of the federation list endpoint.
- * @param appFetch An optional instance of the http client to be used.
- * @returns The federation list as an array of strings.
- * @throws {IoWalletError} If the HTTP request fails.
- * @throws {FederationError} If the result is not in the expected format.
+ * @param trustAnchorEntity The entity configuration of the known trust anchor.
+ * @returns The Base64 encoded X.509 certificate string.
+ * @throws {FederationError} If the certificate cannot be derived.
  */
-export async function getFederationList(federationListEndpoint) {
-  let {
-    appFetch = fetch
-  } = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
-  return await appFetch(federationListEndpoint, {
-    method: "GET"
-  }).then(hasStatusOrThrow(200)).then(res => res.json()).then(json => {
-    const result = FederationListResponse.safeParse(json);
-    if (!result.success) {
-      throw new FederationListParseError(`Invalid federation list format received from ${federationListEndpoint}. Error: ${result.error.message}`, {
-        url: federationListEndpoint,
-        parseError: result.error.toString()
-      });
-    }
-    return result.data;
+export function getTrustAnchorX509Certificate(trustAnchorEntity) {
+  const taHeaderKid = trustAnchorEntity.jwt.header.kid;
+  const taSigningJwk = trustAnchorEntity.keys.find(key => key.kid === taHeaderKid);
+  if (!taSigningJwk) {
+    throw new FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' not found in Trust Anchor's JWKS.`, {
+      reason: "JWK not found for header kid",
+      trustAnchorKid: taHeaderKid
+    });
+  }
+  if (taSigningJwk.x5c && taSigningJwk.x5c.length > 0 && taSigningJwk.x5c[0]) {
+    return taSigningJwk.x5c[0];
+  }
+  throw new FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' does not contain a valid 'x5c' certificate array.`, {
+    reason: "Missing or empty x5c in JWK",
+    trustAnchorKid: taHeaderKid
   });
 }
 //# sourceMappingURL=utils.js.map

package/lib/module/trust/common/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["decode","decodeJwt","verify","verifyJwt","hasStatusOrThrow","FederationError","FederationListParseError","FederationListResponse","token","kid","jwks","jwk","find","k","Error","protectedHeader","header","payload","getTrustAnchorX509Certificate","trustAnchorEntity","taHeaderKid","jwt","taSigningJwk","keys","key","trustAnchorKid","reason","x5c","length","getSignedEntityConfiguration","entityBaseUrl","appFetch","fetch","arguments","undefined","wellKnownUrl","method","then","res","text","getSignedEntityStatement","federationFetchEndpoint","subordinatedEntityBaseUrl","url","URL","searchParams","set","toString","getFederationList","federationListEndpoint","json","result","safeParse","success","error","message","parseError","data"],"sourceRoot":"../../../../src","sources":["trust/common/utils.ts"],"mappings":"AAAA,SACEA,MAAM,IAAIC,SAAS,EACnBC,MAAM,IAAIC,SAAS,QACd,6BAA6B;AAEpC,SAASC,gBAAgB,QAAQ,kBAAkB;AAEnD,SAASC,eAAe,EAAEC,wBAAwB,QAAQ,UAAU;AAEpE,SAASC,sBAAsB,QAAQ,SAAS;AAWhD;AACA;AACA,OAAO,MAAML,MAAM,GAAG,MAAAA,CACpBM,KAAa,EACbC,GAAW,EACXC,IAAW,KACc;EACzB,MAAMC,GAAG,GAAGD,IAAI,CAACE,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACJ,GAAG,KAAKA,GAAG,CAAC;EAC3C,IAAI,CAACE,GAAG,EAAE;IACR,MAAM,IAAIG,KAAK,CAAE,gBAAeL,GAAI,YAAWD,KAAM,EAAC,CAAC;EACzD;EACA,MAAM;IAAEO,eAAe,EAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAG,MAAMd,SAAS,CAACK,KAAK,EAAEG,GAAG,CAAC;EACxE,OAAO;IAAEK,MAAM;IAAEC;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA,OAAO,MAAMjB,MAAM,GAAIQ,KAAa,IAAkB;EACpD,MAAM;IAAEO,eAAe,EAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAGhB,SAAS,CAACO,KAAK,CAAC;EAC7D,OAAO;IAAEQ,MAAM;IAAEC;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,6BAA6BA,CAC3CC,iBAAoC,EAC5B;EACR,MAAMC,WAAW,GAAGD,iBAAiB,CAACE,GAAG,CAACL,MAAM,CAACP,GAAG;EACpD,MAAMa,YAAY,GAAGH,iBAAiB,CAACI,IAAI,CAACX,IAAI,CAC7CY,GAAG,IAAKA,GAAG,CAACf,GAAG,KAAKW,WACvB,CAAC;EAED,IAAI,CAACE,YAAY,EAAE;IACjB,MAAM,IAAIjB,eAAe,CACtB,+DAA8De,WAAY,qCAAoC,EAC/G;MAAEK,cAAc,EAAEL,WAAW;MAAEM,MAAM,EAAE;IAA+B,CACxE,CAAC;EACH;EAEA,IAAIJ,YAAY,CAACK,GAAG,IAAIL,YAAY,CAACK,GAAG,CAACC,MAAM,GAAG,CAAC,IAAIN,YAAY,CAACK,GAAG,CAAC,CAAC,CAAC,EAAE;IAC1E,OAAOL,YAAY,CAACK,GAAG,CAAC,CAAC,CAAC;EAC5B;EAEA,MAAM,IAAItB,eAAe,CACtB,+DAA8De,WAAY,qDAAoD,EAC/H;IAAEK,cAAc,EAAEL,WAAW;IAAEM,MAAM,EAAE;EAA8B,CACvE,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeG,4BAA4BA,CAChDC,aAAqB,EAEJ;EAAA,IADjB;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAME,YAAY,GAAI,GAAEL,aAAc,gCAA+B;EAErE,OAAO,MAAMC,QAAQ,CAACI,YAAY,EAAE;IAClCC,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BiC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,wBAAwBA,CAC5CC,uBAA+B,EAC/BC,yBAAiC,EAEjC;EAAA,IADA;IAAEX,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMU,GAAG,GAAG,IAAIC,GAAG,CAACH,uBAAuB,CAAC;EAC5CE,GAAG,CAACE,YAAY,CAACC,GAAG,CAAC,KAAK,EAAEJ,yBAAyB,CAAC;EAEtD,OAAO,MAAMX,QAAQ,CAACY,GAAG,CAACI,QAAQ,CAAC,CAAC,EAAE;IACpCX,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BiC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeS,iBAAiBA,CACrCC,sBAA8B,EAEX;EAAA,IADnB;IAAElB,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,OAAO,MAAMF,QAAQ,CAACkB,sBAAsB,EAAE;IAC5Cb,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BiC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACY,IAAI,CAAC,CAAC,CAAC,CACzBb,IAAI,CAAEa,IAAI,IAAK;IACd,MAAMC,MAAM,GAAG5C,sBAAsB,CAAC6C,SAAS,CAACF,IAAI,CAAC;IACrD,IAAI,CAACC,MAAM,CAACE,OAAO,EAAE;MACnB,MAAM,IAAI/C,wBAAwB,CAC/B,gDAA+C2C,sBAAuB,YAAWE,MAAM,CAACG,KAAK,CAACC,OAAQ,EAAC,EACxG;QAAEZ,GAAG,EAAEM,sBAAsB;QAAEO,UAAU,EAAEL,MAAM,CAACG,KAAK,CAACP,QAAQ,CAAC;MAAE,CACrE,CAAC;IACH;IACA,OAAOI,MAAM,CAACM,IAAI;EACpB,CAAC,CAAC;AACN"}
+{"version":3,"names":["decode","decodeJwt","verify","verifyJwt","hasStatusOrThrow","FederationError","FederationListParseError","FederationListResponse","token","kid","jwks","jwk","find","k","Error","payload","protectedHeader","header","getFederationList","federationListEndpoint","appFetch","fetch","arguments","length","undefined","method","then","res","json","result","safeParse","success","error","message","parseError","toString","url","data","getSignedEntityConfiguration","entityBaseUrl","wellKnownUrl","text","getSignedEntityStatement","federationFetchEndpoint","subordinatedEntityBaseUrl","URL","searchParams","set","getTrustAnchorX509Certificate","trustAnchorEntity","taHeaderKid","jwt","taSigningJwk","keys","key","reason","trustAnchorKid","x5c"],"sourceRoot":"../../../../src","sources":["trust/common/utils.ts"],"mappings":"AAAA,SACEA,MAAM,IAAIC,SAAS,EACnBC,MAAM,IAAIC,SAAS,QACd,6BAA6B;AAKpC,SAASC,gBAAgB,QAAQ,kBAAkB;AACnD,SAASC,eAAe,EAAEC,wBAAwB,QAAQ,UAAU;AACpE,SAASC,sBAAsB,QAAQ,SAAS;AAWhD;AACA;AACA,OAAO,MAAML,MAAM,GAAG,MAAAA,CACpBM,KAAa,EACbC,GAAW,EACXC,IAAW,KACc;EACzB,MAAMC,GAAG,GAAGD,IAAI,CAACE,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACJ,GAAG,KAAKA,GAAG,CAAC;EAC3C,IAAI,CAACE,GAAG,EAAE;IACR,MAAM,IAAIG,KAAK,CAAE,gBAAeL,GAAI,YAAWD,KAAM,EAAC,CAAC;EACzD;EACA,MAAM;IAAEO,OAAO;IAAEC,eAAe,EAAEC;EAAO,CAAC,GAAG,MAAMd,SAAS,CAACK,KAAK,EAAEG,GAAG,CAAC;EACxE,OAAO;IAAEM,MAAM;IAAEF;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA,OAAO,MAAMf,MAAM,GAAIQ,KAAa,IAAkB;EACpD,MAAM;IAAEO,OAAO;IAAEC,eAAe,EAAEC;EAAO,CAAC,GAAGhB,SAAS,CAACO,KAAK,CAAC;EAC7D,OAAO;IAAES,MAAM;IAAEF;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeG,iBAAiBA,CACrCC,sBAA8B,EAEX;EAAA,IADnB;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,OAAO,MAAMF,QAAQ,CAACD,sBAAsB,EAAE;IAC5CM,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACtB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BsB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBF,IAAI,CAAEE,IAAI,IAAK;IACd,MAAMC,MAAM,GAAGtB,sBAAsB,CAACuB,SAAS,CAACF,IAAI,CAAC;IACrD,IAAI,CAACC,MAAM,CAACE,OAAO,EAAE;MACnB,MAAM,IAAIzB,wBAAwB,CAC/B,gDAA+Ca,sBAAuB,YAAWU,MAAM,CAACG,KAAK,CAACC,OAAQ,EAAC,EACxG;QAAEC,UAAU,EAAEL,MAAM,CAACG,KAAK,CAACG,QAAQ,CAAC,CAAC;QAAEC,GAAG,EAAEjB;MAAuB,CACrE,CAAC;IACH;IACA,OAAOU,MAAM,CAACQ,IAAI;EACpB,CAAC,CAAC;AACN;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,4BAA4BA,CAChDC,aAAqB,EAEJ;EAAA,IADjB;IAAEnB,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMkB,YAAY,GAAI,GAAED,aAAc,gCAA+B;EAErE,OAAO,MAAMnB,QAAQ,CAACoB,YAAY,EAAE;IAClCf,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACtB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BsB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACc,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,wBAAwBA,CAC5CC,uBAA+B,EAC/BC,yBAAiC,EAEjC;EAAA,IADA;IAAExB,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMc,GAAG,GAAG,IAAIS,GAAG,CAACF,uBAAuB,CAAC;EAC5CP,GAAG,CAACU,YAAY,CAACC,GAAG,CAAC,KAAK,EAAEH,yBAAyB,CAAC;EAEtD,OAAO,MAAMxB,QAAQ,CAACgB,GAAG,CAACD,QAAQ,CAAC,CAAC,EAAE;IACpCV,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACtB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BsB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACc,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASO,6BAA6BA,CAC3CC,iBAAoC,EAC5B;EACR,MAAMC,WAAW,GAAGD,iBAAiB,CAACE,GAAG,CAAClC,MAAM,CAACR,GAAG;EACpD,MAAM2C,YAAY,GAAGH,iBAAiB,CAACI,IAAI,CAACzC,IAAI,CAC7C0C,GAAG,IAAKA,GAAG,CAAC7C,GAAG,KAAKyC,WACvB,CAAC;EAED,IAAI,CAACE,YAAY,EAAE;IACjB,MAAM,IAAI/C,eAAe,CACtB,+DAA8D6C,WAAY,qCAAoC,EAC/G;MAAEK,MAAM,EAAE,8BAA8B;MAAEC,cAAc,EAAEN;IAAY,CACxE,CAAC;EACH;EAEA,IAAIE,YAAY,CAACK,GAAG,IAAIL,YAAY,CAACK,GAAG,CAAClC,MAAM,GAAG,CAAC,IAAI6B,YAAY,CAACK,GAAG,CAAC,CAAC,CAAC,EAAE;IAC1E,OAAOL,YAAY,CAACK,GAAG,CAAC,CAAC,CAAC;EAC5B;EAEA,MAAM,IAAIpD,eAAe,CACtB,+DAA8D6C,WAAY,qDAAoD,EAC/H;IAAEK,MAAM,EAAE,6BAA6B;IAAEC,cAAc,EAAEN;EAAY,CACvE,CAAC;AACH"}

package/lib/module/trust/common/verify-chain.js

@@ -1,18 +1,103 @@
-import { decode, getTrustAnchorX509Certificate, verify } from "./utils";
-import { FederationError, MissingFederationFetchEndpointError, MissingX509CertsError, TrustChainEmptyError, TrustChainRenewalError, TrustChainTokenMissingError, X509ValidationError } from "./errors";
 import { verifyCertificateChain } from "@pagopa/io-react-native-crypto";
+import { FederationError, MissingFederationFetchEndpointError, MissingX509CertsError, TrustChainEmptyError, TrustChainRenewalError, TrustChainTokenMissingError, X509ValidationError } from "./errors";
+import { decode, getTrustAnchorX509Certificate, verify } from "./utils";
 import { getSignedEntityConfiguration, getSignedEntityStatement } from "./utils";
+/**
+ * Factory function to create `verifyTrustChain`.
+ * @param config Version specific Entity shapes
+ * @returns `verifyTrustChain` function compliant with the public API
+ */
+export function createVerifyTrustChain(config) {
+  return async function verifyTrustChain(trustAnchorEntity, chain) {
+    let x509Options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
+      connectTimeout: 10000,
+      readTimeout: 10000,
+      requireCrl: true
+    };
+    let {
+      appFetch = fetch,
+      renewOnFail = true
+    } = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
+    const validateTrustChain = createValidateTrustChain(config);
+    const renewTrustChain = createRenewTrustChain(config);
+    try {
+      return await validateTrustChain(trustAnchorEntity, chain, x509Options);
+    } catch (error) {
+      if (renewOnFail) {
+        const renewedChain = await renewTrustChain(chain, appFetch);
+        return validateTrustChain(trustAnchorEntity, renewedChain, x509Options);
+      } else {
+        throw error;
+      }
+    }
+  };
+}
+
+/**
+ * Factory function to create `renewTrustChain`.
+ * @param config Version specific Entity shapes
+ * @returns `renewTrustChain` function
+ */
+function createRenewTrustChain(_ref) {
+  let {
+    EntityConfigurationShape,
+    EntityStatementShape
+  } = _ref;
+  /**
+   * Given a trust chain, obtain a new trust chain by fetching each element's fresh version
+   *
+   * @param chain The original chain
+   * @param appFetch (optional) fetch api implementation
+   * @returns A list of signed token that represent the trust chain, in the same order of the provided chain
+   * @throws {FederationError} If the chain is not valid
+   */
+  return async function renewTrustChain(chain) {
+    let appFetch = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : fetch;
+    return Promise.all(chain.map(async (token, index) => {
+      const decoded = decode(token);
+      const entityStatementResult = EntityStatementShape.safeParse(decoded);
+      const entityConfigurationResult = EntityConfigurationShape.safeParse(decoded);
+      if (entityConfigurationResult.success) {
+        return getSignedEntityConfiguration(entityConfigurationResult.data.payload.iss, {
+          appFetch
+        });
+      }
+      if (entityStatementResult.success) {
+        const entityStatement = entityStatementResult.data;
+        const parentBaseUrl = entityStatement.payload.iss;
+        const parentECJwt = await getSignedEntityConfiguration(parentBaseUrl, {
+          appFetch
+        });
+        const parentEC = EntityConfigurationShape.parse(decode(parentECJwt));
+        const federationFetchEndpoint = parentEC.payload.metadata.federation_entity.federation_fetch_endpoint;
+        if (!federationFetchEndpoint) {
+          throw new MissingFederationFetchEndpointError(`Parent EC at ${parentBaseUrl} is missing federation_fetch_endpoint, cannot renew ES for ${entityStatement.payload.sub}.`, {
+            entityBaseUrl: entityStatement.payload.sub,
+            missingInEntityUrl: parentBaseUrl
+          });
+        }
+        return getSignedEntityStatement(federationFetchEndpoint, entityStatement.payload.sub, {
+          appFetch
+        });
+      }
+      throw new TrustChainRenewalError(`Failed to renew trust chain. Reason: element #${index} failed to parse.`, {
+        originalChain: chain
+      });
+    }));
+  };
+}
+
 /**
  * Factory function to create `validateTrustChain`.
  * @param config Version specific Entity shapes
  * @returns `validateTrustChain` function compliant with the public API
  */
-function createValidateTrustChain(_ref) {
+function createValidateTrustChain(_ref2) {
   let {
     FirstElementShape,
-    MiddleElementShape,
-    LastElementShape
-  } = _ref;
+    LastElementShape,
+    MiddleElementShape
+  } = _ref2;
   /**
    * Validates a provided trust chain against a known trust anchor, including X.509 certificate checks.
    *
@@ -74,8 +159,8 @@ function createValidateTrustChain(_ref) {
       const jwkUsedForVerification = signerJwks.find(k => k.kid === kidFromTokenHeader);
       if (!jwkUsedForVerification) {
         throw new FederationError(`JWK with kid '${kidFromTokenHeader}' was not found in signer's JWKS for token at index ${i}, though JWT verification passed.`, {
-          tokenIndex: i,
-          kid: kidFromTokenHeader
+          kid: kidFromTokenHeader,
+          tokenIndex: i
         });
       }
       if (!jwkUsedForVerification.x5c || jwkUsedForVerification.x5c.length === 0) {
@@ -89,10 +174,10 @@ function createValidateTrustChain(_ref) {
       const x509ValidationResult = await verifyCertificateChain(certChainBase64, x509TrustAnchorCertBase64, x509Options);
       if (!x509ValidationResult.isValid) {
         throw new X509ValidationError(`X.509 certificate chain validation failed for token at index ${i} (kid: ${kidFromTokenHeader}). Status: ${x509ValidationResult.validationStatus}. Error: ${x509ValidationResult.errorMessage}`, {
-          tokenIndex: i,
           kid: kidFromTokenHeader,
-          x509ValidationStatus: x509ValidationResult.validationStatus,
-          x509ErrorMessage: x509ValidationResult.errorMessage
+          tokenIndex: i,
+          x509ErrorMessage: x509ValidationResult.errorMessage,
+          x509ValidationStatus: x509ValidationResult.validationStatus
         });
       }
       return parsedToken;
@@ -100,89 +185,4 @@ function createValidateTrustChain(_ref) {
     return Promise.all(validationPromises);
   };
 }
-
-/**
- * Factory function to create `renewTrustChain`.
- * @param config Version specific Entity shapes
- * @returns `renewTrustChain` function
- */
-function createRenewTrustChain(_ref2) {
-  let {
-    EntityStatementShape,
-    EntityConfigurationShape
-  } = _ref2;
-  /**
-   * Given a trust chain, obtain a new trust chain by fetching each element's fresh version
-   *
-   * @param chain The original chain
-   * @param appFetch (optional) fetch api implementation
-   * @returns A list of signed token that represent the trust chain, in the same order of the provided chain
-   * @throws {FederationError} If the chain is not valid
-   */
-  return async function renewTrustChain(chain) {
-    let appFetch = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : fetch;
-    return Promise.all(chain.map(async (token, index) => {
-      const decoded = decode(token);
-      const entityStatementResult = EntityStatementShape.safeParse(decoded);
-      const entityConfigurationResult = EntityConfigurationShape.safeParse(decoded);
-      if (entityConfigurationResult.success) {
-        return getSignedEntityConfiguration(entityConfigurationResult.data.payload.iss, {
-          appFetch
-        });
-      }
-      if (entityStatementResult.success) {
-        const entityStatement = entityStatementResult.data;
-        const parentBaseUrl = entityStatement.payload.iss;
-        const parentECJwt = await getSignedEntityConfiguration(parentBaseUrl, {
-          appFetch
-        });
-        const parentEC = EntityConfigurationShape.parse(decode(parentECJwt));
-        const federationFetchEndpoint = parentEC.payload.metadata.federation_entity.federation_fetch_endpoint;
-        if (!federationFetchEndpoint) {
-          throw new MissingFederationFetchEndpointError(`Parent EC at ${parentBaseUrl} is missing federation_fetch_endpoint, cannot renew ES for ${entityStatement.payload.sub}.`, {
-            entityBaseUrl: entityStatement.payload.sub,
-            missingInEntityUrl: parentBaseUrl
-          });
-        }
-        return getSignedEntityStatement(federationFetchEndpoint, entityStatement.payload.sub, {
-          appFetch
-        });
-      }
-      throw new TrustChainRenewalError(`Failed to renew trust chain. Reason: element #${index} failed to parse.`, {
-        originalChain: chain
-      });
-    }));
-  };
-}
-
-/**
- * Factory function to create `verifyTrustChain`.
- * @param config Version specific Entity shapes
- * @returns `verifyTrustChain` function compliant with the public API
- */
-export function createVerifyTrustChain(config) {
-  return async function verifyTrustChain(trustAnchorEntity, chain) {
-    let x509Options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
-      connectTimeout: 10000,
-      readTimeout: 10000,
-      requireCrl: true
-    };
-    let {
-      appFetch = fetch,
-      renewOnFail = true
-    } = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
-    const validateTrustChain = createValidateTrustChain(config);
-    const renewTrustChain = createRenewTrustChain(config);
-    try {
-      return await validateTrustChain(trustAnchorEntity, chain, x509Options);
-    } catch (error) {
-      if (renewOnFail) {
-        const renewedChain = await renewTrustChain(chain, appFetch);
-        return validateTrustChain(trustAnchorEntity, renewedChain, x509Options);
-      } else {
-        throw error;
-      }
-    }
-  };
-}
 //# sourceMappingURL=verify-chain.js.map

package/lib/module/trust/common/verify-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["decode","getTrustAnchorX509Certificate","verify","FederationError","MissingFederationFetchEndpointError","MissingX509CertsError","TrustChainEmptyError","TrustChainRenewalError","TrustChainTokenMissingError","X509ValidationError","verifyCertificateChain","getSignedEntityConfiguration","getSignedEntityStatement","createValidateTrustChain","_ref","FirstElementShape","MiddleElementShape","LastElementShape","validateTrustChain","trustAnchorEntity","chain","x509Options","length","selectTokenShape","elementIndex","selectKid","currentIndex","token","index","shape","parse","header","kid","selectKeys","keys","nextIndex","nextToken","payload","jwks","x509TrustAnchorCertBase64","validationPromises","map","tokenString","i","kidFromTokenHeader","signerJwks","parsedToken","jwkUsedForVerification","find","k","tokenIndex","x5c","certChainBase64","at","slice","x509ValidationResult","isValid","validationStatus","errorMessage","x509ValidationStatus","x509ErrorMessage","Promise","all","createRenewTrustChain","_ref2","EntityStatementShape","EntityConfigurationShape","renewTrustChain","appFetch","arguments","undefined","fetch","decoded","entityStatementResult","safeParse","entityConfigurationResult","success","data","iss","entityStatement","parentBaseUrl","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_entity","federation_fetch_endpoint","sub","entityBaseUrl","missingInEntityUrl","originalChain","createVerifyTrustChain","config","verifyTrustChain","connectTimeout","readTimeout","requireCrl","renewOnFail","error","renewedChain"],"sourceRoot":"../../../../src","sources":["trust/common/verify-chain.ts"],"mappings":"AAGA,SACEA,MAAM,EACNC,6BAA6B,EAC7BC,MAAM,QAED,SAAS;AAChB,SACEC,eAAe,EACfC,mCAAmC,EACnCC,qBAAqB,EACrBC,oBAAoB,EACpBC,sBAAsB,EACtBC,2BAA2B,EAC3BC,mBAAmB,QACd,UAAU;AACjB,SAEEC,sBAAsB,QAEjB,gCAAgC;AACvC,SACEC,4BAA4B,EAC5BC,wBAAwB,QACnB,SAAS;AAsBhB;AACA;AACA;AACA;AACA;AACA,SAASC,wBAAwBA,CAAAC,IAAA,EAIf;EAAA,IAJgB;IAChCC,iBAAiB;IACjBC,kBAAkB;IAClBC;EACa,CAAC,GAAAH,IAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeI,kBAAkBA,CACtCC,iBAAoC,EACpCC,KAAe,EACfC,WAAmC,EACX;IACxB;IACA,IAAID,KAAK,CAACE,MAAM,KAAK,CAAC,EAAE;MACtB,MAAM,IAAIhB,oBAAoB,CAAC,kCAAkC,CAAC;IACpE;;IAEA;IACA,MAAMiB,gBAAgB,GAAIC,YAAoB,IAC5CA,YAAY,KAAK,CAAC,GACdT,iBAAiB,GACjBS,YAAY,KAAKJ,KAAK,CAACE,MAAM,GAAG,CAAC,GAC/BL,gBAAgB,GAChBD,kBAAkB;;IAE1B;IACA,MAAMS,SAAS,GAAIC,YAAoB,IAAa;MAClD,MAAMC,KAAK,GAAGP,KAAK,CAACM,YAAY,CAAC;MACjC,IAAI,CAACC,KAAK,EAAE;QACV,MAAM,IAAInB,2BAA2B,CAClC,0BAAyBkB,YAAa,kBAAiB,EACxD;UAAEE,KAAK,EAAEF;QAAa,CACxB,CAAC;MACH;MACA,MAAMG,KAAK,GAAGN,gBAAgB,CAACG,YAAY,CAAC;MAC5C,OAAOG,KAAK,CAACC,KAAK,CAAC9B,MAAM,CAAC2B,KAAK,CAAC,CAAC,CAACI,MAAM,CAACC,GAAG;IAC9C,CAAC;;IAED;IACA;IACA,MAAMC,UAAU,GAAIP,YAAoB,IAAY;MAClD,IAAIA,YAAY,KAAKN,KAAK,CAACE,MAAM,GAAG,CAAC,EAAE;QACrC,OAAOH,iBAAiB,CAACe,IAAI;MAC/B;MAEA,MAAMC,SAAS,GAAGT,YAAY,GAAG,CAAC;MAClC,MAAMU,SAAS,GAAGhB,KAAK,CAACe,SAAS,CAAC;MAClC,IAAI,CAACC,SAAS,EAAE;QACd,MAAM,IAAI5B,2BAA2B,CAClC,+BAA8B2B,SAAU,kCAAiCT,YAAa,IAAG,EAC1F;UAAEE,KAAK,EAAEO;QAAU,CACrB,CAAC;MACH;MACA,MAAMN,KAAK,GAAGN,gBAAgB,CAACY,SAAS,CAAC;MACzC,OAAON,KAAK,CAACC,KAAK,CAAC9B,MAAM,CAACoC,SAAS,CAAC,CAAC,CAACC,OAAO,CAACC,IAAI,CAACJ,IAAI;IACzD,CAAC;IAED,MAAMK,yBAAyB,GAC7BtC,6BAA6B,CAACkB,iBAAiB,CAAC;;IAElD;IACA;IACA,MAAMqB,kBAAkB,GAAGpB,KAAK,CAACqB,GAAG,CAAC,OAAOC,WAAW,EAAEC,CAAC,KAAK;MAC7D,MAAMC,kBAAkB,GAAGnB,SAAS,CAACkB,CAAC,CAAC;MACvC,MAAME,UAAU,GAAGZ,UAAU,CAACU,CAAC,CAAC;;MAEhC;MACA,MAAMG,WAAW,GAAG,MAAM5C,MAAM,CAC9BwC,WAAW,EACXE,kBAAkB,EAClBC,UACF,CAAC;;MAED;MACA,MAAME,sBAAsB,GAAGF,UAAU,CAACG,IAAI,CAC3CC,CAAC,IAAKA,CAAC,CAACjB,GAAG,KAAKY,kBACnB,CAAC;MAED,IAAI,CAACG,sBAAsB,EAAE;QAC3B,MAAM,IAAI5C,eAAe,CACtB,iBAAgByC,kBAAmB,uDAAsDD,CAAE,mCAAkC,EAC9H;UAAEO,UAAU,EAAEP,CAAC;UAAEX,GAAG,EAAEY;QAAmB,CAC3C,CAAC;MACH;MAEA,IACE,CAACG,sBAAsB,CAACI,GAAG,IAC3BJ,sBAAsB,CAACI,GAAG,CAAC7B,MAAM,KAAK,CAAC,EACvC;QACA,MAAM,IAAIjB,qBAAqB,CAC5B,iBAAgBuC,kBAAmB,0EAAyED,CAAE,GACjH,CAAC;MACH;;MAEA;MACA;MACA;MACA,MAAMS,eAAe,GACnBL,sBAAsB,CAACI,GAAG,CAAC7B,MAAM,GAAG,CAAC,IACrCyB,sBAAsB,CAACI,GAAG,CAACE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAKd,yBAAyB,GAC3DQ,sBAAsB,CAACI,GAAG,CAACG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACvCP,sBAAsB,CAACI,GAAG;MAEhC,MAAMI,oBAAiD,GACrD,MAAM7C,sBAAsB,CAC1B0C,eAAe,EACfb,yBAAyB,EACzBlB,WACF,CAAC;MAEH,IAAI,CAACkC,oBAAoB,CAACC,OAAO,EAAE;QACjC,MAAM,IAAI/C,mBAAmB,CAC1B,gEAA+DkC,CAAE,UAASC,kBAAmB,cAAaW,oBAAoB,CAACE,gBAAiB,YAAWF,oBAAoB,CAACG,YAAa,EAAC,EAC/L;UACER,UAAU,EAAEP,CAAC;UACbX,GAAG,EAAEY,kBAAkB;UACvBe,oBAAoB,EAAEJ,oBAAoB,CAACE,gBAAgB;UAC3DG,gBAAgB,EAAEL,oBAAoB,CAACG;QACzC,CACF,CAAC;MACH;MACA,OAAOZ,WAAW;IACpB,CAAC,CAAC;IAEF,OAAOe,OAAO,CAACC,GAAG,CAACtB,kBAAkB,CAAC;EACxC,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAASuB,qBAAqBA,CAAAC,KAAA,EAGZ;EAAA,IAHa;IAC7BC,oBAAoB;IACpBC;EACa,CAAC,GAAAF,KAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeG,eAAeA,CACnC/C,KAAe,EAEI;IAAA,IADnBgD,QAA8B,GAAAC,SAAA,CAAA/C,MAAA,QAAA+C,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAGE,KAAK;IAEtC,OAAOV,OAAO,CAACC,GAAG,CAChB1C,KAAK,CAACqB,GAAG,CAAC,OAAOd,KAAK,EAAEC,KAAK,KAAK;MAChC,MAAM4C,OAAO,GAAGxE,MAAM,CAAC2B,KAAK,CAAC;MAE7B,MAAM8C,qBAAqB,GAAGR,oBAAoB,CAACS,SAAS,CAACF,OAAO,CAAC;MACrE,MAAMG,yBAAyB,GAC7BT,wBAAwB,CAACQ,SAAS,CAACF,OAAO,CAAC;MAE7C,IAAIG,yBAAyB,CAACC,OAAO,EAAE;QACrC,OAAOjE,4BAA4B,CACjCgE,yBAAyB,CAACE,IAAI,CAACxC,OAAO,CAACyC,GAAG,EAC1C;UAAEV;QAAS,CACb,CAAC;MACH;MACA,IAAIK,qBAAqB,CAACG,OAAO,EAAE;QACjC,MAAMG,eAAe,GAAGN,qBAAqB,CAACI,IAAI;QAElD,MAAMG,aAAa,GAAGD,eAAe,CAAC1C,OAAO,CAACyC,GAAG;QACjD,MAAMG,WAAW,GAAG,MAAMtE,4BAA4B,CACpDqE,aAAa,EACb;UAAEZ;QAAS,CACb,CAAC;QACD,MAAMc,QAAQ,GAAGhB,wBAAwB,CAACpC,KAAK,CAAC9B,MAAM,CAACiF,WAAW,CAAC,CAAC;QAEpE,MAAME,uBAAuB,GAC3BD,QAAQ,CAAC7C,OAAO,CAAC+C,QAAQ,CAACC,iBAAiB,CACxCC,yBAAyB;QAC9B,IAAI,CAACH,uBAAuB,EAAE;UAC5B,MAAM,IAAI/E,mCAAmC,CAC1C,gBAAe4E,aAAc,8DAA6DD,eAAe,CAAC1C,OAAO,CAACkD,GAAI,GAAE,EACzH;YACEC,aAAa,EAAET,eAAe,CAAC1C,OAAO,CAACkD,GAAG;YAC1CE,kBAAkB,EAAET;UACtB,CACF,CAAC;QACH;QACA,OAAOpE,wBAAwB,CAC7BuE,uBAAuB,EACvBJ,eAAe,CAAC1C,OAAO,CAACkD,GAAG,EAC3B;UAAEnB;QAAS,CACb,CAAC;MACH;MACA,MAAM,IAAI7D,sBAAsB,CAC7B,iDAAgDqB,KAAM,mBAAkB,EACzE;QAAE8D,aAAa,EAAEtE;MAAM,CACzB,CAAC;IACH,CAAC,CACH,CAAC;EACH,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASuE,sBAAsBA,CACpCC,MAAqB,EACS;EAC9B,OAAO,eAAeC,gBAAgBA,CACpC1E,iBAAiB,EACjBC,KAAK,EAOL;IAAA,IANAC,WAAW,GAAAgD,SAAA,CAAA/C,MAAA,QAAA+C,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG;MACZyB,cAAc,EAAE,KAAK;MACrBC,WAAW,EAAE,KAAK;MAClBC,UAAU,EAAE;IACd,CAAC;IAAA,IACD;MAAE5B,QAAQ,GAAGG,KAAK;MAAE0B,WAAW,GAAG;IAAK,CAAC,GAAA5B,SAAA,CAAA/C,MAAA,QAAA+C,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;IAE7C,MAAMnD,kBAAkB,GAAGL,wBAAwB,CAAC+E,MAAM,CAAC;IAC3D,MAAMzB,eAAe,GAAGJ,qBAAqB,CAAC6B,MAAM,CAAC;IAErD,IAAI;MACF,OAAO,MAAM1E,kBAAkB,CAACC,iBAAiB,EAAEC,KAAK,EAAEC,WAAW,CAAC;IACxE,CAAC,CAAC,OAAO6E,KAAK,EAAE;MACd,IAAID,WAAW,EAAE;QACf,MAAME,YAAY,GAAG,MAAMhC,eAAe,CAAC/C,KAAK,EAAEgD,QAAQ,CAAC;QAC3D,OAAOlD,kBAAkB,CAACC,iBAAiB,EAAEgF,YAAY,EAAE9E,WAAW,CAAC;MACzE,CAAC,MAAM;QACL,MAAM6E,KAAK;MACb;IACF;EACF,CAAC;AACH"}
+{"version":3,"names":["verifyCertificateChain","FederationError","MissingFederationFetchEndpointError","MissingX509CertsError","TrustChainEmptyError","TrustChainRenewalError","TrustChainTokenMissingError","X509ValidationError","decode","getTrustAnchorX509Certificate","verify","getSignedEntityConfiguration","getSignedEntityStatement","createVerifyTrustChain","config","verifyTrustChain","trustAnchorEntity","chain","x509Options","arguments","length","undefined","connectTimeout","readTimeout","requireCrl","appFetch","fetch","renewOnFail","validateTrustChain","createValidateTrustChain","renewTrustChain","createRenewTrustChain","error","renewedChain","_ref","EntityConfigurationShape","EntityStatementShape","Promise","all","map","token","index","decoded","entityStatementResult","safeParse","entityConfigurationResult","success","data","payload","iss","entityStatement","parentBaseUrl","parentECJwt","parentEC","parse","federationFetchEndpoint","metadata","federation_entity","federation_fetch_endpoint","sub","entityBaseUrl","missingInEntityUrl","originalChain","_ref2","FirstElementShape","LastElementShape","MiddleElementShape","selectTokenShape","elementIndex","selectKid","currentIndex","shape","header","kid","selectKeys","keys","nextIndex","nextToken","jwks","x509TrustAnchorCertBase64","validationPromises","tokenString","i","kidFromTokenHeader","signerJwks","parsedToken","jwkUsedForVerification","find","k","tokenIndex","x5c","certChainBase64","at","slice","x509ValidationResult","isValid","validationStatus","errorMessage","x509ErrorMessage","x509ValidationStatus"],"sourceRoot":"../../../../src","sources":["trust/common/verify-chain.ts"],"mappings":"AAAA,SAEEA,sBAAsB,QAEjB,gCAAgC;AAOvC,SACEC,eAAe,EACfC,mCAAmC,EACnCC,qBAAqB,EACrBC,oBAAoB,EACpBC,sBAAsB,EACtBC,2BAA2B,EAC3BC,mBAAmB,QACd,UAAU;AAEjB,SACEC,MAAM,EACNC,6BAA6B,EAE7BC,MAAM,QACD,SAAS;AAChB,SACEC,4BAA4B,EAC5BC,wBAAwB,QACnB,SAAS;AAoBhB;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,sBAAsBA,CACpCC,MAAqB,EACS;EAC9B,OAAO,eAAeC,gBAAgBA,CACpCC,iBAAiB,EACjBC,KAAK,EAOL;IAAA,IANAC,WAAW,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG;MACZG,cAAc,EAAE,KAAK;MACrBC,WAAW,EAAE,KAAK;MAClBC,UAAU,EAAE;IACd,CAAC;IAAA,IACD;MAAEC,QAAQ,GAAGC,KAAK;MAAEC,WAAW,GAAG;IAAK,CAAC,GAAAR,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;IAE7C,MAAMS,kBAAkB,GAAGC,wBAAwB,CAACf,MAAM,CAAC;IAC3D,MAAMgB,eAAe,GAAGC,qBAAqB,CAACjB,MAAM,CAAC;IAErD,IAAI;MACF,OAAO,MAAMc,kBAAkB,CAACZ,iBAAiB,EAAEC,KAAK,EAAEC,WAAW,CAAC;IACxE,CAAC,CAAC,OAAOc,KAAK,EAAE;MACd,IAAIL,WAAW,EAAE;QACf,MAAMM,YAAY,GAAG,MAAMH,eAAe,CAACb,KAAK,EAAEQ,QAAQ,CAAC;QAC3D,OAAOG,kBAAkB,CAACZ,iBAAiB,EAAEiB,YAAY,EAAEf,WAAW,CAAC;MACzE,CAAC,MAAM;QACL,MAAMc,KAAK;MACb;IACF;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAASD,qBAAqBA,CAAAG,IAAA,EAGZ;EAAA,IAHa;IAC7BC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeJ,eAAeA,CACnCb,KAAe,EAEI;IAAA,IADnBQ,QAA8B,GAAAN,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGO,KAAK;IAEtC,OAAOW,OAAO,CAACC,GAAG,CAChBrB,KAAK,CAACsB,GAAG,CAAC,OAAOC,KAAK,EAAEC,KAAK,KAAK;MAChC,MAAMC,OAAO,GAAGlC,MAAM,CAACgC,KAAK,CAAC;MAE7B,MAAMG,qBAAqB,GAAGP,oBAAoB,CAACQ,SAAS,CAACF,OAAO,CAAC;MACrE,MAAMG,yBAAyB,GAC7BV,wBAAwB,CAACS,SAAS,CAACF,OAAO,CAAC;MAE7C,IAAIG,yBAAyB,CAACC,OAAO,EAAE;QACrC,OAAOnC,4BAA4B,CACjCkC,yBAAyB,CAACE,IAAI,CAACC,OAAO,CAACC,GAAG,EAC1C;UAAExB;QAAS,CACb,CAAC;MACH;MACA,IAAIkB,qBAAqB,CAACG,OAAO,EAAE;QACjC,MAAMI,eAAe,GAAGP,qBAAqB,CAACI,IAAI;QAElD,MAAMI,aAAa,GAAGD,eAAe,CAACF,OAAO,CAACC,GAAG;QACjD,MAAMG,WAAW,GAAG,MAAMzC,4BAA4B,CACpDwC,aAAa,EACb;UAAE1B;QAAS,CACb,CAAC;QACD,MAAM4B,QAAQ,GAAGlB,wBAAwB,CAACmB,KAAK,CAAC9C,MAAM,CAAC4C,WAAW,CAAC,CAAC;QAEpE,MAAMG,uBAAuB,GAC3BF,QAAQ,CAACL,OAAO,CAACQ,QAAQ,CAACC,iBAAiB,CACxCC,yBAAyB;QAC9B,IAAI,CAACH,uBAAuB,EAAE;UAC5B,MAAM,IAAIrD,mCAAmC,CAC1C,gBAAeiD,aAAc,8DAA6DD,eAAe,CAACF,OAAO,CAACW,GAAI,GAAE,EACzH;YACEC,aAAa,EAAEV,eAAe,CAACF,OAAO,CAACW,GAAG;YAC1CE,kBAAkB,EAAEV;UACtB,CACF,CAAC;QACH;QACA,OAAOvC,wBAAwB,CAC7B2C,uBAAuB,EACvBL,eAAe,CAACF,OAAO,CAACW,GAAG,EAC3B;UAAElC;QAAS,CACb,CAAC;MACH;MACA,MAAM,IAAIpB,sBAAsB,CAC7B,iDAAgDoC,KAAM,mBAAkB,EACzE;QAAEqB,aAAa,EAAE7C;MAAM,CACzB,CAAC;IACH,CAAC,CACH,CAAC;EACH,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAASY,wBAAwBA,CAAAkC,KAAA,EAIf;EAAA,IAJgB;IAChCC,iBAAiB;IACjBC,gBAAgB;IAChBC;EACa,CAAC,GAAAH,KAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAenC,kBAAkBA,CACtCZ,iBAAoC,EACpCC,KAAe,EACfC,WAAmC,EACX;IACxB;IACA,IAAID,KAAK,CAACG,MAAM,KAAK,CAAC,EAAE;MACtB,MAAM,IAAIhB,oBAAoB,CAAC,kCAAkC,CAAC;IACpE;;IAEA;IACA,MAAM+D,gBAAgB,GAAIC,YAAoB,IAC5CA,YAAY,KAAK,CAAC,GACdJ,iBAAiB,GACjBI,YAAY,KAAKnD,KAAK,CAACG,MAAM,GAAG,CAAC,GAC/B6C,gBAAgB,GAChBC,kBAAkB;;IAE1B;IACA,MAAMG,SAAS,GAAIC,YAAoB,IAAa;MAClD,MAAM9B,KAAK,GAAGvB,KAAK,CAACqD,YAAY,CAAC;MACjC,IAAI,CAAC9B,KAAK,EAAE;QACV,MAAM,IAAIlC,2BAA2B,CAClC,0BAAyBgE,YAAa,kBAAiB,EACxD;UAAE7B,KAAK,EAAE6B;QAAa,CACxB,CAAC;MACH;MACA,MAAMC,KAAK,GAAGJ,gBAAgB,CAACG,YAAY,CAAC;MAC5C,OAAOC,KAAK,CAACjB,KAAK,CAAC9C,MAAM,CAACgC,KAAK,CAAC,CAAC,CAACgC,MAAM,CAACC,GAAG;IAC9C,CAAC;;IAED;IACA;IACA,MAAMC,UAAU,GAAIJ,YAAoB,IAAY;MAClD,IAAIA,YAAY,KAAKrD,KAAK,CAACG,MAAM,GAAG,CAAC,EAAE;QACrC,OAAOJ,iBAAiB,CAAC2D,IAAI;MAC/B;MAEA,MAAMC,SAAS,GAAGN,YAAY,GAAG,CAAC;MAClC,MAAMO,SAAS,GAAG5D,KAAK,CAAC2D,SAAS,CAAC;MAClC,IAAI,CAACC,SAAS,EAAE;QACd,MAAM,IAAIvE,2BAA2B,CAClC,+BAA8BsE,SAAU,kCAAiCN,YAAa,IAAG,EAC1F;UAAE7B,KAAK,EAAEmC;QAAU,CACrB,CAAC;MACH;MACA,MAAML,KAAK,GAAGJ,gBAAgB,CAACS,SAAS,CAAC;MACzC,OAAOL,KAAK,CAACjB,KAAK,CAAC9C,MAAM,CAACqE,SAAS,CAAC,CAAC,CAAC7B,OAAO,CAAC8B,IAAI,CAACH,IAAI;IACzD,CAAC;IAED,MAAMI,yBAAyB,GAC7BtE,6BAA6B,CAACO,iBAAiB,CAAC;;IAElD;IACA;IACA,MAAMgE,kBAAkB,GAAG/D,KAAK,CAACsB,GAAG,CAAC,OAAO0C,WAAW,EAAEC,CAAC,KAAK;MAC7D,MAAMC,kBAAkB,GAAGd,SAAS,CAACa,CAAC,CAAC;MACvC,MAAME,UAAU,GAAGV,UAAU,CAACQ,CAAC,CAAC;;MAEhC;MACA,MAAMG,WAAW,GAAG,MAAM3E,MAAM,CAC9BuE,WAAW,EACXE,kBAAkB,EAClBC,UACF,CAAC;;MAED;MACA,MAAME,sBAAsB,GAAGF,UAAU,CAACG,IAAI,CAC3CC,CAAC,IAAKA,CAAC,CAACf,GAAG,KAAKU,kBACnB,CAAC;MAED,IAAI,CAACG,sBAAsB,EAAE;QAC3B,MAAM,IAAIrF,eAAe,CACtB,iBAAgBkF,kBAAmB,uDAAsDD,CAAE,mCAAkC,EAC9H;UAAET,GAAG,EAAEU,kBAAkB;UAAEM,UAAU,EAAEP;QAAE,CAC3C,CAAC;MACH;MAEA,IACE,CAACI,sBAAsB,CAACI,GAAG,IAC3BJ,sBAAsB,CAACI,GAAG,CAACtE,MAAM,KAAK,CAAC,EACvC;QACA,MAAM,IAAIjB,qBAAqB,CAC5B,iBAAgBgF,kBAAmB,0EAAyED,CAAE,GACjH,CAAC;MACH;;MAEA;MACA;MACA;MACA,MAAMS,eAAe,GACnBL,sBAAsB,CAACI,GAAG,CAACtE,MAAM,GAAG,CAAC,IACrCkE,sBAAsB,CAACI,GAAG,CAACE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAKb,yBAAyB,GAC3DO,sBAAsB,CAACI,GAAG,CAACG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACvCP,sBAAsB,CAACI,GAAG;MAEhC,MAAMI,oBAAiD,GACrD,MAAM9F,sBAAsB,CAC1B2F,eAAe,EACfZ,yBAAyB,EACzB7D,WACF,CAAC;MAEH,IAAI,CAAC4E,oBAAoB,CAACC,OAAO,EAAE;QACjC,MAAM,IAAIxF,mBAAmB,CAC1B,gEAA+D2E,CAAE,UAASC,kBAAmB,cAAaW,oBAAoB,CAACE,gBAAiB,YAAWF,oBAAoB,CAACG,YAAa,EAAC,EAC/L;UACExB,GAAG,EAAEU,kBAAkB;UACvBM,UAAU,EAAEP,CAAC;UACbgB,gBAAgB,EAAEJ,oBAAoB,CAACG,YAAY;UACnDE,oBAAoB,EAAEL,oBAAoB,CAACE;QAC7C,CACF,CAAC;MACH;MACA,OAAOX,WAAW;IACpB,CAAC,CAAC;IAEF,OAAOhD,OAAO,CAACC,GAAG,CAAC0C,kBAAkB,CAAC;EACxC,CAAC;AACH"}

package/lib/module/trust/v1.0.0/build-chain.js

@@ -2,7 +2,7 @@ import { createBuildTrustChain } from "../common/build-chain";
 import { EntityStatement } from "../common/types";
 import { EntityConfiguration } from "./types";
 export const buildTrustChain = createBuildTrustChain({
-  EntityStatementShape: EntityStatement,
-  EntityConfigurationShape: EntityConfiguration
+  EntityConfigurationShape: EntityConfiguration,
+  EntityStatementShape: EntityStatement
 });
 //# sourceMappingURL=build-chain.js.map

package/lib/module/trust/v1.0.0/build-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["createBuildTrustChain","EntityStatement","EntityConfiguration","buildTrustChain","EntityStatementShape","EntityConfigurationShape"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/build-chain.ts"],"mappings":"AAAA,SAASA,qBAAqB,QAAQ,uBAAuB;AAC7D,SAASC,eAAe,QAAQ,iBAAiB;AACjD,SAASC,mBAAmB,QAAQ,SAAS;AAE7C,OAAO,MAAMC,eAAe,GAAGH,qBAAqB,CAAC;EACnDI,oBAAoB,EAAEH,eAAe;EACrCI,wBAAwB,EAAEH;AAC5B,CAAC,CAAC"}
+{"version":3,"names":["createBuildTrustChain","EntityStatement","EntityConfiguration","buildTrustChain","EntityConfigurationShape","EntityStatementShape"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/build-chain.ts"],"mappings":"AAAA,SAASA,qBAAqB,QAAQ,uBAAuB;AAC7D,SAASC,eAAe,QAAQ,iBAAiB;AACjD,SAASC,mBAAmB,QAAQ,SAAS;AAE7C,OAAO,MAAMC,eAAe,GAAGH,qBAAqB,CAAC;EACnDI,wBAAwB,EAAEF,mBAAmB;EAC7CG,oBAAoB,EAAEJ;AACxB,CAAC,CAAC"}

package/lib/module/trust/v1.0.0/entities.js

@@ -1,6 +1,6 @@
 import { decode as decodeJwt } from "@pagopa/io-react-native-jwt";
-import { WalletProviderEntityConfiguration, CredentialIssuerEntityConfiguration, EntityConfiguration, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration } from "./types";
 import { getSignedEntityConfiguration } from "../common/utils";
+import { CredentialIssuerEntityConfiguration, EntityConfiguration, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration, WalletProviderEntityConfiguration } from "./types";
 
 /**
  * Fetch and parse the entity configuration document for a given federation entity.

package/lib/module/trust/v1.0.0/entities.js.map

@@ -1 +1 @@
-{"version":3,"names":["decode","decodeJwt","WalletProviderEntityConfiguration","CredentialIssuerEntityConfiguration","EntityConfiguration","RelyingPartyEntityConfiguration","TrustAnchorEntityConfiguration","getSignedEntityConfiguration","fetchAndParseEntityConfiguration","entityBaseUrl","schema","appFetch","fetch","arguments","length","undefined","responseText","responseJwt","parse","header","protectedHeader","payload","getWalletProviderEntityConfiguration","options","getCredentialIssuerEntityConfiguration","getTrustAnchorEntityConfiguration","getRelyingPartyEntityConfiguration","getEntityConfiguration"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/entities.ts"],"mappings":"AAAA,SAASA,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;AACjE,SACEC,iCAAiC,EACjCC,mCAAmC,EACnCC,mBAAmB,EACnBC,+BAA+B,EAC/BC,8BAA8B,QACzB,SAAS;AAEhB,SACEC,4BAA4B,QAEvB,iBAAiB;;AAExB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,gCAAgCA,CAC7CC,aAAqB,EACrBC,MAAoB,EAER;EAAA,IADZ;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMG,YAAY,GAAG,MAAMT,4BAA4B,CAACE,aAAa,EAAE;IACrEE;EACF,CAAC,CAAC;EAEF,MAAMM,WAAW,GAAGhB,SAAS,CAACe,YAAY,CAAC;EAC3C,OAAON,MAAM,CAACQ,KAAK,CAAC;IAClBC,MAAM,EAAEF,WAAW,CAACG,eAAe;IACnCC,OAAO,EAAEJ,WAAW,CAACI;EACvB,CAAC,CAAC;AACJ;AAEA,OAAO,MAAMC,oCAAoC,GAAGA,CAClDb,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbP,iCAAiC,EACjCqB,OACF,CAAC;AAEH,OAAO,MAAMC,sCAAsC,GAAGA,CACpDf,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbN,mCAAmC,EACnCoB,OACF,CAAC;AAEH,OAAO,MAAME,iCAAiC,GAAGA,CAC/ChB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbH,8BAA8B,EAC9BiB,OACF,CAAC;AAEH,OAAO,MAAMG,kCAAkC,GAAGA,CAChDjB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbJ,+BAA+B,EAC/BkB,OACF,CAAC;AAEH,OAAO,MAAMI,sBAAsB,GAAGA,CACpClB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAACC,aAAa,EAAEL,mBAAmB,EAAEmB,OAAO,CAAC"}
+{"version":3,"names":["decode","decodeJwt","getSignedEntityConfiguration","CredentialIssuerEntityConfiguration","EntityConfiguration","RelyingPartyEntityConfiguration","TrustAnchorEntityConfiguration","WalletProviderEntityConfiguration","fetchAndParseEntityConfiguration","entityBaseUrl","schema","appFetch","fetch","arguments","length","undefined","responseText","responseJwt","parse","header","protectedHeader","payload","getWalletProviderEntityConfiguration","options","getCredentialIssuerEntityConfiguration","getTrustAnchorEntityConfiguration","getRelyingPartyEntityConfiguration","getEntityConfiguration"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/entities.ts"],"mappings":"AAEA,SAASA,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;AAEjE,SAEEC,4BAA4B,QACvB,iBAAiB;AACxB,SACEC,mCAAmC,EACnCC,mBAAmB,EACnBC,+BAA+B,EAC/BC,8BAA8B,EAC9BC,iCAAiC,QAC5B,SAAS;;AAEhB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,gCAAgCA,CAC7CC,aAAqB,EACrBC,MAAoB,EAER;EAAA,IADZ;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMG,YAAY,GAAG,MAAMd,4BAA4B,CAACO,aAAa,EAAE;IACrEE;EACF,CAAC,CAAC;EAEF,MAAMM,WAAW,GAAGhB,SAAS,CAACe,YAAY,CAAC;EAC3C,OAAON,MAAM,CAACQ,KAAK,CAAC;IAClBC,MAAM,EAAEF,WAAW,CAACG,eAAe;IACnCC,OAAO,EAAEJ,WAAW,CAACI;EACvB,CAAC,CAAC;AACJ;AAEA,OAAO,MAAMC,oCAAoC,GAAGA,CAClDb,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbF,iCAAiC,EACjCgB,OACF,CAAC;AAEH,OAAO,MAAMC,sCAAsC,GAAGA,CACpDf,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbN,mCAAmC,EACnCoB,OACF,CAAC;AAEH,OAAO,MAAME,iCAAiC,GAAGA,CAC/ChB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbH,8BAA8B,EAC9BiB,OACF,CAAC;AAEH,OAAO,MAAMG,kCAAkC,GAAGA,CAChDjB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbJ,+BAA+B,EAC/BkB,OACF,CAAC;AAEH,OAAO,MAAMI,sBAAsB,GAAGA,CACpClB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAACC,aAAa,EAAEL,mBAAmB,EAAEmB,OAAO,CAAC"}

package/lib/module/trust/v1.0.0/index.js

@@ -1,11 +1,11 @@
-import { getTrustAnchorEntityConfiguration } from "./entities";
 import { withMapperAsync } from "../../utils/mappers";
-import { mapToTrustAnchorConfig } from "./mappers";
 import { buildTrustChain } from "./build-chain";
+import { getTrustAnchorEntityConfiguration } from "./entities";
+import { mapToTrustAnchorConfig } from "./mappers";
 import { verifyTrustChain } from "./verify-chain";
 export const Trust = {
-  getTrustAnchorEntityConfiguration: withMapperAsync(mapToTrustAnchorConfig, getTrustAnchorEntityConfiguration),
   buildTrustChain,
+  getTrustAnchorEntityConfiguration: withMapperAsync(mapToTrustAnchorConfig, getTrustAnchorEntityConfiguration),
   verifyTrustChain
 };
 //# sourceMappingURL=index.js.map

package/lib/module/trust/v1.0.0/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["getTrustAnchorEntityConfiguration","withMapperAsync","mapToTrustAnchorConfig","buildTrustChain","verifyTrustChain","Trust"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/index.ts"],"mappings":"AACA,SAASA,iCAAiC,QAAQ,YAAY;AAC9D,SAASC,eAAe,QAAQ,qBAAqB;AACrD,SAASC,sBAAsB,QAAQ,WAAW;AAClD,SAASC,eAAe,QAAQ,eAAe;AAC/C,SAASC,gBAAgB,QAAQ,gBAAgB;AAEjD,OAAO,MAAMC,KAAe,GAAG;EAC7BL,iCAAiC,EAAEC,eAAe,CAChDC,sBAAsB,EACtBF,iCACF,CAAC;EACDG,eAAe;EACfC;AACF,CAAC"}
+{"version":3,"names":["withMapperAsync","buildTrustChain","getTrustAnchorEntityConfiguration","mapToTrustAnchorConfig","verifyTrustChain","Trust"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/index.ts"],"mappings":"AAEA,SAASA,eAAe,QAAQ,qBAAqB;AACrD,SAASC,eAAe,QAAQ,eAAe;AAC/C,SAASC,iCAAiC,QAAQ,YAAY;AAC9D,SAASC,sBAAsB,QAAQ,WAAW;AAClD,SAASC,gBAAgB,QAAQ,gBAAgB;AAEjD,OAAO,MAAMC,KAAe,GAAG;EAC7BJ,eAAe;EACfC,iCAAiC,EAAEF,eAAe,CAChDG,sBAAsB,EACtBD,iCACF,CAAC;EACDE;AACF,CAAC"}

package/lib/module/trust/v1.0.0/mappers.js

@@ -4,11 +4,11 @@ export const mapToTrustAnchorConfig = createMapper(x => {
     federation_entity
   } = x.payload.metadata;
   return {
+    federation_entity,
     jwt: {
       header: x.header
     },
-    keys: x.payload.jwks.keys,
-    federation_entity
+    keys: x.payload.jwks.keys
   };
 });
 //# sourceMappingURL=mappers.js.map

package/lib/module/trust/v1.0.0/mappers.js.map

@@ -1 +1 @@
-{"version":3,"names":["createMapper","mapToTrustAnchorConfig","x","federation_entity","payload","metadata","jwt","header","keys","jwks"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/mappers.ts"],"mappings":"AAAA,SAASA,YAAY,QAAQ,qBAAqB;AAIlD,OAAO,MAAMC,sBAAsB,GAAGD,YAAY,CAG/CE,CAAC,IAAK;EACP,MAAM;IAAEC;EAAkB,CAAC,GAAGD,CAAC,CAACE,OAAO,CAACC,QAAQ;EAChD,OAAO;IACLC,GAAG,EAAE;MAAEC,MAAM,EAAEL,CAAC,CAACK;IAAO,CAAC;IACzBC,IAAI,EAAEN,CAAC,CAACE,OAAO,CAACK,IAAI,CAACD,IAAI;IACzBL;EACF,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"names":["createMapper","mapToTrustAnchorConfig","x","federation_entity","payload","metadata","jwt","header","keys","jwks"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/mappers.ts"],"mappings":"AAEA,SAASA,YAAY,QAAQ,qBAAqB;AAGlD,OAAO,MAAMC,sBAAsB,GAAGD,YAAY,CAG/CE,CAAC,IAAK;EACP,MAAM;IAAEC;EAAkB,CAAC,GAAGD,CAAC,CAACE,OAAO,CAACC,QAAQ;EAChD,OAAO;IACLF,iBAAiB;IACjBG,GAAG,EAAE;MAAEC,MAAM,EAAEL,CAAC,CAACK;IAAO,CAAC;IACzBC,IAAI,EAAEN,CAAC,CAACE,OAAO,CAACK,IAAI,CAACD;EACvB,CAAC;AACH,CAAC,CAAC"}