@pagopa/io-react-native-wallet 3.6.2 → 3.6.4

package/src/wallet-instance-attestation/common/types.ts

@@ -1,25 +1,26 @@
 import * as z from "zod";
-import { UnixTime } from "../../utils/zod";
+
 import { JWK } from "../../utils/jwk";
+import { UnixTime } from "../../utils/zod";
 
 export const Jwt = z.object({
   header: z.object({
     alg: z.string(),
     kid: z.string(),
+    trust_chain: z.array(z.string()).optional(),
     typ: z.string(),
     x5c: z.array(z.string()).optional(),
-    trust_chain: z.array(z.string()).optional(),
   }),
   payload: z.object({
-    iss: z.string(),
-    iat: UnixTime,
-    exp: UnixTime,
     cnf: z.object({
       jwk: z.intersection(
         JWK,
         // this key requires a kid because it must be referenced for DPoP
-        z.object({ kid: z.string() })
+        z.object({ kid: z.string() }),
       ),
     }),
+    exp: UnixTime,
+    iat: UnixTime,
+    iss: z.string(),
   }),
 });

package/src/wallet-instance-attestation/v1.0.0/index.ts

@@ -1,11 +1,12 @@
 import type { WalletInstanceAttestationApi } from "../api";
+
 import { withMapper, withMapperAsync } from "../../utils/mappers";
 import { getAttestation } from "./issuing";
-import { decode, verify } from "./utils";
 import { mapToDecodedWalletInstanceAttestation } from "./mappers";
+import { decode, verify } from "./utils";
 
 export const WalletInstanceAttestation: WalletInstanceAttestationApi = {
-  getAttestation,
   decode: withMapper(mapToDecodedWalletInstanceAttestation, decode),
+  getAttestation,
   verify: withMapperAsync(mapToDecodedWalletInstanceAttestation, verify),
 };

package/src/wallet-instance-attestation/v1.0.0/issuing.ts

@@ -3,18 +3,20 @@ import {
   SignJWT,
   thumbprint,
 } from "@pagopa/io-react-native-jwt";
-import { fixBase64EncodingOnKey, JWK } from "../../utils/jwk";
-import { getWalletProviderClient } from "../../client";
+
 import type { IntegrityContext } from "../../utils/integrity";
-import { LogLevel, Logger } from "../../utils/logging";
+import type { WalletInstanceAttestationApi } from "../api";
+
+import { getWalletProviderClient } from "../../client";
 import {
   ResponseErrorBuilder,
   WalletProviderResponseError,
   WalletProviderResponseErrorCodes,
 } from "../../utils/errors";
-import { WalletAttestationResponse } from "./types";
-import type { WalletInstanceAttestationApi } from "../api";
+import { fixBase64EncodingOnKey, JWK } from "../../utils/jwk";
+import { Logger, LogLevel } from "../../utils/logging";
 import { mapToWalletAttestations } from "./mappers";
+import { WalletAttestationResponse } from "./types";
 
 /**
  * Getter for an attestation request. The attestation request is a JWT that will be sent to the Wallet Provider to request a Wallet Instance Attestation.
@@ -29,7 +31,7 @@ async function getAttestationRequest(
   challenge: string,
   wiaCryptoContext: CryptoContext,
   integrityContext: IntegrityContext,
-  walletProviderBaseUrl: string
+  walletProviderBaseUrl: string,
 ): Promise<string> {
   const jwk = await wiaCryptoContext.getPublicKey();
   const parsedJwk = JWK.parse(jwk);
@@ -42,22 +44,22 @@ async function getAttestationRequest(
   };
 
   const hardwareKeyTag = integrityContext.getHardwareKeyTag();
-  const { signature, authenticatorData } =
+  const { authenticatorData, signature } =
     await integrityContext.getHardwareSignatureWithAuthData(
-      JSON.stringify(clientData)
+      JSON.stringify(clientData),
     );
 
   return new SignJWT(wiaCryptoContext)
     .setPayload({
-      iss: keyThumbprint,
       aud: walletProviderBaseUrl,
-      nonce: challenge,
-      hardware_signature: signature,
-      integrity_assertion: authenticatorData,
-      hardware_key_tag: hardwareKeyTag,
       cnf: {
         jwk: fixBase64EncodingOnKey(publicKey),
       },
+      hardware_key_tag: hardwareKeyTag,
+      hardware_signature: signature,
+      integrity_assertion: authenticatorData,
+      iss: keyThumbprint,
+      nonce: challenge,
     })
     .setProtectedHeader({
       kid: publicKey.kid,
@@ -71,11 +73,11 @@ async function getAttestationRequest(
 export const getAttestation: WalletInstanceAttestationApi["getAttestation"] =
   async (
     requestParams,
-    { wiaCryptoContext, integrityContext, appFetch = fetch }
+    { appFetch = fetch, integrityContext, wiaCryptoContext },
   ) => {
     const api = getWalletProviderClient({
-      walletProviderBaseUrl: requestParams.walletProviderBaseUrl,
       appFetch,
+      walletProviderBaseUrl: requestParams.walletProviderBaseUrl,
     });
 
     // 1. Get nonce from backend
@@ -84,7 +86,7 @@ export const getAttestation: WalletInstanceAttestationApi["getAttestation"] =
       .then((response) => response.nonce);
     Logger.log(
       LogLevel.DEBUG,
-      `Challenge obtained from ${requestParams.walletProviderBaseUrl}: ${challenge} `
+      `Challenge obtained from ${requestParams.walletProviderBaseUrl}: ${challenge} `,
     );
 
     // 2. Get a signed attestation request
@@ -92,11 +94,11 @@ export const getAttestation: WalletInstanceAttestationApi["getAttestation"] =
       challenge,
       wiaCryptoContext,
       integrityContext,
-      requestParams.walletProviderBaseUrl
+      requestParams.walletProviderBaseUrl,
     );
     Logger.log(
       LogLevel.DEBUG,
-      `Signed attestation request: ${signedAttestationRequest}`
+      `Signed attestation request: ${signedAttestationRequest}`,
     );
 
     // 3. Request WIA in multiple formats
@@ -112,7 +114,7 @@ export const getAttestation: WalletInstanceAttestationApi["getAttestation"] =
     for (const attestation of response.wallet_attestations) {
       Logger.log(
         LogLevel.DEBUG,
-        `Obtained wallet attestation in ${attestation.format} format: ${attestation.wallet_attestation}`
+        `Obtained wallet attestation in ${attestation.format} format: ${attestation.wallet_attestation}`,
       );
     }
 
@@ -122,7 +124,7 @@ export const getAttestation: WalletInstanceAttestationApi["getAttestation"] =
 const handleAttestationCreationError = (e: unknown) => {
   Logger.log(
     LogLevel.ERROR,
-    `An error occurred while calling /wallet-attestation endpoint: ${e}`
+    `An error occurred while calling /wallet-attestation endpoint: ${e}`,
   );
 
   if (!(e instanceof WalletProviderResponseError)) {

package/src/wallet-instance-attestation/v1.0.0/mappers.ts

@@ -20,7 +20,7 @@ export const mapToWalletAttestations = createMapper<
   WalletAttestation[]
 >((x) =>
   x.wallet_attestations.map((wa) => ({
-    format: wa.format,
     attestation: wa.wallet_attestation,
-  }))
+    format: wa.format,
+  })),
 );

package/src/wallet-instance-attestation/v1.0.0/types.ts

@@ -1,4 +1,5 @@
 import * as z from "zod";
+
 import { Jwt } from "../common/types";
 
 export type WalletInstanceAttestationRequestJwt = z.infer<
@@ -9,17 +10,17 @@ export const WalletInstanceAttestationRequestJwt = z.object({
     Jwt.shape.header,
     z.object({
       typ: z.literal("wp-war+jwt"),
-    })
+    }),
   ),
   payload: z.intersection(
     Jwt.shape.payload,
     z.object({
       aud: z.string(),
-      nonce: z.string(),
+      hardware_key_tag: z.string(),
       hardware_signature: z.string(),
       integrity_assertion: z.string(),
-      hardware_key_tag: z.string(),
-    })
+      nonce: z.string(),
+    }),
   ),
 });
 
@@ -33,16 +34,16 @@ export const WalletInstanceAttestationJwt = z.object({
     Jwt.shape.header,
     z.object({
       typ: z.literal("oauth-client-attestation+jwt"),
-    })
+    }),
   ),
   payload: z.intersection(
     Jwt.shape.payload,
     z.object({
-      sub: z.string(),
       aal: z.string(),
+      sub: z.string(),
       wallet_link: z.string().optional(),
       wallet_name: z.string().optional(),
-    })
+    }),
   ),
 });
 
@@ -52,8 +53,8 @@ export type WalletAttestationResponse = z.infer<
 export const WalletAttestationResponse = z.object({
   wallet_attestations: z.array(
     z.object({
-      wallet_attestation: z.string(),
       format: z.enum(["jwt", "dc+sd-jwt", "mso_mdoc"]),
-    })
+      wallet_attestation: z.string(),
+    }),
   ),
 });

package/src/wallet-instance-attestation/v1.0.0/utils.ts

@@ -1,9 +1,10 @@
-import { WalletInstanceAttestationJwt } from "./types";
 import {
   decode as decodeJwt,
   verify as verifyJwt,
 } from "@pagopa/io-react-native-jwt";
 
+import { WalletInstanceAttestationJwt } from "./types";
+
 /**
  * Decode a given JWT to get the parsed Wallet Instance Attestation object they define.
  * It ensures provided data is in a valid shape.
@@ -26,7 +27,7 @@ export function decode(token: string): WalletInstanceAttestationJwt {
  * Same as {@link decode} plus token signature verification
  */
 export async function verify(
-  token: string
+  token: string,
 ): Promise<WalletInstanceAttestationJwt> {
   const decoded = decode(token);
   const pubKey = decoded.payload.cnf.jwk;

package/src/wallet-instance-attestation/v1.3.3/index.ts

@@ -1,11 +1,12 @@
-import { withMapper, withMapperAsync } from "../../utils/mappers";
 import type { WalletInstanceAttestationApi } from "../api";
+
+import { withMapper, withMapperAsync } from "../../utils/mappers";
 import { getAttestation } from "./issuing";
-import { decode, verify } from "./utils";
 import { mapToDecodedWalletInstanceAttestation } from "./mappers";
+import { decode, verify } from "./utils";
 
 export const WalletInstanceAttestation: WalletInstanceAttestationApi = {
-  getAttestation,
   decode: withMapper(mapToDecodedWalletInstanceAttestation, decode),
+  getAttestation,
   verify: withMapperAsync(mapToDecodedWalletInstanceAttestation, verify),
 };

package/src/wallet-instance-attestation/v1.3.3/issuing.ts

@@ -1,15 +1,17 @@
-import { Platform } from "react-native";
 import {
-  thumbprint,
   type CryptoContext,
   SignJWT,
+  thumbprint,
 } from "@pagopa/io-react-native-jwt";
+import { Platform } from "react-native";
+
 import type { IntegrityContext } from "../../utils/integrity";
-import { LogLevel, Logger } from "../../utils/logging";
-import { fixBase64EncodingOnKey, JWK } from "../../utils/jwk";
-import { getWalletProviderClient } from "../../client";
-import type { WalletAttestationRequestParams } from "../api/types";
 import type { WalletInstanceAttestationApi } from "../api";
+import type { WalletAttestationRequestParams } from "../api/types";
+
+import { getWalletProviderClient } from "../../client";
+import { fixBase64EncodingOnKey, JWK } from "../../utils/jwk";
+import { Logger, LogLevel } from "../../utils/logging";
 import { WalletInstanceAttestationResponse } from "./types";
 
 async function getAttestationRequest(
@@ -19,7 +21,7 @@ async function getAttestationRequest(
     walletSolutionVersion,
   }: WalletAttestationRequestParams & { challenge: string },
   wiaCryptoContext: CryptoContext,
-  integrityContext: IntegrityContext
+  integrityContext: IntegrityContext,
 ): Promise<string> {
   const jwk = await wiaCryptoContext.getPublicKey();
   const parsedJwk = JWK.parse(jwk);
@@ -32,24 +34,24 @@ async function getAttestationRequest(
   };
 
   const hardwareKeyTag = integrityContext.getHardwareKeyTag();
-  const { signature, authenticatorData } =
+  const { authenticatorData, signature } =
     await integrityContext.getHardwareSignatureWithAuthData(
-      JSON.stringify(clientData)
+      JSON.stringify(clientData),
     );
 
   return new SignJWT(wiaCryptoContext)
     .setPayload({
+      cnf: {
+        jwk: fixBase64EncodingOnKey(publicKey),
+      },
+      hardware_key_tag: hardwareKeyTag,
+      hardware_signature: signature,
+      integrity_assertion: authenticatorData,
       iss: hardwareKeyTag,
       nonce: challenge,
       platform: Platform.OS,
-      hardware_signature: signature,
-      integrity_assertion: authenticatorData,
-      hardware_key_tag: hardwareKeyTag,
       wallet_solution_id: walletSolutionId,
       wallet_solution_version: walletSolutionVersion,
-      cnf: {
-        jwk: fixBase64EncodingOnKey(publicKey),
-      },
     })
     .setProtectedHeader({
       kid: publicKey.kid,
@@ -63,11 +65,11 @@ async function getAttestationRequest(
 export const getAttestation: WalletInstanceAttestationApi["getAttestation"] =
   async (
     requestParams,
-    { wiaCryptoContext, integrityContext, appFetch = fetch }
+    { appFetch = fetch, integrityContext, wiaCryptoContext },
   ) => {
     const api = getWalletProviderClient({
-      walletProviderBaseUrl: requestParams.walletProviderBaseUrl,
       appFetch,
+      walletProviderBaseUrl: requestParams.walletProviderBaseUrl,
     });
 
     const challenge = await api
@@ -75,37 +77,37 @@ export const getAttestation: WalletInstanceAttestationApi["getAttestation"] =
       .then((response) => response.nonce);
     Logger.log(
       LogLevel.DEBUG,
-      `Challenge obtained from ${requestParams.walletProviderBaseUrl}: ${challenge} `
+      `Challenge obtained from ${requestParams.walletProviderBaseUrl}: ${challenge} `,
     );
 
     const signedAttestationRequest = await getAttestationRequest(
       { challenge, ...requestParams },
       wiaCryptoContext,
-      integrityContext
+      integrityContext,
     );
     Logger.log(
       LogLevel.DEBUG,
-      `Signed attestation request: ${signedAttestationRequest}`
+      `Signed attestation request: ${signedAttestationRequest}`,
     );
 
     const response = await api
       .post("/wallet-instance-attestations", {
+        body: signedAttestationRequest,
         header: {
           "Content-Type": "text/plain",
         },
-        body: signedAttestationRequest,
       })
       .then(WalletInstanceAttestationResponse.parse);
 
     Logger.log(
       LogLevel.DEBUG,
-      `Obtained Wallet Instance Attestation in jwt format: ${response.wallet_instance_attestation}`
+      `Obtained Wallet Instance Attestation in jwt format: ${response.wallet_instance_attestation}`,
     );
 
     return [
       {
-        format: "jwt",
         attestation: response.wallet_instance_attestation,
+        format: "jwt",
       },
     ];
   };

package/src/wallet-instance-attestation/v1.3.3/types.ts

@@ -1,4 +1,5 @@
 import * as z from "zod";
+
 import { Jwt } from "../common/types";
 
 export type WalletInstanceAttestationJwt = z.infer<
@@ -10,7 +11,7 @@ export const WalletInstanceAttestationJwt = z.object({
     z.object({
       typ: z.literal("oauth-client-attestation+jwt"),
       x5c: z.array(z.string()),
-    })
+    }),
   ),
   payload: z.intersection(
     Jwt.shape.payload,
@@ -18,7 +19,7 @@ export const WalletInstanceAttestationJwt = z.object({
       sub: z.string(),
       wallet_link: z.string().optional(),
       wallet_name: z.string().optional(),
-    })
+    }),
   ),
 });
 

package/src/wallet-instance-attestation/v1.3.3/utils.ts

@@ -1,9 +1,10 @@
-import { WalletInstanceAttestationJwt } from "./types";
 import {
   decode as decodeJwt,
   verify as verifyJwt,
 } from "@pagopa/io-react-native-jwt";
 
+import { WalletInstanceAttestationJwt } from "./types";
+
 /**
  * Decode a given JWT to get the parsed Wallet Instance Attestation object they define.
  * It ensures provided data is in a valid shape.
@@ -24,7 +25,7 @@ export function decode(token: string): WalletInstanceAttestationJwt {
  * Same as {@link decode} plus token signature verification
  */
 export async function verify(
-  token: string
+  token: string,
 ): Promise<WalletInstanceAttestationJwt> {
   const decoded = decode(token);
   const pubKey = decoded.payload.cnf.jwk;

package/src/wallet-unit-attestation/api/index.ts

@@ -1,21 +1,28 @@
-import type { IntegrityContext } from "../../utils/integrity";
 import type { KeyAttestationCryptoContext } from "../../utils/crypto";
+import type { IntegrityContext } from "../../utils/integrity";
 import type {
   DecodedWalletUnitAttestation,
   WalletAttestation,
   WalletAttestationRequestParams,
 } from "./types";
 
-interface UnsupportedApi {
-  isSupported: false;
-}
-
 export type WalletUnitAttestationApi =
-  | WalletUnitAttestationSupportedApi
-  | UnsupportedApi;
+  | UnsupportedApi
+  | WalletUnitAttestationSupportedApi;
 
 export interface WalletUnitAttestationSupportedApi {
-  isSupported: true;
+  /**
+   * Decode a given JWT to get the parsed Wallet Unit Attestation object they define.
+   * It ensures provided data is in a valid shape.
+   *
+   * It DOES NOT verify token signature.
+   *
+   * @param token The encoded token that represents a valid jwt for Wallet Unit Attestation
+   * @returns The validated Wallet Unit Attestation object
+   * @throws A decoding error if the token doesn't resolve in a valid JWT
+   * @throws A validation error if the provided data doesn't result in a valid Wallet Unit Attestation
+   */
+  decode(token: string): DecodedWalletUnitAttestation;
 
   /**
    * Request a Wallet Unit Attestation (WUA) to the Wallet provider with one or more keys to attest.
@@ -30,22 +37,15 @@ export interface WalletUnitAttestationSupportedApi {
   getAttestation(
     requestParams: WalletAttestationRequestParams,
     ctx: {
-      keysToAttest: KeyAttestationCryptoContext[];
-      integrityContext: IntegrityContext;
       appFetch?: GlobalFetch["fetch"];
-    }
+      integrityContext: IntegrityContext;
+      keysToAttest: KeyAttestationCryptoContext[];
+    },
   ): Promise<WalletAttestation>;
 
-  /**
-   * Decode a given JWT to get the parsed Wallet Unit Attestation object they define.
-   * It ensures provided data is in a valid shape.
-   *
-   * It DOES NOT verify token signature.
-   *
-   * @param token The encoded token that represents a valid jwt for Wallet Unit Attestation
-   * @returns The validated Wallet Unit Attestation object
-   * @throws A decoding error if the token doesn't resolve in a valid JWT
-   * @throws A validation error if the provided data doesn't result in a valid Wallet Unit Attestation
-   */
-  decode(token: string): DecodedWalletUnitAttestation;
+  isSupported: true;
+}
+
+interface UnsupportedApi {
+  isSupported: false;
 }

package/src/wallet-unit-attestation/api/types.ts

@@ -1,6 +1,7 @@
 import * as z from "zod";
-import { UnixTime } from "../../utils/zod";
+
 import { JWK } from "../../utils/jwk";
+import { UnixTime } from "../../utils/zod";
 
 const Status = z.object({
   status_list: z.object({
@@ -18,21 +19,21 @@ export type DecodedWalletUnitAttestation = z.infer<
 >;
 export const DecodedWalletUnitAttestation = z.object({
   attested_keys: z.array(JWK),
-  user_authentication: z.array(z.string()),
+  exp: UnixTime,
+  iat: UnixTime,
+  iss: z.string(),
   key_storage: z.array(z.string()),
   status: Status,
-  iss: z.string(),
-  iat: UnixTime,
-  exp: UnixTime,
+  user_authentication: z.array(z.string()),
 });
 
-export type WalletAttestation = {
-  format: string;
+export interface WalletAttestation {
   attestation: string;
-};
+  format: string;
+}
 
-export type WalletAttestationRequestParams = {
+export interface WalletAttestationRequestParams {
   walletProviderBaseUrl: string;
   walletSolutionId: string;
   walletSolutionVersion: string;
-};
+}

package/src/wallet-unit-attestation/v1.3.3/index.ts

@@ -1,11 +1,12 @@
-import { withMapper } from "../../utils/mappers";
 import type { WalletUnitAttestationApi } from "../api";
-import { decode } from "./utils";
-import { mapToDecodedWalletUnitAttestation } from "./mappers";
+
+import { withMapper } from "../../utils/mappers";
 import { getAttestation } from "./issuing";
+import { mapToDecodedWalletUnitAttestation } from "./mappers";
+import { decode } from "./utils";
 
 export const WalletUnitAttestation: WalletUnitAttestationApi = {
-  isSupported: true,
-  getAttestation,
   decode: withMapper(mapToDecodedWalletUnitAttestation, decode),
+  getAttestation,
+  isSupported: true,
 };