@pagopa/io-react-native-wallet 3.6.3 → 3.6.4

package/lib/commonjs/credential/issuance/v1.0.0/05-obtain-credential.js

@@ -6,25 +6,26 @@ Object.defineProperty(exports, "__esModule", {
 exports.obtainCredentialsBatch = exports.obtainCredential = exports.createNonceProof = void 0;
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
 var _uuid = require("uuid");
-var _misc = require("../../../utils/misc");
-var _errors = require("../../../utils/errors");
 var _dpop = require("../../../utils/dpop");
+var _errors = require("../../../utils/errors");
 var _logging = require("../../../utils/logging");
+var _misc = require("../../../utils/misc");
 var _types = require("./types");
 const createNonceProof = async (nonce, issuer, audience, ctx) => {
   const jwk = await ctx.getPublicKey();
   return new _ioReactNativeJwt.SignJWT(ctx).setPayload({
     nonce
   }).setProtectedHeader({
-    typ: "openid4vci-proof+jwt",
-    jwk
+    jwk,
+    typ: "openid4vci-proof+jwt"
   }).setAudience(audience).setIssuer(issuer).setIssuedAt().setExpirationTime("5min").sign();
 };
 exports.createNonceProof = createNonceProof;
 const obtainCredential = async (issuerConf, accessToken, clientId, credentialDefinition, context) => {
+  var _credentialRes$data$c;
   const {
-    credentialCryptoContext,
     appFetch = fetch,
+    credentialCryptoContext,
     dPopCryptoContext
   } = context;
   const {
@@ -39,10 +40,10 @@ const obtainCredential = async (issuerConf, accessToken, clientId, credentialDef
   const {
     c_nonce
   } = await appFetch(nonceUrl, {
-    method: "POST",
     headers: {
       "Content-Type": "application/json"
-    }
+    },
+    method: "POST"
   }).then((0, _misc.hasStatusOrThrow)(200)).then(res => res.json()).then(body => _types.NonceResponse.parse(body));
 
   /**
@@ -83,20 +84,20 @@ const obtainCredential = async (issuerConf, accessToken, clientId, credentialDef
   };
   _logging.Logger.log(_logging.LogLevel.DEBUG, `Credential request body: ${JSON.stringify(credentialRequestFormBody)}`);
   const tokenRequestSignedDPop = await (0, _dpop.createDPopToken)({
+    ath: await (0, _ioReactNativeJwt.sha256ToBase64)(accessToken.access_token),
     htm: "POST",
     htu: credentialUrl,
-    jti: `${(0, _uuid.v4)()}`,
-    ath: await (0, _ioReactNativeJwt.sha256ToBase64)(accessToken.access_token)
+    jti: `${(0, _uuid.v4)()}`
   }, dPopCryptoContext);
   _logging.Logger.log(_logging.LogLevel.DEBUG, `Token request DPoP: ${tokenRequestSignedDPop}`);
   const credentialRes = await appFetch(credentialUrl, {
-    method: "POST",
+    body: JSON.stringify(credentialRequestFormBody),
     headers: {
+      Authorization: `${accessToken.token_type} ${accessToken.access_token}`,
       "Content-Type": "application/json",
-      DPoP: tokenRequestSignedDPop,
-      Authorization: `${accessToken.token_type} ${accessToken.access_token}`
+      DPoP: tokenRequestSignedDPop
     },
-    body: JSON.stringify(credentialRequestFormBody)
+    method: "POST"
   }).then((0, _misc.hasStatusOrThrow)(200)).then(res => res.json()).then(body => _types.CredentialResponse.safeParse(body)).catch(handleObtainCredentialError);
   if (!credentialRes.success) {
     _logging.Logger.log(_logging.LogLevel.ERROR, `Credential Response validation failed: ${credentialRes.error.message}`);
@@ -109,11 +110,19 @@ const obtainCredential = async (issuerConf, accessToken, clientId, credentialDef
 
   // Extract the format corresponding to the credential_configuration_id used
   const issuerCredentialConfig = issuerConf.credential_configurations_supported[credential_configuration_id];
+  const credential = (_credentialRes$data$c = credentialRes.data.credentials[0]) === null || _credentialRes$data$c === void 0 ? void 0 : _credentialRes$data$c.credential;
+  if (!credential) {
+    throw new _errors.IoWalletError(`No credential found in the response for credential_configuration_id ${credential_configuration_id}`);
+  }
+  const format = issuerCredentialConfig === null || issuerCredentialConfig === void 0 ? void 0 : issuerCredentialConfig.format;
+  if (!format) {
+    throw new _errors.IoWalletError(`No format found for credential_configuration_id ${credential_configuration_id} in the issuer configuration`);
+  }
 
   // TODO: [SIW-2264] Handle multiple credentials
   return {
-    credential: credentialRes.data.credentials.at(0).credential,
-    format: issuerCredentialConfig.format
+    credential,
+    format
   };
 };
 

package/lib/commonjs/credential/issuance/v1.0.0/05-obtain-credential.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_uuid","_misc","_errors","_dpop","_logging","_types","createNonceProof","nonce","issuer","audience","ctx","jwk","getPublicKey","SignJWT","setPayload","setProtectedHeader","typ","setAudience","setIssuer","setIssuedAt","setExpirationTime","sign","exports","obtainCredential","issuerConf","accessToken","clientId","credentialDefinition","context","credentialCryptoContext","appFetch","fetch","dPopCryptoContext","credential_configuration_id","credential_identifier","credentialUrl","credential_endpoint","issuerUrl","credential_issuer","nonceUrl","nonce_endpoint","c_nonce","method","headers","then","hasStatusOrThrow","res","json","body","NonceResponse","parse","signedNonceProof","Logger","log","LogLevel","DEBUG","containsCredentialDefinition","authorization_details","some","c","credential_identifiers","includes","ERROR","ValidationFailed","message","credentialRequestFormBody","proof","jwt","proof_type","JSON","stringify","tokenRequestSignedDPop","createDPopToken","htm","htu","jti","uuidv4","ath","sha256ToBase64","access_token","credentialRes","DPoP","Authorization","token_type","CredentialResponse","safeParse","catch","handleObtainCredentialError","success","error","reason","data","issuerCredentialConfig","credential_configurations_supported","credential","credentials","at","format","e","UnexpectedStatusCodeError","ResponseErrorBuilder","IssuerResponseError","handle","code","IssuerResponseErrorCodes","CredentialIssuingNotSynchronous","CredentialInvalidStatus","CredentialRequestFailed","buildFrom","obtainCredentialsBatch","UnimplementedFeatureError"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/05-obtain-credential.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AAKA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AAQA,IAAAI,KAAA,GAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AAEA,IAAAM,MAAA,GAAAN,OAAA;AAEO,MAAMO,gBAAgB,GAAG,MAAAA,CAC9BC,KAAa,EACbC,MAAc,EACdC,QAAgB,EAChBC,GAAkB,KACE;EACpB,MAAMC,GAAG,GAAG,MAAMD,GAAG,CAACE,YAAY,CAAC,CAAC;EACpC,OAAO,IAAIC,yBAAO,CAACH,GAAG,CAAC,CACpBI,UAAU,CAAC;IACVP;EACF,CAAC,CAAC,CACDQ,kBAAkB,CAAC;IAClBC,GAAG,EAAE,sBAAsB;IAC3BL;EACF,CAAC,CAAC,CACDM,WAAW,CAACR,QAAQ,CAAC,CACrBS,SAAS,CAACV,MAAM,CAAC,CACjBW,WAAW,CAAC,CAAC,CACbC,iBAAiB,CAAC,MAAM,CAAC,CACzBC,IAAI,CAAC,CAAC;AACX,CAAC;AAACC,OAAA,CAAAhB,gBAAA,GAAAA,gBAAA;AAEK,MAAMiB,gBAAiD,GAAG,MAAAA,CAC/DC,UAAU,EACVC,WAAW,EACXC,QAAQ,EACRC,oBAAoB,EACpBC,OAAO,KACJ;EACH,MAAM;IACJC,uBAAuB;IACvBC,QAAQ,GAAGC,KAAK;IAChBC;EACF,CAAC,GAAGJ,OAAO;EACX,MAAM;IAAEK,2BAA2B;IAAEC;EAAsB,CAAC,GAC1DP,oBAAoB;EAEtB,MAAMQ,aAAa,GAAGX,UAAU,CAACY,mBAAmB;EACpD,MAAMC,SAAS,GAAGb,UAAU,CAACc,iBAAiB;EAC9C,MAAMC,QAAQ,GAAGf,UAAU,CAACgB,cAAc;;EAE1C;EACA,MAAM;IAAEC;EAAQ,CAAC,GAAG,MAAMX,QAAQ,CAACS,QAAQ,EAAE;IAC3CG,MAAM,EAAE,MAAM;IACdC,OAAO,EAAE;MAAE,cAAc,EAAE;IAAmB;EAChD,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBH,IAAI,CAAEI,IAAI,IAAKC,oBAAa,CAACC,KAAK,CAACF,IAAI,CAAC,CAAC;;EAE5C;AACF;AACA;AACA;AACA;EACE,MAAMG,gBAAgB,GAAG,MAAM7C,gBAAgB,CAC7CmC,OAAO,EACPf,QAAQ,EACRW,SAAS,EACTR,uBACF,CAAC;EAEDuB,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAG,uBAAsBJ,gBAAiB,EAAC,CAAC;;EAErE;EACA,MAAMK,4BAA4B,GAAG/B,WAAW,CAACgC,qBAAqB,CAACC,IAAI,CACxEC,CAAC,IACAA,CAAC,CAAC1B,2BAA2B,KAAKA,2BAA2B,KAC5DC,qBAAqB,GAClByB,CAAC,CAACC,sBAAsB,CAACC,QAAQ,CAAC3B,qBAAqB,CAAC,GACxD,IAAI,CACZ,CAAC;EAED,IAAI,CAACsB,4BAA4B,EAAE;IACjCJ,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACQ,KAAK,EACb,gEAA+DrC,WAAW,CAACgC,qBAAsB,EACpG,CAAC;IACD,MAAM,IAAIM,wBAAgB,CAAC;MACzBC,OAAO,EACL;IACJ,CAAC,CAAC;EACJ;;EAEA;AACF;AACA;AACA;AACA;AACA;EACE,MAAMC,yBAAyB,GAAG/B,qBAAqB,GACnD;IACEA,qBAAqB,EAAEA,qBAAqB;IAC5CgC,KAAK,EAAE;MAAEC,GAAG,EAAEhB,gBAAgB;MAAEiB,UAAU,EAAE;IAAM;EACpD,CAAC,GACD;IACEnC,2BAA2B,EAAEA,2BAA2B;IACxDiC,KAAK,EAAE;MAAEC,GAAG,EAAEhB,gBAAgB;MAAEiB,UAAU,EAAE;IAAM;EACpD,CAAC;EAELhB,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,4BAA2Bc,IAAI,CAACC,SAAS,CAACL,yBAAyB,CAAE,EACxE,CAAC;EAED,MAAMM,sBAAsB,GAAG,MAAM,IAAAC,qBAAe,EAClD;IACEC,GAAG,EAAE,MAAM;IACXC,GAAG,EAAEvC,aAAa;IAClBwC,GAAG,EAAG,GAAE,IAAAC,QAAM,EAAC,CAAE,EAAC;IAClBC,GAAG,EAAE,MAAM,IAAAC,gCAAc,EAACrD,WAAW,CAACsD,YAAY;EACpD,CAAC,EACD/C,iBACF,CAAC;EAEDoB,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAG,uBAAsBgB,sBAAuB,EAAC,CAAC;EAE3E,MAAMS,aAAa,GAAG,MAAMlD,QAAQ,CAACK,aAAa,EAAE;IAClDO,MAAM,EAAE,MAAM;IACdC,OAAO,EAAE;MACP,cAAc,EAAE,kBAAkB;MAClCsC,IAAI,EAAEV,sBAAsB;MAC5BW,aAAa,EAAG,GAAEzD,WAAW,CAAC0D,UAAW,IAAG1D,WAAW,CAACsD,YAAa;IACvE,CAAC;IACD/B,IAAI,EAAEqB,IAAI,CAACC,SAAS,CAACL,yBAAyB;EAChD,CAAC,CAAC,CACCrB,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBH,IAAI,CAAEI,IAAI,IAAKoC,yBAAkB,CAACC,SAAS,CAACrC,IAAI,CAAC,CAAC,CAClDsC,KAAK,CAACC,2BAA2B,CAAC;EAErC,IAAI,CAACP,aAAa,CAACQ,OAAO,EAAE;IAC1BpC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACQ,KAAK,EACb,0CAAyCkB,aAAa,CAACS,KAAK,CAACzB,OAAQ,EACxE,CAAC;IACD,MAAM,IAAID,wBAAgB,CAAC;MACzBC,OAAO,EAAE,uCAAuC;MAChD0B,MAAM,EAAEV,aAAa,CAACS,KAAK,CAACzB;IAC9B,CAAC,CAAC;EACJ;EAEAZ,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,wBAAuBc,IAAI,CAACC,SAAS,CAACU,aAAa,CAACW,IAAI,CAAE,EAC7D,CAAC;;EAED;EACA,MAAMC,sBAAsB,GAC1BpE,UAAU,CAACqE,mCAAmC,CAAC5D,2BAA2B,CAAC;;EAE7E;EACA,OAAO;IACL6D,UAAU,EAAEd,aAAa,CAACW,IAAI,CAACI,WAAW,CAACC,EAAE,CAAC,CAAC,CAAC,CAAEF,UAAU;IAC5DG,MAAM,EAAEL,sBAAsB,CAAEK;EAClC,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AALA3E,OAAA,CAAAC,gBAAA,GAAAA,gBAAA;AAMA,MAAMgE,2BAA2B,GAAIW,CAAU,IAAK;EAClD9C,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACQ,KAAK,EAAG,8CAA6CoC,CAAE,EAAC,CAAC;EAE7E,IAAI,EAAEA,CAAC,YAAYC,iCAAyB,CAAC,EAAE;IAC7C,MAAMD,CAAC;EACT;EAEA,MAAM,IAAIE,4BAAoB,CAACC,2BAAmB,CAAC,CAChDC,MAAM,CAAC,GAAG,EAAE;IACX;IACA;IACAC,IAAI,EAAEC,gCAAwB,CAACC,+BAA+B;IAC9DzC,OAAO,EACL;EACJ,CAAC,CAAC,CACDsC,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACE,uBAAuB;IACtD1C,OAAO,EAAE;EACX,CAAC,CAAC,CACDsC,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACE,uBAAuB;IACtD1C,OAAO,EAAE;EACX,CAAC,CAAC,CACDsC,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACG,uBAAuB;IACtD3C,OAAO,EAAE;EACX,CAAC,CAAC,CACD4C,SAAS,CAACV,CAAC,CAAC;AACjB,CAAC;AAEM,MAAMW,sBAA6D,GACxEA,CAAA,KAAM;EACJ,MAAM,IAAIC,iCAAyB,CAAC,wBAAwB,EAAE,OAAO,CAAC;AACxE,CAAC;AAACxF,OAAA,CAAAuF,sBAAA,GAAAA,sBAAA"}
+{"version":3,"names":["_ioReactNativeJwt","require","_uuid","_dpop","_errors","_logging","_misc","_types","createNonceProof","nonce","issuer","audience","ctx","jwk","getPublicKey","SignJWT","setPayload","setProtectedHeader","typ","setAudience","setIssuer","setIssuedAt","setExpirationTime","sign","exports","obtainCredential","issuerConf","accessToken","clientId","credentialDefinition","context","_credentialRes$data$c","appFetch","fetch","credentialCryptoContext","dPopCryptoContext","credential_configuration_id","credential_identifier","credentialUrl","credential_endpoint","issuerUrl","credential_issuer","nonceUrl","nonce_endpoint","c_nonce","headers","method","then","hasStatusOrThrow","res","json","body","NonceResponse","parse","signedNonceProof","Logger","log","LogLevel","DEBUG","containsCredentialDefinition","authorization_details","some","c","credential_identifiers","includes","ERROR","ValidationFailed","message","credentialRequestFormBody","proof","jwt","proof_type","JSON","stringify","tokenRequestSignedDPop","createDPopToken","ath","sha256ToBase64","access_token","htm","htu","jti","uuidv4","credentialRes","Authorization","token_type","DPoP","CredentialResponse","safeParse","catch","handleObtainCredentialError","success","error","reason","data","issuerCredentialConfig","credential_configurations_supported","credential","credentials","IoWalletError","format","e","UnexpectedStatusCodeError","ResponseErrorBuilder","IssuerResponseError","handle","code","IssuerResponseErrorCodes","CredentialIssuingNotSynchronous","CredentialInvalidStatus","CredentialRequestFailed","buildFrom","obtainCredentialsBatch","UnimplementedFeatureError"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/05-obtain-credential.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AAKA,IAAAC,KAAA,GAAAD,OAAA;AAIA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AASA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,KAAA,GAAAL,OAAA;AACA,IAAAM,MAAA,GAAAN,OAAA;AAEO,MAAMO,gBAAgB,GAAG,MAAAA,CAC9BC,KAAa,EACbC,MAAc,EACdC,QAAgB,EAChBC,GAAkB,KACE;EACpB,MAAMC,GAAG,GAAG,MAAMD,GAAG,CAACE,YAAY,CAAC,CAAC;EACpC,OAAO,IAAIC,yBAAO,CAACH,GAAG,CAAC,CACpBI,UAAU,CAAC;IACVP;EACF,CAAC,CAAC,CACDQ,kBAAkB,CAAC;IAClBJ,GAAG;IACHK,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,WAAW,CAACR,QAAQ,CAAC,CACrBS,SAAS,CAACV,MAAM,CAAC,CACjBW,WAAW,CAAC,CAAC,CACbC,iBAAiB,CAAC,MAAM,CAAC,CACzBC,IAAI,CAAC,CAAC;AACX,CAAC;AAACC,OAAA,CAAAhB,gBAAA,GAAAA,gBAAA;AAEK,MAAMiB,gBAAiD,GAAG,MAAAA,CAC/DC,UAAU,EACVC,WAAW,EACXC,QAAQ,EACRC,oBAAoB,EACpBC,OAAO,KACJ;EAAA,IAAAC,qBAAA;EACH,MAAM;IACJC,QAAQ,GAAGC,KAAK;IAChBC,uBAAuB;IACvBC;EACF,CAAC,GAAGL,OAAO;EACX,MAAM;IAAEM,2BAA2B;IAAEC;EAAsB,CAAC,GAC1DR,oBAAoB;EAEtB,MAAMS,aAAa,GAAGZ,UAAU,CAACa,mBAAmB;EACpD,MAAMC,SAAS,GAAGd,UAAU,CAACe,iBAAiB;EAC9C,MAAMC,QAAQ,GAAGhB,UAAU,CAACiB,cAAc;;EAE1C;EACA,MAAM;IAAEC;EAAQ,CAAC,GAAG,MAAMZ,QAAQ,CAACU,QAAQ,EAAE;IAC3CG,OAAO,EAAE;MAAE,cAAc,EAAE;IAAmB,CAAC;IAC/CC,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBH,IAAI,CAAEI,IAAI,IAAKC,oBAAa,CAACC,KAAK,CAACF,IAAI,CAAC,CAAC;;EAE5C;AACF;AACA;AACA;AACA;EACE,MAAMG,gBAAgB,GAAG,MAAM9C,gBAAgB,CAC7CoC,OAAO,EACPhB,QAAQ,EACRY,SAAS,EACTN,uBACF,CAAC;EAEDqB,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAG,uBAAsBJ,gBAAiB,EAAC,CAAC;;EAErE;EACA,MAAMK,4BAA4B,GAAGhC,WAAW,CAACiC,qBAAqB,CAACC,IAAI,CACxEC,CAAC,IACAA,CAAC,CAAC1B,2BAA2B,KAAKA,2BAA2B,KAC5DC,qBAAqB,GAClByB,CAAC,CAACC,sBAAsB,CAACC,QAAQ,CAAC3B,qBAAqB,CAAC,GACxD,IAAI,CACZ,CAAC;EAED,IAAI,CAACsB,4BAA4B,EAAE;IACjCJ,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACQ,KAAK,EACb,gEAA+DtC,WAAW,CAACiC,qBAAsB,EACpG,CAAC;IACD,MAAM,IAAIM,wBAAgB,CAAC;MACzBC,OAAO,EACL;IACJ,CAAC,CAAC;EACJ;;EAEA;AACF;AACA;AACA;AACA;AACA;EACE,MAAMC,yBAAyB,GAAG/B,qBAAqB,GACnD;IACEA,qBAAqB,EAAEA,qBAAqB;IAC5CgC,KAAK,EAAE;MAAEC,GAAG,EAAEhB,gBAAgB;MAAEiB,UAAU,EAAE;IAAM;EACpD,CAAC,GACD;IACEnC,2BAA2B,EAAEA,2BAA2B;IACxDiC,KAAK,EAAE;MAAEC,GAAG,EAAEhB,gBAAgB;MAAEiB,UAAU,EAAE;IAAM;EACpD,CAAC;EAELhB,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,4BAA2Bc,IAAI,CAACC,SAAS,CAACL,yBAAyB,CAAE,EACxE,CAAC;EAED,MAAMM,sBAAsB,GAAG,MAAM,IAAAC,qBAAe,EAClD;IACEC,GAAG,EAAE,MAAM,IAAAC,gCAAc,EAAClD,WAAW,CAACmD,YAAY,CAAC;IACnDC,GAAG,EAAE,MAAM;IACXC,GAAG,EAAE1C,aAAa;IAClB2C,GAAG,EAAG,GAAE,IAAAC,QAAM,EAAC,CAAE;EACnB,CAAC,EACD/C,iBACF,CAAC;EAEDoB,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAG,uBAAsBgB,sBAAuB,EAAC,CAAC;EAE3E,MAAMS,aAAa,GAAG,MAAMnD,QAAQ,CAACM,aAAa,EAAE;IAClDa,IAAI,EAAEqB,IAAI,CAACC,SAAS,CAACL,yBAAyB,CAAC;IAC/CvB,OAAO,EAAE;MACPuC,aAAa,EAAG,GAAEzD,WAAW,CAAC0D,UAAW,IAAG1D,WAAW,CAACmD,YAAa,EAAC;MACtE,cAAc,EAAE,kBAAkB;MAClCQ,IAAI,EAAEZ;IACR,CAAC;IACD5B,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBH,IAAI,CAAEI,IAAI,IAAKoC,yBAAkB,CAACC,SAAS,CAACrC,IAAI,CAAC,CAAC,CAClDsC,KAAK,CAACC,2BAA2B,CAAC;EAErC,IAAI,CAACP,aAAa,CAACQ,OAAO,EAAE;IAC1BpC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACQ,KAAK,EACb,0CAAyCkB,aAAa,CAACS,KAAK,CAACzB,OAAQ,EACxE,CAAC;IACD,MAAM,IAAID,wBAAgB,CAAC;MACzBC,OAAO,EAAE,uCAAuC;MAChD0B,MAAM,EAAEV,aAAa,CAACS,KAAK,CAACzB;IAC9B,CAAC,CAAC;EACJ;EAEAZ,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,wBAAuBc,IAAI,CAACC,SAAS,CAACU,aAAa,CAACW,IAAI,CAAE,EAC7D,CAAC;;EAED;EACA,MAAMC,sBAAsB,GAC1BrE,UAAU,CAACsE,mCAAmC,CAAC5D,2BAA2B,CAAC;EAE7E,MAAM6D,UAAU,IAAAlE,qBAAA,GAAGoD,aAAa,CAACW,IAAI,CAACI,WAAW,CAAC,CAAC,CAAC,cAAAnE,qBAAA,uBAAjCA,qBAAA,CAAmCkE,UAAU;EAChE,IAAI,CAACA,UAAU,EAAE;IACf,MAAM,IAAIE,qBAAa,CACpB,uEAAsE/D,2BAA4B,EACrG,CAAC;EACH;EAEA,MAAMgE,MAAM,GAAGL,sBAAsB,aAAtBA,sBAAsB,uBAAtBA,sBAAsB,CAAEK,MAAM;EAC7C,IAAI,CAACA,MAAM,EAAE;IACX,MAAM,IAAID,qBAAa,CACpB,mDAAkD/D,2BAA4B,8BACjF,CAAC;EACH;;EAEA;EACA,OAAO;IACL6D,UAAU;IACVG;EACF,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AALA5E,OAAA,CAAAC,gBAAA,GAAAA,gBAAA;AAMA,MAAMiE,2BAA2B,GAAIW,CAAU,IAAK;EAClD9C,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACQ,KAAK,EAAG,8CAA6CoC,CAAE,EAAC,CAAC;EAE7E,IAAI,EAAEA,CAAC,YAAYC,iCAAyB,CAAC,EAAE;IAC7C,MAAMD,CAAC;EACT;EAEA,MAAM,IAAIE,4BAAoB,CAACC,2BAAmB,CAAC,CAChDC,MAAM,CAAC,GAAG,EAAE;IACX;IACA;IACAC,IAAI,EAAEC,gCAAwB,CAACC,+BAA+B;IAC9DzC,OAAO,EACL;EACJ,CAAC,CAAC,CACDsC,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACE,uBAAuB;IACtD1C,OAAO,EAAE;EACX,CAAC,CAAC,CACDsC,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACE,uBAAuB;IACtD1C,OAAO,EAAE;EACX,CAAC,CAAC,CACDsC,MAAM,CAAC,GAAG,EAAE;IACXC,IAAI,EAAEC,gCAAwB,CAACG,uBAAuB;IACtD3C,OAAO,EAAE;EACX,CAAC,CAAC,CACD4C,SAAS,CAACV,CAAC,CAAC;AACjB,CAAC;AAEM,MAAMW,sBAA6D,GACxEA,CAAA,KAAM;EACJ,MAAM,IAAIC,iCAAyB,CAAC,wBAAwB,EAAE,OAAO,CAAC;AACxE,CAAC;AAACzF,OAAA,CAAAwF,sBAAA,GAAAA,sBAAA"}

package/lib/commonjs/credential/issuance/v1.0.0/06-verify-and-parse-credential.js.map

@@ -1 +1 @@
-{"version":3,"names":["_errors","require","_logging","_verifyAndParseCredential","_verifyAndParseCredential2","verifyAndParseCredential","issuerConf","credential","credentialConfigurationId","context","x509CertRoot","_issuerConf$credentia","format","credential_configurations_supported","Logger","log","LogLevel","DEBUG","verifyAndParseCredentialSdJwt","verifyAndParseCredentialMDoc","message","ERROR","IoWalletError","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/06-verify-and-parse-credential.ts"],"mappings":";;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,yBAAA,GAAAF,OAAA;AACA,IAAAG,0BAAA,GAAAH,OAAA;AAGO,MAAMI,wBAAiE,GAC5E,MAAAA,CACEC,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OAAO,EACPC,YAAY,KACT;EAAA,IAAAC,qBAAA;EACH,MAAMC,MAAM,IAAAD,qBAAA,GACVL,UAAU,CAACO,mCAAmC,CAACL,yBAAyB,CAAC,cAAAG,qBAAA,uBAAzEA,qBAAA,CACIC,MAAM;EAEZ,QAAQA,MAAM;IACZ,KAAK,WAAW;MAAE;QAChBE,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAE,wCAAwC,CAAC;QACpE,OAAO,IAAAC,wDAA6B,EAClCZ,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OACF,CAAC;MACH;IACA,KAAK,UAAU;MAAE;QACfK,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAE,uCAAuC,CAAC;QACnE,OAAO,IAAAE,sDAA4B,EACjCb,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OAAO,EACPC,YACF,CAAC;MACH;IAEA;MAAS;QACP,MAAMU,OAAO,GAAI,kCAAiCR,MAAO,EAAC;QAC1DE,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACK,KAAK,EAAED,OAAO,CAAC;QACnC,MAAM,IAAIE,qBAAa,CAACF,OAAO,CAAC;MAClC;EACF;AACF,CAAC;AAACG,OAAA,CAAAlB,wBAAA,GAAAA,wBAAA"}
+{"version":3,"names":["_errors","require","_logging","_verifyAndParseCredential","_verifyAndParseCredential2","verifyAndParseCredential","issuerConf","credential","credentialConfigurationId","context","x509CertRoot","_issuerConf$credentia","format","credential_configurations_supported","Logger","log","LogLevel","DEBUG","verifyAndParseCredentialSdJwt","verifyAndParseCredentialMDoc","message","ERROR","IoWalletError","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/06-verify-and-parse-credential.ts"],"mappings":";;;;;;AAEA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,yBAAA,GAAAF,OAAA;AACA,IAAAG,0BAAA,GAAAH,OAAA;AAEO,MAAMI,wBAAiE,GAC5E,MAAAA,CACEC,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OAAO,EACPC,YAAY,KACT;EAAA,IAAAC,qBAAA;EACH,MAAMC,MAAM,IAAAD,qBAAA,GACVL,UAAU,CAACO,mCAAmC,CAACL,yBAAyB,CAAC,cAAAG,qBAAA,uBAAzEA,qBAAA,CACIC,MAAM;EAEZ,QAAQA,MAAM;IACZ,KAAK,WAAW;MAAE;QAChBE,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAE,wCAAwC,CAAC;QACpE,OAAO,IAAAC,wDAA6B,EAClCZ,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OACF,CAAC;MACH;IACA,KAAK,UAAU;MAAE;QACfK,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACC,KAAK,EAAE,uCAAuC,CAAC;QACnE,OAAO,IAAAE,sDAA4B,EACjCb,UAAU,EACVC,UAAU,EACVC,yBAAyB,EACzBC,OAAO,EACPC,YACF,CAAC;MACH;IAEA;MAAS;QACP,MAAMU,OAAO,GAAI,kCAAiCR,MAAO,EAAC;QAC1DE,eAAM,CAACC,GAAG,CAACC,iBAAQ,CAACK,KAAK,EAAED,OAAO,CAAC;QACnC,MAAM,IAAIE,qBAAa,CAACF,OAAO,CAAC;MAClC;EACF;AACF,CAAC;AAACG,OAAA,CAAAlB,wBAAA,GAAAA,wBAAA"}

package/lib/commonjs/credential/issuance/v1.0.0/index.js

@@ -4,27 +4,27 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.Issuance = void 0;
+var _mrtdPop = require("../mrtd-pop");
 var _evaluateIssuerTrust = require("./01-evaluate-issuer-trust");
 var _startUserAuthorization = require("./02-start-user-authorization");
 var _completeUserAuthorization = require("./03-complete-user-authorization");
 var _authorizeAccess = require("./04-authorize-access");
 var _obtainCredential = require("./05-obtain-credential");
 var _verifyAndParseCredential = require("./06-verify-and-parse-credential");
-var _mrtdPop = require("../mrtd-pop");
 const Issuance = {
-  evaluateIssuerTrust: _evaluateIssuerTrust.evaluateIssuerTrust,
-  startUserAuthorization: _startUserAuthorization.startUserAuthorization,
+  authorizeAccess: _authorizeAccess.authorizeAccess,
   buildAuthorizationUrl: _completeUserAuthorization.buildAuthorizationUrl,
-  completePidUserAuthorizationWithQueryMode: _completeUserAuthorization.completePidUserAuthorizationWithQueryMode,
   completeEaaUserAuthorizationWithQueryMode: _completeUserAuthorization.completeEaaUserAuthorizationWithQueryMode,
+  completePidUserAuthorizationWithQueryMode: _completeUserAuthorization.completePidUserAuthorizationWithQueryMode,
+  completeUserAuthorizationWithFormPostJwtMode: _completeUserAuthorization.completeUserAuthorizationWithFormPostJwtMode,
   continueUserAuthorizationWithMRTDPoPChallenge: _completeUserAuthorization.continueUserAuthorizationWithMRTDPoPChallenge,
+  evaluateIssuerTrust: _evaluateIssuerTrust.evaluateIssuerTrust,
   getRequestedCredentialToBePresented: _completeUserAuthorization.getRequestedCredentialToBePresented,
-  completeUserAuthorizationWithFormPostJwtMode: _completeUserAuthorization.completeUserAuthorizationWithFormPostJwtMode,
-  authorizeAccess: _authorizeAccess.authorizeAccess,
+  MRTDPoP: _mrtdPop.MRTDPoPv1_0,
   obtainCredential: _obtainCredential.obtainCredential,
   obtainCredentialsBatch: _obtainCredential.obtainCredentialsBatch,
-  verifyAndParseCredential: _verifyAndParseCredential.verifyAndParseCredential,
-  MRTDPoP: _mrtdPop.MRTDPoPv1_0
+  startUserAuthorization: _startUserAuthorization.startUserAuthorization,
+  verifyAndParseCredential: _verifyAndParseCredential.verifyAndParseCredential
 };
 exports.Issuance = Issuance;
 //# sourceMappingURL=index.js.map

package/lib/commonjs/credential/issuance/v1.0.0/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_evaluateIssuerTrust","require","_startUserAuthorization","_completeUserAuthorization","_authorizeAccess","_obtainCredential","_verifyAndParseCredential","_mrtdPop","Issuance","evaluateIssuerTrust","startUserAuthorization","buildAuthorizationUrl","completePidUserAuthorizationWithQueryMode","completeEaaUserAuthorizationWithQueryMode","continueUserAuthorizationWithMRTDPoPChallenge","getRequestedCredentialToBePresented","completeUserAuthorizationWithFormPostJwtMode","authorizeAccess","obtainCredential","obtainCredentialsBatch","verifyAndParseCredential","MRTDPoP","MRTDPoPv1_0","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/index.ts"],"mappings":";;;;;;AACA,IAAAA,oBAAA,GAAAC,OAAA;AACA,IAAAC,uBAAA,GAAAD,OAAA;AACA,IAAAE,0BAAA,GAAAF,OAAA;AAQA,IAAAG,gBAAA,GAAAH,OAAA;AACA,IAAAI,iBAAA,GAAAJ,OAAA;AAIA,IAAAK,yBAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAN,OAAA;AAEO,MAAMO,QAAqB,GAAG;EACnCC,mBAAmB,EAAnBA,wCAAmB;EACnBC,sBAAsB,EAAtBA,8CAAsB;EACtBC,qBAAqB,EAArBA,gDAAqB;EACrBC,yCAAyC,EAAzCA,oEAAyC;EACzCC,yCAAyC,EAAzCA,oEAAyC;EACzCC,6CAA6C,EAA7CA,wEAA6C;EAC7CC,mCAAmC,EAAnCA,8DAAmC;EACnCC,4CAA4C,EAA5CA,uEAA4C;EAC5CC,eAAe,EAAfA,gCAAe;EACfC,gBAAgB,EAAhBA,kCAAgB;EAChBC,sBAAsB,EAAtBA,wCAAsB;EACtBC,wBAAwB,EAAxBA,kDAAwB;EACxBC,OAAO,EAAEC;AACX,CAAC;AAACC,OAAA,CAAAf,QAAA,GAAAA,QAAA"}
+{"version":3,"names":["_mrtdPop","require","_evaluateIssuerTrust","_startUserAuthorization","_completeUserAuthorization","_authorizeAccess","_obtainCredential","_verifyAndParseCredential","Issuance","authorizeAccess","buildAuthorizationUrl","completeEaaUserAuthorizationWithQueryMode","completePidUserAuthorizationWithQueryMode","completeUserAuthorizationWithFormPostJwtMode","continueUserAuthorizationWithMRTDPoPChallenge","evaluateIssuerTrust","getRequestedCredentialToBePresented","MRTDPoP","MRTDPoPv1_0","obtainCredential","obtainCredentialsBatch","startUserAuthorization","verifyAndParseCredential","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/index.ts"],"mappings":";;;;;;AAEA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,oBAAA,GAAAD,OAAA;AACA,IAAAE,uBAAA,GAAAF,OAAA;AACA,IAAAG,0BAAA,GAAAH,OAAA;AAQA,IAAAI,gBAAA,GAAAJ,OAAA;AACA,IAAAK,iBAAA,GAAAL,OAAA;AAIA,IAAAM,yBAAA,GAAAN,OAAA;AAEO,MAAMO,QAAqB,GAAG;EACnCC,eAAe,EAAfA,gCAAe;EACfC,qBAAqB,EAArBA,gDAAqB;EACrBC,yCAAyC,EAAzCA,oEAAyC;EACzCC,yCAAyC,EAAzCA,oEAAyC;EACzCC,4CAA4C,EAA5CA,uEAA4C;EAC5CC,6CAA6C,EAA7CA,wEAA6C;EAC7CC,mBAAmB,EAAnBA,wCAAmB;EACnBC,mCAAmC,EAAnCA,8DAAmC;EACnCC,OAAO,EAAEC,oBAAW;EACpBC,gBAAgB,EAAhBA,kCAAgB;EAChBC,sBAAsB,EAAtBA,wCAAsB;EACtBC,sBAAsB,EAAtBA,8CAAsB;EACtBC,wBAAwB,EAAxBA;AACF,CAAC;AAACC,OAAA,CAAAf,QAAA,GAAAA,QAAA"}

package/lib/commonjs/credential/issuance/v1.0.0/mappers.js

@@ -7,23 +7,23 @@ exports.mapToIssuerConfig = void 0;
 var _mappers = require("../../../utils/mappers");
 const mapToIssuerConfig = (0, _mappers.createMapper)(x => {
   const {
+    federation_entity,
     oauth_authorization_server,
     openid_credential_issuer,
-    openid_credential_verifier,
-    federation_entity
+    openid_credential_verifier
   } = x.payload.metadata;
   return {
     authorization_endpoint: oauth_authorization_server.authorization_endpoint,
+    credential_configurations_supported: openid_credential_issuer.credential_configurations_supported,
     credential_endpoint: openid_credential_issuer.credential_endpoint,
     credential_issuer: openid_credential_issuer.credential_issuer,
-    credential_configurations_supported: openid_credential_issuer.credential_configurations_supported,
+    encrypted_response_enc_values_supported: openid_credential_verifier !== null && openid_credential_verifier !== void 0 && openid_credential_verifier.authorization_encrypted_response_enc ? [openid_credential_verifier.authorization_encrypted_response_enc] : undefined,
+    federation_entity,
     keys: [...openid_credential_issuer.jwks.keys, ...oauth_authorization_server.jwks.keys],
+    nonce_endpoint: openid_credential_issuer.nonce_endpoint,
     pushed_authorization_request_endpoint: oauth_authorization_server.pushed_authorization_request_endpoint,
-    token_endpoint: oauth_authorization_server.token_endpoint,
     status_assertion_endpoint: openid_credential_issuer.status_attestation_endpoint,
-    nonce_endpoint: openid_credential_issuer.nonce_endpoint,
-    federation_entity,
-    encrypted_response_enc_values_supported: openid_credential_verifier !== null && openid_credential_verifier !== void 0 && openid_credential_verifier.authorization_encrypted_response_enc ? [openid_credential_verifier.authorization_encrypted_response_enc] : undefined
+    token_endpoint: oauth_authorization_server.token_endpoint
   };
 });
 exports.mapToIssuerConfig = mapToIssuerConfig;

package/lib/commonjs/credential/issuance/v1.0.0/mappers.js.map

@@ -1 +1 @@
-{"version":3,"names":["_mappers","require","mapToIssuerConfig","createMapper","x","oauth_authorization_server","openid_credential_issuer","openid_credential_verifier","federation_entity","payload","metadata","authorization_endpoint","credential_endpoint","credential_issuer","credential_configurations_supported","keys","jwks","pushed_authorization_request_endpoint","token_endpoint","status_assertion_endpoint","status_attestation_endpoint","nonce_endpoint","encrypted_response_enc_values_supported","authorization_encrypted_response_enc","undefined","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/mappers.ts"],"mappings":";;;;;;AACA,IAAAA,QAAA,GAAAC,OAAA;AAGO,MAAMC,iBAAiB,GAAG,IAAAC,qBAAY,EAG1CC,CAAC,IAAK;EACP,MAAM;IACJC,0BAA0B;IAC1BC,wBAAwB;IACxBC,0BAA0B;IAC1BC;EACF,CAAC,GAAGJ,CAAC,CAACK,OAAO,CAACC,QAAQ;EACtB,OAAO;IACLC,sBAAsB,EAAEN,0BAA0B,CAACM,sBAAsB;IACzEC,mBAAmB,EAAEN,wBAAwB,CAACM,mBAAmB;IACjEC,iBAAiB,EAAEP,wBAAwB,CAACO,iBAAiB;IAC7DC,mCAAmC,EACjCR,wBAAwB,CAACQ,mCAAmC;IAC9DC,IAAI,EAAE,CACJ,GAAGT,wBAAwB,CAACU,IAAI,CAACD,IAAI,EACrC,GAAGV,0BAA0B,CAACW,IAAI,CAACD,IAAI,CACxC;IACDE,qCAAqC,EACnCZ,0BAA0B,CAACY,qCAAqC;IAClEC,cAAc,EAAEb,0BAA0B,CAACa,cAAc;IACzDC,yBAAyB,EACvBb,wBAAwB,CAACc,2BAA2B;IACtDC,cAAc,EAAEf,wBAAwB,CAACe,cAAc;IACvDb,iBAAiB;IACjBc,uCAAuC,EACrCf,0BAA0B,aAA1BA,0BAA0B,eAA1BA,0BAA0B,CAAEgB,oCAAoC,GAC5D,CAAChB,0BAA0B,CAACgB,oCAAoC,CAAC,GACjEC;EACR,CAAC;AACH,CAAC,CAAC;AAACC,OAAA,CAAAvB,iBAAA,GAAAA,iBAAA"}
+{"version":3,"names":["_mappers","require","mapToIssuerConfig","createMapper","x","federation_entity","oauth_authorization_server","openid_credential_issuer","openid_credential_verifier","payload","metadata","authorization_endpoint","credential_configurations_supported","credential_endpoint","credential_issuer","encrypted_response_enc_values_supported","authorization_encrypted_response_enc","undefined","keys","jwks","nonce_endpoint","pushed_authorization_request_endpoint","status_assertion_endpoint","status_attestation_endpoint","token_endpoint","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/mappers.ts"],"mappings":";;;;;;AAGA,IAAAA,QAAA,GAAAC,OAAA;AAEO,MAAMC,iBAAiB,GAAG,IAAAC,qBAAY,EAG1CC,CAAC,IAAK;EACP,MAAM;IACJC,iBAAiB;IACjBC,0BAA0B;IAC1BC,wBAAwB;IACxBC;EACF,CAAC,GAAGJ,CAAC,CAACK,OAAO,CAACC,QAAQ;EACtB,OAAO;IACLC,sBAAsB,EAAEL,0BAA0B,CAACK,sBAAsB;IACzEC,mCAAmC,EACjCL,wBAAwB,CAACK,mCAAmC;IAC9DC,mBAAmB,EAAEN,wBAAwB,CAACM,mBAAmB;IACjEC,iBAAiB,EAAEP,wBAAwB,CAACO,iBAAiB;IAC7DC,uCAAuC,EACrCP,0BAA0B,aAA1BA,0BAA0B,eAA1BA,0BAA0B,CAAEQ,oCAAoC,GAC5D,CAACR,0BAA0B,CAACQ,oCAAoC,CAAC,GACjEC,SAAS;IACfZ,iBAAiB;IACjBa,IAAI,EAAE,CACJ,GAAGX,wBAAwB,CAACY,IAAI,CAACD,IAAI,EACrC,GAAGZ,0BAA0B,CAACa,IAAI,CAACD,IAAI,CACxC;IACDE,cAAc,EAAEb,wBAAwB,CAACa,cAAc;IACvDC,qCAAqC,EACnCf,0BAA0B,CAACe,qCAAqC;IAClEC,yBAAyB,EACvBf,wBAAwB,CAACgB,2BAA2B;IACtDC,cAAc,EAAElB,0BAA0B,CAACkB;EAC7C,CAAC;AACH,CAAC,CAAC;AAACC,OAAA,CAAAvB,iBAAA,GAAAA,iBAAA"}

package/lib/commonjs/credential/issuance/v1.0.0/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","_interopRequireWildcard","require","_types","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","CredentialResponse","object","credentials","array","credential","string","notification_id","optional","exports","ResponseUriResultShape","redirect_uri","NonceResponse","c_nonce"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAAkE,SAAAE,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAJ,wBAAAQ,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAElE;;AAKO,MAAMW,kBAAkB,GAAG1B,CAAC,CAAC2B,MAAM,CAAC;EACzCC,WAAW,EAAE5B,CAAC,CAAC6B,KAAK,CAClB7B,CAAC,CAAC2B,MAAM,CAAC;IACPG,UAAU,EAAE9B,CAAC,CAAC+B,MAAM,CAAC;EACvB,CAAC,CACH,CAAC;EACDC,eAAe,EAAEhC,CAAC,CAAC+B,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC;AACvC,CAAC,CAAC;;AAEF;AACA;AACA;AAFAC,OAAA,CAAAR,kBAAA,GAAAA,kBAAA;AAGO,MAAMS,sBAAsB,GAAGnC,CAAC,CAAC2B,MAAM,CAAC;EAC7CS,YAAY,EAAEpC,CAAC,CAAC+B,MAAM,CAAC;AACzB,CAAC,CAAC;AAACG,OAAA,CAAAC,sBAAA,GAAAA,sBAAA;AAGI,MAAME,aAAa,GAAGrC,CAAC,CAAC2B,MAAM,CAAC;EACpCW,OAAO,EAAEtC,CAAC,CAAC+B,MAAM,CAAC;AACpB,CAAC,CAAC;AAACG,OAAA,CAAAG,aAAA,GAAAA,aAAA"}
+{"version":3,"names":["z","_interopRequireWildcard","require","_types","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","CredentialResponse","object","credentials","array","credential","string","notification_id","optional","exports","ResponseUriResultShape","redirect_uri","NonceResponse","c_nonce"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.0.0/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AAEA,IAAAC,MAAA,GAAAD,OAAA;AAAkE,SAAAE,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAJ,wBAAAQ,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAElE;;AAKO,MAAMW,kBAAkB,GAAG1B,CAAC,CAAC2B,MAAM,CAAC;EACzCC,WAAW,EAAE5B,CAAC,CAAC6B,KAAK,CAClB7B,CAAC,CAAC2B,MAAM,CAAC;IACPG,UAAU,EAAE9B,CAAC,CAAC+B,MAAM,CAAC;EACvB,CAAC,CACH,CAAC;EACDC,eAAe,EAAEhC,CAAC,CAAC+B,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC;AACvC,CAAC,CAAC;;AAEF;AACA;AACA;AAFAC,OAAA,CAAAR,kBAAA,GAAAA,kBAAA;AAGO,MAAMS,sBAAsB,GAAGnC,CAAC,CAAC2B,MAAM,CAAC;EAC7CS,YAAY,EAAEpC,CAAC,CAAC+B,MAAM,CAAC;AACzB,CAAC,CAAC;AAACG,OAAA,CAAAC,sBAAA,GAAAA,sBAAA;AAGI,MAAME,aAAa,GAAGrC,CAAC,CAAC2B,MAAM,CAAC;EACpCW,OAAO,EAAEtC,CAAC,CAAC+B,MAAM,CAAC;AACpB,CAAC,CAAC;AAACG,OAAA,CAAAG,aAAA,GAAAA,aAAA"}

package/lib/commonjs/credential/issuance/v1.3.3/01-evaluate-issuer-trust.js

@@ -10,12 +10,12 @@ var _mappers = require("./mappers");
 const evaluateIssuerTrust = async function (issuerUrl) {
   let context = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
   const issuerMetadata = await (0, _ioWalletOid4vci.fetchMetadata)({
-    config: _config.sdkConfigV1_4,
-    credentialIssuerUrl: issuerUrl,
     authorizationServer: context.authorizationServer,
     callbacks: {
       fetch: context.appFetch
-    }
+    },
+    config: _config.sdkConfigV1_4,
+    credentialIssuerUrl: issuerUrl
   });
   return {
     issuerConf: (0, _mappers.mapToIssuerConfig)(issuerMetadata)

package/lib/commonjs/credential/issuance/v1.3.3/01-evaluate-issuer-trust.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioWalletOid4vci","require","_config","_mappers","evaluateIssuerTrust","issuerUrl","context","arguments","length","undefined","issuerMetadata","fetchMetadata","config","sdkConfigV1_4","credentialIssuerUrl","authorizationServer","callbacks","fetch","appFetch","issuerConf","mapToIssuerConfig","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/01-evaluate-issuer-trust.ts"],"mappings":";;;;;;AAAA,IAAAA,gBAAA,GAAAC,OAAA;AAIA,IAAAC,OAAA,GAAAD,OAAA;AAEA,IAAAE,QAAA,GAAAF,OAAA;AAEO,MAAMG,mBAAuD,GAAG,eAAAA,CACrEC,SAAS,EAEN;EAAA,IADHC,OAAO,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEZ,MAAMG,cAAc,GAAI,MAAM,IAAAC,8BAAa,EAAC;IAC1CC,MAAM,EAAEC,qBAAa;IACrBC,mBAAmB,EAAET,SAAS;IAC9BU,mBAAmB,EAAET,OAAO,CAACS,mBAAmB;IAChDC,SAAS,EAAE;MACTC,KAAK,EAAEX,OAAO,CAACY;IACjB;EACF,CAAC,CAA0B;EAE3B,OAAO;IAAEC,UAAU,EAAE,IAAAC,0BAAiB,EAACV,cAAc;EAAE,CAAC;AAC1D,CAAC;AAACW,OAAA,CAAAjB,mBAAA,GAAAA,mBAAA"}
+{"version":3,"names":["_ioWalletOid4vci","require","_config","_mappers","evaluateIssuerTrust","issuerUrl","context","arguments","length","undefined","issuerMetadata","fetchMetadata","authorizationServer","callbacks","fetch","appFetch","config","sdkConfigV1_4","credentialIssuerUrl","issuerConf","mapToIssuerConfig","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/01-evaluate-issuer-trust.ts"],"mappings":";;;;;;AAAA,IAAAA,gBAAA,GAAAC,OAAA;AAOA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAEO,MAAMG,mBAAuD,GAAG,eAAAA,CACrEC,SAAS,EAEN;EAAA,IADHC,OAAO,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEZ,MAAMG,cAAc,GAAI,MAAM,IAAAC,8BAAa,EAAC;IAC1CC,mBAAmB,EAAEN,OAAO,CAACM,mBAAmB;IAChDC,SAAS,EAAE;MACTC,KAAK,EAAER,OAAO,CAACS;IACjB,CAAC;IACDC,MAAM,EAAEC,qBAAa;IACrBC,mBAAmB,EAAEb;EACvB,CAAC,CAA0B;EAE3B,OAAO;IAAEc,UAAU,EAAE,IAAAC,0BAAiB,EAACV,cAAc;EAAE,CAAC;AAC1D,CAAC;AAACW,OAAA,CAAAjB,mBAAA,GAAAA,mBAAA"}

package/lib/commonjs/credential/issuance/v1.3.3/02-start-user-authorization.js

@@ -6,19 +6,19 @@ Object.defineProperty(exports, "__esModule", {
 exports.startUserAuthorization = void 0;
 var _ioWalletOauth = require("@pagopa/io-wallet-oauth2");
 var _uuid = require("uuid");
-var _logging = require("../../../utils/logging");
 var _callbacks = require("../../../utils/callbacks");
-var _errors = require("../../../utils/errors");
 var _config = require("../../../utils/config");
+var _errors = require("../../../utils/errors");
+var _logging = require("../../../utils/logging");
 var _startUserAuthorization = require("../common/02-start-user-authorization");
 const startUserAuthorization = async (issuerConf, credentialIds, proof, ctx) => {
   const {
-    wiaCryptoContext,
-    walletInstanceAttestation,
-    redirectUri,
     appFetch = fetch,
+    issuerState,
+    redirectUri,
     scope,
-    issuerState
+    walletInstanceAttestation,
+    wiaCryptoContext
   } = ctx;
   const clientId = await wiaCryptoContext.getPublicKey().then(_ => _.kid);
   if (!clientId) {
@@ -34,52 +34,52 @@ const startUserAuthorization = async (issuerConf, credentialIds, proof, ctx) =>
      * See https://italia.github.io/eid-wallet-it-docs/versione-corrente/en/credential-issuance-endpoint.html#pushed-authorization-request-endpoint
      */
     credentialDefinition.push({
-      type: "it_l2+document_proof",
-      idphinting: proof.idpHinting,
       challenge_method: "mrtd+ias",
-      challenge_redirect_uri: redirectUri
+      challenge_redirect_uri: redirectUri,
+      idphinting: proof.idpHinting,
+      type: "it_l2+document_proof"
     });
   }
   const wiaSigner = {
-    method: "jwk",
     alg: "ES256",
+    method: "jwk",
     publicJwk: await wiaCryptoContext.getPublicKey()
   };
   const signJwt = (0, _callbacks.createSignJwtFromCryptoContext)(wiaCryptoContext);
   const parRequest = await (0, _ioWalletOauth.createPushedAuthorizationRequest)({
-    config: _config.sdkConfigV1_3,
+    audience: issuerConf.credential_issuer,
+    authorization_details: credentialDefinition,
+    authorizationServerMetadata: {
+      require_signed_request_object: true
+    },
     callbacks: {
       ..._callbacks.partialCallbacks,
       signJwt
     },
-    authorizationServerMetadata: {
-      require_signed_request_object: true
-    },
-    jti: (0, _uuid.v4)(),
     clientId,
-    audience: issuerConf.credential_issuer,
-    authorization_details: credentialDefinition,
     codeChallengeMethodsSupported: ["S256"],
+    config: _config.sdkConfigV1_3,
+    dpop: {
+      signer: wiaSigner
+    },
+    issuerState,
+    jti: (0, _uuid.v4)(),
     redirectUri,
     // When the issuance is started from a Credential Offer, the `scope` and
     // `issuer_state` carried by the authorization_code grant are forwarded to
     // the PAR. They are `undefined` (and thus omitted) for the regular flow.
-    scope,
-    issuerState,
-    dpop: {
-      signer: wiaSigner
-    }
+    scope
   });
   const clientAttestationPoP = await (0, _ioWalletOauth.createClientAttestationPopJwt)({
-    config: _config.sdkConfigV1_3,
+    authorizationServer: issuerConf.credential_issuer,
     callbacks: {
       generateRandom: _callbacks.partialCallbacks.generateRandom,
       signJwt
     },
     clientAttestation: walletInstanceAttestation,
-    authorizationServer: issuerConf.credential_issuer,
-    signer: wiaSigner,
-    jti: (0, _uuid.v4)()
+    config: _config.sdkConfigV1_3,
+    jti: (0, _uuid.v4)(),
+    signer: wiaSigner
   });
   const {
     request_uri
@@ -87,16 +87,16 @@ const startUserAuthorization = async (issuerConf, credentialIds, proof, ctx) =>
     callbacks: {
       fetch: appFetch
     },
-    pushedAuthorizationRequestEndpoint: issuerConf.pushed_authorization_request_endpoint,
-    pushedAuthorizationRequest: parRequest,
     clientAttestationDPoP: clientAttestationPoP,
+    pushedAuthorizationRequest: parRequest,
+    pushedAuthorizationRequestEndpoint: issuerConf.pushed_authorization_request_endpoint,
     walletAttestation: walletInstanceAttestation
   });
   return {
-    issuerRequestUri: request_uri,
     clientId,
     codeVerifier: parRequest.pkceCodeVerifier,
-    credentialDefinition
+    credentialDefinition,
+    issuerRequestUri: request_uri
   };
 };
 exports.startUserAuthorization = startUserAuthorization;

package/lib/commonjs/credential/issuance/v1.3.3/02-start-user-authorization.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioWalletOauth","require","_uuid","_logging","_callbacks","_errors","_config","_startUserAuthorization","startUserAuthorization","issuerConf","credentialIds","proof","ctx","wiaCryptoContext","walletInstanceAttestation","redirectUri","appFetch","fetch","scope","issuerState","clientId","getPublicKey","then","_","kid","Logger","log","LogLevel","ERROR","IoWalletError","credentialDefinition","map","c","selectCredentialDefinition","proofType","push","type","idphinting","idpHinting","challenge_method","challenge_redirect_uri","wiaSigner","method","alg","publicJwk","signJwt","createSignJwtFromCryptoContext","parRequest","createPushedAuthorizationRequest","config","sdkConfigV1_3","callbacks","partialCallbacks","authorizationServerMetadata","require_signed_request_object","jti","uuidv4","audience","credential_issuer","authorization_details","codeChallengeMethodsSupported","dpop","signer","clientAttestationPoP","createClientAttestationPopJwt","generateRandom","clientAttestation","authorizationServer","request_uri","fetchPushedAuthorizationResponse","pushedAuthorizationRequestEndpoint","pushed_authorization_request_endpoint","pushedAuthorizationRequest","clientAttestationDPoP","walletAttestation","issuerRequestUri","codeVerifier","pkceCodeVerifier","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/02-start-user-authorization.ts"],"mappings":";;;;;;AAAA,IAAAA,cAAA,GAAAC,OAAA;AAMA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAEA,IAAAG,UAAA,GAAAH,OAAA;AAIA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AACA,IAAAM,uBAAA,GAAAN,OAAA;AAEO,MAAMO,sBAA6D,GACxE,MAAAA,CAAOC,UAAU,EAAEC,aAAa,EAAEC,KAAK,EAAEC,GAAG,KAAK;EAC/C,MAAM;IACJC,gBAAgB;IAChBC,yBAAyB;IACzBC,WAAW;IACXC,QAAQ,GAAGC,KAAK;IAChBC,KAAK;IACLC;EACF,CAAC,GAAGP,GAAG;EAEP,MAAMQ,QAAQ,GAAG,MAAMP,gBAAgB,CAACQ,YAAY,CAAC,CAAC,CAACC,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACC,GAAG,CAAC;EAEzE,IAAI,CAACJ,QAAQ,EAAE;IACbK,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,kCAAiCR,QAAS,0BAC7C,CAAC;IACD,MAAM,IAAIS,qBAAa,CAAC,qBAAqB,CAAC;EAChD;EAEA,MAAMC,oBAAoB,GAAGpB,aAAa,CAACqB,GAAG,CAAEC,CAAC,IAC/C,IAAAC,kDAA0B,EAACxB,UAAU,EAAEuB,CAAC,CAC1C,CAAC;EAED,IAAIrB,KAAK,CAACuB,SAAS,KAAK,UAAU,EAAE;IAClC;AACN;AACA;AACA;AACA;AACA;IACMJ,oBAAoB,CAACK,IAAI,CAAC;MACxBC,IAAI,EAAE,sBAAsB;MAC5BC,UAAU,EAAE1B,KAAK,CAAC2B,UAAU;MAC5BC,gBAAgB,EAAE,UAAU;MAC5BC,sBAAsB,EAAEzB;IAC1B,CAAC,CAAC;EACJ;EAEA,MAAM0B,SAAuB,GAAG;IAC9BC,MAAM,EAAE,KAAK;IACbC,GAAG,EAAE,OAAO;IACZC,SAAS,EAAE,MAAM/B,gBAAgB,CAACQ,YAAY,CAAC;EACjD,CAAC;EAED,MAAMwB,OAAO,GAAG,IAAAC,yCAA8B,EAACjC,gBAAgB,CAAC;EAEhE,MAAMkC,UAAU,GAAG,MAAM,IAAAC,+CAAgC,EAAC;IACxDC,MAAM,EAAEC,qBAAa;IACrBC,SAAS,EAAE;MACT,GAAGC,2BAAgB;MACnBP;IACF,CAAC;IACDQ,2BAA2B,EAAE;MAC3BC,6BAA6B,EAAE;IACjC,CAAC;IACDC,GAAG,EAAE,IAAAC,QAAM,EAAC,CAAC;IACbpC,QAAQ;IACRqC,QAAQ,EAAEhD,UAAU,CAACiD,iBAAiB;IACtCC,qBAAqB,EAAE7B,oBAAoB;IAC3C8B,6BAA6B,EAAE,CAAC,MAAM,CAAC;IACvC7C,WAAW;IACX;IACA;IACA;IACAG,KAAK;IACLC,WAAW;IACX0C,IAAI,EAAE;MACJC,MAAM,EAAErB;IACV;EACF,CAAC,CAAC;EAEF,MAAMsB,oBAAoB,GAAG,MAAM,IAAAC,4CAA6B,EAAC;IAC/Df,MAAM,EAAEC,qBAAa;IACrBC,SAAS,EAAE;MACTc,cAAc,EAAEb,2BAAgB,CAACa,cAAc;MAC/CpB;IACF,CAAC;IACDqB,iBAAiB,EAAEpD,yBAAyB;IAC5CqD,mBAAmB,EAAE1D,UAAU,CAACiD,iBAAiB;IACjDI,MAAM,EAAErB,SAAS;IACjBc,GAAG,EAAE,IAAAC,QAAM,EAAC;EACd,CAAC,CAAC;EAEF,MAAM;IAAEY;EAAY,CAAC,GAAG,MAAM,IAAAC,+CAAgC,EAAC;IAC7DlB,SAAS,EAAE;MACTlC,KAAK,EAAED;IACT,CAAC;IACDsD,kCAAkC,EAChC7D,UAAU,CAAC8D,qCAAqC;IAClDC,0BAA0B,EAAEzB,UAAU;IACtC0B,qBAAqB,EAAEV,oBAAoB;IAC3CW,iBAAiB,EAAE5D;EACrB,CAAC,CAAC;EAEF,OAAO;IACL6D,gBAAgB,EAAEP,WAAW;IAC7BhD,QAAQ;IACRwD,YAAY,EAAE7B,UAAU,CAAC8B,gBAAgB;IACzC/C;EACF,CAAC;AACH,CAAC;AAACgD,OAAA,CAAAtE,sBAAA,GAAAA,sBAAA"}
+{"version":3,"names":["_ioWalletOauth","require","_uuid","_callbacks","_config","_errors","_logging","_startUserAuthorization","startUserAuthorization","issuerConf","credentialIds","proof","ctx","appFetch","fetch","issuerState","redirectUri","scope","walletInstanceAttestation","wiaCryptoContext","clientId","getPublicKey","then","_","kid","Logger","log","LogLevel","ERROR","IoWalletError","credentialDefinition","map","c","selectCredentialDefinition","proofType","push","challenge_method","challenge_redirect_uri","idphinting","idpHinting","type","wiaSigner","alg","method","publicJwk","signJwt","createSignJwtFromCryptoContext","parRequest","createPushedAuthorizationRequest","audience","credential_issuer","authorization_details","authorizationServerMetadata","require_signed_request_object","callbacks","partialCallbacks","codeChallengeMethodsSupported","config","sdkConfigV1_3","dpop","signer","jti","uuidv4","clientAttestationPoP","createClientAttestationPopJwt","authorizationServer","generateRandom","clientAttestation","request_uri","fetchPushedAuthorizationResponse","clientAttestationDPoP","pushedAuthorizationRequest","pushedAuthorizationRequestEndpoint","pushed_authorization_request_endpoint","walletAttestation","codeVerifier","pkceCodeVerifier","issuerRequestUri","exports"],"sourceRoot":"../../../../../src","sources":["credential/issuance/v1.3.3/02-start-user-authorization.ts"],"mappings":";;;;;;AAEA,IAAAA,cAAA,GAAAC,OAAA;AAKA,IAAAC,KAAA,GAAAD,OAAA;AAIA,IAAAE,UAAA,GAAAF,OAAA;AAIA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,uBAAA,GAAAN,OAAA;AAEO,MAAMO,sBAA6D,GACxE,MAAAA,CAAOC,UAAU,EAAEC,aAAa,EAAEC,KAAK,EAAEC,GAAG,KAAK;EAC/C,MAAM;IACJC,QAAQ,GAAGC,KAAK;IAChBC,WAAW;IACXC,WAAW;IACXC,KAAK;IACLC,yBAAyB;IACzBC;EACF,CAAC,GAAGP,GAAG;EAEP,MAAMQ,QAAQ,GAAG,MAAMD,gBAAgB,CAACE,YAAY,CAAC,CAAC,CAACC,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACC,GAAG,CAAC;EAEzE,IAAI,CAACJ,QAAQ,EAAE;IACbK,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,kCAAiCR,QAAS,0BAC7C,CAAC;IACD,MAAM,IAAIS,qBAAa,CAAC,qBAAqB,CAAC;EAChD;EAEA,MAAMC,oBAAoB,GAAGpB,aAAa,CAACqB,GAAG,CAAEC,CAAC,IAC/C,IAAAC,kDAA0B,EAACxB,UAAU,EAAEuB,CAAC,CAC1C,CAAC;EAED,IAAIrB,KAAK,CAACuB,SAAS,KAAK,UAAU,EAAE;IAClC;AACN;AACA;AACA;AACA;AACA;IACMJ,oBAAoB,CAACK,IAAI,CAAC;MACxBC,gBAAgB,EAAE,UAAU;MAC5BC,sBAAsB,EAAErB,WAAW;MACnCsB,UAAU,EAAE3B,KAAK,CAAC4B,UAAU;MAC5BC,IAAI,EAAE;IACR,CAAC,CAAC;EACJ;EAEA,MAAMC,SAAuB,GAAG;IAC9BC,GAAG,EAAE,OAAO;IACZC,MAAM,EAAE,KAAK;IACbC,SAAS,EAAE,MAAMzB,gBAAgB,CAACE,YAAY,CAAC;EACjD,CAAC;EAED,MAAMwB,OAAO,GAAG,IAAAC,yCAA8B,EAAC3B,gBAAgB,CAAC;EAEhE,MAAM4B,UAAU,GAAG,MAAM,IAAAC,+CAAgC,EAAC;IACxDC,QAAQ,EAAExC,UAAU,CAACyC,iBAAiB;IACtCC,qBAAqB,EAAErB,oBAAoB;IAC3CsB,2BAA2B,EAAE;MAC3BC,6BAA6B,EAAE;IACjC,CAAC;IACDC,SAAS,EAAE;MACT,GAAGC,2BAAgB;MACnBV;IACF,CAAC;IACDzB,QAAQ;IACRoC,6BAA6B,EAAE,CAAC,MAAM,CAAC;IACvCC,MAAM,EAAEC,qBAAa;IACrBC,IAAI,EAAE;MACJC,MAAM,EAAEnB;IACV,CAAC;IACD1B,WAAW;IACX8C,GAAG,EAAE,IAAAC,QAAM,EAAC,CAAC;IACb9C,WAAW;IACX;IACA;IACA;IACAC;EACF,CAAC,CAAC;EAEF,MAAM8C,oBAAoB,GAAG,MAAM,IAAAC,4CAA6B,EAAC;IAC/DC,mBAAmB,EAAExD,UAAU,CAACyC,iBAAiB;IACjDI,SAAS,EAAE;MACTY,cAAc,EAAEX,2BAAgB,CAACW,cAAc;MAC/CrB;IACF,CAAC;IACDsB,iBAAiB,EAAEjD,yBAAyB;IAC5CuC,MAAM,EAAEC,qBAAa;IACrBG,GAAG,EAAE,IAAAC,QAAM,EAAC,CAAC;IACbF,MAAM,EAAEnB;EACV,CAAC,CAAC;EAEF,MAAM;IAAE2B;EAAY,CAAC,GAAG,MAAM,IAAAC,+CAAgC,EAAC;IAC7Df,SAAS,EAAE;MACTxC,KAAK,EAAED;IACT,CAAC;IACDyD,qBAAqB,EAAEP,oBAAoB;IAC3CQ,0BAA0B,EAAExB,UAAU;IACtCyB,kCAAkC,EAChC/D,UAAU,CAACgE,qCAAqC;IAClDC,iBAAiB,EAAExD;EACrB,CAAC,CAAC;EAEF,OAAO;IACLE,QAAQ;IACRuD,YAAY,EAAE5B,UAAU,CAAC6B,gBAAgB;IACzC9C,oBAAoB;IACpB+C,gBAAgB,EAAET;EACpB,CAAC;AACH,CAAC;AAACU,OAAA,CAAAtE,sBAAA,GAAAA,sBAAA"}

package/lib/commonjs/credential/issuance/v1.3.3/03-complete-user-authorization.js

@@ -4,19 +4,19 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.parseAuthorizationResponse = exports.getRequestedCredentialToBePresented = exports.continueUserAuthorizationWithMRTDPoPChallenge = exports.completeUserAuthorizationWithFormPostJwtMode = exports.completePidUserAuthorizationWithQueryMode = exports.completeEaaUserAuthorizationWithQueryMode = exports.buildAuthorizationUrl = void 0;
-var _auth = require("../../../utils/auth");
-var _parseUrl = _interopRequireDefault(require("parse-url"));
-var _ioWalletOid4vp = require("@pagopa/io-wallet-oid4vp");
-var _ioWalletOid4vci = require("@pagopa/io-wallet-oid4vci");
 var _ioWalletOauth = require("@pagopa/io-wallet-oauth2");
-var _errors = require("../common/errors");
-var _logging = require("../../../utils/logging");
-var _v = require("../../presentation/v1.3.3");
+var _ioWalletOid4vci = require("@pagopa/io-wallet-oid4vci");
+var _ioWalletOid4vp = require("@pagopa/io-wallet-oid4vp");
+var _parseUrl = _interopRequireDefault(require("parse-url"));
+var _auth = require("../../../utils/auth");
 var _callbacks = require("../../../utils/callbacks");
 var _config = require("../../../utils/config");
-var _errors2 = require("../../../utils/errors");
-var _mappers = require("./mappers");
+var _errors = require("../../../utils/errors");
+var _logging = require("../../../utils/logging");
 var _misc = require("../../../utils/misc");
+var _v = require("../../presentation/v1.3.3");
+var _errors2 = require("../common/errors");
+var _mappers = require("./mappers");
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 const continueUserAuthorizationWithMRTDPoPChallenge = async authRedirectUrl => {
   _logging.Logger.log(_logging.LogLevel.DEBUG, "The requested credential is a PID and requires MRTD PoP, starting MRTD PoP validation from auth redirect");
@@ -30,7 +30,7 @@ const continueUserAuthorizationWithMRTDPoPChallenge = async authRedirectUrl => {
   } catch (err) {
     const errorMessage = err instanceof Error ? err.message : "MRTD challenge parsing failed";
     _logging.Logger.log(_logging.LogLevel.ERROR, `Error while parsing the authorization response: ${errorMessage}`);
-    throw new _errors.AuthorizationError(errorMessage);
+    throw new _errors2.AuthorizationError(errorMessage);
   }
 };
 exports.continueUserAuthorizationWithMRTDPoPChallenge = continueUserAuthorizationWithMRTDPoPChallenge;
@@ -66,13 +66,13 @@ const getRequestedCredentialToBePresented = async function (issuerRequestUri, cl
   _logging.Logger.log(_logging.LogLevel.DEBUG, `Requesting the request object to ${authzRequestEndpoint}?${params.toString()}`);
   const requestObjectJwt = await appFetch(`${authzRequestEndpoint}?${params.toString()}`, {
     method: "GET"
-  }).then((0, _misc.hasStatusOrThrow)(200, _errors2.IssuerResponseError)).then(res => res.text());
+  }).then((0, _misc.hasStatusOrThrow)(200, _errors.IssuerResponseError)).then(res => res.text());
   const parsedAuthRequest = await (0, _ioWalletOid4vp.parseAuthorizeRequest)({
-    config: _config.sdkConfigV1_3,
-    requestObjectJwt,
     callbacks: {
       verifyJwt: (0, _callbacks.createVerifyJwtFromJwks)(issuerConf.keys)
-    }
+    },
+    config: _config.sdkConfigV1_3,
+    requestObjectJwt
   });
   return (0, _mappers.mapToRequestObject)(parsedAuthRequest);
 };
@@ -85,16 +85,16 @@ const completeUserAuthorizationWithFormPostJwtMode = async (requestObject, issue
   } = _ref;
   _logging.Logger.log(_logging.LogLevel.DEBUG, "The requested credential is not a PID, completing the user authorization with form_post.jwt mode");
   const authzResponse = await processPidPresentationAndCreateAuthzResponse({
-    requestObject,
+    evaluatedDcqlQuery,
     issuerConfig,
-    evaluatedDcqlQuery
+    requestObject
   });
   _logging.Logger.log(_logging.LogLevel.DEBUG, `Authz response: ${authzResponse}`);
   const issuerSigKey = issuerConfig.keys.find(key => key.use === "sig");
   if (!issuerSigKey) {
     const errorMessage = "No signature key found in Issuer Metadata JWKS";
     _logging.Logger.log(_logging.LogLevel.ERROR, errorMessage);
-    throw new _errors2.IoWalletError(errorMessage);
+    throw new _errors.IoWalletError(errorMessage);
   }
   return (0, _ioWalletOid4vci.sendAuthorizationResponseAndExtractCode)({
     authorizationResponseJarm: authzResponse.jarm.responseJwe,
@@ -103,13 +103,13 @@ const completeUserAuthorizationWithFormPostJwtMode = async (requestObject, issue
       fetch: appFetch
     },
     iss: requestObject.iss,
-    state: requestObject.state ?? "",
     presentationResponseUri: requestObject.response_uri,
     signer: {
       alg: "ES256",
       method: "jwk",
       publicJwk: issuerSigKey
-    }
+    },
+    state: requestObject.state ?? ""
   });
 };
 exports.completeUserAuthorizationWithFormPostJwtMode = completeUserAuthorizationWithFormPostJwtMode;
@@ -120,25 +120,25 @@ const completeEaaUserAuthorizationWithQueryMode = async function (requestObject,
   } = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : {};
   _logging.Logger.log(_logging.LogLevel.DEBUG, "The requested credential is not a PID, completing the user authorization with query mode");
   const authzResponse = await processPidPresentationAndCreateAuthzResponse({
-    requestObject,
+    evaluatedDcqlQuery,
     issuerConfig,
-    evaluatedDcqlQuery
+    requestObject
   });
   _logging.Logger.log(_logging.LogLevel.DEBUG, `Authz response: ${JSON.stringify(authzResponse)}`);
   const {
     redirect_uri
   } = await (0, _ioWalletOid4vp.fetchAuthorizationResponse)({
     authorizationResponseJarm: authzResponse.jarm.responseJwe,
-    presentationResponseUri: requestObject.response_uri,
     callbacks: {
       ..._callbacks.partialCallbacks,
       fetch: appFetch
-    }
+    },
+    presentationResponseUri: requestObject.response_uri
   });
   if (!redirect_uri) {
     const errorMessage = "The authorization server did not return a redirect_uri to continue the authorization flow";
     _logging.Logger.log(_logging.LogLevel.ERROR, errorMessage);
-    throw new _errors.AuthorizationError(errorMessage);
+    throw new _errors2.AuthorizationError(errorMessage);
   }
   let finalRedirectUri;
   if (fetchFinalRedirectUri) {
@@ -148,14 +148,14 @@ const completeEaaUserAuthorizationWithQueryMode = async function (requestObject,
     if (!response || !response.ok) {
       const errorMessage = `An error occurred while completing the authorization flow. Ensure ${clientRedirectUri} is a valid HTTP url for redirect`;
       _logging.Logger.log(_logging.LogLevel.ERROR, errorMessage);
-      throw new _errors.AuthorizationError(errorMessage);
+      throw new _errors2.AuthorizationError(errorMessage);
     }
     finalRedirectUri = response.url;
   }
   if (!finalRedirectUri || !finalRedirectUri.startsWith(clientRedirectUri)) {
     const errorMessage = `The authorization server did not redirect to the provided client redirect URI. Expected: ${clientRedirectUri}, got: ${finalRedirectUri}`;
     _logging.Logger.log(_logging.LogLevel.ERROR, errorMessage);
-    throw new _errors.AuthorizationError(errorMessage);
+    throw new _errors2.AuthorizationError(errorMessage);
   }
   return parseAuthorizationResponse((0, _parseUrl.default)(finalRedirectUri).query);
 };
@@ -174,11 +174,11 @@ const parseAuthorizationResponse = authRes => {
     const authErr = _auth.AuthorizationErrorShape.safeParse(authRes);
     if (!authErr.success) {
       _logging.Logger.log(_logging.LogLevel.ERROR, `Error while parsing the authorization response: ${authResParsed.error.message}`);
-      throw new _errors.AuthorizationError(authResParsed.error.message); // an error occured while parsing the result and the error
+      throw new _errors2.AuthorizationError(authResParsed.error.message); // an error occured while parsing the result and the error
     }
 
     _logging.Logger.log(_logging.LogLevel.ERROR, `Error while authorizating with the idp: ${JSON.stringify(authErr)}`);
-    throw new _errors.AuthorizationIdpError(authErr.data.error, authErr.data.error_description);
+    throw new _errors2.AuthorizationIdpError(authErr.data.error, authErr.data.error_description);
   }
   return authResParsed.data;
 };
@@ -193,9 +193,9 @@ const parseAuthorizationResponse = authRes => {
 exports.parseAuthorizationResponse = parseAuthorizationResponse;
 const processPidPresentationAndCreateAuthzResponse = async _ref2 => {
   let {
-    requestObject,
+    evaluatedDcqlQuery,
     issuerConfig,
-    evaluatedDcqlQuery
+    requestObject
   } = _ref2;
   const remotePresentation = await _v.RemotePresentation.prepareRemotePresentations(evaluatedDcqlQuery, {
     clientId: requestObject.client_id,
@@ -213,21 +213,21 @@ const processPidPresentationAndCreateAuthzResponse = async _ref2 => {
     };
   }, {});
   return (0, _ioWalletOid4vp.createAuthorizationResponse)({
+    callbacks: {
+      encryptJwe: _callbacks.partialCallbacks.encryptJwe,
+      generateRandom: _callbacks.partialCallbacks.generateRandom
+    },
     // The SDK 1.4 config is used here in order to resolve the encryption data from the Request Object
     // client_metadata, otherwise OpenID Federation clients always ignore client_metadata as per 1.3.3 specs.
     config: _config.sdkConfigV1_4,
     requestObject,
     rpJwks: {
+      encrypted_response_enc_values_supported: issuerConfig.encrypted_response_enc_values_supported,
       jwks: {
         keys: issuerConfig.keys
-      },
-      encrypted_response_enc_values_supported: issuerConfig.encrypted_response_enc_values_supported
+      }
     },
-    vp_token,
-    callbacks: {
-      encryptJwe: _callbacks.partialCallbacks.encryptJwe,
-      generateRandom: _callbacks.partialCallbacks.generateRandom
-    }
+    vp_token
   });
 };
 //# sourceMappingURL=03-complete-user-authorization.js.map