@pagopa/io-react-native-wallet 3.6.3 → 3.7.0

package/lib/commonjs/key-attestation/api/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","_interopRequireWildcard","require","_jwk","_zod2","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","Status","object","status_list","idx","number","uri","string","DecodedKeyAttestation","attested_keys","array","JWK","exp","UnixTime","iat","iss","key_storage","status","user_authentication","exports"],"sourceRoot":"../../../../src","sources":["key-attestation/api/types.ts"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AAEA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AAA2C,SAAAG,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAL,wBAAAS,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAE3C,MAAMW,MAAM,GAAG3B,CAAC,CAAC4B,MAAM,CAAC;EACtBC,WAAW,EAAE7B,CAAC,CAAC4B,MAAM,CAAC;IACpBE,GAAG,EAAE9B,CAAC,CAAC+B,MAAM,CAAC,CAAC;IACfC,GAAG,EAAEhC,CAAC,CAACiC,MAAM,CAAC;EAChB,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEO,MAAMC,qBAAqB,GAAGlC,CAAC,CAAC4B,MAAM,CAAC;EAC5CO,aAAa,EAAEnC,CAAC,CAACoC,KAAK,CAACC,QAAG,CAAC;EAC3BC,GAAG,EAAEC,cAAQ;EACbC,GAAG,EAAED,cAAQ;EACbE,GAAG,EAAEzC,CAAC,CAACiC,MAAM,CAAC,CAAC;EACfS,WAAW,EAAE1C,CAAC,CAACoC,KAAK,CAACpC,CAAC,CAACiC,MAAM,CAAC,CAAC,CAAC;EAChCU,MAAM,EAAEhB,MAAM;EACdiB,mBAAmB,EAAE5C,CAAC,CAACoC,KAAK,CAACpC,CAAC,CAACiC,MAAM,CAAC,CAAC;AACzC,CAAC,CAAC;AAACY,OAAA,CAAAX,qBAAA,GAAAA,qBAAA"}

package/lib/commonjs/{wallet-unit-attestation → key-attestation}/index.js

@@ -6,15 +6,15 @@ Object.defineProperty(exports, "__esModule", {
 Object.defineProperty(exports, "V1_0_0", {
   enumerable: true,
   get: function () {
-    return _v.WalletUnitAttestation;
+    return _v.KeyAttestation;
   }
 });
-Object.defineProperty(exports, "V1_3_3", {
+Object.defineProperty(exports, "V1_4_6", {
   enumerable: true,
   get: function () {
-    return _v2.WalletUnitAttestation;
+    return _v2.KeyAttestation;
   }
 });
 var _v = require("./v1.0.0");
-var _v2 = require("./v1.3.3");
+var _v2 = require("./v1.4.6");
 //# sourceMappingURL=index.js.map

package/lib/commonjs/key-attestation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_v","require","_v2"],"sourceRoot":"../../../src","sources":["key-attestation/index.ts"],"mappings":";;;;;;;;;;;;;;;;;AACA,IAAAA,EAAA,GAAAC,OAAA;AACA,IAAAC,GAAA,GAAAD,OAAA"}

package/lib/commonjs/key-attestation/v1.0.0/index.js

@@ -0,0 +1,11 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.KeyAttestation = void 0;
+const KeyAttestation = {
+  isSupported: false
+};
+exports.KeyAttestation = KeyAttestation;
+//# sourceMappingURL=index.js.map

package/lib/commonjs/key-attestation/v1.0.0/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["KeyAttestation","isSupported","exports"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.0.0/index.ts"],"mappings":";;;;;;AAEO,MAAMA,cAAiC,GAAG;EAC/CC,WAAW,EAAE;AACf,CAAC;AAACC,OAAA,CAAAF,cAAA,GAAAA,cAAA"}

package/lib/commonjs/{wallet-unit-attestation/v1.3.3 → key-attestation/v1.4.6}/index.js

@@ -3,15 +3,15 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.WalletUnitAttestation = void 0;
+exports.KeyAttestation = void 0;
 var _mappers = require("../../utils/mappers");
-var _utils = require("./utils");
-var _mappers2 = require("./mappers");
 var _issuing = require("./issuing");
-const WalletUnitAttestation = {
-  isSupported: true,
+var _mappers2 = require("./mappers");
+var _utils = require("./utils");
+const KeyAttestation = {
+  decode: (0, _mappers.withMapper)(_mappers2.mapToDecodedKeyAttestation, _utils.decode),
   getAttestation: _issuing.getAttestation,
-  decode: (0, _mappers.withMapper)(_mappers2.mapToDecodedWalletUnitAttestation, _utils.decode)
+  isSupported: true
 };
-exports.WalletUnitAttestation = WalletUnitAttestation;
+exports.KeyAttestation = KeyAttestation;
 //# sourceMappingURL=index.js.map

package/lib/commonjs/key-attestation/v1.4.6/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_mappers","require","_issuing","_mappers2","_utils","KeyAttestation","decode","withMapper","mapToDecodedKeyAttestation","getAttestation","isSupported","exports"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/index.ts"],"mappings":";;;;;;AAEA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AAEO,MAAMI,cAAiC,GAAG;EAC/CC,MAAM,EAAE,IAAAC,mBAAU,EAACC,oCAA0B,EAAEF,aAAM,CAAC;EACtDG,cAAc,EAAdA,uBAAc;EACdC,WAAW,EAAE;AACf,CAAC;AAACC,OAAA,CAAAN,cAAA,GAAAA,cAAA"}

package/lib/commonjs/{wallet-unit-attestation/v1.3.3 → key-attestation/v1.4.6}/issuing.js

@@ -4,12 +4,12 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.getAttestation = void 0;
-var _reactNative = require("react-native");
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
-var _logging = require("../../utils/logging");
+var _reactNative = require("react-native");
 var _client = require("../../client");
-var _jwk = require("../../utils/jwk");
 var _errors = require("../../utils/errors");
+var _jwk = require("../../utils/jwk");
+var _logging = require("../../utils/logging");
 var _types = require("./types");
 /**
  * Create a Key Attestation Request in JWT format for the provided key.
@@ -19,25 +19,25 @@ var _types = require("./types");
  */
 const createKeyAttestationRequest = async (challenge, cryptoContext) => {
   const {
-    success,
-    attestation
+    attestation,
+    success
   } = await cryptoContext.generateKeyWithAttestation(challenge);
   if (!success) {
-    throw new _errors.IoWalletError("generateKeyWithAttestation failed to generate a cryptographic key for the Wallet Unit Attestation request");
+    throw new _errors.IoWalletError("generateKeyWithAttestation failed to generate a cryptographic key for the Key Attestation request");
   }
   if (_reactNative.Platform.OS === "android" && !attestation) {
-    throw new _errors.IoWalletError("Missing key attestation: on Android the generated key must have a key attestation to request a Wallet Unit Attestation");
+    throw new _errors.IoWalletError("Missing Android key attestation: the generated key pair must be hardware-backed");
   }
   const publicKey = _jwk.JWK.parse(await cryptoContext.getPublicKey());
   const requestJwt = await new _ioReactNativeJwt.SignJWT(cryptoContext).setPayload({
+    cnf: {
+      jwk: (0, _jwk.fixBase64EncodingOnKey)(publicKey)
+    },
     wscd_key_attestation: {
       storage_type: "LOCAL_NATIVE",
       ...(attestation && {
         attestation
       })
-    },
-    cnf: {
-      jwk: (0, _jwk.fixBase64EncodingOnKey)(publicKey)
     }
   }).setProtectedHeader({
     kid: publicKey.kid,
@@ -45,8 +45,8 @@ const createKeyAttestationRequest = async (challenge, cryptoContext) => {
   }).setIssuedAt().setExpirationTime("1h").sign();
   return {
     cryptoContext,
-    publicKey,
-    keyAttestationRequestJwt: requestJwt
+    keyAttestationRequestJwt: requestJwt,
+    publicKey
   };
 };
 const getAttestation = async (_ref, _ref2) => {
@@ -56,16 +56,16 @@ const getAttestation = async (_ref, _ref2) => {
     walletSolutionVersion
   } = _ref;
   let {
-    keysToAttest: keysToAttestContexts,
+    appFetch = fetch,
     integrityContext,
-    appFetch = fetch
+    keysToAttest: keysToAttestContexts
   } = _ref2;
   if (keysToAttestContexts.length === 0) {
     throw new _errors.IoWalletError("At least one key to attest must be provided");
   }
   const api = (0, _client.getWalletProviderClient)({
-    walletProviderBaseUrl,
-    appFetch
+    appFetch,
+    walletProviderBaseUrl
   });
   const {
     nonce
@@ -75,43 +75,46 @@ const getAttestation = async (_ref, _ref2) => {
 
   // Use the first key to attest to sign the WUA Request JWT
   const signatureKey = keysToAttest.at(0);
+  if (!signatureKey) {
+    throw new _errors.IoWalletError("No signature key available for signing the WUA request");
+  }
   const hardwareKeyTag = integrityContext.getHardwareKeyTag();
   const clientData = {
     challenge: nonce,
     jwk_thumbprints: await Promise.all(keysToAttest.map(k => (0, _ioReactNativeJwt.thumbprint)(k.publicKey)))
   };
   const {
-    signature,
-    authenticatorData
+    authenticatorData,
+    signature
   } = await integrityContext.getHardwareSignatureWithAuthData(JSON.stringify(clientData));
   const signedAttestationRequest = await new _ioReactNativeJwt.SignJWT(signatureKey.cryptoContext).setPayload({
-    nonce,
+    cnf: {
+      jwk: (0, _jwk.fixBase64EncodingOnKey)(signatureKey.publicKey)
+    },
     hardware_key_tag: hardwareKeyTag,
-    iss: hardwareKeyTag,
-    keys_to_attest: keysToAttest.map(k => k.keyAttestationRequestJwt),
     hardware_signature: signature,
     integrity_assertion: authenticatorData,
+    iss: hardwareKeyTag,
+    keys_to_attest: keysToAttest.map(k => k.keyAttestationRequestJwt),
+    nonce,
     platform: _reactNative.Platform.OS,
     wallet_solution_id: walletSolutionId,
-    wallet_solution_version: walletSolutionVersion,
-    cnf: {
-      jwk: (0, _jwk.fixBase64EncodingOnKey)(signatureKey.publicKey)
-    }
+    wallet_solution_version: walletSolutionVersion
   }).setProtectedHeader({
     kid: signatureKey.publicKey.kid,
     typ: "wua-request+jwt"
   }).setIssuedAt().setExpirationTime("1h").sign();
   _logging.Logger.log(_logging.LogLevel.DEBUG, `Signed attestation request: ${signedAttestationRequest}`);
   const response = await api.post("/key-attestations", {
+    body: signedAttestationRequest,
     header: {
       "Content-Type": "text/plain"
-    },
-    body: signedAttestationRequest
-  }).then(_types.WalletUnitAttestationResponse.parse);
-  _logging.Logger.log(_logging.LogLevel.DEBUG, `Obtained Wallet Unit Attestation: ${response.key_attestation}`);
+    }
+  }).then(_types.KeyAttestationResponse.parse);
+  _logging.Logger.log(_logging.LogLevel.DEBUG, `Obtained Key Attestation: ${response.key_attestation}`);
   return {
-    format: "jwt",
-    attestation: response.key_attestation
+    attestation: response.key_attestation,
+    format: "jwt"
   };
 };
 exports.getAttestation = getAttestation;

package/lib/commonjs/key-attestation/v1.4.6/issuing.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_ioReactNativeJwt","require","_reactNative","_client","_errors","_jwk","_logging","_types","createKeyAttestationRequest","challenge","cryptoContext","attestation","success","generateKeyWithAttestation","IoWalletError","Platform","OS","publicKey","JWK","parse","getPublicKey","requestJwt","SignJWT","setPayload","cnf","jwk","fixBase64EncodingOnKey","wscd_key_attestation","storage_type","setProtectedHeader","kid","typ","setIssuedAt","setExpirationTime","sign","keyAttestationRequestJwt","getAttestation","_ref","_ref2","walletProviderBaseUrl","walletSolutionId","walletSolutionVersion","appFetch","fetch","integrityContext","keysToAttest","keysToAttestContexts","length","api","getWalletProviderClient","nonce","get","Logger","log","LogLevel","DEBUG","Promise","all","map","signatureKey","at","hardwareKeyTag","getHardwareKeyTag","clientData","jwk_thumbprints","k","thumbprint","authenticatorData","signature","getHardwareSignatureWithAuthData","JSON","stringify","signedAttestationRequest","hardware_key_tag","hardware_signature","integrity_assertion","iss","keys_to_attest","platform","wallet_solution_id","wallet_solution_version","response","post","body","header","then","KeyAttestationResponse","key_attestation","format","exports"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/issuing.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAKA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,IAAA,GAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,MAAA,GAAAN,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMO,2BAA2B,GAAG,MAAAA,CAClCC,SAAiB,EACjBC,aAA0C,KACvC;EACH,MAAM;IAAEC,WAAW;IAAEC;EAAQ,CAAC,GAC5B,MAAMF,aAAa,CAACG,0BAA0B,CAACJ,SAAS,CAAC;EAE3D,IAAI,CAACG,OAAO,EAAE;IACZ,MAAM,IAAIE,qBAAa,CACrB,mGACF,CAAC;EACH;EAEA,IAAIC,qBAAQ,CAACC,EAAE,KAAK,SAAS,IAAI,CAACL,WAAW,EAAE;IAC7C,MAAM,IAAIG,qBAAa,CACrB,iFACF,CAAC;EACH;EAEA,MAAMG,SAAS,GAAGC,QAAG,CAACC,KAAK,CAAC,MAAMT,aAAa,CAACU,YAAY,CAAC,CAAC,CAAC;EAE/D,MAAMC,UAAU,GAAG,MAAM,IAAIC,yBAAO,CAACZ,aAAa,CAAC,CAChDa,UAAU,CAAC;IACVC,GAAG,EAAE;MACHC,GAAG,EAAE,IAAAC,2BAAsB,EAACT,SAAS;IACvC,CAAC;IACDU,oBAAoB,EAAE;MACpBC,YAAY,EAAE,cAAc;MAC5B,IAAIjB,WAAW,IAAI;QAAEA;MAAY,CAAC;IACpC;EACF,CAAC,CAAC,CACDkB,kBAAkB,CAAC;IAClBC,GAAG,EAAEb,SAAS,CAACa,GAAG;IAClBC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,WAAW,CAAC,CAAC,CACbC,iBAAiB,CAAC,IAAI,CAAC,CACvBC,IAAI,CAAC,CAAC;EAET,OAAO;IAAExB,aAAa;IAAEyB,wBAAwB,EAAEd,UAAU;IAAEJ;EAAU,CAAC;AAC3E,CAAC;AAEM,MAAMmB,cAA4D,GACvE,MAAAA,CAAAC,IAAA,EAAAC,KAAA,KAGK;EAAA,IAFH;IAAEC,qBAAqB;IAAEC,gBAAgB;IAAEC;EAAsB,CAAC,GAAAJ,IAAA;EAAA,IAClE;IAAEK,QAAQ,GAAGC,KAAK;IAAEC,gBAAgB;IAAEC,YAAY,EAAEC;EAAqB,CAAC,GAAAR,KAAA;EAE1E,IAAIQ,oBAAoB,CAACC,MAAM,KAAK,CAAC,EAAE;IACrC,MAAM,IAAIjC,qBAAa,CAAC,6CAA6C,CAAC;EACxE;EAEA,MAAMkC,GAAG,GAAG,IAAAC,+BAAuB,EAAC;IAAEP,QAAQ;IAAEH;EAAsB,CAAC,CAAC;EAExE,MAAM;IAAEW;EAAM,CAAC,GAAG,MAAMF,GAAG,CAACG,GAAG,CAAC,QAAQ,CAAC;EACzCC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,2BAA0BhB,qBAAsB,KAAIW,KAAM,EAC7D,CAAC;EAED,MAAML,YAAY,GAAG,MAAMW,OAAO,CAACC,GAAG,CACpCX,oBAAoB,CAACY,GAAG,CAAEhD,aAAa,IACrCF,2BAA2B,CAAC0C,KAAK,EAAExC,aAAa,CAClD,CACF,CAAC;;EAED;EACA,MAAMiD,YAAY,GAAGd,YAAY,CAACe,EAAE,CAAC,CAAC,CAAC;EAEvC,IAAI,CAACD,YAAY,EAAE;IACjB,MAAM,IAAI7C,qBAAa,CACrB,wDACF,CAAC;EACH;EAEA,MAAM+C,cAAc,GAAGjB,gBAAgB,CAACkB,iBAAiB,CAAC,CAAC;EAE3D,MAAMC,UAAU,GAAG;IACjBtD,SAAS,EAAEyC,KAAK;IAChBc,eAAe,EAAE,MAAMR,OAAO,CAACC,GAAG,CAChCZ,YAAY,CAACa,GAAG,CAAEO,CAAC,IAAK,IAAAC,4BAAU,EAACD,CAAC,CAAChD,SAAS,CAAC,CACjD;EACF,CAAC;EAED,MAAM;IAAEkD,iBAAiB;IAAEC;EAAU,CAAC,GACpC,MAAMxB,gBAAgB,CAACyB,gCAAgC,CACrDC,IAAI,CAACC,SAAS,CAACR,UAAU,CAC3B,CAAC;EAEH,MAAMS,wBAAwB,GAAG,MAAM,IAAIlD,yBAAO,CAChDqC,YAAY,CAACjD,aACf,CAAC,CACEa,UAAU,CAAC;IACVC,GAAG,EAAE;MACHC,GAAG,EAAE,IAAAC,2BAAsB,EAACiC,YAAY,CAAC1C,SAAS;IACpD,CAAC;IACDwD,gBAAgB,EAAEZ,cAAc;IAChCa,kBAAkB,EAAEN,SAAS;IAC7BO,mBAAmB,EAAER,iBAAiB;IACtCS,GAAG,EAAEf,cAAc;IACnBgB,cAAc,EAAEhC,YAAY,CAACa,GAAG,CAAEO,CAAC,IAAKA,CAAC,CAAC9B,wBAAwB,CAAC;IACnEe,KAAK;IACL4B,QAAQ,EAAE/D,qBAAQ,CAACC,EAAE;IACrB+D,kBAAkB,EAAEvC,gBAAgB;IACpCwC,uBAAuB,EAAEvC;EAC3B,CAAC,CAAC,CACDZ,kBAAkB,CAAC;IAClBC,GAAG,EAAE6B,YAAY,CAAC1C,SAAS,CAACa,GAAG;IAC/BC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,WAAW,CAAC,CAAC,CACbC,iBAAiB,CAAC,IAAI,CAAC,CACvBC,IAAI,CAAC,CAAC;EAETkB,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,+BAA8BiB,wBAAyB,EAC1D,CAAC;EAED,MAAMS,QAAQ,GAAG,MAAMjC,GAAG,CACvBkC,IAAI,CAAC,mBAAmB,EAAE;IACzBC,IAAI,EAAEX,wBAAwB;IAC9BY,MAAM,EAAE;MACN,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACDC,IAAI,CAACC,6BAAsB,CAACnE,KAAK,CAAC;EAErCiC,eAAM,CAACC,GAAG,CACRC,iBAAQ,CAACC,KAAK,EACb,6BAA4B0B,QAAQ,CAACM,eAAgB,EACxD,CAAC;EAED,OAAO;IACL5E,WAAW,EAAEsE,QAAQ,CAACM,eAAe;IACrCC,MAAM,EAAE;EACV,CAAC;AACH,CAAC;AAACC,OAAA,CAAArD,cAAA,GAAAA,cAAA"}

package/lib/commonjs/key-attestation/v1.4.6/mappers.js

@@ -0,0 +1,13 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.mapToDecodedKeyAttestation = void 0;
+var _mappers = require("../../utils/mappers");
+var _types = require("../api/types");
+const mapToDecodedKeyAttestation = (0, _mappers.createMapper)(x => x.payload, {
+  outputSchema: _types.DecodedKeyAttestation
+});
+exports.mapToDecodedKeyAttestation = mapToDecodedKeyAttestation;
+//# sourceMappingURL=mappers.js.map

package/lib/commonjs/key-attestation/v1.4.6/mappers.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_mappers","require","_types","mapToDecodedKeyAttestation","createMapper","x","payload","outputSchema","DecodedKeyAttestation","exports"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/mappers.ts"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAGO,MAAME,0BAA0B,GAAG,IAAAC,qBAAY,EAGnDC,CAAC,IAAKA,CAAC,CAACC,OAAO,EAAE;EAClBC,YAAY,EAAEC;AAChB,CAAC,CAAC;AAACC,OAAA,CAAAN,0BAAA,GAAAA,0BAAA"}

package/lib/commonjs/{wallet-unit-attestation/v1.3.3 → key-attestation/v1.4.6}/types.js

@@ -3,21 +3,21 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.WalletUnitAttestationResponse = exports.WalletUnitAttestationJwt = void 0;
+exports.KeyAttestationResponse = exports.KeyAttestationJwt = void 0;
 var z = _interopRequireWildcard(require("zod"));
 var _types = require("../../wallet-instance-attestation/common/types");
 var _types2 = require("../api/types");
 function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
 function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-const WalletUnitAttestationJwt = z.object({
+const KeyAttestationJwt = z.object({
   header: z.intersection(_types.Jwt.shape.header, z.object({
     typ: z.literal("key-attestation+jwt")
   })),
-  payload: _types2.DecodedWalletUnitAttestation // The payload type matches the public API
+  payload: _types2.DecodedKeyAttestation // The payload type matches the public API
 });
-exports.WalletUnitAttestationJwt = WalletUnitAttestationJwt;
-const WalletUnitAttestationResponse = z.object({
+exports.KeyAttestationJwt = KeyAttestationJwt;
+const KeyAttestationResponse = z.object({
   key_attestation: z.string()
 });
-exports.WalletUnitAttestationResponse = WalletUnitAttestationResponse;
+exports.KeyAttestationResponse = KeyAttestationResponse;
 //# sourceMappingURL=types.js.map

package/lib/commonjs/key-attestation/v1.4.6/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","_interopRequireWildcard","require","_types","_types2","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","KeyAttestationJwt","object","header","intersection","Jwt","shape","typ","literal","payload","DecodedKeyAttestation","exports","KeyAttestationResponse","key_attestation","string"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/types.ts"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AAEA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAAqD,SAAAG,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAL,wBAAAS,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAG9C,MAAMW,iBAAiB,GAAG3B,CAAC,CAAC4B,MAAM,CAAC;EACxCC,MAAM,EAAE7B,CAAC,CAAC8B,YAAY,CACpBC,UAAG,CAACC,KAAK,CAACH,MAAM,EAChB7B,CAAC,CAAC4B,MAAM,CAAC;IACPK,GAAG,EAAEjC,CAAC,CAACkC,OAAO,CAAC,qBAAqB;EACtC,CAAC,CACH,CAAC;EACDC,OAAO,EAAEC,6BAAqB,CAAE;AAClC,CAAC,CAAC;AAACC,OAAA,CAAAV,iBAAA,GAAAA,iBAAA;AAGI,MAAMW,sBAAsB,GAAGtC,CAAC,CAAC4B,MAAM,CAAC;EAC7CW,eAAe,EAAEvC,CAAC,CAACwC,MAAM,CAAC;AAC5B,CAAC,CAAC;AAACH,OAAA,CAAAC,sBAAA,GAAAA,sBAAA"}

package/lib/commonjs/{wallet-unit-attestation/v1.3.3 → key-attestation/v1.4.6}/utils.js

@@ -7,12 +7,12 @@ exports.decode = decode;
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
 var _types = require("./types");
 /**
- * Decode a given JWT to get the parsed Wallet Unit Attestation object they define.
+ * Decode a given JWT to get the parsed Key Attestation object they define.
  * It ensures the provided data is in a valid shape, but it DOES NOT verify the signature.
  */
 function decode(token) {
   const decodedJwt = (0, _ioReactNativeJwt.decode)(token);
-  return _types.WalletUnitAttestationJwt.parse({
+  return _types.KeyAttestationJwt.parse({
     header: decodedJwt.protectedHeader,
     payload: decodedJwt.payload
   });

package/lib/commonjs/key-attestation/v1.4.6/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_ioReactNativeJwt","require","_types","decode","token","decodedJwt","decodeJwt","KeyAttestationJwt","parse","header","protectedHeader","payload"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/utils.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AAEA,IAAAC,MAAA,GAAAD,OAAA;AAEA;AACA;AACA;AACA;AACO,SAASE,MAAMA,CAACC,KAAa,EAAqB;EACvD,MAAMC,UAAU,GAAG,IAAAC,wBAAS,EAACF,KAAK,CAAC;EACnC,OAAOG,wBAAiB,CAACC,KAAK,CAAC;IAC7BC,MAAM,EAAEJ,UAAU,CAACK,eAAe;IAClCC,OAAO,EAAEN,UAAU,CAACM;EACtB,CAAC,CAAC;AACJ"}

package/lib/commonjs/mdoc/index.js

@@ -9,11 +9,11 @@ var _exportNames = {
 };
 exports.verify = exports.prepareVpTokenMdoc = void 0;
 var _ioReactNativeIso = require("@pagopa/io-react-native-iso18013");
+var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
 var _jsrsasign = require("jsrsasign");
 var _errors = require("../trust/common/errors");
-var _errors2 = require("../utils/errors");
 var _crypto = require("../utils/crypto");
-var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
+var _errors2 = require("../utils/errors");
 var _x = require("../utils/x509");
 var _utils = require("./utils");
 Object.keys(_utils).forEach(function (key) {
@@ -44,8 +44,13 @@ const verify = async (token, x509CertRoot) => {
   if (!coseSign1) {
     throw new _errors2.IoWalletError("Missing coseSign1");
   }
+  const firstCert = x5chain[0];
+  if (!firstCert) {
+    throw new _errors2.IoWalletError("x5chain is empty, cannot verify signature");
+  }
+
   // Once the x5chain is verified, the signatures verification can be performed
-  await verifyMdocSignature(coseSign1, x5chain[0]);
+  await verifyMdocSignature(coseSign1, firstCert);
   return {
     issuerSigned
   };
@@ -62,6 +67,9 @@ exports.verify = verify;
 const verifyMdocSignature = async (coseSign1, cert) => {
   const pemcert = (0, _crypto.convertBase64DerToPem)(cert);
   const jwk = (0, _crypto.getSigninJwkFromCert)(pemcert);
+  if (!jwk.x || !jwk.y) {
+    throw new _errors2.IoWalletError("Missing x or y coordinate in the certificate's public key");
+  }
   jwk.x = (0, _jsrsasign.b64utob64)(jwk.x);
   jwk.y = (0, _jsrsasign.b64utob64)(jwk.y);
   const signatureCorrect = await _ioReactNativeIso.COSE.verify(coseSign1, jwk);
@@ -71,9 +79,9 @@ const prepareVpTokenMdoc = async (requestNonce, generatedNonce, clientId, respon
   let [verifiableCredential, presentationFrame] = _ref;
   /* verifiableCredential is a IssuerSigned structure */
   const documents = [{
-    issuerSignedContent: (0, _jsrsasign.b64utob64)(verifiableCredential),
     alias: keyTag,
-    docType
+    docType,
+    issuerSignedContent: (0, _jsrsasign.b64utob64)(verifiableCredential)
   }];
 
   /* clientId,responseUri,requestNonce are retrieved by Auth Request Object */

package/lib/commonjs/mdoc/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeIso","require","_jsrsasign","_errors","_errors2","_crypto","_ioReactNativeJwt","_x","_utils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","verify","token","x509CertRoot","_issuerSigned$issuerA","issuerSigned","CBOR","decodeIssuerSigned","IoWalletError","issuerAuth","unprotectedHeader","x5chain","Array","isArray","length","MissingX509CertsError","map","b64utob64","verifyX509Chain","coseSign1","rawValue","verifyMdocSignature","cert","pemcert","convertBase64DerToPem","jwk","getSigninJwkFromCert","x","y","signatureCorrect","COSE","Error","prepareVpTokenMdoc","requestNonce","generatedNonce","clientId","responseUri","docType","keyTag","_ref","verifiableCredential","presentationFrame","documents","issuerSignedContent","alias","vp_token","ISO18013_7","generateOID4VPDeviceResponse","removePadding"],"sourceRoot":"../../../src","sources":["mdoc/index.ts"],"mappings":";;;;;;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAEA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AAEA,IAAAK,iBAAA,GAAAL,OAAA;AACA,IAAAM,EAAA,GAAAN,OAAA;AACA,IAAAO,MAAA,GAAAP,OAAA;AAAAQ,MAAA,CAAAC,IAAA,CAAAF,MAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,MAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,MAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAEO,MAAMS,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,YAAoB,KAC6B;EAAA,IAAAC,qBAAA;EACjD;EACA,MAAMC,YAAY,GAAG,MAAMC,sBAAI,CAACC,kBAAkB,CAACL,KAAK,CAAC;EAEzD,IAAI,CAACG,YAAY,EAAE;IACjB,MAAM,IAAIG,sBAAa,CAAC,cAAc,CAAC;EACzC;EAEA,IACE,GAAAJ,qBAAA,GAACC,YAAY,CAACI,UAAU,CAACC,iBAAiB,cAAAN,qBAAA,eAAzCA,qBAAA,CAA2CO,OAAO,MAClD,CAACC,KAAK,CAACC,OAAO,CAACR,YAAY,CAACI,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAAC,IAChEN,YAAY,CAACI,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACG,MAAM,KAAK,CAAC,CAAC,EACjE;IACA,MAAM,IAAIC,6BAAqB,CAAC,2BAA2B,CAAC;EAC9D;EACA,MAAMJ,OAAO,GACXN,YAAY,CAACI,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACK,GAAG,CAACC,oBAAS,CAAC;EAClE;EACA,MAAM,IAAAC,kBAAe,EAACP,OAAO,EAAER,YAAY,CAAC;EAE5C,MAAMgB,SAAS,GAAGd,YAAY,CAACI,UAAU,CAACW,QAAQ;EAElD,IAAI,CAACD,SAAS,EAAE;IACd,MAAM,IAAIX,sBAAa,CAAC,mBAAmB,CAAC;EAC9C;EACA;EACA,MAAMa,mBAAmB,CAACF,SAAS,EAAER,OAAO,CAAC,CAAC,CAAE,CAAC;EAEjD,OAAO;IAAEN;EAAa,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AANAR,OAAA,CAAAI,MAAA,GAAAA,MAAA;AAOA,MAAMoB,mBAAmB,GAAG,MAAAA,CAAOF,SAAiB,EAAEG,IAAY,KAAK;EACrE,MAAMC,OAAO,GAAG,IAAAC,6BAAqB,EAACF,IAAI,CAAC;EAC3C,MAAMG,GAAG,GAAG,IAAAC,4BAAoB,EAACH,OAAO,CAAC;EAEzCE,GAAG,CAACE,CAAC,GAAG,IAAAV,oBAAS,EAACQ,GAAG,CAACE,CAAE,CAAC;EACzBF,GAAG,CAACG,CAAC,GAAG,IAAAX,oBAAS,EAACQ,GAAG,CAACG,CAAE,CAAC;EAEzB,MAAMC,gBAAgB,GAAG,MAAMC,sBAAI,CAAC7B,MAAM,CAACkB,SAAS,EAAEM,GAAgB,CAAC;EAEvE,IAAI,CAACI,gBAAgB,EAAE,MAAM,IAAIE,KAAK,CAAC,wBAAwB,CAAC;AAClE,CAAC;AAEM,MAAMC,kBAAkB,GAAG,MAAAA,CAChCC,YAAoB,EACpBC,cAAsB,EACtBC,QAAgB,EAChBC,WAAmB,EACnBC,OAAe,EACfC,MAAc,EAAAC,IAAA,KAIV;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,CAAe,GAAAF,IAAA;EAIvD;EACA,MAAMG,SAAS,GAAG,CAChB;IACEC,mBAAmB,EAAE,IAAA1B,oBAAS,EAACuB,oBAAoB,CAAC;IACpDI,KAAK,EAAEN,MAAM;IACbD;EACF,CAAC,CACF;;EAED;EACA;EACA,MAAMQ,QAAQ,GAAG,MAAMC,4BAAU,CAACC,4BAA4B,CAC5DZ,QAAQ,EACRC,WAAW,EACXH,YAAY,EACZC,cAAc,EACdQ,SAAS,EACTD,iBACF,CAAC;EAED,OAAO;IACLI,QAAQ,EAAE,IAAAG,+BAAa,EAACH,QAAQ;EAClC,CAAC;AACH,CAAC;AAAChD,OAAA,CAAAmC,kBAAA,GAAAA,kBAAA"}
+{"version":3,"names":["_ioReactNativeIso","require","_ioReactNativeJwt","_jsrsasign","_errors","_crypto","_errors2","_x","_utils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","verify","token","x509CertRoot","_issuerSigned$issuerA","issuerSigned","CBOR","decodeIssuerSigned","IoWalletError","issuerAuth","unprotectedHeader","x5chain","Array","isArray","length","MissingX509CertsError","map","b64utob64","verifyX509Chain","coseSign1","rawValue","firstCert","verifyMdocSignature","cert","pemcert","convertBase64DerToPem","jwk","getSigninJwkFromCert","x","y","signatureCorrect","COSE","Error","prepareVpTokenMdoc","requestNonce","generatedNonce","clientId","responseUri","docType","keyTag","_ref","verifiableCredential","presentationFrame","documents","alias","issuerSignedContent","vp_token","ISO18013_7","generateOID4VPDeviceResponse","removePadding"],"sourceRoot":"../../../src","sources":["mdoc/index.ts"],"mappings":";;;;;;;;;;AACA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AAIA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,EAAA,GAAAN,OAAA;AACA,IAAAO,MAAA,GAAAP,OAAA;AAAAQ,MAAA,CAAAC,IAAA,CAAAF,MAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,MAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,MAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAEO,MAAMS,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,YAAoB,KAC6B;EAAA,IAAAC,qBAAA;EACjD;EACA,MAAMC,YAAY,GAAG,MAAMC,sBAAI,CAACC,kBAAkB,CAACL,KAAK,CAAC;EAEzD,IAAI,CAACG,YAAY,EAAE;IACjB,MAAM,IAAIG,sBAAa,CAAC,cAAc,CAAC;EACzC;EAEA,IACE,GAAAJ,qBAAA,GAACC,YAAY,CAACI,UAAU,CAACC,iBAAiB,cAAAN,qBAAA,eAAzCA,qBAAA,CAA2CO,OAAO,MAClD,CAACC,KAAK,CAACC,OAAO,CAACR,YAAY,CAACI,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAAC,IAChEN,YAAY,CAACI,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACG,MAAM,KAAK,CAAC,CAAC,EACjE;IACA,MAAM,IAAIC,6BAAqB,CAAC,2BAA2B,CAAC;EAC9D;EACA,MAAMJ,OAAO,GACXN,YAAY,CAACI,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACK,GAAG,CAACC,oBAAS,CAAC;EAClE;EACA,MAAM,IAAAC,kBAAe,EAACP,OAAO,EAAER,YAAY,CAAC;EAE5C,MAAMgB,SAAS,GAAGd,YAAY,CAACI,UAAU,CAACW,QAAQ;EAElD,IAAI,CAACD,SAAS,EAAE;IACd,MAAM,IAAIX,sBAAa,CAAC,mBAAmB,CAAC;EAC9C;EAEA,MAAMa,SAAS,GAAGV,OAAO,CAAC,CAAC,CAAC;EAE5B,IAAI,CAACU,SAAS,EAAE;IACd,MAAM,IAAIb,sBAAa,CAAC,2CAA2C,CAAC;EACtE;;EAEA;EACA,MAAMc,mBAAmB,CAACH,SAAS,EAAEE,SAAS,CAAC;EAE/C,OAAO;IAAEhB;EAAa,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AANAR,OAAA,CAAAI,MAAA,GAAAA,MAAA;AAOA,MAAMqB,mBAAmB,GAAG,MAAAA,CAAOH,SAAiB,EAAEI,IAAY,KAAK;EACrE,MAAMC,OAAO,GAAG,IAAAC,6BAAqB,EAACF,IAAI,CAAC;EAC3C,MAAMG,GAAG,GAAG,IAAAC,4BAAoB,EAACH,OAAO,CAAC;EAEzC,IAAI,CAACE,GAAG,CAACE,CAAC,IAAI,CAACF,GAAG,CAACG,CAAC,EAAE;IACpB,MAAM,IAAIrB,sBAAa,CACrB,2DACF,CAAC;EACH;EAEAkB,GAAG,CAACE,CAAC,GAAG,IAAAX,oBAAS,EAACS,GAAG,CAACE,CAAC,CAAC;EACxBF,GAAG,CAACG,CAAC,GAAG,IAAAZ,oBAAS,EAACS,GAAG,CAACG,CAAC,CAAC;EAExB,MAAMC,gBAAgB,GAAG,MAAMC,sBAAI,CAAC9B,MAAM,CAACkB,SAAS,EAAEO,GAAgB,CAAC;EAEvE,IAAI,CAACI,gBAAgB,EAAE,MAAM,IAAIE,KAAK,CAAC,wBAAwB,CAAC;AAClE,CAAC;AAEM,MAAMC,kBAAkB,GAAG,MAAAA,CAChCC,YAAoB,EACpBC,cAAsB,EACtBC,QAAgB,EAChBC,WAAmB,EACnBC,OAAe,EACfC,MAAc,EAAAC,IAAA,KAIV;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,CAAe,GAAAF,IAAA;EAIvD;EACA,MAAMG,SAAS,GAAG,CAChB;IACEC,KAAK,EAAEL,MAAM;IACbD,OAAO;IACPO,mBAAmB,EAAE,IAAA5B,oBAAS,EAACwB,oBAAoB;EACrD,CAAC,CACF;;EAED;EACA;EACA,MAAMK,QAAQ,GAAG,MAAMC,4BAAU,CAACC,4BAA4B,CAC5DZ,QAAQ,EACRC,WAAW,EACXH,YAAY,EACZC,cAAc,EACdQ,SAAS,EACTD,iBACF,CAAC;EAED,OAAO;IACLI,QAAQ,EAAE,IAAAG,+BAAa,EAACH,QAAQ;EAClC,CAAC;AACH,CAAC;AAACjD,OAAA,CAAAoC,kBAAA,GAAAA,kBAAA"}

package/lib/commonjs/mdoc/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeIso","require","_types","_const","getParsedCredentialClaimKey","namespace","key","exports","getVerificationFromParsedCredential","parsedCredential","_parsedCredential$ver","verificationKey","Object","keys","find","endsWith","MDOC_VERIFICATION_IDENTIFIER","verification","value","undefined","Verification","parse","getVerification","token","_flattenedClaims$find","issuerSigned","CBOR","decodeIssuerSigned","flattenedClaims","values","nameSpaces","flat","x","elementIdentifier","elementValue"],"sourceRoot":"../../../src","sources":["mdoc/utils.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAGA,IAAAE,MAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;AACA;AACO,MAAMG,2BAA2B,GAAGA,CAACC,SAAiB,EAAEC,GAAW,KACvE,GAAED,SAAU,IAAGC,GAAI,EAAC;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAC,OAAA,CAAAH,2BAAA,GAAAA,2BAAA;AAQO,MAAMI,mCAAmC,GAC9CC,gBAEqB,IAClB;EAAA,IAAAC,qBAAA;EACH,MAAMC,eAAe,GAAGC,MAAM,CAACC,IAAI,CAACJ,gBAAgB,CAAC,CAACK,IAAI,CAAER,GAAG,IAC7DA,GAAG,CAACS,QAAQ,CAACC,mCAA4B,CAC3C,CAAC;EACD,MAAMC,YAAY,GAAGN,eAAe,IAAAD,qBAAA,GAChCD,gBAAgB,CAACE,eAAe,CAAC,cAAAD,qBAAA,uBAAjCA,qBAAA,CAAmCQ,KAAK,GACxCC,SAAS;EACb,OAAOF,YAAY,GAAGG,mBAAY,CAACC,KAAK,CAACJ,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAZ,OAAA,CAAAC,mCAAA,GAAAA,mCAAA;AAQO,MAAMc,eAAe,GAAG,MAAOC,KAAa,IAAK;EAAA,IAAAC,qBAAA;EACtD,MAAMC,YAAY,GAAG,MAAMC,sBAAI,CAACC,kBAAkB,CAACJ,KAAK,CAAC;EAEzD,MAAMK,eAAe,GAAGhB,MAAM,CAACiB,MAAM,CAACJ,YAAY,CAACK,UAAU,CAAC,CAACC,IAAI,CAAC,CAAC;EAErE,MAAMd,YAAY,GAAGW,eAAe,aAAfA,eAAe,gBAAAJ,qBAAA,GAAfI,eAAe,CAAEd,IAAI,CACvCkB,CAAC,IAAKA,CAAC,CAACC,iBAAiB,KAAKjB,mCACjC,CAAC,cAAAQ,qBAAA,uBAFoBA,qBAAA,CAElBU,YAAY;EAEf,OAAOjB,YAAY,GAAGG,mBAAY,CAACC,KAAK,CAACJ,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC;AAACZ,OAAA,CAAAe,eAAA,GAAAA,eAAA"}
+{"version":3,"names":["_ioReactNativeIso","require","_types","_const","getParsedCredentialClaimKey","namespace","key","exports","getVerificationFromParsedCredential","parsedCredential","_parsedCredential$ver","verificationKey","Object","keys","find","endsWith","MDOC_VERIFICATION_IDENTIFIER","verification","value","undefined","Verification","parse","getVerification","token","_flattenedClaims$find","issuerSigned","CBOR","decodeIssuerSigned","flattenedClaims","values","nameSpaces","flat","x","elementIdentifier","elementValue"],"sourceRoot":"../../../src","sources":["mdoc/utils.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AAKA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;AACA;AACO,MAAMG,2BAA2B,GAAGA,CAACC,SAAiB,EAAEC,GAAW,KACvE,GAAED,SAAU,IAAGC,GAAI,EAAC;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAC,OAAA,CAAAH,2BAAA,GAAAA,2BAAA;AAQO,MAAMI,mCAAmC,GAC9CC,gBAEqB,IAClB;EAAA,IAAAC,qBAAA;EACH,MAAMC,eAAe,GAAGC,MAAM,CAACC,IAAI,CAACJ,gBAAgB,CAAC,CAACK,IAAI,CAAER,GAAG,IAC7DA,GAAG,CAACS,QAAQ,CAACC,mCAA4B,CAC3C,CAAC;EACD,MAAMC,YAAY,GAAGN,eAAe,IAAAD,qBAAA,GAChCD,gBAAgB,CAACE,eAAe,CAAC,cAAAD,qBAAA,uBAAjCA,qBAAA,CAAmCQ,KAAK,GACxCC,SAAS;EACb,OAAOF,YAAY,GAAGG,mBAAY,CAACC,KAAK,CAACJ,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAZ,OAAA,CAAAC,mCAAA,GAAAA,mCAAA;AAQO,MAAMc,eAAe,GAAG,MAAOC,KAAa,IAAK;EAAA,IAAAC,qBAAA;EACtD,MAAMC,YAAY,GAAG,MAAMC,sBAAI,CAACC,kBAAkB,CAACJ,KAAK,CAAC;EAEzD,MAAMK,eAAe,GAAGhB,MAAM,CAACiB,MAAM,CAACJ,YAAY,CAACK,UAAU,CAAC,CAACC,IAAI,CAAC,CAAC;EAErE,MAAMd,YAAY,GAAGW,eAAe,aAAfA,eAAe,gBAAAJ,qBAAA,GAAfI,eAAe,CAAEd,IAAI,CACvCkB,CAAC,IAAKA,CAAC,CAACC,iBAAiB,KAAKjB,mCACjC,CAAC,cAAAQ,qBAAA,uBAFoBA,qBAAA,CAElBU,YAAY;EAEf,OAAOjB,YAAY,GAAGG,mBAAY,CAACC,KAAK,CAACJ,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC;AAACZ,OAAA,CAAAe,eAAA,GAAAA,eAAA"}

package/lib/commonjs/sd-jwt/__test__/types.test.js

@@ -4,27 +4,27 @@ var _types = require("../types");
 describe("Verification.time", () => {
   test.each([["ISO string", "2025-09-09T10:00:00Z"], ["unix seconds", 1752122400], ["unix milliseconds", 1752122400000]])("accepts %s", (_label, time) => {
     const value = {
-      trust_framework: "eidas",
       assurance_level: "high",
       evidence: [{
-        type: "vouch",
-        time,
         attestation: {
-          type: "digital_attestation",
-          reference_number: "abc",
           date_of_issuance: "2025-09-02",
+          reference_number: "abc",
+          type: "digital_attestation",
           voucher: {
             organization: "IPZS"
           }
-        }
-      }]
+        },
+        time,
+        type: "vouch"
+      }],
+      trust_framework: "eidas"
     };
     expect(_types.Verification.safeParse(value).success).toBe(true);
   });
   it("rejects invalid type", () => {
     const value = {
-      trust_framework: ["eidas"],
-      assurance_level: "high"
+      assurance_level: "high",
+      trust_framework: ["eidas"]
     };
     expect(_types.Verification.safeParse(value).success).toBe(false);
   });

package/lib/commonjs/sd-jwt/__test__/types.test.js.map

@@ -1 +1 @@
-{"version":3,"names":["_types","require","describe","test","each","_label","time","value","trust_framework","assurance_level","evidence","type","attestation","reference_number","date_of_issuance","voucher","organization","expect","Verification","safeParse","success","toBe","it"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/types.test.ts"],"mappings":";;AAAA,IAAAA,MAAA,GAAAC,OAAA;AAEAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAClCC,IAAI,CAACC,IAAI,CAAC,CACR,CAAC,YAAY,EAAE,sBAAsB,CAAC,EACtC,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CACrC,CAAC,CAAC,YAAY,EAAE,CAACC,MAAM,EAAEC,IAAI,KAAK;IACjC,MAAMC,KAAK,GAAG;MACZC,eAAe,EAAE,OAAO;MACxBC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEC,IAAI,EAAE,OAAO;QACbL,IAAI;QACJM,WAAW,EAAE;UACXD,IAAI,EAAE,qBAAqB;UAC3BE,gBAAgB,EAAE,KAAK;UACvBC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC;MACF,CAAC;IAEL,CAAC;IAEDC,MAAM,CAACC,mBAAY,CAACC,SAAS,CAACZ,KAAK,CAAC,CAACa,OAAO,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;EAC1D,CAAC,CAAC;EAEFC,EAAE,CAAC,sBAAsB,EAAE,MAAM;IAC/B,MAAMf,KAAK,GAAG;MACZC,eAAe,EAAE,CAAC,OAAO,CAAC;MAC1BC,eAAe,EAAE;IACnB,CAAC;IAEDQ,MAAM,CAACC,mBAAY,CAACC,SAAS,CAACZ,KAAK,CAAC,CAACa,OAAO,CAAC,CAACC,IAAI,CAAC,KAAK,CAAC;EAC3D,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"names":["_types","require","describe","test","each","_label","time","value","assurance_level","evidence","attestation","date_of_issuance","reference_number","type","voucher","organization","trust_framework","expect","Verification","safeParse","success","toBe","it"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/types.test.ts"],"mappings":";;AAAA,IAAAA,MAAA,GAAAC,OAAA;AAEAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAClCC,IAAI,CAACC,IAAI,CAAC,CACR,CAAC,YAAY,EAAE,sBAAsB,CAAC,EACtC,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CACrC,CAAC,CAAC,YAAY,EAAE,CAACC,MAAM,EAAEC,IAAI,KAAK;IACjC,MAAMC,KAAK,GAAG;MACZC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEC,WAAW,EAAE;UACXC,gBAAgB,EAAE,YAAY;UAC9BC,gBAAgB,EAAE,KAAK;UACvBC,IAAI,EAAE,qBAAqB;UAC3BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC,CAAC;QACDT,IAAI;QACJO,IAAI,EAAE;MACR,CAAC,CACF;MACDG,eAAe,EAAE;IACnB,CAAC;IAEDC,MAAM,CAACC,mBAAY,CAACC,SAAS,CAACZ,KAAK,CAAC,CAACa,OAAO,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;EAC1D,CAAC,CAAC;EAEFC,EAAE,CAAC,sBAAsB,EAAE,MAAM;IAC/B,MAAMf,KAAK,GAAG;MACZC,eAAe,EAAE,MAAM;MACvBQ,eAAe,EAAE,CAAC,OAAO;IAC3B,CAAC;IAEDC,MAAM,CAACC,mBAAY,CAACC,SAAS,CAACZ,KAAK,CAAC,CAACa,OAAO,CAAC,CAACC,IAAI,CAAC,KAAK,CAAC;EAC3D,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/lib/commonjs/sd-jwt/__test__/utils.test.js

@@ -1,12 +1,12 @@
 "use strict";
 
-var _sdJwt = require("../__mocks__/sd-jwt");
 var _ = require("..");
+var _sdJwt = require("../__fixtures__/sd-jwt");
 describe("SD-JWT getVerification", () => {
   it("extracts the verification claims correctly", () => {
     expect((0, _.getVerification)(_sdJwt.pid)).toEqual({
-      trust_framework: "it_cie",
-      assurance_level: "high"
+      assurance_level: "high",
+      trust_framework: "it_cie"
     });
   });
   it("returns undefined when the verification claim is not found", () => {

package/lib/commonjs/sd-jwt/__test__/utils.test.js.map

@@ -1 +1 @@
-{"version":3,"names":["_sdJwt","require","_","describe","it","expect","getVerification","pid","toEqual","trust_framework","assurance_level","legacyPid","toBeUndefined"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/utils.test.ts"],"mappings":";;AAAA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,CAAA,GAAAD,OAAA;AAEAE,QAAQ,CAAC,wBAAwB,EAAE,MAAM;EACvCC,EAAE,CAAC,4CAA4C,EAAE,MAAM;IACrDC,MAAM,CAAC,IAAAC,iBAAe,EAACC,UAAG,CAAC,CAAC,CAACC,OAAO,CAAC;MACnCC,eAAe,EAAE,QAAQ;MACzBC,eAAe,EAAE;IACnB,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFN,EAAE,CAAC,4DAA4D,EAAE,MAAM;IACrEC,MAAM,CAAC,IAAAC,iBAAe,EAACK,gBAAS,CAAC,CAAC,CAACC,aAAa,CAAC,CAAC;EACpD,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"names":["_","require","_sdJwt","describe","it","expect","getVerification","pid","toEqual","assurance_level","trust_framework","legacyPid","toBeUndefined"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/utils.test.ts"],"mappings":";;AAAA,IAAAA,CAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAEAE,QAAQ,CAAC,wBAAwB,EAAE,MAAM;EACvCC,EAAE,CAAC,4CAA4C,EAAE,MAAM;IACrDC,MAAM,CAAC,IAAAC,iBAAe,EAACC,UAAG,CAAC,CAAC,CAACC,OAAO,CAAC;MACnCC,eAAe,EAAE,MAAM;MACvBC,eAAe,EAAE;IACnB,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFN,EAAE,CAAC,4DAA4D,EAAE,MAAM;IACrEC,MAAM,CAAC,IAAAC,iBAAe,EAACK,gBAAS,CAAC,CAAC,CAACC,aAAa,CAAC,CAAC;EACpD,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/lib/commonjs/sd-jwt/index.js

@@ -9,9 +9,9 @@ var _exportNames = {
 };
 exports.prepareVpToken = exports.decode = void 0;
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
+var _cryptoNodejs = require("@sd-jwt/crypto-nodejs");
 var _decode = require("@sd-jwt/decode");
 var _present = require("@sd-jwt/present");
-var _cryptoNodejs = require("@sd-jwt/crypto-nodejs");
 var _credentials = require("../utils/credentials");
 var _types = require("./types");
 var _utils = require("./utils");
@@ -42,12 +42,12 @@ const decode = token => {
     payload: decoded.jwt.payload
   });
   const disclosures = decoded.disclosures.map(disclosure => ({
-    encoded: disclosure._digest,
-    decoded: [disclosure.salt, disclosure.key, disclosure.value]
+    decoded: [disclosure.salt, disclosure.key, disclosure.value],
+    encoded: disclosure._digest
   }));
   return {
-    sdJwt,
-    disclosures
+    disclosures,
+    sdJwt
   };
 };
 
@@ -75,11 +75,11 @@ const prepareVpToken = async (nonce, client_id, _ref) => {
   // <Issuer-signed JWT>~<Disclosure 1>~<Disclosure N>~
   const sd_hash = await (0, _ioReactNativeJwt.sha256ToBase64)(vp);
   const kbJwt = await new _ioReactNativeJwt.SignJWT(cryptoContext).setProtectedHeader({
-    typ: "kb+jwt",
-    alg: "ES256"
+    alg: "ES256",
+    typ: "kb+jwt"
   }).setPayload({
-    sd_hash,
-    nonce: nonce
+    nonce: nonce,
+    sd_hash
   }).setAudience(client_id).setIssuedAt().sign();
   // <Issuer-signed JWT>~<Disclosure 1>~...~<Disclosure N>~<KB-JWT>
   const vp_token = [vp, kbJwt].join("");

package/lib/commonjs/sd-jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_decode","_present","_cryptoNodejs","_credentials","_types","_utils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","decode","token","decoded","decodeSdJwtSync","fixLegacyCredentialSdJwt","digest","sdJwt","SdJwt4VCBase","parse","header","jwt","payload","disclosures","map","disclosure","encoded","_digest","salt","value","prepareVpToken","nonce","client_id","_ref","verifiableCredential","presentationFrame","cryptoContext","vp","present","sd_hash","sha256ToBase64","kbJwt","SignJWT","setProtectedHeader","typ","alg","setPayload","setAudience","setIssuedAt","sign","vp_token","join"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":";;;;;;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,aAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AAEA,IAAAK,MAAA,GAAAL,OAAA;AAEA,IAAAM,MAAA,GAAAN,OAAA;AAAAO,MAAA,CAAAC,IAAA,CAAAF,MAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,MAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,MAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMS,MAAM,GAAIC,KAAa,IAAK;EACvC,MAAMC,OAAO,GAAG,IAAAC,uBAAe,EAAC,IAAAC,qCAAwB,EAACH,KAAK,CAAC,EAAEI,oBAAM,CAAC;EAExE,MAAMC,KAAK,GAAGC,mBAAY,CAACC,KAAK,CAAC;IAC/BC,MAAM,EAAEP,OAAO,CAACQ,GAAG,CAACD,MAAM;IAC1BE,OAAO,EAAET,OAAO,CAACQ,GAAG,CAACC;EACvB,CAAC,CAAC;EACF,MAAMC,WAAW,GAAGV,OAAO,CAACU,WAAW,CAACC,GAAG,CAAEC,UAAU,KAAM;IAC3DC,OAAO,EAAED,UAAU,CAACE,OAAO;IAC3Bd,OAAO,EAAE,CAACY,UAAU,CAACG,IAAI,EAAEH,UAAU,CAACvB,GAAG,EAAEuB,UAAU,CAACI,KAAK;EAC7D,CAAC,CAAC,CAAC;EACH,OAAO;IAAEZ,KAAK;IAAEM;EAAY,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAdAhB,OAAA,CAAAI,MAAA,GAAAA,MAAA;AAeO,MAAMmB,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,IAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,EAAEC,aAAa,CAAe,GAAAH,IAAA;EAItE;EACA,MAAMI,EAAE,GAAG,MAAM,IAAAC,gBAAO,EACtB,IAAAvB,qCAAwB,EAACmB,oBAAoB,CAAC,EAC9CC,iBAAiB,EACjBnB,oBACF,CAAC;;EAED;EACA,MAAMuB,OAAO,GAAG,MAAM,IAAAC,gCAAc,EAACH,EAAE,CAAC;EAExC,MAAMI,KAAK,GAAG,MAAM,IAAIC,yBAAO,CAACN,aAAa,CAAC,CAC3CO,kBAAkB,CAAC;IAClBC,GAAG,EAAE,QAAQ;IACbC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVP,OAAO;IACPR,KAAK,EAAEA;EACT,CAAC,CAAC,CACDgB,WAAW,CAACf,SAAS,CAAC,CACtBgB,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;EACT;EACA,MAAMC,QAAQ,GAAG,CAACb,EAAE,EAAEI,KAAK,CAAC,CAACU,IAAI,CAAC,EAAE,CAAC;EAErC,OAAO;IAAED;EAAS,CAAC;AACrB,CAAC;AAAC3C,OAAA,CAAAuB,cAAA,GAAAA,cAAA"}
+{"version":3,"names":["_ioReactNativeJwt","require","_cryptoNodejs","_decode","_present","_credentials","_types","_utils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","decode","token","decoded","decodeSdJwtSync","fixLegacyCredentialSdJwt","digest","sdJwt","SdJwt4VCBase","parse","header","jwt","payload","disclosures","map","disclosure","salt","value","encoded","_digest","prepareVpToken","nonce","client_id","_ref","verifiableCredential","presentationFrame","cryptoContext","vp","present","sd_hash","sha256ToBase64","kbJwt","SignJWT","setProtectedHeader","alg","typ","setPayload","setAudience","setIssuedAt","sign","vp_token","join"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":";;;;;;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,aAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AAIA,IAAAI,YAAA,GAAAJ,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AAEA,IAAAM,MAAA,GAAAN,OAAA;AAAAO,MAAA,CAAAC,IAAA,CAAAF,MAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,MAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,MAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMS,MAAM,GAAIC,KAAa,IAAK;EACvC,MAAMC,OAAO,GAAG,IAAAC,uBAAe,EAAC,IAAAC,qCAAwB,EAACH,KAAK,CAAC,EAAEI,oBAAM,CAAC;EAExE,MAAMC,KAAK,GAAGC,mBAAY,CAACC,KAAK,CAAC;IAC/BC,MAAM,EAAEP,OAAO,CAACQ,GAAG,CAACD,MAAM;IAC1BE,OAAO,EAAET,OAAO,CAACQ,GAAG,CAACC;EACvB,CAAC,CAAC;EACF,MAAMC,WAAW,GAAGV,OAAO,CAACU,WAAW,CAACC,GAAG,CAAEC,UAAU,KAAM;IAC3DZ,OAAO,EAAE,CAACY,UAAU,CAACC,IAAI,EAAED,UAAU,CAACvB,GAAG,EAAEuB,UAAU,CAACE,KAAK,CAAC;IAC5DC,OAAO,EAAEH,UAAU,CAACI;EACtB,CAAC,CAAC,CAAC;EACH,OAAO;IAAEN,WAAW;IAAEN;EAAM,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAdAV,OAAA,CAAAI,MAAA,GAAAA,MAAA;AAeO,MAAMmB,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,IAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,EAAEC,aAAa,CAAe,GAAAH,IAAA;EAItE;EACA,MAAMI,EAAE,GAAG,MAAM,IAAAC,gBAAO,EACtB,IAAAvB,qCAAwB,EAACmB,oBAAoB,CAAC,EAC9CC,iBAAiB,EACjBnB,oBACF,CAAC;;EAED;EACA,MAAMuB,OAAO,GAAG,MAAM,IAAAC,gCAAc,EAACH,EAAE,CAAC;EAExC,MAAMI,KAAK,GAAG,MAAM,IAAIC,yBAAO,CAACN,aAAa,CAAC,CAC3CO,kBAAkB,CAAC;IAClBC,GAAG,EAAE,OAAO;IACZC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVf,KAAK,EAAEA,KAAK;IACZQ;EACF,CAAC,CAAC,CACDQ,WAAW,CAACf,SAAS,CAAC,CACtBgB,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;EACT;EACA,MAAMC,QAAQ,GAAG,CAACb,EAAE,EAAEI,KAAK,CAAC,CAACU,IAAI,CAAC,EAAE,CAAC;EAErC,OAAO;IAAED;EAAS,CAAC;AACrB,CAAC;AAAC3C,OAAA,CAAAuB,cAAA,GAAAA,cAAA"}

package/lib/commonjs/sd-jwt/types.js

@@ -5,8 +5,8 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.Verification = exports.TypeMetadata = exports.SdJwt4VCBase = exports.LEGACY_SD_JWT = void 0;
 var _zod = require("zod");
-var _zod2 = require("../utils/zod");
 var _jwk = require("../utils/jwk");
+var _zod2 = require("../utils/zod");
 /**
  * For backward compatibility reasons it is still necessary to support the legacy SD-JWT
  * in a few flows (for instance status assertion and presentation of the old eID).
@@ -29,29 +29,29 @@ const StatusList = _zod.z.object({
 
 const SdJwt4VCBase = _zod.z.object({
   header: _zod.z.object({
-    typ: _zod.z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
     alg: _zod.z.string(),
     kid: _zod.z.string(),
     trust_chain: _zod.z.array(_zod.z.string()).optional(),
-    x5c: _zod.z.array(_zod.z.string()).optional(),
-    vctm: _zod.z.array(_zod.z.string()).optional()
+    typ: _zod.z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
+    vctm: _zod.z.array(_zod.z.string()).optional(),
+    x5c: _zod.z.array(_zod.z.string()).optional()
   }),
   payload: _zod.z.object({
     _sd: _zod.z.array(_zod.z.string()),
     _sd_alg: _zod.z.literal("sha-256"),
-    iss: _zod.z.string(),
-    sub: _zod.z.string(),
-    iat: _zod2.UnixTime.optional(),
-    exp: _zod2.UnixTime,
     cnf: _zod.z.object({
       jwk: _jwk.JWK
     }),
+    exp: _zod2.UnixTime,
+    iat: _zod2.UnixTime.optional(),
+    iss: _zod.z.string(),
     status: _zod.z.union([_zod.z.object({
       status_list: StatusList
     }), _zod.z.object({
       /** @deprecated Use `status.status_list` */
       status_assertion: StatusAssertion
     })]),
+    sub: _zod.z.string(),
     vct: _zod.z.string(),
     "vct#integrity": _zod.z.string().optional()
   })
@@ -63,8 +63,8 @@ const SdJwt4VCBase = _zod.z.object({
  */
 exports.SdJwt4VCBase = SdJwt4VCBase;
 const Verification = _zod.z.object({
-  trust_framework: _zod.z.string(),
-  assurance_level: _zod.z.string()
+  assurance_level: _zod.z.string(),
+  trust_framework: _zod.z.string()
 });
 
 /**
@@ -74,18 +74,18 @@ const Verification = _zod.z.object({
  */
 exports.Verification = Verification;
 const TypeMetadata = _zod.z.object({
-  name: _zod.z.string(),
-  description: _zod.z.string(),
   data_source: _zod.z.object({
-    trust_framework: _zod.z.string(),
     authentic_source: _zod.z.object({
-      organization_name: _zod.z.string(),
-      organization_code: _zod.z.string(),
       contacts: _zod.z.array(_zod.z.string()),
-      homepage_uri: _zod.z.string().url(),
-      logo_uri: _zod.z.string().url()
-    })
-  })
+      homepage_uri: _zod.z.url(),
+      logo_uri: _zod.z.url(),
+      organization_code: _zod.z.string(),
+      organization_name: _zod.z.string()
+    }),
+    trust_framework: _zod.z.string()
+  }),
+  description: _zod.z.string(),
+  name: _zod.z.string()
 });
 exports.TypeMetadata = TypeMetadata;
 //# sourceMappingURL=types.js.map