@pagopa/io-react-native-wallet 3.6.3 → 3.7.0

package/lib/commonjs/sd-jwt/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["_zod","require","_zod2","_jwk","LEGACY_SD_JWT","exports","StatusAssertion","z","object","credential_hash_alg","literal","StatusList","idx","number","uri","string","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","UnixTime","exp","cnf","jwk","JWK","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,IAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;;AAEO,MAAMG,aAAa,GAAG,WAAW;AAACC,OAAA,CAAAD,aAAA,GAAAA,aAAA;AAEzC,MAAME,eAAe,GAAGC,MAAC,CAACC,MAAM,CAAC;EAC/BC,mBAAmB,EAAEF,MAAC,CAACG,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGJ,MAAC,CAACC,MAAM,CAAC;EAC1BI,GAAG,EAAEL,MAAC,CAACM,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEP,MAAC,CAACQ,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEO,MAAMC,YAAY,GAAGT,MAAC,CAACC,MAAM,CAAC;EACnCS,MAAM,EAAEV,MAAC,CAACC,MAAM,CAAC;IACfU,GAAG,EAAEX,MAAC,CAACY,IAAI,CAAC,CAAC,WAAW,EAAEf,aAAa,CAAC,CAAC;IACzCgB,GAAG,EAAEb,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfM,GAAG,EAAEd,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfO,WAAW,EAAEf,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAElB,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAEnB,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAEpB,MAAC,CAACC,MAAM,CAAC;IAChBoB,GAAG,EAAErB,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC;IACxBc,OAAO,EAAEtB,MAAC,CAACG,OAAO,CAAC,SAAS,CAAC;IAC7BoB,GAAG,EAAEvB,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfgB,GAAG,EAAExB,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAEC,cAAQ,CAACT,QAAQ,CAAC,CAAC;IACxBU,GAAG,EAAED,cAAQ;IACbE,GAAG,EAAE5B,MAAC,CAACC,MAAM,CAAC;MACZ4B,GAAG,EAAEC;IACP,CAAC,CAAC;IACFC,MAAM,EAAE/B,MAAC,CAACgC,KAAK,CAAC,CACdhC,MAAC,CAACC,MAAM,CAAC;MACPgC,WAAW,EAAE7B;IACf,CAAC,CAAC,EACFJ,MAAC,CAACC,MAAM,CAAC;MACP;MACAiC,gBAAgB,EAAEnC;IACpB,CAAC,CAAC,CACH,CAAC;IACFoC,GAAG,EAAEnC,MAAC,CAACQ,MAAM,CAAC,CAAC;IACf,eAAe,EAAER,MAAC,CAACQ,MAAM,CAAC,CAAC,CAACS,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AAHAnB,OAAA,CAAAW,YAAA,GAAAA,YAAA;AAKO,MAAM2B,YAAY,GAAGpC,MAAC,CAACC,MAAM,CAAC;EACnCoC,eAAe,EAAErC,MAAC,CAACQ,MAAM,CAAC,CAAC;EAC3B8B,eAAe,EAAEtC,MAAC,CAACQ,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AAJAV,OAAA,CAAAsC,YAAA,GAAAA,YAAA;AAMO,MAAMG,YAAY,GAAGvC,MAAC,CAACC,MAAM,CAAC;EACnCuC,IAAI,EAAExC,MAAC,CAACQ,MAAM,CAAC,CAAC;EAChBiC,WAAW,EAAEzC,MAAC,CAACQ,MAAM,CAAC,CAAC;EACvBkC,WAAW,EAAE1C,MAAC,CAACC,MAAM,CAAC;IACpBoC,eAAe,EAAErC,MAAC,CAACQ,MAAM,CAAC,CAAC;IAC3BmC,gBAAgB,EAAE3C,MAAC,CAACC,MAAM,CAAC;MACzB2C,iBAAiB,EAAE5C,MAAC,CAACQ,MAAM,CAAC,CAAC;MAC7BqC,iBAAiB,EAAE7C,MAAC,CAACQ,MAAM,CAAC,CAAC;MAC7BsC,QAAQ,EAAE9C,MAAC,CAACgB,KAAK,CAAChB,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC;MAC7BuC,YAAY,EAAE/C,MAAC,CAACQ,MAAM,CAAC,CAAC,CAACwC,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEjD,MAAC,CAACQ,MAAM,CAAC,CAAC,CAACwC,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC;AAAClD,OAAA,CAAAyC,YAAA,GAAAA,YAAA"}
+{"version":3,"names":["_zod","require","_jwk","_zod2","LEGACY_SD_JWT","exports","StatusAssertion","z","object","credential_hash_alg","literal","StatusList","idx","number","uri","string","SdJwt4VCBase","header","alg","kid","trust_chain","array","optional","typ","enum","vctm","x5c","payload","_sd","_sd_alg","cnf","jwk","JWK","exp","UnixTime","iat","iss","status","union","status_list","status_assertion","sub","vct","Verification","assurance_level","trust_framework","TypeMetadata","data_source","authentic_source","contacts","homepage_uri","url","logo_uri","organization_code","organization_name","description","name"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AAEA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;;AAEO,MAAMG,aAAa,GAAG,WAAW;AAACC,OAAA,CAAAD,aAAA,GAAAA,aAAA;AAEzC,MAAME,eAAe,GAAGC,MAAC,CAACC,MAAM,CAAC;EAC/BC,mBAAmB,EAAEF,MAAC,CAACG,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGJ,MAAC,CAACC,MAAM,CAAC;EAC1BI,GAAG,EAAEL,MAAC,CAACM,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEP,MAAC,CAACQ,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEO,MAAMC,YAAY,GAAGT,MAAC,CAACC,MAAM,CAAC;EACnCS,MAAM,EAAEV,MAAC,CAACC,MAAM,CAAC;IACfU,GAAG,EAAEX,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfI,GAAG,EAAEZ,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfK,WAAW,EAAEb,MAAC,CAACc,KAAK,CAACd,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEhB,MAAC,CAACiB,IAAI,CAAC,CAAC,WAAW,EAAEpB,aAAa,CAAC,CAAC;IACzCqB,IAAI,EAAElB,MAAC,CAACc,KAAK,CAACd,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IACpCI,GAAG,EAAEnB,MAAC,CAACc,KAAK,CAACd,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC;EACpC,CAAC,CAAC;EACFK,OAAO,EAAEpB,MAAC,CAACC,MAAM,CAAC;IAChBoB,GAAG,EAAErB,MAAC,CAACc,KAAK,CAACd,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC;IACxBc,OAAO,EAAEtB,MAAC,CAACG,OAAO,CAAC,SAAS,CAAC;IAC7BoB,GAAG,EAAEvB,MAAC,CAACC,MAAM,CAAC;MACZuB,GAAG,EAAEC;IACP,CAAC,CAAC;IACFC,GAAG,EAAEC,cAAQ;IACbC,GAAG,EAAED,cAAQ,CAACZ,QAAQ,CAAC,CAAC;IACxBc,GAAG,EAAE7B,MAAC,CAACQ,MAAM,CAAC,CAAC;IACfsB,MAAM,EAAE9B,MAAC,CAAC+B,KAAK,CAAC,CACd/B,MAAC,CAACC,MAAM,CAAC;MACP+B,WAAW,EAAE5B;IACf,CAAC,CAAC,EACFJ,MAAC,CAACC,MAAM,CAAC;MACP;MACAgC,gBAAgB,EAAElC;IACpB,CAAC,CAAC,CACH,CAAC;IACFmC,GAAG,EAAElC,MAAC,CAACQ,MAAM,CAAC,CAAC;IACf2B,GAAG,EAAEnC,MAAC,CAACQ,MAAM,CAAC,CAAC;IACf,eAAe,EAAER,MAAC,CAACQ,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AAHAjB,OAAA,CAAAW,YAAA,GAAAA,YAAA;AAKO,MAAM2B,YAAY,GAAGpC,MAAC,CAACC,MAAM,CAAC;EACnCoC,eAAe,EAAErC,MAAC,CAACQ,MAAM,CAAC,CAAC;EAC3B8B,eAAe,EAAEtC,MAAC,CAACQ,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AAJAV,OAAA,CAAAsC,YAAA,GAAAA,YAAA;AAMO,MAAMG,YAAY,GAAGvC,MAAC,CAACC,MAAM,CAAC;EACnCuC,WAAW,EAAExC,MAAC,CAACC,MAAM,CAAC;IACpBwC,gBAAgB,EAAEzC,MAAC,CAACC,MAAM,CAAC;MACzByC,QAAQ,EAAE1C,MAAC,CAACc,KAAK,CAACd,MAAC,CAACQ,MAAM,CAAC,CAAC,CAAC;MAC7BmC,YAAY,EAAE3C,MAAC,CAAC4C,GAAG,CAAC,CAAC;MACrBC,QAAQ,EAAE7C,MAAC,CAAC4C,GAAG,CAAC,CAAC;MACjBE,iBAAiB,EAAE9C,MAAC,CAACQ,MAAM,CAAC,CAAC;MAC7BuC,iBAAiB,EAAE/C,MAAC,CAACQ,MAAM,CAAC;IAC9B,CAAC,CAAC;IACF8B,eAAe,EAAEtC,MAAC,CAACQ,MAAM,CAAC;EAC5B,CAAC,CAAC;EACFwC,WAAW,EAAEhD,MAAC,CAACQ,MAAM,CAAC,CAAC;EACvByC,IAAI,EAAEjD,MAAC,CAACQ,MAAM,CAAC;AACjB,CAAC,CAAC;AAACV,OAAA,CAAAyC,YAAA,GAAAA,YAAA"}

package/lib/commonjs/sd-jwt/utils.js

@@ -5,29 +5,28 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.getVerification = exports.fetchTypeMetadata = void 0;
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
-var _decode = require("@sd-jwt/decode");
 var _cryptoNodejs = require("@sd-jwt/crypto-nodejs");
+var _decode = require("@sd-jwt/decode");
+var _credentials = require("../utils/credentials");
+var _errors = require("../utils/errors");
 var _misc = require("../utils/misc");
 var _types = require("./types");
-var _errors = require("../utils/errors");
-var _credentials = require("../utils/credentials");
 /**
  * Retrieve the Type Metadata for a credential and verify its integrity.
- * @param vct The VCT as a valid HTTPS url
+ * @param issuerUrl The Credential Issuer base url
+ * @param vct The VCT as a URN
  * @param vctIntegrity The integrity hash
  * @param context.appFetch (optional) fetch api implementation. Default: built-in fetch
  * @returns The credential metadata {@link TypeMetadata}
  */
-const fetchTypeMetadata = async function (vct, vctIntegrity) {
-  let context = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {};
+const fetchTypeMetadata = async function (issuerUrl, vct, vctIntegrity) {
+  let context = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
   const {
     appFetch = fetch
   } = context;
-  const {
-    origin,
-    pathname
-  } = new URL(vct);
-  const metadata = await appFetch(`${origin}/.well-known/vct${pathname}`, {
+  const url = new URL("/.well-known/type-metadata", issuerUrl);
+  url.searchParams.append("vct", vct);
+  const metadata = await appFetch(url.toString(), {
     headers: {
       "Content-Type": "application/json"
     }

package/lib/commonjs/sd-jwt/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_decode","_cryptoNodejs","_misc","_types","_errors","_credentials","fetchTypeMetadata","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","origin","pathname","URL","metadata","headers","then","hasStatusOrThrow","IssuerResponseError","res","json","TypeMetadata","parse","alg","hash","split","IoWalletError","metadataHash","sha256ToBase64","JSON","stringify","ValidationFailed","message","reason","exports","getVerification","credentialSdJwt","decoded","decodeSdJwtSync","fixLegacyCredentialSdJwt","digest","claims","getClaimsSync","jwt","payload","disclosures","verification","Verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AACA,IAAAI,MAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AAKA,IAAAM,YAAA,GAAAN,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMO,iBAAiB,GAAG,eAAAA,CAC/BC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EACpC,MAAM;IAAEM,MAAM;IAAEC;EAAS,CAAC,GAAG,IAAIC,GAAG,CAACV,GAAG,CAAC;EAEzC,MAAMW,QAAQ,GAAG,MAAML,QAAQ,CAAE,GAAEE,MAAO,mBAAkBC,QAAS,EAAC,EAAE;IACtEG,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,EAAEC,2BAAmB,CAAC,CAAC,CAChDF,IAAI,CAAEG,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBJ,IAAI,CAACK,mBAAY,CAACC,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGpB,YAAY,CAACqB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAIG,qBAAa,CAAE,GAAEH,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMI,YAAY,GAAG,MAAM,IAAAC,gCAAc,EAACC,IAAI,CAACC,SAAS,CAAChB,QAAQ,CAAC,CAAC;EAEnE,IAAIa,YAAY,KAAKH,IAAI,EAAE;IACzB,MAAM,IAAIO,wBAAgB,CAAC;MACzBC,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOnB,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AAJAoB,OAAA,CAAAhC,iBAAA,GAAAA,iBAAA;AAKO,MAAMiC,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAMC,OAAO,GAAG,IAAAC,uBAAe,EAC7B,IAAAC,qCAAwB,EAACH,eAAe,CAAC,EACzCI,oBACF,CAAC;EAED,MAAMC,MAAM,GAAG,IAAAC,qBAAa,EAC1BL,OAAO,CAACM,GAAG,CAACC,OAAO,EACnBP,OAAO,CAACQ,WAAW,EACnBL,oBACF,CAAC;EAED,OAAOC,MAAM,CAACK,YAAY,GACtBC,mBAAY,CAACzB,KAAK,CAACmB,MAAM,CAACK,YAAY,CAAC,GACvCtC,SAAS;AACf,CAAC;AAAC0B,OAAA,CAAAC,eAAA,GAAAA,eAAA"}
+{"version":3,"names":["_ioReactNativeJwt","require","_cryptoNodejs","_decode","_credentials","_errors","_misc","_types","fetchTypeMetadata","issuerUrl","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","url","URL","searchParams","append","metadata","toString","headers","then","hasStatusOrThrow","IssuerResponseError","res","json","TypeMetadata","parse","alg","hash","split","IoWalletError","metadataHash","sha256ToBase64","JSON","stringify","ValidationFailed","message","reason","exports","getVerification","credentialSdJwt","decoded","decodeSdJwtSync","fixLegacyCredentialSdJwt","digest","claims","getClaimsSync","jwt","payload","disclosures","verification","Verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,aAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAEA,IAAAG,YAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AAKA,IAAAK,KAAA,GAAAL,OAAA;AACA,IAAAM,MAAA,GAAAN,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMO,iBAAiB,GAAG,eAAAA,CAC/BC,SAAiB,EACjBC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EAEpC,MAAMM,GAAG,GAAG,IAAIC,GAAG,CAAC,4BAA4B,EAAEV,SAAS,CAAC;EAC5DS,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,KAAK,EAAEX,GAAG,CAAC;EAEnC,MAAMY,QAAQ,GAAG,MAAMN,QAAQ,CAACE,GAAG,CAACK,QAAQ,CAAC,CAAC,EAAE;IAC9CC,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,EAAEC,2BAAmB,CAAC,CAAC,CAChDF,IAAI,CAAEG,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBJ,IAAI,CAACK,mBAAY,CAACC,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGtB,YAAY,CAACuB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAIG,qBAAa,CAAE,GAAEH,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMI,YAAY,GAAG,MAAM,IAAAC,gCAAc,EAACC,IAAI,CAACC,SAAS,CAACjB,QAAQ,CAAC,CAAC;EAEnE,IAAIc,YAAY,KAAKH,IAAI,EAAE;IACzB,MAAM,IAAIO,wBAAgB,CAAC;MACzBC,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOpB,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AAJAqB,OAAA,CAAAnC,iBAAA,GAAAA,iBAAA;AAKO,MAAMoC,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAMC,OAAO,GAAG,IAAAC,uBAAe,EAC7B,IAAAC,qCAAwB,EAACH,eAAe,CAAC,EACzCI,oBACF,CAAC;EAED,MAAMC,MAAM,GAAG,IAAAC,qBAAa,EAC1BL,OAAO,CAACM,GAAG,CAACC,OAAO,EACnBP,OAAO,CAACQ,WAAW,EACnBL,oBACF,CAAC;EAED,OAAOC,MAAM,CAACK,YAAY,GACtBC,mBAAY,CAACzB,KAAK,CAACmB,MAAM,CAACK,YAAY,CAAC,GACvCxC,SAAS;AACf,CAAC;AAAC4B,OAAA,CAAAC,eAAA,GAAAA,eAAA"}

package/lib/commonjs/trust/api/TrustAnchorConfig.js

@@ -15,15 +15,15 @@ function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj &&
  */
 
 const TrustAnchorConfig = z.object({
+  federation_entity: _types.FederationEntityMetadata,
   jwt: z.object({
     header: z.object({
-      typ: z.literal("entity-statement+jwt"),
       alg: z.string(),
-      kid: z.string()
+      kid: z.string(),
+      typ: z.literal("entity-statement+jwt")
     })
   }),
-  keys: z.array(_jwk.JWK),
-  federation_entity: _types.FederationEntityMetadata
+  keys: z.array(_jwk.JWK)
 });
 exports.TrustAnchorConfig = TrustAnchorConfig;
 //# sourceMappingURL=TrustAnchorConfig.js.map

package/lib/commonjs/trust/api/TrustAnchorConfig.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","_interopRequireWildcard","require","_jwk","_types","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","TrustAnchorConfig","object","jwt","header","typ","literal","alg","string","kid","keys","array","JWK","federation_entity","FederationEntityMetadata","exports"],"sourceRoot":"../../../../src","sources":["trust/api/TrustAnchorConfig.ts"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AAA2D,SAAAG,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAL,wBAAAS,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAE3D;AACA;AACA;AACA;;AAEO,MAAMW,iBAAiB,GAAG3B,CAAC,CAAC4B,MAAM,CAAC;EACxCC,GAAG,EAAE7B,CAAC,CAAC4B,MAAM,CAAC;IACZE,MAAM,EAAE9B,CAAC,CAAC4B,MAAM,CAAC;MACfG,GAAG,EAAE/B,CAAC,CAACgC,OAAO,CAAC,sBAAsB,CAAC;MACtCC,GAAG,EAAEjC,CAAC,CAACkC,MAAM,CAAC,CAAC;MACfC,GAAG,EAAEnC,CAAC,CAACkC,MAAM,CAAC;IAChB,CAAC;EACH,CAAC,CAAC;EACFE,IAAI,EAAEpC,CAAC,CAACqC,KAAK,CAACC,QAAG,CAAC;EAClBC,iBAAiB,EAAEC;AACrB,CAAC,CAAC;AAACC,OAAA,CAAAd,iBAAA,GAAAA,iBAAA"}
+{"version":3,"names":["z","_interopRequireWildcard","require","_jwk","_types","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","TrustAnchorConfig","object","federation_entity","FederationEntityMetadata","jwt","header","alg","string","kid","typ","literal","keys","array","JWK","exports"],"sourceRoot":"../../../../src","sources":["trust/api/TrustAnchorConfig.ts"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AAEA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AAA2D,SAAAG,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAL,wBAAAS,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAE3D;AACA;AACA;AACA;;AAEO,MAAMW,iBAAiB,GAAG3B,CAAC,CAAC4B,MAAM,CAAC;EACxCC,iBAAiB,EAAEC,+BAAwB;EAC3CC,GAAG,EAAE/B,CAAC,CAAC4B,MAAM,CAAC;IACZI,MAAM,EAAEhC,CAAC,CAAC4B,MAAM,CAAC;MACfK,GAAG,EAAEjC,CAAC,CAACkC,MAAM,CAAC,CAAC;MACfC,GAAG,EAAEnC,CAAC,CAACkC,MAAM,CAAC,CAAC;MACfE,GAAG,EAAEpC,CAAC,CAACqC,OAAO,CAAC,sBAAsB;IACvC,CAAC;EACH,CAAC,CAAC;EACFC,IAAI,EAAEtC,CAAC,CAACuC,KAAK,CAACC,QAAG;AACnB,CAAC,CAAC;AAACC,OAAA,CAAAd,iBAAA,GAAAA,iBAAA"}

package/lib/commonjs/trust/common/build-chain.js

@@ -29,8 +29,8 @@ function createBuildTrustChain(config) {
       });
       if (!federationList.includes(relyingPartyEntityBaseUrl)) {
         throw new _errors.RelyingPartyNotAuthorizedError("Relying Party entity base URL is not authorized by the Trust Anchor's federation list.", {
-          relyingPartyUrl: relyingPartyEntityBaseUrl,
-          federationListEndpoint
+          federationListEndpoint,
+          relyingPartyUrl: relyingPartyEntityBaseUrl
         });
       }
     }
@@ -87,6 +87,9 @@ function createGatherTrustChain(_ref) {
       return chain;
     }
     const parentEntityBaseUrl = authorityHints[0];
+    if (!parentEntityBaseUrl) {
+      throw new Error("AuthorityHints array is empty.");
+    }
 
     // Fetch parent EC
     const parentECJwt = await (0, _utils.getSignedEntityConfiguration)(parentEntityBaseUrl, {

package/lib/commonjs/trust/common/build-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["_errors","require","_utils","createBuildTrustChain","config","buildTrustChain","relyingPartyEntityBaseUrl","trustAnchorConfig","appFetch","arguments","length","undefined","fetch","trustAnchorKey","keys","BuildTrustChainError","federationListEndpoint","federation_entity","federation_list_endpoint","federationList","getFederationList","includes","RelyingPartyNotAuthorizedError","relyingPartyUrl","gatherTrustChain","createGatherTrustChain","trustChain","chainTrustAnchorJwt","kid","TrustAnchorKidMissingError","verify","_ref","EntityConfigurationShape","EntityStatementShape","entityBaseUrl","isLeaf","chain","entityECJwt","getSignedEntityConfiguration","entityEC","parse","decode","push","authorityHints","payload","authority_hints","parentEntityBaseUrl","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_fetch_endpoint","MissingFederationFetchEndpointError","missingInEntityUrl","entityStatementJwt","getSignedEntityStatement","parentChain","concat"],"sourceRoot":"../../../../src","sources":["trust/common/build-chain.ts"],"mappings":";;;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AAMA,IAAAC,MAAA,GAAAD,OAAA;AAgBA;AACA;AACA;AACA;AACA;AACO,SAASE,qBAAqBA,CACnCC,MAAqB,EACQ;EAC7B,OAAO,eAAeC,eAAeA,CACnCC,yBAAyB,EACzBC,iBAAiB,EAEjB;IAAA,IADAC,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;IAEhB;IACA;IACA;IACA,MAAMC,cAAc,GAAGN,iBAAiB,CAACO,IAAI,CAAC,CAAC,CAAC;IAEhD,IAAI,CAACD,cAAc,EAAE;MACnB,MAAM,IAAIE,4BAAoB,CAC5B,0EACF,CAAC;IACH;IAEA,MAAMC,sBAAsB,GAC1BT,iBAAiB,CAACU,iBAAiB,CAACC,wBAAwB;IAE9D,IAAIF,sBAAsB,EAAE;MAC1B,MAAMG,cAAc,GAAG,MAAM,IAAAC,wBAAiB,EAACJ,sBAAsB,EAAE;QACrER;MACF,CAAC,CAAC;MAEF,IAAI,CAACW,cAAc,CAACE,QAAQ,CAACf,yBAAyB,CAAC,EAAE;QACvD,MAAM,IAAIgB,sCAA8B,CACtC,wFAAwF,EACxF;UAAEC,eAAe,EAAEjB,yBAAyB;UAAEU;QAAuB,CACvE,CAAC;MACH;IACF;IAEA,MAAMQ,gBAAgB,GAAGC,sBAAsB,CAACrB,MAAM,CAAC;;IAEvD;IACA,MAAMsB,UAAU,GAAG,MAAMF,gBAAgB,CACvClB,yBAAyB,EACzBE,QACF,CAAC;IACD;IACA,MAAMmB,mBAAmB,GAAGD,UAAU,CAACA,UAAU,CAAChB,MAAM,GAAG,CAAC,CAAC;IAC7D,IAAI,CAACiB,mBAAmB,EAAE;MACxB,MAAM,IAAIZ,4BAAoB,CAC5B,6EAA6E,EAC7E;QAAEQ,eAAe,EAAEjB;MAA0B,CAC/C,CAAC;IACH;IAEA,IAAI,CAACO,cAAc,CAACe,GAAG,EAAE;MACvB,MAAM,IAAIC,kCAA0B,CAAC,CAAC;IACxC;IAEA,MAAM,IAAAC,aAAM,EAACH,mBAAmB,EAAEd,cAAc,CAACe,GAAG,EAAE,CAACf,cAAc,CAAC,CAAC;IAEvE,OAAOa,UAAU;EACnB,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASD,sBAAsBA,CAAAM,IAAA,EAGpB;EAAA,IAHqB;IACrCC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd,OAAO,eAAeP,gBAAgBA,CACpCU,aAAqB,EACrB1B,QAA8B,EAEX;IAAA,IADnB2B,MAAe,GAAA1B,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,IAAI;IAEtB,MAAM2B,KAAe,GAAG,EAAE;;IAE1B;IACA,MAAMC,WAAW,GAAG,MAAM,IAAAC,mCAA4B,EAACJ,aAAa,EAAE;MACpE1B;IACF,CAAC,CAAC;IACF,MAAM+B,QAAQ,GAAGP,wBAAwB,CAACQ,KAAK,CAAC,IAAAC,aAAM,EAACJ,WAAW,CAAC,CAAC;IACpE,IAAIF,MAAM,EAAE;MACV;MACAC,KAAK,CAACM,IAAI,CAACL,WAAW,CAAC;IACzB;;IAEA;IACA,MAAMM,cAAc,GAAGJ,QAAQ,CAACK,OAAO,CAACC,eAAe,IAAI,EAAE;IAC7D,IAAIF,cAAc,CAACjC,MAAM,KAAK,CAAC,EAAE;MAC/B;MACA,IAAI,CAACyB,MAAM,EAAE;QACXC,KAAK,CAACM,IAAI,CAACL,WAAW,CAAC;MACzB;MACA,OAAOD,KAAK;IACd;IACA,MAAMU,mBAAmB,GAAGH,cAAc,CAAC,CAAC,CAAE;;IAE9C;IACA,MAAMI,WAAW,GAAG,MAAM,IAAAT,mCAA4B,EACpDQ,mBAAmB,EACnB;MAAEtC;IAAS,CACb,CAAC;IACD,MAAMwC,QAAQ,GAAGhB,wBAAwB,CAACQ,KAAK,CAAC,IAAAC,aAAM,EAACM,WAAW,CAAC,CAAC;IACpE;IACA,MAAME,uBAAuB,GAC3BD,QAAQ,CAACJ,OAAO,CAACM,QAAQ,CAACjC,iBAAiB,CAACkC,yBAAyB;IACvE,IAAI,CAACF,uBAAuB,EAAE;MAC5B,MAAM,IAAIG,2CAAmC,CAC1C,kDAAiDN,mBAAoB,4CAA2CZ,aAAc,GAAE,EACjI;QAAEA,aAAa;QAAEmB,kBAAkB,EAAEP;MAAoB,CAC3D,CAAC;IACH;IACA,MAAMQ,kBAAkB,GAAG,MAAM,IAAAC,+BAAwB,EACvDN,uBAAuB,EACvBf,aAAa,EACb;MAAE1B;IAAS,CACb,CAAC;IACD;IACAyB,oBAAoB,CAACO,KAAK,CAAC,IAAAC,aAAM,EAACa,kBAAkB,CAAC,CAAC;;IAEtD;IACAlB,KAAK,CAACM,IAAI,CAACY,kBAAkB,CAAC;;IAE9B;IACA,MAAME,WAAW,GAAG,MAAMhC,gBAAgB,CACxCsB,mBAAmB,EACnBtC,QAAQ,EACR,KACF,CAAC;IAED,OAAO4B,KAAK,CAACqB,MAAM,CAACD,WAAW,CAAC;EAClC,CAAC;AACH"}
+{"version":3,"names":["_errors","require","_utils","createBuildTrustChain","config","buildTrustChain","relyingPartyEntityBaseUrl","trustAnchorConfig","appFetch","arguments","length","undefined","fetch","trustAnchorKey","keys","BuildTrustChainError","federationListEndpoint","federation_entity","federation_list_endpoint","federationList","getFederationList","includes","RelyingPartyNotAuthorizedError","relyingPartyUrl","gatherTrustChain","createGatherTrustChain","trustChain","chainTrustAnchorJwt","kid","TrustAnchorKidMissingError","verify","_ref","EntityConfigurationShape","EntityStatementShape","entityBaseUrl","isLeaf","chain","entityECJwt","getSignedEntityConfiguration","entityEC","parse","decode","push","authorityHints","payload","authority_hints","parentEntityBaseUrl","Error","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_fetch_endpoint","MissingFederationFetchEndpointError","missingInEntityUrl","entityStatementJwt","getSignedEntityStatement","parentChain","concat"],"sourceRoot":"../../../../src","sources":["trust/common/build-chain.ts"],"mappings":";;;;;;;AAKA,IAAAA,OAAA,GAAAC,OAAA;AAMA,IAAAC,MAAA,GAAAD,OAAA;AAaA;AACA;AACA;AACA;AACA;AACO,SAASE,qBAAqBA,CACnCC,MAAqB,EACQ;EAC7B,OAAO,eAAeC,eAAeA,CACnCC,yBAAyB,EACzBC,iBAAiB,EAEjB;IAAA,IADAC,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;IAEhB;IACA;IACA;IACA,MAAMC,cAAc,GAAGN,iBAAiB,CAACO,IAAI,CAAC,CAAC,CAAC;IAEhD,IAAI,CAACD,cAAc,EAAE;MACnB,MAAM,IAAIE,4BAAoB,CAC5B,0EACF,CAAC;IACH;IAEA,MAAMC,sBAAsB,GAC1BT,iBAAiB,CAACU,iBAAiB,CAACC,wBAAwB;IAE9D,IAAIF,sBAAsB,EAAE;MAC1B,MAAMG,cAAc,GAAG,MAAM,IAAAC,wBAAiB,EAACJ,sBAAsB,EAAE;QACrER;MACF,CAAC,CAAC;MAEF,IAAI,CAACW,cAAc,CAACE,QAAQ,CAACf,yBAAyB,CAAC,EAAE;QACvD,MAAM,IAAIgB,sCAA8B,CACtC,wFAAwF,EACxF;UACEN,sBAAsB;UACtBO,eAAe,EAAEjB;QACnB,CACF,CAAC;MACH;IACF;IAEA,MAAMkB,gBAAgB,GAAGC,sBAAsB,CAACrB,MAAM,CAAC;;IAEvD;IACA,MAAMsB,UAAU,GAAG,MAAMF,gBAAgB,CACvClB,yBAAyB,EACzBE,QACF,CAAC;IACD;IACA,MAAMmB,mBAAmB,GAAGD,UAAU,CAACA,UAAU,CAAChB,MAAM,GAAG,CAAC,CAAC;IAC7D,IAAI,CAACiB,mBAAmB,EAAE;MACxB,MAAM,IAAIZ,4BAAoB,CAC5B,6EAA6E,EAC7E;QAAEQ,eAAe,EAAEjB;MAA0B,CAC/C,CAAC;IACH;IAEA,IAAI,CAACO,cAAc,CAACe,GAAG,EAAE;MACvB,MAAM,IAAIC,kCAA0B,CAAC,CAAC;IACxC;IAEA,MAAM,IAAAC,aAAM,EAACH,mBAAmB,EAAEd,cAAc,CAACe,GAAG,EAAE,CAACf,cAAc,CAAC,CAAC;IAEvE,OAAOa,UAAU;EACnB,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASD,sBAAsBA,CAAAM,IAAA,EAGpB;EAAA,IAHqB;IACrCC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd,OAAO,eAAeP,gBAAgBA,CACpCU,aAAqB,EACrB1B,QAA8B,EAEX;IAAA,IADnB2B,MAAM,GAAA1B,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,IAAI;IAEb,MAAM2B,KAAe,GAAG,EAAE;;IAE1B;IACA,MAAMC,WAAW,GAAG,MAAM,IAAAC,mCAA4B,EAACJ,aAAa,EAAE;MACpE1B;IACF,CAAC,CAAC;IACF,MAAM+B,QAAQ,GAAGP,wBAAwB,CAACQ,KAAK,CAAC,IAAAC,aAAM,EAACJ,WAAW,CAAC,CAAC;IACpE,IAAIF,MAAM,EAAE;MACV;MACAC,KAAK,CAACM,IAAI,CAACL,WAAW,CAAC;IACzB;;IAEA;IACA,MAAMM,cAAc,GAAGJ,QAAQ,CAACK,OAAO,CAACC,eAAe,IAAI,EAAE;IAC7D,IAAIF,cAAc,CAACjC,MAAM,KAAK,CAAC,EAAE;MAC/B;MACA,IAAI,CAACyB,MAAM,EAAE;QACXC,KAAK,CAACM,IAAI,CAACL,WAAW,CAAC;MACzB;MACA,OAAOD,KAAK;IACd;IAEA,MAAMU,mBAAmB,GAAGH,cAAc,CAAC,CAAC,CAAC;IAE7C,IAAI,CAACG,mBAAmB,EAAE;MACxB,MAAM,IAAIC,KAAK,CAAC,gCAAgC,CAAC;IACnD;;IAEA;IACA,MAAMC,WAAW,GAAG,MAAM,IAAAV,mCAA4B,EACpDQ,mBAAmB,EACnB;MAAEtC;IAAS,CACb,CAAC;IACD,MAAMyC,QAAQ,GAAGjB,wBAAwB,CAACQ,KAAK,CAAC,IAAAC,aAAM,EAACO,WAAW,CAAC,CAAC;IACpE;IACA,MAAME,uBAAuB,GAC3BD,QAAQ,CAACL,OAAO,CAACO,QAAQ,CAAClC,iBAAiB,CAACmC,yBAAyB;IACvE,IAAI,CAACF,uBAAuB,EAAE;MAC5B,MAAM,IAAIG,2CAAmC,CAC1C,kDAAiDP,mBAAoB,4CAA2CZ,aAAc,GAAE,EACjI;QAAEA,aAAa;QAAEoB,kBAAkB,EAAER;MAAoB,CAC3D,CAAC;IACH;IACA,MAAMS,kBAAkB,GAAG,MAAM,IAAAC,+BAAwB,EACvDN,uBAAuB,EACvBhB,aAAa,EACb;MAAE1B;IAAS,CACb,CAAC;IACD;IACAyB,oBAAoB,CAACO,KAAK,CAAC,IAAAC,aAAM,EAACc,kBAAkB,CAAC,CAAC;;IAEtD;IACAnB,KAAK,CAACM,IAAI,CAACa,kBAAkB,CAAC;;IAE9B;IACA,MAAME,WAAW,GAAG,MAAMjC,gBAAgB,CACxCsB,mBAAmB,EACnBtC,QAAQ,EACR,KACF,CAAC;IAED,OAAO4B,KAAK,CAACsB,MAAM,CAACD,WAAW,CAAC;EAClC,CAAC;AACH"}

package/lib/commonjs/trust/common/errors.js

@@ -22,53 +22,55 @@ class FederationError extends _errors.IoWalletError {
 }
 
 /**
- * Error thrown when a trust chain is unexpectedly empty.
+ * General error thrown during the trust chain building process.
  */
 exports.FederationError = FederationError;
-class TrustChainEmptyError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_EMPTY";
-  constructor() {
-    let message = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "Trust chain cannot be empty.";
-    super(message, undefined);
+class BuildTrustChainError extends FederationError {
+  code = "ERR_FED_BUILD_TRUST_CHAIN_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
+  constructor(message, details) {
+    super(message, details);
   }
 }
-
-/**
- * Error thrown when a token is unexpectedly missing from a trust chain during processing.
- */
-exports.TrustChainEmptyError = TrustChainEmptyError;
-class TrustChainTokenMissingError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_TOKEN_MISSING";
+exports.BuildTrustChainError = BuildTrustChainError;
+class FederationListParseError extends FederationError {
+  code = "ERR_FED_FEDERATION_LIST_PARSE_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
 
 /**
- * Error thrown when renewing a trust chain fails.
- * This class itself might be used or could be considered a more general renewal error.
+ * Error thrown when a 'federation_fetch_endpoint' is missing in an entity's configuration.
  */
-exports.TrustChainTokenMissingError = TrustChainTokenMissingError;
-class TrustChainRenewalError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_RENEWAL_FAILED";
+exports.FederationListParseError = FederationListParseError;
+class MissingFederationFetchEndpointError extends FederationError {
+  code = "ERR_FED_MISSING_FEDERATION_FETCH_ENDPOINT";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
-exports.TrustChainRenewalError = TrustChainRenewalError;
-class FederationListParseError extends FederationError {
-  code = "ERR_FED_FEDERATION_LIST_PARSE_FAILED";
-  constructor(message, details) {
-    super(message, details);
+
+/**
+ * Error thrown when the X.509 certificate chain is missing in an entity's configuration.
+ */
+exports.MissingFederationFetchEndpointError = MissingFederationFetchEndpointError;
+class MissingX509CertsError extends FederationError {
+  code = "ERR_FED_MISSING_X509_CERTS";
+  constructor(message) {
+    super(message, undefined);
   }
 }
 
 /**
- * General error thrown during the trust chain building process.
+ * Error thrown if the Relying Party is not found in the Trust Anchor's federation list.
  */
-exports.FederationListParseError = FederationListParseError;
-class BuildTrustChainError extends FederationError {
-  code = "ERR_FED_BUILD_TRUST_CHAIN_FAILED";
+exports.MissingX509CertsError = MissingX509CertsError;
+class RelyingPartyNotAuthorizedError extends FederationError {
+  code = "ERR_FED_RELYING_PARTY_NOT_AUTHORIZED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
@@ -77,7 +79,7 @@ class BuildTrustChainError extends FederationError {
 /**
  * Error thrown when the Trust Anchor's key is missing a 'kid'.
  */
-exports.BuildTrustChainError = BuildTrustChainError;
+exports.RelyingPartyNotAuthorizedError = RelyingPartyNotAuthorizedError;
 class TrustAnchorKidMissingError extends FederationError {
   code = "ERR_FED_TRUST_ANCHOR_KID_MISSING";
   constructor() {
@@ -87,35 +89,39 @@ class TrustAnchorKidMissingError extends FederationError {
 }
 
 /**
- * Error thrown if the Relying Party is not found in the Trust Anchor's federation list.
+ * Error thrown when a trust chain is unexpectedly empty.
  */
 exports.TrustAnchorKidMissingError = TrustAnchorKidMissingError;
-class RelyingPartyNotAuthorizedError extends FederationError {
-  code = "ERR_FED_RELYING_PARTY_NOT_AUTHORIZED";
-  constructor(message, details) {
-    super(message, details);
+class TrustChainEmptyError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_EMPTY";
+  constructor() {
+    let message = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "Trust chain cannot be empty.";
+    super(message, undefined);
   }
 }
 
 /**
- * Error thrown when a 'federation_fetch_endpoint' is missing in an entity's configuration.
+ * Error thrown when renewing a trust chain fails.
+ * This class itself might be used or could be considered a more general renewal error.
  */
-exports.RelyingPartyNotAuthorizedError = RelyingPartyNotAuthorizedError;
-class MissingFederationFetchEndpointError extends FederationError {
-  code = "ERR_FED_MISSING_FEDERATION_FETCH_ENDPOINT";
+exports.TrustChainEmptyError = TrustChainEmptyError;
+class TrustChainRenewalError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_RENEWAL_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
 
 /**
- * Error thrown when the X.509 certificate chain is missing in an entity's configuration.
+ * Error thrown when a token is unexpectedly missing from a trust chain during processing.
  */
-exports.MissingFederationFetchEndpointError = MissingFederationFetchEndpointError;
-class MissingX509CertsError extends FederationError {
-  code = "ERR_FED_MISSING_X509_CERTS";
-  constructor(message) {
-    super(message, undefined);
+exports.TrustChainRenewalError = TrustChainRenewalError;
+class TrustChainTokenMissingError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_TOKEN_MISSING";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
+  constructor(message, details) {
+    super(message, details);
   }
 }
 
@@ -123,9 +129,10 @@ class MissingX509CertsError extends FederationError {
  * Error thrown when an X.509 certificate validation fails.
  * This is used to indicate issues with the certificate chain or signature verification.
  */
-exports.MissingX509CertsError = MissingX509CertsError;
+exports.TrustChainTokenMissingError = TrustChainTokenMissingError;
 class X509ValidationError extends FederationError {
   code = "ERR_FED_X509_VALIDATION_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }

package/lib/commonjs/trust/common/errors.js.map

@@ -1 +1 @@
-{"version":3,"names":["_errors","require","FederationError","IoWalletError","constructor","message","details","serializeAttrs","name","exports","TrustChainEmptyError","code","arguments","length","undefined","TrustChainTokenMissingError","TrustChainRenewalError","FederationListParseError","BuildTrustChainError","TrustAnchorKidMissingError","RelyingPartyNotAuthorizedError","MissingFederationFetchEndpointError","MissingX509CertsError","X509ValidationError"],"sourceRoot":"../../../../src","sources":["trust/common/errors.ts"],"mappings":";;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACmF;;AAEnF;AACA;AACA;AACO,MAAMC,eAAe,SAASC,qBAAa,CAAC;EAEjDC,WAAWA,CAACC,OAAe,EAAEC,OAAiC,EAAE;IAC9D,KAAK,CAACA,OAAO,GAAG,IAAAC,sBAAc,EAAC;MAAEF,OAAO;MAAE,GAAGC;IAAQ,CAAC,CAAC,GAAGD,OAAO,CAAC;IAClE,IAAI,CAACG,IAAI,GAAG,IAAI,CAACJ,WAAW,CAACI,IAAI;IACjC,IAAI,CAACF,OAAO,GAAGA,OAAO;EACxB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAP,eAAA,GAAAA,eAAA;AAGO,MAAMQ,oBAAoB,SAASR,eAAe,CAAC;EACxDS,IAAI,GAAG,2BAA2B;EAClCP,WAAWA,CAAA,EAA2C;IAAA,IAA1CC,OAAO,GAAAO,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,8BAA8B;IAClD,KAAK,CAACP,OAAO,EAAES,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AAFAL,OAAA,CAAAC,oBAAA,GAAAA,oBAAA;AAGO,MAAMK,2BAA2B,SAASb,eAAe,CAAC;EAC/DS,IAAI,GAAG,mCAAmC;EAC1CP,WAAWA,CAACC,OAAe,EAAEC,OAA4B,EAAE;IACzD,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA;AAHAG,OAAA,CAAAM,2BAAA,GAAAA,2BAAA;AAIO,MAAMC,sBAAsB,SAASd,eAAe,CAAC;EAC1DS,IAAI,GAAG,oCAAoC;EAC3CP,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;AAACG,OAAA,CAAAO,sBAAA,GAAAA,sBAAA;AAEM,MAAMC,wBAAwB,SAASf,eAAe,CAAC;EAC5DS,IAAI,GAAG,sCAAsC;EAC7CP,WAAWA,CAACC,OAAe,EAAEC,OAA6C,EAAE;IAC1E,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAQ,wBAAA,GAAAA,wBAAA;AAGO,MAAMC,oBAAoB,SAAShB,eAAe,CAAC;EACxDS,IAAI,GAAG,kCAAkC;EACzCP,WAAWA,CACTC,OAAe,EACfC,OAIC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAS,oBAAA,GAAAA,oBAAA;AAGO,MAAMC,0BAA0B,SAASjB,eAAe,CAAC;EAC9DS,IAAI,GAAG,kCAAkC;EACzCP,WAAWA,CAAA,EAA0D;IAAA,IAAzDC,OAAO,GAAAO,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,6CAA6C;IACjE,KAAK,CAACP,OAAO,EAAES,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AAFAL,OAAA,CAAAU,0BAAA,GAAAA,0BAAA;AAGO,MAAMC,8BAA8B,SAASlB,eAAe,CAAC;EAClES,IAAI,GAAG,sCAAsC;EAC7CP,WAAWA,CACTC,OAAe,EACfC,OAAqE,EACrE;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAW,8BAAA,GAAAA,8BAAA;AAGO,MAAMC,mCAAmC,SAASnB,eAAe,CAAC;EACvES,IAAI,GAAG,2CAA2C;EAClDP,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAY,mCAAA,GAAAA,mCAAA;AAGO,MAAMC,qBAAqB,SAASpB,eAAe,CAAC;EACzDS,IAAI,GAAG,4BAA4B;EACnCP,WAAWA,CAACC,OAAe,EAAE;IAC3B,KAAK,CAACA,OAAO,EAAES,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA;AAHAL,OAAA,CAAAa,qBAAA,GAAAA,qBAAA;AAIO,MAAMC,mBAAmB,SAASrB,eAAe,CAAC;EACvDS,IAAI,GAAG,gCAAgC;EACvCP,WAAWA,CACTC,OAAe,EACfC,OAMC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;AAACG,OAAA,CAAAc,mBAAA,GAAAA,mBAAA"}
+{"version":3,"names":["_errors","require","FederationError","IoWalletError","constructor","message","details","serializeAttrs","name","exports","BuildTrustChainError","code","FederationListParseError","MissingFederationFetchEndpointError","MissingX509CertsError","undefined","RelyingPartyNotAuthorizedError","TrustAnchorKidMissingError","arguments","length","TrustChainEmptyError","TrustChainRenewalError","TrustChainTokenMissingError","X509ValidationError"],"sourceRoot":"../../../../src","sources":["trust/common/errors.ts"],"mappings":";;;;;;AAEA,IAAAA,OAAA,GAAAC,OAAA;AAFmF;;AAInF;AACA;AACA;AACO,MAAMC,eAAe,SAASC,qBAAa,CAAC;EAEjDC,WAAWA,CAACC,OAAe,EAAEC,OAAiC,EAAE;IAC9D,KAAK,CAACA,OAAO,GAAG,IAAAC,sBAAc,EAAC;MAAEF,OAAO;MAAE,GAAGC;IAAQ,CAAC,CAAC,GAAGD,OAAO,CAAC;IAClE,IAAI,CAACG,IAAI,GAAG,IAAI,CAACJ,WAAW,CAACI,IAAI;IACjC,IAAI,CAACF,OAAO,GAAGA,OAAO;EACxB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAP,eAAA,GAAAA,eAAA;AAGO,MAAMQ,oBAAoB,SAASR,eAAe,CAAC;EACxDS,IAAI,GAAG,kCAAkC;EACzC;EACAP,WAAWA,CACTC,OAAe,EACfC,OAIC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;AAACG,OAAA,CAAAC,oBAAA,GAAAA,oBAAA;AAEM,MAAME,wBAAwB,SAASV,eAAe,CAAC;EAC5DS,IAAI,GAAG,sCAAsC;EAC7C;EACAP,WAAWA,CAACC,OAAe,EAAEC,OAA6C,EAAE;IAC1E,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAG,wBAAA,GAAAA,wBAAA;AAGO,MAAMC,mCAAmC,SAASX,eAAe,CAAC;EACvES,IAAI,GAAG,2CAA2C;EAClD;EACAP,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAI,mCAAA,GAAAA,mCAAA;AAGO,MAAMC,qBAAqB,SAASZ,eAAe,CAAC;EACzDS,IAAI,GAAG,4BAA4B;EACnCP,WAAWA,CAACC,OAAe,EAAE;IAC3B,KAAK,CAACA,OAAO,EAAEU,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AAFAN,OAAA,CAAAK,qBAAA,GAAAA,qBAAA;AAGO,MAAME,8BAA8B,SAASd,eAAe,CAAC;EAClES,IAAI,GAAG,sCAAsC;EAC7C;EACAP,WAAWA,CACTC,OAAe,EACfC,OAAqE,EACrE;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAO,8BAAA,GAAAA,8BAAA;AAGO,MAAMC,0BAA0B,SAASf,eAAe,CAAC;EAC9DS,IAAI,GAAG,kCAAkC;EACzCP,WAAWA,CAAA,EAA0D;IAAA,IAAzDC,OAAO,GAAAa,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAH,SAAA,GAAAG,SAAA,MAAG,6CAA6C;IACjE,KAAK,CAACb,OAAO,EAAEU,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AAFAN,OAAA,CAAAQ,0BAAA,GAAAA,0BAAA;AAGO,MAAMG,oBAAoB,SAASlB,eAAe,CAAC;EACxDS,IAAI,GAAG,2BAA2B;EAClCP,WAAWA,CAAA,EAA2C;IAAA,IAA1CC,OAAO,GAAAa,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAH,SAAA,GAAAG,SAAA,MAAG,8BAA8B;IAClD,KAAK,CAACb,OAAO,EAAEU,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA;AAHAN,OAAA,CAAAW,oBAAA,GAAAA,oBAAA;AAIO,MAAMC,sBAAsB,SAASnB,eAAe,CAAC;EAC1DS,IAAI,GAAG,oCAAoC;EAC3C;EACAP,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AAFAG,OAAA,CAAAY,sBAAA,GAAAA,sBAAA;AAGO,MAAMC,2BAA2B,SAASpB,eAAe,CAAC;EAC/DS,IAAI,GAAG,mCAAmC;EAC1C;EACAP,WAAWA,CAACC,OAAe,EAAEC,OAA4B,EAAE;IACzD,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA;AAHAG,OAAA,CAAAa,2BAAA,GAAAA,2BAAA;AAIO,MAAMC,mBAAmB,SAASrB,eAAe,CAAC;EACvDS,IAAI,GAAG,gCAAgC;EACvC;EACAP,WAAWA,CACTC,OAAe,EACfC,OAMC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;AAACG,OAAA,CAAAc,mBAAA,GAAAA,mBAAA"}

package/lib/commonjs/trust/common/types.js

@@ -16,26 +16,26 @@ const TrustMark = z.object({
 exports.TrustMark = TrustMark;
 const EntityStatement = z.object({
   header: z.object({
-    typ: z.literal("entity-statement+jwt"),
     alg: z.string(),
-    kid: z.string()
+    kid: z.string(),
+    typ: z.literal("entity-statement+jwt")
   }),
   payload: z.object({
+    exp: z.number(),
+    iat: z.number(),
     iss: z.string(),
-    sub: z.string(),
     jwks: z.object({
       keys: z.array(_jwk.JWK)
     }),
-    trust_marks: z.array(TrustMark).optional(),
-    iat: z.number(),
-    exp: z.number()
+    sub: z.string(),
+    trust_marks: z.array(TrustMark).optional()
   })
 });
 exports.EntityStatement = EntityStatement;
 const EntityConfigurationHeader = z.object({
-  typ: z.literal("entity-statement+jwt"),
   alg: z.string(),
-  kid: z.string()
+  kid: z.string(),
+  typ: z.literal("entity-statement+jwt")
 });
 
 /**
@@ -43,19 +43,19 @@ const EntityConfigurationHeader = z.object({
  */
 exports.EntityConfigurationHeader = EntityConfigurationHeader;
 const FederationEntityMetadata = z.object({
+  contacts: z.array(z.string()).optional(),
+  endpoint_auth_signing_alg_values_supported: z.string().optional(),
   federation_fetch_endpoint: z.string().optional(),
+  federation_historical_keys_endpoint: z.string().optional(),
   federation_list_endpoint: z.string().optional(),
   federation_resolve_endpoint: z.string().optional(),
-  federation_trust_mark_status_endpoint: z.string().optional(),
-  federation_trust_mark_list_endpoint: z.string().optional(),
   federation_trust_mark_endpoint: z.string().optional(),
-  federation_historical_keys_endpoint: z.string().optional(),
-  endpoint_auth_signing_alg_values_supported: z.string().optional(),
-  organization_name: z.string().optional(),
+  federation_trust_mark_list_endpoint: z.string().optional(),
+  federation_trust_mark_status_endpoint: z.string().optional(),
   homepage_uri: z.string().optional(),
-  policy_uri: z.string().optional(),
   logo_uri: z.string().optional(),
-  contacts: z.array(z.string()).optional()
+  organization_name: z.string().optional(),
+  policy_uri: z.string().optional()
 }).loose();
 
 // Structure common to every Entity Configuration document
@@ -63,17 +63,17 @@ exports.FederationEntityMetadata = FederationEntityMetadata;
 const BaseEntityConfiguration = z.object({
   header: EntityConfigurationHeader,
   payload: z.object({
-    iss: z.string(),
-    sub: z.string(),
-    iat: _zod2.UnixTime,
-    exp: _zod2.UnixTime,
     authority_hints: z.array(z.string()).optional(),
+    exp: _zod2.UnixTime,
+    iat: _zod2.UnixTime,
+    iss: z.string(),
+    jwks: z.object({
+      keys: z.array(_jwk.JWK)
+    }),
     metadata: z.object({
       federation_entity: FederationEntityMetadata
     }).loose(),
-    jwks: z.object({
-      keys: z.array(_jwk.JWK)
-    })
+    sub: z.string()
   }).loose()
 });
 exports.BaseEntityConfiguration = BaseEntityConfiguration;

package/lib/commonjs/trust/common/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","_interopRequireWildcard","require","_jwk","_zod2","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","TrustMark","object","id","string","trust_mark","exports","EntityStatement","header","typ","literal","alg","kid","payload","iss","sub","jwks","keys","array","JWK","trust_marks","optional","iat","number","exp","EntityConfigurationHeader","FederationEntityMetadata","federation_fetch_endpoint","federation_list_endpoint","federation_resolve_endpoint","federation_trust_mark_status_endpoint","federation_trust_mark_list_endpoint","federation_trust_mark_endpoint","federation_historical_keys_endpoint","endpoint_auth_signing_alg_values_supported","organization_name","homepage_uri","policy_uri","logo_uri","contacts","loose","BaseEntityConfiguration","UnixTime","authority_hints","metadata","federation_entity","FederationListResponse"],"sourceRoot":"../../../../src","sources":["trust/common/types.ts"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AAA2C,SAAAG,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAL,wBAAAS,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAEpC,MAAMW,SAAS,GAAG3B,CAAC,CAAC4B,MAAM,CAAC;EAAEC,EAAE,EAAE7B,CAAC,CAAC8B,MAAM,CAAC,CAAC;EAAEC,UAAU,EAAE/B,CAAC,CAAC8B,MAAM,CAAC;AAAE,CAAC,CAAC;AAACE,OAAA,CAAAL,SAAA,GAAAA,SAAA;AAIvE,MAAMM,eAAe,GAAGjC,CAAC,CAAC4B,MAAM,CAAC;EACtCM,MAAM,EAAElC,CAAC,CAAC4B,MAAM,CAAC;IACfO,GAAG,EAAEnC,CAAC,CAACoC,OAAO,CAAC,sBAAsB,CAAC;IACtCC,GAAG,EAAErC,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfQ,GAAG,EAAEtC,CAAC,CAAC8B,MAAM,CAAC;EAChB,CAAC,CAAC;EACFS,OAAO,EAAEvC,CAAC,CAAC4B,MAAM,CAAC;IAChBY,GAAG,EAAExC,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfW,GAAG,EAAEzC,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfY,IAAI,EAAE1C,CAAC,CAAC4B,MAAM,CAAC;MAAEe,IAAI,EAAE3C,CAAC,CAAC4C,KAAK,CAACC,QAAG;IAAE,CAAC,CAAC;IACtCC,WAAW,EAAE9C,CAAC,CAAC4C,KAAK,CAACjB,SAAS,CAAC,CAACoB,QAAQ,CAAC,CAAC;IAC1CC,GAAG,EAAEhD,CAAC,CAACiD,MAAM,CAAC,CAAC;IACfC,GAAG,EAAElD,CAAC,CAACiD,MAAM,CAAC;EAChB,CAAC;AACH,CAAC,CAAC;AAACjB,OAAA,CAAAC,eAAA,GAAAA,eAAA;AAKI,MAAMkB,yBAAyB,GAAGnD,CAAC,CAAC4B,MAAM,CAAC;EAChDO,GAAG,EAAEnC,CAAC,CAACoC,OAAO,CAAC,sBAAsB,CAAC;EACtCC,GAAG,EAAErC,CAAC,CAAC8B,MAAM,CAAC,CAAC;EACfQ,GAAG,EAAEtC,CAAC,CAAC8B,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AAFAE,OAAA,CAAAmB,yBAAA,GAAAA,yBAAA;AAGO,MAAMC,wBAAwB,GAAGpD,CAAC,CACtC4B,MAAM,CAAC;EACNyB,yBAAyB,EAAErD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EAChDO,wBAAwB,EAAEtD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EAC/CQ,2BAA2B,EAAEvD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EAClDS,qCAAqC,EAAExD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EAC5DU,mCAAmC,EAAEzD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EAC1DW,8BAA8B,EAAE1D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EACrDY,mCAAmC,EAAE3D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EAC1Da,0CAA0C,EAAE5D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EACjEc,iBAAiB,EAAE7D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EACxCe,YAAY,EAAE9D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EACnCgB,UAAU,EAAE/D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EACjCiB,QAAQ,EAAEhE,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;EAC/BkB,QAAQ,EAAEjE,CAAC,CAAC4C,KAAK,CAAC5C,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAAC,CAACiB,QAAQ,CAAC;AACzC,CAAC,CAAC,CACDmB,KAAK,CAAC,CAAC;;AAEV;AAAAlC,OAAA,CAAAoB,wBAAA,GAAAA,wBAAA;AAEO,MAAMe,uBAAuB,GAAGnE,CAAC,CAAC4B,MAAM,CAAC;EAC9CM,MAAM,EAAEiB,yBAAyB;EACjCZ,OAAO,EAAEvC,CAAC,CACP4B,MAAM,CAAC;IACNY,GAAG,EAAExC,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfW,GAAG,EAAEzC,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfkB,GAAG,EAAEoB,cAAQ;IACblB,GAAG,EAAEkB,cAAQ;IACbC,eAAe,EAAErE,CAAC,CAAC4C,KAAK,CAAC5C,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAAC,CAACiB,QAAQ,CAAC,CAAC;IAC/CuB,QAAQ,EAAEtE,CAAC,CACR4B,MAAM,CAAC;MACN2C,iBAAiB,EAAEnB;IACrB,CAAC,CAAC,CACDc,KAAK,CAAC,CAAC;IACVxB,IAAI,EAAE1C,CAAC,CAAC4B,MAAM,CAAC;MACbe,IAAI,EAAE3C,CAAC,CAAC4C,KAAK,CAACC,QAAG;IACnB,CAAC;EACH,CAAC,CAAC,CACDqB,KAAK,CAAC;AACX,CAAC,CAAC;AAAClC,OAAA,CAAAmC,uBAAA,GAAAA,uBAAA;AAEI,MAAMK,sBAAsB,GAAGxE,CAAC,CAAC4C,KAAK,CAAC5C,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAAC;AAACE,OAAA,CAAAwC,sBAAA,GAAAA,sBAAA"}
+{"version":3,"names":["z","_interopRequireWildcard","require","_jwk","_zod2","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","TrustMark","object","id","string","trust_mark","exports","EntityStatement","header","alg","kid","typ","literal","payload","exp","number","iat","iss","jwks","keys","array","JWK","sub","trust_marks","optional","EntityConfigurationHeader","FederationEntityMetadata","contacts","endpoint_auth_signing_alg_values_supported","federation_fetch_endpoint","federation_historical_keys_endpoint","federation_list_endpoint","federation_resolve_endpoint","federation_trust_mark_endpoint","federation_trust_mark_list_endpoint","federation_trust_mark_status_endpoint","homepage_uri","logo_uri","organization_name","policy_uri","loose","BaseEntityConfiguration","authority_hints","UnixTime","metadata","federation_entity","FederationListResponse"],"sourceRoot":"../../../../src","sources":["trust/common/types.ts"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,uBAAA,CAAAC,OAAA;AAEA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AAA2C,SAAAG,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAL,wBAAAS,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAEpC,MAAMW,SAAS,GAAG3B,CAAC,CAAC4B,MAAM,CAAC;EAAEC,EAAE,EAAE7B,CAAC,CAAC8B,MAAM,CAAC,CAAC;EAAEC,UAAU,EAAE/B,CAAC,CAAC8B,MAAM,CAAC;AAAE,CAAC,CAAC;AAACE,OAAA,CAAAL,SAAA,GAAAA,SAAA;AAIvE,MAAMM,eAAe,GAAGjC,CAAC,CAAC4B,MAAM,CAAC;EACtCM,MAAM,EAAElC,CAAC,CAAC4B,MAAM,CAAC;IACfO,GAAG,EAAEnC,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfM,GAAG,EAAEpC,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfO,GAAG,EAAErC,CAAC,CAACsC,OAAO,CAAC,sBAAsB;EACvC,CAAC,CAAC;EACFC,OAAO,EAAEvC,CAAC,CAAC4B,MAAM,CAAC;IAChBY,GAAG,EAAExC,CAAC,CAACyC,MAAM,CAAC,CAAC;IACfC,GAAG,EAAE1C,CAAC,CAACyC,MAAM,CAAC,CAAC;IACfE,GAAG,EAAE3C,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfc,IAAI,EAAE5C,CAAC,CAAC4B,MAAM,CAAC;MAAEiB,IAAI,EAAE7C,CAAC,CAAC8C,KAAK,CAACC,QAAG;IAAE,CAAC,CAAC;IACtCC,GAAG,EAAEhD,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfmB,WAAW,EAAEjD,CAAC,CAAC8C,KAAK,CAACnB,SAAS,CAAC,CAACuB,QAAQ,CAAC;EAC3C,CAAC;AACH,CAAC,CAAC;AAAClB,OAAA,CAAAC,eAAA,GAAAA,eAAA;AAKI,MAAMkB,yBAAyB,GAAGnD,CAAC,CAAC4B,MAAM,CAAC;EAChDO,GAAG,EAAEnC,CAAC,CAAC8B,MAAM,CAAC,CAAC;EACfM,GAAG,EAAEpC,CAAC,CAAC8B,MAAM,CAAC,CAAC;EACfO,GAAG,EAAErC,CAAC,CAACsC,OAAO,CAAC,sBAAsB;AACvC,CAAC,CAAC;;AAEF;AACA;AACA;AAFAN,OAAA,CAAAmB,yBAAA,GAAAA,yBAAA;AAGO,MAAMC,wBAAwB,GAAGpD,CAAC,CACtC4B,MAAM,CAAC;EACNyB,QAAQ,EAAErD,CAAC,CAAC8C,KAAK,CAAC9C,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EACxCI,0CAA0C,EAAEtD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EACjEK,yBAAyB,EAAEvD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EAChDM,mCAAmC,EAAExD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EAC1DO,wBAAwB,EAAEzD,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EAC/CQ,2BAA2B,EAAE1D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EAClDS,8BAA8B,EAAE3D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EACrDU,mCAAmC,EAAE5D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EAC1DW,qCAAqC,EAAE7D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EAC5DY,YAAY,EAAE9D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EACnCa,QAAQ,EAAE/D,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EAC/Bc,iBAAiB,EAAEhE,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;EACxCe,UAAU,EAAEjE,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAACoB,QAAQ,CAAC;AAClC,CAAC,CAAC,CACDgB,KAAK,CAAC,CAAC;;AAEV;AAAAlC,OAAA,CAAAoB,wBAAA,GAAAA,wBAAA;AAEO,MAAMe,uBAAuB,GAAGnE,CAAC,CAAC4B,MAAM,CAAC;EAC9CM,MAAM,EAAEiB,yBAAyB;EACjCZ,OAAO,EAAEvC,CAAC,CACP4B,MAAM,CAAC;IACNwC,eAAe,EAAEpE,CAAC,CAAC8C,KAAK,CAAC9C,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAAC,CAACoB,QAAQ,CAAC,CAAC;IAC/CV,GAAG,EAAE6B,cAAQ;IACb3B,GAAG,EAAE2B,cAAQ;IACb1B,GAAG,EAAE3C,CAAC,CAAC8B,MAAM,CAAC,CAAC;IACfc,IAAI,EAAE5C,CAAC,CAAC4B,MAAM,CAAC;MACbiB,IAAI,EAAE7C,CAAC,CAAC8C,KAAK,CAACC,QAAG;IACnB,CAAC,CAAC;IACFuB,QAAQ,EAAEtE,CAAC,CACR4B,MAAM,CAAC;MACN2C,iBAAiB,EAAEnB;IACrB,CAAC,CAAC,CACDc,KAAK,CAAC,CAAC;IACVlB,GAAG,EAAEhD,CAAC,CAAC8B,MAAM,CAAC;EAChB,CAAC,CAAC,CACDoC,KAAK,CAAC;AACX,CAAC,CAAC;AAAClC,OAAA,CAAAmC,uBAAA,GAAAA,uBAAA;AAEI,MAAMK,sBAAsB,GAAGxE,CAAC,CAAC8C,KAAK,CAAC9C,CAAC,CAAC8B,MAAM,CAAC,CAAC,CAAC;AAACE,OAAA,CAAAwC,sBAAA,GAAAA,sBAAA"}

package/lib/commonjs/trust/common/utils.js

@@ -21,8 +21,8 @@ const verify = async (token, kid, jwks) => {
     throw new Error(`Invalid kid: ${kid}, token: ${token}`);
   }
   const {
-    protectedHeader: header,
-    payload
+    payload,
+    protectedHeader: header
   } = await (0, _ioReactNativeJwt.verify)(token, jwk);
   return {
     header,
@@ -37,8 +37,8 @@ const verify = async (token, kid, jwks) => {
 exports.verify = verify;
 const decode = token => {
   const {
-    protectedHeader: header,
-    payload
+    payload,
+    protectedHeader: header
   } = (0, _ioReactNativeJwt.decode)(token);
   return {
     header,
@@ -47,29 +47,30 @@ const decode = token => {
 };
 
 /**
- * Extracts the X.509 Trust Anchor certificate (Base64 encoded) from the
- * Trust Anchor's Entity Configuration.
+ * Fetch the federation list document from a given endpoint.
  *
- * @param trustAnchorEntity The entity configuration of the known trust anchor.
- * @returns The Base64 encoded X.509 certificate string.
- * @throws {FederationError} If the certificate cannot be derived.
+ * @param federationListEndpoint The URL of the federation list endpoint.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The federation list as an array of strings.
+ * @throws {IoWalletError} If the HTTP request fails.
+ * @throws {FederationError} If the result is not in the expected format.
  */
 exports.decode = decode;
-function getTrustAnchorX509Certificate(trustAnchorEntity) {
-  const taHeaderKid = trustAnchorEntity.jwt.header.kid;
-  const taSigningJwk = trustAnchorEntity.keys.find(key => key.kid === taHeaderKid);
-  if (!taSigningJwk) {
-    throw new _errors.FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' not found in Trust Anchor's JWKS.`, {
-      trustAnchorKid: taHeaderKid,
-      reason: "JWK not found for header kid"
-    });
-  }
-  if (taSigningJwk.x5c && taSigningJwk.x5c.length > 0 && taSigningJwk.x5c[0]) {
-    return taSigningJwk.x5c[0];
-  }
-  throw new _errors.FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' does not contain a valid 'x5c' certificate array.`, {
-    trustAnchorKid: taHeaderKid,
-    reason: "Missing or empty x5c in JWK"
+async function getFederationList(federationListEndpoint) {
+  let {
+    appFetch = fetch
+  } = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
+  return await appFetch(federationListEndpoint, {
+    method: "GET"
+  }).then((0, _misc.hasStatusOrThrow)(200)).then(res => res.json()).then(json => {
+    const result = _types.FederationListResponse.safeParse(json);
+    if (!result.success) {
+      throw new _errors.FederationListParseError(`Invalid federation list format received from ${federationListEndpoint}. Error: ${result.error.message}`, {
+        parseError: result.error.toString(),
+        url: federationListEndpoint
+      });
+    }
+    return result.data;
   });
 }
 
@@ -111,29 +112,28 @@ async function getSignedEntityStatement(federationFetchEndpoint, subordinatedEnt
 }
 
 /**
- * Fetch the federation list document from a given endpoint.
+ * Extracts the X.509 Trust Anchor certificate (Base64 encoded) from the
+ * Trust Anchor's Entity Configuration.
  *
- * @param federationListEndpoint The URL of the federation list endpoint.
- * @param appFetch An optional instance of the http client to be used.
- * @returns The federation list as an array of strings.
- * @throws {IoWalletError} If the HTTP request fails.
- * @throws {FederationError} If the result is not in the expected format.
+ * @param trustAnchorEntity The entity configuration of the known trust anchor.
+ * @returns The Base64 encoded X.509 certificate string.
+ * @throws {FederationError} If the certificate cannot be derived.
  */
-async function getFederationList(federationListEndpoint) {
-  let {
-    appFetch = fetch
-  } = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
-  return await appFetch(federationListEndpoint, {
-    method: "GET"
-  }).then((0, _misc.hasStatusOrThrow)(200)).then(res => res.json()).then(json => {
-    const result = _types.FederationListResponse.safeParse(json);
-    if (!result.success) {
-      throw new _errors.FederationListParseError(`Invalid federation list format received from ${federationListEndpoint}. Error: ${result.error.message}`, {
-        url: federationListEndpoint,
-        parseError: result.error.toString()
-      });
-    }
-    return result.data;
+function getTrustAnchorX509Certificate(trustAnchorEntity) {
+  const taHeaderKid = trustAnchorEntity.jwt.header.kid;
+  const taSigningJwk = trustAnchorEntity.keys.find(key => key.kid === taHeaderKid);
+  if (!taSigningJwk) {
+    throw new _errors.FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' not found in Trust Anchor's JWKS.`, {
+      reason: "JWK not found for header kid",
+      trustAnchorKid: taHeaderKid
+    });
+  }
+  if (taSigningJwk.x5c && taSigningJwk.x5c.length > 0 && taSigningJwk.x5c[0]) {
+    return taSigningJwk.x5c[0];
+  }
+  throw new _errors.FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' does not contain a valid 'x5c' certificate array.`, {
+    reason: "Missing or empty x5c in JWK",
+    trustAnchorKid: taHeaderKid
   });
 }
 //# sourceMappingURL=utils.js.map