@pagopa/io-react-native-wallet 3.6.3 → 3.7.0

package/lib/commonjs/trust/common/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_misc","_errors","_types","verify","token","kid","jwks","jwk","find","k","Error","protectedHeader","header","payload","verifyJwt","exports","decode","decodeJwt","getTrustAnchorX509Certificate","trustAnchorEntity","taHeaderKid","jwt","taSigningJwk","keys","key","FederationError","trustAnchorKid","reason","x5c","length","getSignedEntityConfiguration","entityBaseUrl","appFetch","fetch","arguments","undefined","wellKnownUrl","method","then","hasStatusOrThrow","res","text","getSignedEntityStatement","federationFetchEndpoint","subordinatedEntityBaseUrl","url","URL","searchParams","set","toString","getFederationList","federationListEndpoint","json","result","FederationListResponse","safeParse","success","FederationListParseError","error","message","parseError","data"],"sourceRoot":"../../../../src","sources":["trust/common/utils.ts"],"mappings":";;;;;;;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AAKA,IAAAC,KAAA,GAAAD,OAAA;AAEA,IAAAE,OAAA,GAAAF,OAAA;AAEA,IAAAG,MAAA,GAAAH,OAAA;AAWA;AACA;AACO,MAAMI,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,GAAW,EACXC,IAAW,KACc;EACzB,MAAMC,GAAG,GAAGD,IAAI,CAACE,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACJ,GAAG,KAAKA,GAAG,CAAC;EAC3C,IAAI,CAACE,GAAG,EAAE;IACR,MAAM,IAAIG,KAAK,CAAE,gBAAeL,GAAI,YAAWD,KAAM,EAAC,CAAC;EACzD;EACA,MAAM;IAAEO,eAAe,EAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAG,MAAM,IAAAC,wBAAS,EAACV,KAAK,EAAEG,GAAG,CAAC;EACxE,OAAO;IAAEK,MAAM;IAAEC;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AAHAE,OAAA,CAAAZ,MAAA,GAAAA,MAAA;AAIO,MAAMa,MAAM,GAAIZ,KAAa,IAAkB;EACpD,MAAM;IAAEO,eAAe,EAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAG,IAAAI,wBAAS,EAACb,KAAK,CAAC;EAC7D,OAAO;IAAEQ,MAAM;IAAEC;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAE,OAAA,CAAAC,MAAA,GAAAA,MAAA;AAQO,SAASE,6BAA6BA,CAC3CC,iBAAoC,EAC5B;EACR,MAAMC,WAAW,GAAGD,iBAAiB,CAACE,GAAG,CAACT,MAAM,CAACP,GAAG;EACpD,MAAMiB,YAAY,GAAGH,iBAAiB,CAACI,IAAI,CAACf,IAAI,CAC7CgB,GAAG,IAAKA,GAAG,CAACnB,GAAG,KAAKe,WACvB,CAAC;EAED,IAAI,CAACE,YAAY,EAAE;IACjB,MAAM,IAAIG,uBAAe,CACtB,+DAA8DL,WAAY,qCAAoC,EAC/G;MAAEM,cAAc,EAAEN,WAAW;MAAEO,MAAM,EAAE;IAA+B,CACxE,CAAC;EACH;EAEA,IAAIL,YAAY,CAACM,GAAG,IAAIN,YAAY,CAACM,GAAG,CAACC,MAAM,GAAG,CAAC,IAAIP,YAAY,CAACM,GAAG,CAAC,CAAC,CAAC,EAAE;IAC1E,OAAON,YAAY,CAACM,GAAG,CAAC,CAAC,CAAC;EAC5B;EAEA,MAAM,IAAIH,uBAAe,CACtB,+DAA8DL,WAAY,qDAAoD,EAC/H;IAAEM,cAAc,EAAEN,WAAW;IAAEO,MAAM,EAAE;EAA8B,CACvE,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeG,4BAA4BA,CAChDC,aAAqB,EAEJ;EAAA,IADjB;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAME,YAAY,GAAI,GAAEL,aAAc,gCAA+B;EAErE,OAAO,MAAMC,QAAQ,CAACI,YAAY,EAAE;IAClCC,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,wBAAwBA,CAC5CC,uBAA+B,EAC/BC,yBAAiC,EAEjC;EAAA,IADA;IAAEZ,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMW,GAAG,GAAG,IAAIC,GAAG,CAACH,uBAAuB,CAAC;EAC5CE,GAAG,CAACE,YAAY,CAACC,GAAG,CAAC,KAAK,EAAEJ,yBAAyB,CAAC;EAEtD,OAAO,MAAMZ,QAAQ,CAACa,GAAG,CAACI,QAAQ,CAAC,CAAC,EAAE;IACpCZ,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeS,iBAAiBA,CACrCC,sBAA8B,EAEX;EAAA,IADnB;IAAEnB,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,OAAO,MAAMF,QAAQ,CAACmB,sBAAsB,EAAE;IAC5Cd,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACY,IAAI,CAAC,CAAC,CAAC,CACzBd,IAAI,CAAEc,IAAI,IAAK;IACd,MAAMC,MAAM,GAAGC,6BAAsB,CAACC,SAAS,CAACH,IAAI,CAAC;IACrD,IAAI,CAACC,MAAM,CAACG,OAAO,EAAE;MACnB,MAAM,IAAIC,gCAAwB,CAC/B,gDAA+CN,sBAAuB,YAAWE,MAAM,CAACK,KAAK,CAACC,OAAQ,EAAC,EACxG;QAAEd,GAAG,EAAEM,sBAAsB;QAAES,UAAU,EAAEP,MAAM,CAACK,KAAK,CAACT,QAAQ,CAAC;MAAE,CACrE,CAAC;IACH;IACA,OAAOI,MAAM,CAACQ,IAAI;EACpB,CAAC,CAAC;AACN"}
+{"version":3,"names":["_ioReactNativeJwt","require","_misc","_errors","_types","verify","token","kid","jwks","jwk","find","k","Error","payload","protectedHeader","header","verifyJwt","exports","decode","decodeJwt","getFederationList","federationListEndpoint","appFetch","fetch","arguments","length","undefined","method","then","hasStatusOrThrow","res","json","result","FederationListResponse","safeParse","success","FederationListParseError","error","message","parseError","toString","url","data","getSignedEntityConfiguration","entityBaseUrl","wellKnownUrl","text","getSignedEntityStatement","federationFetchEndpoint","subordinatedEntityBaseUrl","URL","searchParams","set","getTrustAnchorX509Certificate","trustAnchorEntity","taHeaderKid","jwt","taSigningJwk","keys","key","FederationError","reason","trustAnchorKid","x5c"],"sourceRoot":"../../../../src","sources":["trust/common/utils.ts"],"mappings":";;;;;;;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AAQA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AAWA;AACA;AACO,MAAMI,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,GAAW,EACXC,IAAW,KACc;EACzB,MAAMC,GAAG,GAAGD,IAAI,CAACE,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACJ,GAAG,KAAKA,GAAG,CAAC;EAC3C,IAAI,CAACE,GAAG,EAAE;IACR,MAAM,IAAIG,KAAK,CAAE,gBAAeL,GAAI,YAAWD,KAAM,EAAC,CAAC;EACzD;EACA,MAAM;IAAEO,OAAO;IAAEC,eAAe,EAAEC;EAAO,CAAC,GAAG,MAAM,IAAAC,wBAAS,EAACV,KAAK,EAAEG,GAAG,CAAC;EACxE,OAAO;IAAEM,MAAM;IAAEF;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AAHAI,OAAA,CAAAZ,MAAA,GAAAA,MAAA;AAIO,MAAMa,MAAM,GAAIZ,KAAa,IAAkB;EACpD,MAAM;IAAEO,OAAO;IAAEC,eAAe,EAAEC;EAAO,CAAC,GAAG,IAAAI,wBAAS,EAACb,KAAK,CAAC;EAC7D,OAAO;IAAES,MAAM;IAAEF;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AARAI,OAAA,CAAAC,MAAA,GAAAA,MAAA;AASO,eAAeE,iBAAiBA,CACrCC,sBAA8B,EAEX;EAAA,IADnB;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,OAAO,MAAMF,QAAQ,CAACD,sBAAsB,EAAE;IAC5CM,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBH,IAAI,CAAEG,IAAI,IAAK;IACd,MAAMC,MAAM,GAAGC,6BAAsB,CAACC,SAAS,CAACH,IAAI,CAAC;IACrD,IAAI,CAACC,MAAM,CAACG,OAAO,EAAE;MACnB,MAAM,IAAIC,gCAAwB,CAC/B,gDAA+Cf,sBAAuB,YAAWW,MAAM,CAACK,KAAK,CAACC,OAAQ,EAAC,EACxG;QAAEC,UAAU,EAAEP,MAAM,CAACK,KAAK,CAACG,QAAQ,CAAC,CAAC;QAAEC,GAAG,EAAEpB;MAAuB,CACrE,CAAC;IACH;IACA,OAAOW,MAAM,CAACU,IAAI;EACpB,CAAC,CAAC;AACN;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,4BAA4BA,CAChDC,aAAqB,EAEJ;EAAA,IADjB;IAAEtB,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMqB,YAAY,GAAI,GAAED,aAAc,gCAA+B;EAErE,OAAO,MAAMtB,QAAQ,CAACuB,YAAY,EAAE;IAClClB,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACgB,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,wBAAwBA,CAC5CC,uBAA+B,EAC/BC,yBAAiC,EAEjC;EAAA,IADA;IAAE3B,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMiB,GAAG,GAAG,IAAIS,GAAG,CAACF,uBAAuB,CAAC;EAC5CP,GAAG,CAACU,YAAY,CAACC,GAAG,CAAC,KAAK,EAAEH,yBAAyB,CAAC;EAEtD,OAAO,MAAM3B,QAAQ,CAACmB,GAAG,CAACD,QAAQ,CAAC,CAAC,EAAE;IACpCb,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAAC,IAAAC,sBAAgB,EAAC,GAAG,CAAC,CAAC,CAC3BD,IAAI,CAAEE,GAAG,IAAKA,GAAG,CAACgB,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASO,6BAA6BA,CAC3CC,iBAAoC,EAC5B;EACR,MAAMC,WAAW,GAAGD,iBAAiB,CAACE,GAAG,CAACzC,MAAM,CAACR,GAAG;EACpD,MAAMkD,YAAY,GAAGH,iBAAiB,CAACI,IAAI,CAAChD,IAAI,CAC7CiD,GAAG,IAAKA,GAAG,CAACpD,GAAG,KAAKgD,WACvB,CAAC;EAED,IAAI,CAACE,YAAY,EAAE;IACjB,MAAM,IAAIG,uBAAe,CACtB,+DAA8DL,WAAY,qCAAoC,EAC/G;MAAEM,MAAM,EAAE,8BAA8B;MAAEC,cAAc,EAAEP;IAAY,CACxE,CAAC;EACH;EAEA,IAAIE,YAAY,CAACM,GAAG,IAAIN,YAAY,CAACM,GAAG,CAACtC,MAAM,GAAG,CAAC,IAAIgC,YAAY,CAACM,GAAG,CAAC,CAAC,CAAC,EAAE;IAC1E,OAAON,YAAY,CAACM,GAAG,CAAC,CAAC,CAAC;EAC5B;EAEA,MAAM,IAAIH,uBAAe,CACtB,+DAA8DL,WAAY,qDAAoD,EAC/H;IAAEM,MAAM,EAAE,6BAA6B;IAAEC,cAAc,EAAEP;EAAY,CACvE,CAAC;AACH"}

package/lib/commonjs/trust/common/verify-chain.js

@@ -4,20 +4,105 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.createVerifyTrustChain = createVerifyTrustChain;
-var _utils = require("./utils");
-var _errors = require("./errors");
 var _ioReactNativeCrypto = require("@pagopa/io-react-native-crypto");
+var _errors = require("./errors");
+var _utils = require("./utils");
+/**
+ * Factory function to create `verifyTrustChain`.
+ * @param config Version specific Entity shapes
+ * @returns `verifyTrustChain` function compliant with the public API
+ */
+function createVerifyTrustChain(config) {
+  return async function verifyTrustChain(trustAnchorEntity, chain) {
+    let x509Options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
+      connectTimeout: 10000,
+      readTimeout: 10000,
+      requireCrl: true
+    };
+    let {
+      appFetch = fetch,
+      renewOnFail = true
+    } = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
+    const validateTrustChain = createValidateTrustChain(config);
+    const renewTrustChain = createRenewTrustChain(config);
+    try {
+      return await validateTrustChain(trustAnchorEntity, chain, x509Options);
+    } catch (error) {
+      if (renewOnFail) {
+        const renewedChain = await renewTrustChain(chain, appFetch);
+        return validateTrustChain(trustAnchorEntity, renewedChain, x509Options);
+      } else {
+        throw error;
+      }
+    }
+  };
+}
+
+/**
+ * Factory function to create `renewTrustChain`.
+ * @param config Version specific Entity shapes
+ * @returns `renewTrustChain` function
+ */
+function createRenewTrustChain(_ref) {
+  let {
+    EntityConfigurationShape,
+    EntityStatementShape
+  } = _ref;
+  /**
+   * Given a trust chain, obtain a new trust chain by fetching each element's fresh version
+   *
+   * @param chain The original chain
+   * @param appFetch (optional) fetch api implementation
+   * @returns A list of signed token that represent the trust chain, in the same order of the provided chain
+   * @throws {FederationError} If the chain is not valid
+   */
+  return async function renewTrustChain(chain) {
+    let appFetch = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : fetch;
+    return Promise.all(chain.map(async (token, index) => {
+      const decoded = (0, _utils.decode)(token);
+      const entityStatementResult = EntityStatementShape.safeParse(decoded);
+      const entityConfigurationResult = EntityConfigurationShape.safeParse(decoded);
+      if (entityConfigurationResult.success) {
+        return (0, _utils.getSignedEntityConfiguration)(entityConfigurationResult.data.payload.iss, {
+          appFetch
+        });
+      }
+      if (entityStatementResult.success) {
+        const entityStatement = entityStatementResult.data;
+        const parentBaseUrl = entityStatement.payload.iss;
+        const parentECJwt = await (0, _utils.getSignedEntityConfiguration)(parentBaseUrl, {
+          appFetch
+        });
+        const parentEC = EntityConfigurationShape.parse((0, _utils.decode)(parentECJwt));
+        const federationFetchEndpoint = parentEC.payload.metadata.federation_entity.federation_fetch_endpoint;
+        if (!federationFetchEndpoint) {
+          throw new _errors.MissingFederationFetchEndpointError(`Parent EC at ${parentBaseUrl} is missing federation_fetch_endpoint, cannot renew ES for ${entityStatement.payload.sub}.`, {
+            entityBaseUrl: entityStatement.payload.sub,
+            missingInEntityUrl: parentBaseUrl
+          });
+        }
+        return (0, _utils.getSignedEntityStatement)(federationFetchEndpoint, entityStatement.payload.sub, {
+          appFetch
+        });
+      }
+      throw new _errors.TrustChainRenewalError(`Failed to renew trust chain. Reason: element #${index} failed to parse.`, {
+        originalChain: chain
+      });
+    }));
+  };
+}
+
 /**
  * Factory function to create `validateTrustChain`.
  * @param config Version specific Entity shapes
  * @returns `validateTrustChain` function compliant with the public API
  */
-function createValidateTrustChain(_ref) {
+function createValidateTrustChain(_ref2) {
   let {
     FirstElementShape,
-    MiddleElementShape,
-    LastElementShape
-  } = _ref;
+    LastElementShape,
+    MiddleElementShape
+  } = _ref2;
   /**
    * Validates a provided trust chain against a known trust anchor, including X.509 certificate checks.
    *
@@ -79,8 +164,8 @@ function createValidateTrustChain(_ref) {
       const jwkUsedForVerification = signerJwks.find(k => k.kid === kidFromTokenHeader);
       if (!jwkUsedForVerification) {
         throw new _errors.FederationError(`JWK with kid '${kidFromTokenHeader}' was not found in signer's JWKS for token at index ${i}, though JWT verification passed.`, {
-          tokenIndex: i,
-          kid: kidFromTokenHeader
+          kid: kidFromTokenHeader,
+          tokenIndex: i
         });
       }
       if (!jwkUsedForVerification.x5c || jwkUsedForVerification.x5c.length === 0) {
@@ -94,10 +179,10 @@ function createValidateTrustChain(_ref) {
       const x509ValidationResult = await (0, _ioReactNativeCrypto.verifyCertificateChain)(certChainBase64, x509TrustAnchorCertBase64, x509Options);
       if (!x509ValidationResult.isValid) {
         throw new _errors.X509ValidationError(`X.509 certificate chain validation failed for token at index ${i} (kid: ${kidFromTokenHeader}). Status: ${x509ValidationResult.validationStatus}. Error: ${x509ValidationResult.errorMessage}`, {
-          tokenIndex: i,
           kid: kidFromTokenHeader,
-          x509ValidationStatus: x509ValidationResult.validationStatus,
-          x509ErrorMessage: x509ValidationResult.errorMessage
+          tokenIndex: i,
+          x509ErrorMessage: x509ValidationResult.errorMessage,
+          x509ValidationStatus: x509ValidationResult.validationStatus
         });
       }
       return parsedToken;
@@ -105,89 +190,4 @@ function createValidateTrustChain(_ref) {
     return Promise.all(validationPromises);
   };
 }
-
-/**
- * Factory function to create `renewTrustChain`.
- * @param config Version specific Entity shapes
- * @returns `renewTrustChain` function
- */
-function createRenewTrustChain(_ref2) {
-  let {
-    EntityStatementShape,
-    EntityConfigurationShape
-  } = _ref2;
-  /**
-   * Given a trust chain, obtain a new trust chain by fetching each element's fresh version
-   *
-   * @param chain The original chain
-   * @param appFetch (optional) fetch api implementation
-   * @returns A list of signed token that represent the trust chain, in the same order of the provided chain
-   * @throws {FederationError} If the chain is not valid
-   */
-  return async function renewTrustChain(chain) {
-    let appFetch = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : fetch;
-    return Promise.all(chain.map(async (token, index) => {
-      const decoded = (0, _utils.decode)(token);
-      const entityStatementResult = EntityStatementShape.safeParse(decoded);
-      const entityConfigurationResult = EntityConfigurationShape.safeParse(decoded);
-      if (entityConfigurationResult.success) {
-        return (0, _utils.getSignedEntityConfiguration)(entityConfigurationResult.data.payload.iss, {
-          appFetch
-        });
-      }
-      if (entityStatementResult.success) {
-        const entityStatement = entityStatementResult.data;
-        const parentBaseUrl = entityStatement.payload.iss;
-        const parentECJwt = await (0, _utils.getSignedEntityConfiguration)(parentBaseUrl, {
-          appFetch
-        });
-        const parentEC = EntityConfigurationShape.parse((0, _utils.decode)(parentECJwt));
-        const federationFetchEndpoint = parentEC.payload.metadata.federation_entity.federation_fetch_endpoint;
-        if (!federationFetchEndpoint) {
-          throw new _errors.MissingFederationFetchEndpointError(`Parent EC at ${parentBaseUrl} is missing federation_fetch_endpoint, cannot renew ES for ${entityStatement.payload.sub}.`, {
-            entityBaseUrl: entityStatement.payload.sub,
-            missingInEntityUrl: parentBaseUrl
-          });
-        }
-        return (0, _utils.getSignedEntityStatement)(federationFetchEndpoint, entityStatement.payload.sub, {
-          appFetch
-        });
-      }
-      throw new _errors.TrustChainRenewalError(`Failed to renew trust chain. Reason: element #${index} failed to parse.`, {
-        originalChain: chain
-      });
-    }));
-  };
-}
-
-/**
- * Factory function to create `verifyTrustChain`.
- * @param config Version specific Entity shapes
- * @returns `verifyTrustChain` function compliant with the public API
- */
-function createVerifyTrustChain(config) {
-  return async function verifyTrustChain(trustAnchorEntity, chain) {
-    let x509Options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
-      connectTimeout: 10000,
-      readTimeout: 10000,
-      requireCrl: true
-    };
-    let {
-      appFetch = fetch,
-      renewOnFail = true
-    } = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
-    const validateTrustChain = createValidateTrustChain(config);
-    const renewTrustChain = createRenewTrustChain(config);
-    try {
-      return await validateTrustChain(trustAnchorEntity, chain, x509Options);
-    } catch (error) {
-      if (renewOnFail) {
-        const renewedChain = await renewTrustChain(chain, appFetch);
-        return validateTrustChain(trustAnchorEntity, renewedChain, x509Options);
-      } else {
-        throw error;
-      }
-    }
-  };
-}
 //# sourceMappingURL=verify-chain.js.map

package/lib/commonjs/trust/common/verify-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["_utils","require","_errors","_ioReactNativeCrypto","createValidateTrustChain","_ref","FirstElementShape","MiddleElementShape","LastElementShape","validateTrustChain","trustAnchorEntity","chain","x509Options","length","TrustChainEmptyError","selectTokenShape","elementIndex","selectKid","currentIndex","token","TrustChainTokenMissingError","index","shape","parse","decode","header","kid","selectKeys","keys","nextIndex","nextToken","payload","jwks","x509TrustAnchorCertBase64","getTrustAnchorX509Certificate","validationPromises","map","tokenString","i","kidFromTokenHeader","signerJwks","parsedToken","verify","jwkUsedForVerification","find","k","FederationError","tokenIndex","x5c","MissingX509CertsError","certChainBase64","at","slice","x509ValidationResult","verifyCertificateChain","isValid","X509ValidationError","validationStatus","errorMessage","x509ValidationStatus","x509ErrorMessage","Promise","all","createRenewTrustChain","_ref2","EntityStatementShape","EntityConfigurationShape","renewTrustChain","appFetch","arguments","undefined","fetch","decoded","entityStatementResult","safeParse","entityConfigurationResult","success","getSignedEntityConfiguration","data","iss","entityStatement","parentBaseUrl","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_entity","federation_fetch_endpoint","MissingFederationFetchEndpointError","sub","entityBaseUrl","missingInEntityUrl","getSignedEntityStatement","TrustChainRenewalError","originalChain","createVerifyTrustChain","config","verifyTrustChain","connectTimeout","readTimeout","requireCrl","renewOnFail","error","renewedChain"],"sourceRoot":"../../../../src","sources":["trust/common/verify-chain.ts"],"mappings":";;;;;;AAGA,IAAAA,MAAA,GAAAC,OAAA;AAMA,IAAAC,OAAA,GAAAD,OAAA;AASA,IAAAE,oBAAA,GAAAF,OAAA;AA8BA;AACA;AACA;AACA;AACA;AACA,SAASG,wBAAwBA,CAAAC,IAAA,EAIf;EAAA,IAJgB;IAChCC,iBAAiB;IACjBC,kBAAkB;IAClBC;EACa,CAAC,GAAAH,IAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeI,kBAAkBA,CACtCC,iBAAoC,EACpCC,KAAe,EACfC,WAAmC,EACX;IACxB;IACA,IAAID,KAAK,CAACE,MAAM,KAAK,CAAC,EAAE;MACtB,MAAM,IAAIC,4BAAoB,CAAC,kCAAkC,CAAC;IACpE;;IAEA;IACA,MAAMC,gBAAgB,GAAIC,YAAoB,IAC5CA,YAAY,KAAK,CAAC,GACdV,iBAAiB,GACjBU,YAAY,KAAKL,KAAK,CAACE,MAAM,GAAG,CAAC,GAC/BL,gBAAgB,GAChBD,kBAAkB;;IAE1B;IACA,MAAMU,SAAS,GAAIC,YAAoB,IAAa;MAClD,MAAMC,KAAK,GAAGR,KAAK,CAACO,YAAY,CAAC;MACjC,IAAI,CAACC,KAAK,EAAE;QACV,MAAM,IAAIC,mCAA2B,CAClC,0BAAyBF,YAAa,kBAAiB,EACxD;UAAEG,KAAK,EAAEH;QAAa,CACxB,CAAC;MACH;MACA,MAAMI,KAAK,GAAGP,gBAAgB,CAACG,YAAY,CAAC;MAC5C,OAAOI,KAAK,CAACC,KAAK,CAAC,IAAAC,aAAM,EAACL,KAAK,CAAC,CAAC,CAACM,MAAM,CAACC,GAAG;IAC9C,CAAC;;IAED;IACA;IACA,MAAMC,UAAU,GAAIT,YAAoB,IAAY;MAClD,IAAIA,YAAY,KAAKP,KAAK,CAACE,MAAM,GAAG,CAAC,EAAE;QACrC,OAAOH,iBAAiB,CAACkB,IAAI;MAC/B;MAEA,MAAMC,SAAS,GAAGX,YAAY,GAAG,CAAC;MAClC,MAAMY,SAAS,GAAGnB,KAAK,CAACkB,SAAS,CAAC;MAClC,IAAI,CAACC,SAAS,EAAE;QACd,MAAM,IAAIV,mCAA2B,CAClC,+BAA8BS,SAAU,kCAAiCX,YAAa,IAAG,EAC1F;UAAEG,KAAK,EAAEQ;QAAU,CACrB,CAAC;MACH;MACA,MAAMP,KAAK,GAAGP,gBAAgB,CAACc,SAAS,CAAC;MACzC,OAAOP,KAAK,CAACC,KAAK,CAAC,IAAAC,aAAM,EAACM,SAAS,CAAC,CAAC,CAACC,OAAO,CAACC,IAAI,CAACJ,IAAI;IACzD,CAAC;IAED,MAAMK,yBAAyB,GAC7B,IAAAC,oCAA6B,EAACxB,iBAAiB,CAAC;;IAElD;IACA;IACA,MAAMyB,kBAAkB,GAAGxB,KAAK,CAACyB,GAAG,CAAC,OAAOC,WAAW,EAAEC,CAAC,KAAK;MAC7D,MAAMC,kBAAkB,GAAGtB,SAAS,CAACqB,CAAC,CAAC;MACvC,MAAME,UAAU,GAAGb,UAAU,CAACW,CAAC,CAAC;;MAEhC;MACA,MAAMG,WAAW,GAAG,MAAM,IAAAC,aAAM,EAC9BL,WAAW,EACXE,kBAAkB,EAClBC,UACF,CAAC;;MAED;MACA,MAAMG,sBAAsB,GAAGH,UAAU,CAACI,IAAI,CAC3CC,CAAC,IAAKA,CAAC,CAACnB,GAAG,KAAKa,kBACnB,CAAC;MAED,IAAI,CAACI,sBAAsB,EAAE;QAC3B,MAAM,IAAIG,uBAAe,CACtB,iBAAgBP,kBAAmB,uDAAsDD,CAAE,mCAAkC,EAC9H;UAAES,UAAU,EAAET,CAAC;UAAEZ,GAAG,EAAEa;QAAmB,CAC3C,CAAC;MACH;MAEA,IACE,CAACI,sBAAsB,CAACK,GAAG,IAC3BL,sBAAsB,CAACK,GAAG,CAACnC,MAAM,KAAK,CAAC,EACvC;QACA,MAAM,IAAIoC,6BAAqB,CAC5B,iBAAgBV,kBAAmB,0EAAyED,CAAE,GACjH,CAAC;MACH;;MAEA;MACA;MACA;MACA,MAAMY,eAAe,GACnBP,sBAAsB,CAACK,GAAG,CAACnC,MAAM,GAAG,CAAC,IACrC8B,sBAAsB,CAACK,GAAG,CAACG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAKlB,yBAAyB,GAC3DU,sBAAsB,CAACK,GAAG,CAACI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACvCT,sBAAsB,CAACK,GAAG;MAEhC,MAAMK,oBAAiD,GACrD,MAAM,IAAAC,2CAAsB,EAC1BJ,eAAe,EACfjB,yBAAyB,EACzBrB,WACF,CAAC;MAEH,IAAI,CAACyC,oBAAoB,CAACE,OAAO,EAAE;QACjC,MAAM,IAAIC,2BAAmB,CAC1B,gEAA+DlB,CAAE,UAASC,kBAAmB,cAAac,oBAAoB,CAACI,gBAAiB,YAAWJ,oBAAoB,CAACK,YAAa,EAAC,EAC/L;UACEX,UAAU,EAAET,CAAC;UACbZ,GAAG,EAAEa,kBAAkB;UACvBoB,oBAAoB,EAAEN,oBAAoB,CAACI,gBAAgB;UAC3DG,gBAAgB,EAAEP,oBAAoB,CAACK;QACzC,CACF,CAAC;MACH;MACA,OAAOjB,WAAW;IACpB,CAAC,CAAC;IAEF,OAAOoB,OAAO,CAACC,GAAG,CAAC3B,kBAAkB,CAAC;EACxC,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAAS4B,qBAAqBA,CAAAC,KAAA,EAGZ;EAAA,IAHa;IAC7BC,oBAAoB;IACpBC;EACa,CAAC,GAAAF,KAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeG,eAAeA,CACnCxD,KAAe,EAEI;IAAA,IADnByD,QAA8B,GAAAC,SAAA,CAAAxD,MAAA,QAAAwD,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAGE,KAAK;IAEtC,OAAOV,OAAO,CAACC,GAAG,CAChBnD,KAAK,CAACyB,GAAG,CAAC,OAAOjB,KAAK,EAAEE,KAAK,KAAK;MAChC,MAAMmD,OAAO,GAAG,IAAAhD,aAAM,EAACL,KAAK,CAAC;MAE7B,MAAMsD,qBAAqB,GAAGR,oBAAoB,CAACS,SAAS,CAACF,OAAO,CAAC;MACrE,MAAMG,yBAAyB,GAC7BT,wBAAwB,CAACQ,SAAS,CAACF,OAAO,CAAC;MAE7C,IAAIG,yBAAyB,CAACC,OAAO,EAAE;QACrC,OAAO,IAAAC,mCAA4B,EACjCF,yBAAyB,CAACG,IAAI,CAAC/C,OAAO,CAACgD,GAAG,EAC1C;UAAEX;QAAS,CACb,CAAC;MACH;MACA,IAAIK,qBAAqB,CAACG,OAAO,EAAE;QACjC,MAAMI,eAAe,GAAGP,qBAAqB,CAACK,IAAI;QAElD,MAAMG,aAAa,GAAGD,eAAe,CAACjD,OAAO,CAACgD,GAAG;QACjD,MAAMG,WAAW,GAAG,MAAM,IAAAL,mCAA4B,EACpDI,aAAa,EACb;UAAEb;QAAS,CACb,CAAC;QACD,MAAMe,QAAQ,GAAGjB,wBAAwB,CAAC3C,KAAK,CAAC,IAAAC,aAAM,EAAC0D,WAAW,CAAC,CAAC;QAEpE,MAAME,uBAAuB,GAC3BD,QAAQ,CAACpD,OAAO,CAACsD,QAAQ,CAACC,iBAAiB,CACxCC,yBAAyB;QAC9B,IAAI,CAACH,uBAAuB,EAAE;UAC5B,MAAM,IAAII,2CAAmC,CAC1C,gBAAeP,aAAc,8DAA6DD,eAAe,CAACjD,OAAO,CAAC0D,GAAI,GAAE,EACzH;YACEC,aAAa,EAAEV,eAAe,CAACjD,OAAO,CAAC0D,GAAG;YAC1CE,kBAAkB,EAAEV;UACtB,CACF,CAAC;QACH;QACA,OAAO,IAAAW,+BAAwB,EAC7BR,uBAAuB,EACvBJ,eAAe,CAACjD,OAAO,CAAC0D,GAAG,EAC3B;UAAErB;QAAS,CACb,CAAC;MACH;MACA,MAAM,IAAIyB,8BAAsB,CAC7B,iDAAgDxE,KAAM,mBAAkB,EACzE;QAAEyE,aAAa,EAAEnF;MAAM,CACzB,CAAC;IACH,CAAC,CACH,CAAC;EACH,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASoF,sBAAsBA,CACpCC,MAAqB,EACS;EAC9B,OAAO,eAAeC,gBAAgBA,CACpCvF,iBAAiB,EACjBC,KAAK,EAOL;IAAA,IANAC,WAAW,GAAAyD,SAAA,CAAAxD,MAAA,QAAAwD,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG;MACZ6B,cAAc,EAAE,KAAK;MACrBC,WAAW,EAAE,KAAK;MAClBC,UAAU,EAAE;IACd,CAAC;IAAA,IACD;MAAEhC,QAAQ,GAAGG,KAAK;MAAE8B,WAAW,GAAG;IAAK,CAAC,GAAAhC,SAAA,CAAAxD,MAAA,QAAAwD,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;IAE7C,MAAM5D,kBAAkB,GAAGL,wBAAwB,CAAC4F,MAAM,CAAC;IAC3D,MAAM7B,eAAe,GAAGJ,qBAAqB,CAACiC,MAAM,CAAC;IAErD,IAAI;MACF,OAAO,MAAMvF,kBAAkB,CAACC,iBAAiB,EAAEC,KAAK,EAAEC,WAAW,CAAC;IACxE,CAAC,CAAC,OAAO0F,KAAK,EAAE;MACd,IAAID,WAAW,EAAE;QACf,MAAME,YAAY,GAAG,MAAMpC,eAAe,CAACxD,KAAK,EAAEyD,QAAQ,CAAC;QAC3D,OAAO3D,kBAAkB,CAACC,iBAAiB,EAAE6F,YAAY,EAAE3F,WAAW,CAAC;MACzE,CAAC,MAAM;QACL,MAAM0F,KAAK;MACb;IACF;EACF,CAAC;AACH"}
+{"version":3,"names":["_ioReactNativeCrypto","require","_errors","_utils","createVerifyTrustChain","config","verifyTrustChain","trustAnchorEntity","chain","x509Options","arguments","length","undefined","connectTimeout","readTimeout","requireCrl","appFetch","fetch","renewOnFail","validateTrustChain","createValidateTrustChain","renewTrustChain","createRenewTrustChain","error","renewedChain","_ref","EntityConfigurationShape","EntityStatementShape","Promise","all","map","token","index","decoded","decode","entityStatementResult","safeParse","entityConfigurationResult","success","getSignedEntityConfiguration","data","payload","iss","entityStatement","parentBaseUrl","parentECJwt","parentEC","parse","federationFetchEndpoint","metadata","federation_entity","federation_fetch_endpoint","MissingFederationFetchEndpointError","sub","entityBaseUrl","missingInEntityUrl","getSignedEntityStatement","TrustChainRenewalError","originalChain","_ref2","FirstElementShape","LastElementShape","MiddleElementShape","TrustChainEmptyError","selectTokenShape","elementIndex","selectKid","currentIndex","TrustChainTokenMissingError","shape","header","kid","selectKeys","keys","nextIndex","nextToken","jwks","x509TrustAnchorCertBase64","getTrustAnchorX509Certificate","validationPromises","tokenString","i","kidFromTokenHeader","signerJwks","parsedToken","verify","jwkUsedForVerification","find","k","FederationError","tokenIndex","x5c","MissingX509CertsError","certChainBase64","at","slice","x509ValidationResult","verifyCertificateChain","isValid","X509ValidationError","validationStatus","errorMessage","x509ErrorMessage","x509ValidationStatus"],"sourceRoot":"../../../../src","sources":["trust/common/verify-chain.ts"],"mappings":";;;;;;AAAA,IAAAA,oBAAA,GAAAC,OAAA;AAWA,IAAAC,OAAA,GAAAD,OAAA;AAUA,IAAAE,MAAA,GAAAF,OAAA;AA6BA;AACA;AACA;AACA;AACA;AACO,SAASG,sBAAsBA,CACpCC,MAAqB,EACS;EAC9B,OAAO,eAAeC,gBAAgBA,CACpCC,iBAAiB,EACjBC,KAAK,EAOL;IAAA,IANAC,WAAW,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG;MACZG,cAAc,EAAE,KAAK;MACrBC,WAAW,EAAE,KAAK;MAClBC,UAAU,EAAE;IACd,CAAC;IAAA,IACD;MAAEC,QAAQ,GAAGC,KAAK;MAAEC,WAAW,GAAG;IAAK,CAAC,GAAAR,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;IAE7C,MAAMS,kBAAkB,GAAGC,wBAAwB,CAACf,MAAM,CAAC;IAC3D,MAAMgB,eAAe,GAAGC,qBAAqB,CAACjB,MAAM,CAAC;IAErD,IAAI;MACF,OAAO,MAAMc,kBAAkB,CAACZ,iBAAiB,EAAEC,KAAK,EAAEC,WAAW,CAAC;IACxE,CAAC,CAAC,OAAOc,KAAK,EAAE;MACd,IAAIL,WAAW,EAAE;QACf,MAAMM,YAAY,GAAG,MAAMH,eAAe,CAACb,KAAK,EAAEQ,QAAQ,CAAC;QAC3D,OAAOG,kBAAkB,CAACZ,iBAAiB,EAAEiB,YAAY,EAAEf,WAAW,CAAC;MACzE,CAAC,MAAM;QACL,MAAMc,KAAK;MACb;IACF;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAASD,qBAAqBA,CAAAG,IAAA,EAGZ;EAAA,IAHa;IAC7BC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeJ,eAAeA,CACnCb,KAAe,EAEI;IAAA,IADnBQ,QAA8B,GAAAN,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGO,KAAK;IAEtC,OAAOW,OAAO,CAACC,GAAG,CAChBrB,KAAK,CAACsB,GAAG,CAAC,OAAOC,KAAK,EAAEC,KAAK,KAAK;MAChC,MAAMC,OAAO,GAAG,IAAAC,aAAM,EAACH,KAAK,CAAC;MAE7B,MAAMI,qBAAqB,GAAGR,oBAAoB,CAACS,SAAS,CAACH,OAAO,CAAC;MACrE,MAAMI,yBAAyB,GAC7BX,wBAAwB,CAACU,SAAS,CAACH,OAAO,CAAC;MAE7C,IAAII,yBAAyB,CAACC,OAAO,EAAE;QACrC,OAAO,IAAAC,mCAA4B,EACjCF,yBAAyB,CAACG,IAAI,CAACC,OAAO,CAACC,GAAG,EAC1C;UAAE1B;QAAS,CACb,CAAC;MACH;MACA,IAAImB,qBAAqB,CAACG,OAAO,EAAE;QACjC,MAAMK,eAAe,GAAGR,qBAAqB,CAACK,IAAI;QAElD,MAAMI,aAAa,GAAGD,eAAe,CAACF,OAAO,CAACC,GAAG;QACjD,MAAMG,WAAW,GAAG,MAAM,IAAAN,mCAA4B,EACpDK,aAAa,EACb;UAAE5B;QAAS,CACb,CAAC;QACD,MAAM8B,QAAQ,GAAGpB,wBAAwB,CAACqB,KAAK,CAAC,IAAAb,aAAM,EAACW,WAAW,CAAC,CAAC;QAEpE,MAAMG,uBAAuB,GAC3BF,QAAQ,CAACL,OAAO,CAACQ,QAAQ,CAACC,iBAAiB,CACxCC,yBAAyB;QAC9B,IAAI,CAACH,uBAAuB,EAAE;UAC5B,MAAM,IAAII,2CAAmC,CAC1C,gBAAeR,aAAc,8DAA6DD,eAAe,CAACF,OAAO,CAACY,GAAI,GAAE,EACzH;YACEC,aAAa,EAAEX,eAAe,CAACF,OAAO,CAACY,GAAG;YAC1CE,kBAAkB,EAAEX;UACtB,CACF,CAAC;QACH;QACA,OAAO,IAAAY,+BAAwB,EAC7BR,uBAAuB,EACvBL,eAAe,CAACF,OAAO,CAACY,GAAG,EAC3B;UAAErC;QAAS,CACb,CAAC;MACH;MACA,MAAM,IAAIyC,8BAAsB,CAC7B,iDAAgDzB,KAAM,mBAAkB,EACzE;QAAE0B,aAAa,EAAElD;MAAM,CACzB,CAAC;IACH,CAAC,CACH,CAAC;EACH,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAASY,wBAAwBA,CAAAuC,KAAA,EAIf;EAAA,IAJgB;IAChCC,iBAAiB;IACjBC,gBAAgB;IAChBC;EACa,CAAC,GAAAH,KAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAexC,kBAAkBA,CACtCZ,iBAAoC,EACpCC,KAAe,EACfC,WAAmC,EACX;IACxB;IACA,IAAID,KAAK,CAACG,MAAM,KAAK,CAAC,EAAE;MACtB,MAAM,IAAIoD,4BAAoB,CAAC,kCAAkC,CAAC;IACpE;;IAEA;IACA,MAAMC,gBAAgB,GAAIC,YAAoB,IAC5CA,YAAY,KAAK,CAAC,GACdL,iBAAiB,GACjBK,YAAY,KAAKzD,KAAK,CAACG,MAAM,GAAG,CAAC,GAC/BkD,gBAAgB,GAChBC,kBAAkB;;IAE1B;IACA,MAAMI,SAAS,GAAIC,YAAoB,IAAa;MAClD,MAAMpC,KAAK,GAAGvB,KAAK,CAAC2D,YAAY,CAAC;MACjC,IAAI,CAACpC,KAAK,EAAE;QACV,MAAM,IAAIqC,mCAA2B,CAClC,0BAAyBD,YAAa,kBAAiB,EACxD;UAAEnC,KAAK,EAAEmC;QAAa,CACxB,CAAC;MACH;MACA,MAAME,KAAK,GAAGL,gBAAgB,CAACG,YAAY,CAAC;MAC5C,OAAOE,KAAK,CAACtB,KAAK,CAAC,IAAAb,aAAM,EAACH,KAAK,CAAC,CAAC,CAACuC,MAAM,CAACC,GAAG;IAC9C,CAAC;;IAED;IACA;IACA,MAAMC,UAAU,GAAIL,YAAoB,IAAY;MAClD,IAAIA,YAAY,KAAK3D,KAAK,CAACG,MAAM,GAAG,CAAC,EAAE;QACrC,OAAOJ,iBAAiB,CAACkE,IAAI;MAC/B;MAEA,MAAMC,SAAS,GAAGP,YAAY,GAAG,CAAC;MAClC,MAAMQ,SAAS,GAAGnE,KAAK,CAACkE,SAAS,CAAC;MAClC,IAAI,CAACC,SAAS,EAAE;QACd,MAAM,IAAIP,mCAA2B,CAClC,+BAA8BM,SAAU,kCAAiCP,YAAa,IAAG,EAC1F;UAAEnC,KAAK,EAAE0C;QAAU,CACrB,CAAC;MACH;MACA,MAAML,KAAK,GAAGL,gBAAgB,CAACU,SAAS,CAAC;MACzC,OAAOL,KAAK,CAACtB,KAAK,CAAC,IAAAb,aAAM,EAACyC,SAAS,CAAC,CAAC,CAAClC,OAAO,CAACmC,IAAI,CAACH,IAAI;IACzD,CAAC;IAED,MAAMI,yBAAyB,GAC7B,IAAAC,oCAA6B,EAACvE,iBAAiB,CAAC;;IAElD;IACA;IACA,MAAMwE,kBAAkB,GAAGvE,KAAK,CAACsB,GAAG,CAAC,OAAOkD,WAAW,EAAEC,CAAC,KAAK;MAC7D,MAAMC,kBAAkB,GAAGhB,SAAS,CAACe,CAAC,CAAC;MACvC,MAAME,UAAU,GAAGX,UAAU,CAACS,CAAC,CAAC;;MAEhC;MACA,MAAMG,WAAW,GAAG,MAAM,IAAAC,aAAM,EAC9BL,WAAW,EACXE,kBAAkB,EAClBC,UACF,CAAC;;MAED;MACA,MAAMG,sBAAsB,GAAGH,UAAU,CAACI,IAAI,CAC3CC,CAAC,IAAKA,CAAC,CAACjB,GAAG,KAAKW,kBACnB,CAAC;MAED,IAAI,CAACI,sBAAsB,EAAE;QAC3B,MAAM,IAAIG,uBAAe,CACtB,iBAAgBP,kBAAmB,uDAAsDD,CAAE,mCAAkC,EAC9H;UAAEV,GAAG,EAAEW,kBAAkB;UAAEQ,UAAU,EAAET;QAAE,CAC3C,CAAC;MACH;MAEA,IACE,CAACK,sBAAsB,CAACK,GAAG,IAC3BL,sBAAsB,CAACK,GAAG,CAAChF,MAAM,KAAK,CAAC,EACvC;QACA,MAAM,IAAIiF,6BAAqB,CAC5B,iBAAgBV,kBAAmB,0EAAyED,CAAE,GACjH,CAAC;MACH;;MAEA;MACA;MACA;MACA,MAAMY,eAAe,GACnBP,sBAAsB,CAACK,GAAG,CAAChF,MAAM,GAAG,CAAC,IACrC2E,sBAAsB,CAACK,GAAG,CAACG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAKjB,yBAAyB,GAC3DS,sBAAsB,CAACK,GAAG,CAACI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACvCT,sBAAsB,CAACK,GAAG;MAEhC,MAAMK,oBAAiD,GACrD,MAAM,IAAAC,2CAAsB,EAC1BJ,eAAe,EACfhB,yBAAyB,EACzBpE,WACF,CAAC;MAEH,IAAI,CAACuF,oBAAoB,CAACE,OAAO,EAAE;QACjC,MAAM,IAAIC,2BAAmB,CAC1B,gEAA+DlB,CAAE,UAASC,kBAAmB,cAAac,oBAAoB,CAACI,gBAAiB,YAAWJ,oBAAoB,CAACK,YAAa,EAAC,EAC/L;UACE9B,GAAG,EAAEW,kBAAkB;UACvBQ,UAAU,EAAET,CAAC;UACbqB,gBAAgB,EAAEN,oBAAoB,CAACK,YAAY;UACnDE,oBAAoB,EAAEP,oBAAoB,CAACI;QAC7C,CACF,CAAC;MACH;MACA,OAAOhB,WAAW;IACpB,CAAC,CAAC;IAEF,OAAOxD,OAAO,CAACC,GAAG,CAACkD,kBAAkB,CAAC;EACxC,CAAC;AACH"}

package/lib/commonjs/trust/v1.0.0/build-chain.js

@@ -8,8 +8,8 @@ var _buildChain = require("../common/build-chain");
 var _types = require("../common/types");
 var _types2 = require("./types");
 const buildTrustChain = (0, _buildChain.createBuildTrustChain)({
-  EntityStatementShape: _types.EntityStatement,
-  EntityConfigurationShape: _types2.EntityConfiguration
+  EntityConfigurationShape: _types2.EntityConfiguration,
+  EntityStatementShape: _types.EntityStatement
 });
 exports.buildTrustChain = buildTrustChain;
 //# sourceMappingURL=build-chain.js.map

package/lib/commonjs/trust/v1.0.0/build-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["_buildChain","require","_types","_types2","buildTrustChain","createBuildTrustChain","EntityStatementShape","EntityStatement","EntityConfigurationShape","EntityConfiguration","exports"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/build-chain.ts"],"mappings":";;;;;;AAAA,IAAAA,WAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAEO,MAAMG,eAAe,GAAG,IAAAC,iCAAqB,EAAC;EACnDC,oBAAoB,EAAEC,sBAAe;EACrCC,wBAAwB,EAAEC;AAC5B,CAAC,CAAC;AAACC,OAAA,CAAAN,eAAA,GAAAA,eAAA"}
+{"version":3,"names":["_buildChain","require","_types","_types2","buildTrustChain","createBuildTrustChain","EntityConfigurationShape","EntityConfiguration","EntityStatementShape","EntityStatement","exports"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/build-chain.ts"],"mappings":";;;;;;AAAA,IAAAA,WAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAEO,MAAMG,eAAe,GAAG,IAAAC,iCAAqB,EAAC;EACnDC,wBAAwB,EAAEC,2BAAmB;EAC7CC,oBAAoB,EAAEC;AACxB,CAAC,CAAC;AAACC,OAAA,CAAAN,eAAA,GAAAA,eAAA"}

package/lib/commonjs/trust/v1.0.0/entities.js

@@ -5,8 +5,8 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.getWalletProviderEntityConfiguration = exports.getTrustAnchorEntityConfiguration = exports.getRelyingPartyEntityConfiguration = exports.getEntityConfiguration = exports.getCredentialIssuerEntityConfiguration = void 0;
 var _ioReactNativeJwt = require("@pagopa/io-react-native-jwt");
-var _types = require("./types");
 var _utils = require("../common/utils");
+var _types = require("./types");
 /**
  * Fetch and parse the entity configuration document for a given federation entity.
  * This is an inner method to serve public interfaces.

package/lib/commonjs/trust/v1.0.0/entities.js.map

@@ -1 +1 @@
-{"version":3,"names":["_ioReactNativeJwt","require","_types","_utils","fetchAndParseEntityConfiguration","entityBaseUrl","schema","appFetch","fetch","arguments","length","undefined","responseText","getSignedEntityConfiguration","responseJwt","decodeJwt","parse","header","protectedHeader","payload","getWalletProviderEntityConfiguration","options","WalletProviderEntityConfiguration","exports","getCredentialIssuerEntityConfiguration","CredentialIssuerEntityConfiguration","getTrustAnchorEntityConfiguration","TrustAnchorEntityConfiguration","getRelyingPartyEntityConfiguration","RelyingPartyEntityConfiguration","getEntityConfiguration","EntityConfiguration"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/entities.ts"],"mappings":";;;;;;AAAA,IAAAA,iBAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAQA,IAAAE,MAAA,GAAAF,OAAA;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeG,gCAAgCA,CAC7CC,aAAqB,EACrBC,MAAoB,EAER;EAAA,IADZ;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMG,YAAY,GAAG,MAAM,IAAAC,mCAA4B,EAACR,aAAa,EAAE;IACrEE;EACF,CAAC,CAAC;EAEF,MAAMO,WAAW,GAAG,IAAAC,wBAAS,EAACH,YAAY,CAAC;EAC3C,OAAON,MAAM,CAACU,KAAK,CAAC;IAClBC,MAAM,EAAEH,WAAW,CAACI,eAAe;IACnCC,OAAO,EAAEL,WAAW,CAACK;EACvB,CAAC,CAAC;AACJ;AAEO,MAAMC,oCAAoC,GAAGA,CAClDf,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAC9BC,aAAa,EACbiB,wCAAiC,EACjCD,OACF,CAAC;AAACE,OAAA,CAAAH,oCAAA,GAAAA,oCAAA;AAEG,MAAMI,sCAAsC,GAAGA,CACpDnB,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAC9BC,aAAa,EACboB,0CAAmC,EACnCJ,OACF,CAAC;AAACE,OAAA,CAAAC,sCAAA,GAAAA,sCAAA;AAEG,MAAME,iCAAiC,GAAGA,CAC/CrB,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAC9BC,aAAa,EACbsB,qCAA8B,EAC9BN,OACF,CAAC;AAACE,OAAA,CAAAG,iCAAA,GAAAA,iCAAA;AAEG,MAAME,kCAAkC,GAAGA,CAChDvB,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAC9BC,aAAa,EACbwB,sCAA+B,EAC/BR,OACF,CAAC;AAACE,OAAA,CAAAK,kCAAA,GAAAA,kCAAA;AAEG,MAAME,sBAAsB,GAAGA,CACpCzB,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAACC,aAAa,EAAE0B,0BAAmB,EAAEV,OAAO,CAAC;AAACE,OAAA,CAAAO,sBAAA,GAAAA,sBAAA"}
+{"version":3,"names":["_ioReactNativeJwt","require","_utils","_types","fetchAndParseEntityConfiguration","entityBaseUrl","schema","appFetch","fetch","arguments","length","undefined","responseText","getSignedEntityConfiguration","responseJwt","decodeJwt","parse","header","protectedHeader","payload","getWalletProviderEntityConfiguration","options","WalletProviderEntityConfiguration","exports","getCredentialIssuerEntityConfiguration","CredentialIssuerEntityConfiguration","getTrustAnchorEntityConfiguration","TrustAnchorEntityConfiguration","getRelyingPartyEntityConfiguration","RelyingPartyEntityConfiguration","getEntityConfiguration","EntityConfiguration"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/entities.ts"],"mappings":";;;;;;AAEA,IAAAA,iBAAA,GAAAC,OAAA;AAEA,IAAAC,MAAA,GAAAD,OAAA;AAIA,IAAAE,MAAA,GAAAF,OAAA;AAQA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeG,gCAAgCA,CAC7CC,aAAqB,EACrBC,MAAoB,EAER;EAAA,IADZ;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMG,YAAY,GAAG,MAAM,IAAAC,mCAA4B,EAACR,aAAa,EAAE;IACrEE;EACF,CAAC,CAAC;EAEF,MAAMO,WAAW,GAAG,IAAAC,wBAAS,EAACH,YAAY,CAAC;EAC3C,OAAON,MAAM,CAACU,KAAK,CAAC;IAClBC,MAAM,EAAEH,WAAW,CAACI,eAAe;IACnCC,OAAO,EAAEL,WAAW,CAACK;EACvB,CAAC,CAAC;AACJ;AAEO,MAAMC,oCAAoC,GAAGA,CAClDf,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAC9BC,aAAa,EACbiB,wCAAiC,EACjCD,OACF,CAAC;AAACE,OAAA,CAAAH,oCAAA,GAAAA,oCAAA;AAEG,MAAMI,sCAAsC,GAAGA,CACpDnB,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAC9BC,aAAa,EACboB,0CAAmC,EACnCJ,OACF,CAAC;AAACE,OAAA,CAAAC,sCAAA,GAAAA,sCAAA;AAEG,MAAME,iCAAiC,GAAGA,CAC/CrB,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAC9BC,aAAa,EACbsB,qCAA8B,EAC9BN,OACF,CAAC;AAACE,OAAA,CAAAG,iCAAA,GAAAA,iCAAA;AAEG,MAAME,kCAAkC,GAAGA,CAChDvB,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAC9BC,aAAa,EACbwB,sCAA+B,EAC/BR,OACF,CAAC;AAACE,OAAA,CAAAK,kCAAA,GAAAA,kCAAA;AAEG,MAAME,sBAAsB,GAAGA,CACpCzB,aAAqB,EACrBgB,OAAsB,KAEtBjB,gCAAgC,CAACC,aAAa,EAAE0B,0BAAmB,EAAEV,OAAO,CAAC;AAACE,OAAA,CAAAO,sBAAA,GAAAA,sBAAA"}

package/lib/commonjs/trust/v1.0.0/index.js

@@ -4,14 +4,14 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.Trust = void 0;
-var _entities = require("./entities");
 var _mappers = require("../../utils/mappers");
-var _mappers2 = require("./mappers");
 var _buildChain = require("./build-chain");
+var _entities = require("./entities");
+var _mappers2 = require("./mappers");
 var _verifyChain = require("./verify-chain");
 const Trust = {
-  getTrustAnchorEntityConfiguration: (0, _mappers.withMapperAsync)(_mappers2.mapToTrustAnchorConfig, _entities.getTrustAnchorEntityConfiguration),
   buildTrustChain: _buildChain.buildTrustChain,
+  getTrustAnchorEntityConfiguration: (0, _mappers.withMapperAsync)(_mappers2.mapToTrustAnchorConfig, _entities.getTrustAnchorEntityConfiguration),
   verifyTrustChain: _verifyChain.verifyTrustChain
 };
 exports.Trust = Trust;

package/lib/commonjs/trust/v1.0.0/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_entities","require","_mappers","_mappers2","_buildChain","_verifyChain","Trust","getTrustAnchorEntityConfiguration","withMapperAsync","mapToTrustAnchorConfig","buildTrustChain","verifyTrustChain","exports"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/index.ts"],"mappings":";;;;;;AACA,IAAAA,SAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AAEO,MAAMK,KAAe,GAAG;EAC7BC,iCAAiC,EAAE,IAAAC,wBAAe,EAChDC,gCAAsB,EACtBF,2CACF,CAAC;EACDG,eAAe,EAAfA,2BAAe;EACfC,gBAAgB,EAAhBA;AACF,CAAC;AAACC,OAAA,CAAAN,KAAA,GAAAA,KAAA"}
+{"version":3,"names":["_mappers","require","_buildChain","_entities","_mappers2","_verifyChain","Trust","buildTrustChain","getTrustAnchorEntityConfiguration","withMapperAsync","mapToTrustAnchorConfig","verifyTrustChain","exports"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/index.ts"],"mappings":";;;;;;AAEA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AACA,IAAAG,SAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AAEO,MAAMK,KAAe,GAAG;EAC7BC,eAAe,EAAfA,2BAAe;EACfC,iCAAiC,EAAE,IAAAC,wBAAe,EAChDC,gCAAsB,EACtBF,2CACF,CAAC;EACDG,gBAAgB,EAAhBA;AACF,CAAC;AAACC,OAAA,CAAAN,KAAA,GAAAA,KAAA"}

package/lib/commonjs/trust/v1.0.0/mappers.js

@@ -10,11 +10,11 @@ const mapToTrustAnchorConfig = (0, _mappers.createMapper)(x => {
     federation_entity
   } = x.payload.metadata;
   return {
+    federation_entity,
     jwt: {
       header: x.header
     },
-    keys: x.payload.jwks.keys,
-    federation_entity
+    keys: x.payload.jwks.keys
   };
 });
 exports.mapToTrustAnchorConfig = mapToTrustAnchorConfig;

package/lib/commonjs/trust/v1.0.0/mappers.js.map

@@ -1 +1 @@
-{"version":3,"names":["_mappers","require","mapToTrustAnchorConfig","createMapper","x","federation_entity","payload","metadata","jwt","header","keys","jwks","exports"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/mappers.ts"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,OAAA;AAIO,MAAMC,sBAAsB,GAAG,IAAAC,qBAAY,EAG/CC,CAAC,IAAK;EACP,MAAM;IAAEC;EAAkB,CAAC,GAAGD,CAAC,CAACE,OAAO,CAACC,QAAQ;EAChD,OAAO;IACLC,GAAG,EAAE;MAAEC,MAAM,EAAEL,CAAC,CAACK;IAAO,CAAC;IACzBC,IAAI,EAAEN,CAAC,CAACE,OAAO,CAACK,IAAI,CAACD,IAAI;IACzBL;EACF,CAAC;AACH,CAAC,CAAC;AAACO,OAAA,CAAAV,sBAAA,GAAAA,sBAAA"}
+{"version":3,"names":["_mappers","require","mapToTrustAnchorConfig","createMapper","x","federation_entity","payload","metadata","jwt","header","keys","jwks","exports"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/mappers.ts"],"mappings":";;;;;;AAEA,IAAAA,QAAA,GAAAC,OAAA;AAGO,MAAMC,sBAAsB,GAAG,IAAAC,qBAAY,EAG/CC,CAAC,IAAK;EACP,MAAM;IAAEC;EAAkB,CAAC,GAAGD,CAAC,CAACE,OAAO,CAACC,QAAQ;EAChD,OAAO;IACLF,iBAAiB;IACjBG,GAAG,EAAE;MAAEC,MAAM,EAAEL,CAAC,CAACK;IAAO,CAAC;IACzBC,IAAI,EAAEN,CAAC,CAACE,OAAO,CAACK,IAAI,CAACD;EACvB,CAAC;AACH,CAAC,CAAC;AAACE,OAAA,CAAAV,sBAAA,GAAAA,sBAAA"}

package/lib/commonjs/trust/v1.0.0/types.js

@@ -4,49 +4,49 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.WalletProviderEntityConfiguration = exports.TrustAnchorEntityConfiguration = exports.RelyingPartyEntityConfiguration = exports.EntityConfiguration = exports.CredentialIssuerEntityConfiguration = void 0;
-var z = _interopRequireWildcard(require("zod"));
 var _ioWalletOidFederation = require("@pagopa/io-wallet-oid-federation");
+var z = _interopRequireWildcard(require("zod"));
 var _jwk = require("../../utils/jwk");
 var _types = require("../common/types");
 function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
 function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
 const RelyingPartyMetadata = z.object({
   application_type: z.string().optional(),
+  authorization_encrypted_response_alg: z.string().optional(),
+  authorization_encrypted_response_enc: z.string().optional(),
+  authorization_signed_response_alg: z.string().optional(),
   client_id: z.string().optional(),
   client_name: z.string().optional(),
+  contacts: z.array(z.string()).optional(),
   jwks: z.object({
     keys: z.array(_ioWalletOidFederation.jsonWebKeySchema)
   }),
-  contacts: z.array(z.string()).optional(),
-  request_uris: z.array(z.string()).optional(),
-  authorization_signed_response_alg: z.string().optional(),
-  authorization_encrypted_response_alg: z.string().optional(),
-  authorization_encrypted_response_enc: z.string().optional()
+  request_uris: z.array(z.string()).optional()
 });
 
 // Display metadata for a credential, used by the issuer to
 // instruct the Wallet Solution on how to render the credential correctly
 const CredentialDisplayMetadata = z.object({
-  name: z.string(),
-  locale: z.string()
+  locale: z.string(),
+  name: z.string()
 });
 
 // Metadata for displaying issuer information
 
 const CredentialIssuerDisplayMetadata = z.object({
-  name: z.string(),
-  locale: z.string()
+  locale: z.string(),
+  name: z.string()
 });
 const ClaimsMetadata = z.object({
-  path: z.array(z.union([z.string(), z.number(), z.null()])),
-  // https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0-15.html#name-claims-path-pointer
-  display: z.array(CredentialDisplayMetadata)
+  display: z.array(CredentialDisplayMetadata),
+  path: z.array(z.union([z.string(), z.number(), z.null()])) // https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0-15.html#name-claims-path-pointer
 });
+
 const IssuanceErrorSupported = z.object({
   display: z.array(z.object({
-    title: z.string(),
     description: z.string(),
-    locale: z.string()
+    locale: z.string(),
+    title: z.string()
   }))
 });
 
@@ -56,16 +56,16 @@ const SupportedCredentialMetadata = z.intersection(z.discriminatedUnion("format"
   format: z.literal("dc+sd-jwt"),
   vct: z.string()
 }), z.object({
-  format: z.literal("mso_mdoc"),
-  doctype: z.string()
+  doctype: z.string(),
+  format: z.literal("mso_mdoc")
 })]), z.object({
-  scope: z.string(),
-  display: z.array(CredentialDisplayMetadata),
+  authentic_source: z.string().optional(),
   claims: z.array(ClaimsMetadata),
-  cryptographic_binding_methods_supported: z.array(z.string()),
   credential_signing_alg_values_supported: z.array(z.string()),
-  authentic_source: z.string().optional(),
-  issuance_errors_supported: z.record(z.string(), IssuanceErrorSupported).optional()
+  cryptographic_binding_methods_supported: z.array(z.string()),
+  display: z.array(CredentialDisplayMetadata),
+  issuance_errors_supported: z.record(z.string(), IssuanceErrorSupported).optional(),
+  scope: z.string()
 }));
 
 // Entity configuration for a Trust Anchor (it has no specific metadata section)
@@ -80,37 +80,37 @@ const CredentialIssuerEntityConfiguration = _types.BaseEntityConfiguration.and(z
       keys: z.array(_jwk.JWK)
     }),
     metadata: z.object({
-      openid_credential_issuer: z.object({
-        credential_issuer: z.string(),
-        credential_endpoint: z.string(),
-        revocation_endpoint: z.string().optional(),
-        nonce_endpoint: z.string(),
-        status_attestation_endpoint: z.string(),
-        display: z.array(CredentialIssuerDisplayMetadata),
-        credential_configurations_supported: z.record(z.string(), SupportedCredentialMetadata),
-        jwks: z.object({
-          keys: z.array(_jwk.JWK)
-        }),
-        trust_frameworks_supported: z.array(z.string()),
-        evidence_supported: z.array(z.string())
-      }),
       oauth_authorization_server: z.object({
+        acr_values_supported: z.array(z.string()),
         authorization_endpoint: z.string(),
-        pushed_authorization_request_endpoint: z.string(),
-        token_endpoint: z.string(),
         client_registration_types_supported: z.array(z.string()),
         code_challenge_methods_supported: z.array(z.string()),
-        acr_values_supported: z.array(z.string()),
         grant_types_supported: z.array(z.string()),
         issuer: z.string(),
         jwks: z.object({
           keys: z.array(_jwk.JWK)
         }),
-        scopes_supported: z.array(z.string()),
+        pushed_authorization_request_endpoint: z.string(),
+        request_object_signing_alg_values_supported: z.array(z.string()),
         response_modes_supported: z.array(z.string()),
+        scopes_supported: z.array(z.string()),
+        token_endpoint: z.string(),
         token_endpoint_auth_methods_supported: z.array(z.string()),
-        token_endpoint_auth_signing_alg_values_supported: z.array(z.string()),
-        request_object_signing_alg_values_supported: z.array(z.string())
+        token_endpoint_auth_signing_alg_values_supported: z.array(z.string())
+      }),
+      openid_credential_issuer: z.object({
+        credential_configurations_supported: z.record(z.string(), SupportedCredentialMetadata),
+        credential_endpoint: z.string(),
+        credential_issuer: z.string(),
+        display: z.array(CredentialIssuerDisplayMetadata),
+        evidence_supported: z.array(z.string()),
+        jwks: z.object({
+          keys: z.array(_jwk.JWK)
+        }),
+        nonce_endpoint: z.string(),
+        revocation_endpoint: z.string().optional(),
+        status_attestation_endpoint: z.string(),
+        trust_frameworks_supported: z.array(z.string())
       }),
       /**
        * Credential Issuers act as Relying Party when they require the presentation of other credentials.
@@ -137,14 +137,14 @@ const WalletProviderEntityConfiguration = _types.BaseEntityConfiguration.and(z.o
   payload: z.object({
     metadata: z.object({
       wallet_provider: z.object({
-        token_endpoint: z.string(),
         aal_values_supported: z.array(z.string()).optional(),
         grant_types_supported: z.array(z.string()),
-        token_endpoint_auth_methods_supported: z.array(z.string()),
-        token_endpoint_auth_signing_alg_values_supported: z.array(z.string()),
         jwks: z.object({
           keys: z.array(_jwk.JWK)
-        })
+        }),
+        token_endpoint: z.string(),
+        token_endpoint_auth_methods_supported: z.array(z.string()),
+        token_endpoint_auth_signing_alg_values_supported: z.array(z.string())
       }).loose()
     })
   })