@pagopa/io-react-native-wallet 3.6.3 → 3.7.0

package/lib/module/{wallet-unit-attestation → key-attestation}/api/types.js

@@ -1,6 +1,6 @@
 import * as z from "zod";
-import { UnixTime } from "../../utils/zod";
 import { JWK } from "../../utils/jwk";
+import { UnixTime } from "../../utils/zod";
 const Status = z.object({
   status_list: z.object({
     idx: z.number(),
@@ -9,17 +9,17 @@ const Status = z.object({
 });
 
 /**
- * Common Wallet Unit Attestation shape. This object is
+ * Common Key Attestation shape. This object is
  * an abstraction over the version-specific JWTs.
  */
 
-export const DecodedWalletUnitAttestation = z.object({
+export const DecodedKeyAttestation = z.object({
   attested_keys: z.array(JWK),
-  user_authentication: z.array(z.string()),
+  exp: UnixTime,
+  iat: UnixTime,
+  iss: z.string(),
   key_storage: z.array(z.string()),
   status: Status,
-  iss: z.string(),
-  iat: UnixTime,
-  exp: UnixTime
+  user_authentication: z.array(z.string())
 });
 //# sourceMappingURL=types.js.map

package/lib/module/key-attestation/api/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","JWK","UnixTime","Status","object","status_list","idx","number","uri","string","DecodedKeyAttestation","attested_keys","array","exp","iat","iss","key_storage","status","user_authentication"],"sourceRoot":"../../../../src","sources":["key-attestation/api/types.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AAExB,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,QAAQ,QAAQ,iBAAiB;AAE1C,MAAMC,MAAM,GAAGH,CAAC,CAACI,MAAM,CAAC;EACtBC,WAAW,EAAEL,CAAC,CAACI,MAAM,CAAC;IACpBE,GAAG,EAAEN,CAAC,CAACO,MAAM,CAAC,CAAC;IACfC,GAAG,EAAER,CAAC,CAACS,MAAM,CAAC;EAChB,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,qBAAqB,GAAGV,CAAC,CAACI,MAAM,CAAC;EAC5CO,aAAa,EAAEX,CAAC,CAACY,KAAK,CAACX,GAAG,CAAC;EAC3BY,GAAG,EAAEX,QAAQ;EACbY,GAAG,EAAEZ,QAAQ;EACba,GAAG,EAAEf,CAAC,CAACS,MAAM,CAAC,CAAC;EACfO,WAAW,EAAEhB,CAAC,CAACY,KAAK,CAACZ,CAAC,CAACS,MAAM,CAAC,CAAC,CAAC;EAChCQ,MAAM,EAAEd,MAAM;EACde,mBAAmB,EAAElB,CAAC,CAACY,KAAK,CAACZ,CAAC,CAACS,MAAM,CAAC,CAAC;AACzC,CAAC,CAAC"}

package/lib/module/key-attestation/index.js

@@ -0,0 +1,3 @@
+export { KeyAttestation as V1_0_0 } from "./v1.0.0";
+export { KeyAttestation as V1_4_6 } from "./v1.4.6";
+//# sourceMappingURL=index.js.map

package/lib/module/key-attestation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["KeyAttestation","V1_0_0","V1_4_6"],"sourceRoot":"../../../src","sources":["key-attestation/index.ts"],"mappings":"AACA,SAASA,cAAc,IAAIC,MAAM,QAAQ,UAAU;AACnD,SAASD,cAAc,IAAIE,MAAM,QAAQ,UAAU"}

package/lib/module/key-attestation/v1.0.0/index.js

@@ -0,0 +1,4 @@
+export const KeyAttestation = {
+  isSupported: false
+};
+//# sourceMappingURL=index.js.map

package/lib/module/key-attestation/v1.0.0/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["KeyAttestation","isSupported"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.0.0/index.ts"],"mappings":"AAEA,OAAO,MAAMA,cAAiC,GAAG;EAC/CC,WAAW,EAAE;AACf,CAAC"}

package/lib/module/key-attestation/v1.4.6/index.js

@@ -0,0 +1,10 @@
+import { withMapper } from "../../utils/mappers";
+import { getAttestation } from "./issuing";
+import { mapToDecodedKeyAttestation } from "./mappers";
+import { decode } from "./utils";
+export const KeyAttestation = {
+  decode: withMapper(mapToDecodedKeyAttestation, decode),
+  getAttestation,
+  isSupported: true
+};
+//# sourceMappingURL=index.js.map

package/lib/module/key-attestation/v1.4.6/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["withMapper","getAttestation","mapToDecodedKeyAttestation","decode","KeyAttestation","isSupported"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/index.ts"],"mappings":"AAEA,SAASA,UAAU,QAAQ,qBAAqB;AAChD,SAASC,cAAc,QAAQ,WAAW;AAC1C,SAASC,0BAA0B,QAAQ,WAAW;AACtD,SAASC,MAAM,QAAQ,SAAS;AAEhC,OAAO,MAAMC,cAAiC,GAAG;EAC/CD,MAAM,EAAEH,UAAU,CAACE,0BAA0B,EAAEC,MAAM,CAAC;EACtDF,cAAc;EACdI,WAAW,EAAE;AACf,CAAC"}

package/lib/module/{wallet-unit-attestation/v1.3.3 → key-attestation/v1.4.6}/issuing.js

@@ -1,10 +1,10 @@
-import { Platform } from "react-native";
 import { SignJWT, thumbprint } from "@pagopa/io-react-native-jwt";
-import { Logger, LogLevel } from "../../utils/logging";
+import { Platform } from "react-native";
 import { getWalletProviderClient } from "../../client";
-import { fixBase64EncodingOnKey, JWK } from "../../utils/jwk";
 import { IoWalletError } from "../../utils/errors";
-import { WalletUnitAttestationResponse } from "./types";
+import { fixBase64EncodingOnKey, JWK } from "../../utils/jwk";
+import { Logger, LogLevel } from "../../utils/logging";
+import { KeyAttestationResponse } from "./types";
 
 /**
  * Create a Key Attestation Request in JWT format for the provided key.
@@ -14,25 +14,25 @@ import { WalletUnitAttestationResponse } from "./types";
  */
 const createKeyAttestationRequest = async (challenge, cryptoContext) => {
   const {
-    success,
-    attestation
+    attestation,
+    success
   } = await cryptoContext.generateKeyWithAttestation(challenge);
   if (!success) {
-    throw new IoWalletError("generateKeyWithAttestation failed to generate a cryptographic key for the Wallet Unit Attestation request");
+    throw new IoWalletError("generateKeyWithAttestation failed to generate a cryptographic key for the Key Attestation request");
   }
   if (Platform.OS === "android" && !attestation) {
-    throw new IoWalletError("Missing key attestation: on Android the generated key must have a key attestation to request a Wallet Unit Attestation");
+    throw new IoWalletError("Missing Android key attestation: the generated key pair must be hardware-backed");
   }
   const publicKey = JWK.parse(await cryptoContext.getPublicKey());
   const requestJwt = await new SignJWT(cryptoContext).setPayload({
+    cnf: {
+      jwk: fixBase64EncodingOnKey(publicKey)
+    },
     wscd_key_attestation: {
       storage_type: "LOCAL_NATIVE",
       ...(attestation && {
         attestation
       })
-    },
-    cnf: {
-      jwk: fixBase64EncodingOnKey(publicKey)
     }
   }).setProtectedHeader({
     kid: publicKey.kid,
@@ -40,8 +40,8 @@ const createKeyAttestationRequest = async (challenge, cryptoContext) => {
   }).setIssuedAt().setExpirationTime("1h").sign();
   return {
     cryptoContext,
-    publicKey,
-    keyAttestationRequestJwt: requestJwt
+    keyAttestationRequestJwt: requestJwt,
+    publicKey
   };
 };
 export const getAttestation = async (_ref, _ref2) => {
@@ -51,16 +51,16 @@ export const getAttestation = async (_ref, _ref2) => {
     walletSolutionVersion
   } = _ref;
   let {
-    keysToAttest: keysToAttestContexts,
+    appFetch = fetch,
     integrityContext,
-    appFetch = fetch
+    keysToAttest: keysToAttestContexts
   } = _ref2;
   if (keysToAttestContexts.length === 0) {
     throw new IoWalletError("At least one key to attest must be provided");
   }
   const api = getWalletProviderClient({
-    walletProviderBaseUrl,
-    appFetch
+    appFetch,
+    walletProviderBaseUrl
   });
   const {
     nonce
@@ -70,43 +70,46 @@ export const getAttestation = async (_ref, _ref2) => {
 
   // Use the first key to attest to sign the WUA Request JWT
   const signatureKey = keysToAttest.at(0);
+  if (!signatureKey) {
+    throw new IoWalletError("No signature key available for signing the WUA request");
+  }
   const hardwareKeyTag = integrityContext.getHardwareKeyTag();
   const clientData = {
     challenge: nonce,
     jwk_thumbprints: await Promise.all(keysToAttest.map(k => thumbprint(k.publicKey)))
   };
   const {
-    signature,
-    authenticatorData
+    authenticatorData,
+    signature
   } = await integrityContext.getHardwareSignatureWithAuthData(JSON.stringify(clientData));
   const signedAttestationRequest = await new SignJWT(signatureKey.cryptoContext).setPayload({
-    nonce,
+    cnf: {
+      jwk: fixBase64EncodingOnKey(signatureKey.publicKey)
+    },
     hardware_key_tag: hardwareKeyTag,
-    iss: hardwareKeyTag,
-    keys_to_attest: keysToAttest.map(k => k.keyAttestationRequestJwt),
     hardware_signature: signature,
     integrity_assertion: authenticatorData,
+    iss: hardwareKeyTag,
+    keys_to_attest: keysToAttest.map(k => k.keyAttestationRequestJwt),
+    nonce,
     platform: Platform.OS,
     wallet_solution_id: walletSolutionId,
-    wallet_solution_version: walletSolutionVersion,
-    cnf: {
-      jwk: fixBase64EncodingOnKey(signatureKey.publicKey)
-    }
+    wallet_solution_version: walletSolutionVersion
   }).setProtectedHeader({
     kid: signatureKey.publicKey.kid,
     typ: "wua-request+jwt"
   }).setIssuedAt().setExpirationTime("1h").sign();
   Logger.log(LogLevel.DEBUG, `Signed attestation request: ${signedAttestationRequest}`);
   const response = await api.post("/key-attestations", {
+    body: signedAttestationRequest,
     header: {
       "Content-Type": "text/plain"
-    },
-    body: signedAttestationRequest
-  }).then(WalletUnitAttestationResponse.parse);
-  Logger.log(LogLevel.DEBUG, `Obtained Wallet Unit Attestation: ${response.key_attestation}`);
+    }
+  }).then(KeyAttestationResponse.parse);
+  Logger.log(LogLevel.DEBUG, `Obtained Key Attestation: ${response.key_attestation}`);
   return {
-    format: "jwt",
-    attestation: response.key_attestation
+    attestation: response.key_attestation,
+    format: "jwt"
   };
 };
 //# sourceMappingURL=issuing.js.map

package/lib/module/key-attestation/v1.4.6/issuing.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["SignJWT","thumbprint","Platform","getWalletProviderClient","IoWalletError","fixBase64EncodingOnKey","JWK","Logger","LogLevel","KeyAttestationResponse","createKeyAttestationRequest","challenge","cryptoContext","attestation","success","generateKeyWithAttestation","OS","publicKey","parse","getPublicKey","requestJwt","setPayload","cnf","jwk","wscd_key_attestation","storage_type","setProtectedHeader","kid","typ","setIssuedAt","setExpirationTime","sign","keyAttestationRequestJwt","getAttestation","_ref","_ref2","walletProviderBaseUrl","walletSolutionId","walletSolutionVersion","appFetch","fetch","integrityContext","keysToAttest","keysToAttestContexts","length","api","nonce","get","log","DEBUG","Promise","all","map","signatureKey","at","hardwareKeyTag","getHardwareKeyTag","clientData","jwk_thumbprints","k","authenticatorData","signature","getHardwareSignatureWithAuthData","JSON","stringify","signedAttestationRequest","hardware_key_tag","hardware_signature","integrity_assertion","iss","keys_to_attest","platform","wallet_solution_id","wallet_solution_version","response","post","body","header","then","key_attestation","format"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/issuing.ts"],"mappings":"AAAA,SAASA,OAAO,EAAEC,UAAU,QAAQ,6BAA6B;AACjE,SAASC,QAAQ,QAAQ,cAAc;AAKvC,SAASC,uBAAuB,QAAQ,cAAc;AACtD,SAASC,aAAa,QAAQ,oBAAoB;AAClD,SAASC,sBAAsB,EAAEC,GAAG,QAAQ,iBAAiB;AAC7D,SAASC,MAAM,EAAEC,QAAQ,QAAQ,qBAAqB;AACtD,SAASC,sBAAsB,QAAQ,SAAS;;AAEhD;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,2BAA2B,GAAG,MAAAA,CAClCC,SAAiB,EACjBC,aAA0C,KACvC;EACH,MAAM;IAAEC,WAAW;IAAEC;EAAQ,CAAC,GAC5B,MAAMF,aAAa,CAACG,0BAA0B,CAACJ,SAAS,CAAC;EAE3D,IAAI,CAACG,OAAO,EAAE;IACZ,MAAM,IAAIV,aAAa,CACrB,mGACF,CAAC;EACH;EAEA,IAAIF,QAAQ,CAACc,EAAE,KAAK,SAAS,IAAI,CAACH,WAAW,EAAE;IAC7C,MAAM,IAAIT,aAAa,CACrB,iFACF,CAAC;EACH;EAEA,MAAMa,SAAS,GAAGX,GAAG,CAACY,KAAK,CAAC,MAAMN,aAAa,CAACO,YAAY,CAAC,CAAC,CAAC;EAE/D,MAAMC,UAAU,GAAG,MAAM,IAAIpB,OAAO,CAACY,aAAa,CAAC,CAChDS,UAAU,CAAC;IACVC,GAAG,EAAE;MACHC,GAAG,EAAElB,sBAAsB,CAACY,SAAS;IACvC,CAAC;IACDO,oBAAoB,EAAE;MACpBC,YAAY,EAAE,cAAc;MAC5B,IAAIZ,WAAW,IAAI;QAAEA;MAAY,CAAC;IACpC;EACF,CAAC,CAAC,CACDa,kBAAkB,CAAC;IAClBC,GAAG,EAAEV,SAAS,CAACU,GAAG;IAClBC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,WAAW,CAAC,CAAC,CACbC,iBAAiB,CAAC,IAAI,CAAC,CACvBC,IAAI,CAAC,CAAC;EAET,OAAO;IAAEnB,aAAa;IAAEoB,wBAAwB,EAAEZ,UAAU;IAAEH;EAAU,CAAC;AAC3E,CAAC;AAED,OAAO,MAAMgB,cAA4D,GACvE,MAAAA,CAAAC,IAAA,EAAAC,KAAA,KAGK;EAAA,IAFH;IAAEC,qBAAqB;IAAEC,gBAAgB;IAAEC;EAAsB,CAAC,GAAAJ,IAAA;EAAA,IAClE;IAAEK,QAAQ,GAAGC,KAAK;IAAEC,gBAAgB;IAAEC,YAAY,EAAEC;EAAqB,CAAC,GAAAR,KAAA;EAE1E,IAAIQ,oBAAoB,CAACC,MAAM,KAAK,CAAC,EAAE;IACrC,MAAM,IAAIxC,aAAa,CAAC,6CAA6C,CAAC;EACxE;EAEA,MAAMyC,GAAG,GAAG1C,uBAAuB,CAAC;IAAEoC,QAAQ;IAAEH;EAAsB,CAAC,CAAC;EAExE,MAAM;IAAEU;EAAM,CAAC,GAAG,MAAMD,GAAG,CAACE,GAAG,CAAC,QAAQ,CAAC;EACzCxC,MAAM,CAACyC,GAAG,CACRxC,QAAQ,CAACyC,KAAK,EACb,2BAA0Bb,qBAAsB,KAAIU,KAAM,EAC7D,CAAC;EAED,MAAMJ,YAAY,GAAG,MAAMQ,OAAO,CAACC,GAAG,CACpCR,oBAAoB,CAACS,GAAG,CAAExC,aAAa,IACrCF,2BAA2B,CAACoC,KAAK,EAAElC,aAAa,CAClD,CACF,CAAC;;EAED;EACA,MAAMyC,YAAY,GAAGX,YAAY,CAACY,EAAE,CAAC,CAAC,CAAC;EAEvC,IAAI,CAACD,YAAY,EAAE;IACjB,MAAM,IAAIjD,aAAa,CACrB,wDACF,CAAC;EACH;EAEA,MAAMmD,cAAc,GAAGd,gBAAgB,CAACe,iBAAiB,CAAC,CAAC;EAE3D,MAAMC,UAAU,GAAG;IACjB9C,SAAS,EAAEmC,KAAK;IAChBY,eAAe,EAAE,MAAMR,OAAO,CAACC,GAAG,CAChCT,YAAY,CAACU,GAAG,CAAEO,CAAC,IAAK1D,UAAU,CAAC0D,CAAC,CAAC1C,SAAS,CAAC,CACjD;EACF,CAAC;EAED,MAAM;IAAE2C,iBAAiB;IAAEC;EAAU,CAAC,GACpC,MAAMpB,gBAAgB,CAACqB,gCAAgC,CACrDC,IAAI,CAACC,SAAS,CAACP,UAAU,CAC3B,CAAC;EAEH,MAAMQ,wBAAwB,GAAG,MAAM,IAAIjE,OAAO,CAChDqD,YAAY,CAACzC,aACf,CAAC,CACES,UAAU,CAAC;IACVC,GAAG,EAAE;MACHC,GAAG,EAAElB,sBAAsB,CAACgD,YAAY,CAACpC,SAAS;IACpD,CAAC;IACDiD,gBAAgB,EAAEX,cAAc;IAChCY,kBAAkB,EAAEN,SAAS;IAC7BO,mBAAmB,EAAER,iBAAiB;IACtCS,GAAG,EAAEd,cAAc;IACnBe,cAAc,EAAE5B,YAAY,CAACU,GAAG,CAAEO,CAAC,IAAKA,CAAC,CAAC3B,wBAAwB,CAAC;IACnEc,KAAK;IACLyB,QAAQ,EAAErE,QAAQ,CAACc,EAAE;IACrBwD,kBAAkB,EAAEnC,gBAAgB;IACpCoC,uBAAuB,EAAEnC;EAC3B,CAAC,CAAC,CACDZ,kBAAkB,CAAC;IAClBC,GAAG,EAAE0B,YAAY,CAACpC,SAAS,CAACU,GAAG;IAC/BC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,WAAW,CAAC,CAAC,CACbC,iBAAiB,CAAC,IAAI,CAAC,CACvBC,IAAI,CAAC,CAAC;EAETxB,MAAM,CAACyC,GAAG,CACRxC,QAAQ,CAACyC,KAAK,EACb,+BAA8BgB,wBAAyB,EAC1D,CAAC;EAED,MAAMS,QAAQ,GAAG,MAAM7B,GAAG,CACvB8B,IAAI,CAAC,mBAAmB,EAAE;IACzBC,IAAI,EAAEX,wBAAwB;IAC9BY,MAAM,EAAE;MACN,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACDC,IAAI,CAACrE,sBAAsB,CAACS,KAAK,CAAC;EAErCX,MAAM,CAACyC,GAAG,CACRxC,QAAQ,CAACyC,KAAK,EACb,6BAA4ByB,QAAQ,CAACK,eAAgB,EACxD,CAAC;EAED,OAAO;IACLlE,WAAW,EAAE6D,QAAQ,CAACK,eAAe;IACrCC,MAAM,EAAE;EACV,CAAC;AACH,CAAC"}

package/lib/module/key-attestation/v1.4.6/mappers.js

@@ -0,0 +1,6 @@
+import { createMapper } from "../../utils/mappers";
+import { DecodedKeyAttestation } from "../api/types";
+export const mapToDecodedKeyAttestation = createMapper(x => x.payload, {
+  outputSchema: DecodedKeyAttestation
+});
+//# sourceMappingURL=mappers.js.map

package/lib/module/key-attestation/v1.4.6/mappers.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createMapper","DecodedKeyAttestation","mapToDecodedKeyAttestation","x","payload","outputSchema"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/mappers.ts"],"mappings":"AAAA,SAASA,YAAY,QAAQ,qBAAqB;AAClD,SAASC,qBAAqB,QAAQ,cAAc;AAGpD,OAAO,MAAMC,0BAA0B,GAAGF,YAAY,CAGnDG,CAAC,IAAKA,CAAC,CAACC,OAAO,EAAE;EAClBC,YAAY,EAAEJ;AAChB,CAAC,CAAC"}

package/lib/module/key-attestation/v1.4.6/types.js

@@ -0,0 +1,14 @@
+import * as z from "zod";
+import { Jwt } from "../../wallet-instance-attestation/common/types";
+import { DecodedKeyAttestation } from "../api/types";
+export const KeyAttestationJwt = z.object({
+  header: z.intersection(Jwt.shape.header, z.object({
+    typ: z.literal("key-attestation+jwt")
+  })),
+  payload: DecodedKeyAttestation // The payload type matches the public API
+});
+
+export const KeyAttestationResponse = z.object({
+  key_attestation: z.string()
+});
+//# sourceMappingURL=types.js.map

package/lib/module/key-attestation/v1.4.6/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","Jwt","DecodedKeyAttestation","KeyAttestationJwt","object","header","intersection","shape","typ","literal","payload","KeyAttestationResponse","key_attestation","string"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/types.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AAExB,SAASC,GAAG,QAAQ,gDAAgD;AACpE,SAASC,qBAAqB,QAAQ,cAAc;AAGpD,OAAO,MAAMC,iBAAiB,GAAGH,CAAC,CAACI,MAAM,CAAC;EACxCC,MAAM,EAAEL,CAAC,CAACM,YAAY,CACpBL,GAAG,CAACM,KAAK,CAACF,MAAM,EAChBL,CAAC,CAACI,MAAM,CAAC;IACPI,GAAG,EAAER,CAAC,CAACS,OAAO,CAAC,qBAAqB;EACtC,CAAC,CACH,CAAC;EACDC,OAAO,EAAER,qBAAqB,CAAE;AAClC,CAAC,CAAC;;AAGF,OAAO,MAAMS,sBAAsB,GAAGX,CAAC,CAACI,MAAM,CAAC;EAC7CQ,eAAe,EAAEZ,CAAC,CAACa,MAAM,CAAC;AAC5B,CAAC,CAAC"}

package/lib/module/{wallet-unit-attestation/v1.3.3 → key-attestation/v1.4.6}/utils.js

@@ -1,13 +1,13 @@
 import { decode as decodeJwt } from "@pagopa/io-react-native-jwt";
-import { WalletUnitAttestationJwt } from "./types";
+import { KeyAttestationJwt } from "./types";
 
 /**
- * Decode a given JWT to get the parsed Wallet Unit Attestation object they define.
+ * Decode a given JWT to get the parsed Key Attestation object they define.
  * It ensures the provided data is in a valid shape, but it DOES NOT verify the signature.
  */
 export function decode(token) {
   const decodedJwt = decodeJwt(token);
-  return WalletUnitAttestationJwt.parse({
+  return KeyAttestationJwt.parse({
     header: decodedJwt.protectedHeader,
     payload: decodedJwt.payload
   });

package/lib/module/key-attestation/v1.4.6/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["decode","decodeJwt","KeyAttestationJwt","token","decodedJwt","parse","header","protectedHeader","payload"],"sourceRoot":"../../../../src","sources":["key-attestation/v1.4.6/utils.ts"],"mappings":"AAAA,SAASA,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;AAEjE,SAASC,iBAAiB,QAAQ,SAAS;;AAE3C;AACA;AACA;AACA;AACA,OAAO,SAASF,MAAMA,CAACG,KAAa,EAAqB;EACvD,MAAMC,UAAU,GAAGH,SAAS,CAACE,KAAK,CAAC;EACnC,OAAOD,iBAAiB,CAACG,KAAK,CAAC;IAC7BC,MAAM,EAAEF,UAAU,CAACG,eAAe;IAClCC,OAAO,EAAEJ,UAAU,CAACI;EACtB,CAAC,CAAC;AACJ"}

package/lib/module/mdoc/index.js

@@ -1,9 +1,9 @@
 import { CBOR, COSE, ISO18013_7 } from "@pagopa/io-react-native-iso18013";
+import { removePadding } from "@pagopa/io-react-native-jwt";
 import { b64utob64 } from "jsrsasign";
 import { MissingX509CertsError } from "../trust/common/errors";
-import { IoWalletError } from "../utils/errors";
 import { convertBase64DerToPem, getSigninJwkFromCert } from "../utils/crypto";
-import { removePadding } from "@pagopa/io-react-native-jwt";
+import { IoWalletError } from "../utils/errors";
 import { verifyX509Chain } from "../utils/x509";
 export * from "./utils";
 export const verify = async (token, x509CertRoot) => {
@@ -23,8 +23,13 @@ export const verify = async (token, x509CertRoot) => {
   if (!coseSign1) {
     throw new IoWalletError("Missing coseSign1");
   }
+  const firstCert = x5chain[0];
+  if (!firstCert) {
+    throw new IoWalletError("x5chain is empty, cannot verify signature");
+  }
+
   // Once the x5chain is verified, the signatures verification can be performed
-  await verifyMdocSignature(coseSign1, x5chain[0]);
+  await verifyMdocSignature(coseSign1, firstCert);
   return {
     issuerSigned
   };
@@ -40,6 +45,9 @@ export const verify = async (token, x509CertRoot) => {
 const verifyMdocSignature = async (coseSign1, cert) => {
   const pemcert = convertBase64DerToPem(cert);
   const jwk = getSigninJwkFromCert(pemcert);
+  if (!jwk.x || !jwk.y) {
+    throw new IoWalletError("Missing x or y coordinate in the certificate's public key");
+  }
   jwk.x = b64utob64(jwk.x);
   jwk.y = b64utob64(jwk.y);
   const signatureCorrect = await COSE.verify(coseSign1, jwk);
@@ -49,9 +57,9 @@ export const prepareVpTokenMdoc = async (requestNonce, generatedNonce, clientId,
   let [verifiableCredential, presentationFrame] = _ref;
   /* verifiableCredential is a IssuerSigned structure */
   const documents = [{
-    issuerSignedContent: b64utob64(verifiableCredential),
     alias: keyTag,
-    docType
+    docType,
+    issuerSignedContent: b64utob64(verifiableCredential)
   }];
 
   /* clientId,responseUri,requestNonce are retrieved by Auth Request Object */

package/lib/module/mdoc/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["CBOR","COSE","ISO18013_7","b64utob64","MissingX509CertsError","IoWalletError","convertBase64DerToPem","getSigninJwkFromCert","removePadding","verifyX509Chain","verify","token","x509CertRoot","_issuerSigned$issuerA","issuerSigned","decodeIssuerSigned","issuerAuth","unprotectedHeader","x5chain","Array","isArray","length","map","coseSign1","rawValue","verifyMdocSignature","cert","pemcert","jwk","x","y","signatureCorrect","Error","prepareVpTokenMdoc","requestNonce","generatedNonce","clientId","responseUri","docType","keyTag","_ref","verifiableCredential","presentationFrame","documents","issuerSignedContent","alias","vp_token","generateOID4VPDeviceResponse"],"sourceRoot":"../../../src","sources":["mdoc/index.ts"],"mappings":"AAAA,SAASA,IAAI,EAAEC,IAAI,EAAEC,UAAU,QAAQ,kCAAkC;AACzE,SAASC,SAAS,QAAQ,WAAW;AAErC,SAASC,qBAAqB,QAAQ,wBAAwB;AAC9D,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,qBAAqB,EAAEC,oBAAoB,QAAQ,iBAAiB;AAE7E,SAASC,aAAa,QAAQ,6BAA6B;AAC3D,SAASC,eAAe,QAAQ,eAAe;AAC/C,cAAc,SAAS;AAEvB,OAAO,MAAMC,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,YAAoB,KAC6B;EAAA,IAAAC,qBAAA;EACjD;EACA,MAAMC,YAAY,GAAG,MAAMd,IAAI,CAACe,kBAAkB,CAACJ,KAAK,CAAC;EAEzD,IAAI,CAACG,YAAY,EAAE;IACjB,MAAM,IAAIT,aAAa,CAAC,cAAc,CAAC;EACzC;EAEA,IACE,GAAAQ,qBAAA,GAACC,YAAY,CAACE,UAAU,CAACC,iBAAiB,cAAAJ,qBAAA,eAAzCA,qBAAA,CAA2CK,OAAO,MAClD,CAACC,KAAK,CAACC,OAAO,CAACN,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAAC,IAChEJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACG,MAAM,KAAK,CAAC,CAAC,EACjE;IACA,MAAM,IAAIjB,qBAAqB,CAAC,2BAA2B,CAAC;EAC9D;EACA,MAAMc,OAAO,GACXJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACI,GAAG,CAACnB,SAAS,CAAC;EAClE;EACA,MAAMM,eAAe,CAACS,OAAO,EAAEN,YAAY,CAAC;EAE5C,MAAMW,SAAS,GAAGT,YAAY,CAACE,UAAU,CAACQ,QAAQ;EAElD,IAAI,CAACD,SAAS,EAAE;IACd,MAAM,IAAIlB,aAAa,CAAC,mBAAmB,CAAC;EAC9C;EACA;EACA,MAAMoB,mBAAmB,CAACF,SAAS,EAAEL,OAAO,CAAC,CAAC,CAAE,CAAC;EAEjD,OAAO;IAAEJ;EAAa,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMW,mBAAmB,GAAG,MAAAA,CAAOF,SAAiB,EAAEG,IAAY,KAAK;EACrE,MAAMC,OAAO,GAAGrB,qBAAqB,CAACoB,IAAI,CAAC;EAC3C,MAAME,GAAG,GAAGrB,oBAAoB,CAACoB,OAAO,CAAC;EAEzCC,GAAG,CAACC,CAAC,GAAG1B,SAAS,CAACyB,GAAG,CAACC,CAAE,CAAC;EACzBD,GAAG,CAACE,CAAC,GAAG3B,SAAS,CAACyB,GAAG,CAACE,CAAE,CAAC;EAEzB,MAAMC,gBAAgB,GAAG,MAAM9B,IAAI,CAACS,MAAM,CAACa,SAAS,EAAEK,GAAgB,CAAC;EAEvE,IAAI,CAACG,gBAAgB,EAAE,MAAM,IAAIC,KAAK,CAAC,wBAAwB,CAAC;AAClE,CAAC;AAED,OAAO,MAAMC,kBAAkB,GAAG,MAAAA,CAChCC,YAAoB,EACpBC,cAAsB,EACtBC,QAAgB,EAChBC,WAAmB,EACnBC,OAAe,EACfC,MAAc,EAAAC,IAAA,KAIV;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,CAAe,GAAAF,IAAA;EAIvD;EACA,MAAMG,SAAS,GAAG,CAChB;IACEC,mBAAmB,EAAEzC,SAAS,CAACsC,oBAAoB,CAAC;IACpDI,KAAK,EAAEN,MAAM;IACbD;EACF,CAAC,CACF;;EAED;EACA;EACA,MAAMQ,QAAQ,GAAG,MAAM5C,UAAU,CAAC6C,4BAA4B,CAC5DX,QAAQ,EACRC,WAAW,EACXH,YAAY,EACZC,cAAc,EACdQ,SAAS,EACTD,iBACF,CAAC;EAED,OAAO;IACLI,QAAQ,EAAEtC,aAAa,CAACsC,QAAQ;EAClC,CAAC;AACH,CAAC"}
+{"version":3,"names":["CBOR","COSE","ISO18013_7","removePadding","b64utob64","MissingX509CertsError","convertBase64DerToPem","getSigninJwkFromCert","IoWalletError","verifyX509Chain","verify","token","x509CertRoot","_issuerSigned$issuerA","issuerSigned","decodeIssuerSigned","issuerAuth","unprotectedHeader","x5chain","Array","isArray","length","map","coseSign1","rawValue","firstCert","verifyMdocSignature","cert","pemcert","jwk","x","y","signatureCorrect","Error","prepareVpTokenMdoc","requestNonce","generatedNonce","clientId","responseUri","docType","keyTag","_ref","verifiableCredential","presentationFrame","documents","alias","issuerSignedContent","vp_token","generateOID4VPDeviceResponse"],"sourceRoot":"../../../src","sources":["mdoc/index.ts"],"mappings":"AACA,SAASA,IAAI,EAAEC,IAAI,EAAEC,UAAU,QAAQ,kCAAkC;AACzE,SAASC,aAAa,QAAQ,6BAA6B;AAC3D,SAASC,SAAS,QAAQ,WAAW;AAIrC,SAASC,qBAAqB,QAAQ,wBAAwB;AAC9D,SAASC,qBAAqB,EAAEC,oBAAoB,QAAQ,iBAAiB;AAC7E,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,eAAe,QAAQ,eAAe;AAC/C,cAAc,SAAS;AAEvB,OAAO,MAAMC,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,YAAoB,KAC6B;EAAA,IAAAC,qBAAA;EACjD;EACA,MAAMC,YAAY,GAAG,MAAMd,IAAI,CAACe,kBAAkB,CAACJ,KAAK,CAAC;EAEzD,IAAI,CAACG,YAAY,EAAE;IACjB,MAAM,IAAIN,aAAa,CAAC,cAAc,CAAC;EACzC;EAEA,IACE,GAAAK,qBAAA,GAACC,YAAY,CAACE,UAAU,CAACC,iBAAiB,cAAAJ,qBAAA,eAAzCA,qBAAA,CAA2CK,OAAO,MAClD,CAACC,KAAK,CAACC,OAAO,CAACN,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAAC,IAChEJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACG,MAAM,KAAK,CAAC,CAAC,EACjE;IACA,MAAM,IAAIhB,qBAAqB,CAAC,2BAA2B,CAAC;EAC9D;EACA,MAAMa,OAAO,GACXJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACI,GAAG,CAAClB,SAAS,CAAC;EAClE;EACA,MAAMK,eAAe,CAACS,OAAO,EAAEN,YAAY,CAAC;EAE5C,MAAMW,SAAS,GAAGT,YAAY,CAACE,UAAU,CAACQ,QAAQ;EAElD,IAAI,CAACD,SAAS,EAAE;IACd,MAAM,IAAIf,aAAa,CAAC,mBAAmB,CAAC;EAC9C;EAEA,MAAMiB,SAAS,GAAGP,OAAO,CAAC,CAAC,CAAC;EAE5B,IAAI,CAACO,SAAS,EAAE;IACd,MAAM,IAAIjB,aAAa,CAAC,2CAA2C,CAAC;EACtE;;EAEA;EACA,MAAMkB,mBAAmB,CAACH,SAAS,EAAEE,SAAS,CAAC;EAE/C,OAAO;IAAEX;EAAa,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMY,mBAAmB,GAAG,MAAAA,CAAOH,SAAiB,EAAEI,IAAY,KAAK;EACrE,MAAMC,OAAO,GAAGtB,qBAAqB,CAACqB,IAAI,CAAC;EAC3C,MAAME,GAAG,GAAGtB,oBAAoB,CAACqB,OAAO,CAAC;EAEzC,IAAI,CAACC,GAAG,CAACC,CAAC,IAAI,CAACD,GAAG,CAACE,CAAC,EAAE;IACpB,MAAM,IAAIvB,aAAa,CACrB,2DACF,CAAC;EACH;EAEAqB,GAAG,CAACC,CAAC,GAAG1B,SAAS,CAACyB,GAAG,CAACC,CAAC,CAAC;EACxBD,GAAG,CAACE,CAAC,GAAG3B,SAAS,CAACyB,GAAG,CAACE,CAAC,CAAC;EAExB,MAAMC,gBAAgB,GAAG,MAAM/B,IAAI,CAACS,MAAM,CAACa,SAAS,EAAEM,GAAgB,CAAC;EAEvE,IAAI,CAACG,gBAAgB,EAAE,MAAM,IAAIC,KAAK,CAAC,wBAAwB,CAAC;AAClE,CAAC;AAED,OAAO,MAAMC,kBAAkB,GAAG,MAAAA,CAChCC,YAAoB,EACpBC,cAAsB,EACtBC,QAAgB,EAChBC,WAAmB,EACnBC,OAAe,EACfC,MAAc,EAAAC,IAAA,KAIV;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,CAAe,GAAAF,IAAA;EAIvD;EACA,MAAMG,SAAS,GAAG,CAChB;IACEC,KAAK,EAAEL,MAAM;IACbD,OAAO;IACPO,mBAAmB,EAAE1C,SAAS,CAACsC,oBAAoB;EACrD,CAAC,CACF;;EAED;EACA;EACA,MAAMK,QAAQ,GAAG,MAAM7C,UAAU,CAAC8C,4BAA4B,CAC5DX,QAAQ,EACRC,WAAW,EACXH,YAAY,EACZC,cAAc,EACdQ,SAAS,EACTD,iBACF,CAAC;EAED,OAAO;IACLI,QAAQ,EAAE5C,aAAa,CAAC4C,QAAQ;EAClC,CAAC;AACH,CAAC"}

package/lib/module/mdoc/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["CBOR","Verification","MDOC_VERIFICATION_IDENTIFIER","getParsedCredentialClaimKey","namespace","key","getVerificationFromParsedCredential","parsedCredential","_parsedCredential$ver","verificationKey","Object","keys","find","endsWith","verification","value","undefined","parse","getVerification","token","_flattenedClaims$find","issuerSigned","decodeIssuerSigned","flattenedClaims","values","nameSpaces","flat","x","elementIdentifier","elementValue"],"sourceRoot":"../../../src","sources":["mdoc/utils.ts"],"mappings":"AAAA,SAASA,IAAI,QAAQ,kCAAkC;AACvD,SAASC,YAAY,QAAQ,iBAAiB;AAG9C,SAASC,4BAA4B,QAAQ,SAAS;;AAEtD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,2BAA2B,GAAGA,CAACC,SAAiB,EAAEC,GAAW,KACvE,GAAED,SAAU,IAAGC,GAAI,EAAC;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mCAAmC,GAC9CC,gBAEqB,IAClB;EAAA,IAAAC,qBAAA;EACH,MAAMC,eAAe,GAAGC,MAAM,CAACC,IAAI,CAACJ,gBAAgB,CAAC,CAACK,IAAI,CAAEP,GAAG,IAC7DA,GAAG,CAACQ,QAAQ,CAACX,4BAA4B,CAC3C,CAAC;EACD,MAAMY,YAAY,GAAGL,eAAe,IAAAD,qBAAA,GAChCD,gBAAgB,CAACE,eAAe,CAAC,cAAAD,qBAAA,uBAAjCA,qBAAA,CAAmCO,KAAK,GACxCC,SAAS;EACb,OAAOF,YAAY,GAAGb,YAAY,CAACgB,KAAK,CAACH,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAME,eAAe,GAAG,MAAOC,KAAa,IAAK;EAAA,IAAAC,qBAAA;EACtD,MAAMC,YAAY,GAAG,MAAMrB,IAAI,CAACsB,kBAAkB,CAACH,KAAK,CAAC;EAEzD,MAAMI,eAAe,GAAGb,MAAM,CAACc,MAAM,CAACH,YAAY,CAACI,UAAU,CAAC,CAACC,IAAI,CAAC,CAAC;EAErE,MAAMZ,YAAY,GAAGS,eAAe,aAAfA,eAAe,gBAAAH,qBAAA,GAAfG,eAAe,CAAEX,IAAI,CACvCe,CAAC,IAAKA,CAAC,CAACC,iBAAiB,KAAK1B,4BACjC,CAAC,cAAAkB,qBAAA,uBAFoBA,qBAAA,CAElBS,YAAY;EAEf,OAAOf,YAAY,GAAGb,YAAY,CAACgB,KAAK,CAACH,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC"}
+{"version":3,"names":["CBOR","Verification","MDOC_VERIFICATION_IDENTIFIER","getParsedCredentialClaimKey","namespace","key","getVerificationFromParsedCredential","parsedCredential","_parsedCredential$ver","verificationKey","Object","keys","find","endsWith","verification","value","undefined","parse","getVerification","token","_flattenedClaims$find","issuerSigned","decodeIssuerSigned","flattenedClaims","values","nameSpaces","flat","x","elementIdentifier","elementValue"],"sourceRoot":"../../../src","sources":["mdoc/utils.ts"],"mappings":"AAAA,SAASA,IAAI,QAAQ,kCAAkC;AAKvD,SAASC,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,4BAA4B,QAAQ,SAAS;;AAEtD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,2BAA2B,GAAGA,CAACC,SAAiB,EAAEC,GAAW,KACvE,GAAED,SAAU,IAAGC,GAAI,EAAC;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mCAAmC,GAC9CC,gBAEqB,IAClB;EAAA,IAAAC,qBAAA;EACH,MAAMC,eAAe,GAAGC,MAAM,CAACC,IAAI,CAACJ,gBAAgB,CAAC,CAACK,IAAI,CAAEP,GAAG,IAC7DA,GAAG,CAACQ,QAAQ,CAACX,4BAA4B,CAC3C,CAAC;EACD,MAAMY,YAAY,GAAGL,eAAe,IAAAD,qBAAA,GAChCD,gBAAgB,CAACE,eAAe,CAAC,cAAAD,qBAAA,uBAAjCA,qBAAA,CAAmCO,KAAK,GACxCC,SAAS;EACb,OAAOF,YAAY,GAAGb,YAAY,CAACgB,KAAK,CAACH,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAME,eAAe,GAAG,MAAOC,KAAa,IAAK;EAAA,IAAAC,qBAAA;EACtD,MAAMC,YAAY,GAAG,MAAMrB,IAAI,CAACsB,kBAAkB,CAACH,KAAK,CAAC;EAEzD,MAAMI,eAAe,GAAGb,MAAM,CAACc,MAAM,CAACH,YAAY,CAACI,UAAU,CAAC,CAACC,IAAI,CAAC,CAAC;EAErE,MAAMZ,YAAY,GAAGS,eAAe,aAAfA,eAAe,gBAAAH,qBAAA,GAAfG,eAAe,CAAEX,IAAI,CACvCe,CAAC,IAAKA,CAAC,CAACC,iBAAiB,KAAK1B,4BACjC,CAAC,cAAAkB,qBAAA,uBAFoBA,qBAAA,CAElBS,YAAY;EAEf,OAAOf,YAAY,GAAGb,YAAY,CAACgB,KAAK,CAACH,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC"}

package/lib/module/sd-jwt/__test__/types.test.js

@@ -2,27 +2,27 @@ import { Verification } from "../types";
 describe("Verification.time", () => {
   test.each([["ISO string", "2025-09-09T10:00:00Z"], ["unix seconds", 1752122400], ["unix milliseconds", 1752122400000]])("accepts %s", (_label, time) => {
     const value = {
-      trust_framework: "eidas",
       assurance_level: "high",
       evidence: [{
-        type: "vouch",
-        time,
         attestation: {
-          type: "digital_attestation",
-          reference_number: "abc",
           date_of_issuance: "2025-09-02",
+          reference_number: "abc",
+          type: "digital_attestation",
           voucher: {
             organization: "IPZS"
           }
-        }
-      }]
+        },
+        time,
+        type: "vouch"
+      }],
+      trust_framework: "eidas"
     };
     expect(Verification.safeParse(value).success).toBe(true);
   });
   it("rejects invalid type", () => {
     const value = {
-      trust_framework: ["eidas"],
-      assurance_level: "high"
+      assurance_level: "high",
+      trust_framework: ["eidas"]
     };
     expect(Verification.safeParse(value).success).toBe(false);
   });

package/lib/module/sd-jwt/__test__/types.test.js.map

@@ -1 +1 @@
-{"version":3,"names":["Verification","describe","test","each","_label","time","value","trust_framework","assurance_level","evidence","type","attestation","reference_number","date_of_issuance","voucher","organization","expect","safeParse","success","toBe","it"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/types.test.ts"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAU;AAEvCC,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAClCC,IAAI,CAACC,IAAI,CAAC,CACR,CAAC,YAAY,EAAE,sBAAsB,CAAC,EACtC,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CACrC,CAAC,CAAC,YAAY,EAAE,CAACC,MAAM,EAAEC,IAAI,KAAK;IACjC,MAAMC,KAAK,GAAG;MACZC,eAAe,EAAE,OAAO;MACxBC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEC,IAAI,EAAE,OAAO;QACbL,IAAI;QACJM,WAAW,EAAE;UACXD,IAAI,EAAE,qBAAqB;UAC3BE,gBAAgB,EAAE,KAAK;UACvBC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC;MACF,CAAC;IAEL,CAAC;IAEDC,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;EAC1D,CAAC,CAAC;EAEFC,EAAE,CAAC,sBAAsB,EAAE,MAAM;IAC/B,MAAMd,KAAK,GAAG;MACZC,eAAe,EAAE,CAAC,OAAO,CAAC;MAC1BC,eAAe,EAAE;IACnB,CAAC;IAEDQ,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,KAAK,CAAC;EAC3D,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"names":["Verification","describe","test","each","_label","time","value","assurance_level","evidence","attestation","date_of_issuance","reference_number","type","voucher","organization","trust_framework","expect","safeParse","success","toBe","it"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/types.test.ts"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAU;AAEvCC,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAClCC,IAAI,CAACC,IAAI,CAAC,CACR,CAAC,YAAY,EAAE,sBAAsB,CAAC,EACtC,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CACrC,CAAC,CAAC,YAAY,EAAE,CAACC,MAAM,EAAEC,IAAI,KAAK;IACjC,MAAMC,KAAK,GAAG;MACZC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEC,WAAW,EAAE;UACXC,gBAAgB,EAAE,YAAY;UAC9BC,gBAAgB,EAAE,KAAK;UACvBC,IAAI,EAAE,qBAAqB;UAC3BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC,CAAC;QACDT,IAAI;QACJO,IAAI,EAAE;MACR,CAAC,CACF;MACDG,eAAe,EAAE;IACnB,CAAC;IAEDC,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;EAC1D,CAAC,CAAC;EAEFC,EAAE,CAAC,sBAAsB,EAAE,MAAM;IAC/B,MAAMd,KAAK,GAAG;MACZC,eAAe,EAAE,MAAM;MACvBQ,eAAe,EAAE,CAAC,OAAO;IAC3B,CAAC;IAEDC,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,KAAK,CAAC;EAC3D,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/lib/module/sd-jwt/__test__/utils.test.js

@@ -1,10 +1,10 @@
-import { legacyPid, pid } from "../__mocks__/sd-jwt";
 import { getVerification } from "..";
+import { legacyPid, pid } from "../__fixtures__/sd-jwt";
 describe("SD-JWT getVerification", () => {
   it("extracts the verification claims correctly", () => {
     expect(getVerification(pid)).toEqual({
-      trust_framework: "it_cie",
-      assurance_level: "high"
+      assurance_level: "high",
+      trust_framework: "it_cie"
     });
   });
   it("returns undefined when the verification claim is not found", () => {

package/lib/module/sd-jwt/__test__/utils.test.js.map

@@ -1 +1 @@
-{"version":3,"names":["legacyPid","pid","getVerification","describe","it","expect","toEqual","trust_framework","assurance_level","toBeUndefined"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/utils.test.ts"],"mappings":"AAAA,SAASA,SAAS,EAAEC,GAAG,QAAQ,qBAAqB;AACpD,SAASC,eAAe,QAAQ,IAAI;AAEpCC,QAAQ,CAAC,wBAAwB,EAAE,MAAM;EACvCC,EAAE,CAAC,4CAA4C,EAAE,MAAM;IACrDC,MAAM,CAACH,eAAe,CAACD,GAAG,CAAC,CAAC,CAACK,OAAO,CAAC;MACnCC,eAAe,EAAE,QAAQ;MACzBC,eAAe,EAAE;IACnB,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFJ,EAAE,CAAC,4DAA4D,EAAE,MAAM;IACrEC,MAAM,CAACH,eAAe,CAACF,SAAS,CAAC,CAAC,CAACS,aAAa,CAAC,CAAC;EACpD,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"names":["getVerification","legacyPid","pid","describe","it","expect","toEqual","assurance_level","trust_framework","toBeUndefined"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/utils.test.ts"],"mappings":"AAAA,SAASA,eAAe,QAAQ,IAAI;AACpC,SAASC,SAAS,EAAEC,GAAG,QAAQ,wBAAwB;AAEvDC,QAAQ,CAAC,wBAAwB,EAAE,MAAM;EACvCC,EAAE,CAAC,4CAA4C,EAAE,MAAM;IACrDC,MAAM,CAACL,eAAe,CAACE,GAAG,CAAC,CAAC,CAACI,OAAO,CAAC;MACnCC,eAAe,EAAE,MAAM;MACvBC,eAAe,EAAE;IACnB,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFJ,EAAE,CAAC,4DAA4D,EAAE,MAAM;IACrEC,MAAM,CAACL,eAAe,CAACC,SAAS,CAAC,CAAC,CAACQ,aAAa,CAAC,CAAC;EACpD,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/lib/module/sd-jwt/index.js

@@ -1,7 +1,7 @@
 import { sha256ToBase64, SignJWT } from "@pagopa/io-react-native-jwt";
+import { digest } from "@sd-jwt/crypto-nodejs";
 import { decodeSdJwtSync } from "@sd-jwt/decode";
 import { present } from "@sd-jwt/present";
-import { digest } from "@sd-jwt/crypto-nodejs";
 import { fixLegacyCredentialSdJwt } from "../utils/credentials";
 import { SdJwt4VCBase } from "./types";
 export * from "./utils";
@@ -22,12 +22,12 @@ export const decode = token => {
     payload: decoded.jwt.payload
   });
   const disclosures = decoded.disclosures.map(disclosure => ({
-    encoded: disclosure._digest,
-    decoded: [disclosure.salt, disclosure.key, disclosure.value]
+    decoded: [disclosure.salt, disclosure.key, disclosure.value],
+    encoded: disclosure._digest
   }));
   return {
-    sdJwt,
-    disclosures
+    disclosures,
+    sdJwt
   };
 };
 
@@ -54,11 +54,11 @@ export const prepareVpToken = async (nonce, client_id, _ref) => {
   // <Issuer-signed JWT>~<Disclosure 1>~<Disclosure N>~
   const sd_hash = await sha256ToBase64(vp);
   const kbJwt = await new SignJWT(cryptoContext).setProtectedHeader({
-    typ: "kb+jwt",
-    alg: "ES256"
+    alg: "ES256",
+    typ: "kb+jwt"
   }).setPayload({
-    sd_hash,
-    nonce: nonce
+    nonce: nonce,
+    sd_hash
   }).setAudience(client_id).setIssuedAt().sign();
   // <Issuer-signed JWT>~<Disclosure 1>~...~<Disclosure N>~<KB-JWT>
   const vp_token = [vp, kbJwt].join("");

package/lib/module/sd-jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["sha256ToBase64","SignJWT","decodeSdJwtSync","present","digest","fixLegacyCredentialSdJwt","SdJwt4VCBase","decode","token","decoded","sdJwt","parse","header","jwt","payload","disclosures","map","disclosure","encoded","_digest","salt","key","value","prepareVpToken","nonce","client_id","_ref","verifiableCredential","presentationFrame","cryptoContext","vp","sd_hash","kbJwt","setProtectedHeader","typ","alg","setPayload","setAudience","setIssuedAt","sign","vp_token","join"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":"AAAA,SAASA,cAAc,EAAEC,OAAO,QAAQ,6BAA6B;AACrE,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,OAAO,QAAQ,iBAAiB;AACzC,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,wBAAwB,QAAQ,sBAAsB;AAE/D,SAASC,YAAY,QAAQ,SAAS;AAEtC,cAAc,SAAS;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,MAAM,GAAIC,KAAa,IAAK;EACvC,MAAMC,OAAO,GAAGP,eAAe,CAACG,wBAAwB,CAACG,KAAK,CAAC,EAAEJ,MAAM,CAAC;EAExE,MAAMM,KAAK,GAAGJ,YAAY,CAACK,KAAK,CAAC;IAC/BC,MAAM,EAAEH,OAAO,CAACI,GAAG,CAACD,MAAM;IAC1BE,OAAO,EAAEL,OAAO,CAACI,GAAG,CAACC;EACvB,CAAC,CAAC;EACF,MAAMC,WAAW,GAAGN,OAAO,CAACM,WAAW,CAACC,GAAG,CAAEC,UAAU,KAAM;IAC3DC,OAAO,EAAED,UAAU,CAACE,OAAO;IAC3BV,OAAO,EAAE,CAACQ,UAAU,CAACG,IAAI,EAAEH,UAAU,CAACI,GAAG,EAAEJ,UAAU,CAACK,KAAK;EAC7D,CAAC,CAAC,CAAC;EACH,OAAO;IAAEZ,KAAK;IAAEK;EAAY,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMQ,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,IAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,EAAEC,aAAa,CAAe,GAAAH,IAAA;EAItE;EACA,MAAMI,EAAE,GAAG,MAAM3B,OAAO,CACtBE,wBAAwB,CAACsB,oBAAoB,CAAC,EAC9CC,iBAAiB,EACjBxB,MACF,CAAC;;EAED;EACA,MAAM2B,OAAO,GAAG,MAAM/B,cAAc,CAAC8B,EAAE,CAAC;EAExC,MAAME,KAAK,GAAG,MAAM,IAAI/B,OAAO,CAAC4B,aAAa,CAAC,CAC3CI,kBAAkB,CAAC;IAClBC,GAAG,EAAE,QAAQ;IACbC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVL,OAAO;IACPP,KAAK,EAAEA;EACT,CAAC,CAAC,CACDa,WAAW,CAACZ,SAAS,CAAC,CACtBa,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;EACT;EACA,MAAMC,QAAQ,GAAG,CAACV,EAAE,EAAEE,KAAK,CAAC,CAACS,IAAI,CAAC,EAAE,CAAC;EAErC,OAAO;IAAED;EAAS,CAAC;AACrB,CAAC"}
+{"version":3,"names":["sha256ToBase64","SignJWT","digest","decodeSdJwtSync","present","fixLegacyCredentialSdJwt","SdJwt4VCBase","decode","token","decoded","sdJwt","parse","header","jwt","payload","disclosures","map","disclosure","salt","key","value","encoded","_digest","prepareVpToken","nonce","client_id","_ref","verifiableCredential","presentationFrame","cryptoContext","vp","sd_hash","kbJwt","setProtectedHeader","alg","typ","setPayload","setAudience","setIssuedAt","sign","vp_token","join"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":"AAAA,SAASA,cAAc,EAAEC,OAAO,QAAQ,6BAA6B;AACrE,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,OAAO,QAAQ,iBAAiB;AAIzC,SAASC,wBAAwB,QAAQ,sBAAsB;AAC/D,SAASC,YAAY,QAAQ,SAAS;AAEtC,cAAc,SAAS;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,MAAM,GAAIC,KAAa,IAAK;EACvC,MAAMC,OAAO,GAAGN,eAAe,CAACE,wBAAwB,CAACG,KAAK,CAAC,EAAEN,MAAM,CAAC;EAExE,MAAMQ,KAAK,GAAGJ,YAAY,CAACK,KAAK,CAAC;IAC/BC,MAAM,EAAEH,OAAO,CAACI,GAAG,CAACD,MAAM;IAC1BE,OAAO,EAAEL,OAAO,CAACI,GAAG,CAACC;EACvB,CAAC,CAAC;EACF,MAAMC,WAAW,GAAGN,OAAO,CAACM,WAAW,CAACC,GAAG,CAAEC,UAAU,KAAM;IAC3DR,OAAO,EAAE,CAACQ,UAAU,CAACC,IAAI,EAAED,UAAU,CAACE,GAAG,EAAEF,UAAU,CAACG,KAAK,CAAC;IAC5DC,OAAO,EAAEJ,UAAU,CAACK;EACtB,CAAC,CAAC,CAAC;EACH,OAAO;IAAEP,WAAW;IAAEL;EAAM,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMa,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,IAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,EAAEC,aAAa,CAAe,GAAAH,IAAA;EAItE;EACA,MAAMI,EAAE,GAAG,MAAM1B,OAAO,CACtBC,wBAAwB,CAACsB,oBAAoB,CAAC,EAC9CC,iBAAiB,EACjB1B,MACF,CAAC;;EAED;EACA,MAAM6B,OAAO,GAAG,MAAM/B,cAAc,CAAC8B,EAAE,CAAC;EAExC,MAAME,KAAK,GAAG,MAAM,IAAI/B,OAAO,CAAC4B,aAAa,CAAC,CAC3CI,kBAAkB,CAAC;IAClBC,GAAG,EAAE,OAAO;IACZC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVZ,KAAK,EAAEA,KAAK;IACZO;EACF,CAAC,CAAC,CACDM,WAAW,CAACZ,SAAS,CAAC,CACtBa,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;EACT;EACA,MAAMC,QAAQ,GAAG,CAACV,EAAE,EAAEE,KAAK,CAAC,CAACS,IAAI,CAAC,EAAE,CAAC;EAErC,OAAO;IAAED;EAAS,CAAC;AACrB,CAAC"}

package/lib/module/sd-jwt/types.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
-import { UnixTime } from "../utils/zod";
 import { JWK } from "../utils/jwk";
+import { UnixTime } from "../utils/zod";
 
 /**
  * For backward compatibility reasons it is still necessary to support the legacy SD-JWT
@@ -23,29 +23,29 @@ const StatusList = z.object({
 
 export const SdJwt4VCBase = z.object({
   header: z.object({
-    typ: z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
     alg: z.string(),
     kid: z.string(),
     trust_chain: z.array(z.string()).optional(),
-    x5c: z.array(z.string()).optional(),
-    vctm: z.array(z.string()).optional()
+    typ: z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
+    vctm: z.array(z.string()).optional(),
+    x5c: z.array(z.string()).optional()
   }),
   payload: z.object({
     _sd: z.array(z.string()),
     _sd_alg: z.literal("sha-256"),
-    iss: z.string(),
-    sub: z.string(),
-    iat: UnixTime.optional(),
-    exp: UnixTime,
     cnf: z.object({
       jwk: JWK
     }),
+    exp: UnixTime,
+    iat: UnixTime.optional(),
+    iss: z.string(),
     status: z.union([z.object({
       status_list: StatusList
     }), z.object({
       /** @deprecated Use `status.status_list` */
       status_assertion: StatusAssertion
     })]),
+    sub: z.string(),
     vct: z.string(),
     "vct#integrity": z.string().optional()
   })
@@ -57,8 +57,8 @@ export const SdJwt4VCBase = z.object({
  */
 
 export const Verification = z.object({
-  trust_framework: z.string(),
-  assurance_level: z.string()
+  assurance_level: z.string(),
+  trust_framework: z.string()
 });
 
 /**
@@ -68,17 +68,17 @@ export const Verification = z.object({
  */
 
 export const TypeMetadata = z.object({
-  name: z.string(),
-  description: z.string(),
   data_source: z.object({
-    trust_framework: z.string(),
     authentic_source: z.object({
-      organization_name: z.string(),
-      organization_code: z.string(),
       contacts: z.array(z.string()),
-      homepage_uri: z.string().url(),
-      logo_uri: z.string().url()
-    })
-  })
+      homepage_uri: z.url(),
+      logo_uri: z.url(),
+      organization_code: z.string(),
+      organization_name: z.string()
+    }),
+    trust_framework: z.string()
+  }),
+  description: z.string(),
+  name: z.string()
 });
 //# sourceMappingURL=types.js.map

package/lib/module/sd-jwt/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","UnixTime","JWK","LEGACY_SD_JWT","StatusAssertion","object","credential_hash_alg","literal","StatusList","idx","number","uri","string","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","exp","cnf","jwk","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AACvB,SAASC,QAAQ,QAAQ,cAAc;AACvC,SAASC,GAAG,QAAQ,cAAc;;AAElC;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,aAAa,GAAG,WAAW;AAExC,MAAMC,eAAe,GAAGJ,CAAC,CAACK,MAAM,CAAC;EAC/BC,mBAAmB,EAAEN,CAAC,CAACO,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGR,CAAC,CAACK,MAAM,CAAC;EAC1BI,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEX,CAAC,CAACY,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,YAAY,GAAGb,CAAC,CAACK,MAAM,CAAC;EACnCS,MAAM,EAAEd,CAAC,CAACK,MAAM,CAAC;IACfU,GAAG,EAAEf,CAAC,CAACgB,IAAI,CAAC,CAAC,WAAW,EAAEb,aAAa,CAAC,CAAC;IACzCc,GAAG,EAAEjB,CAAC,CAACY,MAAM,CAAC,CAAC;IACfM,GAAG,EAAElB,CAAC,CAACY,MAAM,CAAC,CAAC;IACfO,WAAW,EAAEnB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEtB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAEvB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAExB,CAAC,CAACK,MAAM,CAAC;IAChBoB,GAAG,EAAEzB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;IACxBc,OAAO,EAAE1B,CAAC,CAACO,OAAO,CAAC,SAAS,CAAC;IAC7BoB,GAAG,EAAE3B,CAAC,CAACY,MAAM,CAAC,CAAC;IACfgB,GAAG,EAAE5B,CAAC,CAACY,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAE5B,QAAQ,CAACoB,QAAQ,CAAC,CAAC;IACxBS,GAAG,EAAE7B,QAAQ;IACb8B,GAAG,EAAE/B,CAAC,CAACK,MAAM,CAAC;MACZ2B,GAAG,EAAE9B;IACP,CAAC,CAAC;IACF+B,MAAM,EAAEjC,CAAC,CAACkC,KAAK,CAAC,CACdlC,CAAC,CAACK,MAAM,CAAC;MACP8B,WAAW,EAAE3B;IACf,CAAC,CAAC,EACFR,CAAC,CAACK,MAAM,CAAC;MACP;MACA+B,gBAAgB,EAAEhC;IACpB,CAAC,CAAC,CACH,CAAC;IACFiC,GAAG,EAAErC,CAAC,CAACY,MAAM,CAAC,CAAC;IACf,eAAe,EAAEZ,CAAC,CAACY,MAAM,CAAC,CAAC,CAACS,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMiB,YAAY,GAAGtC,CAAC,CAACK,MAAM,CAAC;EACnCkC,eAAe,EAAEvC,CAAC,CAACY,MAAM,CAAC,CAAC;EAC3B4B,eAAe,EAAExC,CAAC,CAACY,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAM6B,YAAY,GAAGzC,CAAC,CAACK,MAAM,CAAC;EACnCqC,IAAI,EAAE1C,CAAC,CAACY,MAAM,CAAC,CAAC;EAChB+B,WAAW,EAAE3C,CAAC,CAACY,MAAM,CAAC,CAAC;EACvBgC,WAAW,EAAE5C,CAAC,CAACK,MAAM,CAAC;IACpBkC,eAAe,EAAEvC,CAAC,CAACY,MAAM,CAAC,CAAC;IAC3BiC,gBAAgB,EAAE7C,CAAC,CAACK,MAAM,CAAC;MACzByC,iBAAiB,EAAE9C,CAAC,CAACY,MAAM,CAAC,CAAC;MAC7BmC,iBAAiB,EAAE/C,CAAC,CAACY,MAAM,CAAC,CAAC;MAC7BoC,QAAQ,EAAEhD,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;MAC7BqC,YAAY,EAAEjD,CAAC,CAACY,MAAM,CAAC,CAAC,CAACsC,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEnD,CAAC,CAACY,MAAM,CAAC,CAAC,CAACsC,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"names":["z","JWK","UnixTime","LEGACY_SD_JWT","StatusAssertion","object","credential_hash_alg","literal","StatusList","idx","number","uri","string","SdJwt4VCBase","header","alg","kid","trust_chain","array","optional","typ","enum","vctm","x5c","payload","_sd","_sd_alg","cnf","jwk","exp","iat","iss","status","union","status_list","status_assertion","sub","vct","Verification","assurance_level","trust_framework","TypeMetadata","data_source","authentic_source","contacts","homepage_uri","url","logo_uri","organization_code","organization_name","description","name"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,SAASC,GAAG,QAAQ,cAAc;AAClC,SAASC,QAAQ,QAAQ,cAAc;;AAEvC;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,aAAa,GAAG,WAAW;AAExC,MAAMC,eAAe,GAAGJ,CAAC,CAACK,MAAM,CAAC;EAC/BC,mBAAmB,EAAEN,CAAC,CAACO,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGR,CAAC,CAACK,MAAM,CAAC;EAC1BI,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEX,CAAC,CAACY,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,YAAY,GAAGb,CAAC,CAACK,MAAM,CAAC;EACnCS,MAAM,EAAEd,CAAC,CAACK,MAAM,CAAC;IACfU,GAAG,EAAEf,CAAC,CAACY,MAAM,CAAC,CAAC;IACfI,GAAG,EAAEhB,CAAC,CAACY,MAAM,CAAC,CAAC;IACfK,WAAW,EAAEjB,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEpB,CAAC,CAACqB,IAAI,CAAC,CAAC,WAAW,EAAElB,aAAa,CAAC,CAAC;IACzCmB,IAAI,EAAEtB,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IACpCI,GAAG,EAAEvB,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC;EACpC,CAAC,CAAC;EACFK,OAAO,EAAExB,CAAC,CAACK,MAAM,CAAC;IAChBoB,GAAG,EAAEzB,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;IACxBc,OAAO,EAAE1B,CAAC,CAACO,OAAO,CAAC,SAAS,CAAC;IAC7BoB,GAAG,EAAE3B,CAAC,CAACK,MAAM,CAAC;MACZuB,GAAG,EAAE3B;IACP,CAAC,CAAC;IACF4B,GAAG,EAAE3B,QAAQ;IACb4B,GAAG,EAAE5B,QAAQ,CAACiB,QAAQ,CAAC,CAAC;IACxBY,GAAG,EAAE/B,CAAC,CAACY,MAAM,CAAC,CAAC;IACfoB,MAAM,EAAEhC,CAAC,CAACiC,KAAK,CAAC,CACdjC,CAAC,CAACK,MAAM,CAAC;MACP6B,WAAW,EAAE1B;IACf,CAAC,CAAC,EACFR,CAAC,CAACK,MAAM,CAAC;MACP;MACA8B,gBAAgB,EAAE/B;IACpB,CAAC,CAAC,CACH,CAAC;IACFgC,GAAG,EAAEpC,CAAC,CAACY,MAAM,CAAC,CAAC;IACfyB,GAAG,EAAErC,CAAC,CAACY,MAAM,CAAC,CAAC;IACf,eAAe,EAAEZ,CAAC,CAACY,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMmB,YAAY,GAAGtC,CAAC,CAACK,MAAM,CAAC;EACnCkC,eAAe,EAAEvC,CAAC,CAACY,MAAM,CAAC,CAAC;EAC3B4B,eAAe,EAAExC,CAAC,CAACY,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAM6B,YAAY,GAAGzC,CAAC,CAACK,MAAM,CAAC;EACnCqC,WAAW,EAAE1C,CAAC,CAACK,MAAM,CAAC;IACpBsC,gBAAgB,EAAE3C,CAAC,CAACK,MAAM,CAAC;MACzBuC,QAAQ,EAAE5C,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;MAC7BiC,YAAY,EAAE7C,CAAC,CAAC8C,GAAG,CAAC,CAAC;MACrBC,QAAQ,EAAE/C,CAAC,CAAC8C,GAAG,CAAC,CAAC;MACjBE,iBAAiB,EAAEhD,CAAC,CAACY,MAAM,CAAC,CAAC;MAC7BqC,iBAAiB,EAAEjD,CAAC,CAACY,MAAM,CAAC;IAC9B,CAAC,CAAC;IACF4B,eAAe,EAAExC,CAAC,CAACY,MAAM,CAAC;EAC5B,CAAC,CAAC;EACFsC,WAAW,EAAElD,CAAC,CAACY,MAAM,CAAC,CAAC;EACvBuC,IAAI,EAAEnD,CAAC,CAACY,MAAM,CAAC;AACjB,CAAC,CAAC"}