@pagopa/io-react-native-wallet 3.6.3 → 3.7.0

package/lib/module/sd-jwt/utils.js

@@ -1,28 +1,27 @@
 import { sha256ToBase64 } from "@pagopa/io-react-native-jwt";
-import { decodeSdJwtSync, getClaimsSync } from "@sd-jwt/decode";
 import { digest } from "@sd-jwt/crypto-nodejs";
+import { decodeSdJwtSync, getClaimsSync } from "@sd-jwt/decode";
+import { fixLegacyCredentialSdJwt } from "../utils/credentials";
+import { IoWalletError, IssuerResponseError, ValidationFailed } from "../utils/errors";
 import { hasStatusOrThrow } from "../utils/misc";
 import { TypeMetadata, Verification } from "./types";
-import { IoWalletError, IssuerResponseError, ValidationFailed } from "../utils/errors";
-import { fixLegacyCredentialSdJwt } from "../utils/credentials";
 
 /**
  * Retrieve the Type Metadata for a credential and verify its integrity.
- * @param vct The VCT as a valid HTTPS url
+ * @param issuerUrl The Credential Issuer base url
+ * @param vct The VCT as a URN
  * @param vctIntegrity The integrity hash
  * @param context.appFetch (optional) fetch api implementation. Default: built-in fetch
  * @returns The credential metadata {@link TypeMetadata}
  */
-export const fetchTypeMetadata = async function (vct, vctIntegrity) {
-  let context = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {};
+export const fetchTypeMetadata = async function (issuerUrl, vct, vctIntegrity) {
+  let context = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
   const {
     appFetch = fetch
   } = context;
-  const {
-    origin,
-    pathname
-  } = new URL(vct);
-  const metadata = await appFetch(`${origin}/.well-known/vct${pathname}`, {
+  const url = new URL("/.well-known/type-metadata", issuerUrl);
+  url.searchParams.append("vct", vct);
+  const metadata = await appFetch(url.toString(), {
     headers: {
       "Content-Type": "application/json"
     }

package/lib/module/sd-jwt/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["sha256ToBase64","decodeSdJwtSync","getClaimsSync","digest","hasStatusOrThrow","TypeMetadata","Verification","IoWalletError","IssuerResponseError","ValidationFailed","fixLegacyCredentialSdJwt","fetchTypeMetadata","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","origin","pathname","URL","metadata","headers","then","res","json","parse","alg","hash","split","metadataHash","JSON","stringify","message","reason","getVerification","credentialSdJwt","decoded","claims","jwt","payload","disclosures","verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":"AAAA,SAASA,cAAc,QAAQ,6BAA6B;AAC5D,SAASC,eAAe,EAAEC,aAAa,QAAQ,gBAAgB;AAC/D,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,gBAAgB,QAAQ,eAAe;AAChD,SAASC,YAAY,EAAEC,YAAY,QAAQ,SAAS;AACpD,SACEC,aAAa,EACbC,mBAAmB,EACnBC,gBAAgB,QACX,iBAAiB;AACxB,SAASC,wBAAwB,QAAQ,sBAAsB;;AAE/D;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,GAAG,eAAAA,CAC/BC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EACpC,MAAM;IAAEM,MAAM;IAAEC;EAAS,CAAC,GAAG,IAAIC,GAAG,CAACV,GAAG,CAAC;EAEzC,MAAMW,QAAQ,GAAG,MAAML,QAAQ,CAAE,GAAEE,MAAO,mBAAkBC,QAAS,EAAC,EAAE;IACtEG,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAACrB,gBAAgB,CAAC,GAAG,EAAEI,mBAAmB,CAAC,CAAC,CAChDiB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBF,IAAI,CAACpB,YAAY,CAACuB,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGjB,YAAY,CAACkB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAItB,aAAa,CAAE,GAAEsB,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMG,YAAY,GAAG,MAAMhC,cAAc,CAACiC,IAAI,CAACC,SAAS,CAACX,QAAQ,CAAC,CAAC;EAEnE,IAAIS,YAAY,KAAKF,IAAI,EAAE;IACzB,MAAM,IAAIrB,gBAAgB,CAAC;MACzB0B,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOb,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMc,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAMC,OAAO,GAAGtC,eAAe,CAC7BS,wBAAwB,CAAC4B,eAAe,CAAC,EACzCnC,MACF,CAAC;EAED,MAAMqC,MAAM,GAAGtC,aAAa,CAC1BqC,OAAO,CAACE,GAAG,CAACC,OAAO,EACnBH,OAAO,CAACI,WAAW,EACnBxC,MACF,CAAC;EAED,OAAOqC,MAAM,CAACI,YAAY,GACtBtC,YAAY,CAACsB,KAAK,CAACY,MAAM,CAACI,YAAY,CAAC,GACvC3B,SAAS;AACf,CAAC"}
+{"version":3,"names":["sha256ToBase64","digest","decodeSdJwtSync","getClaimsSync","fixLegacyCredentialSdJwt","IoWalletError","IssuerResponseError","ValidationFailed","hasStatusOrThrow","TypeMetadata","Verification","fetchTypeMetadata","issuerUrl","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","url","URL","searchParams","append","metadata","toString","headers","then","res","json","parse","alg","hash","split","metadataHash","JSON","stringify","message","reason","getVerification","credentialSdJwt","decoded","claims","jwt","payload","disclosures","verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":"AAAA,SAASA,cAAc,QAAQ,6BAA6B;AAC5D,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,eAAe,EAAEC,aAAa,QAAQ,gBAAgB;AAE/D,SAASC,wBAAwB,QAAQ,sBAAsB;AAC/D,SACEC,aAAa,EACbC,mBAAmB,EACnBC,gBAAgB,QACX,iBAAiB;AACxB,SAASC,gBAAgB,QAAQ,eAAe;AAChD,SAASC,YAAY,EAAEC,YAAY,QAAQ,SAAS;;AAEpD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,GAAG,eAAAA,CAC/BC,SAAiB,EACjBC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EAEpC,MAAMM,GAAG,GAAG,IAAIC,GAAG,CAAC,4BAA4B,EAAEV,SAAS,CAAC;EAC5DS,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,KAAK,EAAEX,GAAG,CAAC;EAEnC,MAAMY,QAAQ,GAAG,MAAMN,QAAQ,CAACE,GAAG,CAACK,QAAQ,CAAC,CAAC,EAAE;IAC9CC,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAACpB,gBAAgB,CAAC,GAAG,EAAEF,mBAAmB,CAAC,CAAC,CAChDsB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBF,IAAI,CAACnB,YAAY,CAACsB,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGnB,YAAY,CAACoB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAI3B,aAAa,CAAE,GAAE2B,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMG,YAAY,GAAG,MAAMnC,cAAc,CAACoC,IAAI,CAACC,SAAS,CAACZ,QAAQ,CAAC,CAAC;EAEnE,IAAIU,YAAY,KAAKF,IAAI,EAAE;IACzB,MAAM,IAAI1B,gBAAgB,CAAC;MACzB+B,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOd,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMe,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAMC,OAAO,GAAGxC,eAAe,CAC7BE,wBAAwB,CAACqC,eAAe,CAAC,EACzCxC,MACF,CAAC;EAED,MAAM0C,MAAM,GAAGxC,aAAa,CAC1BuC,OAAO,CAACE,GAAG,CAACC,OAAO,EACnBH,OAAO,CAACI,WAAW,EACnB7C,MACF,CAAC;EAED,OAAO0C,MAAM,CAACI,YAAY,GACtBrC,YAAY,CAACqB,KAAK,CAACY,MAAM,CAACI,YAAY,CAAC,GACvC7B,SAAS;AACf,CAAC"}

package/lib/module/trust/api/TrustAnchorConfig.js

@@ -8,14 +8,14 @@ import { FederationEntityMetadata } from "../common/types";
  */
 
 export const TrustAnchorConfig = z.object({
+  federation_entity: FederationEntityMetadata,
   jwt: z.object({
     header: z.object({
-      typ: z.literal("entity-statement+jwt"),
       alg: z.string(),
-      kid: z.string()
+      kid: z.string(),
+      typ: z.literal("entity-statement+jwt")
     })
   }),
-  keys: z.array(JWK),
-  federation_entity: FederationEntityMetadata
+  keys: z.array(JWK)
 });
 //# sourceMappingURL=TrustAnchorConfig.js.map

package/lib/module/trust/api/TrustAnchorConfig.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","JWK","FederationEntityMetadata","TrustAnchorConfig","object","jwt","header","typ","literal","alg","string","kid","keys","array","federation_entity"],"sourceRoot":"../../../../src","sources":["trust/api/TrustAnchorConfig.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AACxB,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,wBAAwB,QAAQ,iBAAiB;;AAE1D;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,iBAAiB,GAAGH,CAAC,CAACI,MAAM,CAAC;EACxCC,GAAG,EAAEL,CAAC,CAACI,MAAM,CAAC;IACZE,MAAM,EAAEN,CAAC,CAACI,MAAM,CAAC;MACfG,GAAG,EAAEP,CAAC,CAACQ,OAAO,CAAC,sBAAsB,CAAC;MACtCC,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;MACfC,GAAG,EAAEX,CAAC,CAACU,MAAM,CAAC;IAChB,CAAC;EACH,CAAC,CAAC;EACFE,IAAI,EAAEZ,CAAC,CAACa,KAAK,CAACZ,GAAG,CAAC;EAClBa,iBAAiB,EAAEZ;AACrB,CAAC,CAAC"}
+{"version":3,"names":["z","JWK","FederationEntityMetadata","TrustAnchorConfig","object","federation_entity","jwt","header","alg","string","kid","typ","literal","keys","array"],"sourceRoot":"../../../../src","sources":["trust/api/TrustAnchorConfig.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AAExB,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,wBAAwB,QAAQ,iBAAiB;;AAE1D;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,iBAAiB,GAAGH,CAAC,CAACI,MAAM,CAAC;EACxCC,iBAAiB,EAAEH,wBAAwB;EAC3CI,GAAG,EAAEN,CAAC,CAACI,MAAM,CAAC;IACZG,MAAM,EAAEP,CAAC,CAACI,MAAM,CAAC;MACfI,GAAG,EAAER,CAAC,CAACS,MAAM,CAAC,CAAC;MACfC,GAAG,EAAEV,CAAC,CAACS,MAAM,CAAC,CAAC;MACfE,GAAG,EAAEX,CAAC,CAACY,OAAO,CAAC,sBAAsB;IACvC,CAAC;EACH,CAAC,CAAC;EACFC,IAAI,EAAEb,CAAC,CAACc,KAAK,CAACb,GAAG;AACnB,CAAC,CAAC"}

package/lib/module/trust/common/build-chain.js

@@ -22,8 +22,8 @@ export function createBuildTrustChain(config) {
       });
       if (!federationList.includes(relyingPartyEntityBaseUrl)) {
         throw new RelyingPartyNotAuthorizedError("Relying Party entity base URL is not authorized by the Trust Anchor's federation list.", {
-          relyingPartyUrl: relyingPartyEntityBaseUrl,
-          federationListEndpoint
+          federationListEndpoint,
+          relyingPartyUrl: relyingPartyEntityBaseUrl
         });
       }
     }
@@ -80,6 +80,9 @@ export function createGatherTrustChain(_ref) {
       return chain;
     }
     const parentEntityBaseUrl = authorityHints[0];
+    if (!parentEntityBaseUrl) {
+      throw new Error("AuthorityHints array is empty.");
+    }
 
     // Fetch parent EC
     const parentECJwt = await getSignedEntityConfiguration(parentEntityBaseUrl, {

package/lib/module/trust/common/build-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["BuildTrustChainError","MissingFederationFetchEndpointError","RelyingPartyNotAuthorizedError","TrustAnchorKidMissingError","decode","getFederationList","getSignedEntityConfiguration","getSignedEntityStatement","verify","createBuildTrustChain","config","buildTrustChain","relyingPartyEntityBaseUrl","trustAnchorConfig","appFetch","arguments","length","undefined","fetch","trustAnchorKey","keys","federationListEndpoint","federation_entity","federation_list_endpoint","federationList","includes","relyingPartyUrl","gatherTrustChain","createGatherTrustChain","trustChain","chainTrustAnchorJwt","kid","_ref","EntityConfigurationShape","EntityStatementShape","entityBaseUrl","isLeaf","chain","entityECJwt","entityEC","parse","push","authorityHints","payload","authority_hints","parentEntityBaseUrl","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_fetch_endpoint","missingInEntityUrl","entityStatementJwt","parentChain","concat"],"sourceRoot":"../../../../src","sources":["trust/common/build-chain.ts"],"mappings":"AAAA,SACEA,oBAAoB,EACpBC,mCAAmC,EACnCC,8BAA8B,EAC9BC,0BAA0B,QACrB,UAAU;AACjB,SACEC,MAAM,EACNC,iBAAiB,EACjBC,4BAA4B,EAC5BC,wBAAwB,EACxBC,MAAM,QACD,SAAS;AAUhB;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CACnCC,MAAqB,EACQ;EAC7B,OAAO,eAAeC,eAAeA,CACnCC,yBAAyB,EACzBC,iBAAiB,EAEjB;IAAA,IADAC,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;IAEhB;IACA;IACA;IACA,MAAMC,cAAc,GAAGN,iBAAiB,CAACO,IAAI,CAAC,CAAC,CAAC;IAEhD,IAAI,CAACD,cAAc,EAAE;MACnB,MAAM,IAAInB,oBAAoB,CAC5B,0EACF,CAAC;IACH;IAEA,MAAMqB,sBAAsB,GAC1BR,iBAAiB,CAACS,iBAAiB,CAACC,wBAAwB;IAE9D,IAAIF,sBAAsB,EAAE;MAC1B,MAAMG,cAAc,GAAG,MAAMnB,iBAAiB,CAACgB,sBAAsB,EAAE;QACrEP;MACF,CAAC,CAAC;MAEF,IAAI,CAACU,cAAc,CAACC,QAAQ,CAACb,yBAAyB,CAAC,EAAE;QACvD,MAAM,IAAIV,8BAA8B,CACtC,wFAAwF,EACxF;UAAEwB,eAAe,EAAEd,yBAAyB;UAAES;QAAuB,CACvE,CAAC;MACH;IACF;IAEA,MAAMM,gBAAgB,GAAGC,sBAAsB,CAAClB,MAAM,CAAC;;IAEvD;IACA,MAAMmB,UAAU,GAAG,MAAMF,gBAAgB,CACvCf,yBAAyB,EACzBE,QACF,CAAC;IACD;IACA,MAAMgB,mBAAmB,GAAGD,UAAU,CAACA,UAAU,CAACb,MAAM,GAAG,CAAC,CAAC;IAC7D,IAAI,CAACc,mBAAmB,EAAE;MACxB,MAAM,IAAI9B,oBAAoB,CAC5B,6EAA6E,EAC7E;QAAE0B,eAAe,EAAEd;MAA0B,CAC/C,CAAC;IACH;IAEA,IAAI,CAACO,cAAc,CAACY,GAAG,EAAE;MACvB,MAAM,IAAI5B,0BAA0B,CAAC,CAAC;IACxC;IAEA,MAAMK,MAAM,CAACsB,mBAAmB,EAAEX,cAAc,CAACY,GAAG,EAAE,CAACZ,cAAc,CAAC,CAAC;IAEvE,OAAOU,UAAU;EACnB,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASD,sBAAsBA,CAAAI,IAAA,EAGpB;EAAA,IAHqB;IACrCC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd,OAAO,eAAeL,gBAAgBA,CACpCQ,aAAqB,EACrBrB,QAA8B,EAEX;IAAA,IADnBsB,MAAe,GAAArB,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,IAAI;IAEtB,MAAMsB,KAAe,GAAG,EAAE;;IAE1B;IACA,MAAMC,WAAW,GAAG,MAAMhC,4BAA4B,CAAC6B,aAAa,EAAE;MACpErB;IACF,CAAC,CAAC;IACF,MAAMyB,QAAQ,GAAGN,wBAAwB,CAACO,KAAK,CAACpC,MAAM,CAACkC,WAAW,CAAC,CAAC;IACpE,IAAIF,MAAM,EAAE;MACV;MACAC,KAAK,CAACI,IAAI,CAACH,WAAW,CAAC;IACzB;;IAEA;IACA,MAAMI,cAAc,GAAGH,QAAQ,CAACI,OAAO,CAACC,eAAe,IAAI,EAAE;IAC7D,IAAIF,cAAc,CAAC1B,MAAM,KAAK,CAAC,EAAE;MAC/B;MACA,IAAI,CAACoB,MAAM,EAAE;QACXC,KAAK,CAACI,IAAI,CAACH,WAAW,CAAC;MACzB;MACA,OAAOD,KAAK;IACd;IACA,MAAMQ,mBAAmB,GAAGH,cAAc,CAAC,CAAC,CAAE;;IAE9C;IACA,MAAMI,WAAW,GAAG,MAAMxC,4BAA4B,CACpDuC,mBAAmB,EACnB;MAAE/B;IAAS,CACb,CAAC;IACD,MAAMiC,QAAQ,GAAGd,wBAAwB,CAACO,KAAK,CAACpC,MAAM,CAAC0C,WAAW,CAAC,CAAC;IACpE;IACA,MAAME,uBAAuB,GAC3BD,QAAQ,CAACJ,OAAO,CAACM,QAAQ,CAAC3B,iBAAiB,CAAC4B,yBAAyB;IACvE,IAAI,CAACF,uBAAuB,EAAE;MAC5B,MAAM,IAAI/C,mCAAmC,CAC1C,kDAAiD4C,mBAAoB,4CAA2CV,aAAc,GAAE,EACjI;QAAEA,aAAa;QAAEgB,kBAAkB,EAAEN;MAAoB,CAC3D,CAAC;IACH;IACA,MAAMO,kBAAkB,GAAG,MAAM7C,wBAAwB,CACvDyC,uBAAuB,EACvBb,aAAa,EACb;MAAErB;IAAS,CACb,CAAC;IACD;IACAoB,oBAAoB,CAACM,KAAK,CAACpC,MAAM,CAACgD,kBAAkB,CAAC,CAAC;;IAEtD;IACAf,KAAK,CAACI,IAAI,CAACW,kBAAkB,CAAC;;IAE9B;IACA,MAAMC,WAAW,GAAG,MAAM1B,gBAAgB,CACxCkB,mBAAmB,EACnB/B,QAAQ,EACR,KACF,CAAC;IAED,OAAOuB,KAAK,CAACiB,MAAM,CAACD,WAAW,CAAC;EAClC,CAAC;AACH"}
+{"version":3,"names":["BuildTrustChainError","MissingFederationFetchEndpointError","RelyingPartyNotAuthorizedError","TrustAnchorKidMissingError","decode","getFederationList","getSignedEntityConfiguration","getSignedEntityStatement","verify","createBuildTrustChain","config","buildTrustChain","relyingPartyEntityBaseUrl","trustAnchorConfig","appFetch","arguments","length","undefined","fetch","trustAnchorKey","keys","federationListEndpoint","federation_entity","federation_list_endpoint","federationList","includes","relyingPartyUrl","gatherTrustChain","createGatherTrustChain","trustChain","chainTrustAnchorJwt","kid","_ref","EntityConfigurationShape","EntityStatementShape","entityBaseUrl","isLeaf","chain","entityECJwt","entityEC","parse","push","authorityHints","payload","authority_hints","parentEntityBaseUrl","Error","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_fetch_endpoint","missingInEntityUrl","entityStatementJwt","parentChain","concat"],"sourceRoot":"../../../../src","sources":["trust/common/build-chain.ts"],"mappings":"AAKA,SACEA,oBAAoB,EACpBC,mCAAmC,EACnCC,8BAA8B,EAC9BC,0BAA0B,QACrB,UAAU;AACjB,SACEC,MAAM,EACNC,iBAAiB,EACjBC,4BAA4B,EAC5BC,wBAAwB,EACxBC,MAAM,QACD,SAAS;AAOhB;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CACnCC,MAAqB,EACQ;EAC7B,OAAO,eAAeC,eAAeA,CACnCC,yBAAyB,EACzBC,iBAAiB,EAEjB;IAAA,IADAC,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;IAEhB;IACA;IACA;IACA,MAAMC,cAAc,GAAGN,iBAAiB,CAACO,IAAI,CAAC,CAAC,CAAC;IAEhD,IAAI,CAACD,cAAc,EAAE;MACnB,MAAM,IAAInB,oBAAoB,CAC5B,0EACF,CAAC;IACH;IAEA,MAAMqB,sBAAsB,GAC1BR,iBAAiB,CAACS,iBAAiB,CAACC,wBAAwB;IAE9D,IAAIF,sBAAsB,EAAE;MAC1B,MAAMG,cAAc,GAAG,MAAMnB,iBAAiB,CAACgB,sBAAsB,EAAE;QACrEP;MACF,CAAC,CAAC;MAEF,IAAI,CAACU,cAAc,CAACC,QAAQ,CAACb,yBAAyB,CAAC,EAAE;QACvD,MAAM,IAAIV,8BAA8B,CACtC,wFAAwF,EACxF;UACEmB,sBAAsB;UACtBK,eAAe,EAAEd;QACnB,CACF,CAAC;MACH;IACF;IAEA,MAAMe,gBAAgB,GAAGC,sBAAsB,CAAClB,MAAM,CAAC;;IAEvD;IACA,MAAMmB,UAAU,GAAG,MAAMF,gBAAgB,CACvCf,yBAAyB,EACzBE,QACF,CAAC;IACD;IACA,MAAMgB,mBAAmB,GAAGD,UAAU,CAACA,UAAU,CAACb,MAAM,GAAG,CAAC,CAAC;IAC7D,IAAI,CAACc,mBAAmB,EAAE;MACxB,MAAM,IAAI9B,oBAAoB,CAC5B,6EAA6E,EAC7E;QAAE0B,eAAe,EAAEd;MAA0B,CAC/C,CAAC;IACH;IAEA,IAAI,CAACO,cAAc,CAACY,GAAG,EAAE;MACvB,MAAM,IAAI5B,0BAA0B,CAAC,CAAC;IACxC;IAEA,MAAMK,MAAM,CAACsB,mBAAmB,EAAEX,cAAc,CAACY,GAAG,EAAE,CAACZ,cAAc,CAAC,CAAC;IAEvE,OAAOU,UAAU;EACnB,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASD,sBAAsBA,CAAAI,IAAA,EAGpB;EAAA,IAHqB;IACrCC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd,OAAO,eAAeL,gBAAgBA,CACpCQ,aAAqB,EACrBrB,QAA8B,EAEX;IAAA,IADnBsB,MAAM,GAAArB,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,IAAI;IAEb,MAAMsB,KAAe,GAAG,EAAE;;IAE1B;IACA,MAAMC,WAAW,GAAG,MAAMhC,4BAA4B,CAAC6B,aAAa,EAAE;MACpErB;IACF,CAAC,CAAC;IACF,MAAMyB,QAAQ,GAAGN,wBAAwB,CAACO,KAAK,CAACpC,MAAM,CAACkC,WAAW,CAAC,CAAC;IACpE,IAAIF,MAAM,EAAE;MACV;MACAC,KAAK,CAACI,IAAI,CAACH,WAAW,CAAC;IACzB;;IAEA;IACA,MAAMI,cAAc,GAAGH,QAAQ,CAACI,OAAO,CAACC,eAAe,IAAI,EAAE;IAC7D,IAAIF,cAAc,CAAC1B,MAAM,KAAK,CAAC,EAAE;MAC/B;MACA,IAAI,CAACoB,MAAM,EAAE;QACXC,KAAK,CAACI,IAAI,CAACH,WAAW,CAAC;MACzB;MACA,OAAOD,KAAK;IACd;IAEA,MAAMQ,mBAAmB,GAAGH,cAAc,CAAC,CAAC,CAAC;IAE7C,IAAI,CAACG,mBAAmB,EAAE;MACxB,MAAM,IAAIC,KAAK,CAAC,gCAAgC,CAAC;IACnD;;IAEA;IACA,MAAMC,WAAW,GAAG,MAAMzC,4BAA4B,CACpDuC,mBAAmB,EACnB;MAAE/B;IAAS,CACb,CAAC;IACD,MAAMkC,QAAQ,GAAGf,wBAAwB,CAACO,KAAK,CAACpC,MAAM,CAAC2C,WAAW,CAAC,CAAC;IACpE;IACA,MAAME,uBAAuB,GAC3BD,QAAQ,CAACL,OAAO,CAACO,QAAQ,CAAC5B,iBAAiB,CAAC6B,yBAAyB;IACvE,IAAI,CAACF,uBAAuB,EAAE;MAC5B,MAAM,IAAIhD,mCAAmC,CAC1C,kDAAiD4C,mBAAoB,4CAA2CV,aAAc,GAAE,EACjI;QAAEA,aAAa;QAAEiB,kBAAkB,EAAEP;MAAoB,CAC3D,CAAC;IACH;IACA,MAAMQ,kBAAkB,GAAG,MAAM9C,wBAAwB,CACvD0C,uBAAuB,EACvBd,aAAa,EACb;MAAErB;IAAS,CACb,CAAC;IACD;IACAoB,oBAAoB,CAACM,KAAK,CAACpC,MAAM,CAACiD,kBAAkB,CAAC,CAAC;;IAEtD;IACAhB,KAAK,CAACI,IAAI,CAACY,kBAAkB,CAAC;;IAE9B;IACA,MAAMC,WAAW,GAAG,MAAM3B,gBAAgB,CACxCkB,mBAAmB,EACnB/B,QAAQ,EACR,KACF,CAAC;IAED,OAAOuB,KAAK,CAACkB,MAAM,CAACD,WAAW,CAAC;EAClC,CAAC;AACH"}

package/lib/module/trust/common/errors.js

@@ -1,5 +1,7 @@
-import { IoWalletError, serializeAttrs } from "../../utils/errors";
 // Ensure this path is correct
+
+import { IoWalletError, serializeAttrs } from "../../utils/errors";
+
 /**
  * Base class for all federation-specific errors.
  */
@@ -15,48 +17,50 @@ export class FederationError extends IoWalletError {
 }
 
 /**
- * Error thrown when a trust chain is unexpectedly empty.
+ * General error thrown during the trust chain building process.
  */
-export class TrustChainEmptyError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_EMPTY";
-  constructor() {
-    let message = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "Trust chain cannot be empty.";
-    super(message, undefined);
+export class BuildTrustChainError extends FederationError {
+  code = "ERR_FED_BUILD_TRUST_CHAIN_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
+  constructor(message, details) {
+    super(message, details);
   }
 }
-
-/**
- * Error thrown when a token is unexpectedly missing from a trust chain during processing.
- */
-export class TrustChainTokenMissingError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_TOKEN_MISSING";
+export class FederationListParseError extends FederationError {
+  code = "ERR_FED_FEDERATION_LIST_PARSE_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
 
 /**
- * Error thrown when renewing a trust chain fails.
- * This class itself might be used or could be considered a more general renewal error.
+ * Error thrown when a 'federation_fetch_endpoint' is missing in an entity's configuration.
  */
-export class TrustChainRenewalError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_RENEWAL_FAILED";
+export class MissingFederationFetchEndpointError extends FederationError {
+  code = "ERR_FED_MISSING_FEDERATION_FETCH_ENDPOINT";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
-export class FederationListParseError extends FederationError {
-  code = "ERR_FED_FEDERATION_LIST_PARSE_FAILED";
-  constructor(message, details) {
-    super(message, details);
+
+/**
+ * Error thrown when the X.509 certificate chain is missing in an entity's configuration.
+ */
+export class MissingX509CertsError extends FederationError {
+  code = "ERR_FED_MISSING_X509_CERTS";
+  constructor(message) {
+    super(message, undefined);
   }
 }
 
 /**
- * General error thrown during the trust chain building process.
+ * Error thrown if the Relying Party is not found in the Trust Anchor's federation list.
  */
-export class BuildTrustChainError extends FederationError {
-  code = "ERR_FED_BUILD_TRUST_CHAIN_FAILED";
+export class RelyingPartyNotAuthorizedError extends FederationError {
+  code = "ERR_FED_RELYING_PARTY_NOT_AUTHORIZED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
@@ -74,32 +78,36 @@ export class TrustAnchorKidMissingError extends FederationError {
 }
 
 /**
- * Error thrown if the Relying Party is not found in the Trust Anchor's federation list.
+ * Error thrown when a trust chain is unexpectedly empty.
  */
-export class RelyingPartyNotAuthorizedError extends FederationError {
-  code = "ERR_FED_RELYING_PARTY_NOT_AUTHORIZED";
-  constructor(message, details) {
-    super(message, details);
+export class TrustChainEmptyError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_EMPTY";
+  constructor() {
+    let message = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "Trust chain cannot be empty.";
+    super(message, undefined);
   }
 }
 
 /**
- * Error thrown when a 'federation_fetch_endpoint' is missing in an entity's configuration.
+ * Error thrown when renewing a trust chain fails.
+ * This class itself might be used or could be considered a more general renewal error.
  */
-export class MissingFederationFetchEndpointError extends FederationError {
-  code = "ERR_FED_MISSING_FEDERATION_FETCH_ENDPOINT";
+export class TrustChainRenewalError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_RENEWAL_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
 
 /**
- * Error thrown when the X.509 certificate chain is missing in an entity's configuration.
+ * Error thrown when a token is unexpectedly missing from a trust chain during processing.
  */
-export class MissingX509CertsError extends FederationError {
-  code = "ERR_FED_MISSING_X509_CERTS";
-  constructor(message) {
-    super(message, undefined);
+export class TrustChainTokenMissingError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_TOKEN_MISSING";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
+  constructor(message, details) {
+    super(message, details);
   }
 }
 
@@ -109,6 +117,7 @@ export class MissingX509CertsError extends FederationError {
  */
 export class X509ValidationError extends FederationError {
   code = "ERR_FED_X509_VALIDATION_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }

package/lib/module/trust/common/errors.js.map

@@ -1 +1 @@
-{"version":3,"names":["IoWalletError","serializeAttrs","FederationError","constructor","message","details","name","TrustChainEmptyError","code","arguments","length","undefined","TrustChainTokenMissingError","TrustChainRenewalError","FederationListParseError","BuildTrustChainError","TrustAnchorKidMissingError","RelyingPartyNotAuthorizedError","MissingFederationFetchEndpointError","MissingX509CertsError","X509ValidationError"],"sourceRoot":"../../../../src","sources":["trust/common/errors.ts"],"mappings":"AAAA,SAASA,aAAa,EAAEC,cAAc,QAAQ,oBAAoB;AACiB;AAEnF;AACA;AACA;AACA,OAAO,MAAMC,eAAe,SAASF,aAAa,CAAC;EAEjDG,WAAWA,CAACC,OAAe,EAAEC,OAAiC,EAAE;IAC9D,KAAK,CAACA,OAAO,GAAGJ,cAAc,CAAC;MAAEG,OAAO;MAAE,GAAGC;IAAQ,CAAC,CAAC,GAAGD,OAAO,CAAC;IAClE,IAAI,CAACE,IAAI,GAAG,IAAI,CAACH,WAAW,CAACG,IAAI;IACjC,IAAI,CAACD,OAAO,GAAGA,OAAO;EACxB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAME,oBAAoB,SAASL,eAAe,CAAC;EACxDM,IAAI,GAAG,2BAA2B;EAClCL,WAAWA,CAAA,EAA2C;IAAA,IAA1CC,OAAO,GAAAK,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,8BAA8B;IAClD,KAAK,CAACL,OAAO,EAAEO,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMC,2BAA2B,SAASV,eAAe,CAAC;EAC/DM,IAAI,GAAG,mCAAmC;EAC1CL,WAAWA,CAACC,OAAe,EAAEC,OAA4B,EAAE;IACzD,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMQ,sBAAsB,SAASX,eAAe,CAAC;EAC1DM,IAAI,GAAG,oCAAoC;EAC3CL,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;AAEA,OAAO,MAAMS,wBAAwB,SAASZ,eAAe,CAAC;EAC5DM,IAAI,GAAG,sCAAsC;EAC7CL,WAAWA,CAACC,OAAe,EAAEC,OAA6C,EAAE;IAC1E,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMU,oBAAoB,SAASb,eAAe,CAAC;EACxDM,IAAI,GAAG,kCAAkC;EACzCL,WAAWA,CACTC,OAAe,EACfC,OAIC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMW,0BAA0B,SAASd,eAAe,CAAC;EAC9DM,IAAI,GAAG,kCAAkC;EACzCL,WAAWA,CAAA,EAA0D;IAAA,IAAzDC,OAAO,GAAAK,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,6CAA6C;IACjE,KAAK,CAACL,OAAO,EAAEO,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMM,8BAA8B,SAASf,eAAe,CAAC;EAClEM,IAAI,GAAG,sCAAsC;EAC7CL,WAAWA,CACTC,OAAe,EACfC,OAAqE,EACrE;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMa,mCAAmC,SAAShB,eAAe,CAAC;EACvEM,IAAI,GAAG,2CAA2C;EAClDL,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMc,qBAAqB,SAASjB,eAAe,CAAC;EACzDM,IAAI,GAAG,4BAA4B;EACnCL,WAAWA,CAACC,OAAe,EAAE;IAC3B,KAAK,CAACA,OAAO,EAAEO,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMS,mBAAmB,SAASlB,eAAe,CAAC;EACvDM,IAAI,GAAG,gCAAgC;EACvCL,WAAWA,CACTC,OAAe,EACfC,OAMC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF"}
+{"version":3,"names":["IoWalletError","serializeAttrs","FederationError","constructor","message","details","name","BuildTrustChainError","code","FederationListParseError","MissingFederationFetchEndpointError","MissingX509CertsError","undefined","RelyingPartyNotAuthorizedError","TrustAnchorKidMissingError","arguments","length","TrustChainEmptyError","TrustChainRenewalError","TrustChainTokenMissingError","X509ValidationError"],"sourceRoot":"../../../../src","sources":["trust/common/errors.ts"],"mappings":"AAAmF;;AAEnF,SAASA,aAAa,EAAEC,cAAc,QAAQ,oBAAoB;;AAElE;AACA;AACA;AACA,OAAO,MAAMC,eAAe,SAASF,aAAa,CAAC;EAEjDG,WAAWA,CAACC,OAAe,EAAEC,OAAiC,EAAE;IAC9D,KAAK,CAACA,OAAO,GAAGJ,cAAc,CAAC;MAAEG,OAAO;MAAE,GAAGC;IAAQ,CAAC,CAAC,GAAGD,OAAO,CAAC;IAClE,IAAI,CAACE,IAAI,GAAG,IAAI,CAACH,WAAW,CAACG,IAAI;IACjC,IAAI,CAACD,OAAO,GAAGA,OAAO;EACxB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAME,oBAAoB,SAASL,eAAe,CAAC;EACxDM,IAAI,GAAG,kCAAkC;EACzC;EACAL,WAAWA,CACTC,OAAe,EACfC,OAIC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;AAEA,OAAO,MAAMI,wBAAwB,SAASP,eAAe,CAAC;EAC5DM,IAAI,GAAG,sCAAsC;EAC7C;EACAL,WAAWA,CAACC,OAAe,EAAEC,OAA6C,EAAE;IAC1E,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMK,mCAAmC,SAASR,eAAe,CAAC;EACvEM,IAAI,GAAG,2CAA2C;EAClD;EACAL,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMM,qBAAqB,SAAST,eAAe,CAAC;EACzDM,IAAI,GAAG,4BAA4B;EACnCL,WAAWA,CAACC,OAAe,EAAE;IAC3B,KAAK,CAACA,OAAO,EAAEQ,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMC,8BAA8B,SAASX,eAAe,CAAC;EAClEM,IAAI,GAAG,sCAAsC;EAC7C;EACAL,WAAWA,CACTC,OAAe,EACfC,OAAqE,EACrE;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMS,0BAA0B,SAASZ,eAAe,CAAC;EAC9DM,IAAI,GAAG,kCAAkC;EACzCL,WAAWA,CAAA,EAA0D;IAAA,IAAzDC,OAAO,GAAAW,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAH,SAAA,GAAAG,SAAA,MAAG,6CAA6C;IACjE,KAAK,CAACX,OAAO,EAAEQ,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMK,oBAAoB,SAASf,eAAe,CAAC;EACxDM,IAAI,GAAG,2BAA2B;EAClCL,WAAWA,CAAA,EAA2C;IAAA,IAA1CC,OAAO,GAAAW,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAH,SAAA,GAAAG,SAAA,MAAG,8BAA8B;IAClD,KAAK,CAACX,OAAO,EAAEQ,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMM,sBAAsB,SAAShB,eAAe,CAAC;EAC1DM,IAAI,GAAG,oCAAoC;EAC3C;EACAL,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMc,2BAA2B,SAASjB,eAAe,CAAC;EAC/DM,IAAI,GAAG,mCAAmC;EAC1C;EACAL,WAAWA,CAACC,OAAe,EAAEC,OAA4B,EAAE;IACzD,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMe,mBAAmB,SAASlB,eAAe,CAAC;EACvDM,IAAI,GAAG,gCAAgC;EACvC;EACAL,WAAWA,CACTC,OAAe,EACfC,OAMC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF"}

package/lib/module/trust/common/types.js

@@ -7,44 +7,44 @@ export const TrustMark = z.object({
 });
 export const EntityStatement = z.object({
   header: z.object({
-    typ: z.literal("entity-statement+jwt"),
     alg: z.string(),
-    kid: z.string()
+    kid: z.string(),
+    typ: z.literal("entity-statement+jwt")
   }),
   payload: z.object({
+    exp: z.number(),
+    iat: z.number(),
     iss: z.string(),
-    sub: z.string(),
     jwks: z.object({
       keys: z.array(JWK)
     }),
-    trust_marks: z.array(TrustMark).optional(),
-    iat: z.number(),
-    exp: z.number()
+    sub: z.string(),
+    trust_marks: z.array(TrustMark).optional()
   })
 });
 export const EntityConfigurationHeader = z.object({
-  typ: z.literal("entity-statement+jwt"),
   alg: z.string(),
-  kid: z.string()
+  kid: z.string(),
+  typ: z.literal("entity-statement+jwt")
 });
 
 /**
  * @see https://openid.net/specs/openid-federation-1_0-46.html
  */
 export const FederationEntityMetadata = z.object({
+  contacts: z.array(z.string()).optional(),
+  endpoint_auth_signing_alg_values_supported: z.string().optional(),
   federation_fetch_endpoint: z.string().optional(),
+  federation_historical_keys_endpoint: z.string().optional(),
   federation_list_endpoint: z.string().optional(),
   federation_resolve_endpoint: z.string().optional(),
-  federation_trust_mark_status_endpoint: z.string().optional(),
-  federation_trust_mark_list_endpoint: z.string().optional(),
   federation_trust_mark_endpoint: z.string().optional(),
-  federation_historical_keys_endpoint: z.string().optional(),
-  endpoint_auth_signing_alg_values_supported: z.string().optional(),
-  organization_name: z.string().optional(),
+  federation_trust_mark_list_endpoint: z.string().optional(),
+  federation_trust_mark_status_endpoint: z.string().optional(),
   homepage_uri: z.string().optional(),
-  policy_uri: z.string().optional(),
   logo_uri: z.string().optional(),
-  contacts: z.array(z.string()).optional()
+  organization_name: z.string().optional(),
+  policy_uri: z.string().optional()
 }).loose();
 
 // Structure common to every Entity Configuration document
@@ -52,17 +52,17 @@ export const FederationEntityMetadata = z.object({
 export const BaseEntityConfiguration = z.object({
   header: EntityConfigurationHeader,
   payload: z.object({
-    iss: z.string(),
-    sub: z.string(),
-    iat: UnixTime,
-    exp: UnixTime,
     authority_hints: z.array(z.string()).optional(),
+    exp: UnixTime,
+    iat: UnixTime,
+    iss: z.string(),
+    jwks: z.object({
+      keys: z.array(JWK)
+    }),
     metadata: z.object({
       federation_entity: FederationEntityMetadata
     }).loose(),
-    jwks: z.object({
-      keys: z.array(JWK)
-    })
+    sub: z.string()
   }).loose()
 });
 export const FederationListResponse = z.array(z.string());

package/lib/module/trust/common/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","JWK","UnixTime","TrustMark","object","id","string","trust_mark","EntityStatement","header","typ","literal","alg","kid","payload","iss","sub","jwks","keys","array","trust_marks","optional","iat","number","exp","EntityConfigurationHeader","FederationEntityMetadata","federation_fetch_endpoint","federation_list_endpoint","federation_resolve_endpoint","federation_trust_mark_status_endpoint","federation_trust_mark_list_endpoint","federation_trust_mark_endpoint","federation_historical_keys_endpoint","endpoint_auth_signing_alg_values_supported","organization_name","homepage_uri","policy_uri","logo_uri","contacts","loose","BaseEntityConfiguration","authority_hints","metadata","federation_entity","FederationListResponse"],"sourceRoot":"../../../../src","sources":["trust/common/types.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AACxB,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,QAAQ,QAAQ,iBAAiB;AAE1C,OAAO,MAAMC,SAAS,GAAGH,CAAC,CAACI,MAAM,CAAC;EAAEC,EAAE,EAAEL,CAAC,CAACM,MAAM,CAAC,CAAC;EAAEC,UAAU,EAAEP,CAAC,CAACM,MAAM,CAAC;AAAE,CAAC,CAAC;AAI7E,OAAO,MAAME,eAAe,GAAGR,CAAC,CAACI,MAAM,CAAC;EACtCK,MAAM,EAAET,CAAC,CAACI,MAAM,CAAC;IACfM,GAAG,EAAEV,CAAC,CAACW,OAAO,CAAC,sBAAsB,CAAC;IACtCC,GAAG,EAAEZ,CAAC,CAACM,MAAM,CAAC,CAAC;IACfO,GAAG,EAAEb,CAAC,CAACM,MAAM,CAAC;EAChB,CAAC,CAAC;EACFQ,OAAO,EAAEd,CAAC,CAACI,MAAM,CAAC;IAChBW,GAAG,EAAEf,CAAC,CAACM,MAAM,CAAC,CAAC;IACfU,GAAG,EAAEhB,CAAC,CAACM,MAAM,CAAC,CAAC;IACfW,IAAI,EAAEjB,CAAC,CAACI,MAAM,CAAC;MAAEc,IAAI,EAAElB,CAAC,CAACmB,KAAK,CAAClB,GAAG;IAAE,CAAC,CAAC;IACtCmB,WAAW,EAAEpB,CAAC,CAACmB,KAAK,CAAChB,SAAS,CAAC,CAACkB,QAAQ,CAAC,CAAC;IAC1CC,GAAG,EAAEtB,CAAC,CAACuB,MAAM,CAAC,CAAC;IACfC,GAAG,EAAExB,CAAC,CAACuB,MAAM,CAAC;EAChB,CAAC;AACH,CAAC,CAAC;AAKF,OAAO,MAAME,yBAAyB,GAAGzB,CAAC,CAACI,MAAM,CAAC;EAChDM,GAAG,EAAEV,CAAC,CAACW,OAAO,CAAC,sBAAsB,CAAC;EACtCC,GAAG,EAAEZ,CAAC,CAACM,MAAM,CAAC,CAAC;EACfO,GAAG,EAAEb,CAAC,CAACM,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA,OAAO,MAAMoB,wBAAwB,GAAG1B,CAAC,CACtCI,MAAM,CAAC;EACNuB,yBAAyB,EAAE3B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EAChDO,wBAAwB,EAAE5B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EAC/CQ,2BAA2B,EAAE7B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EAClDS,qCAAqC,EAAE9B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EAC5DU,mCAAmC,EAAE/B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EAC1DW,8BAA8B,EAAEhC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EACrDY,mCAAmC,EAAEjC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EAC1Da,0CAA0C,EAAElC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EACjEc,iBAAiB,EAAEnC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EACxCe,YAAY,EAAEpC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EACnCgB,UAAU,EAAErC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EACjCiB,QAAQ,EAAEtC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;EAC/BkB,QAAQ,EAAEvC,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACe,QAAQ,CAAC;AACzC,CAAC,CAAC,CACDmB,KAAK,CAAC,CAAC;;AAEV;;AAEA,OAAO,MAAMC,uBAAuB,GAAGzC,CAAC,CAACI,MAAM,CAAC;EAC9CK,MAAM,EAAEgB,yBAAyB;EACjCX,OAAO,EAAEd,CAAC,CACPI,MAAM,CAAC;IACNW,GAAG,EAAEf,CAAC,CAACM,MAAM,CAAC,CAAC;IACfU,GAAG,EAAEhB,CAAC,CAACM,MAAM,CAAC,CAAC;IACfgB,GAAG,EAAEpB,QAAQ;IACbsB,GAAG,EAAEtB,QAAQ;IACbwC,eAAe,EAAE1C,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACe,QAAQ,CAAC,CAAC;IAC/CsB,QAAQ,EAAE3C,CAAC,CACRI,MAAM,CAAC;MACNwC,iBAAiB,EAAElB;IACrB,CAAC,CAAC,CACDc,KAAK,CAAC,CAAC;IACVvB,IAAI,EAAEjB,CAAC,CAACI,MAAM,CAAC;MACbc,IAAI,EAAElB,CAAC,CAACmB,KAAK,CAAClB,GAAG;IACnB,CAAC;EACH,CAAC,CAAC,CACDuC,KAAK,CAAC;AACX,CAAC,CAAC;AAEF,OAAO,MAAMK,sBAAsB,GAAG7C,CAAC,CAACmB,KAAK,CAACnB,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC"}
+{"version":3,"names":["z","JWK","UnixTime","TrustMark","object","id","string","trust_mark","EntityStatement","header","alg","kid","typ","literal","payload","exp","number","iat","iss","jwks","keys","array","sub","trust_marks","optional","EntityConfigurationHeader","FederationEntityMetadata","contacts","endpoint_auth_signing_alg_values_supported","federation_fetch_endpoint","federation_historical_keys_endpoint","federation_list_endpoint","federation_resolve_endpoint","federation_trust_mark_endpoint","federation_trust_mark_list_endpoint","federation_trust_mark_status_endpoint","homepage_uri","logo_uri","organization_name","policy_uri","loose","BaseEntityConfiguration","authority_hints","metadata","federation_entity","FederationListResponse"],"sourceRoot":"../../../../src","sources":["trust/common/types.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AAExB,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,QAAQ,QAAQ,iBAAiB;AAE1C,OAAO,MAAMC,SAAS,GAAGH,CAAC,CAACI,MAAM,CAAC;EAAEC,EAAE,EAAEL,CAAC,CAACM,MAAM,CAAC,CAAC;EAAEC,UAAU,EAAEP,CAAC,CAACM,MAAM,CAAC;AAAE,CAAC,CAAC;AAI7E,OAAO,MAAME,eAAe,GAAGR,CAAC,CAACI,MAAM,CAAC;EACtCK,MAAM,EAAET,CAAC,CAACI,MAAM,CAAC;IACfM,GAAG,EAAEV,CAAC,CAACM,MAAM,CAAC,CAAC;IACfK,GAAG,EAAEX,CAAC,CAACM,MAAM,CAAC,CAAC;IACfM,GAAG,EAAEZ,CAAC,CAACa,OAAO,CAAC,sBAAsB;EACvC,CAAC,CAAC;EACFC,OAAO,EAAEd,CAAC,CAACI,MAAM,CAAC;IAChBW,GAAG,EAAEf,CAAC,CAACgB,MAAM,CAAC,CAAC;IACfC,GAAG,EAAEjB,CAAC,CAACgB,MAAM,CAAC,CAAC;IACfE,GAAG,EAAElB,CAAC,CAACM,MAAM,CAAC,CAAC;IACfa,IAAI,EAAEnB,CAAC,CAACI,MAAM,CAAC;MAAEgB,IAAI,EAAEpB,CAAC,CAACqB,KAAK,CAACpB,GAAG;IAAE,CAAC,CAAC;IACtCqB,GAAG,EAAEtB,CAAC,CAACM,MAAM,CAAC,CAAC;IACfiB,WAAW,EAAEvB,CAAC,CAACqB,KAAK,CAAClB,SAAS,CAAC,CAACqB,QAAQ,CAAC;EAC3C,CAAC;AACH,CAAC,CAAC;AAKF,OAAO,MAAMC,yBAAyB,GAAGzB,CAAC,CAACI,MAAM,CAAC;EAChDM,GAAG,EAAEV,CAAC,CAACM,MAAM,CAAC,CAAC;EACfK,GAAG,EAAEX,CAAC,CAACM,MAAM,CAAC,CAAC;EACfM,GAAG,EAAEZ,CAAC,CAACa,OAAO,CAAC,sBAAsB;AACvC,CAAC,CAAC;;AAEF;AACA;AACA;AACA,OAAO,MAAMa,wBAAwB,GAAG1B,CAAC,CACtCI,MAAM,CAAC;EACNuB,QAAQ,EAAE3B,CAAC,CAACqB,KAAK,CAACrB,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EACxCI,0CAA0C,EAAE5B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EACjEK,yBAAyB,EAAE7B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EAChDM,mCAAmC,EAAE9B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EAC1DO,wBAAwB,EAAE/B,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EAC/CQ,2BAA2B,EAAEhC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EAClDS,8BAA8B,EAAEjC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EACrDU,mCAAmC,EAAElC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EAC1DW,qCAAqC,EAAEnC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EAC5DY,YAAY,EAAEpC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EACnCa,QAAQ,EAAErC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EAC/Bc,iBAAiB,EAAEtC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;EACxCe,UAAU,EAAEvC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACkB,QAAQ,CAAC;AAClC,CAAC,CAAC,CACDgB,KAAK,CAAC,CAAC;;AAEV;;AAEA,OAAO,MAAMC,uBAAuB,GAAGzC,CAAC,CAACI,MAAM,CAAC;EAC9CK,MAAM,EAAEgB,yBAAyB;EACjCX,OAAO,EAAEd,CAAC,CACPI,MAAM,CAAC;IACNsC,eAAe,EAAE1C,CAAC,CAACqB,KAAK,CAACrB,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACkB,QAAQ,CAAC,CAAC;IAC/CT,GAAG,EAAEb,QAAQ;IACbe,GAAG,EAAEf,QAAQ;IACbgB,GAAG,EAAElB,CAAC,CAACM,MAAM,CAAC,CAAC;IACfa,IAAI,EAAEnB,CAAC,CAACI,MAAM,CAAC;MACbgB,IAAI,EAAEpB,CAAC,CAACqB,KAAK,CAACpB,GAAG;IACnB,CAAC,CAAC;IACF0C,QAAQ,EAAE3C,CAAC,CACRI,MAAM,CAAC;MACNwC,iBAAiB,EAAElB;IACrB,CAAC,CAAC,CACDc,KAAK,CAAC,CAAC;IACVlB,GAAG,EAAEtB,CAAC,CAACM,MAAM,CAAC;EAChB,CAAC,CAAC,CACDkC,KAAK,CAAC;AACX,CAAC,CAAC;AAEF,OAAO,MAAMK,sBAAsB,GAAG7C,CAAC,CAACqB,KAAK,CAACrB,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC"}

package/lib/module/trust/common/utils.js

@@ -10,8 +10,8 @@ export const verify = async (token, kid, jwks) => {
     throw new Error(`Invalid kid: ${kid}, token: ${token}`);
   }
   const {
-    protectedHeader: header,
-    payload
+    payload,
+    protectedHeader: header
   } = await verifyJwt(token, jwk);
   return {
     header,
@@ -25,8 +25,8 @@ export const verify = async (token, kid, jwks) => {
  */
 export const decode = token => {
   const {
-    protectedHeader: header,
-    payload
+    payload,
+    protectedHeader: header
   } = decodeJwt(token);
   return {
     header,
@@ -35,28 +35,29 @@ export const decode = token => {
 };
 
 /**
- * Extracts the X.509 Trust Anchor certificate (Base64 encoded) from the
- * Trust Anchor's Entity Configuration.
+ * Fetch the federation list document from a given endpoint.
  *
- * @param trustAnchorEntity The entity configuration of the known trust anchor.
- * @returns The Base64 encoded X.509 certificate string.
- * @throws {FederationError} If the certificate cannot be derived.
+ * @param federationListEndpoint The URL of the federation list endpoint.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The federation list as an array of strings.
+ * @throws {IoWalletError} If the HTTP request fails.
+ * @throws {FederationError} If the result is not in the expected format.
  */
-export function getTrustAnchorX509Certificate(trustAnchorEntity) {
-  const taHeaderKid = trustAnchorEntity.jwt.header.kid;
-  const taSigningJwk = trustAnchorEntity.keys.find(key => key.kid === taHeaderKid);
-  if (!taSigningJwk) {
-    throw new FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' not found in Trust Anchor's JWKS.`, {
-      trustAnchorKid: taHeaderKid,
-      reason: "JWK not found for header kid"
-    });
-  }
-  if (taSigningJwk.x5c && taSigningJwk.x5c.length > 0 && taSigningJwk.x5c[0]) {
-    return taSigningJwk.x5c[0];
-  }
-  throw new FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' does not contain a valid 'x5c' certificate array.`, {
-    trustAnchorKid: taHeaderKid,
-    reason: "Missing or empty x5c in JWK"
+export async function getFederationList(federationListEndpoint) {
+  let {
+    appFetch = fetch
+  } = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
+  return await appFetch(federationListEndpoint, {
+    method: "GET"
+  }).then(hasStatusOrThrow(200)).then(res => res.json()).then(json => {
+    const result = FederationListResponse.safeParse(json);
+    if (!result.success) {
+      throw new FederationListParseError(`Invalid federation list format received from ${federationListEndpoint}. Error: ${result.error.message}`, {
+        parseError: result.error.toString(),
+        url: federationListEndpoint
+      });
+    }
+    return result.data;
   });
 }
 
@@ -98,29 +99,28 @@ export async function getSignedEntityStatement(federationFetchEndpoint, subordin
 }
 
 /**
- * Fetch the federation list document from a given endpoint.
+ * Extracts the X.509 Trust Anchor certificate (Base64 encoded) from the
+ * Trust Anchor's Entity Configuration.
  *
- * @param federationListEndpoint The URL of the federation list endpoint.
- * @param appFetch An optional instance of the http client to be used.
- * @returns The federation list as an array of strings.
- * @throws {IoWalletError} If the HTTP request fails.
- * @throws {FederationError} If the result is not in the expected format.
+ * @param trustAnchorEntity The entity configuration of the known trust anchor.
+ * @returns The Base64 encoded X.509 certificate string.
+ * @throws {FederationError} If the certificate cannot be derived.
  */
-export async function getFederationList(federationListEndpoint) {
-  let {
-    appFetch = fetch
-  } = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
-  return await appFetch(federationListEndpoint, {
-    method: "GET"
-  }).then(hasStatusOrThrow(200)).then(res => res.json()).then(json => {
-    const result = FederationListResponse.safeParse(json);
-    if (!result.success) {
-      throw new FederationListParseError(`Invalid federation list format received from ${federationListEndpoint}. Error: ${result.error.message}`, {
-        url: federationListEndpoint,
-        parseError: result.error.toString()
-      });
-    }
-    return result.data;
+export function getTrustAnchorX509Certificate(trustAnchorEntity) {
+  const taHeaderKid = trustAnchorEntity.jwt.header.kid;
+  const taSigningJwk = trustAnchorEntity.keys.find(key => key.kid === taHeaderKid);
+  if (!taSigningJwk) {
+    throw new FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' not found in Trust Anchor's JWKS.`, {
+      reason: "JWK not found for header kid",
+      trustAnchorKid: taHeaderKid
+    });
+  }
+  if (taSigningJwk.x5c && taSigningJwk.x5c.length > 0 && taSigningJwk.x5c[0]) {
+    return taSigningJwk.x5c[0];
+  }
+  throw new FederationError(`Cannot derive X.509 Trust Anchor certificate: JWK with kid '${taHeaderKid}' does not contain a valid 'x5c' certificate array.`, {
+    reason: "Missing or empty x5c in JWK",
+    trustAnchorKid: taHeaderKid
   });
 }
 //# sourceMappingURL=utils.js.map

package/lib/module/trust/common/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["decode","decodeJwt","verify","verifyJwt","hasStatusOrThrow","FederationError","FederationListParseError","FederationListResponse","token","kid","jwks","jwk","find","k","Error","protectedHeader","header","payload","getTrustAnchorX509Certificate","trustAnchorEntity","taHeaderKid","jwt","taSigningJwk","keys","key","trustAnchorKid","reason","x5c","length","getSignedEntityConfiguration","entityBaseUrl","appFetch","fetch","arguments","undefined","wellKnownUrl","method","then","res","text","getSignedEntityStatement","federationFetchEndpoint","subordinatedEntityBaseUrl","url","URL","searchParams","set","toString","getFederationList","federationListEndpoint","json","result","safeParse","success","error","message","parseError","data"],"sourceRoot":"../../../../src","sources":["trust/common/utils.ts"],"mappings":"AAAA,SACEA,MAAM,IAAIC,SAAS,EACnBC,MAAM,IAAIC,SAAS,QACd,6BAA6B;AAEpC,SAASC,gBAAgB,QAAQ,kBAAkB;AAEnD,SAASC,eAAe,EAAEC,wBAAwB,QAAQ,UAAU;AAEpE,SAASC,sBAAsB,QAAQ,SAAS;AAWhD;AACA;AACA,OAAO,MAAML,MAAM,GAAG,MAAAA,CACpBM,KAAa,EACbC,GAAW,EACXC,IAAW,KACc;EACzB,MAAMC,GAAG,GAAGD,IAAI,CAACE,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACJ,GAAG,KAAKA,GAAG,CAAC;EAC3C,IAAI,CAACE,GAAG,EAAE;IACR,MAAM,IAAIG,KAAK,CAAE,gBAAeL,GAAI,YAAWD,KAAM,EAAC,CAAC;EACzD;EACA,MAAM;IAAEO,eAAe,EAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAG,MAAMd,SAAS,CAACK,KAAK,EAAEG,GAAG,CAAC;EACxE,OAAO;IAAEK,MAAM;IAAEC;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA,OAAO,MAAMjB,MAAM,GAAIQ,KAAa,IAAkB;EACpD,MAAM;IAAEO,eAAe,EAAEC,MAAM;IAAEC;EAAQ,CAAC,GAAGhB,SAAS,CAACO,KAAK,CAAC;EAC7D,OAAO;IAAEQ,MAAM;IAAEC;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,6BAA6BA,CAC3CC,iBAAoC,EAC5B;EACR,MAAMC,WAAW,GAAGD,iBAAiB,CAACE,GAAG,CAACL,MAAM,CAACP,GAAG;EACpD,MAAMa,YAAY,GAAGH,iBAAiB,CAACI,IAAI,CAACX,IAAI,CAC7CY,GAAG,IAAKA,GAAG,CAACf,GAAG,KAAKW,WACvB,CAAC;EAED,IAAI,CAACE,YAAY,EAAE;IACjB,MAAM,IAAIjB,eAAe,CACtB,+DAA8De,WAAY,qCAAoC,EAC/G;MAAEK,cAAc,EAAEL,WAAW;MAAEM,MAAM,EAAE;IAA+B,CACxE,CAAC;EACH;EAEA,IAAIJ,YAAY,CAACK,GAAG,IAAIL,YAAY,CAACK,GAAG,CAACC,MAAM,GAAG,CAAC,IAAIN,YAAY,CAACK,GAAG,CAAC,CAAC,CAAC,EAAE;IAC1E,OAAOL,YAAY,CAACK,GAAG,CAAC,CAAC,CAAC;EAC5B;EAEA,MAAM,IAAItB,eAAe,CACtB,+DAA8De,WAAY,qDAAoD,EAC/H;IAAEK,cAAc,EAAEL,WAAW;IAAEM,MAAM,EAAE;EAA8B,CACvE,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeG,4BAA4BA,CAChDC,aAAqB,EAEJ;EAAA,IADjB;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAME,YAAY,GAAI,GAAEL,aAAc,gCAA+B;EAErE,OAAO,MAAMC,QAAQ,CAACI,YAAY,EAAE;IAClCC,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BiC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,wBAAwBA,CAC5CC,uBAA+B,EAC/BC,yBAAiC,EAEjC;EAAA,IADA;IAAEX,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMU,GAAG,GAAG,IAAIC,GAAG,CAACH,uBAAuB,CAAC;EAC5CE,GAAG,CAACE,YAAY,CAACC,GAAG,CAAC,KAAK,EAAEJ,yBAAyB,CAAC;EAEtD,OAAO,MAAMX,QAAQ,CAACY,GAAG,CAACI,QAAQ,CAAC,CAAC,EAAE;IACpCX,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BiC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeS,iBAAiBA,CACrCC,sBAA8B,EAEX;EAAA,IADnB;IAAElB,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAL,MAAA,QAAAK,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;EAEvC,OAAO,MAAMF,QAAQ,CAACkB,sBAAsB,EAAE;IAC5Cb,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BiC,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACY,IAAI,CAAC,CAAC,CAAC,CACzBb,IAAI,CAAEa,IAAI,IAAK;IACd,MAAMC,MAAM,GAAG5C,sBAAsB,CAAC6C,SAAS,CAACF,IAAI,CAAC;IACrD,IAAI,CAACC,MAAM,CAACE,OAAO,EAAE;MACnB,MAAM,IAAI/C,wBAAwB,CAC/B,gDAA+C2C,sBAAuB,YAAWE,MAAM,CAACG,KAAK,CAACC,OAAQ,EAAC,EACxG;QAAEZ,GAAG,EAAEM,sBAAsB;QAAEO,UAAU,EAAEL,MAAM,CAACG,KAAK,CAACP,QAAQ,CAAC;MAAE,CACrE,CAAC;IACH;IACA,OAAOI,MAAM,CAACM,IAAI;EACpB,CAAC,CAAC;AACN"}
+{"version":3,"names":["decode","decodeJwt","verify","verifyJwt","hasStatusOrThrow","FederationError","FederationListParseError","FederationListResponse","token","kid","jwks","jwk","find","k","Error","payload","protectedHeader","header","getFederationList","federationListEndpoint","appFetch","fetch","arguments","length","undefined","method","then","res","json","result","safeParse","success","error","message","parseError","toString","url","data","getSignedEntityConfiguration","entityBaseUrl","wellKnownUrl","text","getSignedEntityStatement","federationFetchEndpoint","subordinatedEntityBaseUrl","URL","searchParams","set","getTrustAnchorX509Certificate","trustAnchorEntity","taHeaderKid","jwt","taSigningJwk","keys","key","reason","trustAnchorKid","x5c"],"sourceRoot":"../../../../src","sources":["trust/common/utils.ts"],"mappings":"AAAA,SACEA,MAAM,IAAIC,SAAS,EACnBC,MAAM,IAAIC,SAAS,QACd,6BAA6B;AAKpC,SAASC,gBAAgB,QAAQ,kBAAkB;AACnD,SAASC,eAAe,EAAEC,wBAAwB,QAAQ,UAAU;AACpE,SAASC,sBAAsB,QAAQ,SAAS;AAWhD;AACA;AACA,OAAO,MAAML,MAAM,GAAG,MAAAA,CACpBM,KAAa,EACbC,GAAW,EACXC,IAAW,KACc;EACzB,MAAMC,GAAG,GAAGD,IAAI,CAACE,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACJ,GAAG,KAAKA,GAAG,CAAC;EAC3C,IAAI,CAACE,GAAG,EAAE;IACR,MAAM,IAAIG,KAAK,CAAE,gBAAeL,GAAI,YAAWD,KAAM,EAAC,CAAC;EACzD;EACA,MAAM;IAAEO,OAAO;IAAEC,eAAe,EAAEC;EAAO,CAAC,GAAG,MAAMd,SAAS,CAACK,KAAK,EAAEG,GAAG,CAAC;EACxE,OAAO;IAAEM,MAAM;IAAEF;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA,OAAO,MAAMf,MAAM,GAAIQ,KAAa,IAAkB;EACpD,MAAM;IAAEO,OAAO;IAAEC,eAAe,EAAEC;EAAO,CAAC,GAAGhB,SAAS,CAACO,KAAK,CAAC;EAC7D,OAAO;IAAES,MAAM;IAAEF;EAAQ,CAAC;AAC5B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeG,iBAAiBA,CACrCC,sBAA8B,EAEX;EAAA,IADnB;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,OAAO,MAAMF,QAAQ,CAACD,sBAAsB,EAAE;IAC5CM,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACtB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BsB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBF,IAAI,CAAEE,IAAI,IAAK;IACd,MAAMC,MAAM,GAAGtB,sBAAsB,CAACuB,SAAS,CAACF,IAAI,CAAC;IACrD,IAAI,CAACC,MAAM,CAACE,OAAO,EAAE;MACnB,MAAM,IAAIzB,wBAAwB,CAC/B,gDAA+Ca,sBAAuB,YAAWU,MAAM,CAACG,KAAK,CAACC,OAAQ,EAAC,EACxG;QAAEC,UAAU,EAAEL,MAAM,CAACG,KAAK,CAACG,QAAQ,CAAC,CAAC;QAAEC,GAAG,EAAEjB;MAAuB,CACrE,CAAC;IACH;IACA,OAAOU,MAAM,CAACQ,IAAI;EACpB,CAAC,CAAC;AACN;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,4BAA4BA,CAChDC,aAAqB,EAEJ;EAAA,IADjB;IAAEnB,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMkB,YAAY,GAAI,GAAED,aAAc,gCAA+B;EAErE,OAAO,MAAMnB,QAAQ,CAACoB,YAAY,EAAE;IAClCf,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACtB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BsB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACc,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,wBAAwBA,CAC5CC,uBAA+B,EAC/BC,yBAAiC,EAEjC;EAAA,IADA;IAAExB,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMc,GAAG,GAAG,IAAIS,GAAG,CAACF,uBAAuB,CAAC;EAC5CP,GAAG,CAACU,YAAY,CAACC,GAAG,CAAC,KAAK,EAAEH,yBAAyB,CAAC;EAEtD,OAAO,MAAMxB,QAAQ,CAACgB,GAAG,CAACD,QAAQ,CAAC,CAAC,EAAE;IACpCV,MAAM,EAAE;EACV,CAAC,CAAC,CACCC,IAAI,CAACtB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAC3BsB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACc,IAAI,CAAC,CAAC,CAAC;AAC9B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASO,6BAA6BA,CAC3CC,iBAAoC,EAC5B;EACR,MAAMC,WAAW,GAAGD,iBAAiB,CAACE,GAAG,CAAClC,MAAM,CAACR,GAAG;EACpD,MAAM2C,YAAY,GAAGH,iBAAiB,CAACI,IAAI,CAACzC,IAAI,CAC7C0C,GAAG,IAAKA,GAAG,CAAC7C,GAAG,KAAKyC,WACvB,CAAC;EAED,IAAI,CAACE,YAAY,EAAE;IACjB,MAAM,IAAI/C,eAAe,CACtB,+DAA8D6C,WAAY,qCAAoC,EAC/G;MAAEK,MAAM,EAAE,8BAA8B;MAAEC,cAAc,EAAEN;IAAY,CACxE,CAAC;EACH;EAEA,IAAIE,YAAY,CAACK,GAAG,IAAIL,YAAY,CAACK,GAAG,CAAClC,MAAM,GAAG,CAAC,IAAI6B,YAAY,CAACK,GAAG,CAAC,CAAC,CAAC,EAAE;IAC1E,OAAOL,YAAY,CAACK,GAAG,CAAC,CAAC,CAAC;EAC5B;EAEA,MAAM,IAAIpD,eAAe,CACtB,+DAA8D6C,WAAY,qDAAoD,EAC/H;IAAEK,MAAM,EAAE,6BAA6B;IAAEC,cAAc,EAAEN;EAAY,CACvE,CAAC;AACH"}