@pagopa/io-react-native-wallet 3.6.3 → 3.7.0

package/lib/module/trust/common/verify-chain.js

@@ -1,18 +1,103 @@
-import { decode, getTrustAnchorX509Certificate, verify } from "./utils";
-import { FederationError, MissingFederationFetchEndpointError, MissingX509CertsError, TrustChainEmptyError, TrustChainRenewalError, TrustChainTokenMissingError, X509ValidationError } from "./errors";
 import { verifyCertificateChain } from "@pagopa/io-react-native-crypto";
+import { FederationError, MissingFederationFetchEndpointError, MissingX509CertsError, TrustChainEmptyError, TrustChainRenewalError, TrustChainTokenMissingError, X509ValidationError } from "./errors";
+import { decode, getTrustAnchorX509Certificate, verify } from "./utils";
 import { getSignedEntityConfiguration, getSignedEntityStatement } from "./utils";
+/**
+ * Factory function to create `verifyTrustChain`.
+ * @param config Version specific Entity shapes
+ * @returns `verifyTrustChain` function compliant with the public API
+ */
+export function createVerifyTrustChain(config) {
+  return async function verifyTrustChain(trustAnchorEntity, chain) {
+    let x509Options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
+      connectTimeout: 10000,
+      readTimeout: 10000,
+      requireCrl: true
+    };
+    let {
+      appFetch = fetch,
+      renewOnFail = true
+    } = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
+    const validateTrustChain = createValidateTrustChain(config);
+    const renewTrustChain = createRenewTrustChain(config);
+    try {
+      return await validateTrustChain(trustAnchorEntity, chain, x509Options);
+    } catch (error) {
+      if (renewOnFail) {
+        const renewedChain = await renewTrustChain(chain, appFetch);
+        return validateTrustChain(trustAnchorEntity, renewedChain, x509Options);
+      } else {
+        throw error;
+      }
+    }
+  };
+}
+
+/**
+ * Factory function to create `renewTrustChain`.
+ * @param config Version specific Entity shapes
+ * @returns `renewTrustChain` function
+ */
+function createRenewTrustChain(_ref) {
+  let {
+    EntityConfigurationShape,
+    EntityStatementShape
+  } = _ref;
+  /**
+   * Given a trust chain, obtain a new trust chain by fetching each element's fresh version
+   *
+   * @param chain The original chain
+   * @param appFetch (optional) fetch api implementation
+   * @returns A list of signed token that represent the trust chain, in the same order of the provided chain
+   * @throws {FederationError} If the chain is not valid
+   */
+  return async function renewTrustChain(chain) {
+    let appFetch = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : fetch;
+    return Promise.all(chain.map(async (token, index) => {
+      const decoded = decode(token);
+      const entityStatementResult = EntityStatementShape.safeParse(decoded);
+      const entityConfigurationResult = EntityConfigurationShape.safeParse(decoded);
+      if (entityConfigurationResult.success) {
+        return getSignedEntityConfiguration(entityConfigurationResult.data.payload.iss, {
+          appFetch
+        });
+      }
+      if (entityStatementResult.success) {
+        const entityStatement = entityStatementResult.data;
+        const parentBaseUrl = entityStatement.payload.iss;
+        const parentECJwt = await getSignedEntityConfiguration(parentBaseUrl, {
+          appFetch
+        });
+        const parentEC = EntityConfigurationShape.parse(decode(parentECJwt));
+        const federationFetchEndpoint = parentEC.payload.metadata.federation_entity.federation_fetch_endpoint;
+        if (!federationFetchEndpoint) {
+          throw new MissingFederationFetchEndpointError(`Parent EC at ${parentBaseUrl} is missing federation_fetch_endpoint, cannot renew ES for ${entityStatement.payload.sub}.`, {
+            entityBaseUrl: entityStatement.payload.sub,
+            missingInEntityUrl: parentBaseUrl
+          });
+        }
+        return getSignedEntityStatement(federationFetchEndpoint, entityStatement.payload.sub, {
+          appFetch
+        });
+      }
+      throw new TrustChainRenewalError(`Failed to renew trust chain. Reason: element #${index} failed to parse.`, {
+        originalChain: chain
+      });
+    }));
+  };
+}
+
 /**
  * Factory function to create `validateTrustChain`.
  * @param config Version specific Entity shapes
  * @returns `validateTrustChain` function compliant with the public API
  */
-function createValidateTrustChain(_ref) {
+function createValidateTrustChain(_ref2) {
   let {
     FirstElementShape,
-    MiddleElementShape,
-    LastElementShape
-  } = _ref;
+    LastElementShape,
+    MiddleElementShape
+  } = _ref2;
   /**
    * Validates a provided trust chain against a known trust anchor, including X.509 certificate checks.
    *
@@ -74,8 +159,8 @@ function createValidateTrustChain(_ref) {
       const jwkUsedForVerification = signerJwks.find(k => k.kid === kidFromTokenHeader);
       if (!jwkUsedForVerification) {
         throw new FederationError(`JWK with kid '${kidFromTokenHeader}' was not found in signer's JWKS for token at index ${i}, though JWT verification passed.`, {
-          tokenIndex: i,
-          kid: kidFromTokenHeader
+          kid: kidFromTokenHeader,
+          tokenIndex: i
         });
       }
       if (!jwkUsedForVerification.x5c || jwkUsedForVerification.x5c.length === 0) {
@@ -89,10 +174,10 @@ function createValidateTrustChain(_ref) {
       const x509ValidationResult = await verifyCertificateChain(certChainBase64, x509TrustAnchorCertBase64, x509Options);
       if (!x509ValidationResult.isValid) {
         throw new X509ValidationError(`X.509 certificate chain validation failed for token at index ${i} (kid: ${kidFromTokenHeader}). Status: ${x509ValidationResult.validationStatus}. Error: ${x509ValidationResult.errorMessage}`, {
-          tokenIndex: i,
           kid: kidFromTokenHeader,
-          x509ValidationStatus: x509ValidationResult.validationStatus,
-          x509ErrorMessage: x509ValidationResult.errorMessage
+          tokenIndex: i,
+          x509ErrorMessage: x509ValidationResult.errorMessage,
+          x509ValidationStatus: x509ValidationResult.validationStatus
         });
       }
       return parsedToken;
@@ -100,89 +185,4 @@ function createValidateTrustChain(_ref) {
     return Promise.all(validationPromises);
   };
 }
-
-/**
- * Factory function to create `renewTrustChain`.
- * @param config Version specific Entity shapes
- * @returns `renewTrustChain` function
- */
-function createRenewTrustChain(_ref2) {
-  let {
-    EntityStatementShape,
-    EntityConfigurationShape
-  } = _ref2;
-  /**
-   * Given a trust chain, obtain a new trust chain by fetching each element's fresh version
-   *
-   * @param chain The original chain
-   * @param appFetch (optional) fetch api implementation
-   * @returns A list of signed token that represent the trust chain, in the same order of the provided chain
-   * @throws {FederationError} If the chain is not valid
-   */
-  return async function renewTrustChain(chain) {
-    let appFetch = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : fetch;
-    return Promise.all(chain.map(async (token, index) => {
-      const decoded = decode(token);
-      const entityStatementResult = EntityStatementShape.safeParse(decoded);
-      const entityConfigurationResult = EntityConfigurationShape.safeParse(decoded);
-      if (entityConfigurationResult.success) {
-        return getSignedEntityConfiguration(entityConfigurationResult.data.payload.iss, {
-          appFetch
-        });
-      }
-      if (entityStatementResult.success) {
-        const entityStatement = entityStatementResult.data;
-        const parentBaseUrl = entityStatement.payload.iss;
-        const parentECJwt = await getSignedEntityConfiguration(parentBaseUrl, {
-          appFetch
-        });
-        const parentEC = EntityConfigurationShape.parse(decode(parentECJwt));
-        const federationFetchEndpoint = parentEC.payload.metadata.federation_entity.federation_fetch_endpoint;
-        if (!federationFetchEndpoint) {
-          throw new MissingFederationFetchEndpointError(`Parent EC at ${parentBaseUrl} is missing federation_fetch_endpoint, cannot renew ES for ${entityStatement.payload.sub}.`, {
-            entityBaseUrl: entityStatement.payload.sub,
-            missingInEntityUrl: parentBaseUrl
-          });
-        }
-        return getSignedEntityStatement(federationFetchEndpoint, entityStatement.payload.sub, {
-          appFetch
-        });
-      }
-      throw new TrustChainRenewalError(`Failed to renew trust chain. Reason: element #${index} failed to parse.`, {
-        originalChain: chain
-      });
-    }));
-  };
-}
-
-/**
- * Factory function to create `verifyTrustChain`.
- * @param config Version specific Entity shapes
- * @returns `verifyTrustChain` function compliant with the public API
- */
-export function createVerifyTrustChain(config) {
-  return async function verifyTrustChain(trustAnchorEntity, chain) {
-    let x509Options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
-      connectTimeout: 10000,
-      readTimeout: 10000,
-      requireCrl: true
-    };
-    let {
-      appFetch = fetch,
-      renewOnFail = true
-    } = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : {};
-    const validateTrustChain = createValidateTrustChain(config);
-    const renewTrustChain = createRenewTrustChain(config);
-    try {
-      return await validateTrustChain(trustAnchorEntity, chain, x509Options);
-    } catch (error) {
-      if (renewOnFail) {
-        const renewedChain = await renewTrustChain(chain, appFetch);
-        return validateTrustChain(trustAnchorEntity, renewedChain, x509Options);
-      } else {
-        throw error;
-      }
-    }
-  };
-}
 //# sourceMappingURL=verify-chain.js.map

package/lib/module/trust/common/verify-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["decode","getTrustAnchorX509Certificate","verify","FederationError","MissingFederationFetchEndpointError","MissingX509CertsError","TrustChainEmptyError","TrustChainRenewalError","TrustChainTokenMissingError","X509ValidationError","verifyCertificateChain","getSignedEntityConfiguration","getSignedEntityStatement","createValidateTrustChain","_ref","FirstElementShape","MiddleElementShape","LastElementShape","validateTrustChain","trustAnchorEntity","chain","x509Options","length","selectTokenShape","elementIndex","selectKid","currentIndex","token","index","shape","parse","header","kid","selectKeys","keys","nextIndex","nextToken","payload","jwks","x509TrustAnchorCertBase64","validationPromises","map","tokenString","i","kidFromTokenHeader","signerJwks","parsedToken","jwkUsedForVerification","find","k","tokenIndex","x5c","certChainBase64","at","slice","x509ValidationResult","isValid","validationStatus","errorMessage","x509ValidationStatus","x509ErrorMessage","Promise","all","createRenewTrustChain","_ref2","EntityStatementShape","EntityConfigurationShape","renewTrustChain","appFetch","arguments","undefined","fetch","decoded","entityStatementResult","safeParse","entityConfigurationResult","success","data","iss","entityStatement","parentBaseUrl","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_entity","federation_fetch_endpoint","sub","entityBaseUrl","missingInEntityUrl","originalChain","createVerifyTrustChain","config","verifyTrustChain","connectTimeout","readTimeout","requireCrl","renewOnFail","error","renewedChain"],"sourceRoot":"../../../../src","sources":["trust/common/verify-chain.ts"],"mappings":"AAGA,SACEA,MAAM,EACNC,6BAA6B,EAC7BC,MAAM,QAED,SAAS;AAChB,SACEC,eAAe,EACfC,mCAAmC,EACnCC,qBAAqB,EACrBC,oBAAoB,EACpBC,sBAAsB,EACtBC,2BAA2B,EAC3BC,mBAAmB,QACd,UAAU;AACjB,SAEEC,sBAAsB,QAEjB,gCAAgC;AACvC,SACEC,4BAA4B,EAC5BC,wBAAwB,QACnB,SAAS;AAsBhB;AACA;AACA;AACA;AACA;AACA,SAASC,wBAAwBA,CAAAC,IAAA,EAIf;EAAA,IAJgB;IAChCC,iBAAiB;IACjBC,kBAAkB;IAClBC;EACa,CAAC,GAAAH,IAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeI,kBAAkBA,CACtCC,iBAAoC,EACpCC,KAAe,EACfC,WAAmC,EACX;IACxB;IACA,IAAID,KAAK,CAACE,MAAM,KAAK,CAAC,EAAE;MACtB,MAAM,IAAIhB,oBAAoB,CAAC,kCAAkC,CAAC;IACpE;;IAEA;IACA,MAAMiB,gBAAgB,GAAIC,YAAoB,IAC5CA,YAAY,KAAK,CAAC,GACdT,iBAAiB,GACjBS,YAAY,KAAKJ,KAAK,CAACE,MAAM,GAAG,CAAC,GAC/BL,gBAAgB,GAChBD,kBAAkB;;IAE1B;IACA,MAAMS,SAAS,GAAIC,YAAoB,IAAa;MAClD,MAAMC,KAAK,GAAGP,KAAK,CAACM,YAAY,CAAC;MACjC,IAAI,CAACC,KAAK,EAAE;QACV,MAAM,IAAInB,2BAA2B,CAClC,0BAAyBkB,YAAa,kBAAiB,EACxD;UAAEE,KAAK,EAAEF;QAAa,CACxB,CAAC;MACH;MACA,MAAMG,KAAK,GAAGN,gBAAgB,CAACG,YAAY,CAAC;MAC5C,OAAOG,KAAK,CAACC,KAAK,CAAC9B,MAAM,CAAC2B,KAAK,CAAC,CAAC,CAACI,MAAM,CAACC,GAAG;IAC9C,CAAC;;IAED;IACA;IACA,MAAMC,UAAU,GAAIP,YAAoB,IAAY;MAClD,IAAIA,YAAY,KAAKN,KAAK,CAACE,MAAM,GAAG,CAAC,EAAE;QACrC,OAAOH,iBAAiB,CAACe,IAAI;MAC/B;MAEA,MAAMC,SAAS,GAAGT,YAAY,GAAG,CAAC;MAClC,MAAMU,SAAS,GAAGhB,KAAK,CAACe,SAAS,CAAC;MAClC,IAAI,CAACC,SAAS,EAAE;QACd,MAAM,IAAI5B,2BAA2B,CAClC,+BAA8B2B,SAAU,kCAAiCT,YAAa,IAAG,EAC1F;UAAEE,KAAK,EAAEO;QAAU,CACrB,CAAC;MACH;MACA,MAAMN,KAAK,GAAGN,gBAAgB,CAACY,SAAS,CAAC;MACzC,OAAON,KAAK,CAACC,KAAK,CAAC9B,MAAM,CAACoC,SAAS,CAAC,CAAC,CAACC,OAAO,CAACC,IAAI,CAACJ,IAAI;IACzD,CAAC;IAED,MAAMK,yBAAyB,GAC7BtC,6BAA6B,CAACkB,iBAAiB,CAAC;;IAElD;IACA;IACA,MAAMqB,kBAAkB,GAAGpB,KAAK,CAACqB,GAAG,CAAC,OAAOC,WAAW,EAAEC,CAAC,KAAK;MAC7D,MAAMC,kBAAkB,GAAGnB,SAAS,CAACkB,CAAC,CAAC;MACvC,MAAME,UAAU,GAAGZ,UAAU,CAACU,CAAC,CAAC;;MAEhC;MACA,MAAMG,WAAW,GAAG,MAAM5C,MAAM,CAC9BwC,WAAW,EACXE,kBAAkB,EAClBC,UACF,CAAC;;MAED;MACA,MAAME,sBAAsB,GAAGF,UAAU,CAACG,IAAI,CAC3CC,CAAC,IAAKA,CAAC,CAACjB,GAAG,KAAKY,kBACnB,CAAC;MAED,IAAI,CAACG,sBAAsB,EAAE;QAC3B,MAAM,IAAI5C,eAAe,CACtB,iBAAgByC,kBAAmB,uDAAsDD,CAAE,mCAAkC,EAC9H;UAAEO,UAAU,EAAEP,CAAC;UAAEX,GAAG,EAAEY;QAAmB,CAC3C,CAAC;MACH;MAEA,IACE,CAACG,sBAAsB,CAACI,GAAG,IAC3BJ,sBAAsB,CAACI,GAAG,CAAC7B,MAAM,KAAK,CAAC,EACvC;QACA,MAAM,IAAIjB,qBAAqB,CAC5B,iBAAgBuC,kBAAmB,0EAAyED,CAAE,GACjH,CAAC;MACH;;MAEA;MACA;MACA;MACA,MAAMS,eAAe,GACnBL,sBAAsB,CAACI,GAAG,CAAC7B,MAAM,GAAG,CAAC,IACrCyB,sBAAsB,CAACI,GAAG,CAACE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAKd,yBAAyB,GAC3DQ,sBAAsB,CAACI,GAAG,CAACG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACvCP,sBAAsB,CAACI,GAAG;MAEhC,MAAMI,oBAAiD,GACrD,MAAM7C,sBAAsB,CAC1B0C,eAAe,EACfb,yBAAyB,EACzBlB,WACF,CAAC;MAEH,IAAI,CAACkC,oBAAoB,CAACC,OAAO,EAAE;QACjC,MAAM,IAAI/C,mBAAmB,CAC1B,gEAA+DkC,CAAE,UAASC,kBAAmB,cAAaW,oBAAoB,CAACE,gBAAiB,YAAWF,oBAAoB,CAACG,YAAa,EAAC,EAC/L;UACER,UAAU,EAAEP,CAAC;UACbX,GAAG,EAAEY,kBAAkB;UACvBe,oBAAoB,EAAEJ,oBAAoB,CAACE,gBAAgB;UAC3DG,gBAAgB,EAAEL,oBAAoB,CAACG;QACzC,CACF,CAAC;MACH;MACA,OAAOZ,WAAW;IACpB,CAAC,CAAC;IAEF,OAAOe,OAAO,CAACC,GAAG,CAACtB,kBAAkB,CAAC;EACxC,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAASuB,qBAAqBA,CAAAC,KAAA,EAGZ;EAAA,IAHa;IAC7BC,oBAAoB;IACpBC;EACa,CAAC,GAAAF,KAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeG,eAAeA,CACnC/C,KAAe,EAEI;IAAA,IADnBgD,QAA8B,GAAAC,SAAA,CAAA/C,MAAA,QAAA+C,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAGE,KAAK;IAEtC,OAAOV,OAAO,CAACC,GAAG,CAChB1C,KAAK,CAACqB,GAAG,CAAC,OAAOd,KAAK,EAAEC,KAAK,KAAK;MAChC,MAAM4C,OAAO,GAAGxE,MAAM,CAAC2B,KAAK,CAAC;MAE7B,MAAM8C,qBAAqB,GAAGR,oBAAoB,CAACS,SAAS,CAACF,OAAO,CAAC;MACrE,MAAMG,yBAAyB,GAC7BT,wBAAwB,CAACQ,SAAS,CAACF,OAAO,CAAC;MAE7C,IAAIG,yBAAyB,CAACC,OAAO,EAAE;QACrC,OAAOjE,4BAA4B,CACjCgE,yBAAyB,CAACE,IAAI,CAACxC,OAAO,CAACyC,GAAG,EAC1C;UAAEV;QAAS,CACb,CAAC;MACH;MACA,IAAIK,qBAAqB,CAACG,OAAO,EAAE;QACjC,MAAMG,eAAe,GAAGN,qBAAqB,CAACI,IAAI;QAElD,MAAMG,aAAa,GAAGD,eAAe,CAAC1C,OAAO,CAACyC,GAAG;QACjD,MAAMG,WAAW,GAAG,MAAMtE,4BAA4B,CACpDqE,aAAa,EACb;UAAEZ;QAAS,CACb,CAAC;QACD,MAAMc,QAAQ,GAAGhB,wBAAwB,CAACpC,KAAK,CAAC9B,MAAM,CAACiF,WAAW,CAAC,CAAC;QAEpE,MAAME,uBAAuB,GAC3BD,QAAQ,CAAC7C,OAAO,CAAC+C,QAAQ,CAACC,iBAAiB,CACxCC,yBAAyB;QAC9B,IAAI,CAACH,uBAAuB,EAAE;UAC5B,MAAM,IAAI/E,mCAAmC,CAC1C,gBAAe4E,aAAc,8DAA6DD,eAAe,CAAC1C,OAAO,CAACkD,GAAI,GAAE,EACzH;YACEC,aAAa,EAAET,eAAe,CAAC1C,OAAO,CAACkD,GAAG;YAC1CE,kBAAkB,EAAET;UACtB,CACF,CAAC;QACH;QACA,OAAOpE,wBAAwB,CAC7BuE,uBAAuB,EACvBJ,eAAe,CAAC1C,OAAO,CAACkD,GAAG,EAC3B;UAAEnB;QAAS,CACb,CAAC;MACH;MACA,MAAM,IAAI7D,sBAAsB,CAC7B,iDAAgDqB,KAAM,mBAAkB,EACzE;QAAE8D,aAAa,EAAEtE;MAAM,CACzB,CAAC;IACH,CAAC,CACH,CAAC;EACH,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASuE,sBAAsBA,CACpCC,MAAqB,EACS;EAC9B,OAAO,eAAeC,gBAAgBA,CACpC1E,iBAAiB,EACjBC,KAAK,EAOL;IAAA,IANAC,WAAW,GAAAgD,SAAA,CAAA/C,MAAA,QAAA+C,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG;MACZyB,cAAc,EAAE,KAAK;MACrBC,WAAW,EAAE,KAAK;MAClBC,UAAU,EAAE;IACd,CAAC;IAAA,IACD;MAAE5B,QAAQ,GAAGG,KAAK;MAAE0B,WAAW,GAAG;IAAK,CAAC,GAAA5B,SAAA,CAAA/C,MAAA,QAAA+C,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,CAAC,CAAC;IAE7C,MAAMnD,kBAAkB,GAAGL,wBAAwB,CAAC+E,MAAM,CAAC;IAC3D,MAAMzB,eAAe,GAAGJ,qBAAqB,CAAC6B,MAAM,CAAC;IAErD,IAAI;MACF,OAAO,MAAM1E,kBAAkB,CAACC,iBAAiB,EAAEC,KAAK,EAAEC,WAAW,CAAC;IACxE,CAAC,CAAC,OAAO6E,KAAK,EAAE;MACd,IAAID,WAAW,EAAE;QACf,MAAME,YAAY,GAAG,MAAMhC,eAAe,CAAC/C,KAAK,EAAEgD,QAAQ,CAAC;QAC3D,OAAOlD,kBAAkB,CAACC,iBAAiB,EAAEgF,YAAY,EAAE9E,WAAW,CAAC;MACzE,CAAC,MAAM;QACL,MAAM6E,KAAK;MACb;IACF;EACF,CAAC;AACH"}
+{"version":3,"names":["verifyCertificateChain","FederationError","MissingFederationFetchEndpointError","MissingX509CertsError","TrustChainEmptyError","TrustChainRenewalError","TrustChainTokenMissingError","X509ValidationError","decode","getTrustAnchorX509Certificate","verify","getSignedEntityConfiguration","getSignedEntityStatement","createVerifyTrustChain","config","verifyTrustChain","trustAnchorEntity","chain","x509Options","arguments","length","undefined","connectTimeout","readTimeout","requireCrl","appFetch","fetch","renewOnFail","validateTrustChain","createValidateTrustChain","renewTrustChain","createRenewTrustChain","error","renewedChain","_ref","EntityConfigurationShape","EntityStatementShape","Promise","all","map","token","index","decoded","entityStatementResult","safeParse","entityConfigurationResult","success","data","payload","iss","entityStatement","parentBaseUrl","parentECJwt","parentEC","parse","federationFetchEndpoint","metadata","federation_entity","federation_fetch_endpoint","sub","entityBaseUrl","missingInEntityUrl","originalChain","_ref2","FirstElementShape","LastElementShape","MiddleElementShape","selectTokenShape","elementIndex","selectKid","currentIndex","shape","header","kid","selectKeys","keys","nextIndex","nextToken","jwks","x509TrustAnchorCertBase64","validationPromises","tokenString","i","kidFromTokenHeader","signerJwks","parsedToken","jwkUsedForVerification","find","k","tokenIndex","x5c","certChainBase64","at","slice","x509ValidationResult","isValid","validationStatus","errorMessage","x509ErrorMessage","x509ValidationStatus"],"sourceRoot":"../../../../src","sources":["trust/common/verify-chain.ts"],"mappings":"AAAA,SAEEA,sBAAsB,QAEjB,gCAAgC;AAOvC,SACEC,eAAe,EACfC,mCAAmC,EACnCC,qBAAqB,EACrBC,oBAAoB,EACpBC,sBAAsB,EACtBC,2BAA2B,EAC3BC,mBAAmB,QACd,UAAU;AAEjB,SACEC,MAAM,EACNC,6BAA6B,EAE7BC,MAAM,QACD,SAAS;AAChB,SACEC,4BAA4B,EAC5BC,wBAAwB,QACnB,SAAS;AAoBhB;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,sBAAsBA,CACpCC,MAAqB,EACS;EAC9B,OAAO,eAAeC,gBAAgBA,CACpCC,iBAAiB,EACjBC,KAAK,EAOL;IAAA,IANAC,WAAW,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG;MACZG,cAAc,EAAE,KAAK;MACrBC,WAAW,EAAE,KAAK;MAClBC,UAAU,EAAE;IACd,CAAC;IAAA,IACD;MAAEC,QAAQ,GAAGC,KAAK;MAAEC,WAAW,GAAG;IAAK,CAAC,GAAAR,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;IAE7C,MAAMS,kBAAkB,GAAGC,wBAAwB,CAACf,MAAM,CAAC;IAC3D,MAAMgB,eAAe,GAAGC,qBAAqB,CAACjB,MAAM,CAAC;IAErD,IAAI;MACF,OAAO,MAAMc,kBAAkB,CAACZ,iBAAiB,EAAEC,KAAK,EAAEC,WAAW,CAAC;IACxE,CAAC,CAAC,OAAOc,KAAK,EAAE;MACd,IAAIL,WAAW,EAAE;QACf,MAAMM,YAAY,GAAG,MAAMH,eAAe,CAACb,KAAK,EAAEQ,QAAQ,CAAC;QAC3D,OAAOG,kBAAkB,CAACZ,iBAAiB,EAAEiB,YAAY,EAAEf,WAAW,CAAC;MACzE,CAAC,MAAM;QACL,MAAMc,KAAK;MACb;IACF;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAASD,qBAAqBA,CAAAG,IAAA,EAGZ;EAAA,IAHa;IAC7BC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAeJ,eAAeA,CACnCb,KAAe,EAEI;IAAA,IADnBQ,QAA8B,GAAAN,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGO,KAAK;IAEtC,OAAOW,OAAO,CAACC,GAAG,CAChBrB,KAAK,CAACsB,GAAG,CAAC,OAAOC,KAAK,EAAEC,KAAK,KAAK;MAChC,MAAMC,OAAO,GAAGlC,MAAM,CAACgC,KAAK,CAAC;MAE7B,MAAMG,qBAAqB,GAAGP,oBAAoB,CAACQ,SAAS,CAACF,OAAO,CAAC;MACrE,MAAMG,yBAAyB,GAC7BV,wBAAwB,CAACS,SAAS,CAACF,OAAO,CAAC;MAE7C,IAAIG,yBAAyB,CAACC,OAAO,EAAE;QACrC,OAAOnC,4BAA4B,CACjCkC,yBAAyB,CAACE,IAAI,CAACC,OAAO,CAACC,GAAG,EAC1C;UAAExB;QAAS,CACb,CAAC;MACH;MACA,IAAIkB,qBAAqB,CAACG,OAAO,EAAE;QACjC,MAAMI,eAAe,GAAGP,qBAAqB,CAACI,IAAI;QAElD,MAAMI,aAAa,GAAGD,eAAe,CAACF,OAAO,CAACC,GAAG;QACjD,MAAMG,WAAW,GAAG,MAAMzC,4BAA4B,CACpDwC,aAAa,EACb;UAAE1B;QAAS,CACb,CAAC;QACD,MAAM4B,QAAQ,GAAGlB,wBAAwB,CAACmB,KAAK,CAAC9C,MAAM,CAAC4C,WAAW,CAAC,CAAC;QAEpE,MAAMG,uBAAuB,GAC3BF,QAAQ,CAACL,OAAO,CAACQ,QAAQ,CAACC,iBAAiB,CACxCC,yBAAyB;QAC9B,IAAI,CAACH,uBAAuB,EAAE;UAC5B,MAAM,IAAIrD,mCAAmC,CAC1C,gBAAeiD,aAAc,8DAA6DD,eAAe,CAACF,OAAO,CAACW,GAAI,GAAE,EACzH;YACEC,aAAa,EAAEV,eAAe,CAACF,OAAO,CAACW,GAAG;YAC1CE,kBAAkB,EAAEV;UACtB,CACF,CAAC;QACH;QACA,OAAOvC,wBAAwB,CAC7B2C,uBAAuB,EACvBL,eAAe,CAACF,OAAO,CAACW,GAAG,EAC3B;UAAElC;QAAS,CACb,CAAC;MACH;MACA,MAAM,IAAIpB,sBAAsB,CAC7B,iDAAgDoC,KAAM,mBAAkB,EACzE;QAAEqB,aAAa,EAAE7C;MAAM,CACzB,CAAC;IACH,CAAC,CACH,CAAC;EACH,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,SAASY,wBAAwBA,CAAAkC,KAAA,EAIf;EAAA,IAJgB;IAChCC,iBAAiB;IACjBC,gBAAgB;IAChBC;EACa,CAAC,GAAAH,KAAA;EACd;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,eAAenC,kBAAkBA,CACtCZ,iBAAoC,EACpCC,KAAe,EACfC,WAAmC,EACX;IACxB;IACA,IAAID,KAAK,CAACG,MAAM,KAAK,CAAC,EAAE;MACtB,MAAM,IAAIhB,oBAAoB,CAAC,kCAAkC,CAAC;IACpE;;IAEA;IACA,MAAM+D,gBAAgB,GAAIC,YAAoB,IAC5CA,YAAY,KAAK,CAAC,GACdJ,iBAAiB,GACjBI,YAAY,KAAKnD,KAAK,CAACG,MAAM,GAAG,CAAC,GAC/B6C,gBAAgB,GAChBC,kBAAkB;;IAE1B;IACA,MAAMG,SAAS,GAAIC,YAAoB,IAAa;MAClD,MAAM9B,KAAK,GAAGvB,KAAK,CAACqD,YAAY,CAAC;MACjC,IAAI,CAAC9B,KAAK,EAAE;QACV,MAAM,IAAIlC,2BAA2B,CAClC,0BAAyBgE,YAAa,kBAAiB,EACxD;UAAE7B,KAAK,EAAE6B;QAAa,CACxB,CAAC;MACH;MACA,MAAMC,KAAK,GAAGJ,gBAAgB,CAACG,YAAY,CAAC;MAC5C,OAAOC,KAAK,CAACjB,KAAK,CAAC9C,MAAM,CAACgC,KAAK,CAAC,CAAC,CAACgC,MAAM,CAACC,GAAG;IAC9C,CAAC;;IAED;IACA;IACA,MAAMC,UAAU,GAAIJ,YAAoB,IAAY;MAClD,IAAIA,YAAY,KAAKrD,KAAK,CAACG,MAAM,GAAG,CAAC,EAAE;QACrC,OAAOJ,iBAAiB,CAAC2D,IAAI;MAC/B;MAEA,MAAMC,SAAS,GAAGN,YAAY,GAAG,CAAC;MAClC,MAAMO,SAAS,GAAG5D,KAAK,CAAC2D,SAAS,CAAC;MAClC,IAAI,CAACC,SAAS,EAAE;QACd,MAAM,IAAIvE,2BAA2B,CAClC,+BAA8BsE,SAAU,kCAAiCN,YAAa,IAAG,EAC1F;UAAE7B,KAAK,EAAEmC;QAAU,CACrB,CAAC;MACH;MACA,MAAML,KAAK,GAAGJ,gBAAgB,CAACS,SAAS,CAAC;MACzC,OAAOL,KAAK,CAACjB,KAAK,CAAC9C,MAAM,CAACqE,SAAS,CAAC,CAAC,CAAC7B,OAAO,CAAC8B,IAAI,CAACH,IAAI;IACzD,CAAC;IAED,MAAMI,yBAAyB,GAC7BtE,6BAA6B,CAACO,iBAAiB,CAAC;;IAElD;IACA;IACA,MAAMgE,kBAAkB,GAAG/D,KAAK,CAACsB,GAAG,CAAC,OAAO0C,WAAW,EAAEC,CAAC,KAAK;MAC7D,MAAMC,kBAAkB,GAAGd,SAAS,CAACa,CAAC,CAAC;MACvC,MAAME,UAAU,GAAGV,UAAU,CAACQ,CAAC,CAAC;;MAEhC;MACA,MAAMG,WAAW,GAAG,MAAM3E,MAAM,CAC9BuE,WAAW,EACXE,kBAAkB,EAClBC,UACF,CAAC;;MAED;MACA,MAAME,sBAAsB,GAAGF,UAAU,CAACG,IAAI,CAC3CC,CAAC,IAAKA,CAAC,CAACf,GAAG,KAAKU,kBACnB,CAAC;MAED,IAAI,CAACG,sBAAsB,EAAE;QAC3B,MAAM,IAAIrF,eAAe,CACtB,iBAAgBkF,kBAAmB,uDAAsDD,CAAE,mCAAkC,EAC9H;UAAET,GAAG,EAAEU,kBAAkB;UAAEM,UAAU,EAAEP;QAAE,CAC3C,CAAC;MACH;MAEA,IACE,CAACI,sBAAsB,CAACI,GAAG,IAC3BJ,sBAAsB,CAACI,GAAG,CAACtE,MAAM,KAAK,CAAC,EACvC;QACA,MAAM,IAAIjB,qBAAqB,CAC5B,iBAAgBgF,kBAAmB,0EAAyED,CAAE,GACjH,CAAC;MACH;;MAEA;MACA;MACA;MACA,MAAMS,eAAe,GACnBL,sBAAsB,CAACI,GAAG,CAACtE,MAAM,GAAG,CAAC,IACrCkE,sBAAsB,CAACI,GAAG,CAACE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAKb,yBAAyB,GAC3DO,sBAAsB,CAACI,GAAG,CAACG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACvCP,sBAAsB,CAACI,GAAG;MAEhC,MAAMI,oBAAiD,GACrD,MAAM9F,sBAAsB,CAC1B2F,eAAe,EACfZ,yBAAyB,EACzB7D,WACF,CAAC;MAEH,IAAI,CAAC4E,oBAAoB,CAACC,OAAO,EAAE;QACjC,MAAM,IAAIxF,mBAAmB,CAC1B,gEAA+D2E,CAAE,UAASC,kBAAmB,cAAaW,oBAAoB,CAACE,gBAAiB,YAAWF,oBAAoB,CAACG,YAAa,EAAC,EAC/L;UACExB,GAAG,EAAEU,kBAAkB;UACvBM,UAAU,EAAEP,CAAC;UACbgB,gBAAgB,EAAEJ,oBAAoB,CAACG,YAAY;UACnDE,oBAAoB,EAAEL,oBAAoB,CAACE;QAC7C,CACF,CAAC;MACH;MACA,OAAOX,WAAW;IACpB,CAAC,CAAC;IAEF,OAAOhD,OAAO,CAACC,GAAG,CAAC0C,kBAAkB,CAAC;EACxC,CAAC;AACH"}

package/lib/module/trust/v1.0.0/build-chain.js

@@ -2,7 +2,7 @@ import { createBuildTrustChain } from "../common/build-chain";
 import { EntityStatement } from "../common/types";
 import { EntityConfiguration } from "./types";
 export const buildTrustChain = createBuildTrustChain({
-  EntityStatementShape: EntityStatement,
-  EntityConfigurationShape: EntityConfiguration
+  EntityConfigurationShape: EntityConfiguration,
+  EntityStatementShape: EntityStatement
 });
 //# sourceMappingURL=build-chain.js.map

package/lib/module/trust/v1.0.0/build-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["createBuildTrustChain","EntityStatement","EntityConfiguration","buildTrustChain","EntityStatementShape","EntityConfigurationShape"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/build-chain.ts"],"mappings":"AAAA,SAASA,qBAAqB,QAAQ,uBAAuB;AAC7D,SAASC,eAAe,QAAQ,iBAAiB;AACjD,SAASC,mBAAmB,QAAQ,SAAS;AAE7C,OAAO,MAAMC,eAAe,GAAGH,qBAAqB,CAAC;EACnDI,oBAAoB,EAAEH,eAAe;EACrCI,wBAAwB,EAAEH;AAC5B,CAAC,CAAC"}
+{"version":3,"names":["createBuildTrustChain","EntityStatement","EntityConfiguration","buildTrustChain","EntityConfigurationShape","EntityStatementShape"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/build-chain.ts"],"mappings":"AAAA,SAASA,qBAAqB,QAAQ,uBAAuB;AAC7D,SAASC,eAAe,QAAQ,iBAAiB;AACjD,SAASC,mBAAmB,QAAQ,SAAS;AAE7C,OAAO,MAAMC,eAAe,GAAGH,qBAAqB,CAAC;EACnDI,wBAAwB,EAAEF,mBAAmB;EAC7CG,oBAAoB,EAAEJ;AACxB,CAAC,CAAC"}

package/lib/module/trust/v1.0.0/entities.js

@@ -1,6 +1,6 @@
 import { decode as decodeJwt } from "@pagopa/io-react-native-jwt";
-import { WalletProviderEntityConfiguration, CredentialIssuerEntityConfiguration, EntityConfiguration, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration } from "./types";
 import { getSignedEntityConfiguration } from "../common/utils";
+import { CredentialIssuerEntityConfiguration, EntityConfiguration, RelyingPartyEntityConfiguration, TrustAnchorEntityConfiguration, WalletProviderEntityConfiguration } from "./types";
 
 /**
  * Fetch and parse the entity configuration document for a given federation entity.

package/lib/module/trust/v1.0.0/entities.js.map

@@ -1 +1 @@
-{"version":3,"names":["decode","decodeJwt","WalletProviderEntityConfiguration","CredentialIssuerEntityConfiguration","EntityConfiguration","RelyingPartyEntityConfiguration","TrustAnchorEntityConfiguration","getSignedEntityConfiguration","fetchAndParseEntityConfiguration","entityBaseUrl","schema","appFetch","fetch","arguments","length","undefined","responseText","responseJwt","parse","header","protectedHeader","payload","getWalletProviderEntityConfiguration","options","getCredentialIssuerEntityConfiguration","getTrustAnchorEntityConfiguration","getRelyingPartyEntityConfiguration","getEntityConfiguration"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/entities.ts"],"mappings":"AAAA,SAASA,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;AACjE,SACEC,iCAAiC,EACjCC,mCAAmC,EACnCC,mBAAmB,EACnBC,+BAA+B,EAC/BC,8BAA8B,QACzB,SAAS;AAEhB,SACEC,4BAA4B,QAEvB,iBAAiB;;AAExB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,gCAAgCA,CAC7CC,aAAqB,EACrBC,MAAoB,EAER;EAAA,IADZ;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMG,YAAY,GAAG,MAAMT,4BAA4B,CAACE,aAAa,EAAE;IACrEE;EACF,CAAC,CAAC;EAEF,MAAMM,WAAW,GAAGhB,SAAS,CAACe,YAAY,CAAC;EAC3C,OAAON,MAAM,CAACQ,KAAK,CAAC;IAClBC,MAAM,EAAEF,WAAW,CAACG,eAAe;IACnCC,OAAO,EAAEJ,WAAW,CAACI;EACvB,CAAC,CAAC;AACJ;AAEA,OAAO,MAAMC,oCAAoC,GAAGA,CAClDb,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbP,iCAAiC,EACjCqB,OACF,CAAC;AAEH,OAAO,MAAMC,sCAAsC,GAAGA,CACpDf,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbN,mCAAmC,EACnCoB,OACF,CAAC;AAEH,OAAO,MAAME,iCAAiC,GAAGA,CAC/ChB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbH,8BAA8B,EAC9BiB,OACF,CAAC;AAEH,OAAO,MAAMG,kCAAkC,GAAGA,CAChDjB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbJ,+BAA+B,EAC/BkB,OACF,CAAC;AAEH,OAAO,MAAMI,sBAAsB,GAAGA,CACpClB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAACC,aAAa,EAAEL,mBAAmB,EAAEmB,OAAO,CAAC"}
+{"version":3,"names":["decode","decodeJwt","getSignedEntityConfiguration","CredentialIssuerEntityConfiguration","EntityConfiguration","RelyingPartyEntityConfiguration","TrustAnchorEntityConfiguration","WalletProviderEntityConfiguration","fetchAndParseEntityConfiguration","entityBaseUrl","schema","appFetch","fetch","arguments","length","undefined","responseText","responseJwt","parse","header","protectedHeader","payload","getWalletProviderEntityConfiguration","options","getCredentialIssuerEntityConfiguration","getTrustAnchorEntityConfiguration","getRelyingPartyEntityConfiguration","getEntityConfiguration"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/entities.ts"],"mappings":"AAEA,SAASA,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;AAEjE,SAEEC,4BAA4B,QACvB,iBAAiB;AACxB,SACEC,mCAAmC,EACnCC,mBAAmB,EACnBC,+BAA+B,EAC/BC,8BAA8B,EAC9BC,iCAAiC,QAC5B,SAAS;;AAEhB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,gCAAgCA,CAC7CC,aAAqB,EACrBC,MAAoB,EAER;EAAA,IADZ;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMG,YAAY,GAAG,MAAMd,4BAA4B,CAACO,aAAa,EAAE;IACrEE;EACF,CAAC,CAAC;EAEF,MAAMM,WAAW,GAAGhB,SAAS,CAACe,YAAY,CAAC;EAC3C,OAAON,MAAM,CAACQ,KAAK,CAAC;IAClBC,MAAM,EAAEF,WAAW,CAACG,eAAe;IACnCC,OAAO,EAAEJ,WAAW,CAACI;EACvB,CAAC,CAAC;AACJ;AAEA,OAAO,MAAMC,oCAAoC,GAAGA,CAClDb,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbF,iCAAiC,EACjCgB,OACF,CAAC;AAEH,OAAO,MAAMC,sCAAsC,GAAGA,CACpDf,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbN,mCAAmC,EACnCoB,OACF,CAAC;AAEH,OAAO,MAAME,iCAAiC,GAAGA,CAC/ChB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbH,8BAA8B,EAC9BiB,OACF,CAAC;AAEH,OAAO,MAAMG,kCAAkC,GAAGA,CAChDjB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbJ,+BAA+B,EAC/BkB,OACF,CAAC;AAEH,OAAO,MAAMI,sBAAsB,GAAGA,CACpClB,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAACC,aAAa,EAAEL,mBAAmB,EAAEmB,OAAO,CAAC"}

package/lib/module/trust/v1.0.0/index.js

@@ -1,11 +1,11 @@
-import { getTrustAnchorEntityConfiguration } from "./entities";
 import { withMapperAsync } from "../../utils/mappers";
-import { mapToTrustAnchorConfig } from "./mappers";
 import { buildTrustChain } from "./build-chain";
+import { getTrustAnchorEntityConfiguration } from "./entities";
+import { mapToTrustAnchorConfig } from "./mappers";
 import { verifyTrustChain } from "./verify-chain";
 export const Trust = {
-  getTrustAnchorEntityConfiguration: withMapperAsync(mapToTrustAnchorConfig, getTrustAnchorEntityConfiguration),
   buildTrustChain,
+  getTrustAnchorEntityConfiguration: withMapperAsync(mapToTrustAnchorConfig, getTrustAnchorEntityConfiguration),
   verifyTrustChain
 };
 //# sourceMappingURL=index.js.map

package/lib/module/trust/v1.0.0/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["getTrustAnchorEntityConfiguration","withMapperAsync","mapToTrustAnchorConfig","buildTrustChain","verifyTrustChain","Trust"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/index.ts"],"mappings":"AACA,SAASA,iCAAiC,QAAQ,YAAY;AAC9D,SAASC,eAAe,QAAQ,qBAAqB;AACrD,SAASC,sBAAsB,QAAQ,WAAW;AAClD,SAASC,eAAe,QAAQ,eAAe;AAC/C,SAASC,gBAAgB,QAAQ,gBAAgB;AAEjD,OAAO,MAAMC,KAAe,GAAG;EAC7BL,iCAAiC,EAAEC,eAAe,CAChDC,sBAAsB,EACtBF,iCACF,CAAC;EACDG,eAAe;EACfC;AACF,CAAC"}
+{"version":3,"names":["withMapperAsync","buildTrustChain","getTrustAnchorEntityConfiguration","mapToTrustAnchorConfig","verifyTrustChain","Trust"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/index.ts"],"mappings":"AAEA,SAASA,eAAe,QAAQ,qBAAqB;AACrD,SAASC,eAAe,QAAQ,eAAe;AAC/C,SAASC,iCAAiC,QAAQ,YAAY;AAC9D,SAASC,sBAAsB,QAAQ,WAAW;AAClD,SAASC,gBAAgB,QAAQ,gBAAgB;AAEjD,OAAO,MAAMC,KAAe,GAAG;EAC7BJ,eAAe;EACfC,iCAAiC,EAAEF,eAAe,CAChDG,sBAAsB,EACtBD,iCACF,CAAC;EACDE;AACF,CAAC"}

package/lib/module/trust/v1.0.0/mappers.js

@@ -4,11 +4,11 @@ export const mapToTrustAnchorConfig = createMapper(x => {
     federation_entity
   } = x.payload.metadata;
   return {
+    federation_entity,
     jwt: {
       header: x.header
     },
-    keys: x.payload.jwks.keys,
-    federation_entity
+    keys: x.payload.jwks.keys
   };
 });
 //# sourceMappingURL=mappers.js.map

package/lib/module/trust/v1.0.0/mappers.js.map

@@ -1 +1 @@
-{"version":3,"names":["createMapper","mapToTrustAnchorConfig","x","federation_entity","payload","metadata","jwt","header","keys","jwks"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/mappers.ts"],"mappings":"AAAA,SAASA,YAAY,QAAQ,qBAAqB;AAIlD,OAAO,MAAMC,sBAAsB,GAAGD,YAAY,CAG/CE,CAAC,IAAK;EACP,MAAM;IAAEC;EAAkB,CAAC,GAAGD,CAAC,CAACE,OAAO,CAACC,QAAQ;EAChD,OAAO;IACLC,GAAG,EAAE;MAAEC,MAAM,EAAEL,CAAC,CAACK;IAAO,CAAC;IACzBC,IAAI,EAAEN,CAAC,CAACE,OAAO,CAACK,IAAI,CAACD,IAAI;IACzBL;EACF,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"names":["createMapper","mapToTrustAnchorConfig","x","federation_entity","payload","metadata","jwt","header","keys","jwks"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/mappers.ts"],"mappings":"AAEA,SAASA,YAAY,QAAQ,qBAAqB;AAGlD,OAAO,MAAMC,sBAAsB,GAAGD,YAAY,CAG/CE,CAAC,IAAK;EACP,MAAM;IAAEC;EAAkB,CAAC,GAAGD,CAAC,CAACE,OAAO,CAACC,QAAQ;EAChD,OAAO;IACLF,iBAAiB;IACjBG,GAAG,EAAE;MAAEC,MAAM,EAAEL,CAAC,CAACK;IAAO,CAAC;IACzBC,IAAI,EAAEN,CAAC,CAACE,OAAO,CAACK,IAAI,CAACD;EACvB,CAAC;AACH,CAAC,CAAC"}

package/lib/module/trust/v1.0.0/types.js

@@ -1,44 +1,44 @@
-import * as z from "zod";
 import { jsonWebKeySchema } from "@pagopa/io-wallet-oid-federation";
+import * as z from "zod";
 import { JWK } from "../../utils/jwk";
 import { BaseEntityConfiguration } from "../common/types";
 const RelyingPartyMetadata = z.object({
   application_type: z.string().optional(),
+  authorization_encrypted_response_alg: z.string().optional(),
+  authorization_encrypted_response_enc: z.string().optional(),
+  authorization_signed_response_alg: z.string().optional(),
   client_id: z.string().optional(),
   client_name: z.string().optional(),
+  contacts: z.array(z.string()).optional(),
   jwks: z.object({
     keys: z.array(jsonWebKeySchema)
   }),
-  contacts: z.array(z.string()).optional(),
-  request_uris: z.array(z.string()).optional(),
-  authorization_signed_response_alg: z.string().optional(),
-  authorization_encrypted_response_alg: z.string().optional(),
-  authorization_encrypted_response_enc: z.string().optional()
+  request_uris: z.array(z.string()).optional()
 });
 
 // Display metadata for a credential, used by the issuer to
 // instruct the Wallet Solution on how to render the credential correctly
 const CredentialDisplayMetadata = z.object({
-  name: z.string(),
-  locale: z.string()
+  locale: z.string(),
+  name: z.string()
 });
 
 // Metadata for displaying issuer information
 
 const CredentialIssuerDisplayMetadata = z.object({
-  name: z.string(),
-  locale: z.string()
+  locale: z.string(),
+  name: z.string()
 });
 const ClaimsMetadata = z.object({
-  path: z.array(z.union([z.string(), z.number(), z.null()])),
-  // https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0-15.html#name-claims-path-pointer
-  display: z.array(CredentialDisplayMetadata)
+  display: z.array(CredentialDisplayMetadata),
+  path: z.array(z.union([z.string(), z.number(), z.null()])) // https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0-15.html#name-claims-path-pointer
 });
+
 const IssuanceErrorSupported = z.object({
   display: z.array(z.object({
-    title: z.string(),
     description: z.string(),
-    locale: z.string()
+    locale: z.string(),
+    title: z.string()
   }))
 });
 
@@ -48,16 +48,16 @@ const SupportedCredentialMetadata = z.intersection(z.discriminatedUnion("format"
   format: z.literal("dc+sd-jwt"),
   vct: z.string()
 }), z.object({
-  format: z.literal("mso_mdoc"),
-  doctype: z.string()
+  doctype: z.string(),
+  format: z.literal("mso_mdoc")
 })]), z.object({
-  scope: z.string(),
-  display: z.array(CredentialDisplayMetadata),
+  authentic_source: z.string().optional(),
   claims: z.array(ClaimsMetadata),
-  cryptographic_binding_methods_supported: z.array(z.string()),
   credential_signing_alg_values_supported: z.array(z.string()),
-  authentic_source: z.string().optional(),
-  issuance_errors_supported: z.record(z.string(), IssuanceErrorSupported).optional()
+  cryptographic_binding_methods_supported: z.array(z.string()),
+  display: z.array(CredentialDisplayMetadata),
+  issuance_errors_supported: z.record(z.string(), IssuanceErrorSupported).optional(),
+  scope: z.string()
 }));
 
 // Entity configuration for a Trust Anchor (it has no specific metadata section)
@@ -72,37 +72,37 @@ export const CredentialIssuerEntityConfiguration = BaseEntityConfiguration.and(z
       keys: z.array(JWK)
     }),
     metadata: z.object({
-      openid_credential_issuer: z.object({
-        credential_issuer: z.string(),
-        credential_endpoint: z.string(),
-        revocation_endpoint: z.string().optional(),
-        nonce_endpoint: z.string(),
-        status_attestation_endpoint: z.string(),
-        display: z.array(CredentialIssuerDisplayMetadata),
-        credential_configurations_supported: z.record(z.string(), SupportedCredentialMetadata),
-        jwks: z.object({
-          keys: z.array(JWK)
-        }),
-        trust_frameworks_supported: z.array(z.string()),
-        evidence_supported: z.array(z.string())
-      }),
       oauth_authorization_server: z.object({
+        acr_values_supported: z.array(z.string()),
         authorization_endpoint: z.string(),
-        pushed_authorization_request_endpoint: z.string(),
-        token_endpoint: z.string(),
         client_registration_types_supported: z.array(z.string()),
         code_challenge_methods_supported: z.array(z.string()),
-        acr_values_supported: z.array(z.string()),
         grant_types_supported: z.array(z.string()),
         issuer: z.string(),
         jwks: z.object({
           keys: z.array(JWK)
         }),
-        scopes_supported: z.array(z.string()),
+        pushed_authorization_request_endpoint: z.string(),
+        request_object_signing_alg_values_supported: z.array(z.string()),
         response_modes_supported: z.array(z.string()),
+        scopes_supported: z.array(z.string()),
+        token_endpoint: z.string(),
         token_endpoint_auth_methods_supported: z.array(z.string()),
-        token_endpoint_auth_signing_alg_values_supported: z.array(z.string()),
-        request_object_signing_alg_values_supported: z.array(z.string())
+        token_endpoint_auth_signing_alg_values_supported: z.array(z.string())
+      }),
+      openid_credential_issuer: z.object({
+        credential_configurations_supported: z.record(z.string(), SupportedCredentialMetadata),
+        credential_endpoint: z.string(),
+        credential_issuer: z.string(),
+        display: z.array(CredentialIssuerDisplayMetadata),
+        evidence_supported: z.array(z.string()),
+        jwks: z.object({
+          keys: z.array(JWK)
+        }),
+        nonce_endpoint: z.string(),
+        revocation_endpoint: z.string().optional(),
+        status_attestation_endpoint: z.string(),
+        trust_frameworks_supported: z.array(z.string())
       }),
       /**
        * Credential Issuers act as Relying Party when they require the presentation of other credentials.
@@ -129,14 +129,14 @@ export const WalletProviderEntityConfiguration = BaseEntityConfiguration.and(z.o
   payload: z.object({
     metadata: z.object({
       wallet_provider: z.object({
-        token_endpoint: z.string(),
         aal_values_supported: z.array(z.string()).optional(),
         grant_types_supported: z.array(z.string()),
-        token_endpoint_auth_methods_supported: z.array(z.string()),
-        token_endpoint_auth_signing_alg_values_supported: z.array(z.string()),
         jwks: z.object({
           keys: z.array(JWK)
-        })
+        }),
+        token_endpoint: z.string(),
+        token_endpoint_auth_methods_supported: z.array(z.string()),
+        token_endpoint_auth_signing_alg_values_supported: z.array(z.string())
       }).loose()
     })
   })

package/lib/module/trust/v1.0.0/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","jsonWebKeySchema","JWK","BaseEntityConfiguration","RelyingPartyMetadata","object","application_type","string","optional","client_id","client_name","jwks","keys","array","contacts","request_uris","authorization_signed_response_alg","authorization_encrypted_response_alg","authorization_encrypted_response_enc","CredentialDisplayMetadata","name","locale","CredentialIssuerDisplayMetadata","ClaimsMetadata","path","union","number","null","display","IssuanceErrorSupported","title","description","SupportedCredentialMetadata","intersection","discriminatedUnion","format","literal","vct","doctype","scope","claims","cryptographic_binding_methods_supported","credential_signing_alg_values_supported","authentic_source","issuance_errors_supported","record","TrustAnchorEntityConfiguration","CredentialIssuerEntityConfiguration","and","payload","metadata","openid_credential_issuer","credential_issuer","credential_endpoint","revocation_endpoint","nonce_endpoint","status_attestation_endpoint","credential_configurations_supported","trust_frameworks_supported","evidence_supported","oauth_authorization_server","authorization_endpoint","pushed_authorization_request_endpoint","token_endpoint","client_registration_types_supported","code_challenge_methods_supported","acr_values_supported","grant_types_supported","issuer","scopes_supported","response_modes_supported","token_endpoint_auth_methods_supported","token_endpoint_auth_signing_alg_values_supported","request_object_signing_alg_values_supported","openid_credential_verifier","RelyingPartyEntityConfiguration","WalletProviderEntityConfiguration","wallet_provider","aal_values_supported","loose","EntityConfiguration","describe"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/types.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AACxB,SAASC,gBAAgB,QAAQ,kCAAkC;AACnE,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,uBAAuB,QAAQ,iBAAiB;AAEzD,MAAMC,oBAAoB,GAAGJ,CAAC,CAACK,MAAM,CAAC;EACpCC,gBAAgB,EAAEN,CAAC,CAACO,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACvCC,SAAS,EAAET,CAAC,CAACO,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAChCE,WAAW,EAAEV,CAAC,CAACO,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAClCG,IAAI,EAAEX,CAAC,CAACK,MAAM,CAAC;IACbO,IAAI,EAAEZ,CAAC,CAACa,KAAK,CAACZ,gBAAgB;EAChC,CAAC,CAAC;EACFa,QAAQ,EAAEd,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACxCO,YAAY,EAAEf,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAC5CQ,iCAAiC,EAAEhB,CAAC,CAACO,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACxDS,oCAAoC,EAAEjB,CAAC,CAACO,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAC3DU,oCAAoC,EAAElB,CAAC,CAACO,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC;AAC5D,CAAC,CAAC;;AAEF;AACA;AAEA,MAAMW,yBAAyB,GAAGnB,CAAC,CAACK,MAAM,CAAC;EACzCe,IAAI,EAAEpB,CAAC,CAACO,MAAM,CAAC,CAAC;EAChBc,MAAM,EAAErB,CAAC,CAACO,MAAM,CAAC;AACnB,CAAC,CAAC;;AAEF;;AAIA,MAAMe,+BAA+B,GAAGtB,CAAC,CAACK,MAAM,CAAC;EAC/Ce,IAAI,EAAEpB,CAAC,CAACO,MAAM,CAAC,CAAC;EAChBc,MAAM,EAAErB,CAAC,CAACO,MAAM,CAAC;AACnB,CAAC,CAAC;AAGF,MAAMgB,cAAc,GAAGvB,CAAC,CAACK,MAAM,CAAC;EAC9BmB,IAAI,EAAExB,CAAC,CAACa,KAAK,CAACb,CAAC,CAACyB,KAAK,CAAC,CAACzB,CAAC,CAACO,MAAM,CAAC,CAAC,EAAEP,CAAC,CAAC0B,MAAM,CAAC,CAAC,EAAE1B,CAAC,CAAC2B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;EAAE;EAC5DC,OAAO,EAAE5B,CAAC,CAACa,KAAK,CAACM,yBAAyB;AAC5C,CAAC,CAAC;AAGF,MAAMU,sBAAsB,GAAG7B,CAAC,CAACK,MAAM,CAAC;EACtCuB,OAAO,EAAE5B,CAAC,CAACa,KAAK,CACdb,CAAC,CAACK,MAAM,CAAC;IACPyB,KAAK,EAAE9B,CAAC,CAACO,MAAM,CAAC,CAAC;IACjBwB,WAAW,EAAE/B,CAAC,CAACO,MAAM,CAAC,CAAC;IACvBc,MAAM,EAAErB,CAAC,CAACO,MAAM,CAAC;EACnB,CAAC,CACH;AACF,CAAC,CAAC;;AAEF;;AAEA,MAAMyB,2BAA2B,GAAGhC,CAAC,CAACiC,YAAY,CAChDjC,CAAC,CAACkC,kBAAkB,CAAC,QAAQ,EAAE,CAC7BlC,CAAC,CAACK,MAAM,CAAC;EAAE8B,MAAM,EAAEnC,CAAC,CAACoC,OAAO,CAAC,WAAW,CAAC;EAAEC,GAAG,EAAErC,CAAC,CAACO,MAAM,CAAC;AAAE,CAAC,CAAC,EAC7DP,CAAC,CAACK,MAAM,CAAC;EAAE8B,MAAM,EAAEnC,CAAC,CAACoC,OAAO,CAAC,UAAU,CAAC;EAAEE,OAAO,EAAEtC,CAAC,CAACO,MAAM,CAAC;AAAE,CAAC,CAAC,CACjE,CAAC,EACFP,CAAC,CAACK,MAAM,CAAC;EACPkC,KAAK,EAAEvC,CAAC,CAACO,MAAM,CAAC,CAAC;EACjBqB,OAAO,EAAE5B,CAAC,CAACa,KAAK,CAACM,yBAAyB,CAAC;EAC3CqB,MAAM,EAAExC,CAAC,CAACa,KAAK,CAACU,cAAc,CAAC;EAC/BkB,uCAAuC,EAAEzC,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;EAC5DmC,uCAAuC,EAAE1C,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;EAC5DoC,gBAAgB,EAAE3C,CAAC,CAACO,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACvCoC,yBAAyB,EAAE5C,CAAC,CACzB6C,MAAM,CAAC7C,CAAC,CAACO,MAAM,CAAC,CAAC,EAAEsB,sBAAsB,CAAC,CAC1CrB,QAAQ,CAAC;AACd,CAAC,CACH,CAAC;;AAED;;AAIA,OAAO,MAAMsC,8BAA8B,GAAG3C,uBAAuB;;AAErE;;AAIA,OAAO,MAAM4C,mCAAmC,GAAG5C,uBAAuB,CAAC6C,GAAG,CAC5EhD,CAAC,CAACK,MAAM,CAAC;EACP4C,OAAO,EAAEjD,CAAC,CAACK,MAAM,CAAC;IAChBM,IAAI,EAAEX,CAAC,CAACK,MAAM,CAAC;MAAEO,IAAI,EAAEZ,CAAC,CAACa,KAAK,CAACX,GAAG;IAAE,CAAC,CAAC;IACtCgD,QAAQ,EAAElD,CAAC,CAACK,MAAM,CAAC;MACjB8C,wBAAwB,EAAEnD,CAAC,CAACK,MAAM,CAAC;QACjC+C,iBAAiB,EAAEpD,CAAC,CAACO,MAAM,CAAC,CAAC;QAC7B8C,mBAAmB,EAAErD,CAAC,CAACO,MAAM,CAAC,CAAC;QAC/B+C,mBAAmB,EAAEtD,CAAC,CAACO,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;QAC1C+C,cAAc,EAAEvD,CAAC,CAACO,MAAM,CAAC,CAAC;QAC1BiD,2BAA2B,EAAExD,CAAC,CAACO,MAAM,CAAC,CAAC;QACvCqB,OAAO,EAAE5B,CAAC,CAACa,KAAK,CAACS,+BAA+B,CAAC;QACjDmC,mCAAmC,EAAEzD,CAAC,CAAC6C,MAAM,CAC3C7C,CAAC,CAACO,MAAM,CAAC,CAAC,EACVyB,2BACF,CAAC;QACDrB,IAAI,EAAEX,CAAC,CAACK,MAAM,CAAC;UAAEO,IAAI,EAAEZ,CAAC,CAACa,KAAK,CAACX,GAAG;QAAE,CAAC,CAAC;QACtCwD,0BAA0B,EAAE1D,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QAC/CoD,kBAAkB,EAAE3D,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC;MACxC,CAAC,CAAC;MACFqD,0BAA0B,EAAE5D,CAAC,CAACK,MAAM,CAAC;QACnCwD,sBAAsB,EAAE7D,CAAC,CAACO,MAAM,CAAC,CAAC;QAClCuD,qCAAqC,EAAE9D,CAAC,CAACO,MAAM,CAAC,CAAC;QACjDwD,cAAc,EAAE/D,CAAC,CAACO,MAAM,CAAC,CAAC;QAC1ByD,mCAAmC,EAAEhE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QACxD0D,gCAAgC,EAAEjE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QACrD2D,oBAAoB,EAAElE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QACzC4D,qBAAqB,EAAEnE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QAC1C6D,MAAM,EAAEpE,CAAC,CAACO,MAAM,CAAC,CAAC;QAClBI,IAAI,EAAEX,CAAC,CAACK,MAAM,CAAC;UAAEO,IAAI,EAAEZ,CAAC,CAACa,KAAK,CAACX,GAAG;QAAE,CAAC,CAAC;QACtCmE,gBAAgB,EAAErE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QACrC+D,wBAAwB,EAAEtE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QAC7CgE,qCAAqC,EAAEvE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QAC1DiE,gDAAgD,EAAExE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QACrEkE,2CAA2C,EAAEzE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC;MACjE,CAAC,CAAC;MACF;AACR;AACA;AACA;MACQmE,0BAA0B,EAAEtE,oBAAoB,CAACI,QAAQ,CAAC;IAC5D,CAAC;EACH,CAAC;AACH,CAAC,CACH,CAAC;;AAED;;AAIA,OAAO,MAAMmE,+BAA+B,GAAGxE,uBAAuB,CAAC6C,GAAG,CACxEhD,CAAC,CAACK,MAAM,CAAC;EACP4C,OAAO,EAAEjD,CAAC,CAACK,MAAM,CAAC;IAChB6C,QAAQ,EAAElD,CAAC,CAACK,MAAM,CAAC;MACjBqE,0BAA0B,EAAEtE;IAC9B,CAAC;EACH,CAAC;AACH,CAAC,CACH,CAAC;;AAED;;AAIA,OAAO,MAAMwE,iCAAiC,GAAGzE,uBAAuB,CAAC6C,GAAG,CAC1EhD,CAAC,CAACK,MAAM,CAAC;EACP4C,OAAO,EAAEjD,CAAC,CAACK,MAAM,CAAC;IAChB6C,QAAQ,EAAElD,CAAC,CAACK,MAAM,CAAC;MACjBwE,eAAe,EAAE7E,CAAC,CACfK,MAAM,CAAC;QACN0D,cAAc,EAAE/D,CAAC,CAACO,MAAM,CAAC,CAAC;QAC1BuE,oBAAoB,EAAE9E,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;QACpD2D,qBAAqB,EAAEnE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QAC1CgE,qCAAqC,EAAEvE,CAAC,CAACa,KAAK,CAACb,CAAC,CAACO,MAAM,CAAC,CAAC,CAAC;QAC1DiE,gDAAgD,EAAExE,CAAC,CAACa,KAAK,CACvDb,CAAC,CAACO,MAAM,CAAC,CACX,CAAC;QACDI,IAAI,EAAEX,CAAC,CAACK,MAAM,CAAC;UAAEO,IAAI,EAAEZ,CAAC,CAACa,KAAK,CAACX,GAAG;QAAE,CAAC;MACvC,CAAC,CAAC,CACD6E,KAAK,CAAC;IACX,CAAC;EACH,CAAC;AACH,CAAC,CACH,CAAC;;AAED;;AAEA,OAAO,MAAMC,mBAAmB,GAAGhF,CAAC,CACjCyB,KAAK,CAAC,CACLmD,iCAAiC,EACjC7B,mCAAmC,EACnCD,8BAA8B,EAC9B6B,+BAA+B,CAChC,CAAC,CACDM,QAAQ,CAAC,2DAA2D,CAAC"}
+{"version":3,"names":["jsonWebKeySchema","z","JWK","BaseEntityConfiguration","RelyingPartyMetadata","object","application_type","string","optional","authorization_encrypted_response_alg","authorization_encrypted_response_enc","authorization_signed_response_alg","client_id","client_name","contacts","array","jwks","keys","request_uris","CredentialDisplayMetadata","locale","name","CredentialIssuerDisplayMetadata","ClaimsMetadata","display","path","union","number","null","IssuanceErrorSupported","description","title","SupportedCredentialMetadata","intersection","discriminatedUnion","format","literal","vct","doctype","authentic_source","claims","credential_signing_alg_values_supported","cryptographic_binding_methods_supported","issuance_errors_supported","record","scope","TrustAnchorEntityConfiguration","CredentialIssuerEntityConfiguration","and","payload","metadata","oauth_authorization_server","acr_values_supported","authorization_endpoint","client_registration_types_supported","code_challenge_methods_supported","grant_types_supported","issuer","pushed_authorization_request_endpoint","request_object_signing_alg_values_supported","response_modes_supported","scopes_supported","token_endpoint","token_endpoint_auth_methods_supported","token_endpoint_auth_signing_alg_values_supported","openid_credential_issuer","credential_configurations_supported","credential_endpoint","credential_issuer","evidence_supported","nonce_endpoint","revocation_endpoint","status_attestation_endpoint","trust_frameworks_supported","openid_credential_verifier","RelyingPartyEntityConfiguration","WalletProviderEntityConfiguration","wallet_provider","aal_values_supported","loose","EntityConfiguration","describe"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/types.ts"],"mappings":"AAAA,SAASA,gBAAgB,QAAQ,kCAAkC;AACnE,OAAO,KAAKC,CAAC,MAAM,KAAK;AAExB,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,uBAAuB,QAAQ,iBAAiB;AAEzD,MAAMC,oBAAoB,GAAGH,CAAC,CAACI,MAAM,CAAC;EACpCC,gBAAgB,EAAEL,CAAC,CAACM,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACvCC,oCAAoC,EAAER,CAAC,CAACM,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAC3DE,oCAAoC,EAAET,CAAC,CAACM,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAC3DG,iCAAiC,EAAEV,CAAC,CAACM,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACxDI,SAAS,EAAEX,CAAC,CAACM,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAChCK,WAAW,EAAEZ,CAAC,CAACM,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAClCM,QAAQ,EAAEb,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACxCQ,IAAI,EAAEf,CAAC,CAACI,MAAM,CAAC;IACbY,IAAI,EAAEhB,CAAC,CAACc,KAAK,CAACf,gBAAgB;EAChC,CAAC,CAAC;EACFkB,YAAY,EAAEjB,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC;AAC7C,CAAC,CAAC;;AAEF;AACA;AAEA,MAAMW,yBAAyB,GAAGlB,CAAC,CAACI,MAAM,CAAC;EACzCe,MAAM,EAAEnB,CAAC,CAACM,MAAM,CAAC,CAAC;EAClBc,IAAI,EAAEpB,CAAC,CAACM,MAAM,CAAC;AACjB,CAAC,CAAC;;AAEF;;AAIA,MAAMe,+BAA+B,GAAGrB,CAAC,CAACI,MAAM,CAAC;EAC/Ce,MAAM,EAAEnB,CAAC,CAACM,MAAM,CAAC,CAAC;EAClBc,IAAI,EAAEpB,CAAC,CAACM,MAAM,CAAC;AACjB,CAAC,CAAC;AAGF,MAAMgB,cAAc,GAAGtB,CAAC,CAACI,MAAM,CAAC;EAC9BmB,OAAO,EAAEvB,CAAC,CAACc,KAAK,CAACI,yBAAyB,CAAC;EAC3CM,IAAI,EAAExB,CAAC,CAACc,KAAK,CAACd,CAAC,CAACyB,KAAK,CAAC,CAACzB,CAAC,CAACM,MAAM,CAAC,CAAC,EAAEN,CAAC,CAAC0B,MAAM,CAAC,CAAC,EAAE1B,CAAC,CAAC2B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE;AAC9D,CAAC,CAAC;;AAGF,MAAMC,sBAAsB,GAAG5B,CAAC,CAACI,MAAM,CAAC;EACtCmB,OAAO,EAAEvB,CAAC,CAACc,KAAK,CACdd,CAAC,CAACI,MAAM,CAAC;IACPyB,WAAW,EAAE7B,CAAC,CAACM,MAAM,CAAC,CAAC;IACvBa,MAAM,EAAEnB,CAAC,CAACM,MAAM,CAAC,CAAC;IAClBwB,KAAK,EAAE9B,CAAC,CAACM,MAAM,CAAC;EAClB,CAAC,CACH;AACF,CAAC,CAAC;;AAEF;;AAEA,MAAMyB,2BAA2B,GAAG/B,CAAC,CAACgC,YAAY,CAChDhC,CAAC,CAACiC,kBAAkB,CAAC,QAAQ,EAAE,CAC7BjC,CAAC,CAACI,MAAM,CAAC;EAAE8B,MAAM,EAAElC,CAAC,CAACmC,OAAO,CAAC,WAAW,CAAC;EAAEC,GAAG,EAAEpC,CAAC,CAACM,MAAM,CAAC;AAAE,CAAC,CAAC,EAC7DN,CAAC,CAACI,MAAM,CAAC;EAAEiC,OAAO,EAAErC,CAAC,CAACM,MAAM,CAAC,CAAC;EAAE4B,MAAM,EAAElC,CAAC,CAACmC,OAAO,CAAC,UAAU;AAAE,CAAC,CAAC,CACjE,CAAC,EACFnC,CAAC,CAACI,MAAM,CAAC;EACPkC,gBAAgB,EAAEtC,CAAC,CAACM,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACvCgC,MAAM,EAAEvC,CAAC,CAACc,KAAK,CAACQ,cAAc,CAAC;EAC/BkB,uCAAuC,EAAExC,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;EAC5DmC,uCAAuC,EAAEzC,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;EAC5DiB,OAAO,EAAEvB,CAAC,CAACc,KAAK,CAACI,yBAAyB,CAAC;EAC3CwB,yBAAyB,EAAE1C,CAAC,CACzB2C,MAAM,CAAC3C,CAAC,CAACM,MAAM,CAAC,CAAC,EAAEsB,sBAAsB,CAAC,CAC1CrB,QAAQ,CAAC,CAAC;EACbqC,KAAK,EAAE5C,CAAC,CAACM,MAAM,CAAC;AAClB,CAAC,CACH,CAAC;;AAED;;AAIA,OAAO,MAAMuC,8BAA8B,GAAG3C,uBAAuB;;AAErE;;AAIA,OAAO,MAAM4C,mCAAmC,GAAG5C,uBAAuB,CAAC6C,GAAG,CAC5E/C,CAAC,CAACI,MAAM,CAAC;EACP4C,OAAO,EAAEhD,CAAC,CAACI,MAAM,CAAC;IAChBW,IAAI,EAAEf,CAAC,CAACI,MAAM,CAAC;MAAEY,IAAI,EAAEhB,CAAC,CAACc,KAAK,CAACb,GAAG;IAAE,CAAC,CAAC;IACtCgD,QAAQ,EAAEjD,CAAC,CAACI,MAAM,CAAC;MACjB8C,0BAA0B,EAAElD,CAAC,CAACI,MAAM,CAAC;QACnC+C,oBAAoB,EAAEnD,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QACzC8C,sBAAsB,EAAEpD,CAAC,CAACM,MAAM,CAAC,CAAC;QAClC+C,mCAAmC,EAAErD,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QACxDgD,gCAAgC,EAAEtD,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QACrDiD,qBAAqB,EAAEvD,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QAC1CkD,MAAM,EAAExD,CAAC,CAACM,MAAM,CAAC,CAAC;QAClBS,IAAI,EAAEf,CAAC,CAACI,MAAM,CAAC;UAAEY,IAAI,EAAEhB,CAAC,CAACc,KAAK,CAACb,GAAG;QAAE,CAAC,CAAC;QACtCwD,qCAAqC,EAAEzD,CAAC,CAACM,MAAM,CAAC,CAAC;QACjDoD,2CAA2C,EAAE1D,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QAChEqD,wBAAwB,EAAE3D,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QAC7CsD,gBAAgB,EAAE5D,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QACrCuD,cAAc,EAAE7D,CAAC,CAACM,MAAM,CAAC,CAAC;QAC1BwD,qCAAqC,EAAE9D,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QAC1DyD,gDAAgD,EAAE/D,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC;MACtE,CAAC,CAAC;MACF0D,wBAAwB,EAAEhE,CAAC,CAACI,MAAM,CAAC;QACjC6D,mCAAmC,EAAEjE,CAAC,CAAC2C,MAAM,CAC3C3C,CAAC,CAACM,MAAM,CAAC,CAAC,EACVyB,2BACF,CAAC;QACDmC,mBAAmB,EAAElE,CAAC,CAACM,MAAM,CAAC,CAAC;QAC/B6D,iBAAiB,EAAEnE,CAAC,CAACM,MAAM,CAAC,CAAC;QAC7BiB,OAAO,EAAEvB,CAAC,CAACc,KAAK,CAACO,+BAA+B,CAAC;QACjD+C,kBAAkB,EAAEpE,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QACvCS,IAAI,EAAEf,CAAC,CAACI,MAAM,CAAC;UAAEY,IAAI,EAAEhB,CAAC,CAACc,KAAK,CAACb,GAAG;QAAE,CAAC,CAAC;QACtCoE,cAAc,EAAErE,CAAC,CAACM,MAAM,CAAC,CAAC;QAC1BgE,mBAAmB,EAAEtE,CAAC,CAACM,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;QAC1CgE,2BAA2B,EAAEvE,CAAC,CAACM,MAAM,CAAC,CAAC;QACvCkE,0BAA0B,EAAExE,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC;MAChD,CAAC,CAAC;MACF;AACR;AACA;AACA;MACQmE,0BAA0B,EAAEtE,oBAAoB,CAACI,QAAQ,CAAC;IAC5D,CAAC;EACH,CAAC;AACH,CAAC,CACH,CAAC;;AAED;;AAIA,OAAO,MAAMmE,+BAA+B,GAAGxE,uBAAuB,CAAC6C,GAAG,CACxE/C,CAAC,CAACI,MAAM,CAAC;EACP4C,OAAO,EAAEhD,CAAC,CAACI,MAAM,CAAC;IAChB6C,QAAQ,EAAEjD,CAAC,CAACI,MAAM,CAAC;MACjBqE,0BAA0B,EAAEtE;IAC9B,CAAC;EACH,CAAC;AACH,CAAC,CACH,CAAC;;AAED;;AAIA,OAAO,MAAMwE,iCAAiC,GAAGzE,uBAAuB,CAAC6C,GAAG,CAC1E/C,CAAC,CAACI,MAAM,CAAC;EACP4C,OAAO,EAAEhD,CAAC,CAACI,MAAM,CAAC;IAChB6C,QAAQ,EAAEjD,CAAC,CAACI,MAAM,CAAC;MACjBwE,eAAe,EAAE5E,CAAC,CACfI,MAAM,CAAC;QACNyE,oBAAoB,EAAE7E,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;QACpDgD,qBAAqB,EAAEvD,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QAC1CS,IAAI,EAAEf,CAAC,CAACI,MAAM,CAAC;UAAEY,IAAI,EAAEhB,CAAC,CAACc,KAAK,CAACb,GAAG;QAAE,CAAC,CAAC;QACtC4D,cAAc,EAAE7D,CAAC,CAACM,MAAM,CAAC,CAAC;QAC1BwD,qCAAqC,EAAE9D,CAAC,CAACc,KAAK,CAACd,CAAC,CAACM,MAAM,CAAC,CAAC,CAAC;QAC1DyD,gDAAgD,EAAE/D,CAAC,CAACc,KAAK,CACvDd,CAAC,CAACM,MAAM,CAAC,CACX;MACF,CAAC,CAAC,CACDwE,KAAK,CAAC;IACX,CAAC;EACH,CAAC;AACH,CAAC,CACH,CAAC;;AAED;;AAEA,OAAO,MAAMC,mBAAmB,GAAG/E,CAAC,CACjCyB,KAAK,CAAC,CACLkD,iCAAiC,EACjC7B,mCAAmC,EACnCD,8BAA8B,EAC9B6B,+BAA+B,CAChC,CAAC,CACDM,QAAQ,CAAC,2DAA2D,CAAC"}

package/lib/module/trust/v1.0.0/verify-chain.js

@@ -3,10 +3,10 @@ import { EntityStatement } from "../common/types";
 import { createVerifyTrustChain } from "../common/verify-chain";
 import { EntityConfiguration, TrustAnchorEntityConfiguration } from "./types";
 export const verifyTrustChain = createVerifyTrustChain({
-  EntityStatementShape: EntityStatement,
   EntityConfigurationShape: EntityConfiguration,
+  EntityStatementShape: EntityStatement,
   FirstElementShape: EntityConfiguration,
-  MiddleElementShape: EntityStatement,
-  LastElementShape: z.union([EntityStatement, TrustAnchorEntityConfiguration])
+  LastElementShape: z.union([EntityStatement, TrustAnchorEntityConfiguration]),
+  MiddleElementShape: EntityStatement
 });
 //# sourceMappingURL=verify-chain.js.map

package/lib/module/trust/v1.0.0/verify-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","EntityStatement","createVerifyTrustChain","EntityConfiguration","TrustAnchorEntityConfiguration","verifyTrustChain","EntityStatementShape","EntityConfigurationShape","FirstElementShape","MiddleElementShape","LastElementShape","union"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/verify-chain.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AACvB,SAASC,eAAe,QAAQ,iBAAiB;AACjD,SAASC,sBAAsB,QAAQ,wBAAwB;AAC/D,SAASC,mBAAmB,EAAEC,8BAA8B,QAAQ,SAAS;AAE7E,OAAO,MAAMC,gBAAgB,GAAGH,sBAAsB,CAAC;EACrDI,oBAAoB,EAAEL,eAAe;EACrCM,wBAAwB,EAAEJ,mBAAmB;EAC7CK,iBAAiB,EAAEL,mBAAmB;EACtCM,kBAAkB,EAAER,eAAe;EACnCS,gBAAgB,EAAEV,CAAC,CAACW,KAAK,CAAC,CAACV,eAAe,EAAEG,8BAA8B,CAAC;AAC7E,CAAC,CAAC"}
+{"version":3,"names":["z","EntityStatement","createVerifyTrustChain","EntityConfiguration","TrustAnchorEntityConfiguration","verifyTrustChain","EntityConfigurationShape","EntityStatementShape","FirstElementShape","LastElementShape","union","MiddleElementShape"],"sourceRoot":"../../../../src","sources":["trust/v1.0.0/verify-chain.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,SAASC,eAAe,QAAQ,iBAAiB;AACjD,SAASC,sBAAsB,QAAQ,wBAAwB;AAC/D,SAASC,mBAAmB,EAAEC,8BAA8B,QAAQ,SAAS;AAE7E,OAAO,MAAMC,gBAAgB,GAAGH,sBAAsB,CAAC;EACrDI,wBAAwB,EAAEH,mBAAmB;EAC7CI,oBAAoB,EAAEN,eAAe;EACrCO,iBAAiB,EAAEL,mBAAmB;EACtCM,gBAAgB,EAAET,CAAC,CAACU,KAAK,CAAC,CAACT,eAAe,EAAEG,8BAA8B,CAAC,CAAC;EAC5EO,kBAAkB,EAAEV;AACtB,CAAC,CAAC"}

package/lib/module/trust/{v1.3.3 → v1.4.6}/entities.js

@@ -1,11 +1,11 @@
+import { decode as decodeJwt } from "@pagopa/io-react-native-jwt";
 import { getSignedEntityConfiguration } from "../common/utils";
 import { RelyingPartyEntityConfiguration } from "./types";
-import { decode as decodeJwt } from "@pagopa/io-react-native-jwt";
 
 /**
  * Fetch and parse the entity configuration document for a given federation entity.
  * This is an inner method to serve public interfaces.
- * @version 1.3.3
+ * @version 1.4.6
  *
  * To add another entity configuration type (example: Foo entity type):
  *  - create its zod schema and type by inherit from the base type (example: FooEntityConfiguration = BaseEntityConfiguration.and(...))

package/lib/module/trust/{v1.3.3 → v1.4.6}/entities.js.map

@@ -1 +1 @@
-{"version":3,"names":["getSignedEntityConfiguration","RelyingPartyEntityConfiguration","decode","decodeJwt","fetchAndParseEntityConfiguration","entityBaseUrl","schema","appFetch","fetch","arguments","length","undefined","responseText","responseJwt","parse","header","protectedHeader","payload","getRelyingPartyEntityConfiguration","options"],"sourceRoot":"../../../../src","sources":["trust/v1.3.3/entities.ts"],"mappings":"AACA,SAEEA,4BAA4B,QACvB,iBAAiB;AACxB,SAA8BC,+BAA+B,QAAQ,SAAS;AAC9E,SAASC,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;;AAEjE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,gCAAgCA,CAC7CC,aAAqB,EACrBC,MAAoB,EAER;EAAA,IADZ;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMG,YAAY,GAAG,MAAMZ,4BAA4B,CAACK,aAAa,EAAE;IACrEE;EACF,CAAC,CAAC;EAEF,MAAMM,WAAW,GAAGV,SAAS,CAACS,YAAY,CAAC;EAC3C,OAAON,MAAM,CAACQ,KAAK,CAAC;IAClBC,MAAM,EAAEF,WAAW,CAACG,eAAe;IACnCC,OAAO,EAAEJ,WAAW,CAACI;EACvB,CAAC,CAAC;AACJ;AAEA,OAAO,MAAMC,kCAAkC,GAAGA,CAChDb,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbJ,+BAA+B,EAC/BkB,OACF,CAAC"}
+{"version":3,"names":["decode","decodeJwt","getSignedEntityConfiguration","RelyingPartyEntityConfiguration","fetchAndParseEntityConfiguration","entityBaseUrl","schema","appFetch","fetch","arguments","length","undefined","responseText","responseJwt","parse","header","protectedHeader","payload","getRelyingPartyEntityConfiguration","options"],"sourceRoot":"../../../../src","sources":["trust/v1.4.6/entities.ts"],"mappings":"AAEA,SAASA,MAAM,IAAIC,SAAS,QAAQ,6BAA6B;AAEjE,SAEEC,4BAA4B,QACvB,iBAAiB;AACxB,SAA8BC,+BAA+B,QAAQ,SAAS;;AAE9E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,gCAAgCA,CAC7CC,aAAqB,EACrBC,MAAoB,EAER;EAAA,IADZ;IAAEC,QAAQ,GAAGC;EAAoB,CAAC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEvC,MAAMG,YAAY,GAAG,MAAMV,4BAA4B,CAACG,aAAa,EAAE;IACrEE;EACF,CAAC,CAAC;EAEF,MAAMM,WAAW,GAAGZ,SAAS,CAACW,YAAY,CAAC;EAC3C,OAAON,MAAM,CAACQ,KAAK,CAAC;IAClBC,MAAM,EAAEF,WAAW,CAACG,eAAe;IACnCC,OAAO,EAAEJ,WAAW,CAACI;EACvB,CAAC,CAAC;AACJ;AAEA,OAAO,MAAMC,kCAAkC,GAAGA,CAChDb,aAAqB,EACrBc,OAAsB,KAEtBf,gCAAgC,CAC9BC,aAAa,EACbF,+BAA+B,EAC/BgB,OACF,CAAC"}