@pagopa/io-react-native-wallet 3.6.3 → 3.7.0

package/lib/typescript/wallet-instance-attestation/{v1.3.3 → v1.4.6}/types.d.ts

@@ -4,17 +4,14 @@ export declare const WalletInstanceAttestationJwt: z.ZodObject<{
     header: z.ZodIntersection<z.ZodObject<{
         alg: z.ZodString;
         kid: z.ZodString;
+        trust_chain: z.ZodOptional<z.ZodArray<z.ZodString>>;
         typ: z.ZodString;
         x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        trust_chain: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>, z.ZodObject<{
         typ: z.ZodLiteral<"oauth-client-attestation+jwt">;
         x5c: z.ZodArray<z.ZodString>;
     }, z.core.$strip>>;
     payload: z.ZodIntersection<z.ZodObject<{
-        iss: z.ZodString;
-        iat: z.ZodNumber;
-        exp: z.ZodNumber;
         cnf: z.ZodObject<{
             jwk: z.ZodIntersection<z.ZodObject<{
                 alg: z.ZodOptional<z.ZodString>;
@@ -37,15 +34,18 @@ export declare const WalletInstanceAttestationJwt: z.ZodObject<{
                 qi: z.ZodOptional<z.ZodString>;
                 use: z.ZodOptional<z.ZodString>;
                 x: z.ZodOptional<z.ZodString>;
-                y: z.ZodOptional<z.ZodString>;
                 x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 x5t: z.ZodOptional<z.ZodString>;
                 "x5t#S256": z.ZodOptional<z.ZodString>;
                 x5u: z.ZodOptional<z.ZodString>;
+                y: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>, z.ZodObject<{
                 kid: z.ZodString;
             }, z.core.$strip>>;
         }, z.core.$strip>;
+        exp: z.ZodNumber;
+        iat: z.ZodNumber;
+        iss: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
         sub: z.ZodString;
         wallet_link: z.ZodOptional<z.ZodString>;

package/lib/typescript/wallet-instance-attestation/{v1.3.3 → v1.4.6}/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/wallet-instance-attestation/v1.3.3/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAGzB,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,4BAA4B,CACpC,CAAC;AACF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBvC,CAAC;AAEH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,iCAAiC,CACzC,CAAC;AACF,eAAO,MAAM,iCAAiC;;iBAE5C,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/wallet-instance-attestation/v1.4.6/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAIzB,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,4BAA4B,CACpC,CAAC;AACF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBvC,CAAC;AAEH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,iCAAiC,CACzC,CAAC;AACF,eAAO,MAAM,iCAAiC;;iBAE5C,CAAC"}

package/lib/typescript/wallet-instance-attestation/{v1.3.3 → v1.4.6}/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/wallet-instance-attestation/v1.3.3/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAMvD;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,4BAA4B,CAMlE;AAED;;;GAGG;AACH,wBAAsB,MAAM,CAC1B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,4BAA4B,CAAC,CAOvC"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/wallet-instance-attestation/v1.4.6/utils.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAEvD;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,4BAA4B,CAMlE;AAED;;;GAGG;AACH,wBAAsB,MAAM,CAC1B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,4BAA4B,CAAC,CAOvC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pagopa/io-react-native-wallet",
-  "version": "3.6.3",
+  "version": "3.7.0",
   "description": "Provide data structures, helpers and API for IO Wallet",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",
@@ -29,12 +29,13 @@
   "scripts": {
     "test": "jest",
     "tsc": "tsc --noEmit",
-    "lint": "eslint . -c .eslintrc.js --ext .ts,.tsx",
+    "lint": "eslint --fix .",
+    "lint:check": "eslint .",
     "prepack": "yarn generate && bob build",
     "release": "release-it",
     "example": "yarn --cwd example",
     "bootstrap": "yarn example && yarn install",
-    "code-review": "yarn generate && yarn lint && yarn tsc && yarn test",
+    "code-review": "yarn generate && yarn lint:check && yarn tsc && yarn test",
     "generate-wallet-provider-client": "typed-openapi openapi/wallet-provider.yaml -o src/client/generated/wallet-provider.ts -r zod",
     "generate": "yarn generate-wallet-provider-client"
   },
@@ -53,21 +54,23 @@
     "registry": "https://registry.npmjs.org/"
   },
   "devDependencies": {
+    "@eslint/js": "^9.0.0",
+    "@pagopa/eslint-config": "^6.2.0",
     "@pagopa/io-react-native-crypto": "^1.2.3",
     "@pagopa/io-react-native-iso18013": "^0.7.0",
     "@pagopa/io-react-native-jwt": "^2.1.0",
     "@react-native/babel-preset": "0.78.3",
-    "@react-native/eslint-config": "0.78.3",
-    "@rushstack/eslint-patch": "^1.3.2",
     "@types/jest": "^29.5.13",
     "@types/jsrsasign": "^10.5.15",
     "@types/react": "^19.0.0",
     "@types/react-native": "0.70.0",
     "@types/url-parse": "^1.4.11",
+    "@typescript-eslint/eslint-plugin": "^8.64.0",
+    "@typescript-eslint/parser": "^8.64.0",
     "auto-changelog": "^2.5.0",
     "del-cli": "^5.0.0",
-    "eslint": "^8.4.1",
-    "eslint-plugin-prettier": "^5.2.3",
+    "eslint": "^9.0.0",
+    "eslint-plugin-jest": "^29.0.0",
     "jest": "^29.6.3",
     "pod-install": "^0.1.0",
     "prettier": "^3.5.3",
@@ -140,11 +143,11 @@
     ]
   },
   "dependencies": {
-    "@pagopa/io-wallet-oauth2": "1.5.4-alpha-20260717125503",
-    "@pagopa/io-wallet-oid-federation": "1.5.4-alpha-20260717125503",
-    "@pagopa/io-wallet-oid4vci": "1.5.4-alpha-20260717125503",
-    "@pagopa/io-wallet-oid4vp": "1.5.4-alpha-20260717125503",
-    "@pagopa/io-wallet-utils": "1.5.4-alpha-20260717125503",
+    "@pagopa/io-wallet-oauth2": "1.5.4",
+    "@pagopa/io-wallet-oid-federation": "1.5.4",
+    "@pagopa/io-wallet-oid4vci": "1.5.4",
+    "@pagopa/io-wallet-oid4vp": "1.5.4",
+    "@pagopa/io-wallet-utils": "1.5.4",
     "@sd-jwt/core": "^0.19.0",
     "@sd-jwt/crypto-nodejs": "^0.19.0",
     "@sd-jwt/jwt-status-list": "^0.19.0",

package/src/IoWallet.ts

@@ -1,11 +1,14 @@
-import { ioWalletApiByVersion, type IoWalletApi, type ItwVersion } from "./api";
+import { type IoWalletApi, ioWalletApiByVersion, type ItwVersion } from "./api";
 
-type DigitalWalletConfig = {
+// eslint-disable-next-line @typescript-eslint/no-empty-object-type, @typescript-eslint/no-unsafe-declaration-merging
+export interface IoWallet extends IoWalletApi {}
+
+interface DigitalWalletConfig {
   /**
    * IT-Wallet specifications version.
    */
   version: ItwVersion;
-};
+}
 
 /**
  * Instantiate `IoWallet` SDK for a specific IT-Wallet version.
@@ -16,9 +19,8 @@ type DigitalWalletConfig = {
  * const wallet = new IoWallet({ version: "1.0.0" })
  * wallet.Credential.Issuance.exampleMethod()
  */
+// eslint-disable-next-line @typescript-eslint/no-unsafe-declaration-merging
 export class IoWallet {
-  #version: ItwVersion;
-
   /**
    * Get the IT-Wallet specifications version bound to this instance.
    */
@@ -26,25 +28,25 @@ export class IoWallet {
     return this.#version;
   }
 
+  #version: ItwVersion;
+
   constructor({ version }: DigitalWalletConfig) {
     this.#version = version;
     const walletApi = ioWalletApiByVersion[version];
 
     if (!walletApi) {
       throw new Error(
-        `Invalid version provided: IoWallet does not implement ${version} specifications.`
+        `Invalid version provided: IoWallet does not implement ${version} specifications.`,
       );
     }
 
     // Dynamically add features implementations aligned with the specified version
     for (const feature of Object.keys(walletApi) as (keyof IoWalletApi)[]) {
       Object.defineProperty(this, feature, {
-        enumerable: true,
         configurable: false,
+        enumerable: true,
         value: walletApi[feature],
       });
     }
   }
 }
-
-export interface IoWallet extends IoWalletApi {}

package/src/api/index.ts

@@ -1,59 +1,58 @@
-import * as WalletInstance from "../wallet-instance";
-import * as WIA from "../wallet-instance-attestation";
-import * as WUA from "../wallet-unit-attestation";
-import * as Trust from "../trust";
 import * as CredentialIssuance from "../credential/issuance";
-import * as CredentialStatus from "../credential/status";
+import * as CredentialsOffer from "../credential/offer";
 import * as RemotePresentation from "../credential/presentation";
-import * as CredentialsCatalogue from "../credentials-catalogue";
+import * as CredentialStatus from "../credential/status";
 import * as Trustmark from "../credential/trustmark";
-import * as CredentialsOffer from "../credential/offer";
-
-export type ItwVersion = "1.0.0" | "1.3.3";
+import * as CredentialsCatalogue from "../credentials-catalogue";
+import * as KA from "../key-attestation";
+import * as Trust from "../trust";
+import * as WalletInstance from "../wallet-instance";
+import * as WIA from "../wallet-instance-attestation";
 
 /**
  * The Wallet public API.
  */
 export interface IoWalletApi {
-  WalletInstance: WalletInstance.WalletInstanceApi;
-  WalletInstanceAttestation: WIA.WalletInstanceAttestationApi;
-  WalletUnitAttestation: WUA.WalletUnitAttestationApi;
-  Trust: Trust.TrustApi;
   CredentialIssuance: CredentialIssuance.IssuanceApi;
+  CredentialsCatalogue: CredentialsCatalogue.CredentialsCatalogueApi;
+  CredentialsOffer: CredentialsOffer.OfferApi;
   CredentialStatus: CredentialStatus.CredentialStatusApi;
+  KeyAttestation: KA.KeyAttestationApi;
   RemotePresentation: RemotePresentation.RemotePresentationApi;
-  CredentialsCatalogue: CredentialsCatalogue.CredentialsCatalogueApi;
+  Trust: Trust.TrustApi;
   Trustmark: Trustmark.TrustmarkApi;
-  CredentialsOffer: CredentialsOffer.OfferApi;
+  WalletInstance: WalletInstance.WalletInstanceApi;
+  WalletInstanceAttestation: WIA.WalletInstanceAttestationApi;
 }
 
+export type ItwVersion = "1.0.0" | "1.4.6";
+
 /**
  * The Wallet API implementations grouped by IT-Wallet specifications version.
  */
 export const ioWalletApiByVersion: Record<ItwVersion, IoWalletApi> = {
   "1.0.0": {
-    WalletInstance: WalletInstance.V1_0_0,
-    WalletInstanceAttestation: WIA.V1_0_0,
-    WalletUnitAttestation: WUA.V1_0_0,
-    Trust: Trust.V1_0_0,
     CredentialIssuance: CredentialIssuance.V1_0_0,
+    CredentialsCatalogue: CredentialsCatalogue.V1_0_0,
+    CredentialsOffer: CredentialsOffer.V1_0_0,
     CredentialStatus: CredentialStatus.V1_0_0,
+    KeyAttestation: KA.V1_0_0,
     RemotePresentation: RemotePresentation.V1_0_0,
-    CredentialsCatalogue: CredentialsCatalogue.V1_0_0,
+    Trust: Trust.V1_0_0,
     Trustmark: Trustmark.V1_0_0,
-    CredentialsOffer: CredentialsOffer.V1_0_0,
+    WalletInstance: WalletInstance.V1_0_0,
+    WalletInstanceAttestation: WIA.V1_0_0,
   },
-  // TODO: replace v1.0.0 with v1.3.3 implementations
-  "1.3.3": {
-    WalletInstance: WalletInstance.V1_3_3,
-    WalletInstanceAttestation: WIA.V1_3_3,
-    WalletUnitAttestation: WUA.V1_3_3,
+  "1.4.6": {
+    CredentialIssuance: CredentialIssuance.V1_4_6,
+    CredentialsCatalogue: CredentialsCatalogue.V1_4_6,
+    CredentialsOffer: CredentialsOffer.V1_4_6,
+    CredentialStatus: CredentialStatus.V1_4_6,
+    KeyAttestation: KA.V1_4_6,
+    RemotePresentation: RemotePresentation.V1_4_6,
     Trust: Trust.V1_0_0,
-    CredentialIssuance: CredentialIssuance.V1_3_3,
-    CredentialStatus: CredentialStatus.V1_3_3,
-    RemotePresentation: RemotePresentation.V1_3_3,
-    CredentialsCatalogue: CredentialsCatalogue.V1_3_3,
-    Trustmark: Trustmark.V1_3_3,
-    CredentialsOffer: CredentialsOffer.V1_3_3,
+    Trustmark: Trustmark.V1_4_6,
+    WalletInstance: WalletInstance.V1_4_6,
+    WalletInstanceAttestation: WIA.V1_4_6,
   },
 };

package/src/client/index.ts

@@ -1,10 +1,10 @@
-import { parseRawHttpResponse } from "../utils/misc";
 import { WalletProviderResponseError } from "../utils/errors";
+import { parseRawHttpResponse } from "../utils/misc";
 import {
-  ProblemJson,
   createApiClient as createWalletProviderApiClient,
-  ApiClient as WalletProviderApiClient,
   type EndpointParameters,
+  ProblemJson,
+  ApiClient as WalletProviderApiClient,
 } from "./generated/wallet-provider";
 
 export type WalletProviderClient = WalletProviderApiClient;
@@ -32,24 +32,24 @@ const validateResponse = async (response: Response) => {
 };
 
 export const getWalletProviderClient = (context: {
-  walletProviderBaseUrl: string;
   appFetch?: GlobalFetch["fetch"];
+  walletProviderBaseUrl: string;
 }) => {
-  const { walletProviderBaseUrl, appFetch = fetch } = context;
+  const { appFetch = fetch, walletProviderBaseUrl } = context;
 
   return createWalletProviderApiClient(
     (method, url, params) =>
       appFetch(interpolateUrl(url, params), {
-        method,
         body: params?.body ? processBody(params.body) : undefined,
         headers: {
           "Content-Type": "application/json",
           ...params?.header,
         },
+        method,
       })
         .then(validateResponse)
         .then<RawHttpResponse>(parseRawHttpResponse),
-    walletProviderBaseUrl
+    walletProviderBaseUrl,
   );
 };
 
@@ -64,10 +64,11 @@ const processBody = (body: unknown): string =>
 export const interpolateUrl = (url: string, params?: EndpointParameters) => {
   if (!params?.path) return url;
 
-  for (const [key, value] of Object.entries(params.path)) {
-    if (typeof value === "string") {
-      url = url.replace(`{${key}}`, value);
-    }
-  }
-  return url;
+  return Object.entries(params.path).reduce(
+    (interpolatedUrl, [key, value]) =>
+      typeof value === "string"
+        ? interpolatedUrl.replace(`{${key}}`, value)
+        : interpolatedUrl,
+    url,
+  );
 };

package/src/credential/issuance/README.md

@@ -8,7 +8,7 @@ Credentials instead require a simpler authorization flow and they require other
 
 The supported credentials are defined in the entity configuration of the issuer which is evaluted and parsed in the `evaluateIssuerTrust` step. Available credentials are identified with a unique `credential_configuration_id`, that must be used when requesting authorization. The Authorization Server returns an array of **credential identifiers** that map to the `credential_configuration_id` provided: to obtain the credential, one of the credential identifiers (or all of them) must be requested to the credential endpoint.
 
-In the newest versions of IT-Wallet specifications it is mandatory that the cryptographic keys bound to each credential are stored in a WSCD and attested in a **Wallet Unit Attestation**, that must be sent to the Issuer when requesting a credential.
+The IT-Wallet specifications require that the cryptographic keys associated with each credential be stored in a WSCD and attested through a **Key Attestation**, which must be provided to the Issuer when requesting a credential.
 
 ## Sequence Diagram
 
@@ -22,7 +22,7 @@ graph TD;
     C4.1[completeEaaUserAuthorizationWithQueryMode]
     E4[completePidUserAuthorizationWithQueryMode]
     5[authorizeAccess]
-    6[WalletUnitAttestation.getAttestation]
+    6[KeyAttestation.getAttestation]
     7[obtainCredential]
     8[verifyAndParseCredential]
     credSel{Is credential an eID?}
@@ -102,7 +102,7 @@ The expected result from the authentication process is in `form_post.jwt` format
 
 ## Batch issuance
 
-To obtain a batch of credentials the Issuance module exposes a dedicated method—`obtainCredentialsBatch`—that returns a list of credentials of the same type with different cryptographic data. For this reason the caller must generate multiple keys and attest them in a single Wallet Unit Attestation.
+To obtain a batch of credentials the Issuance module exposes a dedicated method—`obtainCredentialsBatch`—that returns a list of credentials of the same type with different cryptographic data. For this reason the caller must generate multiple keys and attest them in a single Key Attestation.
 
 ## Examples
 
@@ -145,11 +145,11 @@ const walletInstanceAttestation =
   );
 
 const credentialKeyTag = uuidv4().toString();
-let walletUnitAttestation: string | undefined;
+let keyAttestation: string | undefined;
 
-// Obtains a Wallet Unit Attestation if supported
-if (wallet.WalletUnitAttestation.isSupported) {
-  walletUnitAttestation = await wallet.WalletUnitAttestation.getAttestation(); // See the Wallet Unit Attestation README for more details
+// Obtains a Key Attestation if supported
+if (wallet.KeyAttestation.isSupported) {
+  keyAttestation = await wallet.KeyAttestation.getAttestation(); // See the Key Attestation README for more details
 } else {
   await generate(credentialKeyTag); // Let's assume this function generates a new hardware-backed key pair
 }
@@ -248,7 +248,7 @@ const { credential, format } = await wallet.CredentialIssuance.obtainCredential(
   {
     credentialCryptoContext,
     dPopCryptoContext,
-    walletUnitAttestation, // Required in issuance v1.3
+    keyAttestation, // Required in issuance v1.4
     appFetch,
   }
 );
@@ -410,7 +410,7 @@ const { credential, format } = await wallet.CredentialIssuance.obtainCredential(
   {
     credentialCryptoContext,
     dPopCryptoContext,
-    walletUnitAttestation, // Required in issuance v1.3
+    keyAttestation, // Required in issuance v1.4
     appFetch,
   }
 );

package/src/credential/issuance/api/01-evaluate-issuer-trust.ts

@@ -15,6 +15,6 @@ export interface EvaluateIssuerTrustApi {
    */
   evaluateIssuerTrust(
     issuerUrl: string,
-    ctx?: { appFetch?: GlobalFetch["fetch"]; authorizationServer?: string }
+    ctx?: { appFetch?: GlobalFetch["fetch"]; authorizationServer?: string },
   ): Promise<{ issuerConf: IssuerConfig }>;
 }

package/src/credential/issuance/api/02-start-user-authorization.ts

@@ -1,4 +1,5 @@
 import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+
 import type { AuthorizationDetail } from "../../../utils/par";
 import type { IssuerConfig } from "./IssuerConfig";
 
@@ -35,21 +36,21 @@ export interface StartUserAuthorizationApi {
     issuerConf: IssuerConfig,
     credentialIds: string[],
     proof:
-      | { proofType: "none" }
-      | { proofType: "mrtd-pop"; idpHinting: string },
+      | { idpHinting: string; proofType: "mrtd-pop" }
+      | { proofType: "none" },
     context: {
-      wiaCryptoContext: CryptoContext;
-      walletInstanceAttestation: string;
-      redirectUri: string;
       appFetch?: GlobalFetch["fetch"];
-      scope?: string;
       issuerState?: string;
-    }
+      redirectUri: string;
+      scope?: string;
+      walletInstanceAttestation: string;
+      wiaCryptoContext: CryptoContext;
+    },
   ): Promise<{
-    issuerRequestUri: string;
     clientId: string;
     codeVerifier: string;
     credentialDefinition: AuthorizationDetail[];
+    issuerRequestUri: string;
     responseMode?: string;
   }>;
 }

package/src/credential/issuance/api/03-complete-user-authorization.ts

@@ -1,51 +1,34 @@
 import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+
+import type { RequestObject } from "../../../credential/presentation/api";
+import type { EvaluateDcqlQueryApi } from "../../../credential/presentation/api/06-evaluate-dcql-query";
 import type {
   AuthorizationChallengeResult,
   AuthorizationResult,
 } from "../../../utils/auth";
-import type { RequestObject } from "../../../credential/presentation/api";
-import type { EvaluateDcqlQueryApi } from "../../../credential/presentation/api/06-evaluate-dcql-query";
 import type { Out } from "../../../utils/misc";
 import type { IssuerConfig } from "./IssuerConfig";
 
-export type EvaluatedDcqlQuery = Out<EvaluateDcqlQueryApi["evaluateDcqlQuery"]>;
-
 export interface CompleteUserAuthorizationApi {
   /**
-   * WARNING: This function must be called after {@link startUserAuthorization}. The next step is evaluating the returned request object's DCQL query with {@link EvaluateDcqlQueryApi.evaluateDcqlQuery}.
+   * WARNING: This function must be called after {@link startUserAuthorization}.
    *
-   * The interface of the phase to complete User authorization via presentation of existing credentials when the response mode is "form_post.jwt".
-   * It is used as a first step to complete the user authorization by obtaining the requested credential to be presented from the authorization server.
-   * The information is obtained by performing a GET request to the authorization endpoint with request_uri and client_id parameters.
+   * The generated authUrl must be used to open a browser or webview capable of catching the redirectSchema to perform a get request to the authorization endpoint.
+   * Builds the authorization URL to which the end user should be redirected to continue the authentication flow.
    * @since 1.0.0
    *
    * @param issuerRequestUri the URI of the issuer where the request is sent
    * @param clientId Identifies the current client across all the requests of the issuing flow returned by {@link startUserAuthorization}
    * @param issuerConf The issuer configuration returned by {@link evaluateIssuerTrust}
-   * @param appFetch (optional) fetch api implementation. Default: built-in fetch
-   * @returns the request object which contains the credential to be presented in order to obtain the requested credential
-   * @throws {ValidationFailed} if an error while validating the response
+   * @param idpHint Unique identifier of the IDP selected by the user (optional)
+   * @returns An object containing the authorization URL
    */
-  getRequestedCredentialToBePresented(
+  buildAuthorizationUrl(
     issuerRequestUri: string,
     clientId: string,
     issuerConf: IssuerConfig,
-    appFetch?: GlobalFetch["fetch"]
-  ): Promise<RequestObject>;
-
-  /**
-   * WARNING: This function must be called after obtaining the authorization redirect URL from the webviews (SPID and CIE L3) or browser for CIEID.
-   *
-   * Complete User authorization via strong identification when the response mode is "query" and the request credential is a PersonIdentificationData.
-   * This function parses the authorization redirect URL to extract the authorization response.
-   * @since 1.0.0
-   *
-   * @param authRedirectUrl The URL to which the end user should be redirected to start the authentication flow
-   * @returns the authorization response which contains code, state and iss
-   */
-  completePidUserAuthorizationWithQueryMode(
-    authRedirectUrl: string
-  ): Promise<AuthorizationResult>;
+    idpHint?: string,
+  ): Promise<{ authUrl: string }>;
 
   /**
    * Complete user authorization when the response mode is "query" and the requested credential is an Electronic Attestation of Attributes (EAA).
@@ -68,7 +51,21 @@ export interface CompleteUserAuthorizationApi {
       appFetch?: GlobalFetch["fetch"];
       /** Function to fetch the final redirect uri; it allows full control on how redirects are handled. If not provided, `appFetch` is used. */
       fetchFinalRedirectUri?: (url: string) => Promise<string | undefined>;
-    }
+    },
+  ): Promise<AuthorizationResult>;
+
+  /**
+   * WARNING: This function must be called after obtaining the authorization redirect URL from the webviews (SPID and CIE L3) or browser for CIEID.
+   *
+   * Complete User authorization via strong identification when the response mode is "query" and the request credential is a PersonIdentificationData.
+   * This function parses the authorization redirect URL to extract the authorization response.
+   * @since 1.0.0
+   *
+   * @param authRedirectUrl The URL to which the end user should be redirected to start the authentication flow
+   * @returns the authorization response which contains code, state and iss
+   */
+  completePidUserAuthorizationWithQueryMode(
+    authRedirectUrl: string,
   ): Promise<AuthorizationResult>;
 
   /**
@@ -90,9 +87,9 @@ export interface CompleteUserAuthorizationApi {
     issuerConf: IssuerConfig,
     evaluatedDcqlQuery: EvaluatedDcqlQuery,
     context: {
-      wiaCryptoContext: CryptoContext;
       appFetch?: GlobalFetch["fetch"];
-    }
+      wiaCryptoContext: CryptoContext;
+    },
   ): Promise<AuthorizationResult>;
 
   /**
@@ -104,26 +101,30 @@ export interface CompleteUserAuthorizationApi {
    * @returns the authorization response which contains the challenge
    */
   continueUserAuthorizationWithMRTDPoPChallenge(
-    authRedirectUrl: string
+    authRedirectUrl: string,
   ): Promise<AuthorizationChallengeResult>;
 
   /**
-   * WARNING: This function must be called after {@link startUserAuthorization}.
+   * WARNING: This function must be called after {@link startUserAuthorization}. The next step is evaluating the returned request object's DCQL query with {@link EvaluateDcqlQueryApi.evaluateDcqlQuery}.
    *
-   * The generated authUrl must be used to open a browser or webview capable of catching the redirectSchema to perform a get request to the authorization endpoint.
-   * Builds the authorization URL to which the end user should be redirected to continue the authentication flow.
+   * The interface of the phase to complete User authorization via presentation of existing credentials when the response mode is "form_post.jwt".
+   * It is used as a first step to complete the user authorization by obtaining the requested credential to be presented from the authorization server.
+   * The information is obtained by performing a GET request to the authorization endpoint with request_uri and client_id parameters.
    * @since 1.0.0
    *
    * @param issuerRequestUri the URI of the issuer where the request is sent
    * @param clientId Identifies the current client across all the requests of the issuing flow returned by {@link startUserAuthorization}
    * @param issuerConf The issuer configuration returned by {@link evaluateIssuerTrust}
-   * @param idpHint Unique identifier of the IDP selected by the user (optional)
-   * @returns An object containing the authorization URL
+   * @param appFetch (optional) fetch api implementation. Default: built-in fetch
+   * @returns the request object which contains the credential to be presented in order to obtain the requested credential
+   * @throws {ValidationFailed} if an error while validating the response
    */
-  buildAuthorizationUrl(
+  getRequestedCredentialToBePresented(
     issuerRequestUri: string,
     clientId: string,
     issuerConf: IssuerConfig,
-    idpHint?: string
-  ): Promise<{ authUrl: string }>;
+    appFetch?: GlobalFetch["fetch"],
+  ): Promise<RequestObject>;
 }
+
+export type EvaluatedDcqlQuery = Out<EvaluateDcqlQueryApi["evaluateDcqlQuery"]>;

package/src/credential/issuance/api/04-authorize-access.ts

@@ -1,4 +1,5 @@
 import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+
 import type { IssuerConfig } from "./IssuerConfig";
 import type { TokenResponse } from "./types";
 
@@ -28,10 +29,10 @@ export interface AuthorizeAccessApi {
     redirectUri: string,
     codeVerifier: string,
     context: {
+      appFetch?: GlobalFetch["fetch"];
+      dPopCryptoContext: CryptoContext;
       walletInstanceAttestation: string;
       wiaCryptoContext: CryptoContext;
-      dPopCryptoContext: CryptoContext;
-      appFetch?: GlobalFetch["fetch"];
-    }
+    },
   ): Promise<{ accessToken: TokenResponse }>;
 }

package/src/credential/issuance/api/05-obtain-credential.ts

@@ -1,7 +1,8 @@
 import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+
 import type { Out } from "../../../utils/misc";
-import type { IssuerConfig } from "./IssuerConfig";
 import type { AuthorizeAccessApi } from "./04-authorize-access";
+import type { IssuerConfig } from "./IssuerConfig";
 import type { CredentialFormat } from "./types";
 
 export interface ObtainCredentialApi {
@@ -19,7 +20,7 @@ export interface ObtainCredentialApi {
    * @param credentialDefinition The credential definition of the credential to be obtained returned by {@link authorizeAccess}
    * @param context.credentialCryptoContext The crypto context used to obtain the credential
    * @param context.dPopCryptoContext The DPoP crypto context
-   * @param context.walletUnitAttestation (optional) The Wallet Unit Attestation JWT bound to the provided credentialCryptoContext
+   * @param context.keyAttestation (optional) The Key Attestation JWT bound to the provided credentialCryptoContext
    * @param context.appFetch (optional) fetch api implementation. Default: built-in fetch
    * @returns The credential response containing the credential
    */
@@ -32,11 +33,11 @@ export interface ObtainCredentialApi {
       credential_identifier?: string;
     },
     context: {
-      dPopCryptoContext: CryptoContext;
-      credentialCryptoContext: CryptoContext;
-      walletUnitAttestation?: string;
       appFetch?: GlobalFetch["fetch"];
-    }
+      credentialCryptoContext: CryptoContext;
+      dPopCryptoContext: CryptoContext;
+      keyAttestation?: string;
+    },
   ): Promise<{
     credential: string;
     format: CredentialFormat;
@@ -59,10 +60,10 @@ export interface ObtainCredentialApi {
       credential_identifier: string;
     },
     context: {
-      dPopCryptoContext: CryptoContext;
-      credentialCryptoContexts: CryptoContext[];
-      walletUnitAttestation?: string;
       appFetch?: GlobalFetch["fetch"];
-    }
+      credentialCryptoContexts: CryptoContext[];
+      dPopCryptoContext: CryptoContext;
+      keyAttestation?: string;
+    },
   ): Promise<{ credential: string; format: CredentialFormat }[]>;
 }