@pagopa/io-react-native-wallet 3.6.3 → 3.7.0

package/src/credential/status/v1.0.0/02-verify-and-parse-status-assertion.ts

@@ -1,20 +1,22 @@
+import { decode as decodeJwt, verify } from "@pagopa/io-react-native-jwt";
+
+import type { StatusAssertionApi } from "../api/status-assertion";
+
+import { extractJwkFromCredential } from "../../../utils/credentials";
 import {
   IoWalletError,
   IssuerResponseError,
   IssuerResponseErrorCodes,
 } from "../../../utils/errors";
-import { decode as decodeJwt, verify } from "@pagopa/io-react-native-jwt";
+import { isSameThumbprint } from "../../../utils/jwk";
+import { Logger, LogLevel } from "../../../utils/logging";
+import { mapToParsedStatusAssertion } from "./mappers";
 import {
   type InvalidStatusErrorReason,
   ParsedStatusAssertionErrorJwt,
   ParsedStatusAssertionResponse,
   StatusType,
 } from "./types";
-import { Logger, LogLevel } from "../../../utils/logging";
-import { extractJwkFromCredential } from "../../../utils/credentials";
-import { isSameThumbprint } from "../../../utils/jwk";
-import type { StatusAssertionApi } from "../api/status-assertion";
-import { mapToParsedStatusAssertion } from "./mappers";
 
 export const verifyAndParseStatusAssertion: StatusAssertionApi["verifyAndParse"] =
   async (issuerConf, rawStatusAssertion, credential, format) => {
@@ -30,7 +32,7 @@ export const verifyAndParseStatusAssertion: StatusAssertionApi["verifyAndParse"]
 
     Logger.log(
       LogLevel.DEBUG,
-      `Parsed status assertion: ${JSON.stringify(parsedStatusAssertion)}`
+      `Parsed status assertion: ${JSON.stringify(parsedStatusAssertion)}`,
     );
 
     // Errors are transmitted in the JWT and use a 200 HTTP status code
@@ -38,8 +40,8 @@ export const verifyAndParseStatusAssertion: StatusAssertionApi["verifyAndParse"]
       throw new IssuerResponseError({
         code: IssuerResponseErrorCodes.CredentialInvalidStatus,
         message: "The status assertion contains an error",
-        statusCode: 200,
         reason: buildErrorReason(parsedStatusAssertion),
+        statusCode: 200,
       });
     }
 
@@ -56,8 +58,8 @@ export const verifyAndParseStatusAssertion: StatusAssertionApi["verifyAndParse"]
       throw new IssuerResponseError({
         code: IssuerResponseErrorCodes.CredentialInvalidStatus,
         message: "Invalid status found for the given credential",
-        statusCode: 200,
         reason: buildErrorReason(parsedStatusAssertion),
+        statusCode: 200,
       });
     }
 
@@ -67,7 +69,7 @@ export const verifyAndParseStatusAssertion: StatusAssertionApi["verifyAndParse"]
   };
 
 const isStatusAssertionError = (
-  assertion: ParsedStatusAssertionResponse
+  assertion: ParsedStatusAssertionResponse,
 ): assertion is ParsedStatusAssertionErrorJwt =>
   assertion.header.typ === "status-assertion-error+jwt";
 
@@ -78,10 +80,18 @@ const isStatusAssertionError = (
  */
 const buildErrorReason = ({
   payload,
-}: ParsedStatusAssertionResponse): InvalidStatusErrorReason =>
-  "error" in payload
-    ? payload
-    : {
-        error: payload.credential_status_detail!.state,
-        error_description: payload.credential_status_detail!.description,
-      };
+}: ParsedStatusAssertionResponse): InvalidStatusErrorReason => {
+  if ("error" in payload) return payload;
+
+  const { credential_status_detail } = payload;
+  if (!credential_status_detail) {
+    throw new IoWalletError(
+      "Missing credential_status_detail in an invalid status assertion",
+    );
+  }
+
+  return {
+    error: credential_status_detail.state,
+    error_description: credential_status_detail.description,
+  };
+};

package/src/credential/status/v1.0.0/index.ts

@@ -1,11 +1,12 @@
 import type { CredentialStatusApi } from "../api";
+
 import { getStatusAssertion } from "./01-status-assertion";
 import { verifyAndParseStatusAssertion } from "./02-verify-and-parse-status-assertion";
 
 export const CredentialStatus: CredentialStatusApi = {
   statusAssertion: {
-    isSupported: true,
     get: getStatusAssertion,
+    isSupported: true,
     verifyAndParse: verifyAndParseStatusAssertion,
   },
   statusList: {

package/src/credential/status/v1.0.0/mappers.ts

@@ -1,7 +1,8 @@
-import { createMapper } from "../../../utils/mappers";
 import type { ParsedStatusAssertion } from "../api/types";
 import type { ParsedStatusAssertionJwt } from "./types";
 
+import { createMapper } from "../../../utils/mappers";
+
 export const mapToParsedStatusAssertion = createMapper<
   ParsedStatusAssertionJwt,
   ParsedStatusAssertion

package/src/credential/status/v1.0.0/types.ts

@@ -1,7 +1,8 @@
-import { UnixTime } from "../../../utils/zod";
-import { JWK } from "../../../utils/jwk";
 import * as z from "zod";
 
+import { JWK } from "../../../utils/jwk";
+import { UnixTime } from "../../../utils/zod";
+
 /**
  * Shape from parsing a status assertion response in case of 201.
  */
@@ -9,39 +10,39 @@ export const StatusAssertionResponse = z.object({
   status_assertion_responses: z.array(z.string()),
 });
 
+export type ParsedStatusAssertionJwt = z.infer<typeof ParsedStatusAssertionJwt>;
+
 /**
  * Type from parsing a status assertion response in case of 201.
  * Inferred from {@link StatusAssertionResponse}.
  */
 export type StatusAssertionResponse = z.infer<typeof StatusAssertionResponse>;
 
-export type ParsedStatusAssertionJwt = z.infer<typeof ParsedStatusAssertionJwt>;
-
 /**
  * Shape for parsing a successful status assertion in a JWT.
  */
 export const ParsedStatusAssertionJwt = z.object({
   header: z.object({
-    typ: z.literal("status-assertion+jwt"),
     alg: z.string(),
     kid: z.string().optional(),
+    typ: z.literal("status-assertion+jwt"),
   }),
   payload: z.object({
-    iss: z.string(),
-    credential_status_type: z.string(),
+    cnf: z.object({
+      jwk: JWK,
+    }),
+    credential_hash: z.string(),
+    credential_hash_alg: z.string(),
     credential_status_detail: z
       .object({
-        state: z.string(),
         description: z.string(),
+        state: z.string(),
       })
       .optional(),
-    credential_hash_alg: z.string(),
-    credential_hash: z.string(),
-    cnf: z.object({
-      jwk: JWK,
-    }),
+    credential_status_type: z.string(),
     exp: UnixTime,
     iat: UnixTime,
+    iss: z.string(),
   }),
 });
 
@@ -55,13 +56,13 @@ export type ParsedStatusAssertionErrorJwt = z.infer<
  */
 export const ParsedStatusAssertionErrorJwt = z.object({
   header: z.object({
-    typ: z.literal("status-assertion-error+jwt"),
     alg: z.string(),
     kid: z.string().optional(),
+    typ: z.literal("status-assertion-error+jwt"),
   }),
   payload: z.object({
-    credential_hash_alg: z.string(),
     credential_hash: z.string(),
+    credential_hash_alg: z.string(),
     error: z.string(),
     error_description: z.string(),
   }),
@@ -79,9 +80,9 @@ export const ParsedStatusAssertionResponse = z.union([
 ]);
 
 export enum StatusType {
-  VALID = "0x00",
   INVALID = "0x01",
   SUSPENDED = "0x02",
+  VALID = "0x00",
 }
 
 export type InvalidStatusErrorReason = {

package/src/credential/status/{v1.3.3 → v1.4.6}/01-status-list.ts

@@ -4,13 +4,15 @@ import {
   getStatusListFromJWT,
   type StatusListEntry,
 } from "@sd-jwt/jwt-status-list";
+
+import type { StatusListApi } from "../api/status-list";
+
 import { IoWalletError } from "../../../utils/errors";
 import { hasStatusOrThrow } from "../../../utils/misc";
-import type { StatusListApi } from "../api/status-list";
 
 export const getStatusListEntry: StatusListApi["getStatusListEntry"] = async (
   credential,
-  format
+  format,
 ) => {
   let statusListEntry: StatusListEntry | undefined;
 
@@ -34,7 +36,7 @@ export const getStatusListEntry: StatusListApi["getStatusListEntry"] = async (
 const fetchStatusList = (
   uri: string,
   appFetch: GlobalFetch["fetch"],
-  options: { cacheDisabled?: boolean } = {}
+  options: { cacheDisabled?: boolean } = {},
 ) =>
   appFetch(uri, {
     headers: {
@@ -47,7 +49,7 @@ const fetchStatusList = (
 
 export const getStatusListByUri: StatusListApi["getByUri"] = async (
   uri,
-  { appFetch = fetch } = {}
+  { appFetch = fetch } = {},
 ) => {
   // When the HTTP response includes cache headers, fetch will return a cached response and the JWT might be expired
   let statusList = await fetchStatusList(uri, appFetch);
@@ -67,9 +69,9 @@ export const getStatusListByUri: StatusListApi["getByUri"] = async (
 export const getStatusList: StatusListApi["get"] = async (
   credential,
   format,
-  context
+  context,
 ) => {
-  const { uri, idx } = await getStatusListEntry(credential, format);
+  const { idx, uri } = await getStatusListEntry(credential, format);
   const statusList = await getStatusListByUri(uri, context);
-  return { uri, idx, statusList, format: "jwt" };
+  return { format: "jwt", idx, statusList, uri };
 };

package/src/credential/status/{v1.3.3 → v1.4.6}/02-verify-and-parse-status-list.ts

@@ -1,10 +1,12 @@
 import { decode as decodeJwt, verify } from "@pagopa/io-react-native-jwt";
+
 import type { StatusListApi } from "../api/status-list";
+
 import { StatusList } from "../api/types";
 
 export const verifyAndParseStatusList: StatusListApi["verifyAndParse"] = async (
   keys,
-  statusList
+  statusList,
 ) => {
   await verify(statusList, keys);
   return StatusList.parse(decodeJwt(statusList).payload);

package/src/credential/status/{v1.3.3 → v1.4.6}/03-get-status.ts

@@ -1,17 +1,19 @@
 import { StatusList as JwtStatusList } from "@sd-jwt/jwt-status-list";
-import { IoWalletError } from "../../../utils/errors";
+
 import type { StatusListApi } from "../api/status-list";
 
+import { IoWalletError } from "../../../utils/errors";
+
 /**
  * Mapping of status bits to their corresponding meaning as defined in the specification.
- * @see https://italia.github.io/eid-wallet-it-docs/releases/1.3.3/en/credential-revocation.html#token-status-lists
+ * @see https://italia.github.io/eid-wallet-it-docs/releases/1.4.6/en/credential-revocation.html#token-status-lists
  */
 const CredentialStatusMap = {
   0x00: "VALID",
   0x01: "INVALID",
   0x02: "SUSPENDED",
   0x03: "UPDATE",
-  0x0b: "ATTRIBUTE_UPDATE",
+  0x0f: "ATTRIBUTE_UPDATE",
 } as const;
 
 type CredentialStatusBit = keyof typeof CredentialStatusMap;
@@ -22,19 +24,19 @@ const formatStatusBit = (statusBit: number) =>
 export const getStatus: StatusListApi["getStatus"] = (statusList, idx) => {
   const decodedStatusList = JwtStatusList.decompressStatusList(
     statusList.lst,
-    statusList.bits
+    statusList.bits,
   );
   const statusBit = decodedStatusList.getStatus(idx) as CredentialStatusBit;
   const status = CredentialStatusMap[statusBit];
 
   if (!status) {
     throw new IoWalletError(
-      `Unsupported credential status bit: ${formatStatusBit(statusBit)}`
+      `Unsupported credential status bit: ${formatStatusBit(statusBit)}`,
     );
   }
 
   return {
-    status,
     rawStatus: formatStatusBit(statusBit),
+    status,
   };
 };

package/src/credential/status/{v1.3.3 → v1.4.6}/index.ts

@@ -1,4 +1,5 @@
 import type { CredentialStatusApi } from "../api";
+
 import {
   getStatusList,
   getStatusListByUri,
@@ -12,11 +13,11 @@ export const CredentialStatus: CredentialStatusApi = {
     isSupported: false,
   },
   statusList: {
-    isSupported: true,
     get: getStatusList,
     getByUri: getStatusListByUri,
-    verifyAndParse: verifyAndParseStatusList,
     getStatus,
     getStatusListEntry,
+    isSupported: true,
+    verifyAndParse: verifyAndParseStatusList,
   },
 };

package/src/credential/trustmark/api/index.ts

@@ -1,14 +1,6 @@
 import type { CryptoContext } from "@pagopa/io-react-native-jwt";
 
 export type GetCredentialTrustmarkJwt = (params: {
-  /**
-   * The Wallet Instance's attestation
-   */
-  walletInstanceAttestation: string;
-  /**
-   * The Wallet Instance's crypto context associated with the walletInstanceAttestation parameter
-   */
-  wiaCryptoContext: CryptoContext;
   /**
    * The type of credential for which the trustmark is generated
    */
@@ -23,15 +15,23 @@ export type GetCredentialTrustmarkJwt = (params: {
    * If a string is provided, it is interpreted as a time span and added to the current timestamp.
    */
   expirationTime?: number | string;
-}) => Promise<{
   /**
-   * The signed JWT
+   * The Wallet Instance's attestation
    */
-  jwt: string;
+  walletInstanceAttestation: string;
+  /**
+   * The Wallet Instance's crypto context associated with the walletInstanceAttestation parameter
+   */
+  wiaCryptoContext: CryptoContext;
+}) => Promise<{
   /**
    * The expiration time of the JWT in seconds
    */
   expirationTime: number;
+  /**
+   * The signed JWT
+   */
+  jwt: string;
 }>;
 
 export interface TrustmarkApi {

package/src/credential/trustmark/index.ts

@@ -1,3 +1,3 @@
 export type * from "./api";
 export { Trustmark as V1_0_0 } from "./v1.0.0";
-export { Trustmark as V1_3_3 } from "./v1.3.3";
+export { Trustmark as V1_4_6 } from "./v1.4.6";

package/src/credential/trustmark/v1.0.0/get-credential-trustmark.ts

@@ -1,32 +1,33 @@
 import {
+  decode as decodeJwt,
   SignJWT,
   thumbprint,
-  decode as decodeJwt,
 } from "@pagopa/io-react-native-jwt";
-import { type TrustmarkApi as Api } from "../api";
-import * as WalletInstanceAttestation from "../../../wallet-instance-attestation/v1.0.0/utils";
+
 import { IoWalletError } from "../../../utils/errors";
+import { Logger, LogLevel } from "../../../utils/logging";
 import { obfuscateString } from "../../../utils/string";
-import { LogLevel, Logger } from "../../../utils/logging";
+import * as WalletInstanceAttestation from "../../../wallet-instance-attestation/v1.0.0/utils";
+import { type TrustmarkApi as Api } from "../api";
 
 export const getCredentialTrustmark: Api["getCredentialTrustmark"] = async ({
-  walletInstanceAttestation,
-  wiaCryptoContext,
   credentialType,
   docNumber,
   expirationTime = "2m",
+  walletInstanceAttestation,
+  wiaCryptoContext,
 }) => {
   /**
    * Check that the public key used to sign the trustmark is the one used for the WIA
    */
   const holderBindingKey = await wiaCryptoContext.getPublicKey();
   const decodedWia = WalletInstanceAttestation.decode(
-    walletInstanceAttestation
+    walletInstanceAttestation,
   );
 
   Logger.log(
     LogLevel.DEBUG,
-    `Decoded wia ${JSON.stringify(decodedWia.payload)} with holder binding key ${JSON.stringify(holderBindingKey)}`
+    `Decoded wia ${JSON.stringify(decodedWia.payload)} with holder binding key ${JSON.stringify(holderBindingKey)}`,
   );
 
   /**
@@ -35,7 +36,7 @@ export const getCredentialTrustmark: Api["getCredentialTrustmark"] = async ({
   if (decodedWia.payload.exp * 1000 < Date.now()) {
     Logger.log(
       LogLevel.ERROR,
-      `Wallet Instance Attestation expired with exp: ${decodedWia.payload.exp}`
+      `Wallet Instance Attestation expired with exp: ${decodedWia.payload.exp}`,
     );
     throw new IoWalletError("Wallet Instance Attestation expired");
   }
@@ -49,16 +50,16 @@ export const getCredentialTrustmark: Api["getCredentialTrustmark"] = async ({
   if (wiaThumbprint !== cryptoContextThumbprint) {
     Logger.log(
       LogLevel.ERROR,
-      `Failed to verify holder binding for status attestation, expected thumbprint: ${cryptoContextThumbprint}, got: ${wiaThumbprint}`
+      `Failed to verify holder binding for status attestation, expected thumbprint: ${cryptoContextThumbprint}, got: ${wiaThumbprint}`,
     );
     throw new IoWalletError(
-      `Failed to verify holder binding for status attestation, expected thumbprint: ${cryptoContextThumbprint}, got: ${wiaThumbprint}`
+      `Failed to verify holder binding for status attestation, expected thumbprint: ${cryptoContextThumbprint}, got: ${wiaThumbprint}`,
     );
   }
 
   Logger.log(
     LogLevel.DEBUG,
-    `Wia thumbprint: ${wiaThumbprint} CryptoContext thumbprint: ${cryptoContextThumbprint}`
+    `Wia thumbprint: ${wiaThumbprint} CryptoContext thumbprint: ${cryptoContextThumbprint}`,
   );
 
   /**
@@ -83,7 +84,7 @@ export const getCredentialTrustmark: Api["getCredentialTrustmark"] = async ({
   const decodedTrustmark = decodeJwt(signedTrustmarkJwt);
 
   return {
-    jwt: signedTrustmarkJwt,
     expirationTime: decodedTrustmark.payload.exp ?? 0,
+    jwt: signedTrustmarkJwt,
   };
 };

package/src/credential/trustmark/v1.0.0/index.ts

@@ -1,6 +1,7 @@
-import { getCredentialTrustmark } from "./get-credential-trustmark";
 import type { TrustmarkApi } from "../api";
 
+import { getCredentialTrustmark } from "./get-credential-trustmark";
+
 export const Trustmark: TrustmarkApi = {
   getCredentialTrustmark,
 };

package/src/credential/trustmark/{v1.3.3 → v1.4.6}/get-credential-trustmark.ts

@@ -3,5 +3,5 @@ import { type TrustmarkApi as Api } from "../api";
 
 export const getCredentialTrustmark: Api["getCredentialTrustmark"] =
   async () => {
-    throw new UnimplementedFeatureError("getCredentialTrustmark", "1.3.3");
+    throw new UnimplementedFeatureError("getCredentialTrustmark", "1.4.6");
   };

package/src/credential/trustmark/{v1.3.3 → v1.4.6}/index.ts

@@ -1,6 +1,7 @@
-import { getCredentialTrustmark } from "./get-credential-trustmark";
 import type { TrustmarkApi } from "../api";
 
+import { getCredentialTrustmark } from "./get-credential-trustmark";
+
 export const Trustmark: TrustmarkApi = {
   getCredentialTrustmark,
 };