@pagopa/io-react-native-wallet 3.7.4 → 3.8.3

package/lib/typescript/module/credential/issuance/api/04-authorize-access.d.ts

@@ -0,0 +1,33 @@
+import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+import type { IssuerConfig } from "./IssuerConfig.js";
+import type { TokenResponse } from "./types.js";
+export interface AuthorizeAccessApi {
+    /**
+     * Creates and sends the DPoP Proof JWT to be presented with the authorization code to the /token endpoint of the authorization server
+     * for requesting the issuance of an access token bound to the public key of the Wallet Instance contained within the DPoP.
+     * This enables the Wallet Instance to request a digital credential.
+     * The DPoP Proof JWT is generated according to the section 4.3 of the DPoP RFC 9449 specification.
+     * @since 1.0.0
+     *
+     * @param issuerConf The issuer configuration returned by {@link evaluateIssuerTrust}
+     * @param code The authorization code returned by {@link completeUserAuthorizationWithQueryMode} or {@link completeUserAuthorizationWithFormPost}
+     * @param redirectUri The redirect URI which is the custom URL scheme that the Wallet Instance is registered to handle
+     * @param codeVerifier The code verifier returned by {@link startUserAuthorization}
+     * @param context.walletInstanceAttestation The Wallet Instance's attestation
+     * @param context.wiaCryptoContext The Wallet Instance's crypto context
+     * @param context.dPopCryptoContext The DPoP crypto context
+     * @param context.appFetch (optional) fetch api implementation. Default: built-in fetch
+     * @return The token response containing the access token along with the token request signed with DPoP which has to be used in the {@link obtainCredential} step.
+     * @throws {ValidationFailed} if an error occurs while parsing the token response
+     * @throws {IssuerResponseError} with a specific code for more context
+     */
+    authorizeAccess(issuerConf: IssuerConfig, code: string, redirectUri: string, codeVerifier: string, context: {
+        appFetch?: typeof fetch;
+        dPopCryptoContext: CryptoContext;
+        walletInstanceAttestation: string;
+        wiaCryptoContext: CryptoContext;
+    }): Promise<{
+        accessToken: TokenResponse;
+    }>;
+}
+//# sourceMappingURL=04-authorize-access.d.ts.map

package/lib/typescript/module/credential/issuance/api/04-authorize-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"04-authorize-access.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/api/04-authorize-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAS,CAAC;AAE7C,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,eAAe,CACb,UAAU,EAAE,YAAY,EACxB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;QACP,QAAQ,CAAC,EAAE,OAAO,KAAK,CAAC;QACxB,iBAAiB,EAAE,aAAa,CAAC;QACjC,yBAAyB,EAAE,MAAM,CAAC;QAClC,gBAAgB,EAAE,aAAa,CAAC;KACjC,GACA,OAAO,CAAC;QAAE,WAAW,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;CAC5C"}

package/lib/typescript/module/credential/issuance/api/05-obtain-credential.d.ts

@@ -0,0 +1,58 @@
+import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+import type { Out } from "../../../utils/misc.js";
+import type { AuthorizeAccessApi } from "./04-authorize-access.js";
+import type { IssuerConfig } from "./IssuerConfig.js";
+import type { CredentialFormat } from "./types.js";
+export interface ObtainCredentialApi {
+    /**
+     * Obtains the credential from the issuer.
+     * The key pair of the credentialCryptoContext is used for Openid4vci proof JWT to be presented with the Access Token and the DPoP Proof JWT at the Credential Endpoint
+     * of the Credential Issuer to request the issuance of a credential linked to the public key contained in the JWT proof.
+     * The Openid4vci proof JWT incapsulates the nonce extracted from the token response from the {@link authorizeAccess} step.
+     * The credential request is sent to the Credential Endpoint of the Credential Issuer via HTTP POST with the type of the credential, its format, the access token and the JWT proof.
+     * @since 1.0.0
+     *
+     * @param issuerConf The issuer configuration returned by {@link evaluateIssuerTrust}
+     * @param accessToken The access token response returned by {@link authorizeAccess}
+     * @param clientId The client id returned by {@link startUserAuthorization}
+     * @param credentialDefinition The credential definition of the credential to be obtained returned by {@link authorizeAccess}
+     * @param context.credentialCryptoContext The crypto context used to obtain the credential
+     * @param context.dPopCryptoContext The DPoP crypto context
+     * @param context.keyAttestation (optional) The Key Attestation JWT bound to the provided credentialCryptoContext
+     * @param context.appFetch (optional) fetch api implementation. Default: built-in fetch
+     * @returns The credential response containing the credential
+     */
+    obtainCredential(issuerConf: IssuerConfig, accessToken: Out<AuthorizeAccessApi["authorizeAccess"]>["accessToken"], clientId: string, credentialDefinition: {
+        credential_configuration_id: string;
+        credential_identifier?: string;
+    }, context: {
+        appFetch?: typeof fetch;
+        credentialCryptoContext: CryptoContext;
+        dPopCryptoContext: CryptoContext;
+        keyAttestation?: string;
+    }): Promise<{
+        credential: string;
+        format: CredentialFormat;
+    }>;
+    /**
+     * Obtains a batch of credentials from the issuer.
+     * The batch includes the same credential format and dataset with different cryptographic data.
+     * For this reason, the function accepts a list of {@link CryptoContext}; the rest of the parameters are the same as {@link obtainCredential}.
+     * @since 1.3.3
+     *
+     * @returns The list of credentials issued in the batch.
+     */
+    obtainCredentialsBatch(issuerConf: IssuerConfig, accessToken: Out<AuthorizeAccessApi["authorizeAccess"]>["accessToken"], clientId: string, credentialDefinition: {
+        credential_configuration_id: string;
+        credential_identifier: string;
+    }, context: {
+        appFetch?: typeof fetch;
+        credentialCryptoContexts: CryptoContext[];
+        dPopCryptoContext: CryptoContext;
+        keyAttestation?: string;
+    }): Promise<{
+        credential: string;
+        format: CredentialFormat;
+    }[]>;
+}
+//# sourceMappingURL=05-obtain-credential.d.ts.map

package/lib/typescript/module/credential/issuance/api/05-obtain-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"05-obtain-credential.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/api/05-obtain-credential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAqB,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAS,CAAC;AAEhD,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;;;;OAiBG;IACH,gBAAgB,CACd,UAAU,EAAE,YAAY,EACxB,WAAW,EAAE,GAAG,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,EACtE,QAAQ,EAAE,MAAM,EAChB,oBAAoB,EAAE;QACpB,2BAA2B,EAAE,MAAM,CAAC;QACpC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,EACD,OAAO,EAAE;QACP,QAAQ,CAAC,EAAE,OAAO,KAAK,CAAC;QACxB,uBAAuB,EAAE,aAAa,CAAC;QACvC,iBAAiB,EAAE,aAAa,CAAC;QACjC,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GACA,OAAO,CAAC;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,gBAAgB,CAAC;KAC1B,CAAC,CAAC;IAEH;;;;;;;OAOG;IACH,sBAAsB,CACpB,UAAU,EAAE,YAAY,EACxB,WAAW,EAAE,GAAG,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,EACtE,QAAQ,EAAE,MAAM,EAChB,oBAAoB,EAAE;QACpB,2BAA2B,EAAE,MAAM,CAAC;QACpC,qBAAqB,EAAE,MAAM,CAAC;KAC/B,EACD,OAAO,EAAE;QACP,QAAQ,CAAC,EAAE,OAAO,KAAK,CAAC;QACxB,wBAAwB,EAAE,aAAa,EAAE,CAAC;QAC1C,iBAAiB,EAAE,aAAa,CAAC;QACjC,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GACA,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,EAAE,CAAC,CAAC;CAChE"}

package/lib/typescript/module/credential/issuance/api/06-verify-and-parse-credential.d.ts

@@ -0,0 +1,40 @@
+import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+import type { IssuerConfig } from "./IssuerConfig.js";
+import type { ParsedCredential } from "./types.js";
+export interface VerifyAndParseCredentialApi {
+    /**
+     * Verify and parse an encoded credential.
+     * @since 1.0.0
+     *
+     * @param issuerConf The Issuer configuration returned by {@link evaluateIssuerTrust}
+     * @param credential The encoded credential returned by {@link obtainCredential}
+     * @param credentialConfigurationId The credential configuration ID that defines the provided credential
+     * @param context.credentialCryptoContext The crypto context used to obtain the credential in {@link obtainCredential}
+     * @param context.ignoreMissingAttributes Skip error when attributes declared in the issuer configuration are not found within disclosures
+     * @param context.includeUndefinedAttributes Include attributes not explicitly declared in the issuer configuration
+     * @returns A parsed credential with attributes in plain value, the expiration and issuance date of the credential
+     * @throws {IoWalletError} If the credential signature is not verified with the Issuer key set
+     * @throws {IoWalletError} If the credential is not bound to the provided user key
+     * @throws {IoWalletError} If the credential data fail to parse
+     */
+    verifyAndParseCredential(issuerConf: IssuerConfig, credential: string, credentialConfigurationId: string, context: {
+        credentialCryptoContext: CryptoContext;
+        /**
+         * Do not throw an error when an attribute is not found within disclosures.
+         */
+        ignoreMissingAttributes?: boolean;
+        /**
+         * Include attributes that are not explicitly mapped in the issuer configuration.
+         */
+        includeUndefinedAttributes?: boolean;
+        /**
+         * Validate the certificate chain of the credential against the provided `x509CertRoot`.
+         */
+        validateCertificateChain?: boolean;
+    }, x509CertRoot?: string): Promise<{
+        expiration: Date;
+        issuedAt: Date | undefined;
+        parsedCredential: ParsedCredential;
+    }>;
+}
+//# sourceMappingURL=06-verify-and-parse-credential.d.ts.map

package/lib/typescript/module/credential/issuance/api/06-verify-and-parse-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"06-verify-and-parse-credential.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/api/06-verify-and-parse-credential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAS,CAAC;AAEhD,MAAM,WAAW,2BAA2B;IAC1C;;;;;;;;;;;;;;OAcG;IACH,wBAAwB,CACtB,UAAU,EAAE,YAAY,EACxB,UAAU,EAAE,MAAM,EAClB,yBAAyB,EAAE,MAAM,EACjC,OAAO,EAAE;QACP,uBAAuB,EAAE,aAAa,CAAC;QACvC;;WAEG;QACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC;;WAEG;QACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;QACrC;;WAEG;QACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC,EACD,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC;QACT,UAAU,EAAE,IAAI,CAAC;QACjB,QAAQ,EAAE,IAAI,GAAG,SAAS,CAAC;QAC3B,gBAAgB,EAAE,gBAAgB,CAAC;KACpC,CAAC,CAAC;CACJ"}

package/lib/typescript/module/credential/issuance/api/IssuerConfig.d.ts

@@ -0,0 +1,90 @@
+import { z } from "zod";
+/**
+ * Common Issuer configuration, decoupled from specific IT-Wallet versions.
+ */
+export type IssuerConfig = z.infer<typeof IssuerConfig>;
+export declare const IssuerConfig: z.ZodObject<{
+    authorization_endpoint: z.ZodString;
+    authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
+    credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        format: z.ZodLiteral<"dc+sd-jwt">;
+        vct: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        doctype: z.ZodString;
+        format: z.ZodLiteral<"mso_mdoc">;
+    }, z.core.$strip>], "format">, z.ZodObject<{
+        authentic_source: z.ZodOptional<z.ZodString>;
+        claims: z.ZodArray<z.ZodObject<{
+            display: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                locale: z.ZodString;
+                name: z.ZodString;
+            }, z.core.$strip>>>;
+            path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
+        }, z.core.$strip>>;
+        display: z.ZodArray<z.ZodObject<{
+            locale: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strip>>;
+        issuance_errors_supported: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            display: z.ZodArray<z.ZodObject<{
+                description: z.ZodString;
+                locale: z.ZodString;
+                title: z.ZodString;
+            }, z.core.$strip>>;
+            status_code: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>>;
+        scope: z.ZodString;
+    }, z.core.$strip>>>;
+    credential_endpoint: z.ZodString;
+    credential_issuance_batch_size: z.ZodOptional<z.ZodNumber>;
+    credential_issuer: z.ZodString;
+    encrypted_response_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    federation_entity: z.ZodObject<{
+        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodString>;
+        federation_fetch_endpoint: z.ZodOptional<z.ZodString>;
+        federation_historical_keys_endpoint: z.ZodOptional<z.ZodString>;
+        federation_list_endpoint: z.ZodOptional<z.ZodString>;
+        federation_resolve_endpoint: z.ZodOptional<z.ZodString>;
+        federation_trust_mark_endpoint: z.ZodOptional<z.ZodString>;
+        federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodString>;
+        federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodString>;
+        homepage_uri: z.ZodOptional<z.ZodString>;
+        logo_uri: z.ZodOptional<z.ZodString>;
+        organization_name: z.ZodOptional<z.ZodString>;
+        policy_uri: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>;
+    keys: z.ZodArray<z.ZodObject<{
+        alg: z.ZodOptional<z.ZodString>;
+        crv: z.ZodOptional<z.ZodString>;
+        d: z.ZodOptional<z.ZodString>;
+        dp: z.ZodOptional<z.ZodString>;
+        dq: z.ZodOptional<z.ZodString>;
+        e: z.ZodOptional<z.ZodString>;
+        ext: z.ZodOptional<z.ZodBoolean>;
+        k: z.ZodOptional<z.ZodString>;
+        key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        kid: z.ZodOptional<z.ZodString>;
+        kty: z.ZodEnum<{
+            RSA: "RSA";
+            EC: "EC";
+        }>;
+        n: z.ZodOptional<z.ZodString>;
+        p: z.ZodOptional<z.ZodString>;
+        q: z.ZodOptional<z.ZodString>;
+        qi: z.ZodOptional<z.ZodString>;
+        use: z.ZodOptional<z.ZodString>;
+        x: z.ZodOptional<z.ZodString>;
+        x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        x5t: z.ZodOptional<z.ZodString>;
+        "x5t#S256": z.ZodOptional<z.ZodString>;
+        x5u: z.ZodOptional<z.ZodString>;
+        y: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    nonce_endpoint: z.ZodString;
+    pushed_authorization_request_endpoint: z.ZodString;
+    response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    status_assertion_endpoint: z.ZodOptional<z.ZodString>;
+    token_endpoint: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=IssuerConfig.d.ts.map

package/lib/typescript/module/credential/issuance/api/IssuerConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IssuerConfig.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/api/IssuerConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAqDxB;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBvB,CAAC"}

package/lib/typescript/module/credential/issuance/api/index.d.ts

@@ -0,0 +1,15 @@
+import { type EvaluateIssuerTrustApi } from "./01-evaluate-issuer-trust.js";
+import { type StartUserAuthorizationApi } from "./02-start-user-authorization.js";
+import { type CompleteUserAuthorizationApi } from "./03-complete-user-authorization.js";
+import { type AuthorizeAccessApi } from "./04-authorize-access.js";
+import { type ObtainCredentialApi } from "./05-obtain-credential.js";
+import { type VerifyAndParseCredentialApi } from "./06-verify-and-parse-credential.js";
+import { type MRTDPoPApi } from "./mrtd-pop/index.js";
+export interface IssuanceApi extends AuthorizeAccessApi, CompleteUserAuthorizationApi, EvaluateIssuerTrustApi, ObtainCredentialApi, StartUserAuthorizationApi, VerifyAndParseCredentialApi {
+    MRTDPoP: MRTDPoPApi;
+}
+export type { EvaluatedDcqlQuery } from "./03-complete-user-authorization.js";
+export type { IssuerConfig } from "./IssuerConfig.js";
+export type * as MRTDPoP from "./mrtd-pop/index.js";
+export type * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/credential/issuance/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,+BAA4B,CAAC;AACzE,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,kCAA+B,CAAC;AAC/E,OAAO,EAAE,KAAK,4BAA4B,EAAE,MAAM,qCAAkC,CAAC;AACrF,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAAuB,CAAC;AAChE,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAAwB,CAAC;AAClE,OAAO,EAAE,KAAK,2BAA2B,EAAE,MAAM,qCAAkC,CAAC;AACpF,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAY,CAAC;AAE7C,MAAM,WAAW,WACf,SAAQ,kBAAkB,EACxB,4BAA4B,EAC5B,sBAAsB,EACtB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B;IAC7B,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,YAAY,EAAE,kBAAkB,EAAE,MAAM,qCAAkC,CAAC;AAC3E,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAgB,CAAC;AACnD,YAAY,KAAK,OAAO,MAAM,qBAAY,CAAC;AAC3C,mBAAmB,YAAS,CAAC"}

package/lib/typescript/module/credential/issuance/api/mrtd-pop/index.d.ts

@@ -0,0 +1,74 @@
+import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+import type { IssuerConfig } from "../IssuerConfig.js";
+import type { IasPayload, MrtdPayload, MrtdPoPChallenge, MrtdPopVerificationResult, MrtdProofChallengeInfo } from "./types.js";
+export interface MRTDPoPApi {
+    /**
+     * WARNING: This function must be called after {@link validateChallenge}. The generated authUrl must be used to open a browser or webview capable of catching the redirectSchema to perform a get request to the authorization endpoint.
+     * Builds the callback URL to which the end user should be redirected to continue the authentication flow after the MRTD challenge validation.
+     * @param redirectUri - The redirect URI provided by the issuer after the challenge validation to continue the authentication flow.
+     * @param valPopNonce - The MRTD validation PoP nonce obtained from the challenge validation response.
+     * @param authSession - The MRTD authentication session identifier used for session binding.
+     * @returns An object containing the callback URL
+     */
+    buildChallengeCallbackUrl(redirectUri: string, valPopNonce: string, authSession: string): Promise<{
+        callbackUrl: string;
+    }>;
+    /**
+     * Initializes the MRTD challenge with the data received from the issuer after the primary authentication.
+     * This function must be called after {@link verifyAndParseChallengeInfo}.
+     *
+     * @param issuerConf - The issuer configuration containing the JWKS for signature verification.
+     * @param initUrl - The endpoint to call to initialize the challenge.
+     * @param mrtd_auth_session - Session identifier for session binding obtained from the MRTD Proof JWT.
+     * @param mrtd_pop_jwt_nonce - Nonce value obtained from the MRTD Proof JWT.
+     * @param context - The context containing the WIA crypto context used to retrieve the client public key,
+     * the wallet instance attestation and an optional fetch implementation.
+     * @returns The payload of the MRTD PoP Challenge JWT.
+     */
+    initChallenge(issuerConf: IssuerConfig, initUrl: string, mrtd_auth_session: string, mrtd_pop_jwt_nonce: string, context: {
+        appFetch?: typeof fetch;
+        walletInstanceAttestation: string;
+        wiaCryptoContext: CryptoContext;
+    }): Promise<MrtdPoPChallenge>;
+    /**
+     * Validates the MRTD signed challenge by sending the MRTD and IAS payloads to the issuer.
+     * This function must be called after {@link initChallenge} and after obtaining the MRTD and IAS payloads
+     * through the CIE PACE process.
+     *
+     * @param issuerConf - The issuer configuration containing the JWKS for signature verification.
+     * @param verifyUrl - The endpoint to call to validate the challenge.
+     * @param mrtd_auth_session - Session identifier for session binding obtained from the MRTD Proof JWT.
+     * @param mrtd_pop_nonce - Nonce value obtained from the MRTD Proof JWT.
+     * @param mrtd - MRTD validation data containing Data Groups and SOD.
+     * @param ias - IAS validation data containing Anti-Cloning Public Key, and SOD.
+     * @param context - The context containing the WIA crypto context used to retrieve the client public key,
+     * the wallet instance attestation and an optional fetch implementation.
+     * @returns The MRTD PoP Verification Result containing the validation nonce and redirect URI to complete the flow.
+     */
+    validateChallenge(issuerConf: IssuerConfig, verifyUrl: string, mrtd_auth_session: string, mrtd_pop_nonce: string, mrtd: MrtdPayload, ias: IasPayload, context: {
+        appFetch?: typeof fetch;
+        walletInstanceAttestation: string;
+        wiaCryptoContext: CryptoContext;
+    }): Promise<MrtdPopVerificationResult>;
+    /**
+     * Verifies and parses the payload of a MRTD Proof Challenge Info JWT obtained after the primary authentication.
+     *
+     * This function performs the following steps:
+     * 1. Validates the JWT signature using the issuer's JWKS.
+     * 2. Decodes the JWT and parses its structure according to the {@link MrtdProofChallengeInfo} schema.
+     * 3. Verifies that the `aud` claim matches the client's public key ID.
+     * 4. Checks that the JWT is not expired and was not issued in the future.
+     *
+     * @param issuerConf - The issuer configuration containing the JWKS for signature verification.
+     * @param challengeInfoJwt - The JWT string representing the MRTD Proof Challenge Info.
+     * @param context - The context containing the WIA crypto context used to retrieve the client public key.
+     * @returns The parsed payload of the MRTD Proof Challenge Info JWT.
+     * @throws {Error} If the JWT signature is invalid, the structure is malformed, the `aud` claim does not match,
+     * or the JWT is expired/not yet valid.
+     */
+    verifyAndParseChallengeInfo(issuerConf: IssuerConfig, challengeInfoJwt: string, context: {
+        wiaCryptoContext: CryptoContext;
+    }): Promise<MrtdProofChallengeInfo>;
+}
+export * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/credential/issuance/api/mrtd-pop/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/credential/issuance/api/mrtd-pop/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAiB,CAAC;AACpD,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACvB,MAAM,YAAS,CAAC;AAEjB,MAAM,WAAW,UAAU;IACzB;;;;;;;OAOG;IACH,yBAAyB,CACvB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEpC;;;;;;;;;;;OAWG;IACH,aAAa,CACX,UAAU,EAAE,YAAY,EACxB,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,MAAM,EACzB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE;QACP,QAAQ,CAAC,EAAE,OAAO,KAAK,CAAC;QACxB,yBAAyB,EAAE,MAAM,CAAC;QAClC,gBAAgB,EAAE,aAAa,CAAC;KACjC,GACA,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE7B;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,CACf,UAAU,EAAE,YAAY,EACxB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,EACzB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,UAAU,EACf,OAAO,EAAE;QACP,QAAQ,CAAC,EAAE,OAAO,KAAK,CAAC;QACxB,yBAAyB,EAAE,MAAM,CAAC;QAClC,gBAAgB,EAAE,aAAa,CAAC;KACjC,GACA,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAEtC;;;;;;;;;;;;;;;OAeG;IACH,2BAA2B,CACzB,UAAU,EAAE,YAAY,EACxB,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE;QACP,gBAAgB,EAAE,aAAa,CAAC;KACjC,GACA,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACpC;AAED,cAAc,YAAS,CAAC"}

package/lib/typescript/module/credential/issuance/api/mrtd-pop/types.d.ts

@@ -0,0 +1,34 @@
+export interface IasPayload {
+    challenge_signed: string;
+    ias_pk: string;
+    sod_ias: string;
+}
+export interface MrtdPayload {
+    dg1: string;
+    dg11: string;
+    sod_mrtd: string;
+}
+export interface MrtdPoPChallenge {
+    challenge: string;
+    mrtd_pop_nonce: string;
+    mrz?: string;
+    pop_verify_endpoint: string;
+}
+export interface MrtdPopVerificationResult {
+    mrtd_val_pop_nonce: string;
+    redirect_uri: string;
+}
+export interface MrtdProofChallengeInfo {
+    aud: string;
+    exp: number;
+    htm: "POST";
+    htu: string;
+    iat: number;
+    iss: string;
+    mrtd_auth_session: string;
+    mrtd_pop_jwt_nonce: string;
+    state: string;
+    status: "require_interaction";
+    type: "mrtd+ias";
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/module/credential/issuance/api/mrtd-pop/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../../src/credential/issuance/api/mrtd-pop/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qBAAqB,CAAC;IAC9B,IAAI,EAAE,UAAU,CAAC;CAClB"}

package/lib/typescript/module/credential/issuance/api/types.d.ts

@@ -0,0 +1,25 @@
+import * as z from "zod";
+export type AuthorizationDetail = z.infer<typeof AuthorizationDetail>;
+export type CredentialFormat = "dc+sd-jwt" | "mso_mdoc";
+export type ParsedCredential = Record<string, {
+    name: /* if i18n is provided */ Record<string, string> | /* if no i18n is provided */ string | undefined;
+    value: unknown;
+}>;
+export declare const AuthorizationDetail: z.ZodObject<{
+    credential_configuration_id: z.ZodString;
+    credential_identifiers: z.ZodArray<z.ZodString>;
+    type: z.ZodLiteral<"openid_credential">;
+}, z.core.$strip>;
+export type TokenResponse = z.infer<typeof TokenResponse>;
+export declare const TokenResponse: z.ZodObject<{
+    access_token: z.ZodString;
+    authorization_details: z.ZodArray<z.ZodObject<{
+        credential_configuration_id: z.ZodString;
+        credential_identifiers: z.ZodArray<z.ZodString>;
+        type: z.ZodLiteral<"openid_credential">;
+    }, z.core.$strip>>;
+    expires_in: z.ZodOptional<z.ZodNumber>;
+    refresh_token: z.ZodOptional<z.ZodString>;
+    token_type: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/module/credential/issuance/api/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/api/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,UAAU,CAAC;AAGxD,MAAM,MAAM,gBAAgB,GAAG,MAAM,CACnC,MAAM,EACN;IACE,IAAI,EACA,yBAAyB,CAAC,MAAM,CAC9B,MAAM,EACN,MAAM,CACP,GACD,4BAA4B,CAAC,MAAM,GACnC,SAAS,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,CACF,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;iBAI9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC1D,eAAO,MAAM,aAAa;;;;;;;;;;iBAMxB,CAAC"}

package/lib/typescript/module/credential/issuance/common/02-start-user-authorization.d.ts

@@ -0,0 +1,21 @@
+import type { IssuerConfig } from "../api/index.js";
+import { AuthorizationDetail } from "../../../utils/par.js";
+type ResponseMode = "form_post.jwt" | "query";
+/**
+ * Ensures that the credential type requested is supported by the issuer and contained in the
+ * issuer configuration.
+ * @param issuerConf The issuer configuration returned by {@link evaluateIssuerTrust}
+ * @param credentialId The credential configuration ID to be requested;
+ * @returns The credential definition to be used in the request which includes the format and the type and its type
+ */
+export declare const selectCredentialDefinition: (issuerConf: IssuerConfig, credentialId: string) => AuthorizationDetail;
+/**
+ * Ensures that the response mode requested is supported by the issuer and contained in the issuer configuration.
+ * When multiple credentials are provided, all of them must support the same response_mode.
+ * @param issuerConf The issuer configuration
+ * @param credentialIds The credential configuration IDs to be requested
+ * @returns The response mode to be used in the request, "query" for PersonIdentificationData and "form_post.jwt" for all other types.
+ */
+export declare const selectResponseMode: (issuerConf: IssuerConfig, credentialIds: string[]) => ResponseMode;
+export {};
+//# sourceMappingURL=02-start-user-authorization.d.ts.map

package/lib/typescript/module/credential/issuance/common/02-start-user-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"02-start-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/common/02-start-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAQ,CAAC;AAI3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAoB,CAAC;AAEzD,KAAK,YAAY,GAAG,eAAe,GAAG,OAAO,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,GACrC,YAAY,YAAY,EACxB,cAAc,MAAM,KACnB,mBAmBF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,GAC7B,YAAY,YAAY,EACxB,eAAe,MAAM,EAAE,KACtB,YA6CF,CAAC"}

package/lib/typescript/module/credential/issuance/common/06-verify-and-parse-credential.mdoc.d.ts

@@ -0,0 +1,3 @@
+import type { IssuanceApi } from "../api/index.js";
+export declare const verifyAndParseCredentialMDoc: IssuanceApi["verifyAndParseCredential"];
+//# sourceMappingURL=06-verify-and-parse-credential.mdoc.d.ts.map

package/lib/typescript/module/credential/issuance/common/06-verify-and-parse-credential.mdoc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"06-verify-and-parse-credential.mdoc.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/common/06-verify-and-parse-credential.mdoc.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAkC,MAAM,iBAAQ,CAAC;AA6L1E,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,0BAA0B,CA8C9E,CAAC"}

package/lib/typescript/module/credential/issuance/common/06-verify-and-parse-credential.sdjwt.d.ts

@@ -0,0 +1,3 @@
+import type { IssuanceApi } from "../api/index.js";
+export declare const verifyAndParseCredentialSdJwt: IssuanceApi["verifyAndParseCredential"];
+//# sourceMappingURL=06-verify-and-parse-credential.sdjwt.d.ts.map

package/lib/typescript/module/credential/issuance/common/06-verify-and-parse-credential.sdjwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"06-verify-and-parse-credential.sdjwt.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/common/06-verify-and-parse-credential.sdjwt.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAkC,MAAM,iBAAQ,CAAC;AA+N1E,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,0BAA0B,CA8E/E,CAAC"}

package/lib/typescript/module/credential/issuance/common/errors.d.ts

@@ -0,0 +1,18 @@
+import { IoWalletError } from "../../../utils/errors.js";
+/**
+ * An error subclass thrown when an error occurs during the authorization process.
+ */
+export declare class AuthorizationError extends IoWalletError {
+    code: string;
+}
+/**
+ * An error subclass thrown when an error occurs during the authorization process with the IDP.
+ * It contains the error and error description returned by the IDP.
+ */
+export declare class AuthorizationIdpError extends IoWalletError {
+    code: string;
+    error: string;
+    errorDescription?: string;
+    constructor(error: string, errorDescription?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/lib/typescript/module/credential/issuance/common/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/common/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,0BAAuB,CAAC;AAEtE;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;IAC1C,IAAI,SAAuC;CACrD;AAED;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,aAAa;IAC7C,IAAI,SAA0D;IAEvE,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;gBAEd,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM;CAKrD"}

package/lib/typescript/module/credential/issuance/index.d.ts

@@ -0,0 +1,6 @@
+import * as Errors from "./common/errors.js";
+export { Errors };
+export type * from "./api/index.js";
+export { Issuance as V1_0_0 } from "./v1.0.0/index.js";
+export { Issuance as V1_4_6 } from "./v1.4.6/index.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/credential/issuance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/credential/issuance/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,oBAAiB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,CAAC;AAClB,mBAAmB,gBAAO,CAAC;AAC3B,OAAO,EAAE,QAAQ,IAAI,MAAM,EAAE,MAAM,mBAAU,CAAC;AAC9C,OAAO,EAAE,QAAQ,IAAI,MAAM,EAAE,MAAM,mBAAU,CAAC"}

package/lib/typescript/module/credential/issuance/mrtd-pop/01-verify-and-parse-challenge-info.d.ts

@@ -0,0 +1,3 @@
+import type { MRTDPoPApi } from "../api/mrtd-pop/index.js";
+export declare const verifyAndParseChallengeInfo: MRTDPoPApi["verifyAndParseChallengeInfo"];
+//# sourceMappingURL=01-verify-and-parse-challenge-info.d.ts.map

package/lib/typescript/module/credential/issuance/mrtd-pop/01-verify-and-parse-challenge-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"01-verify-and-parse-challenge-info.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/mrtd-pop/01-verify-and-parse-challenge-info.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAAiB,CAAC;AAKlD,eAAO,MAAM,2BAA2B,EAAE,UAAU,CAAC,6BAA6B,CAmB/E,CAAC"}

package/lib/typescript/module/credential/issuance/mrtd-pop/02-init-challenge.d.ts

@@ -0,0 +1,14 @@
+import { IoWalletSdkConfig } from "@pagopa/io-wallet-utils";
+import type { MRTDPoPApi } from "../api/mrtd-pop/index.js";
+interface Config {
+    sdkConfig: IoWalletSdkConfig;
+}
+/**
+ * Factory function to create `initChallenge` for MRTD PoP flow.
+ * The factory is needed to inject version specific SDK configuration.
+ * @param config Configuration object containing the IO Wallet SDK configuration
+ * @returns `initChallenge` function compliant with the public API
+ */
+export declare function createInitChallenge(config: Config): MRTDPoPApi["initChallenge"];
+export {};
+//# sourceMappingURL=02-init-challenge.d.ts.map

package/lib/typescript/module/credential/issuance/mrtd-pop/02-init-challenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"02-init-challenge.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/mrtd-pop/02-init-challenge.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,iBAAiB,EAElB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAAiB,CAAC;AAclD,UAAU,MAAM;IACd,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,GACb,UAAU,CAAC,eAAe,CAAC,CAgD7B"}

package/lib/typescript/module/credential/issuance/mrtd-pop/03-validate-challenge.d.ts

@@ -0,0 +1,15 @@
+import type { IoWalletSdkConfig } from "@pagopa/io-wallet-utils";
+import type { MRTDPoPApi } from "../api/mrtd-pop/index.js";
+interface Config {
+    sdkConfig: IoWalletSdkConfig;
+}
+/**
+ * Factory function to create `validateChallenge` for MRTD PoP flow.
+ * The factory is needed to inject version specific SDK configuration.
+ * @param config Configuration object containing the IO Wallet SDK configuration
+ * @returns `validateChallenge` function compliant with the public API
+ */
+export declare function createValidateChallenge(config: Config): MRTDPoPApi["validateChallenge"];
+export declare const buildChallengeCallbackUrl: MRTDPoPApi["buildChallengeCallbackUrl"];
+export {};
+//# sourceMappingURL=03-validate-challenge.d.ts.map

package/lib/typescript/module/credential/issuance/mrtd-pop/03-validate-challenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"03-validate-challenge.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/mrtd-pop/03-validate-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAQjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAAiB,CAAC;AAQlD,UAAU,MAAM;IACd,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,GACb,UAAU,CAAC,mBAAmB,CAAC,CAqEjC;AAED,eAAO,MAAM,yBAAyB,EAAE,UAAU,CAAC,2BAA2B,CAS3E,CAAC"}

package/lib/typescript/module/credential/issuance/mrtd-pop/index.d.ts

@@ -0,0 +1,4 @@
+import type { MRTDPoPApi } from "../api/mrtd-pop/index.js";
+export declare const MRTDPoPv1_0: MRTDPoPApi;
+export declare const MRTDPoPv1_3: MRTDPoPApi;
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/credential/issuance/mrtd-pop/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/mrtd-pop/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAAiB,CAAC;AAUlD,eAAO,MAAM,WAAW,EAAE,UAKzB,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,UAKzB,CAAC"}

package/lib/typescript/module/credential/issuance/v1.0.0/01-evaluate-issuer-trust.d.ts

@@ -0,0 +1,3 @@
+import type { IssuanceApi } from "../api/index.js";
+export declare const evaluateIssuerTrust: IssuanceApi["evaluateIssuerTrust"];
+//# sourceMappingURL=01-evaluate-issuer-trust.d.ts.map

package/lib/typescript/module/credential/issuance/v1.0.0/01-evaluate-issuer-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"01-evaluate-issuer-trust.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/v1.0.0/01-evaluate-issuer-trust.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAQ,CAAC;AAK1C,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,qBAAqB,CASlE,CAAC"}

package/lib/typescript/module/credential/issuance/v1.0.0/02-start-user-authorization.d.ts

@@ -0,0 +1,3 @@
+import type { IssuanceApi } from "../api/index.js";
+export declare const startUserAuthorization: IssuanceApi["startUserAuthorization"];
+//# sourceMappingURL=02-start-user-authorization.d.ts.map

package/lib/typescript/module/credential/issuance/v1.0.0/02-start-user-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"02-start-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/v1.0.0/02-start-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAQ,CAAC;AAW1C,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,wBAAwB,CA+DtE,CAAC"}

package/lib/typescript/module/credential/issuance/v1.0.0/03-complete-user-authorization.d.ts

@@ -0,0 +1,17 @@
+import type { IssuanceApi } from "../api/index.js";
+import { type AuthorizationResult } from "../../../utils/auth.js";
+export declare const continueUserAuthorizationWithMRTDPoPChallenge: IssuanceApi["continueUserAuthorizationWithMRTDPoPChallenge"];
+export declare const buildAuthorizationUrl: IssuanceApi["buildAuthorizationUrl"];
+export declare const completePidUserAuthorizationWithQueryMode: IssuanceApi["completePidUserAuthorizationWithQueryMode"];
+export declare const completeEaaUserAuthorizationWithQueryMode: IssuanceApi["completeEaaUserAuthorizationWithQueryMode"];
+export declare const getRequestedCredentialToBePresented: IssuanceApi["getRequestedCredentialToBePresented"];
+export declare const completeUserAuthorizationWithFormPostJwtMode: IssuanceApi["completeUserAuthorizationWithFormPostJwtMode"];
+/**
+ * Parse the authorization response and return the result which contains code, state and iss.
+ * @throws {AuthorizationError} if an error occurs during the parsing process
+ * @throws {AuthorizationIdpError} if an error occurs during the parsing process and the error is related to the IDP
+ * @param authRes the authorization response to be parsed
+ * @returns the authorization result which contains code, state and iss
+ */
+export declare const parseAuthorizationResponse: (authRes: unknown) => AuthorizationResult;
+//# sourceMappingURL=03-complete-user-authorization.d.ts.map

package/lib/typescript/module/credential/issuance/v1.0.0/03-complete-user-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"03-complete-user-authorization.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/v1.0.0/03-complete-user-authorization.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAQ,CAAC;AAE1C,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,wBAAqB,CAAC;AAc7B,eAAO,MAAM,6CAA6C,EAAE,WAAW,CAAC,+CAA+C,CA4BpH,CAAC;AAEJ,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,uBAAuB,CAgBpE,CAAC;AAEJ,eAAO,MAAM,yCAAyC,EAAE,WAAW,CAAC,2CAA2C,CAS5G,CAAC;AAEJ,eAAO,MAAM,yCAAyC,EAAE,WAAW,CAAC,2CAA2C,CAM5G,CAAC;AAEJ,eAAO,MAAM,mCAAmC,EAAE,WAAW,CAAC,qCAAqC,CA0ChG,CAAC;AAEJ,eAAO,MAAM,4CAA4C,EAAE,WAAW,CAAC,8CAA8C,CA2ElH,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,GACrC,SAAS,OAAO,KACf,mBAqBF,CAAC"}

package/lib/typescript/module/credential/issuance/v1.0.0/04-authorize-access.d.ts

@@ -0,0 +1,3 @@
+import type { IssuanceApi } from "../api/index.js";
+export declare const authorizeAccess: IssuanceApi["authorizeAccess"];
+//# sourceMappingURL=04-authorize-access.d.ts.map

package/lib/typescript/module/credential/issuance/v1.0.0/04-authorize-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"04-authorize-access.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/issuance/v1.0.0/04-authorize-access.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAQ,CAAC;AAU1C,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,iBAAiB,CAkF1D,CAAC"}

package/lib/typescript/module/credential/issuance/v1.0.0/05-obtain-credential.d.ts

@@ -0,0 +1,6 @@
+import { type CryptoContext } from "@pagopa/io-react-native-jwt";
+import type { IssuanceApi } from "../api/index.js";
+export declare const createNonceProof: (nonce: string, issuer: string, audience: string, ctx: CryptoContext) => Promise<string>;
+export declare const obtainCredential: IssuanceApi["obtainCredential"];
+export declare const obtainCredentialsBatch: IssuanceApi["obtainCredentialsBatch"];
+//# sourceMappingURL=05-obtain-credential.d.ts.map