@pagopa/io-react-native-wallet 3.7.4 → 3.8.3

package/lib/typescript/module/trust/common/types.d.ts

@@ -0,0 +1,140 @@
+import * as z from "zod";
+export declare const TrustMark: z.ZodObject<{
+    id: z.ZodString;
+    trust_mark: z.ZodString;
+}, z.core.$strip>;
+export type EntityStatement = z.infer<typeof EntityStatement>;
+export type TrustMark = z.infer<typeof TrustMark>;
+export declare const EntityStatement: z.ZodObject<{
+    header: z.ZodObject<{
+        alg: z.ZodString;
+        kid: z.ZodString;
+        typ: z.ZodLiteral<"entity-statement+jwt">;
+    }, z.core.$strip>;
+    payload: z.ZodObject<{
+        exp: z.ZodNumber;
+        iat: z.ZodNumber;
+        iss: z.ZodString;
+        jwks: z.ZodObject<{
+            keys: z.ZodArray<z.ZodObject<{
+                alg: z.ZodOptional<z.ZodString>;
+                crv: z.ZodOptional<z.ZodString>;
+                d: z.ZodOptional<z.ZodString>;
+                dp: z.ZodOptional<z.ZodString>;
+                dq: z.ZodOptional<z.ZodString>;
+                e: z.ZodOptional<z.ZodString>;
+                ext: z.ZodOptional<z.ZodBoolean>;
+                k: z.ZodOptional<z.ZodString>;
+                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                kid: z.ZodOptional<z.ZodString>;
+                kty: z.ZodEnum<{
+                    RSA: "RSA";
+                    EC: "EC";
+                }>;
+                n: z.ZodOptional<z.ZodString>;
+                p: z.ZodOptional<z.ZodString>;
+                q: z.ZodOptional<z.ZodString>;
+                qi: z.ZodOptional<z.ZodString>;
+                use: z.ZodOptional<z.ZodString>;
+                x: z.ZodOptional<z.ZodString>;
+                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                x5t: z.ZodOptional<z.ZodString>;
+                "x5t#S256": z.ZodOptional<z.ZodString>;
+                x5u: z.ZodOptional<z.ZodString>;
+                y: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        sub: z.ZodString;
+        trust_marks: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            trust_mark: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type EntityConfigurationHeader = z.infer<typeof EntityConfigurationHeader>;
+export declare const EntityConfigurationHeader: z.ZodObject<{
+    alg: z.ZodString;
+    kid: z.ZodString;
+    typ: z.ZodLiteral<"entity-statement+jwt">;
+}, z.core.$strip>;
+/**
+ * @see https://openid.net/specs/openid-federation-1_0-46.html
+ */
+export declare const FederationEntityMetadata: z.ZodObject<{
+    contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodString>;
+    federation_fetch_endpoint: z.ZodOptional<z.ZodString>;
+    federation_historical_keys_endpoint: z.ZodOptional<z.ZodString>;
+    federation_list_endpoint: z.ZodOptional<z.ZodString>;
+    federation_resolve_endpoint: z.ZodOptional<z.ZodString>;
+    federation_trust_mark_endpoint: z.ZodOptional<z.ZodString>;
+    federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodString>;
+    federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodString>;
+    homepage_uri: z.ZodOptional<z.ZodString>;
+    logo_uri: z.ZodOptional<z.ZodString>;
+    organization_name: z.ZodOptional<z.ZodString>;
+    policy_uri: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+export type BaseEntityConfiguration = z.infer<typeof BaseEntityConfiguration>;
+export declare const BaseEntityConfiguration: z.ZodObject<{
+    header: z.ZodObject<{
+        alg: z.ZodString;
+        kid: z.ZodString;
+        typ: z.ZodLiteral<"entity-statement+jwt">;
+    }, z.core.$strip>;
+    payload: z.ZodObject<{
+        authority_hints: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        exp: z.ZodNumber;
+        iat: z.ZodNumber;
+        iss: z.ZodString;
+        jwks: z.ZodObject<{
+            keys: z.ZodArray<z.ZodObject<{
+                alg: z.ZodOptional<z.ZodString>;
+                crv: z.ZodOptional<z.ZodString>;
+                d: z.ZodOptional<z.ZodString>;
+                dp: z.ZodOptional<z.ZodString>;
+                dq: z.ZodOptional<z.ZodString>;
+                e: z.ZodOptional<z.ZodString>;
+                ext: z.ZodOptional<z.ZodBoolean>;
+                k: z.ZodOptional<z.ZodString>;
+                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                kid: z.ZodOptional<z.ZodString>;
+                kty: z.ZodEnum<{
+                    RSA: "RSA";
+                    EC: "EC";
+                }>;
+                n: z.ZodOptional<z.ZodString>;
+                p: z.ZodOptional<z.ZodString>;
+                q: z.ZodOptional<z.ZodString>;
+                qi: z.ZodOptional<z.ZodString>;
+                use: z.ZodOptional<z.ZodString>;
+                x: z.ZodOptional<z.ZodString>;
+                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                x5t: z.ZodOptional<z.ZodString>;
+                "x5t#S256": z.ZodOptional<z.ZodString>;
+                x5u: z.ZodOptional<z.ZodString>;
+                y: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        metadata: z.ZodObject<{
+            federation_entity: z.ZodObject<{
+                contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodString>;
+                federation_fetch_endpoint: z.ZodOptional<z.ZodString>;
+                federation_historical_keys_endpoint: z.ZodOptional<z.ZodString>;
+                federation_list_endpoint: z.ZodOptional<z.ZodString>;
+                federation_resolve_endpoint: z.ZodOptional<z.ZodString>;
+                federation_trust_mark_endpoint: z.ZodOptional<z.ZodString>;
+                federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodString>;
+                federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodString>;
+                homepage_uri: z.ZodOptional<z.ZodString>;
+                logo_uri: z.ZodOptional<z.ZodString>;
+                organization_name: z.ZodOptional<z.ZodString>;
+                policy_uri: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>;
+        }, z.core.$loose>;
+        sub: z.ZodString;
+    }, z.core.$loose>;
+}, z.core.$strip>;
+export declare const FederationListResponse: z.ZodArray<z.ZodString>;
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/module/trust/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/trust/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAKzB,eAAO,MAAM,SAAS;;;iBAAuD,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAClD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAc1B,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,yBAAyB,CACjC,CAAC;AACF,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;iBAgB3B,CAAC;AAGX,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC9E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmBlC,CAAC;AAEH,eAAO,MAAM,sBAAsB,yBAAsB,CAAC"}

package/lib/typescript/module/trust/common/utils.d.ts

@@ -0,0 +1,53 @@
+import type { JWK, JWTDecodeResult } from "../../utils/jwk.js";
+import type { TrustAnchorConfig } from "../api/TrustAnchorConfig.js";
+export interface FetchOptions {
+    appFetch?: typeof fetch;
+}
+export interface ParsedToken {
+    header: JWTDecodeResult["protectedHeader"];
+    payload: JWTDecodeResult["payload"];
+}
+export declare const verify: (token: string, kid: string, jwks: JWK[]) => Promise<ParsedToken>;
+/**
+ * Return type for this function is necessary to avoid an issue during the bob build process.
+ * It seems like typescript can't correctly infer the return type of the function.
+ */
+export declare const decode: (token: string) => ParsedToken;
+/**
+ * Fetch the federation list document from a given endpoint.
+ *
+ * @param federationListEndpoint The URL of the federation list endpoint.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The federation list as an array of strings.
+ * @throws {IoWalletError} If the HTTP request fails.
+ * @throws {FederationError} If the result is not in the expected format.
+ */
+export declare function getFederationList(federationListEndpoint: string, { appFetch }?: FetchOptions): Promise<string[]>;
+/**
+ * Fetch the signed entity configuration token for an entity
+ *
+ * @param entityBaseUrl The url of the entity to fetch
+ * @param appFetch (optional) fetch api implementation
+ * @returns The signed Entity Configuration token
+ */
+export declare function getSignedEntityConfiguration(entityBaseUrl: string, { appFetch }?: FetchOptions): Promise<string>;
+/**
+ * Fetch the entity statement document for a given federation entity.
+ *
+ * @param federationFetchEndpoint The exact endpoint provided by the parent EC's metadata.
+ * @param subordinatedEntityBaseUrl The url that identifies the subordinate entity.
+ * @param appFetch An optional instance of the http client to be used.
+ * @returns The signed entity statement token.
+ * @throws {IoWalletError} If the http request fails.
+ */
+export declare function getSignedEntityStatement(federationFetchEndpoint: string, subordinatedEntityBaseUrl: string, { appFetch }?: FetchOptions): Promise<string>;
+/**
+ * Extracts the X.509 Trust Anchor certificate (Base64 encoded) from the
+ * Trust Anchor's Entity Configuration.
+ *
+ * @param trustAnchorEntity The entity configuration of the known trust anchor.
+ * @returns The Base64 encoded X.509 certificate string.
+ * @throws {FederationError} If the certificate cannot be derived.
+ */
+export declare function getTrustAnchorX509Certificate(trustAnchorEntity: TrustAnchorConfig): string;
+//# sourceMappingURL=utils.d.ts.map

package/lib/typescript/module/trust/common/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../src/trust/common/utils.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,oBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA0B,CAAC;AAMlE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,OAAO,KAAK,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC3C,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;CACrC;AAID,eAAO,MAAM,MAAM,GACjB,OAAO,MAAM,EACb,KAAK,MAAM,EACX,MAAM,GAAG,EAAE,KACV,OAAO,CAAC,WAAW,CAOrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,MAAM,GAAI,OAAO,MAAM,KAAG,WAGtC,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,sBAAsB,EAAE,MAAM,EAC9B,EAAE,QAAgB,EAAE,GAAE,YAAiB,GACtC,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBnB;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,EACrB,EAAE,QAAgB,EAAE,GAAE,YAAiB,GACtC,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,uBAAuB,EAAE,MAAM,EAC/B,yBAAyB,EAAE,MAAM,EACjC,EAAE,QAAgB,EAAE,GAAE,YAAiB,mBAUxC;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,iBAAiB,EAAE,iBAAiB,GACnC,MAAM,CAqBR"}

package/lib/typescript/module/trust/common/verify-chain.d.ts

@@ -0,0 +1,27 @@
+import * as z from "zod";
+import type { TrustApi } from "../api/index.js";
+import { BaseEntityConfiguration, EntityStatement } from "./types.js";
+export interface BuilderConfig {
+    EntityConfigurationShape: z.ZodType<BaseEntityConfiguration>;
+    EntityStatementShape: z.ZodType<EntityStatement>;
+    /**
+     * The first element of the chain is supposed to be the Entity Configuration for the document issuer
+     */
+    FirstElementShape: z.ZodType<BaseEntityConfiguration>;
+    /**
+     * The last element of the chain can either be an Entity Statement
+     * or the Entity Configuration for the known Trust Anchor
+     */
+    LastElementShape: z.ZodType<BaseEntityConfiguration | EntityStatement>;
+    /**
+     * Each element but the first is supposed to be an Entity Statement
+     */
+    MiddleElementShape: z.ZodType<EntityStatement>;
+}
+/**
+ * Factory function to create `verifyTrustChain`.
+ * @param config Version specific Entity shapes
+ * @returns `verifyTrustChain` function compliant with the public API
+ */
+export declare function createVerifyTrustChain(config: BuilderConfig): TrustApi["verifyTrustChain"];
+//# sourceMappingURL=verify-chain.d.ts.map

package/lib/typescript/module/trust/common/verify-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-chain.d.ts","sourceRoot":"","sources":["../../../../../src/trust/common/verify-chain.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAQ,CAAC;AAavC,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,YAAS,CAAC;AAYnE,MAAM,WAAW,aAAa;IAC5B,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7D,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD;;OAEG;IACH,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACtD;;;OAGG;IACH,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,GAAG,eAAe,CAAC,CAAC;IACvE;;OAEG;IACH,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,GACpB,QAAQ,CAAC,kBAAkB,CAAC,CAyB9B"}

package/lib/typescript/module/trust/index.d.ts

@@ -0,0 +1,5 @@
+import * as Errors from "./common/errors.js";
+export { Errors };
+export type * from "./api/index.js";
+export { Trust as V1_0_0 } from "./v1.0.0/index.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/trust/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/trust/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,oBAAiB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,CAAC;AAClB,mBAAmB,gBAAO,CAAC;AAC3B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,mBAAU,CAAC"}

package/lib/typescript/module/trust/v1.0.0/build-chain.d.ts

@@ -0,0 +1,2 @@
+export declare const buildTrustChain: (relyingPartyEntityBaseUrl: string, trustAnchorConfig: import("../index.js").TrustAnchorConfig, appFetch?: typeof fetch) => Promise<string[]>;
+//# sourceMappingURL=build-chain.d.ts.map

package/lib/typescript/module/trust/v1.0.0/build-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-chain.d.ts","sourceRoot":"","sources":["../../../../../src/trust/v1.0.0/build-chain.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,eAAe,+IAG1B,CAAC"}