@pagopa/io-wallet-oauth2 1.5.5 → 1.5.7

package/dist/index.d.mts

@@ -1185,6 +1185,7 @@ type VerifiedWalletAttestationJwtV1_4 = Awaited<ReturnType<typeof verifyWalletAt
 declare function verifyWalletAttestationJwt$1(options: VerifyWalletAttestationJwtOptionsV1_4): Promise<{
     header: {
         [x: string]: unknown;
+        kid: string;
         typ: "oauth-client-attestation+jwt";
         x5c: string[];
         alg: string;
@@ -1220,7 +1221,6 @@ declare function verifyWalletAttestationJwt$1(options: VerifyWalletAttestationJw
             x5u?: string | undefined;
             y?: string | undefined;
         } | undefined;
-        kid?: string | undefined;
     };
     payload: {
         [x: string]: unknown;
@@ -1260,27 +1260,14 @@ declare function verifyWalletAttestationJwt$1(options: VerifyWalletAttestationJw
         exp: number;
         iat: number;
         iss: string;
-        status: {
-            status_list: {
-                idx: number;
-                uri: string;
-            };
-        };
         sub: string;
         wallet_link: string;
         wallet_name: string;
-        eudi_wallet_info?: {
-            general_info: {
-                wallet_provider_name: string;
-                wallet_solution_certification_information: string;
-                wallet_solution_id: string;
-                wallet_solution_version: string;
-            };
-        } | undefined;
         nbf?: number | undefined;
         aud?: string | undefined;
         jti?: string | undefined;
         nonce?: string | undefined;
+        status?: Record<string, any> | undefined;
         trust_chain?: [string, ...string[]] | undefined;
     };
     signer: _openid4vc_oauth2.JwtSignerWithJwk;
@@ -2920,21 +2907,8 @@ interface WalletAttestationOptionsV1_3 extends BaseWalletAttestationOptions {
  */
 declare const createWalletAttestationJwt$1: (options: WalletAttestationOptionsV1_3) => Promise<WalletAttestationJwtV1_3>;
 
-declare const zWalletAttestationStatusV1_4: z$1.ZodObject<{
-    status_list: z$1.ZodObject<{
-        idx: z$1.ZodNumber;
-        uri: z$1.ZodString;
-    }, z$1.core.$strip>;
-}, z$1.core.$strip>;
-declare const zEudiWalletInfoV1_4: z$1.ZodObject<{
-    general_info: z$1.ZodObject<{
-        wallet_provider_name: z$1.ZodString;
-        wallet_solution_certification_information: z$1.ZodURL;
-        wallet_solution_id: z$1.ZodString;
-        wallet_solution_version: z$1.ZodString;
-    }, z$1.core.$strip>;
-}, z$1.core.$strip>;
 declare const zWalletAttestationJwtHeaderV1_4: z$1.ZodObject<{
+    kid: z$1.ZodString;
     trust_chain: z$1.ZodOptional<z$1.ZodTuple<[z$1.ZodString], z$1.ZodString>>;
     typ: z$1.ZodLiteral<"oauth-client-attestation+jwt">;
     x5c: z$1.ZodArray<z$1.ZodString>;
@@ -2968,7 +2942,6 @@ declare const zWalletAttestationJwtHeaderV1_4: z$1.ZodObject<{
         x5u: z$1.ZodOptional<z$1.ZodString>;
         y: z$1.ZodOptional<z$1.ZodString>;
     }, z$1.core.$loose>>;
-    kid: z$1.ZodOptional<z$1.ZodString>;
 }, z$1.core.$loose>;
 declare const zWalletAttestationJwtPayloadV1_4: z$1.ZodObject<{
     cnf: z$1.ZodObject<{
@@ -3002,37 +2975,23 @@ declare const zWalletAttestationJwtPayloadV1_4: z$1.ZodObject<{
             y: z$1.ZodOptional<z$1.ZodString>;
         }, z$1.core.$loose>;
     }, z$1.core.$strip>;
-    eudi_wallet_info: z$1.ZodOptional<z$1.ZodObject<{
-        general_info: z$1.ZodObject<{
-            wallet_provider_name: z$1.ZodString;
-            wallet_solution_certification_information: z$1.ZodURL;
-            wallet_solution_id: z$1.ZodString;
-            wallet_solution_version: z$1.ZodString;
-        }, z$1.core.$strip>;
-    }, z$1.core.$strip>>;
     exp: z$1.ZodNumber;
     iat: z$1.ZodNumber;
     iss: z$1.ZodString;
     nbf: z$1.ZodOptional<z$1.ZodNumber>;
-    status: z$1.ZodObject<{
-        status_list: z$1.ZodObject<{
-            idx: z$1.ZodNumber;
-            uri: z$1.ZodString;
-        }, z$1.core.$strip>;
-    }, z$1.core.$strip>;
     sub: z$1.ZodString;
     wallet_link: z$1.ZodURL;
     wallet_name: z$1.ZodString;
     aud: z$1.ZodOptional<z$1.ZodString>;
     jti: z$1.ZodOptional<z$1.ZodString>;
     nonce: z$1.ZodOptional<z$1.ZodString>;
+    status: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodAny>>;
     trust_chain: z$1.ZodOptional<z$1.ZodTuple<[z$1.ZodString], z$1.ZodString>>;
 }, z$1.core.$loose>;
 type WalletAttestationJwtV1_4 = string;
 declare const zWalletAttestationJwtV1_4: z$1.ZodString;
 
 interface WalletAttestationOptionsV1_4 extends Omit<BaseWalletAttestationOptions, "walletLink" | "walletName"> {
-    eudiWalletInfo?: z$1.infer<typeof zEudiWalletInfoV1_4>;
     nbf?: Date;
     signer: {
         alg: string;
@@ -3041,7 +3000,6 @@ interface WalletAttestationOptionsV1_4 extends Omit<BaseWalletAttestationOptions
         trustChain?: [string, ...string[]];
         x5c: [string, ...string[]];
     };
-    status: z$1.infer<typeof zWalletAttestationStatusV1_4>;
     walletLink: string;
     walletName: string;
 }

package/dist/index.d.ts

@@ -1185,6 +1185,7 @@ type VerifiedWalletAttestationJwtV1_4 = Awaited<ReturnType<typeof verifyWalletAt
 declare function verifyWalletAttestationJwt$1(options: VerifyWalletAttestationJwtOptionsV1_4): Promise<{
     header: {
         [x: string]: unknown;
+        kid: string;
         typ: "oauth-client-attestation+jwt";
         x5c: string[];
         alg: string;
@@ -1220,7 +1221,6 @@ declare function verifyWalletAttestationJwt$1(options: VerifyWalletAttestationJw
             x5u?: string | undefined;
             y?: string | undefined;
         } | undefined;
-        kid?: string | undefined;
     };
     payload: {
         [x: string]: unknown;
@@ -1260,27 +1260,14 @@ declare function verifyWalletAttestationJwt$1(options: VerifyWalletAttestationJw
         exp: number;
         iat: number;
         iss: string;
-        status: {
-            status_list: {
-                idx: number;
-                uri: string;
-            };
-        };
         sub: string;
         wallet_link: string;
         wallet_name: string;
-        eudi_wallet_info?: {
-            general_info: {
-                wallet_provider_name: string;
-                wallet_solution_certification_information: string;
-                wallet_solution_id: string;
-                wallet_solution_version: string;
-            };
-        } | undefined;
         nbf?: number | undefined;
         aud?: string | undefined;
         jti?: string | undefined;
         nonce?: string | undefined;
+        status?: Record<string, any> | undefined;
         trust_chain?: [string, ...string[]] | undefined;
     };
     signer: _openid4vc_oauth2.JwtSignerWithJwk;
@@ -2920,21 +2907,8 @@ interface WalletAttestationOptionsV1_3 extends BaseWalletAttestationOptions {
  */
 declare const createWalletAttestationJwt$1: (options: WalletAttestationOptionsV1_3) => Promise<WalletAttestationJwtV1_3>;
 
-declare const zWalletAttestationStatusV1_4: z$1.ZodObject<{
-    status_list: z$1.ZodObject<{
-        idx: z$1.ZodNumber;
-        uri: z$1.ZodString;
-    }, z$1.core.$strip>;
-}, z$1.core.$strip>;
-declare const zEudiWalletInfoV1_4: z$1.ZodObject<{
-    general_info: z$1.ZodObject<{
-        wallet_provider_name: z$1.ZodString;
-        wallet_solution_certification_information: z$1.ZodURL;
-        wallet_solution_id: z$1.ZodString;
-        wallet_solution_version: z$1.ZodString;
-    }, z$1.core.$strip>;
-}, z$1.core.$strip>;
 declare const zWalletAttestationJwtHeaderV1_4: z$1.ZodObject<{
+    kid: z$1.ZodString;
     trust_chain: z$1.ZodOptional<z$1.ZodTuple<[z$1.ZodString], z$1.ZodString>>;
     typ: z$1.ZodLiteral<"oauth-client-attestation+jwt">;
     x5c: z$1.ZodArray<z$1.ZodString>;
@@ -2968,7 +2942,6 @@ declare const zWalletAttestationJwtHeaderV1_4: z$1.ZodObject<{
         x5u: z$1.ZodOptional<z$1.ZodString>;
         y: z$1.ZodOptional<z$1.ZodString>;
     }, z$1.core.$loose>>;
-    kid: z$1.ZodOptional<z$1.ZodString>;
 }, z$1.core.$loose>;
 declare const zWalletAttestationJwtPayloadV1_4: z$1.ZodObject<{
     cnf: z$1.ZodObject<{
@@ -3002,37 +2975,23 @@ declare const zWalletAttestationJwtPayloadV1_4: z$1.ZodObject<{
             y: z$1.ZodOptional<z$1.ZodString>;
         }, z$1.core.$loose>;
     }, z$1.core.$strip>;
-    eudi_wallet_info: z$1.ZodOptional<z$1.ZodObject<{
-        general_info: z$1.ZodObject<{
-            wallet_provider_name: z$1.ZodString;
-            wallet_solution_certification_information: z$1.ZodURL;
-            wallet_solution_id: z$1.ZodString;
-            wallet_solution_version: z$1.ZodString;
-        }, z$1.core.$strip>;
-    }, z$1.core.$strip>>;
     exp: z$1.ZodNumber;
     iat: z$1.ZodNumber;
     iss: z$1.ZodString;
     nbf: z$1.ZodOptional<z$1.ZodNumber>;
-    status: z$1.ZodObject<{
-        status_list: z$1.ZodObject<{
-            idx: z$1.ZodNumber;
-            uri: z$1.ZodString;
-        }, z$1.core.$strip>;
-    }, z$1.core.$strip>;
     sub: z$1.ZodString;
     wallet_link: z$1.ZodURL;
     wallet_name: z$1.ZodString;
     aud: z$1.ZodOptional<z$1.ZodString>;
     jti: z$1.ZodOptional<z$1.ZodString>;
     nonce: z$1.ZodOptional<z$1.ZodString>;
+    status: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodAny>>;
     trust_chain: z$1.ZodOptional<z$1.ZodTuple<[z$1.ZodString], z$1.ZodString>>;
 }, z$1.core.$loose>;
 type WalletAttestationJwtV1_4 = string;
 declare const zWalletAttestationJwtV1_4: z$1.ZodString;
 
 interface WalletAttestationOptionsV1_4 extends Omit<BaseWalletAttestationOptions, "walletLink" | "walletName"> {
-    eudiWalletInfo?: z$1.infer<typeof zEudiWalletInfoV1_4>;
     nbf?: Date;
     signer: {
         alg: string;
@@ -3041,7 +3000,6 @@ interface WalletAttestationOptionsV1_4 extends Omit<BaseWalletAttestationOptions
         trustChain?: [string, ...string[]];
         x5c: [string, ...string[]];
     };
-    status: z$1.infer<typeof zWalletAttestationStatusV1_4>;
     walletLink: string;
     walletName: string;
 }

package/dist/index.js

@@ -796,22 +796,9 @@ async function verifyWalletAttestationJwt2(options) {
 
 // src/client-attestation/v1.4/z-wallet-attestation.ts
 var import_zod8 = require("zod");
-var zWalletAttestationStatusV1_4 = import_zod8.z.object({
-  status_list: import_zod8.z.object({
-    idx: import_zod8.z.number().int(),
-    uri: import_zod8.z.string()
-  })
-});
-var zEudiWalletInfoV1_4 = import_zod8.z.object({
-  general_info: import_zod8.z.object({
-    wallet_provider_name: import_zod8.z.string(),
-    wallet_solution_certification_information: import_zod8.z.url(),
-    wallet_solution_id: import_zod8.z.string(),
-    wallet_solution_version: import_zod8.z.string()
-  })
-});
 var zWalletAttestationJwtHeaderV1_4 = import_zod8.z.looseObject({
   ...zJwtHeader.shape,
+  kid: import_zod8.z.string(),
   trust_chain: zTrustChain.optional(),
   typ: import_zod8.z.literal("oauth-client-attestation+jwt"),
   x5c: zCertificateChain
@@ -821,12 +808,10 @@ var zWalletAttestationJwtPayloadV1_4 = import_zod8.z.looseObject({
   cnf: import_zod8.z.object({
     jwk: zJwk
   }),
-  eudi_wallet_info: zEudiWalletInfoV1_4.optional(),
   exp: import_zod8.z.number().int(),
   iat: import_zod8.z.number().int(),
   iss: import_zod8.z.string(),
   nbf: import_zod8.z.number().optional(),
-  status: zWalletAttestationStatusV1_4,
   sub: import_zod8.z.string(),
   wallet_link: import_zod8.z.url(),
   wallet_name: import_zod8.z.string()
@@ -2176,11 +2161,19 @@ var createWalletAttestationJwt2 = async (options) => {
 
 // src/client-attestation/v1.4/create-wallet-attestation-jwt.ts
 var import_io_wallet_utils19 = require("@pagopa/io-wallet-utils");
+var DEFAULT_EXPIRATION_SECONDS = 3600;
+var MAX_EXPIRATION_SECONDS = 86400;
 var createWalletAttestationJwt3 = async (options) => {
   try {
     const { signJwt } = options.callbacks;
     const iat = /* @__PURE__ */ new Date();
-    const exp = options.expiresAt ?? (0, import_io_wallet_utils19.addSecondsToDate)(iat, 3600);
+    const exp = options.expiresAt ?? (0, import_io_wallet_utils19.addSecondsToDate)(iat, DEFAULT_EXPIRATION_SECONDS);
+    if (exp <= iat) {
+      throw new import_io_wallet_utils19.ValidationError("exp must be after iat");
+    }
+    if (exp > (0, import_io_wallet_utils19.addSecondsToDate)(iat, MAX_EXPIRATION_SECONDS)) {
+      throw new import_io_wallet_utils19.ValidationError("exp must not be more than 24 hours after iat");
+    }
     if (options.nbf && options.nbf >= exp) {
       throw new import_io_wallet_utils19.ValidationError("nbf must be before exp");
     }
@@ -2190,14 +2183,10 @@ var createWalletAttestationJwt3 = async (options) => {
       exp: (0, import_io_wallet_utils19.dateToSeconds)(exp),
       iat: (0, import_io_wallet_utils19.dateToSeconds)(iat),
       iss: options.issuer,
-      status: options.status,
       sub: dpopJwkThumbprint,
       wallet_link: options.walletLink,
       wallet_name: options.walletName,
-      ...options.nbf && { nbf: (0, import_io_wallet_utils19.dateToSeconds)(options.nbf) },
-      ...options.eudiWalletInfo && {
-        eudi_wallet_info: options.eudiWalletInfo
-      }
+      ...options.nbf && { nbf: (0, import_io_wallet_utils19.dateToSeconds)(options.nbf) }
     };
     const header = {
       alg: options.signer.alg,