@pagopa/io-wallet-oauth2 1.5.6 → 1.5.8

package/dist/index.mjs

@@ -676,22 +676,9 @@ async function verifyWalletAttestationJwt2(options) {
 
 // src/client-attestation/v1.4/z-wallet-attestation.ts
 import { z as z8 } from "zod";
-var zWalletAttestationStatusV1_4 = z8.object({
-  status_list: z8.object({
-    idx: z8.number().int(),
-    uri: z8.string()
-  })
-});
-var zEudiWalletInfoV1_4 = z8.object({
-  general_info: z8.object({
-    wallet_provider_name: z8.string(),
-    wallet_solution_certification_information: z8.url(),
-    wallet_solution_id: z8.string(),
-    wallet_solution_version: z8.string()
-  })
-});
 var zWalletAttestationJwtHeaderV1_4 = z8.looseObject({
   ...zJwtHeader.shape,
+  kid: z8.string(),
   trust_chain: zTrustChain.optional(),
   typ: z8.literal("oauth-client-attestation+jwt"),
   x5c: zCertificateChain
@@ -701,12 +688,10 @@ var zWalletAttestationJwtPayloadV1_4 = z8.looseObject({
   cnf: z8.object({
     jwk: zJwk
   }),
-  eudi_wallet_info: zEudiWalletInfoV1_4.optional(),
   exp: z8.number().int(),
   iat: z8.number().int(),
   iss: z8.string(),
   nbf: z8.number().optional(),
-  status: zWalletAttestationStatusV1_4,
   sub: z8.string(),
   wallet_link: z8.url(),
   wallet_name: z8.string()
@@ -2126,11 +2111,19 @@ import {
   addSecondsToDate as addSecondsToDate6,
   dateToSeconds as dateToSeconds7
 } from "@pagopa/io-wallet-utils";
+var DEFAULT_EXPIRATION_SECONDS = 3600;
+var MAX_EXPIRATION_SECONDS = 86400;
 var createWalletAttestationJwt3 = async (options) => {
   try {
     const { signJwt } = options.callbacks;
     const iat = /* @__PURE__ */ new Date();
-    const exp = options.expiresAt ?? addSecondsToDate6(iat, 3600);
+    const exp = options.expiresAt ?? addSecondsToDate6(iat, DEFAULT_EXPIRATION_SECONDS);
+    if (exp <= iat) {
+      throw new ValidationError6("exp must be after iat");
+    }
+    if (exp > addSecondsToDate6(iat, MAX_EXPIRATION_SECONDS)) {
+      throw new ValidationError6("exp must not be more than 24 hours after iat");
+    }
     if (options.nbf && options.nbf >= exp) {
       throw new ValidationError6("nbf must be before exp");
     }
@@ -2140,14 +2133,10 @@ var createWalletAttestationJwt3 = async (options) => {
       exp: dateToSeconds7(exp),
       iat: dateToSeconds7(iat),
       iss: options.issuer,
-      status: options.status,
       sub: dpopJwkThumbprint,
       wallet_link: options.walletLink,
       wallet_name: options.walletName,
-      ...options.nbf && { nbf: dateToSeconds7(options.nbf) },
-      ...options.eudiWalletInfo && {
-        eudi_wallet_info: options.eudiWalletInfo
-      }
+      ...options.nbf && { nbf: dateToSeconds7(options.nbf) }
     };
     const header = {
       alg: options.signer.alg,