@pagopa/io-wallet-oid4vci 1.5.2 → 1.5.3

package/dist/index.d.mts

@@ -956,7 +956,8 @@ interface ParsedCredentialRequest {
  * @param options - Parsing options and validation context.
  * @returns Promise resolving to the normalized parsed credential request including the extracted `accessToken` and `dpopProof`.
  * @throws {CredentialAuthorizationHeaderError} If the `Authorization` header is absent or invalid.
- * @throws {CredentialDpopProofError} If the `DPoP` header is absent or not a valid compact JWT.
+ * @throws {MissingDpopProofError} If the `DPoP` header is absent.
+ * @throws {InvalidDpopProofError} If the `DPoP` header is present but not a valid compact JWT.
  * @throws {ValidationError} If request body schema or semantic checks fail.
  * @throws {Oauth2JwtParseError} If a proof JWT cannot be decoded.
  * @throws {ParseCredentialRequestError} For unexpected parsing failures.
@@ -1539,6 +1540,12 @@ declare class CredentialOfferError extends Oid4vciError {
 declare class MissingDpopProofError extends Oid4vciError {
     constructor(message?: string, options?: ErrorOptions);
 }
+/**
+ * Error thrown when a credential request has an invalid DPoP proof header.
+ */
+declare class InvalidDpopProofError extends Oid4vciError {
+    constructor(message?: string, options?: ErrorOptions);
+}
 /**
  * Error thrown when a credential request has a missing or invalid Authorization header.
  */
@@ -14215,4 +14222,4 @@ declare class WalletProvider {
     createItWalletAttestationJwt(options: WalletAttestationOptions): Promise<string>;
 }
 
-export { type AuthorizationCodeGrant, type AuthorizationCodeGrantV1_3, type AuthorizationCodeGrantV1_4, type AuthorizationResponse, type BaseCredentialRequestOptions, type CompleteAuthorizationOptions, type CompleteAuthorizationResult, CreateCredentialResponseError, type CreateCredentialResponseOptions, type CreateCredentialResponseOptionsV1_0, type CreateCredentialResponseOptionsV1_3, type CreateCredentialResponseOptionsV1_4, type CreateCredentialResponseResult, type CreateCredentialResponseResultWithFlow, CredentialAuthorizationHeaderError, type CredentialObject, type CredentialOffer, CredentialOfferError, type CredentialOfferGrants, type CredentialOfferGrantsV1_3, type CredentialOfferGrantsV1_4, type CredentialOfferUri, type CredentialOfferV1_3, type CredentialOfferV1_4, type CredentialRequest, type CredentialRequestOptions, type CredentialRequestOptionsV1_0, type CredentialRequestOptionsV1_3, type CredentialRequestOptionsV1_4, type CredentialRequestV1_0, type CredentialRequestV1_3, type CredentialResponse, type CredentialResponseEncryption, type CredentialResponseV1_0, type CredentialResponseV1_3, type DeferredCredentialResponseV1_0, type DeferredCredentialResponseV1_3, type DeferredFlowOptionsV1_0, type DeferredFlowOptionsV1_3, type ExtractGrantDetailsOptions, type ExtractGrantDetailsOptionsV1_3, type ExtractGrantDetailsOptionsV1_4, type ExtractGrantDetailsResult, type ExtractGrantDetailsResultV1_3, type ExtractGrantDetailsResultV1_4, FetchCredentialResponseError, type FetchCredentialResponseOptions, FetchMetadataError, type FetchMetadataOptions, type FetchStatusListCallback, type ImmediateCredentialResponse, type ImmediateFlowOptions, type KeyAttestationHeader, type KeyAttestationOptions, type KeyAttestationPayload, type KeyAttestationStatus, type MetadataResponse, type MetadataResponseV1_0, type MetadataResponseV1_3, MissingDpopProofError, NonceRequestError, Oid4vciError, type ParseCredentialOfferUriOptions, ParseCredentialRequestError, type ParseCredentialRequestExpectedValues, type ParseCredentialRequestOptions, type ParsedCredentialProof, type ParsedCredentialRequest, type ProofJwtHeader, type ProofJwtHeaderV1_0, type ProofJwtHeaderV1_3, type ProofJwtPayload, type ResolveCredentialOfferOptions, type ResolveCredentialOfferOptionsV1_3, type ResolveCredentialOfferOptionsV1_4, type SendAuthorizationResponseAndExtractCodeOptions, type StatusList, type ValidateCredentialOfferOptions, type ValidateCredentialOfferOptionsV1_3, type ValidateCredentialOfferOptionsV1_4, type VerifyAuthorizationResponseFormPostJWTOptions, type VerifyAuthorizationResponseOptions, type VerifyCredentialRequestJwtProofBaseOptions, VerifyCredentialRequestJwtProofError, type VerifyCredentialRequestJwtProofOptions, type VerifyCredentialRequestJwtProofOptionsV1_0, type VerifyCredentialRequestJwtProofOptionsV1_3, type VerifyCredentialRequestJwtProofOptionsV1_4, type VerifyCredentialRequestJwtProofResult, type VerifyCredentialRequestJwtProofResultV1_0, type VerifyCredentialRequestJwtProofResultV1_3, type VerifyCredentialRequestJwtProofResultV1_4, VerifyKeyAttestationJwtError, type VerifyKeyAttestationJwtOptions, type VerifyKeyAttestationJwtResult, type WalletAttestationOptions, WalletProvider, WalletProviderError, completeAuthorization, createCredentialRequest, createCredentialResponse, extractGrantDetails, fetchCredentialResponse, fetchMetadata, keyAttestationTypeHeader, parseCredentialOfferUri, parseCredentialRequest, resolveCredentialOffer, sendAuthorizationResponseAndExtractCode, validateCredentialOffer, verifyAuthorizationResponse, verifyAuthorizationResponseFormPostJWT, verifyCredentialRequestJwtProof, verifyKeyAttestationJwt, zAuthorizationCodeGrantV1_3, zAuthorizationCodeGrantV1_4, zAuthorizationResponse, zCredentialObject, zCredentialOfferGrantsV1_3, zCredentialOfferGrantsV1_4, zCredentialOfferV1_3, zCredentialOfferV1_4, zCredentialRequestV1_0, zCredentialRequestV1_3, zCredentialResponseEncryption, zCredentialResponseV1_0, zCredentialResponseV1_3, zDeferredCredentialResponseV1_0, zDeferredCredentialResponseV1_3, zImmediateCredentialResponse, zKeyAttestationAlg, zKeyAttestationHeader, zKeyAttestationPayload, zKeyAttestationStatus, zKeyAttestationTypeHeader, zMetadataResponse, zMetadataResponseV1_0, zMetadataResponseV1_3, zProofJwtHeaderV1_0, zProofJwtHeaderV1_3, zProofJwtPayload, zStatusList };
+export { type AuthorizationCodeGrant, type AuthorizationCodeGrantV1_3, type AuthorizationCodeGrantV1_4, type AuthorizationResponse, type BaseCredentialRequestOptions, type CompleteAuthorizationOptions, type CompleteAuthorizationResult, CreateCredentialResponseError, type CreateCredentialResponseOptions, type CreateCredentialResponseOptionsV1_0, type CreateCredentialResponseOptionsV1_3, type CreateCredentialResponseOptionsV1_4, type CreateCredentialResponseResult, type CreateCredentialResponseResultWithFlow, CredentialAuthorizationHeaderError, type CredentialObject, type CredentialOffer, CredentialOfferError, type CredentialOfferGrants, type CredentialOfferGrantsV1_3, type CredentialOfferGrantsV1_4, type CredentialOfferUri, type CredentialOfferV1_3, type CredentialOfferV1_4, type CredentialRequest, type CredentialRequestOptions, type CredentialRequestOptionsV1_0, type CredentialRequestOptionsV1_3, type CredentialRequestOptionsV1_4, type CredentialRequestV1_0, type CredentialRequestV1_3, type CredentialResponse, type CredentialResponseEncryption, type CredentialResponseV1_0, type CredentialResponseV1_3, type DeferredCredentialResponseV1_0, type DeferredCredentialResponseV1_3, type DeferredFlowOptionsV1_0, type DeferredFlowOptionsV1_3, type ExtractGrantDetailsOptions, type ExtractGrantDetailsOptionsV1_3, type ExtractGrantDetailsOptionsV1_4, type ExtractGrantDetailsResult, type ExtractGrantDetailsResultV1_3, type ExtractGrantDetailsResultV1_4, FetchCredentialResponseError, type FetchCredentialResponseOptions, FetchMetadataError, type FetchMetadataOptions, type FetchStatusListCallback, type ImmediateCredentialResponse, type ImmediateFlowOptions, InvalidDpopProofError, type KeyAttestationHeader, type KeyAttestationOptions, type KeyAttestationPayload, type KeyAttestationStatus, type MetadataResponse, type MetadataResponseV1_0, type MetadataResponseV1_3, MissingDpopProofError, NonceRequestError, Oid4vciError, type ParseCredentialOfferUriOptions, ParseCredentialRequestError, type ParseCredentialRequestExpectedValues, type ParseCredentialRequestOptions, type ParsedCredentialProof, type ParsedCredentialRequest, type ProofJwtHeader, type ProofJwtHeaderV1_0, type ProofJwtHeaderV1_3, type ProofJwtPayload, type ResolveCredentialOfferOptions, type ResolveCredentialOfferOptionsV1_3, type ResolveCredentialOfferOptionsV1_4, type SendAuthorizationResponseAndExtractCodeOptions, type StatusList, type ValidateCredentialOfferOptions, type ValidateCredentialOfferOptionsV1_3, type ValidateCredentialOfferOptionsV1_4, type VerifyAuthorizationResponseFormPostJWTOptions, type VerifyAuthorizationResponseOptions, type VerifyCredentialRequestJwtProofBaseOptions, VerifyCredentialRequestJwtProofError, type VerifyCredentialRequestJwtProofOptions, type VerifyCredentialRequestJwtProofOptionsV1_0, type VerifyCredentialRequestJwtProofOptionsV1_3, type VerifyCredentialRequestJwtProofOptionsV1_4, type VerifyCredentialRequestJwtProofResult, type VerifyCredentialRequestJwtProofResultV1_0, type VerifyCredentialRequestJwtProofResultV1_3, type VerifyCredentialRequestJwtProofResultV1_4, VerifyKeyAttestationJwtError, type VerifyKeyAttestationJwtOptions, type VerifyKeyAttestationJwtResult, type WalletAttestationOptions, WalletProvider, WalletProviderError, completeAuthorization, createCredentialRequest, createCredentialResponse, extractGrantDetails, fetchCredentialResponse, fetchMetadata, keyAttestationTypeHeader, parseCredentialOfferUri, parseCredentialRequest, resolveCredentialOffer, sendAuthorizationResponseAndExtractCode, validateCredentialOffer, verifyAuthorizationResponse, verifyAuthorizationResponseFormPostJWT, verifyCredentialRequestJwtProof, verifyKeyAttestationJwt, zAuthorizationCodeGrantV1_3, zAuthorizationCodeGrantV1_4, zAuthorizationResponse, zCredentialObject, zCredentialOfferGrantsV1_3, zCredentialOfferGrantsV1_4, zCredentialOfferV1_3, zCredentialOfferV1_4, zCredentialRequestV1_0, zCredentialRequestV1_3, zCredentialResponseEncryption, zCredentialResponseV1_0, zCredentialResponseV1_3, zDeferredCredentialResponseV1_0, zDeferredCredentialResponseV1_3, zImmediateCredentialResponse, zKeyAttestationAlg, zKeyAttestationHeader, zKeyAttestationPayload, zKeyAttestationStatus, zKeyAttestationTypeHeader, zMetadataResponse, zMetadataResponseV1_0, zMetadataResponseV1_3, zProofJwtHeaderV1_0, zProofJwtHeaderV1_3, zProofJwtPayload, zStatusList };

package/dist/index.d.ts

@@ -956,7 +956,8 @@ interface ParsedCredentialRequest {
  * @param options - Parsing options and validation context.
  * @returns Promise resolving to the normalized parsed credential request including the extracted `accessToken` and `dpopProof`.
  * @throws {CredentialAuthorizationHeaderError} If the `Authorization` header is absent or invalid.
- * @throws {CredentialDpopProofError} If the `DPoP` header is absent or not a valid compact JWT.
+ * @throws {MissingDpopProofError} If the `DPoP` header is absent.
+ * @throws {InvalidDpopProofError} If the `DPoP` header is present but not a valid compact JWT.
  * @throws {ValidationError} If request body schema or semantic checks fail.
  * @throws {Oauth2JwtParseError} If a proof JWT cannot be decoded.
  * @throws {ParseCredentialRequestError} For unexpected parsing failures.
@@ -1539,6 +1540,12 @@ declare class CredentialOfferError extends Oid4vciError {
 declare class MissingDpopProofError extends Oid4vciError {
     constructor(message?: string, options?: ErrorOptions);
 }
+/**
+ * Error thrown when a credential request has an invalid DPoP proof header.
+ */
+declare class InvalidDpopProofError extends Oid4vciError {
+    constructor(message?: string, options?: ErrorOptions);
+}
 /**
  * Error thrown when a credential request has a missing or invalid Authorization header.
  */
@@ -14215,4 +14222,4 @@ declare class WalletProvider {
     createItWalletAttestationJwt(options: WalletAttestationOptions): Promise<string>;
 }
 
-export { type AuthorizationCodeGrant, type AuthorizationCodeGrantV1_3, type AuthorizationCodeGrantV1_4, type AuthorizationResponse, type BaseCredentialRequestOptions, type CompleteAuthorizationOptions, type CompleteAuthorizationResult, CreateCredentialResponseError, type CreateCredentialResponseOptions, type CreateCredentialResponseOptionsV1_0, type CreateCredentialResponseOptionsV1_3, type CreateCredentialResponseOptionsV1_4, type CreateCredentialResponseResult, type CreateCredentialResponseResultWithFlow, CredentialAuthorizationHeaderError, type CredentialObject, type CredentialOffer, CredentialOfferError, type CredentialOfferGrants, type CredentialOfferGrantsV1_3, type CredentialOfferGrantsV1_4, type CredentialOfferUri, type CredentialOfferV1_3, type CredentialOfferV1_4, type CredentialRequest, type CredentialRequestOptions, type CredentialRequestOptionsV1_0, type CredentialRequestOptionsV1_3, type CredentialRequestOptionsV1_4, type CredentialRequestV1_0, type CredentialRequestV1_3, type CredentialResponse, type CredentialResponseEncryption, type CredentialResponseV1_0, type CredentialResponseV1_3, type DeferredCredentialResponseV1_0, type DeferredCredentialResponseV1_3, type DeferredFlowOptionsV1_0, type DeferredFlowOptionsV1_3, type ExtractGrantDetailsOptions, type ExtractGrantDetailsOptionsV1_3, type ExtractGrantDetailsOptionsV1_4, type ExtractGrantDetailsResult, type ExtractGrantDetailsResultV1_3, type ExtractGrantDetailsResultV1_4, FetchCredentialResponseError, type FetchCredentialResponseOptions, FetchMetadataError, type FetchMetadataOptions, type FetchStatusListCallback, type ImmediateCredentialResponse, type ImmediateFlowOptions, type KeyAttestationHeader, type KeyAttestationOptions, type KeyAttestationPayload, type KeyAttestationStatus, type MetadataResponse, type MetadataResponseV1_0, type MetadataResponseV1_3, MissingDpopProofError, NonceRequestError, Oid4vciError, type ParseCredentialOfferUriOptions, ParseCredentialRequestError, type ParseCredentialRequestExpectedValues, type ParseCredentialRequestOptions, type ParsedCredentialProof, type ParsedCredentialRequest, type ProofJwtHeader, type ProofJwtHeaderV1_0, type ProofJwtHeaderV1_3, type ProofJwtPayload, type ResolveCredentialOfferOptions, type ResolveCredentialOfferOptionsV1_3, type ResolveCredentialOfferOptionsV1_4, type SendAuthorizationResponseAndExtractCodeOptions, type StatusList, type ValidateCredentialOfferOptions, type ValidateCredentialOfferOptionsV1_3, type ValidateCredentialOfferOptionsV1_4, type VerifyAuthorizationResponseFormPostJWTOptions, type VerifyAuthorizationResponseOptions, type VerifyCredentialRequestJwtProofBaseOptions, VerifyCredentialRequestJwtProofError, type VerifyCredentialRequestJwtProofOptions, type VerifyCredentialRequestJwtProofOptionsV1_0, type VerifyCredentialRequestJwtProofOptionsV1_3, type VerifyCredentialRequestJwtProofOptionsV1_4, type VerifyCredentialRequestJwtProofResult, type VerifyCredentialRequestJwtProofResultV1_0, type VerifyCredentialRequestJwtProofResultV1_3, type VerifyCredentialRequestJwtProofResultV1_4, VerifyKeyAttestationJwtError, type VerifyKeyAttestationJwtOptions, type VerifyKeyAttestationJwtResult, type WalletAttestationOptions, WalletProvider, WalletProviderError, completeAuthorization, createCredentialRequest, createCredentialResponse, extractGrantDetails, fetchCredentialResponse, fetchMetadata, keyAttestationTypeHeader, parseCredentialOfferUri, parseCredentialRequest, resolveCredentialOffer, sendAuthorizationResponseAndExtractCode, validateCredentialOffer, verifyAuthorizationResponse, verifyAuthorizationResponseFormPostJWT, verifyCredentialRequestJwtProof, verifyKeyAttestationJwt, zAuthorizationCodeGrantV1_3, zAuthorizationCodeGrantV1_4, zAuthorizationResponse, zCredentialObject, zCredentialOfferGrantsV1_3, zCredentialOfferGrantsV1_4, zCredentialOfferV1_3, zCredentialOfferV1_4, zCredentialRequestV1_0, zCredentialRequestV1_3, zCredentialResponseEncryption, zCredentialResponseV1_0, zCredentialResponseV1_3, zDeferredCredentialResponseV1_0, zDeferredCredentialResponseV1_3, zImmediateCredentialResponse, zKeyAttestationAlg, zKeyAttestationHeader, zKeyAttestationPayload, zKeyAttestationStatus, zKeyAttestationTypeHeader, zMetadataResponse, zMetadataResponseV1_0, zMetadataResponseV1_3, zProofJwtHeaderV1_0, zProofJwtHeaderV1_3, zProofJwtPayload, zStatusList };
+export { type AuthorizationCodeGrant, type AuthorizationCodeGrantV1_3, type AuthorizationCodeGrantV1_4, type AuthorizationResponse, type BaseCredentialRequestOptions, type CompleteAuthorizationOptions, type CompleteAuthorizationResult, CreateCredentialResponseError, type CreateCredentialResponseOptions, type CreateCredentialResponseOptionsV1_0, type CreateCredentialResponseOptionsV1_3, type CreateCredentialResponseOptionsV1_4, type CreateCredentialResponseResult, type CreateCredentialResponseResultWithFlow, CredentialAuthorizationHeaderError, type CredentialObject, type CredentialOffer, CredentialOfferError, type CredentialOfferGrants, type CredentialOfferGrantsV1_3, type CredentialOfferGrantsV1_4, type CredentialOfferUri, type CredentialOfferV1_3, type CredentialOfferV1_4, type CredentialRequest, type CredentialRequestOptions, type CredentialRequestOptionsV1_0, type CredentialRequestOptionsV1_3, type CredentialRequestOptionsV1_4, type CredentialRequestV1_0, type CredentialRequestV1_3, type CredentialResponse, type CredentialResponseEncryption, type CredentialResponseV1_0, type CredentialResponseV1_3, type DeferredCredentialResponseV1_0, type DeferredCredentialResponseV1_3, type DeferredFlowOptionsV1_0, type DeferredFlowOptionsV1_3, type ExtractGrantDetailsOptions, type ExtractGrantDetailsOptionsV1_3, type ExtractGrantDetailsOptionsV1_4, type ExtractGrantDetailsResult, type ExtractGrantDetailsResultV1_3, type ExtractGrantDetailsResultV1_4, FetchCredentialResponseError, type FetchCredentialResponseOptions, FetchMetadataError, type FetchMetadataOptions, type FetchStatusListCallback, type ImmediateCredentialResponse, type ImmediateFlowOptions, InvalidDpopProofError, type KeyAttestationHeader, type KeyAttestationOptions, type KeyAttestationPayload, type KeyAttestationStatus, type MetadataResponse, type MetadataResponseV1_0, type MetadataResponseV1_3, MissingDpopProofError, NonceRequestError, Oid4vciError, type ParseCredentialOfferUriOptions, ParseCredentialRequestError, type ParseCredentialRequestExpectedValues, type ParseCredentialRequestOptions, type ParsedCredentialProof, type ParsedCredentialRequest, type ProofJwtHeader, type ProofJwtHeaderV1_0, type ProofJwtHeaderV1_3, type ProofJwtPayload, type ResolveCredentialOfferOptions, type ResolveCredentialOfferOptionsV1_3, type ResolveCredentialOfferOptionsV1_4, type SendAuthorizationResponseAndExtractCodeOptions, type StatusList, type ValidateCredentialOfferOptions, type ValidateCredentialOfferOptionsV1_3, type ValidateCredentialOfferOptionsV1_4, type VerifyAuthorizationResponseFormPostJWTOptions, type VerifyAuthorizationResponseOptions, type VerifyCredentialRequestJwtProofBaseOptions, VerifyCredentialRequestJwtProofError, type VerifyCredentialRequestJwtProofOptions, type VerifyCredentialRequestJwtProofOptionsV1_0, type VerifyCredentialRequestJwtProofOptionsV1_3, type VerifyCredentialRequestJwtProofOptionsV1_4, type VerifyCredentialRequestJwtProofResult, type VerifyCredentialRequestJwtProofResultV1_0, type VerifyCredentialRequestJwtProofResultV1_3, type VerifyCredentialRequestJwtProofResultV1_4, VerifyKeyAttestationJwtError, type VerifyKeyAttestationJwtOptions, type VerifyKeyAttestationJwtResult, type WalletAttestationOptions, WalletProvider, WalletProviderError, completeAuthorization, createCredentialRequest, createCredentialResponse, extractGrantDetails, fetchCredentialResponse, fetchMetadata, keyAttestationTypeHeader, parseCredentialOfferUri, parseCredentialRequest, resolveCredentialOffer, sendAuthorizationResponseAndExtractCode, validateCredentialOffer, verifyAuthorizationResponse, verifyAuthorizationResponseFormPostJWT, verifyCredentialRequestJwtProof, verifyKeyAttestationJwt, zAuthorizationCodeGrantV1_3, zAuthorizationCodeGrantV1_4, zAuthorizationResponse, zCredentialObject, zCredentialOfferGrantsV1_3, zCredentialOfferGrantsV1_4, zCredentialOfferV1_3, zCredentialOfferV1_4, zCredentialRequestV1_0, zCredentialRequestV1_3, zCredentialResponseEncryption, zCredentialResponseV1_0, zCredentialResponseV1_3, zDeferredCredentialResponseV1_0, zDeferredCredentialResponseV1_3, zImmediateCredentialResponse, zKeyAttestationAlg, zKeyAttestationHeader, zKeyAttestationPayload, zKeyAttestationStatus, zKeyAttestationTypeHeader, zMetadataResponse, zMetadataResponseV1_0, zMetadataResponseV1_3, zProofJwtHeaderV1_0, zProofJwtHeaderV1_3, zProofJwtPayload, zStatusList };

package/dist/index.js

@@ -35,6 +35,7 @@ __export(index_exports, {
   CredentialOfferError: () => CredentialOfferError,
   FetchCredentialResponseError: () => FetchCredentialResponseError,
   FetchMetadataError: () => FetchMetadataError,
+  InvalidDpopProofError: () => InvalidDpopProofError,
   MissingDpopProofError: () => MissingDpopProofError,
   NonceRequestError: () => NonceRequestError,
   Oid4vciError: () => Oid4vciError,
@@ -168,6 +169,12 @@ var MissingDpopProofError = class extends Oid4vciError {
     this.name = "MissingDpopProofError";
   }
 };
+var InvalidDpopProofError = class extends Oid4vciError {
+  constructor(message = "Credential request has an invalid 'DPoP' proof header", options) {
+    super(message, options);
+    this.name = "InvalidDpopProofError";
+  }
+};
 var CredentialAuthorizationHeaderError = class extends Oid4vciError {
   constructor(message = "Credential request is missing required 'Authorization' header with DPoP scheme", options) {
     super(message, options);
@@ -995,14 +1002,12 @@ function parseAuthorizationHeader(headers) {
 function parseDpopProof(headers) {
   const extracted = (0, import_io_wallet_oauth23.extractDpopJwtFromHeaders)(headers);
   if (!extracted.valid) {
-    throw new MissingDpopProofError(
+    throw new InvalidDpopProofError(
       "Credential request contains a 'DPoP' header, but the value is not a valid JWT format"
     );
   }
   if (!extracted.dpopJwt) {
-    throw new MissingDpopProofError(
-      "Credential request contains a 'DPoP' header, but the value is missing or empty"
-    );
+    throw new MissingDpopProofError();
   }
   return extracted.dpopJwt;
 }
@@ -1077,7 +1082,7 @@ async function parseCredentialRequest(options) {
       isDeferredFlow
     });
   } catch (error) {
-    if (error instanceof import_io_wallet_utils8.ItWalletSpecsVersionError || error instanceof import_io_wallet_oauth23.Oauth2JwtParseError || error instanceof import_io_wallet_utils8.ValidationError || error instanceof CredentialAuthorizationHeaderError || error instanceof MissingDpopProofError) {
+    if (error instanceof import_io_wallet_utils8.ItWalletSpecsVersionError || error instanceof import_io_wallet_oauth23.Oauth2JwtParseError || error instanceof import_io_wallet_utils8.ValidationError || error instanceof CredentialAuthorizationHeaderError || error instanceof MissingDpopProofError || error instanceof InvalidDpopProofError) {
       throw error;
     }
     throw new ParseCredentialRequestError(
@@ -1952,6 +1957,7 @@ var WalletProvider = class {
   CredentialOfferError,
   FetchCredentialResponseError,
   FetchMetadataError,
+  InvalidDpopProofError,
   MissingDpopProofError,
   NonceRequestError,
   Oid4vciError,