@pagopa/io-wallet-oid4vci 2.0.2-apt → 2.1.0-apt

package/dist/index.mjs

@@ -1699,6 +1699,7 @@ import z16 from "zod";
 // src/metadata/z-metadata-response.ts
 import {
   itWalletEntityStatementClaimsSchema,
+  itWalletMetadataAPTITUDE,
   itWalletMetadataV1_0,
   itWalletMetadataV1_3,
   itWalletMetadataV1_4
@@ -1723,10 +1724,14 @@ var zMetadataResponseV1_3 = z15.object({
 var zMetadataResponseV1_4 = zMetadataResponseV1_3.extend({
   metadata: itWalletMetadataV1_4
 });
+var zMetadataResponseAPTITUDE = zMetadataResponseV1_3.extend({
+  metadata: itWalletMetadataAPTITUDE
+});
 var zMetadataResponse = z15.union([
   zMetadataResponseV1_0,
   zMetadataResponseV1_3,
-  zMetadataResponseV1_4
+  zMetadataResponseV1_4,
+  zMetadataResponseAPTITUDE
 ]);
 var zPartialIssuerMetadata = z15.looseObject({
   authorization_servers: z15.tuple([z15.url()], z15.url()).optional()
@@ -1817,7 +1822,22 @@ async function applyFederationAuthorizationServerSelection(fetch, federationResu
     authorization_server_federation_claims: authorizationServerResult.openid_federation_claims
   };
 }
-async function fallbackDiscovery(fetch, baseUrl, authorizationServer) {
+async function tryFetchAuthorizationServerMetadata(fetch, baseUrl) {
+  try {
+    const authServerUrl = new URL(
+      ".well-known/oauth-authorization-server",
+      ensureTrailingSlash(baseUrl)
+    ).toString();
+    const response = await fetch(authServerUrl);
+    if (response.status !== 200) {
+      return void 0;
+    }
+    return await response.json();
+  } catch {
+    return void 0;
+  }
+}
+async function fallbackDiscovery(fetch, baseUrl, authorizationServer, fetchColocatedAuthorizationServer = false) {
   const issuerUrl = new URL(
     ".well-known/openid-credential-issuer",
     ensureTrailingSlash(baseUrl)
@@ -1848,7 +1868,7 @@ async function fallbackDiscovery(fetch, baseUrl, authorizationServer) {
     await hasStatusOrThrow4(200, UnexpectedStatusCodeError4)(authServerResponse);
     oauthAuthorizationServer = await authServerResponse.json();
   } else {
-    oauthAuthorizationServer = issuerJson;
+    oauthAuthorizationServer = (fetchColocatedAuthorizationServer ? await tryFetchAuthorizationServerMetadata(fetch, baseUrl) : void 0) ?? issuerJson;
   }
   return {
     discoveredVia: "oid4vci",
@@ -1858,7 +1878,7 @@ async function fallbackDiscovery(fetch, baseUrl, authorizationServer) {
     }
   };
 }
-var fetchMetadataWithFallbackDiscovery = async (options) => {
+var fetchMetadataWithFallbackDiscovery = async (options, fetchColocatedAuthorizationServer = false) => {
   const fetch = createFetcher4(options.callbacks.fetch);
   const federationResult = await tryFederationDiscovery(
     fetch,
@@ -1873,7 +1893,8 @@ var fetchMetadataWithFallbackDiscovery = async (options) => {
   ) : await fallbackDiscovery(
     fetch,
     options.credentialIssuerUrl,
-    options.authorizationServer
+    options.authorizationServer,
+    fetchColocatedAuthorizationServer
   );
   return raw;
 };
@@ -1911,8 +1932,16 @@ async function fetchMetadataV1_4(options) {
     "Failed to parse v1.4 metadata response"
   );
 }
+async function fetchMetadataAptitude(options) {
+  const raw = await fetchMetadataWithFallbackDiscovery(options, true);
+  return parseWithErrorHandling7(
+    zMetadataResponseAPTITUDE,
+    raw,
+    "Failed to parse APTITUDE metadata response"
+  );
+}
 var dispatchFetchMetadata = createVersionDispatcher7({
-  [ItWalletSpecsVersion10.APTITUDE]: (o) => fetchMetadataV1_4(o),
+  [ItWalletSpecsVersion10.APTITUDE]: (o) => fetchMetadataAptitude(o),
   [ItWalletSpecsVersion10.V1_0]: (o) => fetchMetadataV1_0(o),
   [ItWalletSpecsVersion10.V1_3]: (o) => fetchMetadataV1_3(o),
   [ItWalletSpecsVersion10.V1_4]: (o) => fetchMetadataV1_4(o)
@@ -2207,6 +2236,7 @@ export {
   zKeyAttestationStatus,
   zKeyAttestationTypeHeader,
   zMetadataResponse,
+  zMetadataResponseAPTITUDE,
   zMetadataResponseV1_0,
   zMetadataResponseV1_3,
   zMetadataResponseV1_4,