@pagopa/io-wallet-oid4vp 0.4.1

package/README.md

@@ -0,0 +1,127 @@
+## @pagopa/io-wallet-oid4vp
+
+This package provides functionalities to manage the **OpenID for Verifiable Presentations (OID4VP)** protocol flow, specifically tailored for the Italian Wallet ecosystem, simplifying QEAA credentials issuance and credentials presentations.
+
+## Installation
+
+To install the package, use your preferred package manager:
+
+```bash
+# Using pnpm
+pnpm add @pagopa/io-wallet-oid4vp
+
+# Using yarn
+yarn add @pagopa/io-wallet-oid4vp
+```
+
+## Usage
+
+### Verifying a received Request object
+
+```typescript
+import { parseAuthorizeRequest } from '@pagopa/io-wallet-oid4vp';
+
+//Request Object JWT containing the requested credentials obtained from the RP
+const requestObjectJwt = "ey..." 
+
+//Obtain the signer
+const signer = {
+    method : 'jwk',
+    publicJwk : {/*... jwk details*/},
+    alg : 'ES256'
+}
+
+//Prepare the callbacks
+const callbacks = {
+    verifyJwt : async (signer, {header, payload, compact}) => {
+        const result = //signature verification
+        return {
+            verified : result,
+            signerJwk : signer.publicJwk //Mandatory only if signature is verified correctly
+        }
+    }
+}
+
+//Decode, verify and return the Request Object
+const parsedRequestObject = await parseAuthorizeRequest({
+    requestObjectJwt,
+    callbacks,
+    dpop : {signer}
+});
+```
+
+## API Reference
+
+### AuthorizationRequestObject type and Zod parser
+```typescript
+export const zOpenid4vpAuthorizationRequest = z
+  .object({
+    response_type: z.literal('vp_token'),
+    client_id: z.string(),
+    response_uri: z.string().url().optional(),
+    request_uri: z.string().url().optional(),
+    request_uri_method: z.optional(z.string()),
+    response_mode: z.literal("direct_post.jwt"),
+    nonce: z.string(),
+    wallet_nonce: z.string().optional(),
+    scope: z.string().optional(),
+    dcql_query: z.record(z.string(), z.any()).optional(),
+    state: z.string().optional(),
+  })
+  .passthrough().and(zJwtPayload)
+
+export type AuthorizationRequestObject = z.infer<typeof zOpenid4vpAuthorizationRequest>
+```
+
+### parseAuthorizeRequest
+```typescript
+export interface ParseAuthorizeRequestOptions {
+    /**
+     * The Authorization Request Object JWT.
+     */
+    requestObjectJwt : string ;
+
+    /**
+     * Callback context for signature verification.
+     */
+    callbacks : Pick<CallbackContext, 'verifyJwt'>
+
+    /**
+     * DPoP options
+     */
+    dpop: RequestDpopOptions
+}
+
+export async function parseAuthorizeRequest(options: ParseAuthorizeRequestOptions) : Promise<AuthorizationRequestObject> {
+    ...
+}
+```
+This method receives a Request Object in JWT format, verifies the signature and returns the decoded Request Object.
+
+### Errors
+
+```typescript
+export class Oid4vpError extends Error {
+  constructor(
+    message: string,
+    public readonly statusCode?: number,
+  ) {
+    super(message);
+    this.name = "Oid4vpError";
+  }
+}
+```
+Generic package level error class which every other package error should extend.
+
+```typescript
+export class ParseAuthorizeRequestError extends Oid4vpError {
+  constructor(
+    message: string,
+    public readonly statusCode?: number,
+  ) {
+    super(message);
+    this.name = "ParseAuthorizeRequestError";
+  }
+}
+```
+Error thrown by `parseAuthorizeRequest` when the passed request object has an invalid signature or unexpected errors are thrown.

package/dist/index.js

@@ -0,0 +1,102 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  Oid4vpError: () => Oid4vpError,
+  ParseAuthorizeRequestError: () => ParseAuthorizeRequestError,
+  parseAuthorizeRequest: () => parseAuthorizeRequest,
+  zOpenid4vpAuthorizationRequest: () => zOpenid4vpAuthorizationRequest
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/authorization-request/parse-authorization-request.ts
+var import_oauth22 = require("@openid4vc/oauth2");
+var import_utils = require("@openid4vc/utils");
+
+// src/errors.ts
+var Oid4vpError = class extends Error {
+  constructor(message, statusCode) {
+    super(message);
+    this.statusCode = statusCode;
+    this.name = "Oid4vpError";
+  }
+};
+var ParseAuthorizeRequestError = class extends Oid4vpError {
+  constructor(message, statusCode) {
+    super(message);
+    this.statusCode = statusCode;
+    this.name = "ParseAuthorizeRequestError";
+  }
+};
+
+// src/authorization-request/z-request-object.ts
+var import_oauth2 = require("@openid4vc/oauth2");
+var import_zod = require("zod");
+var zOpenid4vpAuthorizationRequest = import_zod.z.object({
+  client_id: import_zod.z.string(),
+  dcql_query: import_zod.z.record(import_zod.z.string(), import_zod.z.any()).optional(),
+  nonce: import_zod.z.string(),
+  request_uri: import_zod.z.string().url().optional(),
+  request_uri_method: import_zod.z.optional(import_zod.z.string()),
+  response_mode: import_zod.z.literal("direct_post.jwt"),
+  response_type: import_zod.z.literal("vp_token"),
+  response_uri: import_zod.z.string().url().optional(),
+  scope: import_zod.z.string().optional(),
+  state: import_zod.z.string().optional(),
+  wallet_nonce: import_zod.z.string().optional()
+}).passthrough().and(import_oauth2.zJwtPayload);
+
+// src/authorization-request/parse-authorization-request.ts
+async function parseAuthorizeRequest(options) {
+  try {
+    const decoded = (0, import_oauth22.decodeJwt)({
+      jwt: options.requestObjectJwt,
+      payloadSchema: zOpenid4vpAuthorizationRequest
+    });
+    const verificationResult = await options.callbacks.verifyJwt(
+      options.dpop.signer,
+      {
+        compact: options.requestObjectJwt,
+        header: decoded.header,
+        payload: decoded.payload
+      }
+    );
+    if (!verificationResult.verified)
+      throw new ParseAuthorizeRequestError(
+        "Error verifying Request Object signature"
+      );
+    return decoded.payload;
+  } catch (error) {
+    if (error instanceof import_utils.ValidationError || error instanceof import_oauth22.Oauth2JwtParseError)
+      throw error;
+    throw new ParseAuthorizeRequestError(
+      `Unexpected error during Request Object parsing: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  Oid4vpError,
+  ParseAuthorizeRequestError,
+  parseAuthorizeRequest,
+  zOpenid4vpAuthorizationRequest
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/authorization-request/parse-authorization-request.ts","../src/errors.ts","../src/authorization-request/z-request-object.ts"],"sourcesContent":["export * from \"./authorization-request\";\nexport * from \"./errors\";\n","import {\n  CallbackContext,\n  Oauth2JwtParseError,\n  RequestDpopOptions,\n  decodeJwt,\n} from \"@openid4vc/oauth2\";\nimport { ValidationError } from \"@openid4vc/utils\";\n\nimport { ParseAuthorizeRequestError } from \"../errors\";\nimport {\n  AuthorizationRequestObject,\n  zOpenid4vpAuthorizationRequest,\n} from \"./z-request-object\";\n\nexport interface ParseAuthorizeRequestOptions {\n  /**\n   * Callback context for signature verification.\n   */\n  callbacks: Pick<CallbackContext, \"verifyJwt\">;\n\n  /**\n   * DPoP options\n   */\n  dpop: RequestDpopOptions;\n\n  /**\n   * The Authorization Request Object JWT.\n   */\n  requestObjectJwt: string;\n}\n\n/**\n * This method verifies a JWT containing a Request Object and returns its\n * decoded value for further processing\n * @param options {@link ParseAuthorizeRequestOptions}\n * @returns An {@link AuthorizationRequestObject} containing the RP required\n *          credentials\n * @throws {@link ValidationError} in case there are errors validating the Request Object structure\n * @throws {@link Oauth2JwtParseError} in case the request object jwt is malformed (e.g missing header, bad encoding)\n * @throws {@link ParseAuthorizeRequestError} in case the JWT signature is invalid or there are unexpected errors\n */\nexport async function parseAuthorizeRequest(\n  options: ParseAuthorizeRequestOptions,\n): Promise<AuthorizationRequestObject> {\n  try {\n    const decoded = decodeJwt({\n      jwt: options.requestObjectJwt,\n      payloadSchema: zOpenid4vpAuthorizationRequest,\n    });\n    const verificationResult = await options.callbacks.verifyJwt(\n      options.dpop.signer,\n      {\n        compact: options.requestObjectJwt,\n        header: decoded.header,\n        payload: decoded.payload,\n      },\n    );\n\n    if (!verificationResult.verified)\n      throw new ParseAuthorizeRequestError(\n        \"Error verifying Request Object signature\",\n      );\n\n    return decoded.payload;\n  } catch (error) {\n    if (\n      error instanceof ValidationError ||\n      error instanceof Oauth2JwtParseError\n    )\n      throw error;\n    throw new ParseAuthorizeRequestError(\n      `Unexpected error during Request Object parsing: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n","/**\n * Generic error thrown during Oid4vp operations\n */\nexport class Oid4vpError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode?: number,\n  ) {\n    super(message);\n    this.name = \"Oid4vpError\";\n  }\n}\n\n/**\n * Error thrown by {@link parseAuthorizeRequest} when the passed\n * request object has an invalid signature or unexpected errors\n * are thrown\n */\nexport class ParseAuthorizeRequestError extends Oid4vpError {\n  constructor(\n    message: string,\n    public readonly statusCode?: number,\n  ) {\n    super(message);\n    this.name = \"ParseAuthorizeRequestError\";\n  }\n}\n","import { zJwtPayload } from \"@openid4vc/oauth2\";\nimport { z } from \"zod\";\n\n/**\n * Zod parser that describes a JWT payload\n * containing an OID4VP Request Object\n */\nexport const zOpenid4vpAuthorizationRequest = z\n  .object({\n    client_id: z.string(),\n    dcql_query: z.record(z.string(), z.any()).optional(),\n    nonce: z.string(),\n    request_uri: z.string().url().optional(),\n    request_uri_method: z.optional(z.string()),\n    response_mode: z.literal(\"direct_post.jwt\"),\n    response_type: z.literal(\"vp_token\"),\n    response_uri: z.string().url().optional(),\n    scope: z.string().optional(),\n    state: z.string().optional(),\n    wallet_nonce: z.string().optional(),\n  })\n  .passthrough()\n  .and(zJwtPayload);\n\nexport type AuthorizationRequestObject = z.infer<\n  typeof zOpenid4vpAuthorizationRequest\n>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,iBAKO;AACP,mBAAgC;;;ACHzB,IAAM,cAAN,cAA0B,MAAM;AAAA,EACrC,YACE,SACgB,YAChB;AACA,UAAM,OAAO;AAFG;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAOO,IAAM,6BAAN,cAAyC,YAAY;AAAA,EAC1D,YACE,SACgB,YAChB;AACA,UAAM,OAAO;AAFG;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;;;AC1BA,oBAA4B;AAC5B,iBAAkB;AAMX,IAAM,iCAAiC,aAC3C,OAAO;AAAA,EACN,WAAW,aAAE,OAAO;AAAA,EACpB,YAAY,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnD,OAAO,aAAE,OAAO;AAAA,EAChB,aAAa,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACvC,oBAAoB,aAAE,SAAS,aAAE,OAAO,CAAC;AAAA,EACzC,eAAe,aAAE,QAAQ,iBAAiB;AAAA,EAC1C,eAAe,aAAE,QAAQ,UAAU;AAAA,EACnC,cAAc,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACxC,OAAO,aAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,aAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,cAAc,aAAE,OAAO,EAAE,SAAS;AACpC,CAAC,EACA,YAAY,EACZ,IAAI,yBAAW;;;AFmBlB,eAAsB,sBACpB,SACqC;AACrC,MAAI;AACF,UAAM,cAAU,0BAAU;AAAA,MACxB,KAAK,QAAQ;AAAA,MACb,eAAe;AAAA,IACjB,CAAC;AACD,UAAM,qBAAqB,MAAM,QAAQ,UAAU;AAAA,MACjD,QAAQ,KAAK;AAAA,MACb;AAAA,QACE,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,SAAS,QAAQ;AAAA,MACnB;AAAA,IACF;AAEA,QAAI,CAAC,mBAAmB;AACtB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAEF,WAAO,QAAQ;AAAA,EACjB,SAAS,OAAO;AACd,QACE,iBAAiB,gCACjB,iBAAiB;AAEjB,YAAM;AACR,UAAM,IAAI;AAAA,MACR,mDAAmD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAC3G;AAAA,EACF;AACF;","names":["import_oauth2"]}

package/dist/index.mjs

@@ -0,0 +1,75 @@
+// src/authorization-request/parse-authorization-request.ts
+import {
+  Oauth2JwtParseError,
+  decodeJwt
+} from "@openid4vc/oauth2";
+import { ValidationError } from "@openid4vc/utils";
+
+// src/errors.ts
+var Oid4vpError = class extends Error {
+  constructor(message, statusCode) {
+    super(message);
+    this.statusCode = statusCode;
+    this.name = "Oid4vpError";
+  }
+};
+var ParseAuthorizeRequestError = class extends Oid4vpError {
+  constructor(message, statusCode) {
+    super(message);
+    this.statusCode = statusCode;
+    this.name = "ParseAuthorizeRequestError";
+  }
+};
+
+// src/authorization-request/z-request-object.ts
+import { zJwtPayload } from "@openid4vc/oauth2";
+import { z } from "zod";
+var zOpenid4vpAuthorizationRequest = z.object({
+  client_id: z.string(),
+  dcql_query: z.record(z.string(), z.any()).optional(),
+  nonce: z.string(),
+  request_uri: z.string().url().optional(),
+  request_uri_method: z.optional(z.string()),
+  response_mode: z.literal("direct_post.jwt"),
+  response_type: z.literal("vp_token"),
+  response_uri: z.string().url().optional(),
+  scope: z.string().optional(),
+  state: z.string().optional(),
+  wallet_nonce: z.string().optional()
+}).passthrough().and(zJwtPayload);
+
+// src/authorization-request/parse-authorization-request.ts
+async function parseAuthorizeRequest(options) {
+  try {
+    const decoded = decodeJwt({
+      jwt: options.requestObjectJwt,
+      payloadSchema: zOpenid4vpAuthorizationRequest
+    });
+    const verificationResult = await options.callbacks.verifyJwt(
+      options.dpop.signer,
+      {
+        compact: options.requestObjectJwt,
+        header: decoded.header,
+        payload: decoded.payload
+      }
+    );
+    if (!verificationResult.verified)
+      throw new ParseAuthorizeRequestError(
+        "Error verifying Request Object signature"
+      );
+    return decoded.payload;
+  } catch (error) {
+    if (error instanceof ValidationError || error instanceof Oauth2JwtParseError)
+      throw error;
+    throw new ParseAuthorizeRequestError(
+      `Unexpected error during Request Object parsing: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+export {
+  Oid4vpError,
+  ParseAuthorizeRequestError,
+  parseAuthorizeRequest,
+  zOpenid4vpAuthorizationRequest
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/authorization-request/parse-authorization-request.ts","../src/errors.ts","../src/authorization-request/z-request-object.ts"],"sourcesContent":["import {\n  CallbackContext,\n  Oauth2JwtParseError,\n  RequestDpopOptions,\n  decodeJwt,\n} from \"@openid4vc/oauth2\";\nimport { ValidationError } from \"@openid4vc/utils\";\n\nimport { ParseAuthorizeRequestError } from \"../errors\";\nimport {\n  AuthorizationRequestObject,\n  zOpenid4vpAuthorizationRequest,\n} from \"./z-request-object\";\n\nexport interface ParseAuthorizeRequestOptions {\n  /**\n   * Callback context for signature verification.\n   */\n  callbacks: Pick<CallbackContext, \"verifyJwt\">;\n\n  /**\n   * DPoP options\n   */\n  dpop: RequestDpopOptions;\n\n  /**\n   * The Authorization Request Object JWT.\n   */\n  requestObjectJwt: string;\n}\n\n/**\n * This method verifies a JWT containing a Request Object and returns its\n * decoded value for further processing\n * @param options {@link ParseAuthorizeRequestOptions}\n * @returns An {@link AuthorizationRequestObject} containing the RP required\n *          credentials\n * @throws {@link ValidationError} in case there are errors validating the Request Object structure\n * @throws {@link Oauth2JwtParseError} in case the request object jwt is malformed (e.g missing header, bad encoding)\n * @throws {@link ParseAuthorizeRequestError} in case the JWT signature is invalid or there are unexpected errors\n */\nexport async function parseAuthorizeRequest(\n  options: ParseAuthorizeRequestOptions,\n): Promise<AuthorizationRequestObject> {\n  try {\n    const decoded = decodeJwt({\n      jwt: options.requestObjectJwt,\n      payloadSchema: zOpenid4vpAuthorizationRequest,\n    });\n    const verificationResult = await options.callbacks.verifyJwt(\n      options.dpop.signer,\n      {\n        compact: options.requestObjectJwt,\n        header: decoded.header,\n        payload: decoded.payload,\n      },\n    );\n\n    if (!verificationResult.verified)\n      throw new ParseAuthorizeRequestError(\n        \"Error verifying Request Object signature\",\n      );\n\n    return decoded.payload;\n  } catch (error) {\n    if (\n      error instanceof ValidationError ||\n      error instanceof Oauth2JwtParseError\n    )\n      throw error;\n    throw new ParseAuthorizeRequestError(\n      `Unexpected error during Request Object parsing: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n","/**\n * Generic error thrown during Oid4vp operations\n */\nexport class Oid4vpError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode?: number,\n  ) {\n    super(message);\n    this.name = \"Oid4vpError\";\n  }\n}\n\n/**\n * Error thrown by {@link parseAuthorizeRequest} when the passed\n * request object has an invalid signature or unexpected errors\n * are thrown\n */\nexport class ParseAuthorizeRequestError extends Oid4vpError {\n  constructor(\n    message: string,\n    public readonly statusCode?: number,\n  ) {\n    super(message);\n    this.name = \"ParseAuthorizeRequestError\";\n  }\n}\n","import { zJwtPayload } from \"@openid4vc/oauth2\";\nimport { z } from \"zod\";\n\n/**\n * Zod parser that describes a JWT payload\n * containing an OID4VP Request Object\n */\nexport const zOpenid4vpAuthorizationRequest = z\n  .object({\n    client_id: z.string(),\n    dcql_query: z.record(z.string(), z.any()).optional(),\n    nonce: z.string(),\n    request_uri: z.string().url().optional(),\n    request_uri_method: z.optional(z.string()),\n    response_mode: z.literal(\"direct_post.jwt\"),\n    response_type: z.literal(\"vp_token\"),\n    response_uri: z.string().url().optional(),\n    scope: z.string().optional(),\n    state: z.string().optional(),\n    wallet_nonce: z.string().optional(),\n  })\n  .passthrough()\n  .and(zJwtPayload);\n\nexport type AuthorizationRequestObject = z.infer<\n  typeof zOpenid4vpAuthorizationRequest\n>;\n"],"mappings":";AAAA;AAAA,EAEE;AAAA,EAEA;AAAA,OACK;AACP,SAAS,uBAAuB;;;ACHzB,IAAM,cAAN,cAA0B,MAAM;AAAA,EACrC,YACE,SACgB,YAChB;AACA,UAAM,OAAO;AAFG;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAOO,IAAM,6BAAN,cAAyC,YAAY;AAAA,EAC1D,YACE,SACgB,YAChB;AACA,UAAM,OAAO;AAFG;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;;;AC1BA,SAAS,mBAAmB;AAC5B,SAAS,SAAS;AAMX,IAAM,iCAAiC,EAC3C,OAAO;AAAA,EACN,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnD,OAAO,EAAE,OAAO;AAAA,EAChB,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACvC,oBAAoB,EAAE,SAAS,EAAE,OAAO,CAAC;AAAA,EACzC,eAAe,EAAE,QAAQ,iBAAiB;AAAA,EAC1C,eAAe,EAAE,QAAQ,UAAU;AAAA,EACnC,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACxC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,cAAc,EAAE,OAAO,EAAE,SAAS;AACpC,CAAC,EACA,YAAY,EACZ,IAAI,WAAW;;;AFmBlB,eAAsB,sBACpB,SACqC;AACrC,MAAI;AACF,UAAM,UAAU,UAAU;AAAA,MACxB,KAAK,QAAQ;AAAA,MACb,eAAe;AAAA,IACjB,CAAC;AACD,UAAM,qBAAqB,MAAM,QAAQ,UAAU;AAAA,MACjD,QAAQ,KAAK;AAAA,MACb;AAAA,QACE,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,SAAS,QAAQ;AAAA,MACnB;AAAA,IACF;AAEA,QAAI,CAAC,mBAAmB;AACtB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAEF,WAAO,QAAQ;AAAA,EACjB,SAAS,OAAO;AACd,QACE,iBAAiB,mBACjB,iBAAiB;AAEjB,YAAM;AACR,UAAM,IAAI;AAAA,MACR,mDAAmD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAC3G;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@pagopa/io-wallet-oid4vp",
+  "version": "0.4.1",
+  "files": [
+    "dist"
+  ],
+  "license": "Apache-2.0",
+  "exports": {
+    ".": {
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./package.json": "./package.json"
+  },
+  "homepage": "https://github.com/pagopa/io-wallet-sdk/tree/main/packages/oid4vp",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/pagopa/io-wallet-sdk",
+    "directory": "packages/oid4vp"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@openid4vc/oauth2": "0.3.0-alpha-20250714110838",
+    "@openid4vc/utils": "0.3.0-alpha-20250714110838",
+    "@openid4vc/openid4vp": "0.3.0-alpha-20250714110838",
+    "zod": "^3.24.2"
+  },
+  "devDependencies": {
+    "jose": "^6.1.0"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts --format cjs,esm --dts --clean --sourcemap",
+    "test": "vitest"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts"
+}