@pagopa/io-wallet-oid4vp 1.5.8 → 2.0.0-apt

package/dist/index.d.mts

@@ -1,9 +1,7 @@
-import { JwtSignerFederation, JwtSignerX5c, CreateJarRequestOptions, CallbackContext, JarAuthorizationRequest, CreateJarRequestResult, Jwk, JwkSet } from '@pagopa/io-wallet-oauth2';
-import { ItWalletSpecsVersion, IoWalletSdkConfig, HashCallback } from '@pagopa/io-wallet-utils';
+import { CreateJarRequestOptions, JarAuthorizationRequest, CreateJarRequestResult } from '@pagopa/io-wallet-oauth2';
+import { ItWalletSpecsVersion, JwtSignerFederation, JwtSignerX5c, CallbackContext, IoWalletSdkConfig, HashCallback, Jwk, JwkSet, JwtSigner } from '@pagopa/io-wallet-utils';
 import z$1, { z } from 'zod';
-import { CallbackContext as CallbackContext$1 } from '@openid4vc/oauth2';
 import { ItWalletCredentialVerifierMetadata, ItWalletCredentialVerifierMetadataV1_3 } from '@pagopa/io-wallet-oid-federation';
-export { CreateOpenid4vpAuthorizationResponseOptions, CreateOpenid4vpAuthorizationResponseResult, VpToken, createOpenid4vpAuthorizationResponse } from '@openid4vc/openid4vp';
 
 /**
  * Zod parser that describes a JWT payload
@@ -20,16 +18,34 @@ declare const zOpenid4vpAuthorizationRequestPayload: z.ZodIntersection<z.ZodObje
         jwks: z.ZodObject<{
             keys: z.ZodArray<z.ZodObject<{
                 alg: z.ZodOptional<z.ZodString>;
+                crv: z.ZodOptional<z.ZodString>;
+                d: z.ZodOptional<z.ZodString>;
+                dp: z.ZodOptional<z.ZodString>;
+                dq: z.ZodOptional<z.ZodString>;
+                e: z.ZodOptional<z.ZodString>;
+                ext: z.ZodOptional<z.ZodBoolean>;
+                k: z.ZodOptional<z.ZodString>;
                 key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                kid: z.ZodString;
                 kty: z.ZodString;
+                n: z.ZodOptional<z.ZodString>;
+                oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    d: z.ZodOptional<z.ZodString>;
+                    r: z.ZodOptional<z.ZodString>;
+                    t: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>>>;
+                p: z.ZodOptional<z.ZodString>;
+                q: z.ZodOptional<z.ZodString>;
+                qi: z.ZodOptional<z.ZodString>;
                 use: z.ZodOptional<z.ZodString>;
+                x: z.ZodOptional<z.ZodString>;
                 x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 x5t: z.ZodOptional<z.ZodString>;
                 "x5t#S256": z.ZodOptional<z.ZodString>;
                 x5u: z.ZodOptional<z.ZodString>;
+                y: z.ZodOptional<z.ZodString>;
+                kid: z.ZodString;
             }, z.core.$loose>>;
-        }, z.core.$strip>;
+        }, z.core.$loose>;
         logo_uri: z.ZodOptional<z.ZodURL>;
         redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
         request_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
@@ -55,7 +71,7 @@ declare const zOpenid4vpAuthorizationRequestPayload: z.ZodIntersection<z.ZodObje
     transaction_data_hashes_alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
     wallet_nonce: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>, z.ZodObject<{
-    aud: z.ZodOptional<z.ZodString>;
+    aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString>]>>;
     cnf: z.ZodOptional<z.ZodObject<{
         jkt: z.ZodOptional<z.ZodString>;
         jwk: z.ZodOptional<z.ZodObject<{
@@ -95,6 +111,7 @@ declare const zOpenid4vpAuthorizationRequestPayload: z.ZodIntersection<z.ZodObje
     nbf: z.ZodOptional<z.ZodNumber>;
     nonce: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    sub: z.ZodOptional<z.ZodString>;
     trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
 }, z.core.$strip>>;
 type Openid4vpAuthorizationRequestPayload = z.infer<typeof zOpenid4vpAuthorizationRequestPayload>;
@@ -121,7 +138,8 @@ type BaseJarOptions<TSigner extends JwtSignerFederation | JwtSignerX5c> = {
 type JarOptionsV1_0 = BaseJarOptions<JwtSignerFederation>;
 type JarOptionsV1_3 = BaseJarOptions<JwtSignerFederation | JwtSignerX5c>;
 type JarOptionsV1_4 = JarOptionsV1_3;
-type JarOptions = JarOptionsV1_0 | JarOptionsV1_3 | JarOptionsV1_4;
+type JarOptionsAPTITUDE = JarOptionsV1_4;
+type JarOptions = JarOptionsAPTITUDE | JarOptionsV1_0 | JarOptionsV1_3 | JarOptionsV1_4;
 interface BaseCreateAuthorizationRequestOptions<V extends ItWalletSpecsVersion, TJar extends JarOptions> {
     /**
      * Authorization request payload to be validated and serialized.
@@ -149,7 +167,8 @@ interface BaseCreateAuthorizationRequestOptions<V extends ItWalletSpecsVersion,
 type CreateAuthorizationRequestOptionsV1_0 = BaseCreateAuthorizationRequestOptions<ItWalletSpecsVersion.V1_0, JarOptionsV1_0>;
 type CreateAuthorizationRequestOptionsV1_3 = BaseCreateAuthorizationRequestOptions<ItWalletSpecsVersion.V1_3, JarOptionsV1_3>;
 type CreateAuthorizationRequestOptionsV1_4 = BaseCreateAuthorizationRequestOptions<ItWalletSpecsVersion.V1_4, JarOptionsV1_4>;
-type CreateAuthorizationRequestOptions = CreateAuthorizationRequestOptionsV1_0 | CreateAuthorizationRequestOptionsV1_3 | CreateAuthorizationRequestOptionsV1_4;
+type CreateAuthorizationRequestOptionsAPTITUDE = BaseCreateAuthorizationRequestOptions<ItWalletSpecsVersion.APTITUDE, JarOptionsAPTITUDE>;
+type CreateAuthorizationRequestOptions = CreateAuthorizationRequestOptionsAPTITUDE | CreateAuthorizationRequestOptionsV1_0 | CreateAuthorizationRequestOptionsV1_3 | CreateAuthorizationRequestOptionsV1_4;
 interface BaseCreateAuthorizationRequestResult<TJar extends JarOptions> {
     authorizationRequest: string;
     authorizationRequestObject: JarAuthorizationRequest;
@@ -159,7 +178,8 @@ interface BaseCreateAuthorizationRequestResult<TJar extends JarOptions> {
 type CreateAuthorizationRequestResultV1_0 = BaseCreateAuthorizationRequestResult<JarOptionsV1_0>;
 type CreateAuthorizationRequestResultV1_3 = BaseCreateAuthorizationRequestResult<JarOptionsV1_3>;
 type CreateAuthorizationRequestResultV1_4 = BaseCreateAuthorizationRequestResult<JarOptionsV1_4>;
-type CreateAuthorizationRequestResult = CreateAuthorizationRequestResultV1_0 | CreateAuthorizationRequestResultV1_3 | CreateAuthorizationRequestResultV1_4;
+type CreateAuthorizationRequestResultAPTITUDE = BaseCreateAuthorizationRequestResult<JarOptionsAPTITUDE>;
+type CreateAuthorizationRequestResult = CreateAuthorizationRequestResultAPTITUDE | CreateAuthorizationRequestResultV1_0 | CreateAuthorizationRequestResultV1_3 | CreateAuthorizationRequestResultV1_4;
 /**
  * Creates an OpenID4VP authorization request URL for the configured IT-Wallet version.
  *
@@ -203,7 +223,7 @@ interface FetchAuthorizationRequestOptions {
      * Callback functions for making HTTP requests
      * Allows for custom fetch implementation
      */
-    callbacks: Pick<CallbackContext$1, "fetch">;
+    callbacks: Pick<CallbackContext, "fetch">;
     /**
      * Optional wallet metadata to send when request_uri_method=post.
      * If not provided and POST is required, sends an empty body (basic implementation).
@@ -285,7 +305,7 @@ declare function createParsedQrCode(authorizeRequestUrl: string): ParsedQrCode;
  * @throws {Error} If the underlying fetch/createFetcher call fails (for example, due to network errors)
  */
 declare function fetchRequestObjectJwt(requestUri: string, options: {
-    fetch: CallbackContext$1["fetch"];
+    fetch: CallbackContext["fetch"];
     method: "get" | "post";
     walletMetadata?: FetchAuthorizationRequestOptions["walletMetadata"];
     walletNonce?: string;
@@ -369,7 +389,7 @@ interface ParseAuthorizeRequestOptions {
      * Optional callback context for JWT signature verification and hashing x509 client_id for digest comparison.
      * If not provided, signature verification is skipped or hash skips the x509_hash digest comparison.
      */
-    callbacks?: Partial<Pick<CallbackContext$1, "hash" | "verifyJwt">> & Partial<X509CertificateBinding>;
+    callbacks?: Partial<Pick<CallbackContext, "hash" | "verifyJwt">> & Partial<X509CertificateBinding>;
     config: IoWalletSdkConfig;
     /**
      * The Authorization Request Object JWT.
@@ -411,7 +431,7 @@ interface ParsedAuthorizeRequestResult {
  * @param options {@link ParseAuthorizeRequestOptions}
  * @returns A {@link ParsedAuthorizeRequestResult} containing the RP required credentials payload and the {@link Openid4vpAuthorizationRequestHeader} JWT header
  * @throws {ValidationError} in case there are errors validating the Request Object structure
- * @throws {Oauth2JwtParseError} in case the request object jwt is malformed (e.g missing header, bad encoding)
+ * @throws {JwtParseError} in case the request object jwt is malformed (e.g missing header, bad encoding)
  * @throws {@link ParseAuthorizeRequestError} in case the JWT signature is invalid (when verifyJwt is provided) or there are unexpected errors
  */
 declare function parseAuthorizeRequest(options: ParseAuthorizeRequestOptions): Promise<ParsedAuthorizeRequestResult>;
@@ -454,7 +474,7 @@ declare function validateAuthorizationRequestParams(params: AuthorizationRequest
 }) & typeof params;
 
 declare const zVpToken: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString>]>>;
-type VpToken = z.infer<typeof zVpToken>;
+type VpToken$1 = z.infer<typeof zVpToken>;
 
 declare const zOpenid4vpAuthorizationResponse: z$1.ZodObject<{
     state: z$1.ZodOptional<z$1.ZodString>;
@@ -503,7 +523,7 @@ interface CreateAuthorizationResponseOptions {
      * Array containing the vp_tokens of the credentials
      * to present
      */
-    vp_token: VpToken;
+    vp_token: VpToken$1;
 }
 type CreateAuthorizationResponseOptionsV1_0 = {
     config: IoWalletSdkConfig<ItWalletSpecsVersion.V1_0>;
@@ -546,6 +566,74 @@ interface CreateAuthorizationResponseResult {
  */
 declare function createAuthorizationResponse(options: CreateAuthorizationResponseVersionedOptions): Promise<CreateAuthorizationResponseResult>;
 
+type VpTokenPresentationEntry = Record<string, unknown> | string;
+type VpToken = [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]] | Record<string, [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]] | VpTokenPresentationEntry> | VpTokenPresentationEntry;
+interface Openid4vpAuthorizationResponsePayload {
+    [key: string]: unknown;
+    access_token?: string;
+    expires_in?: number;
+    id_token?: string;
+    presentation_submission?: Record<string, unknown> | string;
+    refresh_token?: string;
+    state?: string;
+    token_type?: string;
+    vp_token: VpToken;
+}
+interface JarmClientMetadata {
+    authorization_encrypted_response_alg?: string;
+    authorization_encrypted_response_enc?: string;
+    authorization_signed_response_alg?: string;
+    encrypted_response_enc_values_supported?: string[];
+    jwks?: JwkSet;
+    jwks_uri?: string;
+}
+interface JarmServerMetadata {
+    authorization_encryption_alg_values_supported: string[];
+    authorization_encryption_enc_values_supported: string[];
+    authorization_signed_response_alg_values_supported?: string[];
+}
+interface CreateOpenid4vpAuthorizationResponseOptions {
+    authorizationRequestPayload: Openid4vpAuthorizationRequestPayload;
+    authorizationResponsePayload: {
+        state?: never;
+    } & Openid4vpAuthorizationResponsePayload;
+    callbacks: Pick<CallbackContext, "encryptJwe" | "fetch" | "signJwt">;
+    /**
+     * Verifier metadata resolved and verified outside the request. Required when the
+     * client_id refers to an OpenID Federation entity, whose metadata must come from
+     * the Trust Chain rather than the request's `client_metadata`.
+     */
+    clientMetadata?: JarmClientMetadata;
+    jarm?: {
+        audience?: string;
+        authorizationServer?: string;
+        encryption?: {
+            jwk?: Jwk;
+            nonce: string;
+        };
+        /**
+         * Lifetime of the signed JARM response, in seconds from now; `exp` is set to
+         * now + this value. Defaults to 600 seconds.
+         */
+        expiresInSeconds?: number;
+        jwtSigner?: JwtSigner;
+        serverMetadata: JarmServerMetadata;
+    };
+    origin?: string;
+}
+interface CreateOpenid4vpAuthorizationResponseResult {
+    authorizationResponsePayload: Openid4vpAuthorizationResponsePayload;
+    jarm?: {
+        /**
+         * The JWK returned by the `encryptJwe` callback. Only defined when the
+         * response is encrypted.
+         */
+        encryptionJwk?: Jwk;
+        responseJwt: string;
+    };
+}
+declare function createOpenid4vpAuthorizationResponse(options: CreateOpenid4vpAuthorizationResponseOptions): Promise<CreateOpenid4vpAuthorizationResponseResult>;
+
 /**
  * Configuration options for fetching OID4VP Presentation Result
  */
@@ -558,7 +646,7 @@ interface FetchAuthorizationResponseOptions {
      * Callback functions for making HTTP requests
      * Allows for custom fetch implementations
      */
-    callbacks: Pick<CallbackContext$1, "fetch">;
+    callbacks: Pick<CallbackContext, "fetch">;
     /**
      * The response_uri field contained in the {@link Openid4vpAuthorizationRequestPayload}
      */
@@ -666,7 +754,7 @@ declare const zEncryptedJarmHeader: z.ZodObject<{
 type EncryptedJarmHeader = z.infer<typeof zEncryptedJarmHeader>;
 declare const zJarmAuthorizationResponse: z.ZodObject<{
     state: z.ZodOptional<z.ZodString>;
-    aud: z.ZodNonOptional<z.ZodOptional<z.ZodString>>;
+    aud: z.ZodNonOptional<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString>]>>>;
     exp: z.ZodNonOptional<z.ZodOptional<z.ZodNumber>>;
     iss: z.ZodNonOptional<z.ZodOptional<z.ZodString>>;
     cnf: z.ZodOptional<z.ZodObject<{
@@ -706,12 +794,13 @@ declare const zJarmAuthorizationResponse: z.ZodObject<{
     nbf: z.ZodOptional<z.ZodNumber>;
     nonce: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    sub: z.ZodOptional<z.ZodString>;
     trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
 }, z.core.$loose>;
 type JarmAuthorizationResponse = z.infer<typeof zJarmAuthorizationResponse>;
 declare const zJarmAuthorizationResponseEncryptedOnly: z.ZodObject<{
     state: z.ZodOptional<z.ZodString>;
-    aud: z.ZodOptional<z.ZodString>;
+    aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString>]>>;
     cnf: z.ZodOptional<z.ZodObject<{
         jkt: z.ZodOptional<z.ZodString>;
         jwk: z.ZodOptional<z.ZodObject<{
@@ -751,6 +840,7 @@ declare const zJarmAuthorizationResponseEncryptedOnly: z.ZodObject<{
     nbf: z.ZodOptional<z.ZodNumber>;
     nonce: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    sub: z.ZodOptional<z.ZodString>;
     trust_chain: z.ZodOptional<z.ZodTuple<[z.ZodString], z.ZodString>>;
 }, z.core.$loose>;
 type JarmAuthorizationResponseEncryptedOnly = z.infer<typeof zJarmAuthorizationResponseEncryptedOnly>;
@@ -817,19 +907,17 @@ declare function verifyJarmAuthorizationResponse(options: VerifyJarmAuthorizatio
     decryptionJwk: {
         [x: string]: unknown;
         kty: string;
-        crv?: string | undefined;
-        x?: string | undefined;
-        y?: string | undefined;
-        e?: string | undefined;
-        n?: string | undefined;
         alg?: string | undefined;
+        crv?: string | undefined;
         d?: string | undefined;
         dp?: string | undefined;
         dq?: string | undefined;
+        e?: string | undefined;
         ext?: boolean | undefined;
         k?: string | undefined;
         key_ops?: string[] | undefined;
         kid?: string | undefined;
+        n?: string | undefined;
         oth?: {
             [x: string]: unknown;
             d?: string | undefined;
@@ -840,15 +928,17 @@ declare function verifyJarmAuthorizationResponse(options: VerifyJarmAuthorizatio
         q?: string | undefined;
         qi?: string | undefined;
         use?: string | undefined;
+        x?: string | undefined;
         x5c?: string[] | undefined;
         x5t?: string | undefined;
-        'x5t#S256'?: string | undefined;
+        "x5t#S256"?: string | undefined;
         x5u?: string | undefined;
+        y?: string | undefined;
     } | undefined;
     issuer: string | undefined;
     jarmAuthorizationResponse: {
         [x: string]: unknown;
-        aud: string;
+        aud: string | string[];
         exp: number;
         iss: string;
         state?: string | undefined;
@@ -892,11 +982,12 @@ declare function verifyJarmAuthorizationResponse(options: VerifyJarmAuthorizatio
         nbf?: number | undefined;
         nonce?: string | undefined;
         status?: Record<string, any> | undefined;
+        sub?: string | undefined;
         trust_chain?: [string, ...string[]] | undefined;
     } | {
         [x: string]: unknown;
         state?: string | undefined;
-        aud?: string | undefined;
+        aud?: string | string[] | undefined;
         cnf?: {
             [x: string]: unknown;
             jkt?: string | undefined;
@@ -939,6 +1030,7 @@ declare function verifyJarmAuthorizationResponse(options: VerifyJarmAuthorizatio
         nbf?: number | undefined;
         nonce?: string | undefined;
         status?: Record<string, any> | undefined;
+        sub?: string | undefined;
         trust_chain?: [string, ...string[]] | undefined;
     };
     type: JarmMode;
@@ -1139,4 +1231,4 @@ interface ParseJarmAuthorizationResponseOptions {
  */
 declare function parseJarmAuthorizationResponse(options: ParseJarmAuthorizationResponseOptions): Promise<ParseAuthorizationResponseResult>;
 
-export { type AuthorizationRequestUrlParams, type CertificateEndpoint, type ClientIdParts, ClientIdPrefix, type CreateAuthorizationRequestOptions, type CreateAuthorizationRequestOptionsV1_0, type CreateAuthorizationRequestOptionsV1_3, type CreateAuthorizationRequestOptionsV1_4, type CreateAuthorizationRequestResult, type CreateAuthorizationRequestResultV1_0, type CreateAuthorizationRequestResultV1_3, type CreateAuthorizationRequestResultV1_4, CreateAuthorizationResponseError, type CreateAuthorizationResponseOptionsV1_0, type CreateAuthorizationResponseOptionsV1_3, type CreateAuthorizationResponseOptionsV1_4, type CreateAuthorizationResponseResult, type CreateAuthorizationResponseVersionedOptions, type EncryptedJarmHeader, type FetchAuthorizationRequestOptions, type FetchAuthorizationRequestResult, FetchAuthorizationResponseError, type FetchAuthorizationResponseOptions, type GetX509CertificateMetadataCallback, InvalidRequestUriMethodError, type JarOptionsV1_0, type JarOptionsV1_3, type JarOptionsV1_4, type JarmAuthorizationResponse, type JarmAuthorizationResponseEncryptedOnly, type JarmHeader, JarmMode, Oid4vpError, type Openid4vpAuthorizationRequestHeader, type Openid4vpAuthorizationRequestHeaderV1_0, type Openid4vpAuthorizationRequestHeaderV1_3, type Openid4vpAuthorizationRequestPayload, type Openid4vpAuthorizationResponse, type Openid4vpAuthorizationResponseResult, type ParseAuthorizationResponseOptions, type ParseAuthorizationResponseResult, ParseAuthorizeRequestError, type ParseAuthorizeRequestOptions, type ParseJarmAuthorizationResponseOptions, type ParsedAuthorizeRequestResult, type ParsedQrCode, type ValidateCertificateEndpointsOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type ValidateOpenid4vpAuthorizationResponseResult, type VerifyJarmAuthorizationResponseOptions, type VerifyJarmAuthorizationResponseResult, type X509CertificateBinding, type X509CertificateMetadata, createAuthorizationRequest, createAuthorizationResponse, createParsedQrCode, createX509HashClientId, extractClientIdPrefix, extractEncryptionJwkFromJwks, fetchAuthorizationRequest, fetchAuthorizationResponse, fetchRequestObjectJwt, parseAuthorizationResponse, parseAuthorizeRequest, parseJarmAuthorizationResponse, parseVpToken, validateAuthorizationRequestParams, validateCertificateEndpoints, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zAuthorizationRequestUrlParams, zEncryptedJarmHeader, zJarmAuthorizationResponse, zJarmAuthorizationResponseEncryptedOnly, zJarmHeader, zOpenid4vpAuthorizationRequestHeaderV1_0, zOpenid4vpAuthorizationRequestHeaderV1_3, zOpenid4vpAuthorizationRequestPayload, zOpenid4vpAuthorizationResponse, zOpenid4vpAuthorizationResponseResult, zVpToken };
+export { type AuthorizationRequestUrlParams, type CertificateEndpoint, type ClientIdParts, ClientIdPrefix, type CreateAuthorizationRequestOptions, type CreateAuthorizationRequestOptionsAPTITUDE, type CreateAuthorizationRequestOptionsV1_0, type CreateAuthorizationRequestOptionsV1_3, type CreateAuthorizationRequestOptionsV1_4, type CreateAuthorizationRequestResult, type CreateAuthorizationRequestResultAPTITUDE, type CreateAuthorizationRequestResultV1_0, type CreateAuthorizationRequestResultV1_3, type CreateAuthorizationRequestResultV1_4, CreateAuthorizationResponseError, type CreateAuthorizationResponseOptionsV1_0, type CreateAuthorizationResponseOptionsV1_3, type CreateAuthorizationResponseOptionsV1_4, type CreateAuthorizationResponseResult, type CreateAuthorizationResponseVersionedOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type EncryptedJarmHeader, type FetchAuthorizationRequestOptions, type FetchAuthorizationRequestResult, FetchAuthorizationResponseError, type FetchAuthorizationResponseOptions, type GetX509CertificateMetadataCallback, InvalidRequestUriMethodError, type JarOptionsAPTITUDE, type JarOptionsV1_0, type JarOptionsV1_3, type JarOptionsV1_4, type JarmAuthorizationResponse, type JarmAuthorizationResponseEncryptedOnly, type JarmClientMetadata, type JarmHeader, JarmMode, type JarmServerMetadata, Oid4vpError, type Openid4vpAuthorizationRequestHeader, type Openid4vpAuthorizationRequestHeaderV1_0, type Openid4vpAuthorizationRequestHeaderV1_3, type Openid4vpAuthorizationRequestPayload, type Openid4vpAuthorizationResponse, type Openid4vpAuthorizationResponsePayload, type Openid4vpAuthorizationResponseResult, type ParseAuthorizationResponseOptions, type ParseAuthorizationResponseResult, ParseAuthorizeRequestError, type ParseAuthorizeRequestOptions, type ParseJarmAuthorizationResponseOptions, type ParsedAuthorizeRequestResult, type ParsedQrCode, type ValidateCertificateEndpointsOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type ValidateOpenid4vpAuthorizationResponseResult, type VerifyJarmAuthorizationResponseOptions, type VerifyJarmAuthorizationResponseResult, type VpToken, type VpTokenPresentationEntry, type X509CertificateBinding, type X509CertificateMetadata, createAuthorizationRequest, createAuthorizationResponse, createOpenid4vpAuthorizationResponse, createParsedQrCode, createX509HashClientId, extractClientIdPrefix, extractEncryptionJwkFromJwks, fetchAuthorizationRequest, fetchAuthorizationResponse, fetchRequestObjectJwt, parseAuthorizationResponse, parseAuthorizeRequest, parseJarmAuthorizationResponse, parseVpToken, validateAuthorizationRequestParams, validateCertificateEndpoints, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zAuthorizationRequestUrlParams, zEncryptedJarmHeader, zJarmAuthorizationResponse, zJarmAuthorizationResponseEncryptedOnly, zJarmHeader, zOpenid4vpAuthorizationRequestHeaderV1_0, zOpenid4vpAuthorizationRequestHeaderV1_3, zOpenid4vpAuthorizationRequestPayload, zOpenid4vpAuthorizationResponse, zOpenid4vpAuthorizationResponseResult, zVpToken };