@procivis/react-native-one-core 1.26999.0 → 1.33398.0

package/README.md

@@ -1,5 +1,8 @@
-![Procivis One](https://assets.procivis-one.com/static/logo/logo_dark_Procivis_One.png#gh-light-mode-only)
-![Procivis One](https://assets.procivis-one.com/static/logo/logo_light_Procivis_One.png#gh-dark-mode-only)
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://assets.procivis-one.com/static/logo/logo_dark_Procivis_One.png">
+  <source media="(prefers-color-scheme: light)" srcset="https://assets.procivis-one.com/static/logo/logo_light_Procivis_One.png">
+  <img alt="Shows a Procivis One black logo in light color mode and a white one in dark color mode." src="https://assets.procivis-one.com/static/logo/logo_light_Procivis_One.png">
+</picture>
 
 # One Core React Native SDK
 
@@ -137,14 +140,37 @@ and regulations mature and harden.
 
 ## Supported standards
 
-### Credential data models
+### Credential models
 
-- [Verifiable Credentials][vcdm] (VCs)
-  - JSON-LD
-  - SD-JWT
-  - JWT
-- [ISO/IEC 18013-5:2021][iso]
-  - mdoc
+#### W3C VC
+
+- [W3C Verifiable Credentials Data Model 2.0][vcdm] in the following variations:
+
+| Securing mechanism                           | Supported representations                           | Supported proof/signature types                                                          |
+| -------------------------------------------- | ----------------------------------------- | ------------------------------------------------------------------------------ |
+| [W3C Data Integrity Proofs][vcdi] (embedded) | [JSON-LD][jld] in Compacted Document Form | <ul><li>[W3C Data Integrity ECDSA Cryptosuites v1.0][ecd] / [ecdsa-rdfc-2019][ecd2019]</li><li>[W3C Data Integrity EdDSA Cryptosuites v1.0][edd] / [eddsa-rdfc-2022][edd2022]</li><li>[W3C Data Integrity BBS Cryptosuites v1.0][bbs] / [bbs-2023][bbs2023]</li></ul> |
+| [W3C VC-JOSE-COSE][jose] (enveloping)        | <ul><li>[SD-JWT][sdjwt]</li><li>[JWT][jw]</li></ul> | <ul><li>JOSE / ECDSA [ES256][es2]</li><li>JOSE / EdDSA [Ed25519][ed255]</li><li>JOSE / CRYSTALS-DILITHIUM 3 [CRYDI3][crydi3]* |
+
+\* CRYSTALS-DILITHIUM is a post-quantum resistant signature scheme, selected by NIST for [Post-Quantum Cryptography Standardization][pqc].
+Support for the recently published [FIPS-204][fips] is planned for the near future.
+
+#### ISO mdoc
+
+- [ISO/IEC 18013-5:2021][iso] standard for mdoc credentials.
+  - [COSE][cose] proofs
+    - ECDSA [ES256][es2]
+    - EdDSA [Ed25519][ed255]
+
+#### IETF SD-JWT VC
+
+- [IETF SD-JWT-based Verifiable Credentials][sdjwtvc]:
+
+| Standard       | Supported representations | Supported proof/signature types                                                                                                          |
+| -------------- | ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
+| IETF SD-JWT VC | SD-JWT                    | <ul><li>JOSE / ECDSA [ES256][es2]</li><li>JOSE / EdDSA [Ed25519][ed255]</li><li>JOSE / CRYSTALS-DILITHIUM 3 [CRYDI3][crydi3]\*</li></ul> |
+
+\* CRYSTALS-DILITHIUM is a post-quantum resistant signature scheme, selected by NIST for [Post-Quantum Cryptography Standardization][pqc].
+Support for the recently published [FIPS-204][fips] is planned for the near future.
 
 ### Exchange and transport
 
@@ -152,9 +178,10 @@ and regulations mature and harden.
   - [OID4VCI][vci]; ID-1
   - [OID4VP][vp]; ID-2
     - [OID4VP over BLE][ble]; optimized version of Draft 00
-    - OID4VP over MQTT; proprietary adaptation of OID4VP over BLE via MQTT channel
-- [ISO/IEC 18013-5][iso]
-  - QR-code engagement and offline device retrieval over BLE
+    - OID4VP over MQTT; proprietary adaptation of "OID4VP over BLE" via MQTT channel
+- ISO/IEC 18013
+  - [18013-5][iso5]: QR code engagement and offline device retrieval over BLE
+  - [18013-7][iso7]: Online data retrieval via OID4VP
 
 ### Key storage
 
@@ -165,6 +192,7 @@ and regulations mature and harden.
 
 - [Bitstring Status List v1.0][sl]
 - [Linked Validity Verifiable Credentials (LVVC)][lvvc]
+- [Token Status List - Draft 03][tsl]
 
 ## Support
 
@@ -175,28 +203,49 @@ Need support or have feedback? [Contact us](https://www.procivis.ch/en/contact).
 Some rights reserved. This library is published under the [Apache License
 Version 2.0](./LICENSE).
 
-![Procivis AG](https://assets.procivis-one.com/static/logo/logo_light_mode_Procivis.svg#gh-light-mode-only)
-![Procivis AG](https://assets.procivis-one.com/static/logo/logo_dark_mode_Procivis.svg#gh-dark-mode-only)
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://assets.procivis-one.com/static/logo/logo_dark_mode_Procivis.svg">
+  <source media="(prefers-color-scheme: light)" srcset="https://assets.procivis-one.com/static/logo/logo_light_mode_Procivis.svg">
+  <img alt="Shows a Procivis black logo in light color mode and a white one in dark color mode." src="https://assets.procivis-one.com/static/logo/logo_dark_mode_Procivis.svg">
+</picture>
 
 © Procivis AG, [https://www.procivis.ch](https://www.procivis.ch).
 
 [archi]: https://github.com/procivis#architecture
+[bbs]: https://www.w3.org/TR/vc-di-bbs/
+[bbs2023]: https://www.w3.org/TR/vc-di-bbs/#bbs-2023
 [ble]: https://openid.net/specs/openid-4-verifiable-presentations-over-ble-1_0.html
 [canivc]: https://canivc.com/implementations/procivis-one-core/
-[comp]: https://github.com/procivis/one-react-native-components
-[core]: https://github.com/procivis/one-core
+[cose]: https://www.rfc-editor.org/rfc/rfc9052
+[crydi3]: https://datatracker.ietf.org/doc/html/draft-ietf-cose-dilithium-01
 [docs]: https://docs.procivis.ch/
+[ecd]: https://www.w3.org/TR/vc-di-ecdsa/
+[ecd2019]: https://www.w3.org/TR/vc-di-ecdsa/#ecdsa-rdfc-2019
+[edd]: https://www.w3.org/TR/vc-di-eddsa/
+[edd2022]: https://www.w3.org/TR/vc-di-eddsa/#eddsa-rdfc-2022
+[ed255]: https://datatracker.ietf.org/doc/html/rfc8037
+[es2]: https://datatracker.ietf.org/doc/html/rfc7518
 [eudiwi]: https://issuer.eudiw.dev/
 [eudiwv]: https://verifier.eudiw.dev/home
-[iso]: https://www.iso.org/standard/69084.html
+[fips]: https://csrc.nist.gov/pubs/fips/204/final
+[iso5]: https://www.iso.org/standard/69084.html
+[iso7]: https://www.iso.org/standard/82772.html
+[jld]: https://www.w3.org/TR/json-ld11/
+[jose]: https://w3c.github.io/vc-jose-cose/
+[jw]: https://datatracker.ietf.org/doc/html/rfc7519
 [key]: https://github.com/procivis#key-features
 [lvvc]: https://eprint.iacr.org/2022/1658.pdf
 [owf]: https://github.com/openwallet-foundation-labs/identity-credential
 [pow]: https://github.com/procivis/one-wallet
+[pqc]: https://csrc.nist.gov/pqc-standardization
 [rncore]: https://github.com/procivis/react-native-one-core
+[sdjwt]: https://www.ietf.org/archive/id/draft-ietf-oauth-selective-disclosure-jwt-12.html
+[sdjwtvc]: https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-05.html
 [sdkref]: https://docs.procivis.ch/sdk/overview
 [sl]: https://www.w3.org/TR/vc-bitstring-status-list/
 [trial]: https://docs.procivis.ch/trial/intro
+[tsl]: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-status-list-03
+[vcdi]: https://www.w3.org/TR/vc-data-integrity/
 [vcdm]: https://www.w3.org/TR/vc-data-model-2.0/
 [vci]: https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0-ID1.html
 [vp]: https://openid.net/specs/openid-4-verifiable-presentations-1_0-ID2.html

package/android/build.gradle

@@ -54,6 +54,7 @@ repositories {
 
 dependencies {
     implementation("org.jetbrains.kotlin:kotlin-stdlib-jdk7:${safeExtGet('kotlinVersion', '1.8.0')}")
+    implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.8.1")
     implementation 'com.facebook.react:react-native:+'
 
     releaseImplementation(name: 'onecore-release', ext: 'aar')
@@ -62,6 +63,14 @@ dependencies {
     implementation("org.jetbrains.kotlin:kotlin-reflect:${safeExtGet('kotlinVersion', '1.8.0')}")
 }
 
+def downloadFile = { url, file ->
+    new URL(url).withInputStream { downloadStream ->
+        file.withOutputStream { fileOut ->
+            fileOut << downloadStream
+        }
+    }
+}
+
 def coreUrlAAR = { buildType ->
     def name = "onecore-${buildType}"
     def coreSdkJsonFile = file("$projectDir/../core-sdk.json")
@@ -71,18 +80,21 @@ def coreUrlAAR = { buildType ->
     def url = sdk.url
     File file = new File("$projectDir/libs/${name}.aar")
     file.parentFile.mkdirs()
-    if (!file.exists()) {
-        new URL(url).withInputStream { downloadStream ->
-            file.withOutputStream { fileOut ->
-                fileOut << downloadStream
-            }
+
+    def sha1Expected = sdk.sha1
+    if (file.exists()) {
+        if (Checksum.getChecksum(file, "SHA1") == sha1Expected) {
+            // all good
+            return
         }
+        // The file is most likely just stale -> delete and download again
+        file.delete()
     }
 
+    downloadFile(url, file)
     def sha1sum = Checksum.getChecksum(file, "SHA1")
-    def sha1Expected = sdk.sha1
     if (sha1sum != sha1Expected) {
-        file.delete()
+        // if the file hash still does not match then something is off
         println "URL($name): $url"
         println "sha1 expected: $sha1Expected"
         println "sha1 actual: $sha1sum"

package/android/src/main/java/ch/procivis/one/core/Deserialize.kt

@@ -58,7 +58,7 @@ object Deserialize {
     }
 
     private fun extractObjectItem(type: KType, data: ReadableMap, name: String): Any? {
-        if (!data.hasKey(name) || (type.isMarkedNullable && data.isNull(name))) {
+        if (!data.hasKey(name)) {
             return null
         }
 
@@ -69,6 +69,10 @@ object Deserialize {
             return DeserializeSpecific.Obj.convertCustom(kClass, data, name)
         }
 
+        if (type.isMarkedNullable && data.isNull(name)) {
+            return null
+        }
+
         if (kClass.java.isEnum) {
             return constructEnumValue(kClass, data.getString(name)!!)
         }

package/android/src/main/java/ch/procivis/one/core/DeserializeSpecific.kt

@@ -6,7 +6,7 @@ import kotlin.reflect.KClass
 
 object DeserializeSpecific {
     object Obj {
-        private val CustomConversionTypes = arrayOf(CredentialSchemaTypeBindingEnum::class)
+        private val CustomConversionTypes = arrayOf(CredentialSchemaTypeBindingEnum::class, OptionalString::class)
 
         fun isCustomConversionType(type: KClass<*>): Boolean {
             return CustomConversionTypes.contains(type)
@@ -16,7 +16,14 @@ object DeserializeSpecific {
             return when (type) {
                 CredentialSchemaTypeBindingEnum::class -> input.getString(field)
                     ?.let { credentialSchemaType(it) }
-
+                OptionalString::class -> {
+                    val value = input.getString(field)
+                    if (value == null) {
+                        OptionalString.None
+                    } else {
+                        OptionalString.Some(value)
+                    }
+                }
                 else -> {
                     throw IllegalArgumentException("Invalid map conversion: $input")
                 }
@@ -84,7 +91,7 @@ object DeserializeSpecific {
         return fn(input)
     }
 
-    private fun <T> enumList(entries: ReadableArray, fn: (String) -> T): List<T> {
+    fun <T> enumList(entries: ReadableArray, fn: (String) -> T): List<T> {
         val result = mutableListOf<T>()
         for (n in 0 until entries.size()) {
             result.add(fn(entries.getString(n)))