@procivis/react-native-one-core 1.60807.0 → 1.73295.0

package/dist/src/proof.d.ts

@@ -1,5 +1,5 @@
 import { Claim, CredentialDetail, CredentialListItem } from "./credential";
-import { CredentialSchema } from "./credentialSchema";
+import { ClaimSchema, CredentialSchema } from "./credentialSchema";
 import { ListQuery, SortDirection } from "./list";
 import { ProofInputClaimSchema, ProofSchemaListItem } from "./proofSchema";
 import { DidListItem } from "./did";
@@ -36,7 +36,6 @@ export interface ProofDetail {
     role: ProofRoleEnum;
     proofSchema?: ProofSchemaListItem;
     verifier?: IdentifierListItem;
-    holder?: IdentifierListItem;
     protocol: string;
     transport: string;
     redirectUri?: string;
@@ -136,6 +135,40 @@ export interface PresentationSubmitCredentialRequest {
     credentialId: CredentialListItem["id"];
     submitClaims: Array<PresentationDefinitionField["id"]>;
 }
+export interface PresentationDefinitionV2 {
+    credentialQueries: Record<string, PresentationDefinitionV2CredentialQuery>;
+    credentialSets: Array<{
+        required: boolean;
+        options: Array<Array<string>>;
+    }>;
+}
+export type PresentationDefinitionV2CredentialQuery = {
+    multiple: boolean;
+} & (ApplicableCredentials | FailureHint);
+export interface ApplicableCredentials {
+    applicableCredentials: Array<PresentationDefinitionV2CredentialDetail>;
+}
+export interface FailureHint {
+    failureHint: {
+        credentialSchema?: CredentialSchema;
+        reason: "NO_CREDENTIAL" | "VALIDITY" | "CONSTRAINT";
+    };
+}
+export interface PresentationDefinitionV2CredentialDetail extends Omit<CredentialDetail, "claims"> {
+    claims: Array<PresentationDefinitionV2CredentialClaim>;
+}
+export interface PresentationDefinitionV2CredentialClaim {
+    path: string;
+    schema: ClaimSchema;
+    value: PresentationDefinitionV2ClaimValue;
+    userSelection: boolean;
+    required: boolean;
+}
+export type PresentationDefinitionV2ClaimValue = string | number | boolean | PresentationDefinitionV2CredentialClaim[];
+export interface PresentationSubmitV2CredentialRequest {
+    credentialId: CredentialListItem["id"];
+    userSelections: Array<string>;
+}
 export declare enum SortableProofColumnEnum {
     SCHEMA_NAME = "SCHEMA_NAME",
     VERIFIER = "VERIFIER",
@@ -154,7 +187,7 @@ export interface ProofListQuery extends ListQuery {
     proofRoles?: ProofRoleEnum[];
     proofSchemaIds?: string[];
     exact?: ExactProofFilterColumnEnum[];
-    profile?: string;
+    profiles?: string[];
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */
     createdDateAfter?: string;
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */
@@ -172,6 +205,12 @@ export interface ProofListQuery extends ListQuery {
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */
     completedDateBefore?: string;
 }
+export interface ProposeProofRequest {
+    protocol: string;
+    organisationId: string;
+    engagement: string[];
+    uiMessage?: string;
+}
 export interface ProposeProofResponse {
     proofId: string;
     interactionId: string;

package/dist/src/proofSchema.d.ts

@@ -1,4 +1,4 @@
-import { CredentialSchema, CredentialSchemaLayoutProperties, CredentialSchemaType, LayoutType, WalletStorageType } from "./credentialSchema";
+import { CredentialSchema, CredentialSchemaLayoutProperties, LayoutType, KeyStorageSecurity } from "./credentialSchema";
 import { ListQuery, SortDirection } from "./list";
 export interface ProofInputClaimSchema {
     id: string;
@@ -93,10 +93,9 @@ export interface ImportProofSchemaCredentialSchema {
     name: string;
     format: string;
     revocationMethod: string;
-    walletStorageType?: WalletStorageType;
+    keyStorageSecurity?: KeyStorageSecurity;
     schemaId: string;
     importedSourceUrl: string;
-    schemaType: CredentialSchemaType;
     layoutType?: LayoutType;
     layoutProperties?: CredentialSchemaLayoutProperties;
 }

package/dist/src/trust.d.ts

@@ -107,13 +107,18 @@ export interface CreateTrustEntityRequest {
     content?: string;
     organisationId: UpsertOrganisationRequest["id"];
 }
-export interface TrustEntityListQuery {
+export interface TrustEntityListQuery extends Omit<ListQuery, "organisationId"> {
     sort?: SortableTrustEntityColumnEnum;
     sortDirection?: SortDirection;
+    organisationId?: string;
     name?: string;
     exact?: ExactTrustEntityFilterColumnEnum[];
-    type?: string;
-    isPublisher?: boolean;
+    role?: TrustEntityRoleEnum;
+    trustAnchor?: TrustAnchor["id"];
+    didId?: DidListItem["id"];
+    types?: TrustEntityTypeEnum[];
+    entityKey?: string;
+    states?: TrustEntityStateEnum[];
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */
     createdDateAfter?: string;
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */

package/dist/src/walletUnit.d.ts

@@ -2,40 +2,29 @@ import { KeyListItem } from "./key";
 export declare enum WalletProviderTypeEnum {
     PROCIVIS_ONE = "PROCIVIS_ONE"
 }
-export declare enum WalletUnitStatusEnum {
-    PENDING = "PENDING",
-    ACTIVE = "ACTIVE",
-    REVOKED = "REVOKED",
-    ERROR = "ERROR"
-}
 export interface WalletProvider {
     url: string;
     type: WalletProviderTypeEnum;
-    name: string;
-    appIntegrityCheckRequired: boolean;
 }
 export interface HolderRegisterWalletUnitRequest {
     organisationId: string;
     walletProvider: WalletProvider;
     keyType: KeyListItem["keyType"];
 }
-export interface HolderRegisterWalletUnitResponse {
-    id: string;
-    keyId: KeyListItem["id"];
-}
-export interface HolderRefreshWalletUnitRequest {
-    organisationId: string;
-    appIntegrityCheckRequired: boolean;
-}
-export interface HolderAttestationWalletUnitResponse {
+export interface HolderWalletUnitDetail {
     id: string;
     createdDate: string;
     lastModified: string;
-    expirationDate: string;
-    status: WalletUnitStatusEnum;
-    attestation: string;
-    walletUnitId: string;
+    providerWalletUnitId: string;
     walletProviderUrl: string;
     walletProviderType: WalletProviderTypeEnum;
     walletProviderName: string;
+    status: WalletUnitStatus;
+    authenticationKey: KeyListItem;
+}
+export declare enum WalletUnitStatus {
+    PENDING = "PENDING",
+    ACTIVE = "ACTIVE",
+    REVOKED = "REVOKED",
+    ERROR = "ERROR"
 }

package/dist/src/walletUnit.js

@@ -2,10 +2,10 @@ export var WalletProviderTypeEnum;
 (function (WalletProviderTypeEnum) {
     WalletProviderTypeEnum["PROCIVIS_ONE"] = "PROCIVIS_ONE";
 })(WalletProviderTypeEnum || (WalletProviderTypeEnum = {}));
-export var WalletUnitStatusEnum;
-(function (WalletUnitStatusEnum) {
-    WalletUnitStatusEnum["PENDING"] = "PENDING";
-    WalletUnitStatusEnum["ACTIVE"] = "ACTIVE";
-    WalletUnitStatusEnum["REVOKED"] = "REVOKED";
-    WalletUnitStatusEnum["ERROR"] = "ERROR";
-})(WalletUnitStatusEnum || (WalletUnitStatusEnum = {}));
+export var WalletUnitStatus;
+(function (WalletUnitStatus) {
+    WalletUnitStatus["PENDING"] = "PENDING";
+    WalletUnitStatus["ACTIVE"] = "ACTIVE";
+    WalletUnitStatus["REVOKED"] = "REVOKED";
+    WalletUnitStatus["ERROR"] = "ERROR";
+})(WalletUnitStatus || (WalletUnitStatus = {}));

package/ios/ProcivisOneCoreModule.m

@@ -67,11 +67,7 @@ RCT_EXTERN_METHOD(handleInvitation:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderAcceptCredential:(NSString *)interactionId
-                  didId:(NSString *)didId
-                  identifierId:(NSString *)identifierId
-                  keyId:(NSString *)keyId
-                  txCode:(NSString *)txCode
+RCT_EXTERN_METHOD(holderAcceptCredential:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -91,15 +87,21 @@ RCT_EXTERN_METHOD(getPresentationDefinition:(NSString *)proofId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
+RCT_EXTERN_METHOD(getPresentationDefinitionV2:(NSString *)proofId
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
 RCT_EXTERN_METHOD(holderRejectProof:(NSString *)interactionId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
 RCT_EXTERN_METHOD(holderSubmitProof:(NSString *)interactionId
                   credentials:(NSDictionary *)credentials
-                  didId:(NSString *)didId
-                  identifierId:(NSString *)identifierId
-                  keyId:(NSString *)keyId
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(holderSubmitProofV2:(NSString *)interactionId
+                  submission:(NSDictionary *)submission
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -188,9 +190,7 @@ RCT_EXTERN_METHOD(deleteProof:(NSString *)proofId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(proposeProof:(NSString *)exchange
-                  organisationId:(NSString *)organisationId
-                  engagement:(NSArray *)engagement
+RCT_EXTERN_METHOD(proposeProof:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -282,11 +282,11 @@ RCT_EXTERN_METHOD(holderRegisterWalletUnit:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderRefreshWalletUnit:(NSDictionary *)request
+RCT_EXTERN_METHOD(holderWalletUnitStatus:(NSString *)walletUnitId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderGetWalletUnitAttestation:(NSString *)organisationId
+RCT_EXTERN_METHOD(holderGetWalletUnit:(NSString *)walletUnitId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -297,14 +297,17 @@ RCT_EXTERN_METHOD(nfcReadIsoMdlEngagement:(NSDictionary *)request
 RCT_EXTERN_METHOD(nfcStopIsoMdlEngagement:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(uninitialize:(BOOL *)deleteData
+RCT_EXTERN_METHOD(deleteCache:(NSArray *)types
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(deleteCache:(NSArray *)types
+RCT_EXTERN_METHOD(uninitialize:(BOOL *)deleteData
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
+RCT_EXTERN_METHOD(isNfcHceSupported:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
 RCT_EXTERN_METHOD(changeRSEPin:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 

package/ios/ProcivisOneCoreModule.swift

@@ -13,6 +13,14 @@ class ProcivisOneCoreModule: RCTEventEmitter {
   private static let TAG = "ProcivisOneCoreModule"
   private var core: OneCoreBindingProtocol? = nil
   private var rseKeyStorage: NativeKeyStorage? = nil
+  private var nfcHce: NfcHce? = nil
+
+  public override init() {
+    super.init()
+    if #available(iOS 17.4, *) {
+      nfcHce = NFCHCE()
+    }
+  }
 
   @objc(initialize:resolver:rejecter:)
   func initialize(
@@ -60,6 +68,7 @@ class ProcivisOneCoreModule: RCTEventEmitter {
           rseKeyStorage = RSEKeyStorage()
         }
       }
+
       self.core = try initializeCore(
         dataDirPath: dataDirPath,
         params: InitParamsDto(
@@ -68,7 +77,7 @@ class ProcivisOneCoreModule: RCTEventEmitter {
           remoteSecureElement: rseKeyStorage,
           bleCentral: IOSBLECentral(),
           blePeripheral: IOSBLEPeripheral(),
-          nfcHce: nil,
+          nfcHce: nfcHce,
           nfcScanner: NFCScanner()
         )
       )
@@ -224,25 +233,14 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(holderAcceptCredential:didId:identifierId:keyId:txCode:resolver:rejecter:)
+  @objc(holderAcceptCredential:resolver:rejecter:)
   func holderAcceptCredential(
-    interactionId: String,
-    didId: String?,
-    identifierId: String?,
-    keyId: String?,
-    txCode: String?,
+    request: NSDictionary,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      try await self.getCore().holderAcceptCredential(
-        interactionId: interactionId,
-        didId: didId,
-        identifierId: identifierId,
-        keyId: keyId,
-        txCode: txCode
-      )
-      return nil as NSDictionary?
+      return try await self.getCore().holderAcceptCredential(request: try deserialize(request))
     }
   }
 
@@ -294,6 +292,18 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
+  @objc(getPresentationDefinitionV2:resolver:rejecter:)
+  func getPresentationDefinitionV2(
+    proofId: String,
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      let result = try await self.getCore().getPresentationDefinitionV2(proofId: proofId)
+      return try serializeAny(result)
+    }
+  }
+
   @objc(holderRejectProof:resolver:rejecter:)
   func rejectProof(
     interactionId: String,
@@ -306,23 +316,33 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(holderSubmitProof:credentials:didId:identifierId:keyId:resolver:rejecter:)
+  @objc(holderSubmitProof:credentials:resolver:rejecter:)
   func submitProof(
     interactionId: String,
     credentials: NSDictionary,
-    didId: String?,
-    identifierId: String?,
-    keyId: String?,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
       try await self.getCore().holderSubmitProof(
         interactionId: interactionId,
-        submitCredentials: try deserialize(credentials),
-        didId: didId,
-        identifierId: identifierId,
-        keyId: keyId
+        submitCredentials: try deserialize(credentials)
+      )
+      return nil as NSDictionary?
+    }
+  }
+
+  @objc(holderSubmitProofV2:submission:resolver:rejecter:)
+  func holderSubmitProofV2(
+    interactionId: String,
+    submission: NSDictionary,
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      try await self.getCore().holderSubmitProofV2(
+        interactionId: interactionId,
+        submission: try deserialize(submission)
       )
       return nil as NSDictionary?
     }
@@ -583,20 +603,14 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(proposeProof:organisationId:engagement:resolver:rejecter:)
+  @objc(proposeProof:resolver:rejecter:)
   func proposeProof(
-    exchange: String,
-    organisationId: String,
-    engagement: NSArray,
+    request: NSDictionary,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().proposeProof(
-        exchange: exchange,
-        organisationId: organisationId,
-        engagement: try deserialize(engagement)
-      )
+      let result = try await self.getCore().proposeProof(request: try deserialize(request))
       return try serializeAny(result)
     }
   }
@@ -871,31 +885,30 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().holderRegisterWalletUnit(request: try deserialize(request))
-      return try serializeAny(result)
+      return try await self.getCore().holderRegisterWalletUnit(request: try deserialize(request))
     }
   }
 
-  @objc(holderRefreshWalletUnit:resolver:rejecter:)
-  func holderRefreshWalletUnit(
-    request: NSDictionary,
+  @objc(holderWalletUnitStatus:resolver:rejecter:)
+  func holderWalletUnitStatus(
+    walletUnitId: String,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      try await self.getCore().holderRefreshWalletUnit(request: try deserialize(request))
+      try await self.getCore().holderWalletUnitStatus(id: walletUnitId)
       return nil as NSDictionary?
     }
   }
 
-  @objc(holderGetWalletUnitAttestation:resolver:rejecter:)
-  func holderGetWalletUnitAttestation(
-    organisationId: String,
+  @objc(holderGetWalletUnit:resolver:rejecter:)
+  func holderGetWalletUnit(
+    walletUnitId: String,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().holderGetWalletUnitAttestation(organisationId: organisationId)
+      let result = try await self.getCore().holderGetWalletUnit(id: walletUnitId)
       return try serializeAny(result)
     }
   }
@@ -938,6 +951,19 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
+  @objc(isNfcHceSupported:rejecter:)
+  func isNfcHceSupported(
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      if let nfcHce = self.nfcHce {
+        return try await nfcHce.isSupported()
+      }
+      return false
+    }
+  }
+
   // MARK: Ubiqu specific methods
 
   @objc(changeRSEPin:rejecter:)

package/ios/RSEKeyStorage.swift

@@ -48,65 +48,34 @@ class RSEKeyStorage: NativeKeyStorage {
     }
     
     func generateKey(keyAlias: String) async throws -> GeneratedKeyBindingDto {
+        // Check if main asset exists and handle its state
         if let asset = UbqSdk.assets.first {
-            if (asset.state == .normal) {
-                throw NativeKeyStorageError.KeyGenerationFailure(reason: "Already created")
-            } else {
+            if asset.state != .normal {
                 // an asset can be left locked after an unfinished generation earlier (e.g. app forcefully closed during PIN setup)
                 try await delete()
             }
         }
-        
+
         do {
-            let tokenUrl = URL(string: "\(token_generator_url)/ubiqu/")!
-            var tokenRequest = URLRequest(url: tokenUrl)
-            tokenRequest.httpMethod = "GET"
-            tokenRequest.setValue("bearer \(api_key)", forHTTPHeaderField: "Authorization")
-            let (tokenData, _) = try await URLSession.shared.data(for: tokenRequest)
-            
-            let tokenResponse = try JSONDecoder().decode(TokenResponse.self, from: tokenData)
-            let accessToken = tokenResponse.accessToken
-            
-            let identityUrl = URL(string: "\(identity_service_url)/organisation/\(organisation_id)/identity/")!
-            var identityRequest = URLRequest(url: identityUrl)
-            identityRequest.httpMethod = "POST"
-            identityRequest.setValue("application/json", forHTTPHeaderField: "Content-Type")
-            identityRequest.setValue("bearer \(accessToken)", forHTTPHeaderField: "Authorization")
-            identityRequest.httpBody = try JSONEncoder().encode(CreateIdentityPayload(sub: "ios-rse-example-\(generateRandomString(length: 16))"))
-            let (identityData, _) = try await URLSession.shared.data(for: identityRequest)
-            
-            let identityResponse = try JSONDecoder().decode(CreateIdentityResponse.self, from: identityData)
-            let subject = identityResponse.sub
-            
-            let rseUrl = URL(string: "\(identity_service_url)/organisation/\(organisation_id)/identity/\(subject)/register_rse/")!
-            var rseRequest = URLRequest(url: rseUrl)
-            rseRequest.httpMethod = "POST"
-            identityRequest.setValue("application/json", forHTTPHeaderField: "Content-Type")
-            rseRequest.setValue("bearer \(accessToken)", forHTTPHeaderField: "Authorization")
-            rseRequest.httpBody = try JSONEncoder().encode(CreateIdentityPayload(sub: "ios-rse-example- \(generateRandomString(length: 16))"))
-            let (rseData, _) = try await URLSession.shared.data(for: rseRequest)
-            
-            let rseResponse = try JSONDecoder().decode(RegisterRseResponse.self, from: rseData)
-            
-            let subscribeTransaction = try await withCheckedThrowingContinuation { continuation in
-                UbqSdk.subscribe(rseResponse.nonce, rseResponse.puk) { flow in
-                    continuation.resume(returning: flow)
-                } onStartFailure: { error in
-                    continuation.resume(throwing: error)
-                }
+            // Get or create the main asset
+            let mainAsset: UbqAsset
+            if let existingAsset = UbqSdk.assets.first, existingAsset.state == .normal {
+                // Main asset already exists and is ready - reuse it
+                mainAsset = existingAsset
+            } else {
+                // Need to create the main asset
+                mainAsset = try await createMainAsset()
             }
-            self.subscriber = await RSESubscriber(pinPad: RSEPinPad.self.sharedPinPad, transaction: subscribeTransaction)
-            let asset = try await self.subscriber!.perform()
-            self.subscriber = nil
-            
+
+            // Create a new derived asset from the main asset
             let derivedAsset = try await withCheckedThrowingContinuation { continuation in
-                asset.createDa(cryptoTypes: .EdDSA_25519) { derivedAsset in
+                mainAsset.createDa(cryptoTypes: .EdDSA_25519) { derivedAsset in
                     continuation.resume(returning: derivedAsset)
                 } failure: { error in
                     continuation.resume(throwing: error)
                 }
             }
-            
+
             guard let keyReference = derivedAsset.uuid.uuidString.data(using: .utf8),
                   let pemString = derivedAsset.publicKey,
                   let publicKeyPrefixed = parsePEMPublicKeyContent(pemString) else {
@@ -120,11 +89,58 @@ class RSEKeyStorage: NativeKeyStorage {
         } catch {
             self.subscriber = nil
             ProcivisOneCoreEventEmitter.shared.sendHidePinEvent()
-            // delete paritally generated asset
-            try await delete()
+            // delete partially generated asset only if we were creating a new one
+            if UbqSdk.assets.isEmpty || UbqSdk.assets.first?.state != .normal {
+                try? await delete()
+            }
             throw NativeKeyStorageError.KeyGenerationFailure(reason: error.localizedDescription)
         }
     }
+
+    private func createMainAsset() async throws -> UbqAsset {
+        let tokenUrl = URL(string: "\(token_generator_url)/ubiqu/")!
+        var tokenRequest = URLRequest(url: tokenUrl)
+        tokenRequest.httpMethod = "GET"
+        tokenRequest.setValue("bearer \(api_key)", forHTTPHeaderField: "Authorization")
+        let (tokenData, _) = try await URLSession.shared.data(for: tokenRequest)
+
+        let tokenResponse = try JSONDecoder().decode(TokenResponse.self, from: tokenData)
+        let accessToken = tokenResponse.accessToken
+
+        let identityUrl = URL(string: "\(identity_service_url)/organisation/\(organisation_id)/identity/")!
+        var identityRequest = URLRequest(url: identityUrl)
+        identityRequest.httpMethod = "POST"
+        identityRequest.setValue("application/json", forHTTPHeaderField: "Content-Type")
+        identityRequest.setValue("bearer \(accessToken)", forHTTPHeaderField: "Authorization")
+        identityRequest.httpBody = try JSONEncoder().encode(CreateIdentityPayload(sub: "ios-rse-example-\(generateRandomString(length: 16))"))
+        let (identityData, _) = try await URLSession.shared.data(for: identityRequest)
+
+        let identityResponse = try JSONDecoder().decode(CreateIdentityResponse.self, from: identityData)
+        let subject = identityResponse.sub
+
+        let rseUrl = URL(string: "\(identity_service_url)/organisation/\(organisation_id)/identity/\(subject)/register_rse/")!
+        var rseRequest = URLRequest(url: rseUrl)
+        rseRequest.httpMethod = "POST"
+        rseRequest.setValue("application/json", forHTTPHeaderField: "Content-Type")
+        rseRequest.setValue("bearer \(accessToken)", forHTTPHeaderField: "Authorization")
+        rseRequest.httpBody = try JSONEncoder().encode(CreateIdentityPayload(sub: "ios-rse-example-\(generateRandomString(length: 16))"))
+        let (rseData, _) = try await URLSession.shared.data(for: rseRequest)
+
+        let rseResponse = try JSONDecoder().decode(RegisterRseResponse.self, from: rseData)
+
+        let subscribeTransaction = try await withCheckedThrowingContinuation { continuation in
+            UbqSdk.subscribe(rseResponse.nonce, rseResponse.puk) { flow in
+                continuation.resume(returning: flow)
+            } onStartFailure: { error in
+                continuation.resume(throwing: error)
+            }
+        }
+        self.subscriber = await RSESubscriber(pinPad: RSEPinPad.self.sharedPinPad, transaction: subscribeTransaction)
+        let asset = try await self.subscriber!.perform()
+        self.subscriber = nil
+
+        return asset
+    }
     
     func sign(keyReference: Data, message: Data) async throws -> Data {
         guard let asset = UbqSdk.assets.first else {
@@ -137,9 +153,9 @@ class RSEKeyStorage: NativeKeyStorage {
                 continuation.resume(throwing: error)
             }
         }
-        guard let derivedAsset = asset.derivedAssets.first,
-              let keyReferenceUUIDString = String(data: keyReference, encoding: .utf8),
-              derivedAsset.uuid == UUID(uuidString: keyReferenceUUIDString) else {
+        guard let keyReferenceUUIDString = String(data: keyReference, encoding: .utf8),
+              let keyReferenceUUID = UUID(uuidString: keyReferenceUUIDString),
+              let derivedAsset = asset.derivedAssets.first(where: { $0.uuid == keyReferenceUUID }) else {
             throw NativeKeyStorageError.SignatureFailure(reason: "Key does not exist")
         }