@procivis/react-native-one-core 1.67952.1 → 1.75488.0

package/README.md

@@ -154,6 +154,7 @@ Support for the recently published [FIPS-204][fips] is planned for the near futu
 ### Exchange and transport
 
 - OpenID4VCI (Issuance)
+  - [v1.0][vci1]
   - [ID-1][vci]
 - OpenID4VP (Verification)
   - [v1.0][vp1.0]
@@ -232,6 +233,7 @@ Version 2.0](./LICENSE).
 [vcdi]: https://www.w3.org/TR/vc-data-integrity/
 [vcdm]: https://www.w3.org/TR/vc-data-model-2.0/
 [vci]: https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0-ID1.html
+[vci1]: https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html
 [vp1.0]: https://openid.net/specs/openid-4-verifiable-presentations-1_0-final.html
 [vp20]: https://openid.net/specs/openid-4-verifiable-presentations-1_0-20.html
 [vp25]: https://openid.net/specs/openid-4-verifiable-presentations-1_0-25.html

package/android/src/main/java/ch/procivis/one/core/ProcivisOneCoreModule.kt

@@ -197,15 +197,11 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
 
     @ReactMethod
     fun holderAcceptCredential(
-        interactionId: String,
-        didId: String?,
-        identifierId: String?,
-        keyId: String?,
-        txCode: String?,
+        request: ReadableMap,
         promise: Promise
     ) {
         asyncCall(promise, scope) {
-            return@asyncCall getCore().holderAcceptCredential(interactionId, didId, identifierId, keyId, txCode)
+            return@asyncCall getCore().holderAcceptCredential(construct(request))
         }
     }
 
@@ -261,9 +257,6 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     fun holderSubmitProof(
         interactionId: String,
         credentials: ReadableMap,
-        didId: String?,
-        identifierId: String?,
-        keyId: String?,
         promise: Promise
     ) {
         asyncCall(promise, scope) {
@@ -287,13 +280,7 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
                 }
                 submitCredentials[entry.key] = credentialList
             }
-            getCore().holderSubmitProof(
-                interactionId,
-                submitCredentials,
-                didId,
-                identifierId,
-                keyId
-            )
+            getCore().holderSubmitProof(interactionId, submitCredentials)
             return@asyncCall null
         }
     }
@@ -666,23 +653,22 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     @ReactMethod
     fun holderRegisterWalletUnit(request: ReadableMap, promise: Promise) {
         asyncCall(promise, scope) {
-            val result = getCore().holderRegisterWalletUnit(construct(request))
-            return@asyncCall convertToRN(result)
+            return@asyncCall getCore().holderRegisterWalletUnit(construct(request))
         }
     }
 
     @ReactMethod
-    fun holderRefreshWalletUnit(request: ReadableMap, promise: Promise) {
+    fun holderWalletUnitStatus(walletUnitId: String, promise: Promise) {
         asyncCall(promise, scope) {
-            getCore().holderRefreshWalletUnit(construct(request))
+            getCore().holderWalletUnitStatus(walletUnitId)
             return@asyncCall null
         }
     }
 
     @ReactMethod
-    fun holderGetWalletUnitAttestation(organisationId: String, promise: Promise) {
+    fun holderGetWalletUnit(walletUnitId: String, promise: Promise) {
         asyncCall(promise, scope) {
-            val result = getCore().holderGetWalletUnitAttestation(organisationId)
+            val result = getCore().holderGetWalletUnit(walletUnitId)
             return@asyncCall convertToRN(result)
         }
     }

package/core-sdk.json

@@ -1,16 +1,16 @@
 {
   "android": {
     "debug": {
-      "url": "https://onesdk.blob.core.windows.net/core-sdk/67952/android/onecore-debug.aar",
-      "sha1": "18023ed5e0e3b38249cff431a20c25b6e179390f"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/75488/android/onecore-debug.aar",
+      "sha1": "82090e020b12f7dd20ee474659fb195016db809e"
     },
     "release": {
-      "url": "https://onesdk.blob.core.windows.net/core-sdk/67952/android/onecore-release.aar",
-      "sha1": "8f8c1133d953ea827a7fe81b3bf2715188931fcc"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/75488/android/onecore-release.aar",
+      "sha1": "1dc1697ac7f869476111fb5eb82cc59efa4fd671"
     }
   },
   "ios": {
-    "url": "https://onesdk.blob.core.windows.net/core-sdk/67952/ios/deploy.zip",
-    "sha1": "0b2637eddebc58b5972276b2143e34312a2bd01a"
+    "url": "https://onesdk.blob.core.windows.net/core-sdk/75488/ios/deploy.zip",
+    "sha1": "c54194bbcc1c6907324360121b079af3c406a455"
   }
 }

package/dist/src/cache.d.ts

@@ -4,5 +4,8 @@ export declare enum CacheType {
     STATUS_LIST_CREDENTIAL = "STATUS_LIST_CREDENTIAL",
     VCT_METADATA = "VCT_METADATA",
     JSON_SCHEMA = "JSON_SCHEMA",
-    TRUST_LIST = "TRUST_LIST"
+    TRUST_LIST = "TRUST_LIST",
+    X509_CRL = "X509_CRL",
+    ANDROID_ATTESTATION_CRL = "ANDROID_ATTESTATION_CRL",
+    OPEN_ID_METADATA = "OPEN_ID_METADATA"
 }

package/dist/src/cache.js

@@ -6,4 +6,7 @@ export var CacheType;
     CacheType["VCT_METADATA"] = "VCT_METADATA";
     CacheType["JSON_SCHEMA"] = "JSON_SCHEMA";
     CacheType["TRUST_LIST"] = "TRUST_LIST";
+    CacheType["X509_CRL"] = "X509_CRL";
+    CacheType["ANDROID_ATTESTATION_CRL"] = "ANDROID_ATTESTATION_CRL";
+    CacheType["OPEN_ID_METADATA"] = "OPEN_ID_METADATA";
 })(CacheType || (CacheType = {}));

package/dist/src/core.d.ts

@@ -1,6 +1,6 @@
 import { BackupCreate, ImportBackupMetadata, UnexportableEntities } from "./backup";
 import { Config } from "./config";
-import { AuthorizationCodeFlow, ContinueIssuanceResponse, CredentialDetail, CredentialListItem, CredentialListQuery, CredentialRevocationCheckResponse, InitiateIssuanceRequest, InitiateIssuanceResponse, InvitationResultCredentialIssuance } from "./credential";
+import { AuthorizationCodeFlow, ContinueIssuanceResponse, CredentialDetail, CredentialListItem, CredentialListQuery, CredentialRevocationCheckResponse, HolderAcceptCredentialRequest, InitiateIssuanceRequest, InitiateIssuanceResponse, InvitationResultCredentialIssuance } from "./credential";
 import { CredentialSchema, CredentialSchemaDetail, CredentialSchemaListQuery, ImportCredentialSchemaRequest, ShareCredentialSchemaResponse } from "./credentialSchema";
 import { DidListItem, DidListQuery, DidRequest } from "./did";
 import { HistoryListItem, HistoryListQuery } from "./history";
@@ -12,7 +12,7 @@ import { CreateRemoteTrustEntityRequest, CreateTrustAnchorRequest, CreateTrustEn
 import { CacheType } from "./cache";
 import { CreateOrganisationRequest, UpsertOrganisationRequest } from "./organisation";
 import { CreateIdentifierRequest, IdentifierDetail, IdentifierListItem, IdentifierListQuery } from "./identifier";
-import { HolderAttestationWalletUnitResponse, HolderRefreshWalletUnitRequest, HolderRegisterWalletUnitRequest, HolderRegisterWalletUnitResponse } from "./walletUnit";
+import { HolderRegisterWalletUnitRequest, HolderWalletUnitDetail } from "./walletUnit";
 import { NfcScanRequest } from "./nfc";
 export * from "./backup";
 export * from "./cache";
@@ -76,7 +76,7 @@ export interface ONECore {
      * request for proof).
      */
     handleInvitation(request: HandleInvitationRequest): Promise<InvitationResult>;
-    holderAcceptCredential(interactionId: InvitationResultCredentialIssuance["interactionId"], didId: DidListItem["id"] | undefined, identifierId: IdentifierListItem["id"] | undefined, keyId: string | undefined, txCode: string | undefined): Promise<CredentialDetail["id"]>;
+    holderAcceptCredential(request: HolderAcceptCredentialRequest): Promise<CredentialDetail["id"]>;
     holderRejectCredential(interactionId: InvitationResultCredentialIssuance["interactionId"]): Promise<void>;
     /** For wallets, starts the OID4VCI Authorization Code Flow. */
     initiateIssuance(request: InitiateIssuanceRequest): Promise<InitiateIssuanceResponse>;
@@ -91,7 +91,7 @@ export interface ONECore {
     getPresentationDefinition(proofId: ProofDetail["id"]): Promise<PresentationDefinition>;
     getPresentationDefinitionV2(proofId: ProofDetail["id"]): Promise<PresentationDefinitionV2>;
     holderRejectProof(interactionId: InvitationResultProofRequest["interactionId"]): Promise<void>;
-    holderSubmitProof(interactionId: InvitationResultProofRequest["interactionId"], credentials: Record<PresentationDefinitionRequestedCredential["id"], PresentationSubmitCredentialRequest | PresentationSubmitCredentialRequest[]>, didId: DidListItem["id"] | undefined, identifierId: IdentifierListItem["id"] | undefined, keyId: string | undefined): Promise<void>;
+    holderSubmitProof(interactionId: InvitationResultProofRequest["interactionId"], credentials: Record<PresentationDefinitionRequestedCredential["id"], PresentationSubmitCredentialRequest | PresentationSubmitCredentialRequest[]>): Promise<void>;
     holderSubmitProofV2(interactionId: InvitationResultProofRequest["interactionId"], credentials: Record<string, PresentationSubmitV2CredentialRequest | PresentationSubmitV2CredentialRequest[]>): Promise<void>;
     getCredentials(query: CredentialListQuery): Promise<ItemList<CredentialListItem>>;
     runTask(task: string): Promise<string>;
@@ -160,9 +160,9 @@ export interface ONECore {
      */
     rollbackImport(): Promise<void>;
     resolveJsonldContext(url: string): Promise<ResolveJsonLdContextResponse>;
-    holderRegisterWalletUnit(request: HolderRegisterWalletUnitRequest): Promise<HolderRegisterWalletUnitResponse>;
-    holderRefreshWalletUnit(request: HolderRefreshWalletUnitRequest): Promise<void>;
-    holderGetWalletUnitAttestation(organisationId: string): Promise<HolderAttestationWalletUnitResponse>;
+    holderRegisterWalletUnit(request: HolderRegisterWalletUnitRequest): Promise<HolderWalletUnitDetail["id"]>;
+    holderWalletUnitStatus(walletUnitId: HolderWalletUnitDetail["id"]): Promise<void>;
+    holderGetWalletUnit(walletUnitId: HolderWalletUnitDetail["id"]): Promise<HolderWalletUnitDetail>;
     /**
      * Start scanning for ISO 18013-5 NFC engagement
      *
@@ -183,4 +183,4 @@ export interface ONECore {
      */
     uninitialize(deleteData: boolean): Promise<void>;
 }
-export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "generateKey", "createDid", "getDids", "createIdentifier", "getIdentifier", "getIdentifiers", "deleteIdentifier", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "initiateIssuance", "continueIssuance", "getPresentationDefinition", "getPresentationDefinitionV2", "holderRejectProof", "holderSubmitProof", "holderSubmitProofV2", "getCredentials", "runTask", "deleteProofClaims", "getCredential", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "getCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofs", "deleteProof", "proposeProof", "createProofSchema", "getProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "createTrustAnchor", "deleteTrustAnchor", "getTrustAnchor", "getTrustAnchors", "createTrustEntity", "getTrustEntity", "getTrustEntities", "getTrustEntityByDid", "resolveTrustEntityByIdentifier", "createRemoteTrustEntity", "getRemoteTrustEntity", "updateRemoteTrustEntity", "getHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "holderRegisterWalletUnit", "holderRefreshWalletUnit", "holderGetWalletUnitAttestation", "nfcReadIsoMdlEngagement", "nfcStopIsoMdlEngagement", "uninitialize"];
+export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "generateKey", "createDid", "getDids", "createIdentifier", "getIdentifier", "getIdentifiers", "deleteIdentifier", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "initiateIssuance", "continueIssuance", "getPresentationDefinition", "getPresentationDefinitionV2", "holderRejectProof", "holderSubmitProof", "holderSubmitProofV2", "getCredentials", "runTask", "deleteProofClaims", "getCredential", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "getCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofs", "deleteProof", "proposeProof", "createProofSchema", "getProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "createTrustAnchor", "deleteTrustAnchor", "getTrustAnchor", "getTrustAnchors", "createTrustEntity", "getTrustEntity", "getTrustEntities", "getTrustEntityByDid", "resolveTrustEntityByIdentifier", "createRemoteTrustEntity", "getRemoteTrustEntity", "updateRemoteTrustEntity", "getHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "holderRegisterWalletUnit", "holderWalletUnitStatus", "holderGetWalletUnit", "nfcReadIsoMdlEngagement", "nfcStopIsoMdlEngagement", "uninitialize"];

package/dist/src/core.js

@@ -82,8 +82,8 @@ export const interfaceMethodNames = [
     "rollbackImport",
     "resolveJsonldContext",
     "holderRegisterWalletUnit",
-    "holderRefreshWalletUnit",
-    "holderGetWalletUnitAttestation",
+    "holderWalletUnitStatus",
+    "holderGetWalletUnit",
     "nfcReadIsoMdlEngagement",
     "nfcStopIsoMdlEngagement",
     "uninitialize",

package/dist/src/credential.d.ts

@@ -1,5 +1,5 @@
 import { DataTypeEnum } from "./config";
-import { CredentialSchema, WalletStorageType } from "./credentialSchema";
+import { CredentialSchema, KeyStorageSecurity } from "./credentialSchema";
 import { ListQuery, SortDirection } from "./list";
 import { IdentifierListItem } from "./identifier";
 export declare enum CredentialStateEnum {
@@ -141,8 +141,10 @@ export interface InvitationResultCredentialIssuance {
      * is typically sent through a separate channel such as SMS or email.
      */
     txCode?: OpenID4VCITxCode;
-    /** Required storage type for holder binding key */
-    walletStorageType?: WalletStorageType;
+    /** Accepted storage security levels for holder binding key */
+    keyStorageSecurityLevels?: KeyStorageSecurity[];
+    /** Accepted algorithms for holder binding key */
+    keyAlgorithms?: string[];
 }
 export interface OpenID4VCITxCode {
     inputMode?: OpenID4VCITxCodeInputMode;
@@ -174,8 +176,10 @@ export interface InitiateIssuanceResponse {
 export interface ContinueIssuanceResponse {
     /** For reference. */
     interactionId: string;
-    /** Required storage type for holder binding key */
-    walletStorageType?: WalletStorageType;
+    /** Accepted storage security levels for holder binding key */
+    keyStorageSecurityLevels?: KeyStorageSecurity[];
+    /** Accepted algorithms for holder binding key */
+    keyAlgorithms?: string[];
 }
 export interface OpenID4VCIProofTypeSupported {
     proofSigningAlgValuesSupported: string[];
@@ -187,3 +191,11 @@ export interface AuthorizationCodeFlow {
      * the authorization process with the authorization server. */
     authorizationCodeFlowUrl: string;
 }
+export interface HolderAcceptCredentialRequest {
+    interactionId: string;
+    didId?: string;
+    identifierId?: string;
+    keyId?: string;
+    txCode?: string;
+    holderWalletUnitId?: string;
+}

package/dist/src/credentialSchema.d.ts

@@ -13,13 +13,11 @@ export interface ImportCredentialSchemaRequestSchema {
     organisationId: string;
     importedSourceUrl: string;
     claims: ImportCredentialSchemaClaimSchema[];
-    walletStorageType?: WalletStorageType;
+    keyStorageSecurity?: KeyStorageSecurity;
     schemaId: string;
-    schemaType: CredentialSchemaType;
     layoutType?: LayoutType;
     layoutProperties?: ImportCredentialSchemaLayoutProperties;
     allowSuspension?: boolean;
-    externalSchema: boolean;
 }
 export interface ImportCredentialSchemaClaimSchema {
     id: string;
@@ -72,19 +70,12 @@ export interface CredentialSchemaListQuery extends ListQuery {
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */
     lastModifiedBefore?: string;
 }
-export declare enum WalletStorageType {
-    HARDWARE = "HARDWARE",
-    SOFTWARE = "SOFTWARE",
-    REMOTE_SECURE_ELEMENT = "REMOTE_SECURE_ELEMENT",
-    EUDI_COMPLIANT = "EUDI_COMPLIANT"
+export declare enum KeyStorageSecurity {
+    HIGH = "HIGH",
+    MODERATE = "MODERATE",
+    ENHANCED_BASIC = "ENHANCED_BASIC",
+    BASIC = "BASIC"
 }
-export declare enum KnownCredentialSchemaType {
-    PROCIVIS_ONE_SCHEMA2024 = "PROCIVIS_ONE_SCHEMA2024",
-    FALLBACK_SCHEMA2024 = "FALLBACK_SCHEMA2024",
-    MDOC = "MDOC",
-    SD_JWT_VC = "SD_JWT_VC"
-}
-export type CredentialSchemaType = KnownCredentialSchemaType | string;
 export declare enum LayoutType {
     CARD = "CARD",
     DOCUMENT = "DOCUMENT",
@@ -97,10 +88,9 @@ export interface CredentialSchema {
     name: string;
     format: string;
     revocationMethod: string;
-    walletStorageType?: WalletStorageType;
+    keyStorageSecurity?: KeyStorageSecurity;
     schemaId: string;
     importedSourceUrl: string;
-    schemaType: CredentialSchemaType;
     layoutType?: LayoutType;
     layoutProperties?: CredentialSchemaLayoutProperties;
 }

package/dist/src/credentialSchema.js

@@ -13,20 +13,13 @@ export var ExactCredentialSchemaFilterColumnEnum;
     ExactCredentialSchemaFilterColumnEnum["NAME"] = "NAME";
     ExactCredentialSchemaFilterColumnEnum["SCHEMA_ID"] = "SCHEMA_ID";
 })(ExactCredentialSchemaFilterColumnEnum || (ExactCredentialSchemaFilterColumnEnum = {}));
-export var WalletStorageType;
-(function (WalletStorageType) {
-    WalletStorageType["HARDWARE"] = "HARDWARE";
-    WalletStorageType["SOFTWARE"] = "SOFTWARE";
-    WalletStorageType["REMOTE_SECURE_ELEMENT"] = "REMOTE_SECURE_ELEMENT";
-    WalletStorageType["EUDI_COMPLIANT"] = "EUDI_COMPLIANT";
-})(WalletStorageType || (WalletStorageType = {}));
-export var KnownCredentialSchemaType;
-(function (KnownCredentialSchemaType) {
-    KnownCredentialSchemaType["PROCIVIS_ONE_SCHEMA2024"] = "PROCIVIS_ONE_SCHEMA2024";
-    KnownCredentialSchemaType["FALLBACK_SCHEMA2024"] = "FALLBACK_SCHEMA2024";
-    KnownCredentialSchemaType["MDOC"] = "MDOC";
-    KnownCredentialSchemaType["SD_JWT_VC"] = "SD_JWT_VC";
-})(KnownCredentialSchemaType || (KnownCredentialSchemaType = {}));
+export var KeyStorageSecurity;
+(function (KeyStorageSecurity) {
+    KeyStorageSecurity["HIGH"] = "HIGH";
+    KeyStorageSecurity["MODERATE"] = "MODERATE";
+    KeyStorageSecurity["ENHANCED_BASIC"] = "ENHANCED_BASIC";
+    KeyStorageSecurity["BASIC"] = "BASIC";
+})(KeyStorageSecurity || (KeyStorageSecurity = {}));
 export var LayoutType;
 (function (LayoutType) {
     LayoutType["CARD"] = "CARD";

package/dist/src/history.d.ts

@@ -24,7 +24,9 @@ export declare enum HistoryActionEnum {
     UPDATED = "UPDATED",
     REACTIVATED = "REACTIVATED",
     CSR_GENERATED = "CSR_GENERATED",
-    EXPIRED = "EXPIRED"
+    EXPIRED = "EXPIRED",
+    INTERACTION_CREATED = "INTERACTION_CREATED",
+    INTERACTION_ERRORED = "INTERACTION_ERRORED"
 }
 export declare enum HistoryEntityTypeEnum {
     KEY = "KEY",
@@ -40,7 +42,13 @@ export declare enum HistoryEntityTypeEnum {
     TRUST_ANCHOR = "TRUST_ANCHOR",
     TRUST_ENTITY = "TRUST_ENTITY",
     WALLET_UNIT = "WALLET_UNIT",
-    WALLET_UNIT_ATTESTATION = "WALLET_UNIT_ATTESTATION"
+    USER = "USER",
+    PROVIDER = "PROVIDER",
+    WALLET_RELYING_PARTY = "WALLET_RELYING_PARTY",
+    STS_ROLE = "STS_ROLE",
+    STS_ORGANISATION = "STS_ORGANISATION",
+    STS_IAM_ROLE = "STS_IAM_ROLE",
+    STS_TOKEN = "STS_TOKEN"
 }
 export declare enum HistorySearchTypeEnum {
     CLAIM_NAME = "CLAIM_NAME",
@@ -53,7 +61,7 @@ export declare enum HistorySearchTypeEnum {
     PROOF_SCHEMA_NAME = "PROOF_SCHEMA_NAME"
 }
 export interface HistoryListQuery extends ListQuery {
-    entityId?: string;
+    entityIds?: string[];
     actions?: HistoryActionEnum[];
     entityTypes?: HistoryEntityTypeEnum[];
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */
@@ -65,7 +73,7 @@ export interface HistoryListQuery extends ListQuery {
     credentialSchemaId?: string;
     proofSchemaId?: string;
     search?: HistoryListSearch;
-    user?: string;
+    users?: string[];
 }
 export interface HistoryListSearch {
     text: string;

package/dist/src/history.js

@@ -24,6 +24,8 @@ export var HistoryActionEnum;
     HistoryActionEnum["REACTIVATED"] = "REACTIVATED";
     HistoryActionEnum["CSR_GENERATED"] = "CSR_GENERATED";
     HistoryActionEnum["EXPIRED"] = "EXPIRED";
+    HistoryActionEnum["INTERACTION_CREATED"] = "INTERACTION_CREATED";
+    HistoryActionEnum["INTERACTION_ERRORED"] = "INTERACTION_ERRORED";
 })(HistoryActionEnum || (HistoryActionEnum = {}));
 export var HistoryEntityTypeEnum;
 (function (HistoryEntityTypeEnum) {
@@ -40,7 +42,13 @@ export var HistoryEntityTypeEnum;
     HistoryEntityTypeEnum["TRUST_ANCHOR"] = "TRUST_ANCHOR";
     HistoryEntityTypeEnum["TRUST_ENTITY"] = "TRUST_ENTITY";
     HistoryEntityTypeEnum["WALLET_UNIT"] = "WALLET_UNIT";
-    HistoryEntityTypeEnum["WALLET_UNIT_ATTESTATION"] = "WALLET_UNIT_ATTESTATION";
+    HistoryEntityTypeEnum["USER"] = "USER";
+    HistoryEntityTypeEnum["PROVIDER"] = "PROVIDER";
+    HistoryEntityTypeEnum["WALLET_RELYING_PARTY"] = "WALLET_RELYING_PARTY";
+    HistoryEntityTypeEnum["STS_ROLE"] = "STS_ROLE";
+    HistoryEntityTypeEnum["STS_ORGANISATION"] = "STS_ORGANISATION";
+    HistoryEntityTypeEnum["STS_IAM_ROLE"] = "STS_IAM_ROLE";
+    HistoryEntityTypeEnum["STS_TOKEN"] = "STS_TOKEN";
 })(HistoryEntityTypeEnum || (HistoryEntityTypeEnum = {}));
 export var HistorySearchTypeEnum;
 (function (HistorySearchTypeEnum) {

package/dist/src/proof.d.ts

@@ -36,7 +36,6 @@ export interface ProofDetail {
     role: ProofRoleEnum;
     proofSchema?: ProofSchemaListItem;
     verifier?: IdentifierListItem;
-    holder?: IdentifierListItem;
     protocol: string;
     transport: string;
     redirectUri?: string;

package/dist/src/proofSchema.d.ts

@@ -1,4 +1,4 @@
-import { CredentialSchema, CredentialSchemaLayoutProperties, CredentialSchemaType, LayoutType, WalletStorageType } from "./credentialSchema";
+import { CredentialSchema, CredentialSchemaLayoutProperties, LayoutType, KeyStorageSecurity } from "./credentialSchema";
 import { ListQuery, SortDirection } from "./list";
 export interface ProofInputClaimSchema {
     id: string;
@@ -93,10 +93,9 @@ export interface ImportProofSchemaCredentialSchema {
     name: string;
     format: string;
     revocationMethod: string;
-    walletStorageType?: WalletStorageType;
+    keyStorageSecurity?: KeyStorageSecurity;
     schemaId: string;
     importedSourceUrl: string;
-    schemaType: CredentialSchemaType;
     layoutType?: LayoutType;
     layoutProperties?: CredentialSchemaLayoutProperties;
 }

package/dist/src/walletUnit.d.ts

@@ -2,40 +2,29 @@ import { KeyListItem } from "./key";
 export declare enum WalletProviderTypeEnum {
     PROCIVIS_ONE = "PROCIVIS_ONE"
 }
-export declare enum WalletUnitStatusEnum {
-    PENDING = "PENDING",
-    ACTIVE = "ACTIVE",
-    REVOKED = "REVOKED",
-    ERROR = "ERROR"
-}
 export interface WalletProvider {
     url: string;
     type: WalletProviderTypeEnum;
-    name: string;
-    appIntegrityCheckRequired: boolean;
 }
 export interface HolderRegisterWalletUnitRequest {
     organisationId: string;
     walletProvider: WalletProvider;
     keyType: KeyListItem["keyType"];
 }
-export interface HolderRegisterWalletUnitResponse {
-    id: string;
-    keyId: KeyListItem["id"];
-}
-export interface HolderRefreshWalletUnitRequest {
-    organisationId: string;
-    appIntegrityCheckRequired: boolean;
-}
-export interface HolderAttestationWalletUnitResponse {
+export interface HolderWalletUnitDetail {
     id: string;
     createdDate: string;
     lastModified: string;
-    expirationDate: string;
-    status: WalletUnitStatusEnum;
-    attestation: string;
-    walletUnitId: string;
+    providerWalletUnitId: string;
     walletProviderUrl: string;
     walletProviderType: WalletProviderTypeEnum;
     walletProviderName: string;
+    status: WalletUnitStatus;
+    authenticationKey: KeyListItem;
+}
+export declare enum WalletUnitStatus {
+    PENDING = "PENDING",
+    ACTIVE = "ACTIVE",
+    REVOKED = "REVOKED",
+    ERROR = "ERROR"
 }

package/dist/src/walletUnit.js

@@ -2,10 +2,10 @@ export var WalletProviderTypeEnum;
 (function (WalletProviderTypeEnum) {
     WalletProviderTypeEnum["PROCIVIS_ONE"] = "PROCIVIS_ONE";
 })(WalletProviderTypeEnum || (WalletProviderTypeEnum = {}));
-export var WalletUnitStatusEnum;
-(function (WalletUnitStatusEnum) {
-    WalletUnitStatusEnum["PENDING"] = "PENDING";
-    WalletUnitStatusEnum["ACTIVE"] = "ACTIVE";
-    WalletUnitStatusEnum["REVOKED"] = "REVOKED";
-    WalletUnitStatusEnum["ERROR"] = "ERROR";
-})(WalletUnitStatusEnum || (WalletUnitStatusEnum = {}));
+export var WalletUnitStatus;
+(function (WalletUnitStatus) {
+    WalletUnitStatus["PENDING"] = "PENDING";
+    WalletUnitStatus["ACTIVE"] = "ACTIVE";
+    WalletUnitStatus["REVOKED"] = "REVOKED";
+    WalletUnitStatus["ERROR"] = "ERROR";
+})(WalletUnitStatus || (WalletUnitStatus = {}));

package/ios/ProcivisOneCoreModule.m

@@ -67,11 +67,7 @@ RCT_EXTERN_METHOD(handleInvitation:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderAcceptCredential:(NSString *)interactionId
-                  didId:(NSString *)didId
-                  identifierId:(NSString *)identifierId
-                  keyId:(NSString *)keyId
-                  txCode:(NSString *)txCode
+RCT_EXTERN_METHOD(holderAcceptCredential:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -101,9 +97,6 @@ RCT_EXTERN_METHOD(holderRejectProof:(NSString *)interactionId
 
 RCT_EXTERN_METHOD(holderSubmitProof:(NSString *)interactionId
                   credentials:(NSDictionary *)credentials
-                  didId:(NSString *)didId
-                  identifierId:(NSString *)identifierId
-                  keyId:(NSString *)keyId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -289,11 +282,11 @@ RCT_EXTERN_METHOD(holderRegisterWalletUnit:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderRefreshWalletUnit:(NSDictionary *)request
+RCT_EXTERN_METHOD(holderWalletUnitStatus:(NSString *)walletUnitId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderGetWalletUnitAttestation:(NSString *)organisationId
+RCT_EXTERN_METHOD(holderGetWalletUnit:(NSString *)walletUnitId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 

package/ios/ProcivisOneCoreModule.swift

@@ -233,24 +233,14 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(holderAcceptCredential:didId:identifierId:keyId:txCode:resolver:rejecter:)
+  @objc(holderAcceptCredential:resolver:rejecter:)
   func holderAcceptCredential(
-    interactionId: String,
-    didId: String?,
-    identifierId: String?,
-    keyId: String?,
-    txCode: String?,
+    request: NSDictionary,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      return try await self.getCore().holderAcceptCredential(
-        interactionId: interactionId,
-        didId: didId,
-        identifierId: identifierId,
-        keyId: keyId,
-        txCode: txCode
-      )
+      return try await self.getCore().holderAcceptCredential(request: try deserialize(request))
     }
   }
 
@@ -326,23 +316,17 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(holderSubmitProof:credentials:didId:identifierId:keyId:resolver:rejecter:)
+  @objc(holderSubmitProof:credentials:resolver:rejecter:)
   func submitProof(
     interactionId: String,
     credentials: NSDictionary,
-    didId: String?,
-    identifierId: String?,
-    keyId: String?,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
       try await self.getCore().holderSubmitProof(
         interactionId: interactionId,
-        submitCredentials: try deserialize(credentials),
-        didId: didId,
-        identifierId: identifierId,
-        keyId: keyId
+        submitCredentials: try deserialize(credentials)
       )
       return nil as NSDictionary?
     }
@@ -358,7 +342,7 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     asyncCall(resolve, reject) {
       try await self.getCore().holderSubmitProofV2(
         interactionId: interactionId,
-        submission: try deserialize(submission),
+        submission: try deserialize(submission)
       )
       return nil as NSDictionary?
     }
@@ -901,31 +885,30 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().holderRegisterWalletUnit(request: try deserialize(request))
-      return try serializeAny(result)
+      return try await self.getCore().holderRegisterWalletUnit(request: try deserialize(request))
     }
   }
 
-  @objc(holderRefreshWalletUnit:resolver:rejecter:)
-  func holderRefreshWalletUnit(
-    request: NSDictionary,
+  @objc(holderWalletUnitStatus:resolver:rejecter:)
+  func holderWalletUnitStatus(
+    walletUnitId: String,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      try await self.getCore().holderRefreshWalletUnit(request: try deserialize(request))
+      try await self.getCore().holderWalletUnitStatus(id: walletUnitId)
       return nil as NSDictionary?
     }
   }
 
-  @objc(holderGetWalletUnitAttestation:resolver:rejecter:)
-  func holderGetWalletUnitAttestation(
-    organisationId: String,
+  @objc(holderGetWalletUnit:resolver:rejecter:)
+  func holderGetWalletUnit(
+    walletUnitId: String,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().holderGetWalletUnitAttestation(organisationId: organisationId)
+      let result = try await self.getCore().holderGetWalletUnit(id: walletUnitId)
       return try serializeAny(result)
     }
   }

package/ios/RSEKeyStorage.swift

@@ -48,65 +48,34 @@ class RSEKeyStorage: NativeKeyStorage {
     }
     
     func generateKey(keyAlias: String) async throws -> GeneratedKeyBindingDto {
+        // Check if main asset exists and handle its state
         if let asset = UbqSdk.assets.first {
-            if (asset.state == .normal) {
-                throw NativeKeyStorageError.KeyGenerationFailure(reason: "Already created")
-            } else {
+            if asset.state != .normal {
                 // an asset can be left locked after an unfinished generation earlier (e.g. app forcefully closed during PIN setup)
                 try await delete()
             }
         }
-        
+
         do {
-            let tokenUrl = URL(string: "\(token_generator_url)/ubiqu/")!
-            var tokenRequest = URLRequest(url: tokenUrl)
-            tokenRequest.httpMethod = "GET"
-            tokenRequest.setValue("bearer \(api_key)", forHTTPHeaderField: "Authorization")
-            let (tokenData, _) = try await URLSession.shared.data(for: tokenRequest)
-            
-            let tokenResponse = try JSONDecoder().decode(TokenResponse.self, from: tokenData)
-            let accessToken = tokenResponse.accessToken
-            
-            let identityUrl = URL(string: "\(identity_service_url)/organisation/\(organisation_id)/identity/")!
-            var identityRequest = URLRequest(url: identityUrl)
-            identityRequest.httpMethod = "POST"
-            identityRequest.setValue("application/json", forHTTPHeaderField: "Content-Type")
-            identityRequest.setValue("bearer \(accessToken)", forHTTPHeaderField: "Authorization")
-            identityRequest.httpBody = try JSONEncoder().encode(CreateIdentityPayload(sub: "ios-rse-example-\(generateRandomString(length: 16))"))
-            let (identityData, _) = try await URLSession.shared.data(for: identityRequest)
-            
-            let identityResponse = try JSONDecoder().decode(CreateIdentityResponse.self, from: identityData)
-            let subject = identityResponse.sub
-            
-            let rseUrl = URL(string: "\(identity_service_url)/organisation/\(organisation_id)/identity/\(subject)/register_rse/")!
-            var rseRequest = URLRequest(url: rseUrl)
-            rseRequest.httpMethod = "POST"
-            identityRequest.setValue("application/json", forHTTPHeaderField: "Content-Type")
-            rseRequest.setValue("bearer \(accessToken)", forHTTPHeaderField: "Authorization")
-            rseRequest.httpBody = try JSONEncoder().encode(CreateIdentityPayload(sub: "ios-rse-example- \(generateRandomString(length: 16))"))
-            let (rseData, _) = try await URLSession.shared.data(for: rseRequest)
-            
-            let rseResponse = try JSONDecoder().decode(RegisterRseResponse.self, from: rseData)
-            
-            let subscribeTransaction = try await withCheckedThrowingContinuation { continuation in
-                UbqSdk.subscribe(rseResponse.nonce, rseResponse.puk) { flow in
-                    continuation.resume(returning: flow)
-                } onStartFailure: { error in
-                    continuation.resume(throwing: error)
-                }
+            // Get or create the main asset
+            let mainAsset: UbqAsset
+            if let existingAsset = UbqSdk.assets.first, existingAsset.state == .normal {
+                // Main asset already exists and is ready - reuse it
+                mainAsset = existingAsset
+            } else {
+                // Need to create the main asset
+                mainAsset = try await createMainAsset()
             }
-            self.subscriber = await RSESubscriber(pinPad: RSEPinPad.self.sharedPinPad, transaction: subscribeTransaction)
-            let asset = try await self.subscriber!.perform()
-            self.subscriber = nil
-            
+
+            // Create a new derived asset from the main asset
             let derivedAsset = try await withCheckedThrowingContinuation { continuation in
-                asset.createDa(cryptoTypes: .EdDSA_25519) { derivedAsset in
+                mainAsset.createDa(cryptoTypes: .EdDSA_25519) { derivedAsset in
                     continuation.resume(returning: derivedAsset)
                 } failure: { error in
                     continuation.resume(throwing: error)
                 }
             }
-            
+
             guard let keyReference = derivedAsset.uuid.uuidString.data(using: .utf8),
                   let pemString = derivedAsset.publicKey,
                   let publicKeyPrefixed = parsePEMPublicKeyContent(pemString) else {
@@ -120,11 +89,58 @@ class RSEKeyStorage: NativeKeyStorage {
         } catch {
             self.subscriber = nil
             ProcivisOneCoreEventEmitter.shared.sendHidePinEvent()
-            // delete paritally generated asset
-            try await delete()
+            // delete partially generated asset only if we were creating a new one
+            if UbqSdk.assets.isEmpty || UbqSdk.assets.first?.state != .normal {
+                try? await delete()
+            }
             throw NativeKeyStorageError.KeyGenerationFailure(reason: error.localizedDescription)
         }
     }
+
+    private func createMainAsset() async throws -> UbqAsset {
+        let tokenUrl = URL(string: "\(token_generator_url)/ubiqu/")!
+        var tokenRequest = URLRequest(url: tokenUrl)
+        tokenRequest.httpMethod = "GET"
+        tokenRequest.setValue("bearer \(api_key)", forHTTPHeaderField: "Authorization")
+        let (tokenData, _) = try await URLSession.shared.data(for: tokenRequest)
+
+        let tokenResponse = try JSONDecoder().decode(TokenResponse.self, from: tokenData)
+        let accessToken = tokenResponse.accessToken
+
+        let identityUrl = URL(string: "\(identity_service_url)/organisation/\(organisation_id)/identity/")!
+        var identityRequest = URLRequest(url: identityUrl)
+        identityRequest.httpMethod = "POST"
+        identityRequest.setValue("application/json", forHTTPHeaderField: "Content-Type")
+        identityRequest.setValue("bearer \(accessToken)", forHTTPHeaderField: "Authorization")
+        identityRequest.httpBody = try JSONEncoder().encode(CreateIdentityPayload(sub: "ios-rse-example-\(generateRandomString(length: 16))"))
+        let (identityData, _) = try await URLSession.shared.data(for: identityRequest)
+
+        let identityResponse = try JSONDecoder().decode(CreateIdentityResponse.self, from: identityData)
+        let subject = identityResponse.sub
+
+        let rseUrl = URL(string: "\(identity_service_url)/organisation/\(organisation_id)/identity/\(subject)/register_rse/")!
+        var rseRequest = URLRequest(url: rseUrl)
+        rseRequest.httpMethod = "POST"
+        rseRequest.setValue("application/json", forHTTPHeaderField: "Content-Type")
+        rseRequest.setValue("bearer \(accessToken)", forHTTPHeaderField: "Authorization")
+        rseRequest.httpBody = try JSONEncoder().encode(CreateIdentityPayload(sub: "ios-rse-example-\(generateRandomString(length: 16))"))
+        let (rseData, _) = try await URLSession.shared.data(for: rseRequest)
+
+        let rseResponse = try JSONDecoder().decode(RegisterRseResponse.self, from: rseData)
+
+        let subscribeTransaction = try await withCheckedThrowingContinuation { continuation in
+            UbqSdk.subscribe(rseResponse.nonce, rseResponse.puk) { flow in
+                continuation.resume(returning: flow)
+            } onStartFailure: { error in
+                continuation.resume(throwing: error)
+            }
+        }
+        self.subscriber = await RSESubscriber(pinPad: RSEPinPad.self.sharedPinPad, transaction: subscribeTransaction)
+        let asset = try await self.subscriber!.perform()
+        self.subscriber = nil
+
+        return asset
+    }
     
     func sign(keyReference: Data, message: Data) async throws -> Data {
         guard let asset = UbqSdk.assets.first else {
@@ -137,9 +153,9 @@ class RSEKeyStorage: NativeKeyStorage {
                 continuation.resume(throwing: error)
             }
         }
-        guard let derivedAsset = asset.derivedAssets.first,
-              let keyReferenceUUIDString = String(data: keyReference, encoding: .utf8),
-              derivedAsset.uuid == UUID(uuidString: keyReferenceUUIDString) else {
+        guard let keyReferenceUUIDString = String(data: keyReference, encoding: .utf8),
+              let keyReferenceUUID = UUID(uuidString: keyReferenceUUIDString),
+              let derivedAsset = asset.derivedAssets.first(where: { $0.uuid == keyReferenceUUID }) else {
             throw NativeKeyStorageError.SignatureFailure(reason: "Key does not exist")
         }
         

package/ios/Serialize.swift

@@ -101,12 +101,15 @@ private func serialize(proofRequestClaimValue: ProofRequestClaimValueBindingDto)
 
 private func serialize(invitationResponse: HandleInvitationResponseBindingEnum) throws -> NSDictionary {
     switch (invitationResponse) {
-    case let .credentialIssuance(interactionId, walletStorageType, txCode):
+    case let .credentialIssuance(interactionId, keyStorageSecurityLevels, keyAlgorithms, txCode):
         var result: [String: Any] = [
             "interactionId": interactionId
         ];
-        if let walletStorageType = walletStorageType {
-            result["walletStorageType"] = serializeEnumValue(value: walletStorageType)
+        if let keyStorageSecurityLevels = keyStorageSecurityLevels {
+            result["keyStorageSecurityLevels"] = keyStorageSecurityLevels.map { serializeEnumValue(value: $0) }
+        }
+        if let keyAlgorithms = keyAlgorithms {
+            result["keyAlgorithms"] = try serializeAny(keyAlgorithms)
         }
         if let txCode = txCode {
             result["txCode"] = try serializeAny(txCode)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@procivis/react-native-one-core",
-  "version": "1.67952.1",
+  "version": "1.75488.0",
   "author": "Procivis AG (https://procivis.ch)",
   "license": "Apache-2.0",
   "description": "ONE core bindings for React Native",