@sd-jwt/core 0.1.0 → 0.1.1-next.0

package/src/test/present/present.spec.ts

@@ -0,0 +1,305 @@
+import { hasher as digest } from '@owf/crypto';
+import { describe, expect, test } from 'vitest';
+import { decodeSdJwt, decodeSdJwtSync } from '../../decode';
+import {
+  present,
+  presentableKeys,
+  presentableKeysSync,
+  presentSync,
+  type SerializedDisclosure,
+  selectDisclosures,
+  transformPresentationFrame,
+} from '../../present';
+import type { PresentationFrame } from '../../types';
+
+describe('Present tests', () => {
+  test('presentableKeys', async () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJ0ZXN0Ijp7Il9zZCI6WyJqVEszMHNleDZhYV9kUk1KSWZDR056Q0FwbVB5MzRRNjNBa3QzS3hhSktzIl19LCJfc2QiOlsiME9nMi1ReG95eW1UOGNnVzZZUjVSSFpQLUJuR2tHUi1NM2otLV92RWlzSSIsIkcwZ3lHNnExVFMyUlQxMkZ3X2RRRDVVcjlZc1AwZlVWOXVtQWdGMC1jQ1EiXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.ggEyE4SeDO2Hu3tol3VLmi7NQj56yKzKQDaafocgkLrUBdivghohtzrfcbrMN7CRufJ_Cnh0EL54kymXLGTdDQ~WyIwNGU0MjAzOWU4ZWFiOWRjIiwiYSIsIjEiXQ~WyIwOGE1Yjc5MjMyYjAzYzBhIiwiMSJd~WyJiNWE2YjUzZGQwYTFmMGIwIiwienp6IiwieHh4Il0~WyIxYzdmOTE4ZTE0MjA2NzZiIiwiZm9vIiwiYmFyIl0~WyJmZjYxYzQ5ZGU2NjFiYzMxIiwiYXJyIixbeyIuLi4iOiJTSG96VW5KNUpkd0ZtTjVCbXB5dXZCWGZfZWRjckVvcExPYThTVlBFUmg0In0sIjIiLHsiX3NkIjpbIkpuODNhZkp0OGx4NG1FMzZpRkZyS2U2R2VnN0dlVUQ4Z3UwdVo3NnRZcW8iXX1dXQ~';
+    const decodedSdJwt = await decodeSdJwt(sdjwt, digest);
+    const keys = await presentableKeys(
+      decodedSdJwt.jwt.payload,
+      decodedSdJwt.disclosures,
+      digest,
+    );
+    expect(keys).toStrictEqual(['arr', 'arr.0', 'arr.2.a', 'foo', 'test.zzz']);
+  });
+
+  test('presentableKeys sync', () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJ0ZXN0Ijp7Il9zZCI6WyJqVEszMHNleDZhYV9kUk1KSWZDR056Q0FwbVB5MzRRNjNBa3QzS3hhSktzIl19LCJfc2QiOlsiME9nMi1ReG95eW1UOGNnVzZZUjVSSFpQLUJuR2tHUi1NM2otLV92RWlzSSIsIkcwZ3lHNnExVFMyUlQxMkZ3X2RRRDVVcjlZc1AwZlVWOXVtQWdGMC1jQ1EiXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.ggEyE4SeDO2Hu3tol3VLmi7NQj56yKzKQDaafocgkLrUBdivghohtzrfcbrMN7CRufJ_Cnh0EL54kymXLGTdDQ~WyIwNGU0MjAzOWU4ZWFiOWRjIiwiYSIsIjEiXQ~WyIwOGE1Yjc5MjMyYjAzYzBhIiwiMSJd~WyJiNWE2YjUzZGQwYTFmMGIwIiwienp6IiwieHh4Il0~WyIxYzdmOTE4ZTE0MjA2NzZiIiwiZm9vIiwiYmFyIl0~WyJmZjYxYzQ5ZGU2NjFiYzMxIiwiYXJyIixbeyIuLi4iOiJTSG96VW5KNUpkd0ZtTjVCbXB5dXZCWGZfZWRjckVvcExPYThTVlBFUmg0In0sIjIiLHsiX3NkIjpbIkpuODNhZkp0OGx4NG1FMzZpRkZyS2U2R2VnN0dlVUQ4Z3UwdVo3NnRZcW8iXX1dXQ~';
+    const decodedSdJwt = decodeSdJwtSync(sdjwt, digest);
+    const keys = presentableKeysSync(
+      decodedSdJwt.jwt.payload,
+      decodedSdJwt.disclosures,
+      digest,
+    );
+    expect(keys).toStrictEqual(['arr', 'arr.0', 'arr.2.a', 'foo', 'test.zzz']);
+  });
+
+  test('present', async () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJ0ZXN0Ijp7Il9zZCI6WyJqVEszMHNleDZhYV9kUk1KSWZDR056Q0FwbVB5MzRRNjNBa3QzS3hhSktzIl19LCJfc2QiOlsiME9nMi1ReG95eW1UOGNnVzZZUjVSSFpQLUJuR2tHUi1NM2otLV92RWlzSSIsIkcwZ3lHNnExVFMyUlQxMkZ3X2RRRDVVcjlZc1AwZlVWOXVtQWdGMC1jQ1EiXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.ggEyE4SeDO2Hu3tol3VLmi7NQj56yKzKQDaafocgkLrUBdivghohtzrfcbrMN7CRufJ_Cnh0EL54kymXLGTdDQ~WyIwNGU0MjAzOWU4ZWFiOWRjIiwiYSIsIjEiXQ~WyIwOGE1Yjc5MjMyYjAzYzBhIiwiMSJd~WyJiNWE2YjUzZGQwYTFmMGIwIiwienp6IiwieHh4Il0~WyIxYzdmOTE4ZTE0MjA2NzZiIiwiZm9vIiwiYmFyIl0~WyJmZjYxYzQ5ZGU2NjFiYzMxIiwiYXJyIixbeyIuLi4iOiJTSG96VW5KNUpkd0ZtTjVCbXB5dXZCWGZfZWRjckVvcExPYThTVlBFUmg0In0sIjIiLHsiX3NkIjpbIkpuODNhZkp0OGx4NG1FMzZpRkZyS2U2R2VnN0dlVUQ4Z3UwdVo3NnRZcW8iXX1dXQ~';
+    const presentedSdJwt = await present(
+      sdjwt,
+      {
+        foo: true,
+        arr: {
+          0: true,
+        },
+        test: {
+          zzz: true,
+        },
+      },
+      digest,
+    );
+    expect(presentedSdJwt).toStrictEqual(
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJ0ZXN0Ijp7Il9zZCI6WyJqVEszMHNleDZhYV9kUk1KSWZDR056Q0FwbVB5MzRRNjNBa3QzS3hhSktzIl19LCJfc2QiOlsiME9nMi1ReG95eW1UOGNnVzZZUjVSSFpQLUJuR2tHUi1NM2otLV92RWlzSSIsIkcwZ3lHNnExVFMyUlQxMkZ3X2RRRDVVcjlZc1AwZlVWOXVtQWdGMC1jQ1EiXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.ggEyE4SeDO2Hu3tol3VLmi7NQj56yKzKQDaafocgkLrUBdivghohtzrfcbrMN7CRufJ_Cnh0EL54kymXLGTdDQ~WyIxYzdmOTE4ZTE0MjA2NzZiIiwiZm9vIiwiYmFyIl0~WyJmZjYxYzQ5ZGU2NjFiYzMxIiwiYXJyIixbeyIuLi4iOiJTSG96VW5KNUpkd0ZtTjVCbXB5dXZCWGZfZWRjckVvcExPYThTVlBFUmg0In0sIjIiLHsiX3NkIjpbIkpuODNhZkp0OGx4NG1FMzZpRkZyS2U2R2VnN0dlVUQ4Z3UwdVo3NnRZcW8iXX1dXQ~WyIwOGE1Yjc5MjMyYjAzYzBhIiwiMSJd~WyJiNWE2YjUzZGQwYTFmMGIwIiwienp6IiwieHh4Il0~',
+    );
+  });
+
+  test('present sync', () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJ0ZXN0Ijp7Il9zZCI6WyJqVEszMHNleDZhYV9kUk1KSWZDR056Q0FwbVB5MzRRNjNBa3QzS3hhSktzIl19LCJfc2QiOlsiME9nMi1ReG95eW1UOGNnVzZZUjVSSFpQLUJuR2tHUi1NM2otLV92RWlzSSIsIkcwZ3lHNnExVFMyUlQxMkZ3X2RRRDVVcjlZc1AwZlVWOXVtQWdGMC1jQ1EiXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.ggEyE4SeDO2Hu3tol3VLmi7NQj56yKzKQDaafocgkLrUBdivghohtzrfcbrMN7CRufJ_Cnh0EL54kymXLGTdDQ~WyIwNGU0MjAzOWU4ZWFiOWRjIiwiYSIsIjEiXQ~WyIwOGE1Yjc5MjMyYjAzYzBhIiwiMSJd~WyJiNWE2YjUzZGQwYTFmMGIwIiwienp6IiwieHh4Il0~WyIxYzdmOTE4ZTE0MjA2NzZiIiwiZm9vIiwiYmFyIl0~WyJmZjYxYzQ5ZGU2NjFiYzMxIiwiYXJyIixbeyIuLi4iOiJTSG96VW5KNUpkd0ZtTjVCbXB5dXZCWGZfZWRjckVvcExPYThTVlBFUmg0In0sIjIiLHsiX3NkIjpbIkpuODNhZkp0OGx4NG1FMzZpRkZyS2U2R2VnN0dlVUQ4Z3UwdVo3NnRZcW8iXX1dXQ~';
+    const presentedSdJwt = presentSync(
+      sdjwt,
+      {
+        foo: true,
+        arr: {
+          0: true,
+        },
+        test: {
+          zzz: true,
+        },
+      },
+      digest,
+    );
+    expect(presentedSdJwt).toStrictEqual(
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJ0ZXN0Ijp7Il9zZCI6WyJqVEszMHNleDZhYV9kUk1KSWZDR056Q0FwbVB5MzRRNjNBa3QzS3hhSktzIl19LCJfc2QiOlsiME9nMi1ReG95eW1UOGNnVzZZUjVSSFpQLUJuR2tHUi1NM2otLV92RWlzSSIsIkcwZ3lHNnExVFMyUlQxMkZ3X2RRRDVVcjlZc1AwZlVWOXVtQWdGMC1jQ1EiXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.ggEyE4SeDO2Hu3tol3VLmi7NQj56yKzKQDaafocgkLrUBdivghohtzrfcbrMN7CRufJ_Cnh0EL54kymXLGTdDQ~WyIxYzdmOTE4ZTE0MjA2NzZiIiwiZm9vIiwiYmFyIl0~WyJmZjYxYzQ5ZGU2NjFiYzMxIiwiYXJyIixbeyIuLi4iOiJTSG96VW5KNUpkd0ZtTjVCbXB5dXZCWGZfZWRjckVvcExPYThTVlBFUmg0In0sIjIiLHsiX3NkIjpbIkpuODNhZkp0OGx4NG1FMzZpRkZyS2U2R2VnN0dlVUQ4Z3UwdVo3NnRZcW8iXX1dXQ~WyIwOGE1Yjc5MjMyYjAzYzBhIiwiMSJd~WyJiNWE2YjUzZGQwYTFmMGIwIiwienp6IiwieHh4Il0~',
+    );
+  });
+
+  test('transform an object for a presentation to a list', () => {
+    const claims = {
+      firstname: 'John',
+      lastname: 'Doe',
+      ssn: '123-45-6789',
+      id: '1234',
+      data: {
+        firstname: 'John',
+        lastname: 'Doe',
+        ssn: '123-45-6789',
+        list: [{ r: 'd' }, 'b', 'c'],
+        list2: ['1', '2', '3'],
+        list3: ['1', null, 2],
+      },
+      data2: {
+        hi: 'bye',
+      },
+    };
+
+    const presentFrame: PresentationFrame<typeof claims> = {
+      firstname: true,
+      data: {
+        firstname: true,
+        list: {
+          1: true,
+          0: {
+            r: true,
+          },
+        },
+        list2: {
+          1: true,
+        },
+        list3: true,
+      },
+      data2: true,
+    };
+
+    const list = transformPresentationFrame(presentFrame);
+    expect(list).toStrictEqual([
+      'firstname',
+      'data',
+      'data.firstname',
+      'data.list',
+      'data.list.0',
+      'data.list.0.r',
+      'data.list.1',
+      'data.list2',
+      'data.list2.1',
+      'data.list3',
+      'data2',
+    ]);
+  });
+
+  test('transform an object for a presentation to a list, but with faulty inputs', () => {
+    const claims = {
+      name: 'John',
+      address: {
+        city: 'New York',
+        street: '5th Avenue',
+      },
+    };
+
+    const obj: PresentationFrame<typeof claims> = {
+      name: false,
+      address: {
+        city: true,
+        street: true,
+      },
+    };
+    const list = transformPresentationFrame(obj);
+    expect(list).toStrictEqual(['address', 'address.city', 'address.street']);
+  });
+
+  test('select disclosures', () => {
+    const payload = {
+      lastname: 'Doe',
+      _sd: [
+        'COnqXH7wGBFGR1ao12sDwTfu84Zs7cq92CZIg8ulIuU',
+        'RrOc4ZfBVyD6iNlMbtmdokZOti322mOXfvIOBKvpuc4',
+        'aXqInKwHoE1l8OM1VNUQDqTPeNUG1cMJVwVbxZJpP14',
+      ],
+      _sd_alg: 'sha-256',
+    };
+
+    const presentationFrame = {
+      firstname: true,
+      //ssn: true,
+      id: true,
+    };
+
+    const disclosures: SerializedDisclosure[] = [
+      {
+        digest: 'COnqXH7wGBFGR1ao12sDwTfu84Zs7cq92CZIg8ulIuU',
+        encoded: 'WyJiMDQ3NjBiOTgxMDgyM2ZhIiwiZmlyc3RuYW1lIiwiSm9obiJd',
+        salt: 'b04760b9810823fa',
+        key: 'firstname',
+        value: 'John',
+      },
+      {
+        digest: 'RrOc4ZfBVyD6iNlMbtmdokZOti322mOXfvIOBKvpuc4',
+        encoded: 'WyJjNTQwZWE4YjJhOTNmZDE1Iiwic3NuIiwiMTIzLTQ1LTY3ODkiXQ',
+        salt: 'c540ea8b2a93fd15',
+        key: 'ssn',
+        value: '123-45-6789',
+      },
+      {
+        digest: 'aXqInKwHoE1l8OM1VNUQDqTPeNUG1cMJVwVbxZJpP14',
+        encoded: 'WyI5N2YwNTVkZTk0NGFmNzI5IiwiaWQiLCIxMjM0Il0',
+        salt: '97f055de944af729',
+        key: 'id',
+        value: '1234',
+      },
+    ];
+
+    const selected = selectDisclosures(payload, disclosures, presentationFrame);
+    expect(selected).toStrictEqual([
+      {
+        digest: 'COnqXH7wGBFGR1ao12sDwTfu84Zs7cq92CZIg8ulIuU',
+        encoded: 'WyJiMDQ3NjBiOTgxMDgyM2ZhIiwiZmlyc3RuYW1lIiwiSm9obiJd',
+        salt: 'b04760b9810823fa',
+        key: 'firstname',
+        value: 'John',
+      },
+      {
+        digest: 'aXqInKwHoE1l8OM1VNUQDqTPeNUG1cMJVwVbxZJpP14',
+        encoded: 'WyI5N2YwNTVkZTk0NGFmNzI5IiwiaWQiLCIxMjM0Il0',
+        salt: '97f055de944af729',
+        key: 'id',
+        value: '1234',
+      },
+    ]);
+  });
+
+  test('select disclosures no input', () => {
+    const selected = selectDisclosures({}, [], {});
+    expect(selected).toStrictEqual([]);
+  });
+
+  test('select disclosures noting return', () => {
+    const payload = {
+      lastname: 'Doe',
+      _sd: [
+        'COnqXH7wGBFGR1ao12sDwTfu84Zs7cq92CZIg8ulIuU',
+        'RrOc4ZfBVyD6iNlMbtmdokZOti322mOXfvIOBKvpuc4',
+        'aXqInKwHoE1l8OM1VNUQDqTPeNUG1cMJVwVbxZJpP14',
+      ],
+      _sd_alg: 'sha-256',
+    };
+
+    const presentationFrame = {};
+
+    const disclosures: SerializedDisclosure[] = [
+      {
+        digest: 'COnqXH7wGBFGR1ao12sDwTfu84Zs7cq92CZIg8ulIuU',
+        encoded: 'WyJiMDQ3NjBiOTgxMDgyM2ZhIiwiZmlyc3RuYW1lIiwiSm9obiJd',
+        salt: 'b04760b9810823fa',
+        key: 'firstname',
+        value: 'John',
+      },
+      {
+        digest: 'RrOc4ZfBVyD6iNlMbtmdokZOti322mOXfvIOBKvpuc4',
+        encoded: 'WyJjNTQwZWE4YjJhOTNmZDE1Iiwic3NuIiwiMTIzLTQ1LTY3ODkiXQ',
+        salt: 'c540ea8b2a93fd15',
+        key: 'ssn',
+        value: '123-45-6789',
+      },
+      {
+        digest: 'aXqInKwHoE1l8OM1VNUQDqTPeNUG1cMJVwVbxZJpP14',
+        encoded: 'WyI5N2YwNTVkZTk0NGFmNzI5IiwiaWQiLCIxMjM0Il0',
+        salt: '97f055de944af729',
+        key: 'id',
+        value: '1234',
+      },
+    ];
+    const selected = selectDisclosures(payload, disclosures, presentationFrame);
+    expect(selected).toStrictEqual([]);
+  });
+
+  test('expect missing digest', () => {
+    const payload = {
+      lastname: 'Doe',
+      _sd: [
+        'COnqXH7wGBFGR1ao12sDwTfu84Zs7cq92CZIg8ulIuU',
+        'RrOc4ZfBVyD6iNlMbtmdokZOti322mOXfvIOBKvpuc4',
+        'aXqInKwHoE1l8OM1VNUQDqTPeNUG1cMJVwVbxZJpP14',
+      ],
+      _sd_alg: 'sha-256',
+    };
+
+    const presentationFrame = {
+      firstname: true,
+      //ssn: true,
+      id: true,
+    };
+
+    const disclosures: SerializedDisclosure[] = [
+      //@ts-expect-error
+      {
+        encoded: 'WyJiMDQ3NjBiOTgxMDgyM2ZhIiwiZmlyc3RuYW1lIiwiSm9obiJd',
+        salt: 'b04760b9810823fa',
+        key: 'firstname',
+        value: 'John',
+      },
+      {
+        digest: 'RrOc4ZfBVyD6iNlMbtmdokZOti322mOXfvIOBKvpuc4',
+        encoded: 'WyJjNTQwZWE4YjJhOTNmZDE1Iiwic3NuIiwiMTIzLTQ1LTY3ODkiXQ',
+        salt: 'c540ea8b2a93fd15',
+        key: 'ssn',
+        value: '123-45-6789',
+      },
+      {
+        digest: 'aXqInKwHoE1l8OM1VNUQDqTPeNUG1cMJVwVbxZJpP14',
+        encoded: 'WyI5N2YwNTVkZTk0NGFmNzI5IiwiaWQiLCIxMjM0Il0',
+        salt: '97f055de944af729',
+        key: 'id',
+        value: '1234',
+      },
+    ];
+
+    expect(() =>
+      selectDisclosures(payload, disclosures, presentationFrame),
+    ).toThrowError('Unreferenced disclosure(s) detected in SD-JWT');
+  });
+});

package/src/test/sdjwt.spec.ts

@@ -0,0 +1,384 @@
+import Crypto from 'node:crypto';
+import { generateSalt, hasher } from '@owf/crypto';
+import { describe, expect, test } from 'vitest';
+import { createHashMapping, unpack } from '../decode';
+import { Jwt } from '../jwt';
+import { listKeys, pack, SDJwt } from '../sdjwt';
+import type { DisclosureFrame, Signer } from '../types';
+import { Disclosure } from '../utils';
+
+const hash = { alg: 'SHA256', hasher };
+
+describe('SD JWT', () => {
+  test('create and encode', async () => {
+    const { privateKey } = Crypto.generateKeyPairSync('ed25519');
+    const testSigner: Signer = async (data: string) => {
+      const sig = Crypto.sign(null, Buffer.from(data), privateKey);
+      return Buffer.from(sig).toString('base64url');
+    };
+
+    const jwt = new Jwt({
+      header: { alg: 'EdDSA' },
+      payload: { foo: 'bar' },
+    });
+
+    await jwt.sign(testSigner);
+    const sdJwt = new SDJwt({
+      jwt,
+      disclosures: [],
+    });
+    expect(sdJwt).toBeDefined();
+
+    const encoded = sdJwt.encodeSDJwt();
+    expect(encoded).toBeDefined();
+  });
+
+  test('decode', async () => {
+    const { privateKey } = Crypto.generateKeyPairSync('ed25519');
+    const testSigner: Signer = async (data: string) => {
+      const sig = Crypto.sign(null, Buffer.from(data), privateKey);
+      return Buffer.from(sig).toString('base64url');
+    };
+
+    const jwt = new Jwt({
+      header: { alg: 'EdDSA' },
+      payload: { foo: 'bar', _sd_alg: 'sha-256' },
+    });
+
+    await jwt.sign(testSigner);
+    const sdJwt = new SDJwt({
+      jwt,
+      disclosures: [],
+    });
+
+    const encoded = sdJwt.encodeSDJwt();
+
+    const newSdJwt = await SDJwt.fromEncode(encoded, hasher);
+    expect(newSdJwt).toBeDefined();
+    const newJwt = newSdJwt.jwt;
+    expect(newJwt?.header).toEqual(jwt.header);
+    expect(newJwt?.payload).toEqual(jwt.payload);
+    expect(newJwt?.signature).toEqual(jwt.signature);
+  });
+
+  test('decode compatibilty', async () => {
+    const { privateKey } = Crypto.generateKeyPairSync('ed25519');
+    const testSigner: Signer = async (data: string) => {
+      const sig = Crypto.sign(null, Buffer.from(data), privateKey);
+      return Buffer.from(sig).toString('base64url');
+    };
+
+    const jwt = new Jwt({
+      header: { alg: 'EdDSA' },
+      payload: { foo: 'bar' },
+    });
+
+    await jwt.sign(testSigner);
+    const sdJwt = new SDJwt({
+      jwt,
+      disclosures: [],
+    });
+
+    const encoded = sdJwt.encodeSDJwt();
+
+    const newSdJwt = await SDJwt.fromEncode(encoded, hasher);
+    expect(newSdJwt).toBeDefined();
+    const newJwt = newSdJwt.jwt;
+    expect(newJwt?.header).toEqual(jwt.header);
+    expect(newJwt?.payload).toEqual(jwt.payload);
+    expect(newJwt?.signature).toEqual(jwt.signature);
+  });
+
+  test('keys', async () => {
+    const { privateKey } = Crypto.generateKeyPairSync('ed25519');
+    const testSigner: Signer = async (data: string) => {
+      const sig = Crypto.sign(null, Buffer.from(data), privateKey);
+      return Buffer.from(sig).toString('base64url');
+    };
+    const jwt = new Jwt({
+      header: { alg: 'EdDSA' },
+      payload: { foo: 'bar' },
+    });
+
+    await jwt.sign(testSigner);
+    const sdJwt = new SDJwt({
+      jwt,
+      disclosures: [],
+    });
+
+    const keys = await sdJwt.keys(hasher);
+    expect(keys).toBeDefined();
+    expect(keys).toEqual(['foo']);
+  });
+
+  test('presentable keys', async () => {
+    const { privateKey } = Crypto.generateKeyPairSync('ed25519');
+    const testSigner: Signer = async (data: string) => {
+      const sig = Crypto.sign(null, Buffer.from(data), privateKey);
+      return Buffer.from(sig).toString('base64url');
+    };
+
+    const jwt = new Jwt({
+      header: { alg: 'EdDSA' },
+      payload: { foo: 'bar' },
+    });
+
+    await jwt.sign(testSigner);
+    const sdJwt = new SDJwt({
+      jwt,
+      disclosures: [],
+    });
+
+    const keys = await sdJwt.presentableKeys(hasher);
+    expect(keys).toBeDefined();
+    expect(keys).toEqual([]);
+  });
+
+  test('claims', async () => {
+    const { privateKey } = Crypto.generateKeyPairSync('ed25519');
+    const testSigner: Signer = async (data: string) => {
+      const sig = Crypto.sign(null, Buffer.from(data), privateKey);
+      return Buffer.from(sig).toString('base64url');
+    };
+
+    const jwt = new Jwt({
+      header: { alg: 'EdDSA' },
+      payload: { foo: 'bar' },
+    });
+
+    await jwt.sign(testSigner);
+    const sdJwt = new SDJwt({
+      jwt,
+      disclosures: [],
+    });
+
+    const claims = await sdJwt.getClaims(hasher);
+    expect(claims).toBeDefined();
+    expect(claims).toEqual({
+      foo: 'bar',
+    });
+  });
+
+  test('pack', async () => {
+    const claim = {
+      firstname: 'John',
+      lastname: 'Doe',
+    };
+
+    const { packedClaims, disclosures } = await pack(
+      claim,
+      {
+        _sd: ['firstname'],
+      },
+      hash,
+      generateSalt,
+    );
+
+    expect(disclosures).toBeDefined();
+    expect(packedClaims).toBeDefined();
+
+    expect(disclosures.length).toEqual(1);
+    expect(disclosures[0].key).toEqual('firstname');
+    expect(disclosures[0].value).toEqual('John');
+
+    expect(packedClaims._sd).toBeDefined();
+    expect(packedClaims._sd.length).toEqual(1);
+    expect(packedClaims.lastname).toEqual('Doe');
+  });
+
+  test('list keys', () => {
+    const data = {
+      a: {
+        b: {
+          c: 1,
+        },
+        d: [
+          {
+            e: 'fasfdsa',
+            f: 1234,
+          },
+          3,
+          4,
+        ],
+      },
+      g: [['h'], 'i'],
+    };
+
+    const keys = listKeys(data);
+    expect(keys).toEqual([
+      'a',
+      'a.b',
+      'a.b.c',
+      'a.d',
+      'a.d.0',
+      'a.d.0.e',
+      'a.d.0.f',
+      'a.d.1',
+      'a.d.2',
+      'g',
+      'g.0',
+      'g.0.0',
+      'g.1',
+    ]);
+  });
+
+  test('presentable keys', async () => {
+    const claim = {
+      firstname: 'John',
+      lastname: 'Doe',
+    };
+
+    const { packedClaims, disclosures } = await pack(
+      claim,
+      {
+        _sd: ['firstname'],
+      },
+      hash,
+      generateSalt,
+    );
+
+    const { privateKey } = Crypto.generateKeyPairSync('ed25519');
+    const testSigner: Signer = async (data: string) => {
+      const sig = Crypto.sign(null, Buffer.from(data), privateKey);
+      return Buffer.from(sig).toString('base64url');
+    };
+    const jwt = new Jwt({
+      header: { alg: 'EdDSA' },
+      payload: packedClaims,
+    });
+
+    await jwt.sign(testSigner);
+    const sdJwt = new SDJwt({
+      jwt,
+      disclosures,
+    });
+
+    const keys = await sdJwt.presentableKeys(hasher);
+
+    expect(keys).toBeDefined();
+    expect(keys).toEqual(['firstname']);
+  });
+
+  test('hash map', async () => {
+    const claim = {
+      firstname: 'John',
+      lastname: 'Doe',
+    };
+
+    const { disclosures } = await pack(
+      claim,
+      {
+        _sd: ['firstname'],
+      },
+      hash,
+      generateSalt,
+    );
+
+    const mapping = await createHashMapping(disclosures, hash);
+    expect(mapping).toBeDefined();
+    expect(Object.keys(mapping).length).toEqual(1);
+    expect(mapping[Object.keys(mapping)[0]]).toBeInstanceOf(Disclosure);
+  });
+
+  test('unpack', async () => {
+    const claim = {
+      firstname: 'John',
+      lastname: 'Doe',
+    };
+
+    const { packedClaims, disclosures } = await pack(
+      claim,
+      {
+        _sd: ['firstname'],
+      },
+      hash,
+      generateSalt,
+    );
+
+    const { disclosureKeymap, unpackedObj } = await unpack(
+      packedClaims,
+      disclosures,
+      hasher,
+    );
+    expect(disclosureKeymap).toBeDefined();
+    expect(unpackedObj).toBeDefined();
+    expect(unpackedObj).toEqual({
+      firstname: 'John',
+      lastname: 'Doe',
+    });
+    expect(disclosureKeymap.firstname).toBeDefined();
+    expect(typeof disclosureKeymap.firstname).toEqual('string');
+  });
+
+  test('pack and unpack', async () => {
+    const claims = {
+      firstname: 'John',
+      lastname: 'Doe',
+      ssn: '123-45-6789',
+      id: '1234',
+      data: {
+        firstname: 'John',
+        lastname: 'Doe',
+        ssn: '123-45-6789',
+        list: [{ r: '1' }, 'b', 'c'],
+      },
+      data2: {
+        hi: 'bye',
+      },
+    };
+
+    const disclosureFrame: DisclosureFrame<typeof claims> = {
+      _sd: ['firstname', 'id', 'data2'],
+      data: {
+        _sd: ['list'],
+        _sd_decoy: 2,
+        list: {
+          _sd: [0, 2],
+          _sd_decoy: 1,
+          0: {
+            _sd: ['r'],
+          },
+        },
+      },
+      data2: {
+        _sd: ['hi'],
+      },
+    };
+
+    const { packedClaims, disclosures } = await pack(
+      claims,
+      disclosureFrame,
+      hash,
+      generateSalt,
+    );
+    const { unpackedObj } = await unpack(packedClaims, disclosures, hasher);
+
+    expect(unpackedObj).toEqual(claims);
+  });
+
+  test('no disclosures', async () => {
+    const { privateKey } = Crypto.generateKeyPairSync('ed25519');
+    const testSigner: Signer = async (data: string) => {
+      const sig = Crypto.sign(null, Buffer.from(data), privateKey);
+      return Buffer.from(sig).toString('base64url');
+    };
+
+    const jwt = new Jwt({
+      header: { alg: 'EdDSA' },
+      payload: { foo: 'bar' },
+    });
+
+    await jwt.sign(testSigner);
+    const sdJwt = new SDJwt({
+      jwt,
+      disclosures: [],
+    });
+
+    const credential = sdJwt.encodeSDJwt();
+    const decoded = await SDJwt.decodeSDJwt(credential, hasher);
+    expect(jwt.header).toEqual(decoded.jwt.header);
+    expect(jwt.payload).toEqual(decoded.jwt.payload);
+    expect(jwt.signature).toEqual(decoded.jwt.signature);
+    expect(decoded.disclosures).toEqual([]);
+  });
+});