@sd-jwt/core 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (109) hide show
  1. package/build/base64url.d.ts +28 -0
  2. package/build/base64url.js +40 -0
  3. package/build/base64url.js.map +1 -0
  4. package/build/hasherAlgorithm.d.ts +70 -0
  5. package/build/hasherAlgorithm.js +75 -0
  6. package/build/hasherAlgorithm.js.map +1 -0
  7. package/build/index.d.ts +11 -0
  8. package/build/index.js +20 -0
  9. package/build/index.js.map +1 -0
  10. package/build/jwt/compact.d.ts +6 -0
  11. package/build/jwt/compact.js +27 -0
  12. package/build/jwt/compact.js.map +1 -0
  13. package/build/jwt/error.d.ts +2 -0
  14. package/build/jwt/error.js +7 -0
  15. package/build/jwt/error.js.map +1 -0
  16. package/build/jwt/index.d.ts +3 -0
  17. package/build/jwt/index.js +20 -0
  18. package/build/jwt/index.js.map +1 -0
  19. package/build/jwt/jwt.d.ts +204 -0
  20. package/build/jwt/jwt.js +324 -0
  21. package/build/jwt/jwt.js.map +1 -0
  22. package/build/keyBinding/index.d.ts +1 -0
  23. package/build/keyBinding/index.js +18 -0
  24. package/build/keyBinding/index.js.map +1 -0
  25. package/build/keyBinding/keyBinding.d.ts +56 -0
  26. package/build/keyBinding/keyBinding.js +99 -0
  27. package/build/keyBinding/keyBinding.js.map +1 -0
  28. package/build/sdJwt/compact.d.ts +8 -0
  29. package/build/sdJwt/compact.js +39 -0
  30. package/build/sdJwt/compact.js.map +1 -0
  31. package/build/sdJwt/decoys.d.ts +2 -0
  32. package/build/sdJwt/decoys.js +35 -0
  33. package/build/sdJwt/decoys.js.map +1 -0
  34. package/build/sdJwt/disclosureFrame.d.ts +7 -0
  35. package/build/sdJwt/disclosureFrame.js +89 -0
  36. package/build/sdJwt/disclosureFrame.js.map +1 -0
  37. package/build/sdJwt/disclosureMapping.d.ts +44 -0
  38. package/build/sdJwt/disclosureMapping.js +289 -0
  39. package/build/sdJwt/disclosureMapping.js.map +1 -0
  40. package/build/sdJwt/disclosures.d.ts +14 -0
  41. package/build/sdJwt/disclosures.js +59 -0
  42. package/build/sdJwt/disclosures.js.map +1 -0
  43. package/build/sdJwt/error.d.ts +2 -0
  44. package/build/sdJwt/error.js +7 -0
  45. package/build/sdJwt/error.js.map +1 -0
  46. package/build/sdJwt/index.d.ts +7 -0
  47. package/build/sdJwt/index.js +24 -0
  48. package/build/sdJwt/index.js.map +1 -0
  49. package/build/sdJwt/presentationFrame.d.ts +4 -0
  50. package/build/sdJwt/presentationFrame.js +73 -0
  51. package/build/sdJwt/presentationFrame.js.map +1 -0
  52. package/build/sdJwt/sdJwt.d.ts +204 -0
  53. package/build/sdJwt/sdJwt.js +383 -0
  54. package/build/sdJwt/sdJwt.js.map +1 -0
  55. package/build/sdJwt/swapClaim.d.ts +3 -0
  56. package/build/sdJwt/swapClaim.js +90 -0
  57. package/build/sdJwt/swapClaim.js.map +1 -0
  58. package/build/sdJwt/types.d.ts +5 -0
  59. package/build/sdJwt/types.js +3 -0
  60. package/build/sdJwt/types.js.map +1 -0
  61. package/build/sdJwtVc/error.d.ts +2 -0
  62. package/build/sdJwtVc/error.js +7 -0
  63. package/build/sdJwtVc/error.js.map +1 -0
  64. package/build/sdJwtVc/index.d.ts +2 -0
  65. package/build/sdJwtVc/index.js +19 -0
  66. package/build/sdJwtVc/index.js.map +1 -0
  67. package/build/sdJwtVc/sdJwtVc.d.ts +47 -0
  68. package/build/sdJwtVc/sdJwtVc.js +125 -0
  69. package/build/sdJwtVc/sdJwtVc.js.map +1 -0
  70. package/build/signatureAndEncryptionAlgorithm.d.ts +105 -0
  71. package/build/signatureAndEncryptionAlgorithm.js +110 -0
  72. package/build/signatureAndEncryptionAlgorithm.js.map +1 -0
  73. package/build/types/disclosure.d.ts +5 -0
  74. package/build/types/disclosure.js +3 -0
  75. package/build/types/disclosure.js.map +1 -0
  76. package/build/types/frame.d.ts +5 -0
  77. package/build/types/frame.js +3 -0
  78. package/build/types/frame.js.map +1 -0
  79. package/build/types/hasher.d.ts +14 -0
  80. package/build/types/hasher.js +3 -0
  81. package/build/types/hasher.js.map +1 -0
  82. package/build/types/index.d.ts +6 -0
  83. package/build/types/index.js +23 -0
  84. package/build/types/index.js.map +1 -0
  85. package/build/types/present.d.ts +2 -0
  86. package/build/types/present.js +3 -0
  87. package/build/types/present.js.map +1 -0
  88. package/build/types/saltGenerator.d.ts +17 -0
  89. package/build/types/saltGenerator.js +3 -0
  90. package/build/types/saltGenerator.js.map +1 -0
  91. package/build/types/signer.d.ts +2 -0
  92. package/build/types/signer.js +3 -0
  93. package/build/types/signer.js.map +1 -0
  94. package/build/types/utils.d.ts +5 -0
  95. package/build/types/utils.js +3 -0
  96. package/build/types/utils.js.map +1 -0
  97. package/build/types/verifier.d.ts +14 -0
  98. package/build/types/verifier.js +3 -0
  99. package/build/types/verifier.js.map +1 -0
  100. package/build/utils/index.d.ts +2 -0
  101. package/build/utils/index.js +19 -0
  102. package/build/utils/index.js.map +1 -0
  103. package/build/utils/traverse.d.ts +8 -0
  104. package/build/utils/traverse.js +29 -0
  105. package/build/utils/traverse.js.map +1 -0
  106. package/build/utils/utils.d.ts +7 -0
  107. package/build/utils/utils.js +109 -0
  108. package/build/utils/utils.js.map +1 -0
  109. package/package.json +50 -0
@@ -0,0 +1,89 @@
1
+ "use strict";
2
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
+ return new (P || (P = Promise))(function (resolve, reject) {
5
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
9
+ });
10
+ };
11
+ Object.defineProperty(exports, "__esModule", { value: true });
12
+ exports.applyDisclosureFrame = void 0;
13
+ const utils_1 = require("../utils");
14
+ const decoys_1 = require("./decoys");
15
+ const disclosures_1 = require("./disclosures");
16
+ const error_1 = require("./error");
17
+ const applyDisclosureFrame = (saltGenerator, hasher, payload, frame, keys = [], cleanup = [], disclosures = []) => __awaiter(void 0, void 0, void 0, function* () {
18
+ var _a, _b;
19
+ for (const [key, frameValue] of Object.entries(frame)) {
20
+ const newKeys = [...keys, key];
21
+ if (key === '__decoyCount' && typeof frameValue === 'number') {
22
+ const sd = Array.from((_a = payload._sd) !== null && _a !== void 0 ? _a : []);
23
+ const decoys = yield (0, decoys_1.createDecoys)(frameValue, saltGenerator, hasher);
24
+ decoys.forEach((digest) => sd.push(digest));
25
+ // @ts-ignore
26
+ payload._sd = sd.sort();
27
+ }
28
+ else if (typeof frameValue === 'boolean') {
29
+ if (frameValue === true) {
30
+ if (!(key in payload)) {
31
+ throw new error_1.SdJwtError(`key, ${key}, is not inside the payload (${JSON.stringify(payload)}), but it was supplied inside the frame.`);
32
+ }
33
+ const salt = yield saltGenerator();
34
+ const disclosure = new disclosures_1.Disclosure(salt, payload[key], key);
35
+ disclosures.push(disclosure);
36
+ const digest = yield disclosure.digest(hasher);
37
+ const sd = Array.from((_b = payload._sd) !== null && _b !== void 0 ? _b : []);
38
+ sd.push(digest);
39
+ //@ts-ignore
40
+ payload._sd = sd.sort();
41
+ cleanup.push(newKeys);
42
+ }
43
+ }
44
+ else if (typeof frameValue === 'object' &&
45
+ !Array.isArray(frameValue)) {
46
+ yield (0, exports.applyDisclosureFrame)(saltGenerator, hasher, payload[key], frameValue, newKeys, cleanup, disclosures);
47
+ }
48
+ else if (typeof frameValue === 'object' &&
49
+ Array.isArray(frameValue)) {
50
+ const payloadArray = payload[key];
51
+ const frameValueArray = frameValue;
52
+ if (!Array.isArray(payloadArray)) {
53
+ throw new error_1.SdJwtError(`Frame expected array, but received ${typeof payload[key]} for key '${key}'.`);
54
+ }
55
+ if (frameValueArray.length > payloadArray.length) {
56
+ throw new error_1.SdJwtError(`Frame array is longer than the payload array for ${key}`);
57
+ }
58
+ // Fill the frame with `false` if the payloadArray is longer than the frame value array
59
+ if (payloadArray.length > frameValueArray.length) {
60
+ payloadArray.forEach((_, index) => { var _a; return ((_a = frameValueArray[index]) !== null && _a !== void 0 ? _a : (frameValueArray[index] = false)); });
61
+ }
62
+ const newPayloadArray = [];
63
+ for (let i = 0; i < payloadArray.length; i++) {
64
+ const payloadValue = payloadArray[i];
65
+ const frameValue = frameValueArray[i];
66
+ if (frameValue) {
67
+ const salt = yield saltGenerator();
68
+ const disclosure = new disclosures_1.Disclosure(salt, payloadValue);
69
+ disclosures.push(disclosure);
70
+ const digest = yield disclosure.digest(hasher);
71
+ newPayloadArray.push({ '...': digest });
72
+ }
73
+ else {
74
+ newPayloadArray.push(payloadValue);
75
+ }
76
+ }
77
+ // @ts-ignore
78
+ payload[key] = newPayloadArray;
79
+ }
80
+ else {
81
+ throw new error_1.SdJwtError(`Invalid type in frame with key '${key}' and type '${typeof frameValue}'. Only Record<string, unknown>, arrays<boolean> and boolean are allowed.`);
82
+ }
83
+ }
84
+ const payloadClone = Object.assign({}, payload);
85
+ cleanup.forEach((path) => (0, utils_1.deleteByPath)(payloadClone, path));
86
+ return { payload: payloadClone, disclosures };
87
+ });
88
+ exports.applyDisclosureFrame = applyDisclosureFrame;
89
+ //# sourceMappingURL=disclosureFrame.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"disclosureFrame.js","sourceRoot":"","sources":["../../src/sdJwt/disclosureFrame.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,oCAAuC;AACvC,qCAAuC;AACvC,+CAA0C;AAC1C,mCAAoC;AAG7B,MAAM,oBAAoB,GAAG,CAGhC,aAA4B,EAC5B,MAAc,EACd,OAAgB,EAChB,KAA+B,EAC/B,OAAsB,EAAE,EACxB,UAAgC,EAAE,EAClC,cAAiC,EAAE,EAIpC,EAAE;;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAA;QAE9B,IAAI,GAAG,KAAK,cAAc,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,EAAE,GAAkB,KAAK,CAAC,IAAI,CAChC,MAAC,OAAO,CAAC,GAAgB,mCAAI,EAAE,CAClC,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAY,EAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;YACpE,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;YAE3C,aAAa;YACb,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;QAC3B,CAAC;aAAM,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;oBACpB,MAAM,IAAI,kBAAU,CAChB,QAAQ,GAAG,gCAAgC,IAAI,CAAC,SAAS,CACrD,OAAO,CACV,0CAA0C,CAC9C,CAAA;gBACL,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAA;gBAClC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;gBAC1D,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBAE5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC9C,MAAM,EAAE,GAAkB,KAAK,CAAC,IAAI,CAChC,MAAC,OAAO,CAAC,GAAgB,mCAAI,EAAE,CAClC,CAAA;gBACD,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBAEf,YAAY;gBACZ,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;gBAEvB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACzB,CAAC;QACL,CAAC;aAAM,IACH,OAAO,UAAU,KAAK,QAAQ;YAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAC5B,CAAC;YACC,MAAM,IAAA,4BAAoB,EACtB,aAAa,EACb,MAAM,EACN,OAAO,CAAC,GAAG,CAAY,EACvB,UAAsC,EACtC,OAAO,EACP,OAAO,EACP,WAAW,CACd,CAAA;QACL,CAAC;aAAM,IACH,OAAO,UAAU,KAAK,QAAQ;YAC9B,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAC3B,CAAC;YACC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAmB,CAAA;YACnD,MAAM,eAAe,GAAG,UAA4B,CAAA;YAEpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,kBAAU,CAChB,sCAAsC,OAAO,OAAO,CAChD,GAAG,CACN,aAAa,GAAG,IAAI,CACxB,CAAA;YACL,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;gBAC/C,MAAM,IAAI,kBAAU,CAChB,oDAAoD,GAAG,EAAE,CAC5D,CAAA;YACL,CAAC;YAED,uFAAuF;YACvF,IAAI,YAAY,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC;gBAC/C,YAAY,CAAC,OAAO,CAChB,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,WAAC,OAAA,OAAC,eAAe,CAAC,KAAK,qCAArB,eAAe,CAAC,KAAK,IAAM,KAAK,EAAC,CAAA,EAAA,CACnD,CAAA;YACL,CAAC;YAED,MAAM,eAAe,GAAuC,EAAE,CAAA;YAE9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;gBACpC,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;gBAErC,IAAI,UAAU,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAA;oBAClC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;oBACrD,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;oBAE5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBAC9C,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;gBAC3C,CAAC;qBAAM,CAAC;oBACJ,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;gBACtC,CAAC;YACL,CAAC;YAED,aAAa;YACb,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,CAAA;QAClC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,kBAAU,CAChB,mCAAmC,GAAG,eAAe,OAAO,UAAU,2EAA2E,CACpJ,CAAA;QACL,CAAC;IACL,CAAC;IAED,MAAM,YAAY,qBAAQ,OAAO,CAAE,CAAA;IACnC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,oBAAY,EAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;IAE3D,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,CAAA;AACjD,CAAC,CAAA,CAAA;AA5HY,QAAA,oBAAoB,wBA4HhC"}
@@ -0,0 +1,44 @@
1
+ import { Hasher } from '../types';
2
+ import { Disclosure } from './disclosures';
3
+ /**
4
+ * Mapping from a digest to the corresponding disclosure and its parent disclosures.
5
+ */
6
+ export type DisclosureMap = {
7
+ [digest: string]: {
8
+ disclosure: Disclosure;
9
+ parentDisclosures: Disclosure[];
10
+ };
11
+ };
12
+ /**
13
+ * Get a mapping in the structure of the pretty payload, to indicate which digests should be disclosed for a
14
+ * given entry.
15
+ *
16
+ * For example if you call this method with the following payload:
17
+ * ```ts
18
+ * {
19
+ * _sd: ['iss_digest', 'nested_field_digest'],
20
+ * }
21
+ * ```
22
+ *
23
+ * It can return the following mapping:
24
+ * ```ts
25
+ * {
26
+ * iss: 'iss_digest',
27
+ * nested_field: {
28
+ * __digest: 'nested_field_digest',
29
+ * more_nested_field: {
30
+ * // index 1 is null, as it's always in the payload, so doesn't need to be disclosed
31
+ * // separately
32
+ * a: ['a_0_digest', null, 'a_2_digest'],
33
+ * }
34
+ * }
35
+ * }
36
+ * ```
37
+ *
38
+ * This method will recursively call itself and `getArrayPayloadDisclosureMapping` if the value of a property is an object or array.
39
+ */
40
+ export declare function getPayloadDisclosureMapping(payload: any, map: DisclosureMap): any[] | Record<string, unknown> | null;
41
+ /**
42
+ * Get a mapping from a digest to the corresponding disclosure and its parent disclosures.
43
+ */
44
+ export declare const getDisclosureMap: (disclosures: Disclosure[], hasher: Hasher) => Promise<DisclosureMap>;
@@ -0,0 +1,289 @@
1
+ "use strict";
2
+ // This file contains helpers functions for mapping between disclosures entries and the payload of an SD-JWT.
3
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
4
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
5
+ return new (P || (P = Promise))(function (resolve, reject) {
6
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
7
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
8
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
9
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
10
+ });
11
+ };
12
+ Object.defineProperty(exports, "__esModule", { value: true });
13
+ exports.getDisclosureMap = exports.getPayloadDisclosureMapping = void 0;
14
+ const utils_1 = require("../utils");
15
+ const error_1 = require("./error");
16
+ /**
17
+ * Returns an array that includes the digests that should be disclosed for each item in the array.
18
+ *
19
+ * E.g. if the following array is passed:
20
+ * ```ts
21
+ * [ { '...': <SD_HASH_DIGEST_1> }, 'string_value', { '...': <SD_HASH_DIGEST_2> } ]
22
+ * ```
23
+ *
24
+ * The return value will be:
25
+ * ```ts
26
+ * ['<SD_HASH_DIGEST_1>', null, '<SD_HASH_DIGEST_2>']
27
+ * ```
28
+ *
29
+ * The second value will be null, as it's already disclosed, and thus there's no digests that
30
+ * need to be disclosed to reveal it. For the other values, it will include the digest that needs
31
+ * to be disclosed to reveal that array entry.
32
+ *
33
+ * In the case the array entry contains nested disclosures, the value will not be a digest, but rather
34
+ * the structure of the nested disclosures.
35
+ *
36
+ * Let's say the `<SD_HASH_DIGEST_1>` is the digest of the following disclosure:
37
+ * ```ts
38
+ * {
39
+ * // `<SD_HASH_DIGEST_3>` is the digest of the dateOfBirth property
40
+ * _sd: ['<SD_HASH_DIGEST_3>'],
41
+ * name: 'Jane Doe',
42
+ * }
43
+ * ```
44
+ *
45
+ * In this case the return value will be:
46
+ * ```ts
47
+ * [{ __digest: '<SD_HASH_DIGEST_1>', dateOfBirth: '<SD_HASH_DIGEST_3>' }, null, '<SD_HASH_DIGEST_2>']
48
+ * ```
49
+ * The `__digest` property indicates the digest of the encapsulating disclosure, and it being an object
50
+ * indicates that there's nested disclosures that need to be revealed.
51
+ *
52
+ * In the end the result value is an array, and all the string values in the return value are the digests.
53
+ * This allows you to easily build a path of digests to disclose to reveal a certain value.
54
+ *
55
+ * The return value can be endlessly nested, and will also call `getPayloadDisclosureMapping` recursively
56
+ * if the inner values are not arrays, but objects. That method in turn can call this method if the value
57
+ * of an object property is an array.
58
+ */
59
+ function getArrayPayloadDisclosureMapping(array, map) {
60
+ const arrayPayloadDisclosureMapping = [];
61
+ // Loop through all the payload values of the array
62
+ for (const item of array) {
63
+ // If the item is an object, (both array and object are objects)
64
+ // it means there may be some values in here that need to be disclosed to
65
+ // reveal this array entry
66
+ if (item instanceof Object) {
67
+ // if Array item is { '...': <SD_HASH_DIGEST> }
68
+ // It means this item can be disclosed.
69
+ if ('...' in item) {
70
+ const digest = item['...'];
71
+ if (typeof digest !== 'string') {
72
+ throw new error_1.SdJwtError(`Expected value of key '...' to be of type string, but found ${typeof digest}`);
73
+ }
74
+ // Look up disclosure. It's valid that the disclosure is not present (decoy digests)
75
+ const disclosed = map[digest];
76
+ if (disclosed) {
77
+ // value is always the last item in the disclosure array
78
+ const value = [...disclosed.disclosure.decoded].pop();
79
+ // Recursively look if the disclosed value contains any disclosure references
80
+ // of itself. Based on the type we can decide how to handle it.
81
+ if ((0, utils_1.isObject)(value)) {
82
+ // Get nested disclosures for the object value
83
+ const unpacked = getPayloadDisclosureMapping(value, map);
84
+ // If there's any nested disclosures, we need to include both this item's
85
+ // disclosure, as well as the nested disclosures
86
+ if (unpacked && Object.keys(unpacked).length > 0) {
87
+ arrayPayloadDisclosureMapping.push(Object.assign(Object.assign({}, unpacked), { __digest: digest }));
88
+ }
89
+ else {
90
+ arrayPayloadDisclosureMapping.push(digest);
91
+ }
92
+ }
93
+ else if (Array.isArray(value)) {
94
+ // Get nested disclosures for the array value
95
+ const nestedUnpackedArray = getArrayPayloadDisclosureMapping(value, map);
96
+ // If all entries are null, it means there's no nested disclosures
97
+ // And thus we push the digest directly
98
+ if (nestedUnpackedArray.every((item) => item === null)) {
99
+ arrayPayloadDisclosureMapping.push(digest);
100
+ }
101
+ else {
102
+ arrayPayloadDisclosureMapping.push(Object.assign(Object.assign({}, nestedUnpackedArray), {
103
+ // __digest is for encapsulating disclosure
104
+ __digest: digest }));
105
+ }
106
+ }
107
+ // If the value is not an object or a array, it means there's no nested disclosures
108
+ // and thus we can push the digest directly
109
+ else {
110
+ arrayPayloadDisclosureMapping.push(digest);
111
+ }
112
+ }
113
+ else {
114
+ // Value is not a disclosure for an array ('...') so we unpack the object recursively
115
+ const claims = getPayloadDisclosureMapping(item, map);
116
+ if (claims && Object.keys(claims).length > 0) {
117
+ arrayPayloadDisclosureMapping.push(claims);
118
+ }
119
+ else {
120
+ arrayPayloadDisclosureMapping.push(null);
121
+ }
122
+ }
123
+ }
124
+ }
125
+ // If the value is not an Object it means the actual value is disclosed
126
+ // in the array directly (so we don't need to disclose anything to reveal it)
127
+ else {
128
+ arrayPayloadDisclosureMapping.push(null);
129
+ }
130
+ }
131
+ return arrayPayloadDisclosureMapping;
132
+ }
133
+ /**
134
+ * Get a mapping in the structure of the pretty payload, to indicate which digests should be disclosed for a
135
+ * given entry.
136
+ *
137
+ * For example if you call this method with the following payload:
138
+ * ```ts
139
+ * {
140
+ * _sd: ['iss_digest', 'nested_field_digest'],
141
+ * }
142
+ * ```
143
+ *
144
+ * It can return the following mapping:
145
+ * ```ts
146
+ * {
147
+ * iss: 'iss_digest',
148
+ * nested_field: {
149
+ * __digest: 'nested_field_digest',
150
+ * more_nested_field: {
151
+ * // index 1 is null, as it's always in the payload, so doesn't need to be disclosed
152
+ * // separately
153
+ * a: ['a_0_digest', null, 'a_2_digest'],
154
+ * }
155
+ * }
156
+ * }
157
+ * ```
158
+ *
159
+ * This method will recursively call itself and `getArrayPayloadDisclosureMapping` if the value of a property is an object or array.
160
+ */
161
+ function getPayloadDisclosureMapping(payload, map) {
162
+ // Handle array
163
+ if (payload instanceof Array) {
164
+ return getArrayPayloadDisclosureMapping(payload, map);
165
+ }
166
+ // Not an array or object, so it means the top-level value is already disclosed
167
+ if (!(0, utils_1.isObject)(payload)) {
168
+ return null;
169
+ }
170
+ const payloadDisclosureMapping = {};
171
+ for (const key in payload) {
172
+ // if obj property value is an object or array
173
+ // recursively unpack
174
+ if (key !== '_sd' && key !== '...' && payload[key] instanceof Object) {
175
+ const claim = getPayloadDisclosureMapping(payload[key], map);
176
+ if (claim && Object.keys(claim).length > 0) {
177
+ payloadDisclosureMapping[key] = claim;
178
+ }
179
+ }
180
+ }
181
+ // If the payload contains a _sd property, it means there's disclosures
182
+ if (payload._sd) {
183
+ if (!Array.isArray(payload._sd)) {
184
+ throw new error_1.SdJwtError(`Expect value of '_sd' to be of type array, but found ${typeof payload._sd}`);
185
+ }
186
+ // We are going to resolve all digests
187
+ for (const digest of payload._sd) {
188
+ if (typeof digest !== 'string') {
189
+ throw new error_1.SdJwtError(`Expected entries in '_sd' property to be of type string, found ${typeof digest}`);
190
+ }
191
+ // Look up disclosure. It's valid that the disclosure is not present (decoy digests)
192
+ const disclosed = map[digest];
193
+ if (disclosed) {
194
+ // value is always the last item in the disclosure array
195
+ // We know this is an object, so the associated disclosure MUST have length 3
196
+ const value = [...disclosed.disclosure.decoded].pop();
197
+ if (disclosed.disclosure.decoded.length !== 3) {
198
+ throw new error_1.SdJwtError(`Expected disclosure for value ${value} to have 3 items, but found ${disclosed.disclosure.decoded.length}`);
199
+ }
200
+ const key = disclosed.disclosure.decoded[1];
201
+ // This checks if there's a nested disclosure anywhere down the tree
202
+ // So when a disclosure value is an object or array, it can contain disclosures
203
+ // of itself (using `_sd` and `...` keys)
204
+ if ((0, utils_1.isObject)(value)) {
205
+ const unpacked = getPayloadDisclosureMapping(value, map);
206
+ if (unpacked && Object.keys(unpacked).length > 0) {
207
+ payloadDisclosureMapping[key] = Object.assign(Object.assign({}, unpacked), { __digest: digest });
208
+ }
209
+ // If there's no nested disclosures, we add the digest directly
210
+ else {
211
+ payloadDisclosureMapping[key] = digest;
212
+ }
213
+ }
214
+ else if (Array.isArray(value)) {
215
+ // Get nested disclosures for the array value
216
+ const nestedUnpackedArray = getArrayPayloadDisclosureMapping(value, map);
217
+ // If all entries are null, it means there's no nested disclosures
218
+ // And thus we push the digest directly
219
+ if (nestedUnpackedArray.every((item) => item === null)) {
220
+ payloadDisclosureMapping[key] = digest;
221
+ }
222
+ else {
223
+ payloadDisclosureMapping[key] = Object.assign(Object.assign({}, nestedUnpackedArray), {
224
+ // __digest is for encapsulating disclosure
225
+ __digest: digest });
226
+ }
227
+ }
228
+ else {
229
+ payloadDisclosureMapping[key] = digest;
230
+ }
231
+ }
232
+ }
233
+ }
234
+ return payloadDisclosureMapping;
235
+ }
236
+ exports.getPayloadDisclosureMapping = getPayloadDisclosureMapping;
237
+ // @todo it would ben nice if we don't have to pass hasher around everywhere
238
+ // but have a Disclosure type that includes the digest
239
+ const getParentDisclosure = (disclosure, digestMap, hasher) => __awaiter(void 0, void 0, void 0, function* () {
240
+ const parent = digestMap[yield disclosure.digest(hasher)];
241
+ if (!parent) {
242
+ return [];
243
+ }
244
+ if (digestMap[yield parent.digest(hasher)]) {
245
+ return [parent].concat(yield getParentDisclosure(parent, digestMap, hasher));
246
+ }
247
+ return [parent];
248
+ });
249
+ /**
250
+ * Get a mapping from a digest to the corresponding disclosure and its parent disclosures.
251
+ */
252
+ const getDisclosureMap = (disclosures, hasher) => __awaiter(void 0, void 0, void 0, function* () {
253
+ const map = {};
254
+ const parentMap = {};
255
+ for (const disclosure of disclosures) {
256
+ // value is always the last item in the disclosure array
257
+ const value = [...disclosure.decoded].pop();
258
+ (0, utils_1.traverseNodes)(value).forEach(({ path, value }) => {
259
+ const lastPathItem = path[path.length - 1];
260
+ if (lastPathItem === '_sd') {
261
+ if (!Array.isArray(value)) {
262
+ throw new error_1.SdJwtError(`Expect value of '_sd' to be of type array, but found ${typeof value}`);
263
+ }
264
+ value.forEach((digest) => {
265
+ if (typeof digest !== 'string') {
266
+ throw new error_1.SdJwtError(`Expected entries in '_sd' property to be of type string, found ${typeof digest}`);
267
+ }
268
+ parentMap[digest] = disclosure;
269
+ });
270
+ }
271
+ else if (lastPathItem === '...') {
272
+ if (typeof value !== 'string') {
273
+ throw new error_1.SdJwtError(`Expected value of '...' to be of type string, but found ${typeof value}`);
274
+ }
275
+ parentMap[value] = disclosure;
276
+ }
277
+ });
278
+ }
279
+ for (const disclosure of disclosures) {
280
+ const parent = yield getParentDisclosure(disclosure, parentMap, hasher);
281
+ map[yield disclosure.digest(hasher)] = {
282
+ disclosure,
283
+ parentDisclosures: parent
284
+ };
285
+ }
286
+ return map;
287
+ });
288
+ exports.getDisclosureMap = getDisclosureMap;
289
+ //# sourceMappingURL=disclosureMapping.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"disclosureMapping.js","sourceRoot":"","sources":["../../src/sdJwt/disclosureMapping.ts"],"names":[],"mappings":";AAAA,6GAA6G;;;;;;;;;;;;AAG7G,oCAAkD;AAElD,mCAAoC;AAYpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,SAAS,gCAAgC,CACrC,KAAqB,EACrB,GAAkB;IAElB,MAAM,6BAA6B,GAAU,EAAE,CAAA;IAE/C,mDAAmD;IACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,gEAAgE;QAChE,yEAAyE;QACzE,0BAA0B;QAC1B,IAAI,IAAI,YAAY,MAAM,EAAE,CAAC;YACzB,+CAA+C;YAC/C,uCAAuC;YACvC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;gBAC1B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC7B,MAAM,IAAI,kBAAU,CAChB,+DAA+D,OAAO,MAAM,EAAE,CACjF,CAAA;gBACL,CAAC;gBAED,oFAAoF;gBACpF,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC7B,IAAI,SAAS,EAAE,CAAC;oBACZ,wDAAwD;oBACxD,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAA;oBAErD,6EAA6E;oBAC7E,+DAA+D;oBAC/D,IAAI,IAAA,gBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;wBAClB,8CAA8C;wBAC9C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;wBAExD,yEAAyE;wBACzE,gDAAgD;wBAChD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC/C,6BAA6B,CAAC,IAAI,iCAC3B,QAAQ,KACX,QAAQ,EAAE,MAAM,IAClB,CAAA;wBACN,CAAC;6BAAM,CAAC;4BACJ,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;wBAC9C,CAAC;oBACL,CAAC;yBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9B,6CAA6C;wBAC7C,MAAM,mBAAmB,GACrB,gCAAgC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;wBAEhD,kEAAkE;wBAClE,uCAAuC;wBACvC,IACI,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EACpD,CAAC;4BACC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;wBAC9C,CAAC;6BAAM,CAAC;4BACJ,6BAA6B,CAAC,IAAI,iCAK3B,mBAAmB;gCACtB,2CAA2C;gCAC3C,QAAQ,EAAE,MAAM,IAClB,CAAA;wBACN,CAAC;oBACL,CAAC;oBACD,mFAAmF;oBACnF,2CAA2C;yBACtC,CAAC;wBACF,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;oBAC9C,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,qFAAqF;oBACrF,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;oBACrD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC3C,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;oBAC9C,CAAC;yBAAM,CAAC;wBACJ,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAC5C,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QACD,uEAAuE;QACvE,6EAA6E;aACxE,CAAC;YACF,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,CAAC;IACL,CAAC;IAED,OAAO,6BAA6B,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,2BAA2B,CAAC,OAAY,EAAE,GAAkB;IACxE,eAAe;IACf,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,gCAAgC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACzD,CAAC;IAED,+EAA+E;IAC/E,IAAI,CAAC,IAAA,gBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,MAAM,wBAAwB,GAA4B,EAAE,CAAA;IAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QACxB,8CAA8C;QAC9C,qBAAqB;QACrB,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,2BAA2B,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;YAC5D,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,wBAAwB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACzC,CAAC;QACL,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,kBAAU,CAChB,wDAAwD,OAAO,OAAO,CAAC,GAAG,EAAE,CAC/E,CAAA;QACL,CAAC;QAED,sCAAsC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,kBAAU,CAChB,kEAAkE,OAAO,MAAM,EAAE,CACpF,CAAA;YACL,CAAC;YAED,oFAAoF;YACpF,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;YAC7B,IAAI,SAAS,EAAE,CAAC;gBACZ,wDAAwD;gBACxD,6EAA6E;gBAC7E,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAA;gBACrD,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,kBAAU,CAChB,iCAAiC,KAAK,+BAA+B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAC7G,CAAA;gBACL,CAAC;gBACD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;gBAE3C,oEAAoE;gBACpE,+EAA+E;gBAC/E,yCAAyC;gBACzC,IAAI,IAAA,gBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;oBAClB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;oBACxD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC/C,wBAAwB,CAAC,GAAG,CAAC,mCACtB,QAAQ,KACX,QAAQ,EAAE,MAAM,GACnB,CAAA;oBACL,CAAC;oBACD,+DAA+D;yBAC1D,CAAC;wBACF,wBAAwB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;oBAC1C,CAAC;gBACL,CAAC;qBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,6CAA6C;oBAC7C,MAAM,mBAAmB,GACrB,gCAAgC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;oBAEhD,kEAAkE;oBAClE,uCAAuC;oBACvC,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;wBACrD,wBAAwB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;oBAC1C,CAAC;yBAAM,CAAC;wBACJ,wBAAwB,CAAC,GAAG,CAAC,mCAKtB,mBAAmB;4BACtB,2CAA2C;4BAC3C,QAAQ,EAAE,MAAM,GACnB,CAAA;oBACL,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,wBAAwB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;gBAC1C,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,wBAAwB,CAAA;AACnC,CAAC;AA/FD,kEA+FC;AAED,4EAA4E;AAC5E,sDAAsD;AACtD,MAAM,mBAAmB,GAAG,CACxB,UAAsB,EACtB,SAAqC,EACrC,MAAc,EACO,EAAE;IACvB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAEzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,EAAE,CAAA;IACb,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAClB,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CACvD,CAAA;IACL,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,CAAA;AACnB,CAAC,CAAA,CAAA;AAED;;GAEG;AACI,MAAM,gBAAgB,GAAG,CAC5B,WAAyB,EACzB,MAAc,EACQ,EAAE;IACxB,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,SAAS,GAA+B,EAAE,CAAA;IAEhD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,wDAAwD;QACxD,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAA;QAE3C,IAAA,qBAAa,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;YAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAE1C,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,kBAAU,CAChB,wDAAwD,OAAO,KAAK,EAAE,CACzE,CAAA;gBACL,CAAC;gBAED,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;oBACrB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAC7B,MAAM,IAAI,kBAAU,CAChB,kEAAkE,OAAO,MAAM,EAAE,CACpF,CAAA;oBACL,CAAC;oBACD,SAAS,CAAC,MAAM,CAAC,GAAG,UAAU,CAAA;gBAClC,CAAC,CAAC,CAAA;YACN,CAAC;iBAAM,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;gBAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,MAAM,IAAI,kBAAU,CAChB,2DAA2D,OAAO,KAAK,EAAE,CAC5E,CAAA;gBACL,CAAC;gBACD,SAAS,CAAC,KAAK,CAAC,GAAG,UAAU,CAAA;YACjC,CAAC;QACL,CAAC,CAAC,CAAA;IACN,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAEvE,GAAG,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG;YACnC,UAAU;YACV,iBAAiB,EAAE,MAAM;SAC5B,CAAA;IACL,CAAC;IAED,OAAO,GAAG,CAAA;AACd,CAAC,CAAA,CAAA;AAlDY,QAAA,gBAAgB,oBAkD5B"}
@@ -0,0 +1,14 @@
1
+ import { DisclosureItem, Hasher } from '../types';
2
+ export declare class Disclosure {
3
+ private salt;
4
+ private key?;
5
+ private value;
6
+ private _digest;
7
+ constructor(salt: string, value: unknown, key?: string);
8
+ static fromString(s: string): Disclosure;
9
+ static fromArray(item: DisclosureItem): Disclosure;
10
+ get encoded(): string;
11
+ get decoded(): DisclosureItem;
12
+ digest(hasher: Hasher): Promise<string>;
13
+ toString(): string;
14
+ }
@@ -0,0 +1,59 @@
1
+ "use strict";
2
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
+ return new (P || (P = Promise))(function (resolve, reject) {
5
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
9
+ });
10
+ };
11
+ Object.defineProperty(exports, "__esModule", { value: true });
12
+ exports.Disclosure = void 0;
13
+ const base64url_1 = require("../base64url");
14
+ const error_1 = require("./error");
15
+ class Disclosure {
16
+ constructor(salt, value, key) {
17
+ if (typeof value === 'number' && isNaN(value)) {
18
+ throw new error_1.SdJwtError('NaN is not allowed to be used in a disclosure.');
19
+ }
20
+ if (typeof value === 'number' && !isFinite(value)) {
21
+ throw new error_1.SdJwtError('Infinite is not allowed to be used in a disclosure.');
22
+ }
23
+ this.salt = salt;
24
+ this.key = key;
25
+ this.value = value;
26
+ }
27
+ static fromString(s) {
28
+ const item = base64url_1.Base64url.decodeToJson(s);
29
+ return Disclosure.fromArray(item);
30
+ }
31
+ static fromArray(item) {
32
+ return item[2] === undefined
33
+ ? new Disclosure(item[0], item[1])
34
+ : new Disclosure(item[0], item[2], item[1]);
35
+ }
36
+ get encoded() {
37
+ return base64url_1.Base64url.encodeFromJson(this.decoded);
38
+ }
39
+ get decoded() {
40
+ return this.key
41
+ ? [this.salt, this.key, this.value]
42
+ : [this.salt, this.value];
43
+ }
44
+ digest(hasher) {
45
+ return __awaiter(this, void 0, void 0, function* () {
46
+ // Memoize value so we don't have to re-compute
47
+ if (!this._digest) {
48
+ const hash = yield hasher(this.encoded);
49
+ this._digest = base64url_1.Base64url.encode(hash);
50
+ }
51
+ return this._digest;
52
+ });
53
+ }
54
+ toString() {
55
+ return this.encoded;
56
+ }
57
+ }
58
+ exports.Disclosure = Disclosure;
59
+ //# sourceMappingURL=disclosures.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"disclosures.js","sourceRoot":"","sources":["../../src/sdJwt/disclosures.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,4CAAwC;AACxC,mCAAoC;AAEpC,MAAa,UAAU;IAMnB,YAAmB,IAAY,EAAE,KAAc,EAAE,GAAY;QACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,kBAAU,CAChB,gDAAgD,CACnD,CAAA;QACL,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,kBAAU,CAChB,qDAAqD,CACxD,CAAA;QACL,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACtB,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,CAAS;QAC9B,MAAM,IAAI,GAAG,qBAAS,CAAC,YAAY,CAAiB,CAAC,CAAC,CAAA;QAEtD,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAEM,MAAM,CAAC,SAAS,CAAC,IAAoB;QACxC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YACxB,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAW,CAAC,CAAA;IAC7D,CAAC;IAED,IAAW,OAAO;QACd,OAAO,qBAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjD,CAAC;IAED,IAAW,OAAO;QACd,OAAO,IAAI,CAAC,GAAG;YACX,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;YACnC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACjC,CAAC;IAEY,MAAM,CAAC,MAAc;;YAC9B,+CAA+C;YAC/C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACvC,IAAI,CAAC,OAAO,GAAG,qBAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACzC,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CAAA;QACvB,CAAC;KAAA;IAEM,QAAQ;QACX,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;CACJ;AA3DD,gCA2DC"}
@@ -0,0 +1,2 @@
1
+ export declare class SdJwtError extends Error {
2
+ }
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.SdJwtError = void 0;
4
+ class SdJwtError extends Error {
5
+ }
6
+ exports.SdJwtError = SdJwtError;
7
+ //# sourceMappingURL=error.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/sdJwt/error.ts"],"names":[],"mappings":";;;AAAA,MAAa,UAAW,SAAQ,KAAK;CAAG;AAAxC,gCAAwC"}
@@ -0,0 +1,7 @@
1
+ export * from './error';
2
+ export * from './sdJwt';
3
+ export * from './disclosures';
4
+ export * from './decoys';
5
+ export * from './disclosureFrame';
6
+ export * from './compact';
7
+ export * from './types';
@@ -0,0 +1,24 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./error"), exports);
18
+ __exportStar(require("./sdJwt"), exports);
19
+ __exportStar(require("./disclosures"), exports);
20
+ __exportStar(require("./decoys"), exports);
21
+ __exportStar(require("./disclosureFrame"), exports);
22
+ __exportStar(require("./compact"), exports);
23
+ __exportStar(require("./types"), exports);
24
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sdJwt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAuB;AACvB,0CAAuB;AACvB,gDAA6B;AAC7B,2CAAwB;AACxB,oDAAiC;AACjC,4CAAyB;AACzB,0CAAuB"}
@@ -0,0 +1,4 @@
1
+ import { Disclosure } from './disclosures';
2
+ import { Hasher } from '../types';
3
+ import { PresentationFrame } from '../types/present';
4
+ export declare const getDisclosuresForPresentationFrame: <Payload extends Record<string, unknown> = Record<string, unknown>>(signedPayload: Payload, presentationFrame: PresentationFrame<Payload>, prettyClaims: Payload, hasher: Hasher, disclosures?: Array<Disclosure>) => Promise<Array<Disclosure>>;