@sd-jwt/core 0.2.1-alpha.0 → 0.2.1

package/build/base64url.d.ts

@@ -0,0 +1,28 @@
+/// <reference types="node" />
+import { Buffer } from 'buffer';
+export declare class Base64url {
+    /**
+     *
+     * Encode into base64url string
+     *
+     */
+    static encode(input: string | Uint8Array | Buffer): string;
+    /**
+     *
+     * Encode from JSON into a base64url string
+     *
+     */
+    static encodeFromJson(input: Record<string, unknown> | Array<unknown>): string;
+    /**
+     *
+     * Decode from base64url into JSON
+     *
+     */
+    static decodeToJson<T extends Record<string, unknown> | Array<unknown> = Record<string, unknown>>(input: string): T;
+    /**
+     *
+     * Decode from base64url into a byte array
+     *
+     */
+    static decode(input: string): Uint8Array;
+}

package/build/base64url.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Base64url = void 0;
+const buffer_1 = require("buffer");
+class Base64url {
+    /**
+     *
+     * Encode into base64url string
+     *
+     */
+    static encode(input) {
+        return buffer_1.Buffer.from(input).toString('base64url');
+    }
+    /**
+     *
+     * Encode from JSON into a base64url string
+     *
+     */
+    static encodeFromJson(input) {
+        return buffer_1.Buffer.from(JSON.stringify(input)).toString('base64url');
+    }
+    /**
+     *
+     * Decode from base64url into JSON
+     *
+     */
+    static decodeToJson(input) {
+        return JSON.parse(buffer_1.Buffer.from(input, 'base64url').toString());
+    }
+    /**
+     *
+     * Decode from base64url into a byte array
+     *
+     */
+    static decode(input) {
+        return Uint8Array.from(buffer_1.Buffer.from(input, 'base64url'));
+    }
+}
+exports.Base64url = Base64url;
+//# sourceMappingURL=base64url.js.map

package/build/base64url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64url.js","sourceRoot":"","sources":["../src/base64url.ts"],"names":[],"mappings":";;;AAAA,mCAA+B;AAE/B,MAAa,SAAS;IAClB;;;;OAIG;IACI,MAAM,CAAC,MAAM,CAAC,KAAmC;QACpD,OAAO,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACnD,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,cAAc,CACxB,KAA+C;QAE/C,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACnE,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,YAAY,CAKxB,KAAa;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAM,CAAA;IACtE,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,MAAM,CAAC,KAAa;QAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;IAC3D,CAAC;CACJ;AA3CD,8BA2CC"}

package/build/hasherAlgorithm.d.ts

@@ -0,0 +1,70 @@
+export declare enum HasherAlgorithm {
+    /**
+     * Sha-256: 256 bits. [RFC6920] (current)
+     */
+    Sha256 = "sha-256",
+    /**
+     * Sha-256-128: 128 bits. [RFC6920] (current)
+     */
+    Sha256_128 = "sha-256-128",
+    /**
+     * Sha-256-120: 120 bits. [RFC6920] (current)
+     */
+    Sha256_120 = "sha-256-120",
+    /**
+     * Sha-256-96: 96 bits. [RFC6920] (current)
+     */
+    Sha256_96 = "sha-256-96",
+    /**
+     * Sha-256-64: 64 bits. [RFC6920] (current)
+     */
+    Sha256_64 = "sha-256-64",
+    /**
+     * Sha-256-32: 32 bits. [RFC6920] (current)
+     */
+    Sha256_32 = "sha-256-32",
+    /**
+     * Sha-384: 384 bits. [FIPS 180-4] (current)
+     */
+    Sha384 = "sha-384",
+    /**
+     * Sha-512: 512 bits. [FIPS 180-4] (current)
+     */
+    Sha512 = "sha-512",
+    /**
+     * Sha3-224: 224 bits. [FIPS 202] (current)
+     */
+    Sha3_224 = "sha3-224",
+    /**
+     * Sha3-256: 256 bits. [FIPS 202] (current)
+     */
+    Sha3_256 = "sha3-256",
+    /**
+     * Sha3-384: 384 bits. [FIPS 202] (current)
+     */
+    Sha3_384 = "sha3-384",
+    /**
+     * Sha3-512: 512 bits. [FIPS 202] (current)
+     */
+    Sha3_512 = "sha3-512",
+    /**
+     * Blake2s-256: 256 bits. [RFC7693] (current)
+     */
+    Blake2s_256 = "blake2s-256",
+    /**
+     * Blake2b-256: 256 bits. [RFC7693] (current)
+     */
+    Blake2b_256 = "blake2b-256",
+    /**
+     * Blake2b-512: 512 bits. [RFC7693] (current)
+     */
+    Blake2b_512 = "blake2b-512",
+    /**
+     * K12-256: 256 bits. [draft-irtf-cfrg-kangarootwelve-06] (current)
+     */
+    K12_256 = "k12-256",
+    /**
+     * K12-512: 512 bits. [draft-irtf-cfrg-kangarootwelve-06] (current)
+     */
+    K12_512 = "k12-512"
+}

package/build/hasherAlgorithm.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HasherAlgorithm = void 0;
+var HasherAlgorithm;
+(function (HasherAlgorithm) {
+    /**
+     * Sha-256: 256 bits. [RFC6920] (current)
+     */
+    HasherAlgorithm["Sha256"] = "sha-256";
+    /**
+     * Sha-256-128: 128 bits. [RFC6920] (current)
+     */
+    HasherAlgorithm["Sha256_128"] = "sha-256-128";
+    /**
+     * Sha-256-120: 120 bits. [RFC6920] (current)
+     */
+    HasherAlgorithm["Sha256_120"] = "sha-256-120";
+    /**
+     * Sha-256-96: 96 bits. [RFC6920] (current)
+     */
+    HasherAlgorithm["Sha256_96"] = "sha-256-96";
+    /**
+     * Sha-256-64: 64 bits. [RFC6920] (current)
+     */
+    HasherAlgorithm["Sha256_64"] = "sha-256-64";
+    /**
+     * Sha-256-32: 32 bits. [RFC6920] (current)
+     */
+    HasherAlgorithm["Sha256_32"] = "sha-256-32";
+    /**
+     * Sha-384: 384 bits. [FIPS 180-4] (current)
+     */
+    HasherAlgorithm["Sha384"] = "sha-384";
+    /**
+     * Sha-512: 512 bits. [FIPS 180-4] (current)
+     */
+    HasherAlgorithm["Sha512"] = "sha-512";
+    /**
+     * Sha3-224: 224 bits. [FIPS 202] (current)
+     */
+    HasherAlgorithm["Sha3_224"] = "sha3-224";
+    /**
+     * Sha3-256: 256 bits. [FIPS 202] (current)
+     */
+    HasherAlgorithm["Sha3_256"] = "sha3-256";
+    /**
+     * Sha3-384: 384 bits. [FIPS 202] (current)
+     */
+    HasherAlgorithm["Sha3_384"] = "sha3-384";
+    /**
+     * Sha3-512: 512 bits. [FIPS 202] (current)
+     */
+    HasherAlgorithm["Sha3_512"] = "sha3-512";
+    /**
+     * Blake2s-256: 256 bits. [RFC7693] (current)
+     */
+    HasherAlgorithm["Blake2s_256"] = "blake2s-256";
+    /**
+     * Blake2b-256: 256 bits. [RFC7693] (current)
+     */
+    HasherAlgorithm["Blake2b_256"] = "blake2b-256";
+    /**
+     * Blake2b-512: 512 bits. [RFC7693] (current)
+     */
+    HasherAlgorithm["Blake2b_512"] = "blake2b-512";
+    /**
+     * K12-256: 256 bits. [draft-irtf-cfrg-kangarootwelve-06] (current)
+     */
+    HasherAlgorithm["K12_256"] = "k12-256";
+    /**
+     * K12-512: 512 bits. [draft-irtf-cfrg-kangarootwelve-06] (current)
+     */
+    HasherAlgorithm["K12_512"] = "k12-512";
+})(HasherAlgorithm || (exports.HasherAlgorithm = HasherAlgorithm = {}));
+//# sourceMappingURL=hasherAlgorithm.js.map

package/build/hasherAlgorithm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hasherAlgorithm.js","sourceRoot":"","sources":["../src/hasherAlgorithm.ts"],"names":[],"mappings":";;;AAAA,IAAY,eAqEX;AArED,WAAY,eAAe;IACvB;;OAEG;IACH,qCAAkB,CAAA;IAClB;;OAEG;IACH,6CAA0B,CAAA;IAC1B;;OAEG;IACH,6CAA0B,CAAA;IAC1B;;OAEG;IACH,2CAAwB,CAAA;IACxB;;OAEG;IACH,2CAAwB,CAAA;IACxB;;OAEG;IACH,2CAAwB,CAAA;IACxB;;OAEG;IACH,qCAAkB,CAAA;IAClB;;OAEG;IACH,qCAAkB,CAAA;IAClB;;OAEG;IACH,wCAAqB,CAAA;IACrB;;OAEG;IACH,wCAAqB,CAAA;IACrB;;OAEG;IACH,wCAAqB,CAAA;IACrB;;OAEG;IACH,wCAAqB,CAAA;IACrB;;OAEG;IACH,8CAA2B,CAAA;IAC3B;;OAEG;IACH,8CAA2B,CAAA;IAC3B;;OAEG;IACH,8CAA2B,CAAA;IAC3B;;OAEG;IACH,sCAAmB,CAAA;IACnB;;OAEG;IACH,sCAAmB,CAAA;AACvB,CAAC,EArEW,eAAe,+BAAf,eAAe,QAqE1B"}

package/build/jwt/compact.d.ts

@@ -0,0 +1,6 @@
+export type ExpandedJwt<H extends Record<string, unknown> = Record<string, unknown>, P extends Record<string, unknown> = Record<string, unknown>> = {
+    header: H;
+    payload: P;
+    signature: Uint8Array;
+};
+export declare const jwtFromCompact: <H extends Record<string, unknown> = Record<string, unknown>, P extends Record<string, unknown> = Record<string, unknown>>(compact: string) => ExpandedJwt<H, P>;

package/build/jwt/compact.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jwtFromCompact = void 0;
+const base64url_1 = require("../base64url");
+const error_1 = require("./error");
+const jwtFromCompact = (compact) => {
+    if (compact.includes('~')) {
+        throw new error_1.JwtError('compact JWT includes `~` which is only allowed in an sd-jwt. Please use sdJwtFromCompact() instead.');
+    }
+    if ((compact.match(/\./g) || []).length !== 2) {
+        throw new error_1.JwtError('compact JWT must include two periods (.)');
+    }
+    const [compactHeader, compactPayload, encodedSignature] = compact.split('.');
+    if (!encodedSignature || encodedSignature.length === 0) {
+        throw new error_1.JwtError('A signature must be provided within the context of sd-jwt');
+    }
+    const header = base64url_1.Base64url.decodeToJson(compactHeader);
+    const payload = base64url_1.Base64url.decodeToJson(compactPayload);
+    const signature = base64url_1.Base64url.decode(encodedSignature);
+    return {
+        header,
+        payload,
+        signature
+    };
+};
+exports.jwtFromCompact = jwtFromCompact;
+//# sourceMappingURL=compact.js.map

package/build/jwt/compact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compact.js","sourceRoot":"","sources":["../../src/jwt/compact.ts"],"names":[],"mappings":";;;AAAA,4CAAwC;AACxC,mCAAkC;AAW3B,MAAM,cAAc,GAAG,CAI1B,OAAe,EACE,EAAE;IACnB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,gBAAQ,CACd,qGAAqG,CACxG,CAAA;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,gBAAQ,CAAC,0CAA0C,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE5E,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,gBAAQ,CACd,2DAA2D,CAC9D,CAAA;IACL,CAAC;IAED,MAAM,MAAM,GAAG,qBAAS,CAAC,YAAY,CAAI,aAAa,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,qBAAS,CAAC,YAAY,CAAI,cAAc,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,qBAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAEpD,OAAO;QACH,MAAM;QACN,OAAO;QACP,SAAS;KACZ,CAAA;AACL,CAAC,CAAA;AAjCY,QAAA,cAAc,kBAiC1B"}

package/build/sdJwt/compact.d.ts

@@ -0,0 +1,8 @@
+import { KeyBinding } from '../keyBinding';
+import { Disclosure } from './disclosures';
+import { ExpandedJwt } from '../jwt';
+export type ExpandedSdJwt<H extends Record<string, unknown> = Record<string, unknown>, P extends Record<string, unknown> = Record<string, unknown>> = ExpandedJwt<H, P> & {
+    disclosures?: Array<Disclosure>;
+    keyBinding?: KeyBinding;
+};
+export declare const sdJwtFromCompact: <H extends Record<string, unknown> = Record<string, unknown>, P extends Record<string, unknown> = Record<string, unknown>>(compact: string) => any;

package/build/sdJwt/compact.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sdJwtFromCompact = void 0;
+const keyBinding_1 = require("../keyBinding");
+const disclosures_1 = require("./disclosures");
+const jwt_1 = require("../jwt");
+const sdJwtFromCompact = (compact) => {
+    const [jwtWithoutDisclosures, ...encodedDisclosures] = compact.split('~');
+    const { header, payload, signature } = (0, jwt_1.jwtFromCompact)(jwtWithoutDisclosures);
+    if (encodedDisclosures.length === 0) {
+        return {
+            header,
+            payload,
+            signature
+        };
+    }
+    const hasKeyBinding = !compact.endsWith('~');
+    // If the disclosure array ends with an `~` we do not have
+    // a key binding and `String.split` takes it as an empty string
+    // as element which we would not like to include in the disclosures.
+    if (!hasKeyBinding)
+        encodedDisclosures.pop();
+    const compactKeyBinding = hasKeyBinding
+        ? encodedDisclosures.pop()
+        : undefined;
+    const keyBinding = compactKeyBinding
+        ? keyBinding_1.KeyBinding.fromCompact(compactKeyBinding)
+        : undefined;
+    const disclosures = encodedDisclosures.map(disclosures_1.Disclosure.fromString);
+    return {
+        header,
+        payload,
+        signature,
+        keyBinding,
+        disclosures
+    };
+};
+exports.sdJwtFromCompact = sdJwtFromCompact;
+//# sourceMappingURL=compact.js.map

package/build/sdJwt/compact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compact.js","sourceRoot":"","sources":["../../src/sdJwt/compact.ts"],"names":[],"mappings":";;;AAAA,8CAA0C;AAC1C,+CAA0C;AAC1C,gCAAoD;AAU7C,MAAM,gBAAgB,GAAG,CAI5B,OAAe,EACI,EAAE;IACrB,MAAM,CAAC,qBAAqB,EAAE,GAAG,kBAAkB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEzE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAA,oBAAc,EACjD,qBAAqB,CACxB,CAAA;IAED,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO;YACH,MAAM;YACN,OAAO;YACP,SAAS;SACZ,CAAA;IACL,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IAE5C,0DAA0D;IAC1D,+DAA+D;IAC/D,oEAAoE;IACpE,IAAI,CAAC,aAAa;QAAE,kBAAkB,CAAC,GAAG,EAAE,CAAA;IAE5C,MAAM,iBAAiB,GAAG,aAAa;QACnC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;QAC1B,CAAC,CAAC,SAAS,CAAA;IAEf,MAAM,UAAU,GAAG,iBAAiB;QAChC,CAAC,CAAC,uBAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAA;IAEf,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,wBAAU,CAAC,UAAU,CAAC,CAAA;IAEjE,OAAO;QACH,MAAM;QACN,OAAO;QACP,SAAS;QACT,UAAU;QACV,WAAW;KACd,CAAA;AACL,CAAC,CAAA;AA5CY,QAAA,gBAAgB,oBA4C5B"}

package/build/sdJwt/disclosureMapping.d.ts

@@ -0,0 +1,43 @@
+import { DisclosureWithDigest } from './disclosures';
+/**
+ * Mapping from a digest to the corresponding disclosure and its parent disclosures.
+ */
+export type DisclosureMap = {
+    [digest: string]: {
+        disclosure: DisclosureWithDigest;
+        parentDisclosures: DisclosureWithDigest[];
+    };
+};
+/**
+ * Get a mapping in the structure of the pretty payload, to indicate which digests should be disclosed for a
+ * given entry.
+ *
+ * For example if you call this method with the following payload:
+ * ```ts
+ * {
+ *  _sd: ['iss_digest', 'nested_field_digest'],
+ * }
+ * ```
+ *
+ * It can return the following mapping:
+ * ```ts
+ * {
+ *  iss: 'iss_digest',
+ *  nested_field: {
+ *    __digest: 'nested_field_digest',
+ *    more_nested_field: {
+ *      // index 1 is null, as it's always in the payload, so doesn't need to be disclosed
+ *      // separately
+ *      a: ['a_0_digest', null, 'a_2_digest'],
+ *    }
+ *  }
+ * }
+ * ```
+ *
+ * This method will recursively call itself and `getArrayPayloadDisclosureMapping` if the value of a property is an object or array.
+ */
+export declare function getPayloadDisclosureMapping(payload: any, map: DisclosureMap): any[] | Record<string, unknown> | null;
+/**
+ * Get a mapping from a digest to the corresponding disclosure and its parent disclosures.
+ */
+export declare const getDisclosureMap: (disclosures: DisclosureWithDigest[]) => DisclosureMap;

package/build/sdJwt/disclosureMapping.js

@@ -0,0 +1,278 @@
+"use strict";
+// This file contains helpers functions for mapping between disclosures entries and the payload of an SD-JWT.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDisclosureMap = exports.getPayloadDisclosureMapping = void 0;
+const utils_1 = require("../utils");
+const error_1 = require("./error");
+/**
+ * Returns an array that includes the digests that should be disclosed for each item in the array.
+ *
+ * E.g. if the following array is passed:
+ * ```ts
+ * [ { '...': <SD_HASH_DIGEST_1> }, 'string_value', { '...': <SD_HASH_DIGEST_2> } ]
+ * ```
+ *
+ * The return value will be:
+ * ```ts
+ * ['<SD_HASH_DIGEST_1>', null, '<SD_HASH_DIGEST_2>']
+ * ```
+ *
+ * The second value will be null, as it's already disclosed, and thus there's no digests that
+ * need to be disclosed to reveal it. For the other values, it will include the digest that needs
+ * to be disclosed to reveal that array entry.
+ *
+ * In the case the array entry contains nested disclosures, the value will not be a digest, but rather
+ * the structure of the nested disclosures.
+ *
+ * Let's say the `<SD_HASH_DIGEST_1>` is the digest of the following disclosure:
+ * ```ts
+ * {
+ *   // `<SD_HASH_DIGEST_3>` is the digest of the dateOfBirth property
+ *   _sd: ['<SD_HASH_DIGEST_3>'],
+ *   name: 'Jane Doe',
+ * }
+ * ```
+ *
+ * In this case the return value will be:
+ * ```ts
+ * [{ __digest: '<SD_HASH_DIGEST_1>', dateOfBirth: '<SD_HASH_DIGEST_3>' }, null, '<SD_HASH_DIGEST_2>']
+ * ```
+ * The `__digest` property indicates the digest of the encapsulating disclosure, and it being an object
+ * indicates that there's nested disclosures that need to be revealed.
+ *
+ * In the end the result value is an array, and all the string values in the return value are the digests.
+ * This allows you to easily build a path of digests to disclose to reveal a certain value.
+ *
+ * The return value can be endlessly nested, and will also call `getPayloadDisclosureMapping` recursively
+ * if the inner values are not arrays, but objects. That method in turn can call this method if the value
+ * of an object property is an array.
+ */
+function getArrayPayloadDisclosureMapping(array, map) {
+    const arrayPayloadDisclosureMapping = [];
+    // Loop through all the payload values of the array
+    for (const item of array) {
+        // If the item is an object, (both array and object are objects)
+        // it means there may be some values in here that need to be disclosed to
+        // reveal this array entry
+        if (item instanceof Object) {
+            // if Array item is { '...': <SD_HASH_DIGEST> }
+            // It means this item can be disclosed.
+            if ('...' in item) {
+                const digest = item['...'];
+                if (typeof digest !== 'string') {
+                    throw new error_1.SdJwtError(`Expected value of key '...' to be of type string, but found ${typeof digest}`);
+                }
+                // Look up disclosure. It's valid that the disclosure is not present (decoy digests)
+                const disclosed = map[digest];
+                if (disclosed) {
+                    // value is always the last item in the disclosure array
+                    const value = [...disclosed.disclosure.decoded].pop();
+                    // Recursively look if the disclosed value contains any disclosure references
+                    // of itself. Based on the type we can decide how to handle it.
+                    if ((0, utils_1.isObject)(value)) {
+                        // Get nested disclosures for the object value
+                        const unpacked = getPayloadDisclosureMapping(value, map);
+                        // If there's any nested disclosures, we need to include both this item's
+                        // disclosure, as well as the nested disclosures
+                        if (unpacked && Object.keys(unpacked).length > 0) {
+                            arrayPayloadDisclosureMapping.push(Object.assign(Object.assign({}, unpacked), { __digest: digest }));
+                        }
+                        else {
+                            arrayPayloadDisclosureMapping.push(digest);
+                        }
+                    }
+                    else if (Array.isArray(value)) {
+                        // Get nested disclosures for the array value
+                        const nestedUnpackedArray = getArrayPayloadDisclosureMapping(value, map);
+                        // If all entries are null, it means there's no nested disclosures
+                        // And thus we push the digest directly
+                        if (nestedUnpackedArray.every((item) => item === null)) {
+                            arrayPayloadDisclosureMapping.push(digest);
+                        }
+                        else {
+                            arrayPayloadDisclosureMapping.push(Object.assign(Object.assign({}, nestedUnpackedArray), { 
+                                // __digest is for encapsulating disclosure
+                                __digest: digest }));
+                        }
+                    }
+                    // If the value is not an object or a array, it means there's no nested disclosures
+                    // and thus we can push the digest directly
+                    else {
+                        arrayPayloadDisclosureMapping.push(digest);
+                    }
+                }
+                else {
+                    // Value is not a disclosure for an array ('...') so we unpack the object recursively
+                    const claims = getPayloadDisclosureMapping(item, map);
+                    if (claims && Object.keys(claims).length > 0) {
+                        arrayPayloadDisclosureMapping.push(claims);
+                    }
+                    else {
+                        arrayPayloadDisclosureMapping.push(null);
+                    }
+                }
+            }
+        }
+        // If the value is not an Object it means the actual value is disclosed
+        // in the array directly (so we don't need to disclose anything to reveal it)
+        else {
+            arrayPayloadDisclosureMapping.push(null);
+        }
+    }
+    return arrayPayloadDisclosureMapping;
+}
+/**
+ * Get a mapping in the structure of the pretty payload, to indicate which digests should be disclosed for a
+ * given entry.
+ *
+ * For example if you call this method with the following payload:
+ * ```ts
+ * {
+ *  _sd: ['iss_digest', 'nested_field_digest'],
+ * }
+ * ```
+ *
+ * It can return the following mapping:
+ * ```ts
+ * {
+ *  iss: 'iss_digest',
+ *  nested_field: {
+ *    __digest: 'nested_field_digest',
+ *    more_nested_field: {
+ *      // index 1 is null, as it's always in the payload, so doesn't need to be disclosed
+ *      // separately
+ *      a: ['a_0_digest', null, 'a_2_digest'],
+ *    }
+ *  }
+ * }
+ * ```
+ *
+ * This method will recursively call itself and `getArrayPayloadDisclosureMapping` if the value of a property is an object or array.
+ */
+function getPayloadDisclosureMapping(payload, map) {
+    // Handle array
+    if (payload instanceof Array) {
+        return getArrayPayloadDisclosureMapping(payload, map);
+    }
+    // Not an array or object, so it means the top-level value is already disclosed
+    if (!(0, utils_1.isObject)(payload)) {
+        return null;
+    }
+    const payloadDisclosureMapping = {};
+    for (const key in payload) {
+        // if obj property value is an object or array
+        // recursively unpack
+        if (key !== '_sd' && key !== '...' && payload[key] instanceof Object) {
+            const claim = getPayloadDisclosureMapping(payload[key], map);
+            if (claim && Object.keys(claim).length > 0) {
+                payloadDisclosureMapping[key] = claim;
+            }
+        }
+    }
+    // If the payload contains a _sd property, it means there's disclosures
+    if (payload._sd) {
+        if (!Array.isArray(payload._sd)) {
+            throw new error_1.SdJwtError(`Expect value of '_sd' to be of type array, but found ${typeof payload._sd}`);
+        }
+        // We are going to resolve all digests
+        for (const digest of payload._sd) {
+            if (typeof digest !== 'string') {
+                throw new error_1.SdJwtError(`Expected entries in '_sd' property to be of type string, found ${typeof digest}`);
+            }
+            // Look up disclosure. It's valid that the disclosure is not present (decoy digests)
+            const disclosed = map[digest];
+            if (disclosed) {
+                // value is always the last item in the disclosure array
+                // We know this is an object, so the associated disclosure MUST have length 3
+                const value = [...disclosed.disclosure.decoded].pop();
+                if (disclosed.disclosure.decoded.length !== 3) {
+                    throw new error_1.SdJwtError(`Expected disclosure for value ${value} to have 3 items, but found ${disclosed.disclosure.decoded.length}`);
+                }
+                const key = disclosed.disclosure.decoded[1];
+                // This checks if there's a nested disclosure anywhere down the tree
+                // So when a disclosure value is an object or array, it can contain disclosures
+                // of itself (using `_sd` and `...` keys)
+                if ((0, utils_1.isObject)(value)) {
+                    const unpacked = getPayloadDisclosureMapping(value, map);
+                    if (unpacked && Object.keys(unpacked).length > 0) {
+                        payloadDisclosureMapping[key] = Object.assign(Object.assign({}, unpacked), { __digest: digest });
+                    }
+                    // If there's no nested disclosures, we add the digest directly
+                    else {
+                        payloadDisclosureMapping[key] = digest;
+                    }
+                }
+                else if (Array.isArray(value)) {
+                    // Get nested disclosures for the array value
+                    const nestedUnpackedArray = getArrayPayloadDisclosureMapping(value, map);
+                    // If all entries are null, it means there's no nested disclosures
+                    // And thus we push the digest directly
+                    if (nestedUnpackedArray.every((item) => item === null)) {
+                        payloadDisclosureMapping[key] = digest;
+                    }
+                    else {
+                        payloadDisclosureMapping[key] = Object.assign(Object.assign({}, nestedUnpackedArray), { 
+                            // __digest is for encapsulating disclosure
+                            __digest: digest });
+                    }
+                }
+                else {
+                    payloadDisclosureMapping[key] = digest;
+                }
+            }
+        }
+    }
+    return payloadDisclosureMapping;
+}
+exports.getPayloadDisclosureMapping = getPayloadDisclosureMapping;
+const getParentDisclosure = (disclosure, digestMap) => {
+    const parent = digestMap[disclosure.digest];
+    if (!parent) {
+        return [];
+    }
+    if (digestMap[disclosure.digest]) {
+        return [parent].concat(getParentDisclosure(parent, digestMap));
+    }
+    return [parent];
+};
+/**
+ * Get a mapping from a digest to the corresponding disclosure and its parent disclosures.
+ */
+const getDisclosureMap = (disclosures) => {
+    const map = {};
+    const parentMap = {};
+    for (const disclosure of disclosures) {
+        // value is always the last item in the disclosure array
+        const value = [...disclosure.decoded].pop();
+        (0, utils_1.traverseNodes)(value).forEach(({ path, value }) => {
+            const lastPathItem = path[path.length - 1];
+            if (lastPathItem === '_sd') {
+                if (!Array.isArray(value)) {
+                    throw new error_1.SdJwtError(`Expect value of '_sd' to be of type array, but found ${typeof value}`);
+                }
+                value.forEach((digest) => {
+                    if (typeof digest !== 'string') {
+                        throw new error_1.SdJwtError(`Expected entries in '_sd' property to be of type string, found ${typeof digest}`);
+                    }
+                    parentMap[digest] = disclosure;
+                });
+            }
+            else if (lastPathItem === '...') {
+                if (typeof value !== 'string') {
+                    throw new error_1.SdJwtError(`Expected value of '...' to be of type string, but found ${typeof value}`);
+                }
+                parentMap[value] = disclosure;
+            }
+        });
+    }
+    for (const disclosure of disclosures) {
+        const parent = getParentDisclosure(disclosure, parentMap);
+        map[disclosure.digest] = {
+            disclosure,
+            parentDisclosures: parent
+        };
+    }
+    return map;
+};
+exports.getDisclosureMap = getDisclosureMap;
+//# sourceMappingURL=disclosureMapping.js.map

package/build/sdJwt/disclosureMapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosureMapping.js","sourceRoot":"","sources":["../../src/sdJwt/disclosureMapping.ts"],"names":[],"mappings":";AAAA,6GAA6G;;;AAE7G,oCAAkD;AAElD,mCAAoC;AAYpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,SAAS,gCAAgC,CACrC,KAAqB,EACrB,GAAkB;IAElB,MAAM,6BAA6B,GAAU,EAAE,CAAA;IAE/C,mDAAmD;IACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,gEAAgE;QAChE,yEAAyE;QACzE,0BAA0B;QAC1B,IAAI,IAAI,YAAY,MAAM,EAAE,CAAC;YACzB,+CAA+C;YAC/C,uCAAuC;YACvC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;gBAC1B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC7B,MAAM,IAAI,kBAAU,CAChB,+DAA+D,OAAO,MAAM,EAAE,CACjF,CAAA;gBACL,CAAC;gBAED,oFAAoF;gBACpF,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC7B,IAAI,SAAS,EAAE,CAAC;oBACZ,wDAAwD;oBACxD,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAA;oBAErD,6EAA6E;oBAC7E,+DAA+D;oBAC/D,IAAI,IAAA,gBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;wBAClB,8CAA8C;wBAC9C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;wBAExD,yEAAyE;wBACzE,gDAAgD;wBAChD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC/C,6BAA6B,CAAC,IAAI,iCAC3B,QAAQ,KACX,QAAQ,EAAE,MAAM,IAClB,CAAA;wBACN,CAAC;6BAAM,CAAC;4BACJ,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;wBAC9C,CAAC;oBACL,CAAC;yBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9B,6CAA6C;wBAC7C,MAAM,mBAAmB,GACrB,gCAAgC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;wBAEhD,kEAAkE;wBAClE,uCAAuC;wBACvC,IACI,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EACpD,CAAC;4BACC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;wBAC9C,CAAC;6BAAM,CAAC;4BACJ,6BAA6B,CAAC,IAAI,iCAK3B,mBAAmB;gCACtB,2CAA2C;gCAC3C,QAAQ,EAAE,MAAM,IAClB,CAAA;wBACN,CAAC;oBACL,CAAC;oBACD,mFAAmF;oBACnF,2CAA2C;yBACtC,CAAC;wBACF,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;oBAC9C,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,qFAAqF;oBACrF,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;oBACrD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC3C,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;oBAC9C,CAAC;yBAAM,CAAC;wBACJ,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAC5C,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QACD,uEAAuE;QACvE,6EAA6E;aACxE,CAAC;YACF,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,CAAC;IACL,CAAC;IAED,OAAO,6BAA6B,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,2BAA2B,CAAC,OAAY,EAAE,GAAkB;IACxE,eAAe;IACf,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,gCAAgC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACzD,CAAC;IAED,+EAA+E;IAC/E,IAAI,CAAC,IAAA,gBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,MAAM,wBAAwB,GAA4B,EAAE,CAAA;IAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QACxB,8CAA8C;QAC9C,qBAAqB;QACrB,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,2BAA2B,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;YAC5D,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,wBAAwB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACzC,CAAC;QACL,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,kBAAU,CAChB,wDAAwD,OAAO,OAAO,CAAC,GAAG,EAAE,CAC/E,CAAA;QACL,CAAC;QAED,sCAAsC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,kBAAU,CAChB,kEAAkE,OAAO,MAAM,EAAE,CACpF,CAAA;YACL,CAAC;YAED,oFAAoF;YACpF,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;YAC7B,IAAI,SAAS,EAAE,CAAC;gBACZ,wDAAwD;gBACxD,6EAA6E;gBAC7E,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAA;gBACrD,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,kBAAU,CAChB,iCAAiC,KAAK,+BAA+B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAC7G,CAAA;gBACL,CAAC;gBACD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;gBAE3C,oEAAoE;gBACpE,+EAA+E;gBAC/E,yCAAyC;gBACzC,IAAI,IAAA,gBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;oBAClB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;oBACxD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC/C,wBAAwB,CAAC,GAAG,CAAC,mCACtB,QAAQ,KACX,QAAQ,EAAE,MAAM,GACnB,CAAA;oBACL,CAAC;oBACD,+DAA+D;yBAC1D,CAAC;wBACF,wBAAwB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;oBAC1C,CAAC;gBACL,CAAC;qBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,6CAA6C;oBAC7C,MAAM,mBAAmB,GACrB,gCAAgC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;oBAEhD,kEAAkE;oBAClE,uCAAuC;oBACvC,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;wBACrD,wBAAwB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;oBAC1C,CAAC;yBAAM,CAAC;wBACJ,wBAAwB,CAAC,GAAG,CAAC,mCAKtB,mBAAmB;4BACtB,2CAA2C;4BAC3C,QAAQ,EAAE,MAAM,GACnB,CAAA;oBACL,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,wBAAwB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;gBAC1C,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,wBAAwB,CAAA;AACnC,CAAC;AA/FD,kEA+FC;AAED,MAAM,mBAAmB,GAAG,CACxB,UAAgC,EAChC,SAA+C,EACzB,EAAE;IACxB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,EAAE,CAAA;IACb,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;IAClE,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,CAAA;AACnB,CAAC,CAAA;AAED;;GAEG;AACI,MAAM,gBAAgB,GAAG,CAC5B,WAAmC,EACtB,EAAE;IACf,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAyC,EAAE,CAAA;IAE1D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,wDAAwD;QACxD,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAA;QAE3C,IAAA,qBAAa,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;YAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAE1C,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,kBAAU,CAChB,wDAAwD,OAAO,KAAK,EAAE,CACzE,CAAA;gBACL,CAAC;gBAED,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;oBACrB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAC7B,MAAM,IAAI,kBAAU,CAChB,kEAAkE,OAAO,MAAM,EAAE,CACpF,CAAA;oBACL,CAAC;oBACD,SAAS,CAAC,MAAM,CAAC,GAAG,UAAU,CAAA;gBAClC,CAAC,CAAC,CAAA;YACN,CAAC;iBAAM,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;gBAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,MAAM,IAAI,kBAAU,CAChB,2DAA2D,OAAO,KAAK,EAAE,CAC5E,CAAA;gBACL,CAAC;gBACD,SAAS,CAAC,KAAK,CAAC,GAAG,UAAU,CAAA;YACjC,CAAC;QACL,CAAC,CAAC,CAAA;IACN,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QAEzD,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG;YACrB,UAAU;YACV,iBAAiB,EAAE,MAAM;SAC5B,CAAA;IACL,CAAC;IAED,OAAO,GAAG,CAAA;AACd,CAAC,CAAA;AAjDY,QAAA,gBAAgB,oBAiD5B"}

package/build/sdJwt/presentationFrame.d.ts

@@ -0,0 +1,3 @@
+import { DisclosureWithDigest } from './disclosures';
+import { PresentationFrame } from '../types/present';
+export declare const getDisclosuresForPresentationFrame: <Payload extends Record<string, unknown> = Record<string, unknown>>(signedPayload: Payload, presentationFrame: PresentationFrame<Payload>, prettyClaims: Payload, disclosures?: Array<DisclosureWithDigest>) => Array<DisclosureWithDigest>;

package/build/sdJwt/presentationFrame.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDisclosuresForPresentationFrame = void 0;
+const utils_1 = require("../utils");
+const error_1 = require("./error");
+const disclosureMapping_1 = require("./disclosureMapping");
+const getDisclosuresForPresentationFrame = (signedPayload, presentationFrame, prettyClaims, disclosures = []) => {
+    const requiredDisclosureDigests = new Set();
+    const disclosureMap = (0, disclosureMapping_1.getDisclosureMap)(disclosures);
+    const payloadDisclosureMapping = (0, disclosureMapping_1.getPayloadDisclosureMapping)(signedPayload, disclosureMap);
+    // No disclosures needed
+    if (payloadDisclosureMapping === null) {
+        if (disclosures.length > 0) {
+            throw new error_1.SdJwtError('Payload disclosure mapping is null, but disclosures are present.');
+        }
+        return [];
+    }
+    for (const node of (0, utils_1.traverseNodes)(presentationFrame)) {
+        // We only want to process leaf nodes here
+        if (!node.isLeaf)
+            continue;
+        if (typeof node.value !== 'boolean') {
+            throw new error_1.SdJwtError(`Expected leaf value in presentation frame to be of type boolean, but found ${typeof node.value}`);
+        }
+        // If the value is false, it means we don't want to disclose it
+        if (node.value === false)
+            continue;
+        if (!(0, utils_1.hasByPath)(prettyClaims, node.path)) {
+            throw new error_1.SdJwtError(`Path ${node.path.join('.')} from presentation frame is not present in pretty SD-JWT payload. The presentation frame may only include properties that are present in the SD-JWT payload.`);
+        }
+        let path = [...node.path];
+        while (!(0, utils_1.hasByPath)(payloadDisclosureMapping, path)) {
+            if (path.pop() === undefined)
+                break;
+        }
+        // There are no disclosures on this path, meaning the property is disclosed by default in the signed payload
+        if (path.length === 0)
+            continue;
+        const disclosure = (0, utils_1.getByPath)(payloadDisclosureMapping, path);
+        // If disclosure is string, it means it's already the digest
+        if (typeof disclosure === 'string')
+            requiredDisclosureDigests.add(disclosure);
+        // Otherwise we want to get all the child digests as well
+        else {
+            for (const nestedItem of (0, utils_1.traverseNodes)(disclosure)) {
+                if (!nestedItem.isLeaf ||
+                    typeof nestedItem.value !== 'string') {
+                    continue;
+                }
+                requiredDisclosureDigests.add(nestedItem.value);
+            }
+        }
+    }
+    for (const disclosureDigest of requiredDisclosureDigests.values()) {
+        const disclosure = disclosureMap[disclosureDigest];
+        if (!disclosure) {
+            throw new Error('disclosure not found');
+        }
+        disclosure.parentDisclosures.forEach((d) => requiredDisclosureDigests.add(d.digest));
+    }
+    return Array.from(requiredDisclosureDigests).map((digest) => disclosureMap[digest].disclosure);
+};
+exports.getDisclosuresForPresentationFrame = getDisclosuresForPresentationFrame;
+//# sourceMappingURL=presentationFrame.js.map

package/build/sdJwt/presentationFrame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationFrame.js","sourceRoot":"","sources":["../../src/sdJwt/presentationFrame.ts"],"names":[],"mappings":";;;AAAA,oCAA8D;AAE9D,mCAAoC;AAEpC,2DAG4B;AAErB,MAAM,kCAAkC,GAAG,CAG9C,aAAsB,EACtB,iBAA6C,EAC7C,YAAqB,EACrB,cAA2C,EAAE,EAClB,EAAE;IAC7B,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAU,CAAA;IACnD,MAAM,aAAa,GAAG,IAAA,oCAAgB,EAAC,WAAW,CAAC,CAAA;IACnD,MAAM,wBAAwB,GAAG,IAAA,+CAA2B,EACxD,aAAa,EACb,aAAa,CAChB,CAAA;IAED,wBAAwB;IACxB,IAAI,wBAAwB,KAAK,IAAI,EAAE,CAAC;QACpC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAU,CAChB,kEAAkE,CACrE,CAAA;QACL,CAAC;QAED,OAAO,EAAE,CAAA;IACb,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAA,qBAAa,EAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,0CAA0C;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAQ;QAE1B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAU,CAChB,8EAA8E,OAAO,IAAI,CAAC,KAAK,EAAE,CACpG,CAAA;QACL,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,SAAQ;QAElC,IAAI,CAAC,IAAA,iBAAS,EAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,kBAAU,CAChB,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAClB,GAAG,CACN,8JAA8J,CAClK,CAAA;QACL,CAAC;QAED,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;QACzB,OAAO,CAAC,IAAA,iBAAS,EAAC,wBAAwB,EAAE,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,SAAS;gBAAE,MAAK;QACvC,CAAC;QAED,4GAA4G;QAC5G,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAE/B,MAAM,UAAU,GAAG,IAAA,iBAAS,EAAC,wBAAwB,EAAE,IAAI,CAAC,CAAA;QAC5D,4DAA4D;QAC5D,IAAI,OAAO,UAAU,KAAK,QAAQ;YAC9B,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC7C,yDAAyD;aACpD,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,IAAA,qBAAa,EAAC,UAAU,CAAC,EAAE,CAAC;gBACjD,IACI,CAAC,UAAU,CAAC,MAAM;oBAClB,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,EACtC,CAAC;oBACC,SAAQ;gBACZ,CAAC;gBACD,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YACnD,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,MAAM,gBAAgB,IAAI,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC;QAChE,MAAM,UAAU,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAA;QAElD,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QAC3C,CAAC;QAED,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAC1C,CAAA;IACL,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAC5C,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,UAAU,CAC/C,CAAA;AACL,CAAC,CAAA;AAxFY,QAAA,kCAAkC,sCAwF9C"}

package/build/sdJwt/swapClaim.d.ts

@@ -0,0 +1,2 @@
+import { DisclosureWithDigest } from './disclosures';
+export declare const swapClaims: (payload: Record<string, unknown>, disclosures: DisclosureWithDigest[], newPayload?: Record<string, unknown>) => Record<string, unknown>;

package/build/sdJwt/swapClaim.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.swapClaims = void 0;
+const shouldInsertDisclosure = (key, value, disclosures) => {
+    if (key !== '_sd')
+        return [];
+    if (!Array.isArray(value))
+        return [];
+    const filteredDisclosures = [];
+    for (const d of disclosures) {
+        if (value.includes(d.digest)) {
+            filteredDisclosures.push(d);
+        }
+    }
+    return filteredDisclosures;
+};
+const shouldIncludeCleartextClaim = (key, value) => key !== '_sd' && key !== '_sd_alg' && typeof value !== 'object';
+const swapClaims = (payload, disclosures, newPayload = {}) => {
+    const entries = Object.entries(payload);
+    // Loop over de payload
+    for (let i = 0; i < entries.length; i++) {
+        const [key, value] = entries[i];
+        // See whether we have an `_sd` key with an array of disclosures.
+        const foundDisclosures = shouldInsertDisclosure(key, value, disclosures);
+        // Add the disclosed items to the pretty payload
+        foundDisclosures.forEach((d) => {
+            const [, disclosureKey, disclosureValue] = d.decoded;
+            newPayload[disclosureKey] = disclosureValue;
+        });
+        // Skip the rest as  `_sd` is a special case
+        if (key === '_sd') {
+            continue;
+        }
+        // Include all the primitive claims into the new payload
+        if (shouldIncludeCleartextClaim(key, value)) {
+            newPayload[key] = value;
+            continue;
+        }
+        if (typeof value === 'object' && Array.isArray(value)) {
+            newPayload[key] = swapClaimsInsideArray(value, disclosures);
+            continue;
+        }
+        if (typeof value === 'object' &&
+            value !== null &&
+            !Array.isArray(value)) {
+            newPayload[key] = (0, exports.swapClaims)(value, disclosures);
+        }
+    }
+    return newPayload;
+};
+exports.swapClaims = swapClaims;
+const swapClaimsInsideArray = (array, disclosures) => {
+    const processedArray = [];
+    for (const el of array) {
+        if (typeof el === 'object' && el !== null && '...' in el) {
+            const hash = el['...'];
+            let disclosureFound = false;
+            let disclosureValue;
+            for (const d of disclosures) {
+                if (d.digest === hash && d.decoded[2] === undefined) {
+                    disclosureValue = d.decoded[1];
+                    disclosureFound = true;
+                    break;
+                }
+            }
+            if (disclosureFound) {
+                processedArray.push(disclosureValue);
+            }
+            else {
+                processedArray.push(el);
+            }
+        }
+        else {
+            processedArray.push(el);
+        }
+    }
+    return processedArray;
+};
+//# sourceMappingURL=swapClaim.js.map

package/build/sdJwt/swapClaim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swapClaim.js","sourceRoot":"","sources":["../../src/sdJwt/swapClaim.ts"],"names":[],"mappings":";;;AAEA,MAAM,sBAAsB,GAAG,CAC3B,GAAW,EACX,KAAc,EACd,WAAmC,EACrC,EAAE;IACA,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,CAAA;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEpC,MAAM,mBAAmB,GAAG,EAAE,CAAA;IAE9B,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,CAAC;IACL,CAAC;IAED,OAAO,mBAAmB,CAAA;AAC9B,CAAC,CAAA;AAED,MAAM,2BAA2B,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE,CAChE,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAA;AAE5D,MAAM,UAAU,GAAG,CACtB,OAAgC,EAChC,WAAmC,EACnC,aAAsC,EAAE,EAC1C,EAAE;IACA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvC,uBAAuB;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QAE/B,iEAAiE;QACjE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;QAExE,gDAAgD;QAChD,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,MAAM,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;YACpD,UAAU,CAAC,aAAuB,CAAC,GAAG,eAAe,CAAA;QACzD,CAAC,CAAC,CAAA;QAEF,4CAA4C;QAC5C,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAChB,SAAQ;QACZ,CAAC;QAED,wDAAwD;QACxD,IAAI,2BAA2B,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACvB,SAAQ;QACZ,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,UAAU,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YAC3D,SAAQ;QACZ,CAAC;QAED,IACI,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACvB,CAAC;YACC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAA,kBAAU,EACxB,KAAgC,EAChC,WAAW,CACd,CAAA;QACL,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAA;AACrB,CAAC,CAAA;AAjDY,QAAA,UAAU,cAiDtB;AAED,MAAM,qBAAqB,GAAG,CAC1B,KAAyC,EACzC,WAAmC,EACrC,EAAE;IACA,MAAM,cAAc,GAAG,EAAE,CAAA;IAEzB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACrB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;YACtB,IAAI,eAAe,GAAG,KAAK,CAAA;YAC3B,IAAI,eAAe,CAAA;YAEnB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;oBAClD,eAAe,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;oBAC9B,eAAe,GAAG,IAAI,CAAA;oBACtB,MAAK;gBACT,CAAC;YACL,CAAC;YAED,IAAI,eAAe,EAAE,CAAC;gBAClB,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YACxC,CAAC;iBAAM,CAAC;gBACJ,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC3B,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3B,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAA;AACzB,CAAC,CAAA"}

package/build/types/frame.d.ts

@@ -0,0 +1,5 @@
+export type BaseFrame<Payload, ExtraProperties> = Payload extends Array<unknown> ? {
+    [K in keyof Payload]?: Payload[K] extends Record<string | number, unknown> ? BaseFrame<Payload[K], ExtraProperties> | boolean : boolean;
+} : Payload extends Record<string, unknown> ? {
+    [K in keyof Payload]?: Payload[K] extends Array<unknown> ? BaseFrame<Payload[K], ExtraProperties> | boolean : Payload[K] extends Record<string, unknown> ? (ExtraProperties & BaseFrame<Payload[K], ExtraProperties>) | boolean : boolean;
+} & ExtraProperties & Record<string, unknown> : boolean;

package/build/types/frame.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=frame.js.map

package/build/types/frame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame.js","sourceRoot":"","sources":["../../src/types/frame.ts"],"names":[],"mappings":""}

package/build/types/hasher.d.ts

@@ -0,0 +1,14 @@
+import { HasherAlgorithm } from '@sd-jwt/utils';
+import { OrPromise } from './utils';
+/**
+ * A simple hash function that takes the base64url encoded variant of the disclosure and returns the digest as a byte array
+ */
+export type Hasher = (input: string) => OrPromise<Uint8Array>;
+/**
+ * hasher: A simple hash function that takes the base64url encoded variant of the disclosure and returns the digest as a byte array
+ * algorithm: IANA defined string for the hashing algorithm used
+ */
+export type HasherAndAlgorithm = {
+    hasher: Hasher;
+    algorithm: string | HasherAlgorithm;
+};

package/build/types/hasher.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=hasher.js.map

package/build/types/hasher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hasher.js","sourceRoot":"","sources":["../../src/types/hasher.ts"],"names":[],"mappings":""}

package/build/types/present.d.ts

@@ -0,0 +1,2 @@
+import { BaseFrame } from './frame';
+export type PresentationFrame<T> = BaseFrame<T, {}>;

package/build/types/present.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=present.js.map

package/build/types/present.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"present.js","sourceRoot":"","sources":["../../src/types/present.ts"],"names":[],"mappings":""}

package/build/utils/index.d.ts

@@ -0,0 +1,2 @@
+export * from './traverse';
+export * from './utils';

package/build/utils/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./traverse"), exports);
+__exportStar(require("./utils"), exports);
+//# sourceMappingURL=index.js.map

package/build/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA0B;AAC1B,0CAAuB"}

package/build/utils/traverse.d.ts

@@ -0,0 +1,8 @@
+export declare const traverseNodes: (object: any, path?: PathNode[]) => LeafNode[];
+type PathNode = string | number;
+interface LeafNode {
+    path: PathNode[];
+    value: any;
+    isLeaf: boolean;
+}
+export {};

package/build/utils/traverse.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.traverseNodes = void 0;
+const traverseNodes = (object, path = []) => {
+    const result = [];
+    if (typeof object !== 'object' || object === null) {
+        return [{ path: [], value: object, isLeaf: true }];
+    }
+    for (const key in object) {
+        if (object.hasOwnProperty(key)) {
+            const currentPath = [...path, key];
+            const value = object[key];
+            // Value must be object / array, and have at least some values in it
+            if (typeof value === 'object' &&
+                value !== null &&
+                Object.keys(value).length > 0) {
+                // Recursively traverse nested objects or arrays
+                result.push(...(0, exports.traverseNodes)(value, currentPath));
+            }
+            else {
+                // Leaf node found
+                result.push({ path: currentPath, value, isLeaf: true });
+            }
+        }
+    }
+    return result;
+};
+exports.traverseNodes = traverseNodes;
+//# sourceMappingURL=traverse.js.map

package/build/utils/traverse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traverse.js","sourceRoot":"","sources":["../../src/utils/traverse.ts"],"names":[],"mappings":";;;AAAO,MAAM,aAAa,GAAG,CACzB,MAAW,EACX,OAAmB,EAAE,EACX,EAAE;IACZ,MAAM,MAAM,GAAe,EAAE,CAAA;IAE7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAA;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAA0B,CAAC,CAAA;YAEhD,oEAAoE;YACpE,IACI,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,KAAK,IAAI;gBACd,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAC/B,CAAC;gBACC,gDAAgD;gBAChD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,qBAAa,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;YACrD,CAAC;iBAAM,CAAC;gBACJ,kBAAkB;gBAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3D,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAA;AACjB,CAAC,CAAA;AA/BY,QAAA,aAAa,iBA+BzB"}

package/build/utils/utils.d.ts

@@ -0,0 +1,8 @@
+export declare const getAllKeys: (object: unknown, keys?: Array<string>) => Array<string>;
+export declare const getValueByKeyAnyLevel: <T = unknown>(obj: Record<string, unknown>, key: string) => T | undefined;
+export declare const simpleDeepEqual: (lhs: unknown, rhs: unknown) => boolean;
+export declare const deleteByPath: (object: Record<string, unknown>, path: string[]) => void;
+export declare const getByPath: (item: any[] | Record<string, unknown>, path: Array<string | number>) => unknown;
+export declare const hasByPath: (item: any[] | Record<string, unknown>, path: Array<string | number>) => boolean;
+export declare function isObject(input: any): boolean;
+export declare function isPromise<T>(value: Promise<T> | T): value is Promise<T>;

package/build/utils/utils.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isPromise = exports.isObject = exports.hasByPath = exports.getByPath = exports.deleteByPath = exports.simpleDeepEqual = exports.getValueByKeyAnyLevel = exports.getAllKeys = void 0;
+const sdJwt_1 = require("../sdJwt");
+const getAllKeys = (object, keys = []) => {
+    if (typeof object !== 'object' || typeof object === null)
+        return keys;
+    const record = object;
+    const objectKeys = Object.keys(record);
+    const objectValues = Object.values(record);
+    keys.push(...objectKeys);
+    for (const objectValue of objectValues) {
+        if (typeof objectValue === 'object' &&
+            objectValue !== null &&
+            !Array.isArray(objectValue)) {
+            (0, exports.getAllKeys)(objectValue, keys);
+        }
+    }
+    return keys;
+};
+exports.getAllKeys = getAllKeys;
+const getValueByKeyAnyLevel = (obj, key) => {
+    // Check if the current object has the key
+    if (obj && obj.hasOwnProperty(key)) {
+        return obj[key];
+    }
+    // If not found in the current object, iterate over its properties
+    for (const prop in obj) {
+        if (obj.hasOwnProperty(prop) && typeof obj[prop] === 'object') {
+            const result = (0, exports.getValueByKeyAnyLevel)(obj[prop], key);
+            if (result !== undefined) {
+                return result;
+            }
+        }
+    }
+};
+exports.getValueByKeyAnyLevel = getValueByKeyAnyLevel;
+const simpleDeepEqual = (lhs, rhs) => {
+    if (lhs === rhs)
+        return true;
+    if (typeof lhs !== 'object' || typeof rhs !== 'object')
+        return false;
+    const l = Object.assign({}, lhs);
+    const r = Object.assign({}, rhs);
+    Object.keys(l).forEach((key) => l[key] === undefined && delete l[key]);
+    Object.keys(r).forEach((key) => r[key] === undefined && delete r[key]);
+    const keys1 = Object.keys(l);
+    const keys2 = Object.keys(r);
+    if (keys1.length !== keys2.length)
+        return false;
+    return keys1.every((key) => (0, exports.simpleDeepEqual)(l[key], r[key]));
+};
+exports.simpleDeepEqual = simpleDeepEqual;
+const deleteByPath = (object, path) => {
+    let currentObject = object;
+    const parts = [...path];
+    const last = parts.pop();
+    for (const part of parts) {
+        currentObject = currentObject[part];
+        if (!currentObject) {
+            return;
+        }
+    }
+    if (last) {
+        delete currentObject[last];
+    }
+};
+exports.deleteByPath = deleteByPath;
+const getByPath = (item, path) => {
+    let current = item;
+    for (const key of path) {
+        if (Array.isArray(current)) {
+            const keyAsNumber = Number(key);
+            if (isNaN(keyAsNumber)) {
+                throw new sdJwt_1.SdJwtError(`Unable to get ${path.join('.')} from array ${item}. ${key} is not a number.`);
+            }
+            if (keyAsNumber >= current.length) {
+                throw new sdJwt_1.SdJwtError(`Unable to get ${path.join('.')} from array ${item}. ${key} is out of bounds.`);
+            }
+            current = current[keyAsNumber];
+        }
+        else if (typeof current === 'object' && current !== null) {
+            if (!(key in current)) {
+                throw new sdJwt_1.SdJwtError(`Unable to get ${path.join('.')} from ${item}. ${key} does not exists in ${current}.`);
+            }
+            current = current[key];
+        }
+        else {
+            throw new sdJwt_1.SdJwtError(`Unable to get ${path.join('.')} from ${item}. ${key} is not an object or array.`);
+        }
+    }
+    return current;
+};
+exports.getByPath = getByPath;
+const hasByPath = (item, path) => {
+    try {
+        (0, exports.getByPath)(item, path);
+        return true;
+    }
+    catch (_a) {
+        return false;
+    }
+};
+exports.hasByPath = hasByPath;
+function isObject(input) {
+    return typeof input === 'object' && input !== null && !Array.isArray(input);
+}
+exports.isObject = isObject;
+function isPromise(value) {
+    return (value instanceof Promise ||
+        (value &&
+            typeof value === 'object' &&
+            value !== null &&
+            'then' in value &&
+            value.then === 'function'));
+}
+exports.isPromise = isPromise;
+//# sourceMappingURL=utils.js.map

package/build/utils/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/utils/utils.ts"],"names":[],"mappings":";;;AAAA,oCAAqC;AAE9B,MAAM,UAAU,GAAG,CACtB,MAAe,EACf,OAAsB,EAAE,EACX,EAAE;IACf,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACrE,MAAM,MAAM,GAAG,MAAiC,CAAA;IAEhD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAA;IAExB,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACrC,IACI,OAAO,WAAW,KAAK,QAAQ;YAC/B,WAAW,KAAK,IAAI;YACpB,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAC7B,CAAC;YACC,IAAA,kBAAU,EAAC,WAAW,EAAE,IAAI,CAAC,CAAA;QACjC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAA;AACf,CAAC,CAAA;AAtBY,QAAA,UAAU,cAsBtB;AAEM,MAAM,qBAAqB,GAAG,CACjC,GAA4B,EAC5B,GAAW,EACE,EAAE;IACf,0CAA0C;IAC1C,IAAI,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,GAAG,CAAM,CAAA;IACxB,CAAC;IAED,kEAAkE;IAClE,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAA,6BAAqB,EAChC,GAAG,CAAC,IAAI,CAA4B,EACpC,GAAG,CACN,CAAA;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,MAAW,CAAA;YACtB,CAAC;QACL,CAAC;IACL,CAAC;AACL,CAAC,CAAA;AArBY,QAAA,qBAAqB,yBAqBjC;AAEM,MAAM,eAAe,GAAG,CAAC,GAAY,EAAE,GAAY,EAAW,EAAE;IACnE,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAE5B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAEpE,MAAM,CAAC,GAAG,kBAAK,GAAG,CAA6B,CAAA;IAC/C,MAAM,CAAC,GAAG,kBAAK,GAAG,CAA6B,CAAA;IAE/C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IACtE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAEtE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAE5B,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAE/C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,uBAAe,EAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAChE,CAAC,CAAA;AAjBY,QAAA,eAAe,mBAiB3B;AAEM,MAAM,YAAY,GAAG,CACxB,MAA+B,EAC/B,IAAc,EAChB,EAAE;IACA,IAAI,aAAa,GAAwC,MAAM,CAAA;IAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,aAAa,GAAG,aAAa,CAAC,IAAI,CAEnB,CAAA;QAEf,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAM;QACV,CAAC;IACL,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACP,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;AACL,CAAC,CAAA;AAnBY,QAAA,YAAY,gBAmBxB;AAEM,MAAM,SAAS,GAAG,CACrB,IAAqC,EACrC,IAA4B,EACrB,EAAE;IACT,IAAI,OAAO,GAAQ,IAAI,CAAA;IACvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YAC/B,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,kBAAU,CAChB,iBAAiB,IAAI,CAAC,IAAI,CACtB,GAAG,CACN,eAAe,IAAI,KAAK,GAAG,mBAAmB,CAClD,CAAA;YACL,CAAC;YACD,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,IAAI,kBAAU,CAChB,iBAAiB,IAAI,CAAC,IAAI,CACtB,GAAG,CACN,eAAe,IAAI,KAAK,GAAG,oBAAoB,CACnD,CAAA;YACL,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;QAClC,CAAC;aAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACzD,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAU,CAChB,iBAAiB,IAAI,CAAC,IAAI,CACtB,GAAG,CACN,SAAS,IAAI,KAAK,GAAG,uBAAuB,OAAO,GAAG,CAC1D,CAAA;YACL,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,kBAAU,CAChB,iBAAiB,IAAI,CAAC,IAAI,CACtB,GAAG,CACN,SAAS,IAAI,KAAK,GAAG,6BAA6B,CACtD,CAAA;QACL,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAA;AAClB,CAAC,CAAA;AAzCY,QAAA,SAAS,aAyCrB;AAEM,MAAM,SAAS,GAAG,CACrB,IAAqC,EACrC,IAA4B,EACrB,EAAE;IACT,IAAI,CAAC;QACD,IAAA,iBAAS,EAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,KAAK,CAAA;IAChB,CAAC;AACL,CAAC,CAAA;AAVY,QAAA,SAAS,aAUrB;AAED,SAAgB,QAAQ,CAAC,KAAU;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC/E,CAAC;AAFD,4BAEC;AAED,SAAgB,SAAS,CAAI,KAAqB;IAC9C,OAAO,CACH,KAAK,YAAY,OAAO;QACxB,CAAC,KAAK;YACF,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CACjC,CAAA;AACL,CAAC;AATD,8BASC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@sd-jwt/core",
-    "version": "0.2.1-alpha.0",
+    "version": "0.2.1",
     "description": "Core implementation of sd-jwt Draft 06 and sd-jwt-vc Draft 01",
     "license": "(MIT OR Apache-2.0)",
     "author": "Berend Sliedrecht <sliedrecht@berend.io>",
@@ -37,15 +37,15 @@
         "test": "node --require ts-node/register --test ./tests/*.test.ts"
     },
     "dependencies": {
-        "@sd-jwt/decode": "0.2.1-alpha.0",
-        "@sd-jwt/present": "0.2.1-alpha.0",
-        "@sd-jwt/types": "0.2.1-alpha.0",
-        "@sd-jwt/utils": "0.2.1-alpha.0"
+        "@sd-jwt/decode": "0.2.1",
+        "@sd-jwt/present": "0.2.1",
+        "@sd-jwt/types": "0.2.1",
+        "@sd-jwt/utils": "0.2.1"
     },
     "devDependencies": {
         "@types/node": "*",
         "ts-node": "*",
         "typescript": "*"
     },
-    "gitHead": "97e9d3699113bb04fb99d6421797cbd404e4a626"
+    "gitHead": "a1fb5fad0b938081e033233bae5569ae3b9fe8cb"
 }