@sd-jwt/core 0.3.0 → 2.0.2-next.26

package/build/keyBinding/keyBinding.d.ts

@@ -1,64 +0,0 @@
-import { Jwt, JwtAdditionalOptions, JwtOptions, JwtVerificationResult } from '../jwt';
-import { SignatureAndEncryptionAlgorithm } from '../signatureAndEncryptionAlgorithm';
-import { MakePropertyRequired, Signer, Verifier } from '../types';
-type ReturnKeyBindingWithHeaderAndPayload<H extends Record<string, unknown>, P extends Record<string, unknown>, T extends KeyBinding<H, P>> = MakePropertyRequired<T, 'header' | 'payload'>;
-export type KeyBindingHeader<H extends Record<string, unknown> = Record<string, unknown>> = H & {
-    typ: 'kb+jwt';
-    alg: SignatureAndEncryptionAlgorithm | string;
-};
-export type KeyBindingPayload<P extends Record<string, unknown> = Record<string, unknown>> = P & {
-    iat: number;
-    aud: string;
-    nonce: string;
-};
-export type KeyBindingOptions<Header extends Record<string, unknown> = Record<string, unknown>, Payload extends Record<string, unknown> = Record<string, unknown>> = JwtOptions<KeyBindingHeader<Header>, KeyBindingPayload<Payload>> & {
-    /**
-     * The compact SD-JWT over which the key binding should provide integrity
-     */
-    compactSdJwt?: string;
-};
-export type KeyBindingAdditionalOptions<Header extends Record<string, unknown> = Record<string, unknown>> = JwtAdditionalOptions<KeyBindingHeader<Header>>;
-export type KeyBindingVerificationResult = JwtVerificationResult;
-export declare class KeyBinding<Header extends Record<string, unknown> = Record<string, unknown>, Payload extends Record<string, unknown> = Record<string, unknown>> extends Jwt<Header, Payload> {
-    signer?: Signer<Header>;
-    expectedSdHash?: string;
-    constructor(options?: KeyBindingOptions<Header, Payload>, additionalOptions?: KeyBindingAdditionalOptions<Header>);
-    /**
-     *
-     * Convert a standard `JWT` to an instance of `KeyBinding`.
-     *
-     * @throws when the claims are not valid for key binding
-     *
-     */
-    static fromJwt<Header extends Record<string, unknown> = Record<string, unknown>, Payload extends Record<string, unknown> = Record<string, unknown>>(jwt: Jwt<Header, Payload>): KeyBinding<Header, Payload>;
-    /**
-     *
-     * Verify the jwt as a valid `KeyBinding` jwt.
-     *
-     * Invalid when:
-     *   - The required claims for key binding are not included
-     *   - The signature is invalid
-     *   - The optional required additional claims are not included
-     *
-     */
-    verify(verifySignature: Verifier<Header>, requiredClaims?: Array<keyof Payload | string>, publicKeyJwk?: Record<string, unknown>): Promise<KeyBindingVerificationResult>;
-    /**
-     *
-     * Convert a compact `JWT` into an instance of `KeyBinding`.
-     *
-     * @throws when the claims are not valid for key binding
-     *
-     */
-    static fromCompact<Header extends Record<string, unknown> = Record<string, unknown>, Payload extends Record<string, unknown> = Record<string, unknown>>(compact: string): ReturnKeyBindingWithHeaderAndPayload<Header, Payload, KeyBinding<Header, Payload>>;
-    withSdHashClaim(sdHash: string): this;
-    withExpectedSdHash(expectedSdHash: string): this;
-    /**
-     *
-     * Asserts the required properties for valid key binding.
-     *
-     * @throws when a claim in the header, or payload, is invalid
-     *
-     */
-    assertValidForKeyBinding(expectedSdHash?: string): Promise<void>;
-}
-export {};

package/build/keyBinding/keyBinding.js

@@ -1,119 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KeyBinding = void 0;
-const decode_1 = require("@sd-jwt/decode");
-const jwt_1 = require("../jwt");
-class KeyBinding extends jwt_1.Jwt {
-    constructor(options, additionalOptions) {
-        super(options);
-        this.signer = additionalOptions === null || additionalOptions === void 0 ? void 0 : additionalOptions.signer;
-    }
-    /**
-     *
-     * Convert a standard `JWT` to an instance of `KeyBinding`.
-     *
-     * @throws when the claims are not valid for key binding
-     *
-     */
-    static fromJwt(jwt) {
-        const keyBinding = new KeyBinding({
-            header: jwt.header,
-            payload: jwt.payload,
-            signature: jwt.signature
-        }, { signer: jwt.signer });
-        keyBinding.assertValidForKeyBinding();
-        return keyBinding;
-    }
-    /**
-     *
-     * Verify the jwt as a valid `KeyBinding` jwt.
-     *
-     * Invalid when:
-     *   - The required claims for key binding are not included
-     *   - The signature is invalid
-     *   - The optional required additional claims are not included
-     *
-     */
-    verify(verifySignature, requiredClaims, publicKeyJwk) {
-        const _super = Object.create(null, {
-            verify: { get: () => super.verify }
-        });
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!this.expectedSdHash) {
-                throw new Error('Expected sd hash is required for verification of key binding JWT');
-            }
-            // TODO: should _sd_hash also be a verification property (true/false)
-            // or should it throw?
-            yield this.assertValidForKeyBinding(this.expectedSdHash);
-            const jwtVerificationResult = yield _super.verify.call(this, verifySignature, requiredClaims, publicKeyJwk);
-            return jwtVerificationResult;
-        });
-    }
-    /**
-     *
-     * Convert a compact `JWT` into an instance of `KeyBinding`.
-     *
-     * @throws when the claims are not valid for key binding
-     *
-     */
-    static fromCompact(compact) {
-        const { header, payload, signature } = (0, decode_1.keyBindingFromCompact)(compact);
-        const keyBinding = new KeyBinding({ header, payload, signature });
-        return keyBinding;
-    }
-    withSdHashClaim(sdHash) {
-        this.addPayloadClaim('_sd_hash', sdHash);
-        return this;
-    }
-    withExpectedSdHash(expectedSdHash) {
-        this.expectedSdHash = expectedSdHash;
-        return this;
-    }
-    /**
-     *
-     * Asserts the required properties for valid key binding.
-     *
-     * @throws when a claim in the header, or payload, is invalid
-     *
-     */
-    assertValidForKeyBinding(expectedSdHash) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                this.assertHeader();
-                this.assertPayload();
-                if (!this.signature) {
-                    yield this.signAndAdd();
-                }
-                this.assertSignature();
-                this.assertClaimInHeader('typ', 'kb+jwt');
-                this.assertClaimInHeader('alg');
-                this.assertClaimInPayload('iat');
-                this.assertClaimInPayload('nonce');
-                this.assertClaimInPayload('aud');
-                if (expectedSdHash !== null && expectedSdHash !== void 0 ? expectedSdHash : this.expectedSdHash) {
-                    this.assertClaimInPayload('_sd_hash', expectedSdHash !== null && expectedSdHash !== void 0 ? expectedSdHash : this.expectedSdHash);
-                }
-                else {
-                    this.assertClaimInPayload('_sd_hash');
-                }
-            }
-            catch (e) {
-                if (e instanceof Error) {
-                    e.message = `jwt is not valid for usage with key binding. Error: ${e.message}`;
-                }
-                throw e;
-            }
-        });
-    }
-}
-exports.KeyBinding = KeyBinding;
-//# sourceMappingURL=keyBinding.js.map

package/build/keyBinding/keyBinding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keyBinding.js","sourceRoot":"","sources":["../../src/keyBinding/keyBinding.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAsD;AACtD,gCAKe;AAyCf,MAAa,UAGX,SAAQ,SAAoB;IAK1B,YACI,OAA4C,EAC5C,iBAAuD;QAEvD,KAAK,CAAC,OAAO,CAAC,CAAA;QAEd,IAAI,CAAC,MAAM,GAAG,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,MAAwB,CAAA;IAC7D,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,OAAO,CAGnB,GAAyB;QACvB,MAAM,UAAU,GAAG,IAAI,UAAU,CAC7B;YACI,MAAM,EAAE,GAAG,CAAC,MAAkC;YAC9C,OAAO,EAAE,GAAG,CAAC,OAAqC;YAClD,SAAS,EAAE,GAAG,CAAC,SAAS;SAC3B,EACD,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CACzB,CAAA;QAED,UAAU,CAAC,wBAAwB,EAAE,CAAA;QAErC,OAAO,UAAU,CAAA;IACrB,CAAC;IAED;;;;;;;;;OASG;IACmB,MAAM,CACxB,eAAiC,EACjC,cAA8C,EAC9C,YAAsC;;;;;YAEtC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACX,kEAAkE,CACrE,CAAA;YACL,CAAC;YAED,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAExD,MAAM,qBAAqB,GAAG,MAAM,OAAM,MAAM,YAC5C,eAAe,EACf,cAAc,EACd,YAAY,CACf,CAAA;YAED,OAAO,qBAAqB,CAAA;QAChC,CAAC;KAAA;IAED;;;;;;OAMG;IACI,MAAM,CAAU,WAAW,CAGhC,OAAe;QACb,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAA,8BAAqB,EAG1D,OAAO,CAAC,CAAA;QAEV,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;QAEjE,OAAO,UAIN,CAAA;IACL,CAAC;IAEM,eAAe,CAAC,MAAc;QACjC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAExC,OAAO,IAAI,CAAA;IACf,CAAC;IAEM,kBAAkB,CAAC,cAAsB;QAC5C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QAEpC,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;;;;OAMG;IACU,wBAAwB,CAAC,cAAuB;;YACzD,IAAI,CAAC;gBACD,IAAI,CAAC,YAAY,EAAE,CAAA;gBACnB,IAAI,CAAC,aAAa,EAAE,CAAA;gBAEpB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBAClB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;gBAC3B,CAAC;gBAED,IAAI,CAAC,eAAe,EAAE,CAAA;gBAEtB,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;gBACzC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;gBAE/B,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;gBAChC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAA;gBAClC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;gBAEhC,IAAI,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxC,IAAI,CAAC,oBAAoB,CACrB,UAAU,EACV,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,IAAI,CAAC,cAAc,CACxC,CAAA;gBACL,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAA;gBACzC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;oBACrB,CAAC,CAAC,OAAO,GAAG,uDAAuD,CAAC,CAAC,OAAO,EAAE,CAAA;gBAClF,CAAC;gBAED,MAAM,CAAC,CAAA;YACX,CAAC;QACL,CAAC;KAAA;CACJ;AA1JD,gCA0JC"}

package/build/sdJwt/decoys.d.ts

@@ -1,3 +0,0 @@
-import type { HasherAndAlgorithm } from '@sd-jwt/types';
-import { SaltGenerator } from '../types';
-export declare const createDecoys: (count: number, saltGenerator: SaltGenerator, hasherAndAlgorithm: HasherAndAlgorithm) => Promise<string[]>;

package/build/sdJwt/decoys.js

@@ -1,35 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createDecoys = void 0;
-const error_1 = require("./error");
-const utils_1 = require("@sd-jwt/utils");
-const createDecoys = (count, saltGenerator, hasherAndAlgorithm) => __awaiter(void 0, void 0, void 0, function* () {
-    if (count < 0) {
-        throw new error_1.SdJwtError(`Negative count of ${count} is not allowed.`);
-    }
-    if (isNaN(count)) {
-        throw new error_1.SdJwtError(`NaN is not allowed for count.`);
-    }
-    if (!isFinite(count)) {
-        throw new error_1.SdJwtError(`Infinite is not allopwed for count.`);
-    }
-    const decoys = [];
-    for (let i = 0; i < count; i++) {
-        const salt = yield saltGenerator();
-        const decoy = yield hasherAndAlgorithm.hasher(salt, hasherAndAlgorithm.algorithm);
-        const encodedDecoy = utils_1.Base64url.encode(decoy);
-        decoys.push(encodedDecoy);
-    }
-    return decoys;
-});
-exports.createDecoys = createDecoys;
-//# sourceMappingURL=decoys.js.map

package/build/sdJwt/decoys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"decoys.js","sourceRoot":"","sources":["../../src/sdJwt/decoys.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,mCAAoC;AACpC,yCAAyC;AAElC,MAAM,YAAY,GAAG,CACxB,KAAa,EACb,aAA4B,EAC5B,kBAAsC,EACxC,EAAE;IACA,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,kBAAU,CAAC,qBAAqB,KAAK,kBAAkB,CAAC,CAAA;IACtE,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,kBAAU,CAAC,+BAA+B,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,kBAAU,CAAC,qCAAqC,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAA;QAClC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,MAAM,CACzC,IAAI,EACJ,kBAAkB,CAAC,SAAS,CAC/B,CAAA;QACD,MAAM,YAAY,GAAG,iBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC7B,CAAC;IACD,OAAO,MAAM,CAAA;AACjB,CAAC,CAAA,CAAA;AA5BY,QAAA,YAAY,gBA4BxB"}

package/build/sdJwt/disclosureFrame.d.ts

@@ -1,8 +0,0 @@
-import { DisclosureFrame } from '../types';
-import { DisclosureWithDigest } from './disclosures';
-import { SaltGenerator } from '../types';
-import type { HasherAndAlgorithm } from '@sd-jwt/types';
-export declare const applyDisclosureFrame: <Payload extends Record<string, unknown> = Record<string, unknown>>(saltGenerator: SaltGenerator, hasherAndAlgorithm: HasherAndAlgorithm, payload: Payload, frame: DisclosureFrame<Payload>, keys?: Array<string>, cleanup?: Array<Array<string>>, disclosures?: Array<DisclosureWithDigest>) => Promise<{
-    payload: Record<string, unknown>;
-    disclosures: Array<DisclosureWithDigest>;
-}>;

package/build/sdJwt/disclosureFrame.js

@@ -1,87 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.applyDisclosureFrame = void 0;
-const utils_1 = require("@sd-jwt/utils");
-const decoys_1 = require("./decoys");
-const disclosures_1 = require("./disclosures");
-const error_1 = require("./error");
-const applyDisclosureFrame = (saltGenerator, hasherAndAlgorithm, payload, frame, keys = [], cleanup = [], disclosures = []) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
-    for (const [key, frameValue] of Object.entries(frame)) {
-        const newKeys = [...keys, key];
-        if (key === '__decoyCount' && typeof frameValue === 'number') {
-            const sd = Array.from((_a = payload._sd) !== null && _a !== void 0 ? _a : []);
-            const decoys = yield (0, decoys_1.createDecoys)(frameValue, saltGenerator, hasherAndAlgorithm);
-            decoys.forEach((digest) => sd.push(digest));
-            // @ts-ignore
-            payload._sd = sd.sort();
-        }
-        else if (typeof frameValue === 'boolean') {
-            if (frameValue === true) {
-                if (!(key in payload)) {
-                    throw new error_1.SdJwtError(`key, ${key}, is not inside the payload (${JSON.stringify(payload)}), but it was supplied inside the frame.`);
-                }
-                const salt = yield saltGenerator();
-                const disclosure = yield new disclosures_1.Disclosure(salt, payload[key], key).withCalculateDigest(hasherAndAlgorithm);
-                disclosures.push(disclosure);
-                const sd = Array.from((_b = payload._sd) !== null && _b !== void 0 ? _b : []);
-                sd.push(disclosure.digest);
-                //@ts-ignore
-                payload._sd = sd.sort();
-                cleanup.push(newKeys);
-            }
-        }
-        else if (typeof frameValue === 'object' &&
-            !Array.isArray(frameValue)) {
-            yield (0, exports.applyDisclosureFrame)(saltGenerator, hasherAndAlgorithm, payload[key], frameValue, newKeys, cleanup, disclosures);
-        }
-        else if (typeof frameValue === 'object' &&
-            Array.isArray(frameValue)) {
-            const payloadArray = payload[key];
-            const frameValueArray = frameValue;
-            if (!Array.isArray(payloadArray)) {
-                throw new error_1.SdJwtError(`Frame expected array, but received ${typeof payload[key]} for key '${key}'.`);
-            }
-            if (frameValueArray.length > payloadArray.length) {
-                throw new error_1.SdJwtError(`Frame array is longer than the payload array for ${key}`);
-            }
-            // Fill the frame with `false` if the payloadArray is longer than the frame value array
-            if (payloadArray.length > frameValueArray.length) {
-                payloadArray.forEach((_, index) => { var _a; return ((_a = frameValueArray[index]) !== null && _a !== void 0 ? _a : (frameValueArray[index] = false)); });
-            }
-            const newPayloadArray = [];
-            for (let i = 0; i < payloadArray.length; i++) {
-                const payloadValue = payloadArray[i];
-                const frameValue = frameValueArray[i];
-                if (frameValue) {
-                    const salt = yield saltGenerator();
-                    const disclosure = yield new disclosures_1.Disclosure(salt, payloadValue).withCalculateDigest(hasherAndAlgorithm);
-                    disclosures.push(disclosure);
-                    newPayloadArray.push({ '...': disclosure.digest });
-                }
-                else {
-                    newPayloadArray.push(payloadValue);
-                }
-            }
-            // @ts-ignore
-            payload[key] = newPayloadArray;
-        }
-        else {
-            throw new error_1.SdJwtError(`Invalid type in frame with key '${key}' and type '${typeof frameValue}'. Only Record<string, unknown>, arrays<boolean> and boolean are allowed.`);
-        }
-    }
-    const payloadClone = Object.assign({}, payload);
-    cleanup.forEach((path) => (0, utils_1.deleteByPath)(payloadClone, path));
-    return { payload: payloadClone, disclosures };
-});
-exports.applyDisclosureFrame = applyDisclosureFrame;
-//# sourceMappingURL=disclosureFrame.js.map

package/build/sdJwt/disclosureFrame.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"disclosureFrame.js","sourceRoot":"","sources":["../../src/sdJwt/disclosureFrame.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,yCAA4C;AAC5C,qCAAuC;AACvC,+CAAgE;AAChE,mCAAoC;AAI7B,MAAM,oBAAoB,GAAG,CAGhC,aAA4B,EAC5B,kBAAsC,EACtC,OAAgB,EAChB,KAA+B,EAC/B,OAAsB,EAAE,EACxB,UAAgC,EAAE,EAClC,cAA2C,EAAE,EAI9C,EAAE;;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAA;QAE9B,IAAI,GAAG,KAAK,cAAc,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,EAAE,GAAkB,KAAK,CAAC,IAAI,CAChC,MAAC,OAAO,CAAC,GAAgB,mCAAI,EAAE,CAClC,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAY,EAC7B,UAAU,EACV,aAAa,EACb,kBAAkB,CACrB,CAAA;YACD,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;YAE3C,aAAa;YACb,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;QAC3B,CAAC;aAAM,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;oBACpB,MAAM,IAAI,kBAAU,CAChB,QAAQ,GAAG,gCAAgC,IAAI,CAAC,SAAS,CACrD,OAAO,CACV,0CAA0C,CAC9C,CAAA;gBACL,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAA;gBAClC,MAAM,UAAU,GAAG,MAAM,IAAI,wBAAU,CACnC,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,EACZ,GAAG,CACN,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAA;gBACzC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBAE5B,MAAM,EAAE,GAAkB,KAAK,CAAC,IAAI,CAChC,MAAC,OAAO,CAAC,GAAgB,mCAAI,EAAE,CAClC,CAAA;gBACD,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;gBAE1B,YAAY;gBACZ,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;gBAEvB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACzB,CAAC;QACL,CAAC;aAAM,IACH,OAAO,UAAU,KAAK,QAAQ;YAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAC5B,CAAC;YACC,MAAM,IAAA,4BAAoB,EACtB,aAAa,EACb,kBAAkB,EAClB,OAAO,CAAC,GAAG,CAAY,EACvB,UAAsC,EACtC,OAAO,EACP,OAAO,EACP,WAAW,CACd,CAAA;QACL,CAAC;aAAM,IACH,OAAO,UAAU,KAAK,QAAQ;YAC9B,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAC3B,CAAC;YACC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAmB,CAAA;YACnD,MAAM,eAAe,GAAG,UAA4B,CAAA;YAEpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,kBAAU,CAChB,sCAAsC,OAAO,OAAO,CAChD,GAAG,CACN,aAAa,GAAG,IAAI,CACxB,CAAA;YACL,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;gBAC/C,MAAM,IAAI,kBAAU,CAChB,oDAAoD,GAAG,EAAE,CAC5D,CAAA;YACL,CAAC;YAED,uFAAuF;YACvF,IAAI,YAAY,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC;gBAC/C,YAAY,CAAC,OAAO,CAChB,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,WAAC,OAAA,OAAC,eAAe,CAAC,KAAK,qCAArB,eAAe,CAAC,KAAK,IAAM,KAAK,EAAC,CAAA,EAAA,CACnD,CAAA;YACL,CAAC;YAED,MAAM,eAAe,GAAuC,EAAE,CAAA;YAE9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;gBACpC,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;gBAErC,IAAI,UAAU,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAA;oBAClC,MAAM,UAAU,GAAG,MAAM,IAAI,wBAAU,CACnC,IAAI,EACJ,YAAY,CACf,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAA;oBACzC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;oBAE5B,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;gBACtD,CAAC;qBAAM,CAAC;oBACJ,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;gBACtC,CAAC;YACL,CAAC;YAED,aAAa;YACb,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,CAAA;QAClC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,kBAAU,CAChB,mCAAmC,GAAG,eAAe,OAAO,UAAU,2EAA2E,CACpJ,CAAA;QACL,CAAC;IACL,CAAC;IAED,MAAM,YAAY,qBAAQ,OAAO,CAAE,CAAA;IACnC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,oBAAY,EAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;IAE3D,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,CAAA;AACjD,CAAC,CAAA,CAAA;AArIY,QAAA,oBAAoB,wBAqIhC"}

package/build/sdJwt/disclosures.d.ts

@@ -1,33 +0,0 @@
-import { AsyncHasher, Hasher, HasherAndAlgorithm } from '@sd-jwt/types';
-import { DisclosureItem } from '../types';
-import { DisclosureWithDigest as DisclosureWithDigestJson, Disclosure as DisclosureJson } from '@sd-jwt/types';
-export type DisclosureWithDigest = Disclosure & {
-    digest: string;
-};
-export declare class Disclosure {
-    #private;
-    private salt;
-    private key?;
-    private value;
-    constructor(salt: string, value: unknown, key?: string);
-    static fromString(s: string): Disclosure;
-    static fromArray(item: DisclosureItem): Disclosure;
-    get encoded(): string;
-    get decoded(): DisclosureItem;
-    get digest(): string | undefined;
-    /**
-     * Set the digest of the disclosure.
-     *
-     * NOTE: this method statically sets the digest, and does not verify whether the digest is correct.
-     * If you want to calculate the digest, use the `withCalculateDigest` method instead.
-     */
-    withDigest(digest: string): DisclosureWithDigest;
-    withCalculateDigest<HasherImplementation extends Hasher | AsyncHasher>(hasherAndAlgorithm: HasherAndAlgorithm<HasherImplementation>, { recalculate }?: {
-        recalculate?: boolean;
-    }): WithCalculateDigestReturnType<HasherImplementation>;
-    toString(): string;
-    asJson(): this extends DisclosureWithDigest ? DisclosureWithDigestJson : DisclosureJson;
-    static fromJson<D extends DisclosureJson | DisclosureWithDigestJson>(disclosureJson: D): D extends DisclosureWithDigestJson ? DisclosureWithDigest : Disclosure;
-}
-export type WithCalculateDigestReturnType<HasherImplementation extends Hasher | AsyncHasher> = ReturnType<HasherImplementation> extends Promise<any> ? Promise<DisclosureWithDigest> : DisclosureWithDigest;
-export declare function isDisclosureWithDigest(disclosure: Disclosure): disclosure is DisclosureWithDigest;

package/build/sdJwt/disclosures.js

@@ -1,114 +0,0 @@
-"use strict";
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
-    if (kind === "m") throw new TypeError("Private method is not writable");
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
-    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-};
-var _Disclosure_digest;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.isDisclosureWithDigest = exports.Disclosure = void 0;
-const decode_1 = require("@sd-jwt/decode");
-const utils_1 = require("@sd-jwt/utils");
-const error_1 = require("./error");
-class Disclosure {
-    constructor(salt, value, key) {
-        _Disclosure_digest.set(this, void 0);
-        if (typeof value === 'number' && isNaN(value)) {
-            throw new error_1.SdJwtError('NaN is not allowed to be used in a disclosure.');
-        }
-        if (typeof value === 'number' && !isFinite(value)) {
-            throw new error_1.SdJwtError('Infinite is not allowed to be used in a disclosure.');
-        }
-        this.salt = salt;
-        this.key = key;
-        this.value = value;
-    }
-    static fromString(s) {
-        const item = utils_1.Base64url.decodeToJson(s);
-        return Disclosure.fromArray(item);
-    }
-    static fromArray(item) {
-        return item[2] === undefined
-            ? new Disclosure(item[0], item[1])
-            : new Disclosure(item[0], item[2], item[1]);
-    }
-    get encoded() {
-        return utils_1.Base64url.encodeFromJson(this.decoded);
-    }
-    get decoded() {
-        return this.key
-            ? [this.salt, this.key, this.value]
-            : [this.salt, this.value];
-    }
-    get digest() {
-        return __classPrivateFieldGet(this, _Disclosure_digest, "f");
-    }
-    /**
-     * Set the digest of the disclosure.
-     *
-     * NOTE: this method statically sets the digest, and does not verify whether the digest is correct.
-     * If you want to calculate the digest, use the `withCalculateDigest` method instead.
-     */
-    withDigest(digest) {
-        __classPrivateFieldSet(this, _Disclosure_digest, digest, "f");
-        return this;
-    }
-    withCalculateDigest(hasherAndAlgorithm, 
-    // Whether to recalculate the digest, even if it is already set
-    { recalculate = false } = {}) {
-        // NOTE: the implementation of this method seems overly complex, but it allows
-        // us to return a promise if the hasher returns a promise, and a value otherwise.
-        // This allows this method to be used in environments where the calling scope
-        // is not async, as long as the hasher is not async either.
-        if (!recalculate && isDisclosureWithDigest(this)) {
-            return this;
-        }
-        const digestResult = (0, decode_1.disclosureCalculateDigest)(this.asJson(), 
-        // TODO: string vs HasherAlgorithm
-        hasherAndAlgorithm.algorithm, hasherAndAlgorithm.hasher);
-        if ((0, utils_1.isPromise)(digestResult)) {
-            return digestResult.then((digest) => {
-                __classPrivateFieldSet(this, _Disclosure_digest, digest, "f");
-                // We know for sure that digest is defined now
-                return this;
-            });
-        }
-        else {
-            __classPrivateFieldSet(this, _Disclosure_digest, digestResult, "f");
-            // We know for sure that digest is defined now
-            return this;
-        }
-    }
-    toString() {
-        return this.encoded;
-    }
-    asJson() {
-        return {
-            encoded: this.encoded,
-            salt: this.salt,
-            value: this.value,
-            key: this.key,
-            digest: this.digest
-        };
-    }
-    static fromJson(disclosureJson) {
-        const disclosure = new Disclosure(disclosureJson.salt, disclosureJson.value, disclosureJson.key);
-        if ('digest' in disclosureJson) {
-            disclosure.withDigest(disclosureJson.digest);
-        }
-        return disclosure;
-    }
-}
-exports.Disclosure = Disclosure;
-_Disclosure_digest = new WeakMap();
-function isDisclosureWithDigest(disclosure) {
-    return disclosure.digest !== undefined;
-}
-exports.isDisclosureWithDigest = isDisclosureWithDigest;
-//# sourceMappingURL=disclosures.js.map

package/build/sdJwt/disclosures.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"disclosures.js","sourceRoot":"","sources":["../../src/sdJwt/disclosures.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA0D;AAO1D,yCAAoD;AAEpD,mCAAoC;AASpC,MAAa,UAAU;IAMnB,YAAmB,IAAY,EAAE,KAAc,EAAE,GAAY;QAF7D,qCAAgB;QAGZ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,kBAAU,CAChB,gDAAgD,CACnD,CAAA;QACL,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,kBAAU,CAChB,qDAAqD,CACxD,CAAA;QACL,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACtB,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,CAAS;QAC9B,MAAM,IAAI,GAAG,iBAAS,CAAC,YAAY,CAAiB,CAAC,CAAC,CAAA;QAEtD,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAEM,MAAM,CAAC,SAAS,CAAC,IAAoB;QACxC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YACxB,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAW,CAAC,CAAA;IAC7D,CAAC;IAED,IAAW,OAAO;QACd,OAAO,iBAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjD,CAAC;IAED,IAAW,OAAO;QACd,OAAO,IAAI,CAAC,GAAG;YACX,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;YACnC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,IAAW,MAAM;QACb,OAAO,uBAAA,IAAI,0BAAQ,CAAA;IACvB,CAAC;IAED;;;;;OAKG;IACI,UAAU,CAAC,MAAc;QAC5B,uBAAA,IAAI,sBAAW,MAAM,MAAA,CAAA;QACrB,OAAO,IAA4B,CAAA;IACvC,CAAC;IAEM,mBAAmB,CAGtB,kBAA4D;IAC5D,+DAA+D;IAC/D,EAAE,WAAW,GAAG,KAAK,KAAgC,EAAE;QAEvD,8EAA8E;QAC9E,iFAAiF;QACjF,6EAA6E;QAC7E,2DAA2D;QAC3D,IAAI,CAAC,WAAW,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAsE,CAAA;QACjF,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,kCAAyB,EAC1C,IAAI,CAAC,MAAM,EAAE;QACb,kCAAkC;QAClC,kBAAkB,CAAC,SAA4B,EAC/C,kBAAkB,CAAC,MAAM,CAC5B,CAAA;QAED,IAAI,IAAA,iBAAS,EAAC,YAAY,CAAC,EAAE,CAAC;YAC1B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAChC,uBAAA,IAAI,sBAAW,MAAM,MAAA,CAAA;gBAErB,8CAA8C;gBAC9C,OAAO,IAAI,CAAA;YACf,CAAC,CAAmE,CAAA;QACxE,CAAC;aAAM,CAAC;YACJ,uBAAA,IAAI,sBAAW,YAAY,MAAA,CAAA;YAE3B,8CAA8C;YAC9C,OAAO,IAAsE,CAAA;QACjF,CAAC;IACL,CAAC;IAEM,QAAQ;QACX,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAEM,MAAM;QACT,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;SAGH,CAAA;IACxB,CAAC;IAEM,MAAM,CAAC,QAAQ,CAClB,cAAiB;QAEjB,MAAM,UAAU,GAAG,IAAI,UAAU,CAC7B,cAAc,CAAC,IAAI,EACnB,cAAc,CAAC,KAAK,EACpB,cAAc,CAAC,GAAG,CACrB,CAAA;QAED,IAAI,QAAQ,IAAI,cAAc,EAAE,CAAC;YAC7B,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAChD,CAAC;QAED,OAAO,UAES,CAAA;IACpB,CAAC;CACJ;AAnID,gCAmIC;;AAQD,SAAgB,sBAAsB,CAClC,UAAsB;IAEtB,OAAO,UAAU,CAAC,MAAM,KAAK,SAAS,CAAA;AAC1C,CAAC;AAJD,wDAIC"}

package/build/sdJwt/error.d.ts

@@ -1,2 +0,0 @@
-export declare class SdJwtError extends Error {
-}

package/build/sdJwt/error.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SdJwtError = void 0;
-class SdJwtError extends Error {
-}
-exports.SdJwtError = SdJwtError;
-//# sourceMappingURL=error.js.map

package/build/sdJwt/error.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/sdJwt/error.ts"],"names":[],"mappings":";;;AAAA,MAAa,UAAW,SAAQ,KAAK;CAAG;AAAxC,gCAAwC"}

package/build/sdJwt/index.d.ts

@@ -1,6 +0,0 @@
-export * from './error';
-export * from './sdJwt';
-export * from './disclosures';
-export * from './decoys';
-export * from './disclosureFrame';
-export * from './types';

package/build/sdJwt/index.js

@@ -1,23 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./error"), exports);
-__exportStar(require("./sdJwt"), exports);
-__exportStar(require("./disclosures"), exports);
-__exportStar(require("./decoys"), exports);
-__exportStar(require("./disclosureFrame"), exports);
-__exportStar(require("./types"), exports);
-//# sourceMappingURL=index.js.map

package/build/sdJwt/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sdJwt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAuB;AACvB,0CAAuB;AACvB,gDAA6B;AAC7B,2CAAwB;AACxB,oDAAiC;AACjC,0CAAuB"}