@sd-jwt/decode 0.2.1 → 2.0.2-next.26

package/src/test/decode.spec.ts

@@ -0,0 +1,150 @@
+import { describe, expect, test } from 'vitest';
+import {
+  decodeJwt,
+  decodeSdJwt,
+  decodeSdJwtSync,
+  getClaims,
+  getClaimsSync,
+  splitSdJwt,
+} from '../decode';
+import { digest } from '@sd-jwt/crypto-nodejs';
+
+describe('decode tests', () => {
+  test('decode jwt', () => {
+    const jwt =
+      'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';
+    const { header, payload, signature } = decodeJwt(jwt);
+    expect(signature).toBeDefined();
+    expect(header).toStrictEqual({ alg: 'HS256', typ: 'JWT' });
+    expect(payload).toStrictEqual({
+      sub: '1234567890',
+      name: 'John Doe',
+      iat: 1516239022,
+    });
+  });
+
+  test('decode jwt with invalid input', () => {
+    const jwt = 'invalid.invalid';
+    expect(() => decodeJwt(jwt)).toThrow('Invalid JWT as input');
+  });
+
+  test('split sdjwt', () => {
+    const sdjwt = 'h.p.s~d1~d2~';
+    const { jwt, disclosures, kbJwt } = splitSdJwt(sdjwt);
+    expect(jwt).toBe('h.p.s');
+    expect(disclosures).toStrictEqual(['d1', 'd2']);
+    expect(kbJwt).toBeUndefined();
+  });
+
+  test('split sdjwt with kbjwt', () => {
+    const sdjwt = 'h.p.s~d1~d2~kbh.kbp.kbs';
+    const { jwt, disclosures, kbJwt } = splitSdJwt(sdjwt);
+    expect(jwt).toBe('h.p.s');
+    expect(disclosures).toStrictEqual(['d1', 'd2']);
+    expect(kbJwt).toBe('kbh.kbp.kbs');
+  });
+
+  test('decode sdjwt', async () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJfc2QiOlsiaWQ1azZ1ZVplVTY4bExaMlU2YjJJbF9QR3ZKb1RDMlpkMkpwY0RwMzFIWSJdLCJfc2RfYWxnIjoic2hhLTI1NiJ9.GiLF_HhacrstqCJ223VvWOoJJWU8qk4dYQHklSMwxv36pPF_7ER53Wbty1qYRlQ6NeMUdBRRdj9JQLLCzz1gCQ~WyI2NTMxNDA2ZmVhZmU0YjBmIiwiZm9vIiwiYmFyIl0~';
+    const decodedSdJwt = await decodeSdJwt(sdjwt, digest);
+    expect(decodedSdJwt).toBeDefined();
+    expect(decodedSdJwt.kbJwt).toBeUndefined();
+    expect(decodedSdJwt.disclosures.length).toEqual(1);
+    expect(decodedSdJwt.jwt).toBeDefined();
+  });
+
+  test('decode jwt', async () => {
+    const jwt =
+      'eyJhbGciOiJIUzI1NiIsInR5cCI6InNkK2p3dCJ9.eyJsYXN0bmFtZSI6IkRvZSIsInNzbiI6IjEyMy00NS02Nzg5IiwiX3NkIjpbIk4yUXhZV1UxTlRnME1qQmpOR1JpWVRCaU1tRmtaamN5WXpSbFpXUmhaRGd5WkRCbE1qaGhZVGcwTnpJMU9XSXpZek5qWkdNNE1qZG1NVGN6TmpZd05RIiwiWlRSalkyUTVOemRoWkRVM05tWTFZV0UyTmpka01XVmpNRE16WXpOak5qQmtNak5pT0dZelpHSTBOelV4TURsak9EWTRNREEzWm1JeFpUY3daREZqTmciXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.mX14Sw86xy8NFQta7tCfNmhVCqzfaJ_K3VEIhTjbLDY';
+    const decodedSdJwt = await decodeSdJwt(jwt, digest);
+    expect(decodedSdJwt).toBeDefined();
+    expect(decodedSdJwt.kbJwt).toBeUndefined();
+    expect(decodedSdJwt.disclosures.length).toEqual(0);
+    expect(decodedSdJwt.jwt).toBeDefined();
+  });
+
+  test('decode sdjwt sync', () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJfc2QiOlsiaWQ1azZ1ZVplVTY4bExaMlU2YjJJbF9QR3ZKb1RDMlpkMkpwY0RwMzFIWSJdLCJfc2RfYWxnIjoic2hhLTI1NiJ9.GiLF_HhacrstqCJ223VvWOoJJWU8qk4dYQHklSMwxv36pPF_7ER53Wbty1qYRlQ6NeMUdBRRdj9JQLLCzz1gCQ~WyI2NTMxNDA2ZmVhZmU0YjBmIiwiZm9vIiwiYmFyIl0~';
+    const decodedSdJwt = decodeSdJwtSync(sdjwt, digest);
+    expect(decodedSdJwt).toBeDefined();
+    expect(decodedSdJwt.kbJwt).toBeUndefined();
+    expect(decodedSdJwt.disclosures.length).toEqual(1);
+    expect(decodedSdJwt.jwt).toBeDefined();
+  });
+
+  test('decode jwt sync', () => {
+    const jwt =
+      'eyJhbGciOiJIUzI1NiIsInR5cCI6InNkK2p3dCJ9.eyJsYXN0bmFtZSI6IkRvZSIsInNzbiI6IjEyMy00NS02Nzg5IiwiX3NkIjpbIk4yUXhZV1UxTlRnME1qQmpOR1JpWVRCaU1tRmtaamN5WXpSbFpXUmhaRGd5WkRCbE1qaGhZVGcwTnpJMU9XSXpZek5qWkdNNE1qZG1NVGN6TmpZd05RIiwiWlRSalkyUTVOemRoWkRVM05tWTFZV0UyTmpka01XVmpNRE16WXpOak5qQmtNak5pT0dZelpHSTBOelV4TURsak9EWTRNREEzWm1JeFpUY3daREZqTmciXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.mX14Sw86xy8NFQta7tCfNmhVCqzfaJ_K3VEIhTjbLDY';
+    const decodedSdJwt = decodeSdJwtSync(jwt, digest);
+    expect(decodedSdJwt).toBeDefined();
+    expect(decodedSdJwt.kbJwt).toBeUndefined();
+    expect(decodedSdJwt.disclosures.length).toEqual(0);
+    expect(decodedSdJwt.jwt).toBeDefined();
+  });
+
+  test('get claims', async () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJfc2QiOlsiaWQ1azZ1ZVplVTY4bExaMlU2YjJJbF9QR3ZKb1RDMlpkMkpwY0RwMzFIWSJdLCJfc2RfYWxnIjoic2hhLTI1NiJ9.GiLF_HhacrstqCJ223VvWOoJJWU8qk4dYQHklSMwxv36pPF_7ER53Wbty1qYRlQ6NeMUdBRRdj9JQLLCzz1gCQ~WyI2NTMxNDA2ZmVhZmU0YjBmIiwiZm9vIiwiYmFyIl0~';
+    const decodedSdJwt = await decodeSdJwt(sdjwt, digest);
+    const claims = await getClaims(
+      decodedSdJwt.jwt.payload,
+      decodedSdJwt.disclosures,
+      digest,
+    );
+    expect(claims).toStrictEqual({
+      foo: 'bar',
+    });
+  });
+
+  test('getClaims #2', async () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJ0ZXN0Ijp7Il9zZCI6WyJqVEszMHNleDZhYV9kUk1KSWZDR056Q0FwbVB5MzRRNjNBa3QzS3hhSktzIl19LCJfc2QiOlsiME9nMi1ReG95eW1UOGNnVzZZUjVSSFpQLUJuR2tHUi1NM2otLV92RWlzSSIsIkcwZ3lHNnExVFMyUlQxMkZ3X2RRRDVVcjlZc1AwZlVWOXVtQWdGMC1jQ1EiXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.ggEyE4SeDO2Hu3tol3VLmi7NQj56yKzKQDaafocgkLrUBdivghohtzrfcbrMN7CRufJ_Cnh0EL54kymXLGTdDQ~WyIwNGU0MjAzOWU4ZWFiOWRjIiwiYSIsIjEiXQ~WyIwOGE1Yjc5MjMyYjAzYzBhIiwiMSJd~WyJiNWE2YjUzZGQwYTFmMGIwIiwienp6IiwieHh4Il0~WyIxYzdmOTE4ZTE0MjA2NzZiIiwiZm9vIiwiYmFyIl0~WyJmZjYxYzQ5ZGU2NjFiYzMxIiwiYXJyIixbeyIuLi4iOiJTSG96VW5KNUpkd0ZtTjVCbXB5dXZCWGZfZWRjckVvcExPYThTVlBFUmg0In0sIjIiLHsiX3NkIjpbIkpuODNhZkp0OGx4NG1FMzZpRkZyS2U2R2VnN0dlVUQ4Z3UwdVo3NnRZcW8iXX1dXQ~';
+    const decodedSdJwt = await decodeSdJwt(sdjwt, digest);
+    const claims = await getClaims(
+      decodedSdJwt.jwt.payload,
+      decodedSdJwt.disclosures,
+      digest,
+    );
+    expect(claims).toStrictEqual({
+      foo: 'bar',
+      arr: ['1', '2', { a: '1' }],
+      test: {
+        zzz: 'xxx',
+      },
+    });
+  });
+
+  test('get claims sync', () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJfc2QiOlsiaWQ1azZ1ZVplVTY4bExaMlU2YjJJbF9QR3ZKb1RDMlpkMkpwY0RwMzFIWSJdLCJfc2RfYWxnIjoic2hhLTI1NiJ9.GiLF_HhacrstqCJ223VvWOoJJWU8qk4dYQHklSMwxv36pPF_7ER53Wbty1qYRlQ6NeMUdBRRdj9JQLLCzz1gCQ~WyI2NTMxNDA2ZmVhZmU0YjBmIiwiZm9vIiwiYmFyIl0~';
+    const decodedSdJwt = decodeSdJwtSync(sdjwt, digest);
+    const claims = getClaimsSync(
+      decodedSdJwt.jwt.payload,
+      decodedSdJwt.disclosures,
+      digest,
+    );
+    expect(claims).toStrictEqual({
+      foo: 'bar',
+    });
+  });
+
+  test('getClaims sync #2', () => {
+    const sdjwt =
+      'eyJ0eXAiOiJzZC1qd3QiLCJhbGciOiJFZERTQSJ9.eyJ0ZXN0Ijp7Il9zZCI6WyJqVEszMHNleDZhYV9kUk1KSWZDR056Q0FwbVB5MzRRNjNBa3QzS3hhSktzIl19LCJfc2QiOlsiME9nMi1ReG95eW1UOGNnVzZZUjVSSFpQLUJuR2tHUi1NM2otLV92RWlzSSIsIkcwZ3lHNnExVFMyUlQxMkZ3X2RRRDVVcjlZc1AwZlVWOXVtQWdGMC1jQ1EiXSwiX3NkX2FsZyI6InNoYS0yNTYifQ.ggEyE4SeDO2Hu3tol3VLmi7NQj56yKzKQDaafocgkLrUBdivghohtzrfcbrMN7CRufJ_Cnh0EL54kymXLGTdDQ~WyIwNGU0MjAzOWU4ZWFiOWRjIiwiYSIsIjEiXQ~WyIwOGE1Yjc5MjMyYjAzYzBhIiwiMSJd~WyJiNWE2YjUzZGQwYTFmMGIwIiwienp6IiwieHh4Il0~WyIxYzdmOTE4ZTE0MjA2NzZiIiwiZm9vIiwiYmFyIl0~WyJmZjYxYzQ5ZGU2NjFiYzMxIiwiYXJyIixbeyIuLi4iOiJTSG96VW5KNUpkd0ZtTjVCbXB5dXZCWGZfZWRjckVvcExPYThTVlBFUmg0In0sIjIiLHsiX3NkIjpbIkpuODNhZkp0OGx4NG1FMzZpRkZyS2U2R2VnN0dlVUQ4Z3UwdVo3NnRZcW8iXX1dXQ~';
+    const decodedSdJwt = decodeSdJwtSync(sdjwt, digest);
+    const claims = getClaimsSync(
+      decodedSdJwt.jwt.payload,
+      decodedSdJwt.disclosures,
+      digest,
+    );
+    expect(claims).toStrictEqual({
+      foo: 'bar',
+      arr: ['1', '2', { a: '1' }],
+      test: {
+        zzz: 'xxx',
+      },
+    });
+  });
+});

package/tsconfig.json

@@ -0,0 +1,7 @@
+{
+  "extends": "../../tsconfig.json",
+  "compilerOptions": {
+    "rootDir": "src",
+    "outDir": "dist"
+  }
+}

package/vitest.config.mts

@@ -0,0 +1,4 @@
+// vite.config.ts
+import { allEnvs } from '../../vitest.shared';
+
+export default allEnvs;

package/README.md

@@ -1,97 +0,0 @@
-# Selective Disclosure JWT (SD-JWT) Draft 06 & Selective Disclosure JWT VC 01
-
-## Compliant with
-
--   [sd-jwt
-    06](https://datatracker.ietf.org/doc/draft-ietf-oauth-selective-disclosure-jwt/06/)
--   [sd-jwt-vc
-    01](https://datatracker.ietf.org/doc/draft-ietf-oauth-sd-jwt-vc/01/)
-
-## Design decisions
-
-### Bring your own crypto
-
-This library does not provide any of the cryptographic primitives required for
-encryption, decryption, signing, verification and hashing. It is expected that
-the user of this library provides this. The main reason for this is that most
-libraries have their own library and KMS. Providing private keys to this
-library adds another layer of insecurity which should be avoided. Hashing has
-not been added for platform compatibility between node,js, browser and React
-Native. In the future a platform-independent sha2-256 may be provided.
-
-### Specification backwards compatibility
-
-Since these specifications are in early drafts, no time will be spend in
-supporting earlier versions of the specifications. This library may work for
-older versions, e.g. the addition of selectively disclosable items in an array
-does not break previous implementations. Once a non-draft specification is
-released it will stay up-to-date with that version.
-
-### Dependencies
-
-This library only has one dependency on `buffer` which makes sure this library
-works in Node.js, the browser and React Native. Buffer is used internally for
-`base64-url-no-pad` encoding.
-
-### Usage
-
-I'd highly recommend to check out the [examples folder](example) to see how
-this library can be leveraged.
-
-### Issuance API
-
-The issuance API takes an object called a `disclosureFrame`. This
-`disclosureFrame` is a Boolean Map of the payload which allows you to specify
-which attributes of the payload may be selectively disclosed. If an attribute is not provided in the `disclosureFrame`, it will be included in the clear-text payload. For example:
-
-```jsonc
-// The payload
-{
-    "iss": "https://example.org/issuer",
-    "is_age_over_21": true,
-    "is_age_over_24": true,
-    "is_age_over_65": false,
-    "date_of_birth": "1990-01-01",
-    "address": {
-        "street": "some street",
-        "house_number": 200,
-        "zipcode": "2344GH"
-    }
-}
-```
-
-```jsonc
-// The disclosure frame
-{
-    "is_age_over_21": true,
-    "is_age_over_24": true,
-    "is_age_over_65": true,
-    "date_of_birth": true,
-    "address": {
-        "street": true,
-        "house_number": true,
-        "zipcode": true
-    }
-}
-
-// or to only disclose the address as a group
-{
-    "is_age_over_21": true,
-    "is_age_over_24": true,
-    "is_age_over_65": true,
-    "date_of_birth": true,
-    "address": true
-}
-```
-
-### Presentation and verification API
-
-Since there is officially standardized way to request and present a
-presentation, [High Assurance Interoperability
-Profile](https://vcstuff.github.io/oid4vc-haip-sd-jwt-vc/draft-oid4vc-haip-sd-jwt-vc.html)
-may be used, the API is defined in a way which works in a primitive manner for
-now. For example, to present you can provide a list of indices of the
-disclosures which will be included. Examples of this can be found in the
-[examples folder](example). For verification a list of keys or required
-claims can be provided. It does not matter whether these are selectively
-disclosable claims, or if they are included inside the payload.

package/build/disclosures/calculateDigest.d.ts

@@ -1,4 +0,0 @@
-import type { AsyncHasher, Hasher, HasherAlgorithm } from '@sd-jwt/types';
-import type { Disclosure } from '@sd-jwt/types';
-export type CalculateDigestReturnType<HasherImplementation extends Hasher | AsyncHasher> = ReturnType<HasherImplementation> extends Promise<any> ? Promise<string> : string;
-export declare const disclosureCalculateDigest: <HI extends Hasher | AsyncHasher>(disclosure: Disclosure, algorithm: HasherAlgorithm, hasher: HI) => CalculateDigestReturnType<HI>;

package/build/disclosures/calculateDigest.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.disclosureCalculateDigest = void 0;
-const utils_1 = require("@sd-jwt/utils");
-const toArray_1 = require("./toArray");
-const disclosureCalculateDigest = (disclosure, algorithm, hasher) => {
-    const encoded = utils_1.Base64url.encodeFromJson((0, toArray_1.disclosureToArray)(disclosure));
-    const digest = hasher(encoded, algorithm);
-    return ((0, utils_1.isPromise)(digest)
-        ? digest.then(utils_1.Base64url.encode)
-        : utils_1.Base64url.encode(digest));
-};
-exports.disclosureCalculateDigest = disclosureCalculateDigest;
-//# sourceMappingURL=calculateDigest.js.map

package/build/disclosures/calculateDigest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"calculateDigest.js","sourceRoot":"","sources":["../../src/disclosures/calculateDigest.ts"],"names":[],"mappings":";;;AAEA,yCAAoD;AACpD,uCAA6C;AAQtC,MAAM,yBAAyB,GAAG,CACrC,UAAsB,EACtB,SAA0B,EAC1B,MAAU,EACmB,EAAE;IAC/B,MAAM,OAAO,GAAG,iBAAS,CAAC,cAAc,CAAC,IAAA,2BAAiB,EAAC,UAAU,CAAC,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAEzC,OAAO,CACH,IAAA,iBAAS,EAAC,MAAM,CAAC;QACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAS,CAAC,MAAM,CAAC;QAC/B,CAAC,CAAC,iBAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CACA,CAAA;AACtC,CAAC,CAAA;AAbY,QAAA,yBAAyB,6BAarC"}

package/build/disclosures/decodePayload.d.ts

@@ -1,2 +0,0 @@
-import { DisclosureWithDigest } from '@sd-jwt/types';
-export declare function decodeDisclosuresInPayload(payload: Record<string, unknown>, disclosures: Array<DisclosureWithDigest>, newPayload?: Record<string, unknown>): Record<string, unknown>;

package/build/disclosures/decodePayload.js

@@ -1,75 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.decodeDisclosuresInPayload = void 0;
-function decodeDisclosuresInPayload(payload, disclosures, newPayload = {}) {
-    const entries = Object.entries(payload);
-    // Loop over de payload
-    for (let i = 0; i < entries.length; i++) {
-        const [key, value] = entries[i];
-        // See whether we have an `_sd` key with an array of disclosures.
-        const foundDisclosures = shouldInsertDisclosure(key, value, disclosures);
-        // Add the disclosed items to the pretty payload
-        foundDisclosures.forEach((d) => {
-            newPayload[d.key] = d.value;
-        });
-        // Skip the rest as  `_sd` is a special case
-        if (key === '_sd') {
-            continue;
-        }
-        // Include all the primitive claims into the new payload
-        if (shouldIncludeCleartextClaim(key, value)) {
-            newPayload[key] = value;
-            continue;
-        }
-        if (typeof value === 'object' && Array.isArray(value)) {
-            newPayload[key] = swapClaimsInsideArray(value, disclosures);
-            continue;
-        }
-        if (typeof value === 'object' &&
-            value !== null &&
-            !Array.isArray(value)) {
-            newPayload[key] = decodeDisclosuresInPayload(value, disclosures);
-        }
-    }
-    return newPayload;
-}
-exports.decodeDisclosuresInPayload = decodeDisclosuresInPayload;
-function swapClaimsInsideArray(array, disclosures) {
-    const processedArray = [];
-    for (const el of array) {
-        if (typeof el === 'object' && el !== null && '...' in el) {
-            const hash = el['...'];
-            let disclosureFound = false;
-            let disclosureValue;
-            disclosureLoop: for (const d of disclosures) {
-                if (d.digest === hash && d.key === undefined) {
-                    disclosureValue = d.value;
-                    disclosureFound = true;
-                    break disclosureLoop;
-                }
-            }
-            processedArray.push(disclosureFound ? disclosureValue : el);
-        }
-        else {
-            processedArray.push(el);
-        }
-    }
-    return processedArray;
-}
-function shouldInsertDisclosure(key, value, disclosures) {
-    if (key !== '_sd')
-        return [];
-    if (!Array.isArray(value))
-        return [];
-    const filteredDisclosures = [];
-    for (const d of disclosures) {
-        if (value.includes(d.digest)) {
-            filteredDisclosures.push(d);
-        }
-    }
-    return filteredDisclosures;
-}
-function shouldIncludeCleartextClaim(key, value) {
-    return key !== '_sd' && key !== '_sd_alg' && typeof value !== 'object';
-}
-//# sourceMappingURL=decodePayload.js.map

package/build/disclosures/decodePayload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"decodePayload.js","sourceRoot":"","sources":["../../src/disclosures/decodePayload.ts"],"names":[],"mappings":";;;AAEA,SAAgB,0BAA0B,CACtC,OAAgC,EAChC,WAAwC,EACxC,aAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvC,uBAAuB;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QAE/B,iEAAiE;QACjE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;QAExE,gDAAgD;QAChD,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,UAAU,CAAC,CAAC,CAAC,GAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAA;QACzC,CAAC,CAAC,CAAA;QAEF,4CAA4C;QAC5C,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAChB,SAAQ;QACZ,CAAC;QAED,wDAAwD;QACxD,IAAI,2BAA2B,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACvB,SAAQ;QACZ,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,UAAU,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YAC3D,SAAQ;QACZ,CAAC;QAED,IACI,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACvB,CAAC;YACC,UAAU,CAAC,GAAG,CAAC,GAAG,0BAA0B,CACxC,KAAgC,EAChC,WAAW,CACd,CAAA;QACL,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAA;AACrB,CAAC;AAhDD,gEAgDC;AAED,SAAS,qBAAqB,CAC1B,KAAyC,EACzC,WAAwC;IAExC,MAAM,cAAc,GAAG,EAAE,CAAA;IAEzB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACrB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;YACtB,IAAI,eAAe,GAAG,KAAK,CAAA;YAC3B,IAAI,eAAe,CAAA;YAEnB,cAAc,EAAE,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC3C,eAAe,GAAG,CAAC,CAAC,KAAK,CAAA;oBACzB,eAAe,GAAG,IAAI,CAAA;oBACtB,MAAM,cAAc,CAAA;gBACxB,CAAC;YACL,CAAC;YAED,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC/D,CAAC;aAAM,CAAC;YACJ,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3B,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAA;AACzB,CAAC;AAED,SAAS,sBAAsB,CAC3B,GAAW,EACX,KAAc,EACd,WAAwC;IAExC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,CAAA;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEpC,MAAM,mBAAmB,GAAG,EAAE,CAAA;IAE9B,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,CAAC;IACL,CAAC;IAED,OAAO,mBAAmB,CAAA;AAC9B,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW,EAAE,KAAc;IAC5D,OAAO,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAA;AAC1E,CAAC"}

package/build/disclosures/fromArray.d.ts

@@ -1,2 +0,0 @@
-import { Disclosure, DisclosureArray } from '@sd-jwt/types';
-export declare const disclosureFromArray: (a: DisclosureArray) => Omit<Disclosure, 'encoded'>;

package/build/disclosures/fromArray.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.disclosureFromArray = void 0;
-const disclosureFromArray = (a) => a[2]
-    ? { salt: a[0], key: a[1], value: a[2] }
-    : { salt: a[0], value: a[1] };
-exports.disclosureFromArray = disclosureFromArray;
-//# sourceMappingURL=fromArray.js.map

package/build/disclosures/fromArray.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fromArray.js","sourceRoot":"","sources":["../../src/disclosures/fromArray.ts"],"names":[],"mappings":";;;AAEO,MAAM,mBAAmB,GAAG,CAC/B,CAAkB,EACS,EAAE,CAC7B,CAAC,CAAC,CAAC,CAAC;IACA,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;IAClD,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AALxB,QAAA,mBAAmB,uBAKK"}

package/build/disclosures/fromString.d.ts

@@ -1,2 +0,0 @@
-import type { Disclosure } from '@sd-jwt/types';
-export declare const disclosureFromString: (s: string) => Disclosure;

package/build/disclosures/fromString.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.disclosureFromString = void 0;
-const utils_1 = require("@sd-jwt/utils");
-const fromArray_1 = require("./fromArray");
-const disclosureFromString = (s) => {
-    const item = utils_1.Base64url.decodeToJson(s);
-    return Object.assign(Object.assign({}, (0, fromArray_1.disclosureFromArray)(item)), { encoded: s });
-};
-exports.disclosureFromString = disclosureFromString;
-//# sourceMappingURL=fromString.js.map

package/build/disclosures/fromString.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fromString.js","sourceRoot":"","sources":["../../src/disclosures/fromString.ts"],"names":[],"mappings":";;;AACA,yCAAyC;AACzC,2CAAiD;AAE1C,MAAM,oBAAoB,GAAG,CAAC,CAAS,EAAc,EAAE;IAC1D,MAAM,IAAI,GAAG,iBAAS,CAAC,YAAY,CAAkB,CAAC,CAAC,CAAA;IACvD,uCAAY,IAAA,+BAAmB,EAAC,IAAI,CAAC,KAAE,OAAO,EAAE,CAAC,IAAE;AACvD,CAAC,CAAA;AAHY,QAAA,oBAAoB,wBAGhC"}

package/build/disclosures/index.d.ts

@@ -1,5 +0,0 @@
-export * from './toArray';
-export * from './fromArray';
-export * from './fromString';
-export * from './calculateDigest';
-export * from './decodePayload';

package/build/disclosures/index.js

@@ -1,22 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./toArray"), exports);
-__exportStar(require("./fromArray"), exports);
-__exportStar(require("./fromString"), exports);
-__exportStar(require("./calculateDigest"), exports);
-__exportStar(require("./decodePayload"), exports);
-//# sourceMappingURL=index.js.map

package/build/disclosures/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/disclosures/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAAyB;AACzB,8CAA2B;AAC3B,+CAA4B;AAC5B,oDAAiC;AACjC,kDAA+B"}

package/build/disclosures/toArray.d.ts

@@ -1,2 +0,0 @@
-import { Disclosure, DisclosureArray } from '@sd-jwt/types';
-export declare const disclosureToArray: (d: Disclosure) => DisclosureArray;

package/build/disclosures/toArray.js

@@ -1,6 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.disclosureToArray = void 0;
-const disclosureToArray = (d) => d.key ? [d.salt, d.key, d.value] : [d.salt, d.value];
-exports.disclosureToArray = disclosureToArray;
-//# sourceMappingURL=toArray.js.map

package/build/disclosures/toArray.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"toArray.js","sourceRoot":"","sources":["../../src/disclosures/toArray.ts"],"names":[],"mappings":";;;AAEO,MAAM,iBAAiB,GAAG,CAAC,CAAa,EAAmB,EAAE,CAChE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;AAD3C,QAAA,iBAAiB,qBAC0B"}

package/build/index.d.ts

@@ -1,5 +0,0 @@
-export { jwtFromCompact } from './jwt';
-export { sdJwtFromCompact } from './sdJwt';
-export { decodeSdJwtVc, sdJwtVcFromCompact } from './sdJwtVc';
-export { keyBindingFromCompact, calculateSdHash } from './keyBinding';
-export { disclosureCalculateDigest, disclosureToArray, disclosureFromArray, disclosureFromString, decodeDisclosuresInPayload } from './disclosures';

package/build/index.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.decodeDisclosuresInPayload = exports.disclosureFromString = exports.disclosureFromArray = exports.disclosureToArray = exports.disclosureCalculateDigest = exports.calculateSdHash = exports.keyBindingFromCompact = exports.sdJwtVcFromCompact = exports.decodeSdJwtVc = exports.sdJwtFromCompact = exports.jwtFromCompact = void 0;
-var jwt_1 = require("./jwt");
-Object.defineProperty(exports, "jwtFromCompact", { enumerable: true, get: function () { return jwt_1.jwtFromCompact; } });
-var sdJwt_1 = require("./sdJwt");
-Object.defineProperty(exports, "sdJwtFromCompact", { enumerable: true, get: function () { return sdJwt_1.sdJwtFromCompact; } });
-var sdJwtVc_1 = require("./sdJwtVc");
-Object.defineProperty(exports, "decodeSdJwtVc", { enumerable: true, get: function () { return sdJwtVc_1.decodeSdJwtVc; } });
-Object.defineProperty(exports, "sdJwtVcFromCompact", { enumerable: true, get: function () { return sdJwtVc_1.sdJwtVcFromCompact; } });
-var keyBinding_1 = require("./keyBinding");
-Object.defineProperty(exports, "keyBindingFromCompact", { enumerable: true, get: function () { return keyBinding_1.keyBindingFromCompact; } });
-Object.defineProperty(exports, "calculateSdHash", { enumerable: true, get: function () { return keyBinding_1.calculateSdHash; } });
-var disclosures_1 = require("./disclosures");
-Object.defineProperty(exports, "disclosureCalculateDigest", { enumerable: true, get: function () { return disclosures_1.disclosureCalculateDigest; } });
-Object.defineProperty(exports, "disclosureToArray", { enumerable: true, get: function () { return disclosures_1.disclosureToArray; } });
-Object.defineProperty(exports, "disclosureFromArray", { enumerable: true, get: function () { return disclosures_1.disclosureFromArray; } });
-Object.defineProperty(exports, "disclosureFromString", { enumerable: true, get: function () { return disclosures_1.disclosureFromString; } });
-Object.defineProperty(exports, "decodeDisclosuresInPayload", { enumerable: true, get: function () { return disclosures_1.decodeDisclosuresInPayload; } });
-//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,6BAAsC;AAA7B,qGAAA,cAAc,OAAA;AACvB,iCAA0C;AAAjC,yGAAA,gBAAgB,OAAA;AACzB,qCAA6D;AAApD,wGAAA,aAAa,OAAA;AAAE,6GAAA,kBAAkB,OAAA;AAC1C,2CAAqE;AAA5D,mHAAA,qBAAqB,OAAA;AAAE,6GAAA,eAAe,OAAA;AAE/C,6CAMsB;AALlB,wHAAA,yBAAyB,OAAA;AACzB,gHAAA,iBAAiB,OAAA;AACjB,kHAAA,mBAAmB,OAAA;AACnB,mHAAA,oBAAoB,OAAA;AACpB,yHAAA,0BAA0B,OAAA"}

package/build/jwt/fromCompact.d.ts

@@ -1,5 +0,0 @@
-export declare const jwtFromCompact: <Header extends Record<string, unknown> = Record<string, unknown>, Payload extends Record<string, unknown> = Record<string, unknown>>(compact: string) => {
-    header: Header;
-    payload: Payload;
-    signature: Uint8Array;
-};

package/build/jwt/fromCompact.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.jwtFromCompact = void 0;
-const utils_1 = require("@sd-jwt/utils");
-const jwtFromCompact = (compact) => {
-    if (compact.includes('~')) {
-        throw new Error('compact JWT includes `~` which is only allowed in an sd-jwt. Please use sdJwtFromCompact() instead.');
-    }
-    if ((compact.match(/\./g) || []).length !== 2) {
-        throw new Error('compact JWT must include two periods (.)');
-    }
-    const [compactHeader, compactPayload, encodedSignature] = compact.split('.');
-    if (!encodedSignature || encodedSignature.length === 0) {
-        throw new Error('A signature must be provided within the context of sd-jwt');
-    }
-    const header = utils_1.Base64url.decodeToJson(compactHeader);
-    const payload = utils_1.Base64url.decodeToJson(compactPayload);
-    const signature = utils_1.Base64url.decode(encodedSignature);
-    return {
-        header,
-        payload,
-        signature
-    };
-};
-exports.jwtFromCompact = jwtFromCompact;
-//# sourceMappingURL=fromCompact.js.map

package/build/jwt/fromCompact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fromCompact.js","sourceRoot":"","sources":["../../src/jwt/fromCompact.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AAElC,MAAM,cAAc,GAAG,CAI1B,OAAe,EACjB,EAAE;IACA,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACX,qGAAqG,CACxG,CAAA;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE5E,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACX,2DAA2D,CAC9D,CAAA;IACL,CAAC;IAED,MAAM,MAAM,GAAG,iBAAS,CAAC,YAAY,CAAS,aAAa,CAAC,CAAA;IAC5D,MAAM,OAAO,GAAG,iBAAS,CAAC,YAAY,CAAU,cAAc,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,iBAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAEpD,OAAO;QACH,MAAM;QACN,OAAO;QACP,SAAS;KACZ,CAAA;AACL,CAAC,CAAA;AAjCY,QAAA,cAAc,kBAiC1B"}

package/build/jwt/index.d.ts

@@ -1 +0,0 @@
-export * from './fromCompact';

package/build/jwt/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./fromCompact"), exports);
-//# sourceMappingURL=index.js.map

package/build/jwt/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/jwt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA6B"}

package/build/keyBinding/assertValid.js

@@ -1,2 +0,0 @@
-"use strict";
-//# sourceMappingURL=assertValid.js.map

package/build/keyBinding/assertValid.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assertValid.js","sourceRoot":"","sources":["../../src/keyBinding/assertValid.ts"],"names":[],"mappings":""}

package/build/keyBinding/fromCompact.d.ts

@@ -1,5 +0,0 @@
-export declare const keyBindingFromCompact: <Header extends Record<string, unknown> = Record<string, unknown>, Payload extends Record<string, unknown> = Record<string, unknown>>(compact: string) => {
-    header: Header;
-    payload: Payload;
-    signature: Uint8Array;
-};

package/build/keyBinding/fromCompact.js

@@ -1,24 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.keyBindingFromCompact = void 0;
-const utils_1 = require("@sd-jwt/utils");
-const jwt_1 = require("../jwt");
-const keyBindingFromCompact = (compact) => {
-    const jwt = (0, jwt_1.jwtFromCompact)(compact);
-    try {
-        (0, utils_1.assertClaimInObject)(jwt.header, 'typ', 'kb+jwt');
-        (0, utils_1.assertClaimInObject)(jwt.header, 'alg');
-        (0, utils_1.assertClaimInObject)(jwt.payload, 'iat');
-        (0, utils_1.assertClaimInObject)(jwt.payload, 'nonce');
-        (0, utils_1.assertClaimInObject)(jwt.payload, 'aud');
-    }
-    catch (e) {
-        if (e instanceof Error) {
-            e.message = `jwt is not valid for usage with key binding. Error: ${e.message}`;
-        }
-        throw e;
-    }
-    return jwt;
-};
-exports.keyBindingFromCompact = keyBindingFromCompact;
-//# sourceMappingURL=fromCompact.js.map

package/build/keyBinding/fromCompact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fromCompact.js","sourceRoot":"","sources":["../../src/keyBinding/fromCompact.ts"],"names":[],"mappings":";;;AAAA,yCAAmD;AACnD,gCAAuC;AAEhC,MAAM,qBAAqB,GAAG,CAIjC,OAAe,EACjB,EAAE;IACA,MAAM,GAAG,GAAG,IAAA,oBAAc,EAAkB,OAAO,CAAC,CAAA;IAEpD,IAAI,CAAC;QACD,IAAA,2BAAmB,EAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;QAChD,IAAA,2BAAmB,EAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAEtC,IAAA,2BAAmB,EAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACvC,IAAA,2BAAmB,EAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACzC,IAAA,2BAAmB,EAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YACrB,CAAC,CAAC,OAAO,GAAG,uDAAuD,CAAC,CAAC,OAAO,EAAE,CAAA;QAClF,CAAC;QAED,MAAM,CAAC,CAAA;IACX,CAAC;IAED,OAAO,GAAG,CAAA;AACd,CAAC,CAAA;AAxBY,QAAA,qBAAqB,yBAwBjC"}

package/build/keyBinding/index.d.ts

@@ -1,2 +0,0 @@
-export * from './fromCompact';
-export * from './sdHash';

package/build/keyBinding/index.js

@@ -1,19 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./fromCompact"), exports);
-__exportStar(require("./sdHash"), exports);
-//# sourceMappingURL=index.js.map

package/build/keyBinding/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/keyBinding/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA6B;AAC7B,2CAAwB"}