@sd-jwt/sd-jwt-vc 0.6.0 → 0.6.1-next.5

package/dist/index.d.mts

@@ -3,13 +3,13 @@ import { DisclosureFrame } from '@sd-jwt/types';
 
 interface SdJwtVcPayload extends SdJwtPayload {
     iss: string;
-    iat: number;
     nbf?: number;
     exp?: number;
     cnf?: unknown;
     vct: string;
     status?: unknown;
     sub?: string;
+    iat?: number;
 }
 
 declare class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {

package/dist/index.d.ts

@@ -3,13 +3,13 @@ import { DisclosureFrame } from '@sd-jwt/types';
 
 interface SdJwtVcPayload extends SdJwtPayload {
     iss: string;
-    iat: number;
     nbf?: number;
     exp?: number;
     cnf?: unknown;
     vct: string;
     status?: unknown;
     sub?: string;
+    iat?: number;
 }
 
 declare class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {

package/dist/index.js

@@ -431,7 +431,7 @@ var SDJwtVcInstance = class extends import_core.SDJwtInstance {
     /**
      * The type of the SD-JWT-VC set in the header.typ field.
      */
-    this.type = "sd-jwt-vc";
+    this.type = "vc+sd-jwt";
   }
   /**
    * Validates if the disclosureFrame contains any reserved fields. If so it will throw an error.
@@ -439,15 +439,7 @@ var SDJwtVcInstance = class extends import_core.SDJwtInstance {
    */
   validateReservedFields(disclosureFrame) {
     if ((disclosureFrame == null ? void 0 : disclosureFrame._sd) && Array.isArray(disclosureFrame._sd) && disclosureFrame._sd.length > 0) {
-      const reservedNames = [
-        "iss",
-        "iat",
-        "nbf",
-        "exp",
-        "cnf",
-        "vct",
-        "status"
-      ];
+      const reservedNames = ["iss", "nbf", "exp", "cnf", "vct", "status"];
       const reservedNamesInDisclosureFrame = disclosureFrame._sd.filter((key) => reservedNames.includes(key));
       if (reservedNamesInDisclosureFrame.length > 0) {
         throw new import_dist.SDJWTException("Cannot disclose protected field");

package/dist/index.mjs

@@ -420,7 +420,7 @@ var SDJwtVcInstance = class extends SDJwtInstance {
     /**
      * The type of the SD-JWT-VC set in the header.typ field.
      */
-    this.type = "sd-jwt-vc";
+    this.type = "vc+sd-jwt";
   }
   /**
    * Validates if the disclosureFrame contains any reserved fields. If so it will throw an error.
@@ -428,15 +428,7 @@ var SDJwtVcInstance = class extends SDJwtInstance {
    */
   validateReservedFields(disclosureFrame) {
     if ((disclosureFrame == null ? void 0 : disclosureFrame._sd) && Array.isArray(disclosureFrame._sd) && disclosureFrame._sd.length > 0) {
-      const reservedNames = [
-        "iss",
-        "iat",
-        "nbf",
-        "exp",
-        "cnf",
-        "vct",
-        "status"
-      ];
+      const reservedNames = ["iss", "nbf", "exp", "cnf", "vct", "status"];
       const reservedNamesInDisclosureFrame = disclosureFrame._sd.filter((key) => reservedNames.includes(key));
       if (reservedNamesInDisclosureFrame.length > 0) {
         throw new import_dist.SDJWTException("Cannot disclose protected field");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sd-jwt/sd-jwt-vc",
-  "version": "0.6.0",
+  "version": "0.6.1-next.5+fec88f0",
   "description": "sd-jwt draft 7 implementation in typescript",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -39,11 +39,11 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@sd-jwt/core": "0.6.0"
+    "@sd-jwt/core": "0.6.1-next.5+fec88f0"
   },
   "devDependencies": {
-    "@sd-jwt/crypto-nodejs": "0.6.0",
-    "@sd-jwt/types": "0.6.0"
+    "@sd-jwt/crypto-nodejs": "0.6.1-next.5+fec88f0",
+    "@sd-jwt/types": "0.6.1-next.5+fec88f0"
   },
   "publishConfig": {
     "access": "public"
@@ -61,5 +61,5 @@
       "esm"
     ]
   },
-  "gitHead": "a26955a3fa8995bee7dc9daa04b16c501d4c87bd"
+  "gitHead": "fec88f0c084ee09b3a0c80920782c3efadfc51b1"
 }

package/src/index.ts

@@ -9,7 +9,7 @@ export class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {
   /**
    * The type of the SD-JWT-VC set in the header.typ field.
    */
-  protected type = 'sd-jwt-vc';
+  protected type = 'vc+sd-jwt';
 
   /**
    * Validates if the disclosureFrame contains any reserved fields. If so it will throw an error.
@@ -18,21 +18,13 @@ export class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {
   protected validateReservedFields(
     disclosureFrame: DisclosureFrame<SdJwtVcPayload>,
   ): void {
-    //validate disclosureFrame according to https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-01.html#section-3.2.2.2
+    //validate disclosureFrame according to https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-03.html#section-3.2.2.2
     if (
       disclosureFrame?._sd &&
       Array.isArray(disclosureFrame._sd) &&
       disclosureFrame._sd.length > 0
     ) {
-      const reservedNames = [
-        'iss',
-        'iat',
-        'nbf',
-        'exp',
-        'cnf',
-        'vct',
-        'status',
-      ];
+      const reservedNames = ['iss', 'nbf', 'exp', 'cnf', 'vct', 'status'];
       // check if there is any reserved names in the disclosureFrame._sd array
       const reservedNamesInDisclosureFrame = (
         disclosureFrame._sd as string[]

package/src/sd-jwt-vc-payload.ts

@@ -1,21 +1,21 @@
 import type { SdJwtPayload } from '@sd-jwt/core';
 
 export interface SdJwtVcPayload extends SdJwtPayload {
-  // The Issuer of the Verifiable Credential. The value of iss MUST be a URI. See [RFC7519] for more information.
+  // REQUIRED. The Issuer of the Verifiable Credential. The value of iss MUST be a URI. See [RFC7519] for more information.
   iss: string;
-  // The time of issuance of the Verifiable Credential. See [RFC7519] for more information.
-  iat: number;
   // OPTIONAL. The time before which the Verifiable Credential MUST NOT be accepted before validating. See [RFC7519] for more information.
   nbf?: number;
-  //OPTIONAL. The expiry time of the Verifiable Credential after which the Verifiable Credential is no longer valid. See [RFC7519] for more information.
+  // OPTIONAL. The expiry time of the Verifiable Credential after which the Verifiable Credential is no longer valid. See [RFC7519] for more information.
   exp?: number;
-  // REQUIRED when Cryptographic Key Binding is to be supported. Contains the confirmation method as defined in [RFC7800]. It is RECOMMENDED that this contains a JWK as defined in Section 3.2 of [RFC7800]. For Cryptographic Key Binding, the Key Binding JWT in the Combined Format for Presentation MUST be signed by the key identified in this claim.
+  // OPTIONAL unless cryptographic Key Binding is to be supported, in which case it is REQUIRED. Contains the confirmation method identifying the proof of possession key as defined in [RFC7800]. It is RECOMMENDED that this contains a JWK as defined in Section 3.2 of [RFC7800]. For proof of cryptographic Key Binding, the Key Binding JWT in the presentation of the SD-JWT MUST be signed by the key identified in this claim.
   cnf?: unknown;
-  //REQUIRED. The type of the Verifiable Credential, e.g., https://credentials.example.com/identity_credential, as defined in Section 3.2.2.1.1.
+  // REQUIRED. The type of the Verifiable Credential, e.g., https://credentials.example.com/identity_credential, as defined in Section 3.2.2.1.1.
   vct: string;
   // OPTIONAL. The information on how to read the status of the Verifiable Credential. See [I-D.looker-oauth-jwt-cwt-status-list] for more information.
   status?: unknown;
 
-  //The identifier of the Subject of the Verifiable Credential. The Issuer MAY use it to provide the Subject identifier known by the Issuer. There is no requirement for a binding to exist between sub and cnf claims.
+  // OPTIONAL. The identifier of the Subject of the Verifiable Credential. The Issuer MAY use it to provide the Subject identifier known by the Issuer. There is no requirement for a binding to exist between sub and cnf claims.
   sub?: string;
+  // OPTIONAL. The time of issuance of the Verifiable Credential. See [RFC7519] for more information.
+  iat?: number;
 }

package/test/app-e2e.spec.ts

@@ -232,7 +232,7 @@ async function JSONtest(filename: string) {
 
   expect(validated).toBeDefined();
   expect(validated).toStrictEqual({
-    header: { alg: 'EdDSA', typ: 'sd-jwt-vc' },
+    header: { alg: 'EdDSA', typ: 'vc+sd-jwt' },
     payload,
   });
 
@@ -256,7 +256,7 @@ async function JSONtest(filename: string) {
 
   expect(verified).toBeDefined();
   expect(verified).toStrictEqual({
-    header: { alg: 'EdDSA', typ: 'sd-jwt-vc' },
+    header: { alg: 'EdDSA', typ: 'vc+sd-jwt' },
     payload,
   });
 }