@sd-jwt/sd-jwt-vc 0.6.0 → 0.6.1-next.6

package/dist/index.d.mts

@@ -3,13 +3,13 @@ import { DisclosureFrame } from '@sd-jwt/types';
 
 interface SdJwtVcPayload extends SdJwtPayload {
     iss: string;
-    iat: number;
     nbf?: number;
     exp?: number;
     cnf?: unknown;
     vct: string;
     status?: unknown;
     sub?: string;
+    iat?: number;
 }
 
 declare class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {

package/dist/index.d.ts

@@ -3,13 +3,13 @@ import { DisclosureFrame } from '@sd-jwt/types';
 
 interface SdJwtVcPayload extends SdJwtPayload {
     iss: string;
-    iat: number;
     nbf?: number;
     exp?: number;
     cnf?: unknown;
     vct: string;
     status?: unknown;
     sub?: string;
+    iat?: number;
 }
 
 declare class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {

package/dist/index.js

@@ -325,17 +325,17 @@ var require_dist = __commonJS({
     };
     var src_exports2 = {};
     __export2(src_exports2, {
-      Base64urlDecode: () => Base64urlDecode,
-      Base64urlEncode: () => Base64urlEncode,
       Disclosure: () => Disclosure,
       SDJWTException: () => SDJWTException2,
-      Uint8ArrayToBase64Url: () => Uint8ArrayToBase64Url
+      base64urlDecode: () => base64urlDecode,
+      base64urlEncode: () => base64urlEncode,
+      uint8ArrayToBase64Url: () => uint8ArrayToBase64Url
     });
     module2.exports = __toCommonJS2(src_exports2);
     var import_js_base64 = require_base64();
-    var Base64urlEncode = import_js_base64.Base64.encodeURI;
-    var Base64urlDecode = import_js_base64.Base64.decode;
-    var Uint8ArrayToBase64Url = (input) => import_js_base64.Base64.fromUint8Array(input, true);
+    var base64urlEncode = import_js_base64.Base64.encodeURI;
+    var base64urlDecode = import_js_base64.Base64.decode;
+    var uint8ArrayToBase64Url = (input) => import_js_base64.Base64.fromUint8Array(input, true);
     var SDJWTException2 = class _SDJWTException extends Error {
       constructor(message, details) {
         super(message);
@@ -371,16 +371,16 @@ var require_dist = __commonJS({
         return __async(this, null, function* () {
           const { hasher, alg } = hash;
           const digest = yield hasher(s, alg);
-          const digestStr = Uint8ArrayToBase64Url(digest);
-          const item = JSON.parse(Base64urlDecode(s));
+          const digestStr = uint8ArrayToBase64Url(digest);
+          const item = JSON.parse(base64urlDecode(s));
           return _Disclosure.fromArray(item, { digest: digestStr, encoded: s });
         });
       }
       static fromEncodeSync(s, hash) {
         const { hasher, alg } = hash;
         const digest = hasher(s, alg);
-        const digestStr = Uint8ArrayToBase64Url(digest);
-        const item = JSON.parse(Base64urlDecode(s));
+        const digestStr = uint8ArrayToBase64Url(digest);
+        const item = JSON.parse(base64urlDecode(s));
         return _Disclosure.fromArray(item, { digest: digestStr, encoded: s });
       }
       static fromArray(item, _meta) {
@@ -388,7 +388,7 @@ var require_dist = __commonJS({
       }
       encode() {
         if (!this._encoded) {
-          this._encoded = Base64urlEncode(JSON.stringify(this.decode()));
+          this._encoded = base64urlEncode(JSON.stringify(this.decode()));
         }
         return this._encoded;
       }
@@ -400,7 +400,7 @@ var require_dist = __commonJS({
           const { hasher, alg } = hash;
           if (!this._digest) {
             const hash2 = yield hasher(this.encode(), alg);
-            this._digest = Uint8ArrayToBase64Url(hash2);
+            this._digest = uint8ArrayToBase64Url(hash2);
           }
           return this._digest;
         });
@@ -409,7 +409,7 @@ var require_dist = __commonJS({
         const { hasher, alg } = hash;
         if (!this._digest) {
           const hash2 = hasher(this.encode(), alg);
-          this._digest = Uint8ArrayToBase64Url(hash2);
+          this._digest = uint8ArrayToBase64Url(hash2);
         }
         return this._digest;
       }
@@ -431,7 +431,7 @@ var SDJwtVcInstance = class extends import_core.SDJwtInstance {
     /**
      * The type of the SD-JWT-VC set in the header.typ field.
      */
-    this.type = "sd-jwt-vc";
+    this.type = "vc+sd-jwt";
   }
   /**
    * Validates if the disclosureFrame contains any reserved fields. If so it will throw an error.
@@ -439,15 +439,7 @@ var SDJwtVcInstance = class extends import_core.SDJwtInstance {
    */
   validateReservedFields(disclosureFrame) {
     if ((disclosureFrame == null ? void 0 : disclosureFrame._sd) && Array.isArray(disclosureFrame._sd) && disclosureFrame._sd.length > 0) {
-      const reservedNames = [
-        "iss",
-        "iat",
-        "nbf",
-        "exp",
-        "cnf",
-        "vct",
-        "status"
-      ];
+      const reservedNames = ["iss", "nbf", "exp", "cnf", "vct", "status"];
       const reservedNamesInDisclosureFrame = disclosureFrame._sd.filter((key) => reservedNames.includes(key));
       if (reservedNamesInDisclosureFrame.length > 0) {
         throw new import_dist.SDJWTException("Cannot disclose protected field");

package/dist/index.mjs

@@ -319,17 +319,17 @@ var require_dist = __commonJS({
     };
     var src_exports = {};
     __export(src_exports, {
-      Base64urlDecode: () => Base64urlDecode,
-      Base64urlEncode: () => Base64urlEncode,
       Disclosure: () => Disclosure,
       SDJWTException: () => SDJWTException2,
-      Uint8ArrayToBase64Url: () => Uint8ArrayToBase64Url
+      base64urlDecode: () => base64urlDecode,
+      base64urlEncode: () => base64urlEncode,
+      uint8ArrayToBase64Url: () => uint8ArrayToBase64Url
     });
     module.exports = __toCommonJS(src_exports);
     var import_js_base64 = require_base64();
-    var Base64urlEncode = import_js_base64.Base64.encodeURI;
-    var Base64urlDecode = import_js_base64.Base64.decode;
-    var Uint8ArrayToBase64Url = (input) => import_js_base64.Base64.fromUint8Array(input, true);
+    var base64urlEncode = import_js_base64.Base64.encodeURI;
+    var base64urlDecode = import_js_base64.Base64.decode;
+    var uint8ArrayToBase64Url = (input) => import_js_base64.Base64.fromUint8Array(input, true);
     var SDJWTException2 = class _SDJWTException extends Error {
       constructor(message, details) {
         super(message);
@@ -365,16 +365,16 @@ var require_dist = __commonJS({
         return __async(this, null, function* () {
           const { hasher, alg } = hash;
           const digest = yield hasher(s, alg);
-          const digestStr = Uint8ArrayToBase64Url(digest);
-          const item = JSON.parse(Base64urlDecode(s));
+          const digestStr = uint8ArrayToBase64Url(digest);
+          const item = JSON.parse(base64urlDecode(s));
           return _Disclosure.fromArray(item, { digest: digestStr, encoded: s });
         });
       }
       static fromEncodeSync(s, hash) {
         const { hasher, alg } = hash;
         const digest = hasher(s, alg);
-        const digestStr = Uint8ArrayToBase64Url(digest);
-        const item = JSON.parse(Base64urlDecode(s));
+        const digestStr = uint8ArrayToBase64Url(digest);
+        const item = JSON.parse(base64urlDecode(s));
         return _Disclosure.fromArray(item, { digest: digestStr, encoded: s });
       }
       static fromArray(item, _meta) {
@@ -382,7 +382,7 @@ var require_dist = __commonJS({
       }
       encode() {
         if (!this._encoded) {
-          this._encoded = Base64urlEncode(JSON.stringify(this.decode()));
+          this._encoded = base64urlEncode(JSON.stringify(this.decode()));
         }
         return this._encoded;
       }
@@ -394,7 +394,7 @@ var require_dist = __commonJS({
           const { hasher, alg } = hash;
           if (!this._digest) {
             const hash2 = yield hasher(this.encode(), alg);
-            this._digest = Uint8ArrayToBase64Url(hash2);
+            this._digest = uint8ArrayToBase64Url(hash2);
           }
           return this._digest;
         });
@@ -403,7 +403,7 @@ var require_dist = __commonJS({
         const { hasher, alg } = hash;
         if (!this._digest) {
           const hash2 = hasher(this.encode(), alg);
-          this._digest = Uint8ArrayToBase64Url(hash2);
+          this._digest = uint8ArrayToBase64Url(hash2);
         }
         return this._digest;
       }
@@ -420,7 +420,7 @@ var SDJwtVcInstance = class extends SDJwtInstance {
     /**
      * The type of the SD-JWT-VC set in the header.typ field.
      */
-    this.type = "sd-jwt-vc";
+    this.type = "vc+sd-jwt";
   }
   /**
    * Validates if the disclosureFrame contains any reserved fields. If so it will throw an error.
@@ -428,15 +428,7 @@ var SDJwtVcInstance = class extends SDJwtInstance {
    */
   validateReservedFields(disclosureFrame) {
     if ((disclosureFrame == null ? void 0 : disclosureFrame._sd) && Array.isArray(disclosureFrame._sd) && disclosureFrame._sd.length > 0) {
-      const reservedNames = [
-        "iss",
-        "iat",
-        "nbf",
-        "exp",
-        "cnf",
-        "vct",
-        "status"
-      ];
+      const reservedNames = ["iss", "nbf", "exp", "cnf", "vct", "status"];
       const reservedNamesInDisclosureFrame = disclosureFrame._sd.filter((key) => reservedNames.includes(key));
       if (reservedNamesInDisclosureFrame.length > 0) {
         throw new import_dist.SDJWTException("Cannot disclose protected field");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sd-jwt/sd-jwt-vc",
-  "version": "0.6.0",
+  "version": "0.6.1-next.6+f8db275",
   "description": "sd-jwt draft 7 implementation in typescript",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -39,11 +39,11 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@sd-jwt/core": "0.6.0"
+    "@sd-jwt/core": "0.6.1-next.6+f8db275"
   },
   "devDependencies": {
-    "@sd-jwt/crypto-nodejs": "0.6.0",
-    "@sd-jwt/types": "0.6.0"
+    "@sd-jwt/crypto-nodejs": "0.6.1-next.6+f8db275",
+    "@sd-jwt/types": "0.6.1-next.6+f8db275"
   },
   "publishConfig": {
     "access": "public"
@@ -61,5 +61,5 @@
       "esm"
     ]
   },
-  "gitHead": "a26955a3fa8995bee7dc9daa04b16c501d4c87bd"
+  "gitHead": "f8db275690dab88000a039838680a3478b3b61ec"
 }

package/src/index.ts

@@ -9,7 +9,7 @@ export class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {
   /**
    * The type of the SD-JWT-VC set in the header.typ field.
    */
-  protected type = 'sd-jwt-vc';
+  protected type = 'vc+sd-jwt';
 
   /**
    * Validates if the disclosureFrame contains any reserved fields. If so it will throw an error.
@@ -18,21 +18,13 @@ export class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {
   protected validateReservedFields(
     disclosureFrame: DisclosureFrame<SdJwtVcPayload>,
   ): void {
-    //validate disclosureFrame according to https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-01.html#section-3.2.2.2
+    //validate disclosureFrame according to https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-03.html#section-3.2.2.2
     if (
       disclosureFrame?._sd &&
       Array.isArray(disclosureFrame._sd) &&
       disclosureFrame._sd.length > 0
     ) {
-      const reservedNames = [
-        'iss',
-        'iat',
-        'nbf',
-        'exp',
-        'cnf',
-        'vct',
-        'status',
-      ];
+      const reservedNames = ['iss', 'nbf', 'exp', 'cnf', 'vct', 'status'];
       // check if there is any reserved names in the disclosureFrame._sd array
       const reservedNamesInDisclosureFrame = (
         disclosureFrame._sd as string[]

package/src/sd-jwt-vc-payload.ts

@@ -1,21 +1,21 @@
 import type { SdJwtPayload } from '@sd-jwt/core';
 
 export interface SdJwtVcPayload extends SdJwtPayload {
-  // The Issuer of the Verifiable Credential. The value of iss MUST be a URI. See [RFC7519] for more information.
+  // REQUIRED. The Issuer of the Verifiable Credential. The value of iss MUST be a URI. See [RFC7519] for more information.
   iss: string;
-  // The time of issuance of the Verifiable Credential. See [RFC7519] for more information.
-  iat: number;
   // OPTIONAL. The time before which the Verifiable Credential MUST NOT be accepted before validating. See [RFC7519] for more information.
   nbf?: number;
-  //OPTIONAL. The expiry time of the Verifiable Credential after which the Verifiable Credential is no longer valid. See [RFC7519] for more information.
+  // OPTIONAL. The expiry time of the Verifiable Credential after which the Verifiable Credential is no longer valid. See [RFC7519] for more information.
   exp?: number;
-  // REQUIRED when Cryptographic Key Binding is to be supported. Contains the confirmation method as defined in [RFC7800]. It is RECOMMENDED that this contains a JWK as defined in Section 3.2 of [RFC7800]. For Cryptographic Key Binding, the Key Binding JWT in the Combined Format for Presentation MUST be signed by the key identified in this claim.
+  // OPTIONAL unless cryptographic Key Binding is to be supported, in which case it is REQUIRED. Contains the confirmation method identifying the proof of possession key as defined in [RFC7800]. It is RECOMMENDED that this contains a JWK as defined in Section 3.2 of [RFC7800]. For proof of cryptographic Key Binding, the Key Binding JWT in the presentation of the SD-JWT MUST be signed by the key identified in this claim.
   cnf?: unknown;
-  //REQUIRED. The type of the Verifiable Credential, e.g., https://credentials.example.com/identity_credential, as defined in Section 3.2.2.1.1.
+  // REQUIRED. The type of the Verifiable Credential, e.g., https://credentials.example.com/identity_credential, as defined in Section 3.2.2.1.1.
   vct: string;
   // OPTIONAL. The information on how to read the status of the Verifiable Credential. See [I-D.looker-oauth-jwt-cwt-status-list] for more information.
   status?: unknown;
 
-  //The identifier of the Subject of the Verifiable Credential. The Issuer MAY use it to provide the Subject identifier known by the Issuer. There is no requirement for a binding to exist between sub and cnf claims.
+  // OPTIONAL. The identifier of the Subject of the Verifiable Credential. The Issuer MAY use it to provide the Subject identifier known by the Issuer. There is no requirement for a binding to exist between sub and cnf claims.
   sub?: string;
+  // OPTIONAL. The time of issuance of the Verifiable Credential. See [RFC7519] for more information.
+  iat?: number;
 }

package/test/app-e2e.spec.ts

@@ -232,7 +232,7 @@ async function JSONtest(filename: string) {
 
   expect(validated).toBeDefined();
   expect(validated).toStrictEqual({
-    header: { alg: 'EdDSA', typ: 'sd-jwt-vc' },
+    header: { alg: 'EdDSA', typ: 'vc+sd-jwt' },
     payload,
   });
 
@@ -256,7 +256,7 @@ async function JSONtest(filename: string) {
 
   expect(verified).toBeDefined();
   expect(verified).toStrictEqual({
-    header: { alg: 'EdDSA', typ: 'sd-jwt-vc' },
+    header: { alg: 'EdDSA', typ: 'vc+sd-jwt' },
     payload,
   });
 }