@sphereon/oid4vci-client 0.10.3 → 0.10.4-next.119

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (142) hide show
  1. package/README.md +24 -5
  2. package/dist/AccessTokenClient.d.ts +5 -5
  3. package/dist/AccessTokenClient.d.ts.map +1 -1
  4. package/dist/AccessTokenClient.js +51 -37
  5. package/dist/AccessTokenClient.js.map +1 -1
  6. package/dist/AccessTokenClientV1_0_11.d.ts +29 -0
  7. package/dist/AccessTokenClientV1_0_11.d.ts.map +1 -0
  8. package/dist/AccessTokenClientV1_0_11.js +209 -0
  9. package/dist/AccessTokenClientV1_0_11.js.map +1 -0
  10. package/dist/AuthorizationCodeClient.d.ts +9 -4
  11. package/dist/AuthorizationCodeClient.d.ts.map +1 -1
  12. package/dist/AuthorizationCodeClient.js +102 -18
  13. package/dist/AuthorizationCodeClient.js.map +1 -1
  14. package/dist/AuthorizationCodeClientV1_0_11.d.ts +9 -0
  15. package/dist/AuthorizationCodeClientV1_0_11.d.ts.map +1 -0
  16. package/dist/AuthorizationCodeClientV1_0_11.js +134 -0
  17. package/dist/AuthorizationCodeClientV1_0_11.js.map +1 -0
  18. package/dist/CredentialOfferClient.d.ts.map +1 -1
  19. package/dist/CredentialOfferClient.js +18 -13
  20. package/dist/CredentialOfferClient.js.map +1 -1
  21. package/dist/CredentialOfferClientV1_0_11.d.ts +10 -0
  22. package/dist/CredentialOfferClientV1_0_11.d.ts.map +1 -0
  23. package/dist/CredentialOfferClientV1_0_11.js +101 -0
  24. package/dist/CredentialOfferClientV1_0_11.js.map +1 -0
  25. package/dist/CredentialOfferClientV1_0_13.d.ts +10 -0
  26. package/dist/CredentialOfferClientV1_0_13.d.ts.map +1 -0
  27. package/dist/CredentialOfferClientV1_0_13.js +94 -0
  28. package/dist/CredentialOfferClientV1_0_13.js.map +1 -0
  29. package/dist/CredentialRequestClient.d.ts +20 -7
  30. package/dist/CredentialRequestClient.d.ts.map +1 -1
  31. package/dist/CredentialRequestClient.js +46 -30
  32. package/dist/CredentialRequestClient.js.map +1 -1
  33. package/dist/CredentialRequestClientBuilder.d.ts +11 -6
  34. package/dist/CredentialRequestClientBuilder.d.ts.map +1 -1
  35. package/dist/CredentialRequestClientBuilder.js +22 -9
  36. package/dist/CredentialRequestClientBuilder.js.map +1 -1
  37. package/dist/CredentialRequestClientBuilderV1_0_11.d.ts +48 -0
  38. package/dist/CredentialRequestClientBuilderV1_0_11.d.ts.map +1 -0
  39. package/dist/CredentialRequestClientBuilderV1_0_11.js +121 -0
  40. package/dist/CredentialRequestClientBuilderV1_0_11.js.map +1 -0
  41. package/dist/CredentialRequestClientV1_0_11.d.ts +50 -0
  42. package/dist/CredentialRequestClientV1_0_11.d.ts.map +1 -0
  43. package/dist/CredentialRequestClientV1_0_11.js +151 -0
  44. package/dist/CredentialRequestClientV1_0_11.js.map +1 -0
  45. package/dist/MetadataClient.d.ts +5 -15
  46. package/dist/MetadataClient.d.ts.map +1 -1
  47. package/dist/MetadataClient.js +41 -44
  48. package/dist/MetadataClient.js.map +1 -1
  49. package/dist/MetadataClientV1_0_11.d.ts +31 -0
  50. package/dist/MetadataClientV1_0_11.d.ts.map +1 -0
  51. package/dist/MetadataClientV1_0_11.js +182 -0
  52. package/dist/MetadataClientV1_0_11.js.map +1 -0
  53. package/dist/MetadataClientV1_0_13.d.ts +31 -0
  54. package/dist/MetadataClientV1_0_13.d.ts.map +1 -0
  55. package/dist/MetadataClientV1_0_13.js +181 -0
  56. package/dist/MetadataClientV1_0_13.js.map +1 -0
  57. package/dist/OpenID4VCIClient.d.ts +14 -19
  58. package/dist/OpenID4VCIClient.d.ts.map +1 -1
  59. package/dist/OpenID4VCIClient.js +111 -61
  60. package/dist/OpenID4VCIClient.js.map +1 -1
  61. package/dist/OpenID4VCIClientV1_0_11.d.ts +108 -0
  62. package/dist/OpenID4VCIClientV1_0_11.d.ts.map +1 -0
  63. package/dist/OpenID4VCIClientV1_0_11.js +449 -0
  64. package/dist/OpenID4VCIClientV1_0_11.js.map +1 -0
  65. package/dist/OpenID4VCIClientV1_0_13.d.ts +112 -0
  66. package/dist/OpenID4VCIClientV1_0_13.d.ts.map +1 -0
  67. package/dist/OpenID4VCIClientV1_0_13.js +478 -0
  68. package/dist/OpenID4VCIClientV1_0_13.js.map +1 -0
  69. package/dist/ProofOfPossessionBuilder.d.ts +14 -3
  70. package/dist/ProofOfPossessionBuilder.d.ts.map +1 -1
  71. package/dist/ProofOfPossessionBuilder.js +20 -21
  72. package/dist/ProofOfPossessionBuilder.js.map +1 -1
  73. package/dist/functions/OpenIDUtils.d.ts +12 -0
  74. package/dist/functions/OpenIDUtils.d.ts.map +1 -0
  75. package/dist/functions/OpenIDUtils.js +37 -0
  76. package/dist/functions/OpenIDUtils.js.map +1 -0
  77. package/dist/functions/index.d.ts +2 -3
  78. package/dist/functions/index.d.ts.map +1 -1
  79. package/dist/functions/index.js +2 -3
  80. package/dist/functions/index.js.map +1 -1
  81. package/dist/functions/notifications.d.ts +4 -0
  82. package/dist/functions/notifications.d.ts.map +1 -0
  83. package/dist/functions/notifications.js +39 -0
  84. package/dist/functions/notifications.js.map +1 -0
  85. package/dist/index.d.ts +13 -1
  86. package/dist/index.d.ts.map +1 -1
  87. package/dist/index.js +14 -1
  88. package/dist/index.js.map +1 -1
  89. package/dist/types/index.d.ts +2 -0
  90. package/dist/types/index.d.ts.map +1 -1
  91. package/dist/types/index.js +5 -0
  92. package/dist/types/index.js.map +1 -1
  93. package/lib/AccessTokenClient.ts +59 -34
  94. package/lib/AccessTokenClientV1_0_11.ts +250 -0
  95. package/lib/AuthorizationCodeClient.ts +131 -28
  96. package/lib/AuthorizationCodeClientV1_0_11.ts +170 -0
  97. package/lib/CredentialOfferClient.ts +21 -8
  98. package/lib/CredentialOfferClientV1_0_11.ts +112 -0
  99. package/lib/CredentialOfferClientV1_0_13.ts +103 -0
  100. package/lib/CredentialRequestClient.ts +65 -26
  101. package/lib/CredentialRequestClientBuilder.ts +34 -16
  102. package/lib/CredentialRequestClientBuilderV1_0_11.ts +163 -0
  103. package/lib/CredentialRequestClientV1_0_11.ts +197 -0
  104. package/lib/MetadataClient.ts +64 -49
  105. package/lib/MetadataClientV1_0_11.ts +189 -0
  106. package/lib/MetadataClientV1_0_13.ts +188 -0
  107. package/lib/OpenID4VCIClient.ts +132 -68
  108. package/lib/OpenID4VCIClientV1_0_11.ts +635 -0
  109. package/lib/OpenID4VCIClientV1_0_13.ts +677 -0
  110. package/lib/ProofOfPossessionBuilder.ts +41 -11
  111. package/lib/__tests__/AccessTokenClient.spec.ts +40 -12
  112. package/lib/__tests__/AuthorizationDetailsBuilder.spec.ts +0 -12
  113. package/lib/__tests__/CredentialRequestClient.spec.ts +87 -50
  114. package/lib/__tests__/CredentialRequestClientBuilder.spec.ts +18 -12
  115. package/lib/__tests__/CredentialRequestClientV1_0_11.spec.ts +317 -0
  116. package/lib/__tests__/EBSIE2E.spec.test.ts +2 -2
  117. package/lib/__tests__/HttpUtils.spec.ts +1 -1
  118. package/lib/__tests__/IT.spec.ts +264 -14
  119. package/lib/__tests__/IssuanceInitiation.spec.ts +59 -4
  120. package/lib/__tests__/IssuanceInitiationV1_0_11.spec.ts +62 -0
  121. package/lib/__tests__/MattrE2E.spec.test.ts +2 -2
  122. package/lib/__tests__/MetadataClient.spec.ts +53 -3
  123. package/lib/__tests__/MetadataMocks.ts +42 -2
  124. package/lib/__tests__/OpenID4VCIClient.spec.ts +58 -2
  125. package/lib/__tests__/{OpenID4VCIClientPAR.spec.ts → OpenID4VCIClientPARV1_0_11.spec.ts} +5 -5
  126. package/lib/__tests__/OpenID4VCIClientV1_0_11.spec.ts +226 -0
  127. package/lib/__tests__/OpenID4VCIClientV1_0_13.spec.ts +204 -0
  128. package/lib/__tests__/ProofOfPossessionBuilder.spec.ts +1 -1
  129. package/lib/__tests__/SdJwt.spec.ts +36 -30
  130. package/lib/__tests__/SphereonE2E.spec.test.ts +10 -7
  131. package/lib/__tests__/data/VciDataFixtures.ts +712 -27
  132. package/lib/functions/OpenIDUtils.ts +25 -0
  133. package/lib/functions/index.ts +2 -3
  134. package/lib/functions/notifications.ts +32 -0
  135. package/lib/index.ts +16 -1
  136. package/lib/types/index.ts +6 -0
  137. package/package.json +4 -4
  138. package/dist/functions/ProofUtil.d.ts +0 -30
  139. package/dist/functions/ProofUtil.d.ts.map +0 -1
  140. package/dist/functions/ProofUtil.js +0 -106
  141. package/dist/functions/ProofUtil.js.map +0 -1
  142. package/lib/functions/ProofUtil.ts +0 -128
@@ -0,0 +1 @@
1
+ {"version":3,"file":"MetadataClientV1_0_11.d.ts","sourceRoot":"","sources":["../lib/MetadataClientV1_0_11.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,+BAA+B,EAC/B,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAG7B,cAAc,EAEf,MAAM,0BAA0B,CAAC;AAOlC,qBAAa,qBAAqB;IAChC;;;;OAIG;WACiB,sCAAsC,CACxD,eAAe,EAAE,iCAAiC,GACjD,OAAO,CAAC,6BAA6B,CAAC;IAIzC;;;OAGG;WACiB,6CAA6C,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAQ1I;;;;OAIG;WACiB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,eAAe,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC;IA8HpI;;;;OAIG;WACiB,gCAAgC,CAClD,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QACL,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,GACA,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,GAAG,SAAS,CAAC;CAKxE"}
@@ -0,0 +1,182 @@
1
+ "use strict";
2
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
+ return new (P || (P = Promise))(function (resolve, reject) {
5
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
9
+ });
10
+ };
11
+ var __importDefault = (this && this.__importDefault) || function (mod) {
12
+ return (mod && mod.__esModule) ? mod : { "default": mod };
13
+ };
14
+ Object.defineProperty(exports, "__esModule", { value: true });
15
+ exports.MetadataClientV1_0_11 = void 0;
16
+ const oid4vci_common_1 = require("@sphereon/oid4vci-common");
17
+ const debug_1 = __importDefault(require("debug"));
18
+ const OpenIDUtils_1 = require("./functions/OpenIDUtils");
19
+ const debug = (0, debug_1.default)('sphereon:oid4vci:metadata');
20
+ class MetadataClientV1_0_11 {
21
+ /**
22
+ * Retrieve metadata using the Initiation obtained from a previous step
23
+ *
24
+ * @param credentialOffer
25
+ */
26
+ static retrieveAllMetadataFromCredentialOffer(credentialOffer) {
27
+ return __awaiter(this, void 0, void 0, function* () {
28
+ return MetadataClientV1_0_11.retrieveAllMetadataFromCredentialOfferRequest(credentialOffer.credential_offer);
29
+ });
30
+ }
31
+ /**
32
+ * Retrieve the metada using the initiation request obtained from a previous step
33
+ * @param request
34
+ */
35
+ static retrieveAllMetadataFromCredentialOfferRequest(request) {
36
+ return __awaiter(this, void 0, void 0, function* () {
37
+ const issuer = (0, oid4vci_common_1.getIssuerFromCredentialOfferPayload)(request);
38
+ if (issuer) {
39
+ return MetadataClientV1_0_11.retrieveAllMetadata(issuer);
40
+ }
41
+ throw new Error("can't retrieve metadata from CredentialOfferRequest. No issuer field is present");
42
+ });
43
+ }
44
+ /**
45
+ * Retrieve all metadata from an issuer
46
+ * @param issuer The issuer URL
47
+ * @param opts
48
+ */
49
+ static retrieveAllMetadata(issuer, opts) {
50
+ return __awaiter(this, void 0, void 0, function* () {
51
+ let token_endpoint;
52
+ let credential_endpoint;
53
+ let deferred_credential_endpoint;
54
+ let authorization_endpoint;
55
+ let authorizationServerType = 'OID4VCI';
56
+ let authorization_server = issuer;
57
+ const oid4vciResponse = yield MetadataClientV1_0_11.retrieveOpenID4VCIServerMetadata(issuer, { errorOnNotFound: false }); // We will handle errors later, given we will also try other metadata locations
58
+ let credentialIssuerMetadata = oid4vciResponse === null || oid4vciResponse === void 0 ? void 0 : oid4vciResponse.successBody;
59
+ if (credentialIssuerMetadata) {
60
+ debug(`Issuer ${issuer} OID4VCI well-known server metadata\r\n${JSON.stringify(credentialIssuerMetadata)}`);
61
+ credential_endpoint = credentialIssuerMetadata.credential_endpoint;
62
+ deferred_credential_endpoint = credentialIssuerMetadata.deferred_credential_endpoint;
63
+ if (credentialIssuerMetadata.token_endpoint) {
64
+ token_endpoint = credentialIssuerMetadata.token_endpoint;
65
+ }
66
+ if (credentialIssuerMetadata.authorization_server) {
67
+ authorization_server = credentialIssuerMetadata.authorization_server;
68
+ }
69
+ if (credentialIssuerMetadata.authorization_endpoint) {
70
+ authorization_endpoint = credentialIssuerMetadata.authorization_endpoint;
71
+ }
72
+ }
73
+ // No specific OID4VCI endpoint. Either can be an OAuth2 AS or an OIDC IDP. Let's start with OIDC first
74
+ let response = yield (0, OpenIDUtils_1.retrieveWellknown)(authorization_server, oid4vci_common_1.WellKnownEndpoints.OPENID_CONFIGURATION, {
75
+ errorOnNotFound: false,
76
+ });
77
+ let authMetadata = response.successBody;
78
+ if (authMetadata) {
79
+ debug(`Issuer ${issuer} has OpenID Connect Server metadata in well-known location`);
80
+ authorizationServerType = 'OIDC';
81
+ }
82
+ else {
83
+ // Now let's do OAuth2
84
+ response = yield (0, OpenIDUtils_1.retrieveWellknown)(authorization_server, oid4vci_common_1.WellKnownEndpoints.OAUTH_AS, { errorOnNotFound: false });
85
+ authMetadata = response.successBody;
86
+ }
87
+ if (!authMetadata) {
88
+ // We will always throw an error, no matter whether the user provided the option not to, because this is bad.
89
+ if (issuer !== authorization_server) {
90
+ throw Error(`Issuer ${issuer} provided a separate authorization server ${authorization_server}, but that server did not provide metadata`);
91
+ }
92
+ }
93
+ else {
94
+ if (!authorizationServerType) {
95
+ authorizationServerType = 'OAuth 2.0';
96
+ }
97
+ debug(`Issuer ${issuer} has ${authorizationServerType} Server metadata in well-known location`);
98
+ if (!authMetadata.authorization_endpoint) {
99
+ console.warn(`Issuer ${issuer} of type ${authorizationServerType} has no authorization_endpoint! Will use ${authorization_endpoint}. This only works for pre-authorized flows`);
100
+ }
101
+ else if (authorization_endpoint && authMetadata.authorization_endpoint !== authorization_endpoint) {
102
+ throw Error(`Credential issuer has a different authorization_endpoint (${authorization_endpoint}) from the Authorization Server (${authMetadata.authorization_endpoint})`);
103
+ }
104
+ authorization_endpoint = authMetadata.authorization_endpoint;
105
+ if (!authMetadata.token_endpoint) {
106
+ throw Error(`Authorization Sever ${authorization_server} did not provide a token_endpoint`);
107
+ }
108
+ else if (token_endpoint && authMetadata.token_endpoint !== token_endpoint) {
109
+ throw Error(`Credential issuer has a different token_endpoint (${token_endpoint}) from the Authorization Server (${authMetadata.token_endpoint})`);
110
+ }
111
+ token_endpoint = authMetadata.token_endpoint;
112
+ if (authMetadata.credential_endpoint) {
113
+ if (credential_endpoint && authMetadata.credential_endpoint !== credential_endpoint) {
114
+ debug(`Credential issuer has a different credential_endpoint (${credential_endpoint}) from the Authorization Server (${authMetadata.credential_endpoint}). Will use the issuer value`);
115
+ }
116
+ else {
117
+ credential_endpoint = authMetadata.credential_endpoint;
118
+ }
119
+ }
120
+ if (authMetadata.deferred_credential_endpoint) {
121
+ if (deferred_credential_endpoint && authMetadata.deferred_credential_endpoint !== deferred_credential_endpoint) {
122
+ debug(`Credential issuer has a different deferred_credential_endpoint (${deferred_credential_endpoint}) from the Authorization Server (${authMetadata.deferred_credential_endpoint}). Will use the issuer value`);
123
+ }
124
+ else {
125
+ deferred_credential_endpoint = authMetadata.deferred_credential_endpoint;
126
+ }
127
+ }
128
+ }
129
+ if (!authorization_endpoint) {
130
+ debug(`Issuer ${issuer} does not expose authorization_endpoint, so only pre-auth will be supported`);
131
+ }
132
+ if (!token_endpoint) {
133
+ debug(`Issuer ${issuer} does not have a token_endpoint listed in well-known locations!`);
134
+ if (opts === null || opts === void 0 ? void 0 : opts.errorOnNotFound) {
135
+ throw Error(`Could not deduce the token_endpoint for ${issuer}`);
136
+ }
137
+ else {
138
+ token_endpoint = `${issuer}${issuer.endsWith('/') ? 'token' : '/token'}`;
139
+ }
140
+ }
141
+ if (!credential_endpoint) {
142
+ debug(`Issuer ${issuer} does not have a credential_endpoint listed in well-known locations!`);
143
+ if (opts === null || opts === void 0 ? void 0 : opts.errorOnNotFound) {
144
+ throw Error(`Could not deduce the credential endpoint for ${issuer}`);
145
+ }
146
+ else {
147
+ credential_endpoint = `${issuer}${issuer.endsWith('/') ? 'credential' : '/credential'}`;
148
+ }
149
+ }
150
+ if (!credentialIssuerMetadata && authMetadata) {
151
+ // Apparently everything worked out and the issuer is exposing everything in oAuth2/OIDC well-knowns. Spec is vague about this situation, but we can support it
152
+ credentialIssuerMetadata = authMetadata;
153
+ }
154
+ debug(`Issuer ${issuer} token endpoint ${token_endpoint}, credential endpoint ${credential_endpoint}`);
155
+ return {
156
+ issuer,
157
+ token_endpoint,
158
+ credential_endpoint,
159
+ deferred_credential_endpoint,
160
+ authorization_server,
161
+ authorization_endpoint,
162
+ authorizationServerType,
163
+ credentialIssuerMetadata: credentialIssuerMetadata,
164
+ authorizationServerMetadata: authMetadata,
165
+ };
166
+ });
167
+ }
168
+ /**
169
+ * Retrieve only the OID4VCI metadata for the issuer. So no OIDC/OAuth2 metadata
170
+ *
171
+ * @param issuerHost The issuer hostname
172
+ */
173
+ static retrieveOpenID4VCIServerMetadata(issuerHost, opts) {
174
+ return __awaiter(this, void 0, void 0, function* () {
175
+ return (0, OpenIDUtils_1.retrieveWellknown)(issuerHost, oid4vci_common_1.WellKnownEndpoints.OPENID4VCI_ISSUER, {
176
+ errorOnNotFound: (opts === null || opts === void 0 ? void 0 : opts.errorOnNotFound) === undefined ? true : opts.errorOnNotFound,
177
+ });
178
+ });
179
+ }
180
+ }
181
+ exports.MetadataClientV1_0_11 = MetadataClientV1_0_11;
182
+ //# sourceMappingURL=MetadataClientV1_0_11.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"MetadataClientV1_0_11.js","sourceRoot":"","sources":["../lib/MetadataClientV1_0_11.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAWkC;AAClC,kDAA0B;AAE1B,yDAA4D;AAE5D,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,2BAA2B,CAAC,CAAC;AAEjD,MAAa,qBAAqB;IAChC;;;;OAIG;IACI,MAAM,CAAO,sCAAsC,CACxD,eAAkD;;YAElD,OAAO,qBAAqB,CAAC,6CAA6C,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAC/G,CAAC;KAAA;IAED;;;OAGG;IACI,MAAM,CAAO,6CAA6C,CAAC,OAA+B;;YAC/F,MAAM,MAAM,GAAG,IAAA,oDAAmC,EAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,qBAAqB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;KAAA;IAED;;;;OAIG;IACI,MAAM,CAAO,mBAAmB,CAAC,MAAc,EAAE,IAAmC;;YACzF,IAAI,cAAkC,CAAC;YACvC,IAAI,mBAAuC,CAAC;YAC5C,IAAI,4BAAgD,CAAC;YACrD,IAAI,sBAA0C,CAAC;YAC/C,IAAI,uBAAuB,GAA4B,SAAS,CAAC;YACjE,IAAI,oBAAoB,GAAW,MAAM,CAAC;YAC1C,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,gCAAgC,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,+EAA+E;YACzM,IAAI,wBAAwB,GAAG,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,WAAW,CAAC;YAC5D,IAAI,wBAAwB,EAAE,CAAC;gBAC7B,KAAK,CAAC,UAAU,MAAM,0CAA0C,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;gBAC5G,mBAAmB,GAAG,wBAAwB,CAAC,mBAAmB,CAAC;gBACnE,4BAA4B,GAAG,wBAAwB,CAAC,4BAA4B,CAAC;gBACrF,IAAI,wBAAwB,CAAC,cAAc,EAAE,CAAC;oBAC5C,cAAc,GAAG,wBAAwB,CAAC,cAAc,CAAC;gBAC3D,CAAC;gBACD,IAAI,wBAAwB,CAAC,oBAAoB,EAAE,CAAC;oBAClD,oBAAoB,GAAG,wBAAwB,CAAC,oBAAoB,CAAC;gBACvE,CAAC;gBACD,IAAI,wBAAwB,CAAC,sBAAsB,EAAE,CAAC;oBACpD,sBAAsB,GAAG,wBAAwB,CAAC,sBAAsB,CAAC;gBAC3E,CAAC;YACH,CAAC;YACD,uGAAuG;YACvG,IAAI,QAAQ,GAAgD,MAAM,IAAA,+BAAiB,EACjF,oBAAoB,EACpB,mCAAkB,CAAC,oBAAoB,EACvC;gBACE,eAAe,EAAE,KAAK;aACvB,CACF,CAAC;YACF,IAAI,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC;YACxC,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,CAAC,UAAU,MAAM,4DAA4D,CAAC,CAAC;gBACpF,uBAAuB,GAAG,MAAM,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,sBAAsB;gBACtB,QAAQ,GAAG,MAAM,IAAA,+BAAiB,EAAC,oBAAoB,EAAE,mCAAkB,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClH,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC;YACtC,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,6GAA6G;gBAC7G,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;oBACpC,MAAM,KAAK,CAAC,UAAU,MAAM,6CAA6C,oBAAoB,4CAA4C,CAAC,CAAC;gBAC7I,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,uBAAuB,EAAE,CAAC;oBAC7B,uBAAuB,GAAG,WAAW,CAAC;gBACxC,CAAC;gBACD,KAAK,CAAC,UAAU,MAAM,QAAQ,uBAAuB,yCAAyC,CAAC,CAAC;gBAChG,IAAI,CAAC,YAAY,CAAC,sBAAsB,EAAE,CAAC;oBACzC,OAAO,CAAC,IAAI,CACV,UAAU,MAAM,YAAY,uBAAuB,4CAA4C,sBAAsB,4CAA4C,CAClK,CAAC;gBACJ,CAAC;qBAAM,IAAI,sBAAsB,IAAI,YAAY,CAAC,sBAAsB,KAAK,sBAAsB,EAAE,CAAC;oBACpG,MAAM,KAAK,CACT,6DAA6D,sBAAsB,oCAAoC,YAAY,CAAC,sBAAsB,GAAG,CAC9J,CAAC;gBACJ,CAAC;gBACD,sBAAsB,GAAG,YAAY,CAAC,sBAAsB,CAAC;gBAC7D,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;oBACjC,MAAM,KAAK,CAAC,uBAAuB,oBAAoB,mCAAmC,CAAC,CAAC;gBAC9F,CAAC;qBAAM,IAAI,cAAc,IAAI,YAAY,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;oBAC5E,MAAM,KAAK,CACT,qDAAqD,cAAc,oCAAoC,YAAY,CAAC,cAAc,GAAG,CACtI,CAAC;gBACJ,CAAC;gBACD,cAAc,GAAG,YAAY,CAAC,cAAc,CAAC;gBAC7C,IAAI,YAAY,CAAC,mBAAmB,EAAE,CAAC;oBACrC,IAAI,mBAAmB,IAAI,YAAY,CAAC,mBAAmB,KAAK,mBAAmB,EAAE,CAAC;wBACpF,KAAK,CACH,0DAA0D,mBAAmB,oCAAoC,YAAY,CAAC,mBAAmB,8BAA8B,CAChL,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,mBAAmB,GAAG,YAAY,CAAC,mBAAmB,CAAC;oBACzD,CAAC;gBACH,CAAC;gBACD,IAAI,YAAY,CAAC,4BAA4B,EAAE,CAAC;oBAC9C,IAAI,4BAA4B,IAAI,YAAY,CAAC,4BAA4B,KAAK,4BAA4B,EAAE,CAAC;wBAC/G,KAAK,CACH,mEAAmE,4BAA4B,oCAAoC,YAAY,CAAC,4BAA4B,8BAA8B,CAC3M,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,4BAA4B,GAAG,YAAY,CAAC,4BAA4B,CAAC;oBAC3E,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC5B,KAAK,CAAC,UAAU,MAAM,6EAA6E,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,KAAK,CAAC,UAAU,MAAM,iEAAiE,CAAC,CAAC;gBACzF,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe,EAAE,CAAC;oBAC1B,MAAM,KAAK,CAAC,2CAA2C,MAAM,EAAE,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3E,CAAC;YACH,CAAC;YACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,KAAK,CAAC,UAAU,MAAM,sEAAsE,CAAC,CAAC;gBAC9F,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe,EAAE,CAAC;oBAC1B,MAAM,KAAK,CAAC,gDAAgD,MAAM,EAAE,CAAC,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,mBAAmB,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;gBAC1F,CAAC;YACH,CAAC;YAED,IAAI,CAAC,wBAAwB,IAAI,YAAY,EAAE,CAAC;gBAC9C,+JAA+J;gBAC/J,wBAAwB,GAAG,YAA+C,CAAC;YAC7E,CAAC;YACD,KAAK,CAAC,UAAU,MAAM,mBAAmB,cAAc,yBAAyB,mBAAmB,EAAE,CAAC,CAAC;YACvG,OAAO;gBACL,MAAM;gBACN,cAAc;gBACd,mBAAmB;gBACnB,4BAA4B;gBAC5B,oBAAoB;gBACpB,sBAAsB;gBACtB,uBAAuB;gBACvB,wBAAwB,EAAE,wBAAmG;gBAC7H,2BAA2B,EAAE,YAAY;aAC1C,CAAC;QACJ,CAAC;KAAA;IAED;;;;OAIG;IACI,MAAM,CAAO,gCAAgC,CAClD,UAAkB,EAClB,IAEC;;YAED,OAAO,IAAA,+BAAiB,EAAC,UAAU,EAAE,mCAAkB,CAAC,iBAAiB,EAAE;gBACzE,eAAe,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe,MAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe;aACnF,CAAC,CAAC;QACL,CAAC;KAAA;CACF;AA1KD,sDA0KC"}
@@ -0,0 +1,31 @@
1
+ import { CredentialOfferPayloadV1_0_13, CredentialOfferRequestWithBaseUrl, EndpointMetadataResultV1_0_13, IssuerMetadataV1_0_13, OpenIDResponse } from '@sphereon/oid4vci-common';
2
+ export declare class MetadataClientV1_0_13 {
3
+ /**
4
+ * Retrieve metadata using the Initiation obtained from a previous step
5
+ *
6
+ * @param credentialOffer
7
+ */
8
+ static retrieveAllMetadataFromCredentialOffer(credentialOffer: CredentialOfferRequestWithBaseUrl): Promise<EndpointMetadataResultV1_0_13>;
9
+ /**
10
+ * Retrieve the metada using the initiation request obtained from a previous step
11
+ * @param request
12
+ */
13
+ static retrieveAllMetadataFromCredentialOfferRequest(request: CredentialOfferPayloadV1_0_13): Promise<EndpointMetadataResultV1_0_13>;
14
+ /**
15
+ * Retrieve all metadata from an issuer
16
+ * @param issuer The issuer URL
17
+ * @param opts
18
+ */
19
+ static retrieveAllMetadata(issuer: string, opts?: {
20
+ errorOnNotFound: boolean;
21
+ }): Promise<EndpointMetadataResultV1_0_13>;
22
+ /**
23
+ * Retrieve only the OID4VCI metadata for the issuer. So no OIDC/OAuth2 metadata
24
+ *
25
+ * @param issuerHost The issuer hostname
26
+ */
27
+ static retrieveOpenID4VCIServerMetadata(issuerHost: string, opts?: {
28
+ errorOnNotFound?: boolean;
29
+ }): Promise<OpenIDResponse<IssuerMetadataV1_0_13> | undefined>;
30
+ }
31
+ //# sourceMappingURL=MetadataClientV1_0_13.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"MetadataClientV1_0_13.d.ts","sourceRoot":"","sources":["../lib/MetadataClientV1_0_13.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,6BAA6B,EAC7B,iCAAiC,EACjC,6BAA6B,EAE7B,qBAAqB,EACrB,cAAc,EAEf,MAAM,0BAA0B,CAAC;AAOlC,qBAAa,qBAAqB;IAChC;;;;OAIG;WACiB,sCAAsC,CACxD,eAAe,EAAE,iCAAiC,GACjD,OAAO,CAAC,6BAA6B,CAAC;IAIzC;;;OAGG;WACiB,6CAA6C,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAQjJ;;;;OAIG;WACiB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,eAAe,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC;IA6HpI;;;;OAIG;WACiB,gCAAgC,CAClD,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QACL,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,GACA,OAAO,CAAC,cAAc,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC;CAK9D"}
@@ -0,0 +1,181 @@
1
+ "use strict";
2
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
+ return new (P || (P = Promise))(function (resolve, reject) {
5
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
9
+ });
10
+ };
11
+ var __importDefault = (this && this.__importDefault) || function (mod) {
12
+ return (mod && mod.__esModule) ? mod : { "default": mod };
13
+ };
14
+ Object.defineProperty(exports, "__esModule", { value: true });
15
+ exports.MetadataClientV1_0_13 = void 0;
16
+ const oid4vci_common_1 = require("@sphereon/oid4vci-common");
17
+ const debug_1 = __importDefault(require("debug"));
18
+ const OpenIDUtils_1 = require("./functions/OpenIDUtils");
19
+ const debug = (0, debug_1.default)('sphereon:oid4vci:metadata');
20
+ class MetadataClientV1_0_13 {
21
+ /**
22
+ * Retrieve metadata using the Initiation obtained from a previous step
23
+ *
24
+ * @param credentialOffer
25
+ */
26
+ static retrieveAllMetadataFromCredentialOffer(credentialOffer) {
27
+ return __awaiter(this, void 0, void 0, function* () {
28
+ return MetadataClientV1_0_13.retrieveAllMetadataFromCredentialOfferRequest(credentialOffer.credential_offer);
29
+ });
30
+ }
31
+ /**
32
+ * Retrieve the metada using the initiation request obtained from a previous step
33
+ * @param request
34
+ */
35
+ static retrieveAllMetadataFromCredentialOfferRequest(request) {
36
+ return __awaiter(this, void 0, void 0, function* () {
37
+ const issuer = (0, oid4vci_common_1.getIssuerFromCredentialOfferPayload)(request);
38
+ if (issuer) {
39
+ return MetadataClientV1_0_13.retrieveAllMetadata(issuer);
40
+ }
41
+ throw new Error("can't retrieve metadata from CredentialOfferRequest. No issuer field is present");
42
+ });
43
+ }
44
+ /**
45
+ * Retrieve all metadata from an issuer
46
+ * @param issuer The issuer URL
47
+ * @param opts
48
+ */
49
+ static retrieveAllMetadata(issuer, opts) {
50
+ return __awaiter(this, void 0, void 0, function* () {
51
+ let token_endpoint;
52
+ let credential_endpoint;
53
+ let deferred_credential_endpoint;
54
+ let authorization_endpoint;
55
+ let authorizationServerType = 'OID4VCI';
56
+ let authorization_servers = [issuer];
57
+ const oid4vciResponse = yield MetadataClientV1_0_13.retrieveOpenID4VCIServerMetadata(issuer, { errorOnNotFound: false }); // We will handle errors later, given we will also try other metadata locations
58
+ let credentialIssuerMetadata = oid4vciResponse === null || oid4vciResponse === void 0 ? void 0 : oid4vciResponse.successBody;
59
+ if (credentialIssuerMetadata) {
60
+ debug(`Issuer ${issuer} OID4VCI well-known server metadata\r\n${JSON.stringify(credentialIssuerMetadata)}`);
61
+ credential_endpoint = credentialIssuerMetadata.credential_endpoint;
62
+ deferred_credential_endpoint = credentialIssuerMetadata.deferred_credential_endpoint;
63
+ if (credentialIssuerMetadata.token_endpoint) {
64
+ token_endpoint = credentialIssuerMetadata.token_endpoint;
65
+ }
66
+ if (credentialIssuerMetadata.authorization_servers) {
67
+ authorization_servers = credentialIssuerMetadata.authorization_servers;
68
+ }
69
+ }
70
+ // No specific OID4VCI endpoint. Either can be an OAuth2 AS or an OIDC IDP. Let's start with OIDC first
71
+ // TODO: for now we're taking just the first one
72
+ let response = yield (0, OpenIDUtils_1.retrieveWellknown)(authorization_servers[0], oid4vci_common_1.WellKnownEndpoints.OPENID_CONFIGURATION, {
73
+ errorOnNotFound: false,
74
+ });
75
+ let authMetadata = response.successBody;
76
+ if (authMetadata) {
77
+ debug(`Issuer ${issuer} has OpenID Connect Server metadata in well-known location`);
78
+ authorizationServerType = 'OIDC';
79
+ }
80
+ else {
81
+ // Now let's do OAuth2
82
+ // TODO: for now we're taking just the first one
83
+ response = yield (0, OpenIDUtils_1.retrieveWellknown)(authorization_servers[0], oid4vci_common_1.WellKnownEndpoints.OAUTH_AS, { errorOnNotFound: false });
84
+ authMetadata = response.successBody;
85
+ }
86
+ if (!authMetadata) {
87
+ // We will always throw an error, no matter whether the user provided the option not to, because this is bad.
88
+ if (!authorization_servers.includes(issuer)) {
89
+ throw Error(`Issuer ${issuer} provided a separate authorization server ${authorization_servers}, but that server did not provide metadata`);
90
+ }
91
+ }
92
+ else {
93
+ if (!authorizationServerType) {
94
+ authorizationServerType = 'OAuth 2.0';
95
+ }
96
+ debug(`Issuer ${issuer} has ${authorizationServerType} Server metadata in well-known location`);
97
+ if (!authMetadata.authorization_endpoint) {
98
+ console.warn(`Issuer ${issuer} of type ${authorizationServerType} has no authorization_endpoint! Will use ${authorization_endpoint}. This only works for pre-authorized flows`);
99
+ }
100
+ else if (authorization_endpoint && authMetadata.authorization_endpoint !== authorization_endpoint) {
101
+ throw Error(`Credential issuer has a different authorization_endpoint (${authorization_endpoint}) from the Authorization Server (${authMetadata.authorization_endpoint})`);
102
+ }
103
+ authorization_endpoint = authMetadata.authorization_endpoint;
104
+ if (!authMetadata.token_endpoint) {
105
+ throw Error(`Authorization Sever ${authorization_servers} did not provide a token_endpoint`);
106
+ }
107
+ else if (token_endpoint && authMetadata.token_endpoint !== token_endpoint) {
108
+ throw Error(`Credential issuer has a different token_endpoint (${token_endpoint}) from the Authorization Server (${authMetadata.token_endpoint})`);
109
+ }
110
+ token_endpoint = authMetadata.token_endpoint;
111
+ if (authMetadata.credential_endpoint) {
112
+ if (credential_endpoint && authMetadata.credential_endpoint !== credential_endpoint) {
113
+ debug(`Credential issuer has a different credential_endpoint (${credential_endpoint}) from the Authorization Server (${authMetadata.credential_endpoint}). Will use the issuer value`);
114
+ }
115
+ else {
116
+ credential_endpoint = authMetadata.credential_endpoint;
117
+ }
118
+ }
119
+ if (authMetadata.deferred_credential_endpoint) {
120
+ if (deferred_credential_endpoint && authMetadata.deferred_credential_endpoint !== deferred_credential_endpoint) {
121
+ debug(`Credential issuer has a different deferred_credential_endpoint (${deferred_credential_endpoint}) from the Authorization Server (${authMetadata.deferred_credential_endpoint}). Will use the issuer value`);
122
+ }
123
+ else {
124
+ deferred_credential_endpoint = authMetadata.deferred_credential_endpoint;
125
+ }
126
+ }
127
+ }
128
+ if (!authorization_endpoint) {
129
+ debug(`Issuer ${issuer} does not expose authorization_endpoint, so only pre-auth will be supported`);
130
+ }
131
+ if (!token_endpoint) {
132
+ debug(`Issuer ${issuer} does not have a token_endpoint listed in well-known locations!`);
133
+ if (opts === null || opts === void 0 ? void 0 : opts.errorOnNotFound) {
134
+ throw Error(`Could not deduce the token_endpoint for ${issuer}`);
135
+ }
136
+ else {
137
+ token_endpoint = `${issuer}${issuer.endsWith('/') ? 'token' : '/token'}`;
138
+ }
139
+ }
140
+ if (!credential_endpoint) {
141
+ debug(`Issuer ${issuer} does not have a credential_endpoint listed in well-known locations!`);
142
+ if (opts === null || opts === void 0 ? void 0 : opts.errorOnNotFound) {
143
+ throw Error(`Could not deduce the credential endpoint for ${issuer}`);
144
+ }
145
+ else {
146
+ credential_endpoint = `${issuer}${issuer.endsWith('/') ? 'credential' : '/credential'}`;
147
+ }
148
+ }
149
+ if (!credentialIssuerMetadata && authMetadata) {
150
+ // Apparently everything worked out and the issuer is exposing everything in oAuth2/OIDC well-knowns. Spec is vague about this situation, but we can support it
151
+ credentialIssuerMetadata = authMetadata;
152
+ }
153
+ debug(`Issuer ${issuer} token endpoint ${token_endpoint}, credential endpoint ${credential_endpoint}`);
154
+ return {
155
+ issuer,
156
+ token_endpoint,
157
+ credential_endpoint,
158
+ deferred_credential_endpoint,
159
+ authorization_server: authorization_servers[0],
160
+ authorization_endpoint,
161
+ authorizationServerType,
162
+ credentialIssuerMetadata: credentialIssuerMetadata,
163
+ authorizationServerMetadata: authMetadata,
164
+ };
165
+ });
166
+ }
167
+ /**
168
+ * Retrieve only the OID4VCI metadata for the issuer. So no OIDC/OAuth2 metadata
169
+ *
170
+ * @param issuerHost The issuer hostname
171
+ */
172
+ static retrieveOpenID4VCIServerMetadata(issuerHost, opts) {
173
+ return __awaiter(this, void 0, void 0, function* () {
174
+ return (0, OpenIDUtils_1.retrieveWellknown)(issuerHost, oid4vci_common_1.WellKnownEndpoints.OPENID4VCI_ISSUER, {
175
+ errorOnNotFound: (opts === null || opts === void 0 ? void 0 : opts.errorOnNotFound) === undefined ? true : opts.errorOnNotFound,
176
+ });
177
+ });
178
+ }
179
+ }
180
+ exports.MetadataClientV1_0_13 = MetadataClientV1_0_13;
181
+ //# sourceMappingURL=MetadataClientV1_0_13.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"MetadataClientV1_0_13.js","sourceRoot":"","sources":["../lib/MetadataClientV1_0_13.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAWkC;AAClC,kDAA0B;AAE1B,yDAA4D;AAE5D,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,2BAA2B,CAAC,CAAC;AAEjD,MAAa,qBAAqB;IAChC;;;;OAIG;IACI,MAAM,CAAO,sCAAsC,CACxD,eAAkD;;YAElD,OAAO,qBAAqB,CAAC,6CAA6C,CAAC,eAAe,CAAC,gBAAiD,CAAC,CAAC;QAChJ,CAAC;KAAA;IAED;;;OAGG;IACI,MAAM,CAAO,6CAA6C,CAAC,OAAsC;;YACtG,MAAM,MAAM,GAAG,IAAA,oDAAmC,EAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,qBAAqB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;KAAA;IAED;;;;OAIG;IACI,MAAM,CAAO,mBAAmB,CAAC,MAAc,EAAE,IAAmC;;YACzF,IAAI,cAAkC,CAAC;YACvC,IAAI,mBAAuC,CAAC;YAC5C,IAAI,4BAAgD,CAAC;YACrD,IAAI,sBAA0C,CAAC;YAC/C,IAAI,uBAAuB,GAA4B,SAAS,CAAC;YACjE,IAAI,qBAAqB,GAAa,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,gCAAgC,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,+EAA+E;YACzM,IAAI,wBAAwB,GAAG,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,WAAW,CAAC;YAC5D,IAAI,wBAAwB,EAAE,CAAC;gBAC7B,KAAK,CAAC,UAAU,MAAM,0CAA0C,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;gBAC5G,mBAAmB,GAAG,wBAAwB,CAAC,mBAAmB,CAAC;gBACnE,4BAA4B,GAAG,wBAAwB,CAAC,4BAA4B,CAAC;gBACrF,IAAI,wBAAwB,CAAC,cAAc,EAAE,CAAC;oBAC5C,cAAc,GAAG,wBAAwB,CAAC,cAAc,CAAC;gBAC3D,CAAC;gBACD,IAAI,wBAAwB,CAAC,qBAAqB,EAAE,CAAC;oBACnD,qBAAqB,GAAG,wBAAwB,CAAC,qBAAqB,CAAC;gBACzE,CAAC;YACH,CAAC;YACD,uGAAuG;YACvG,gDAAgD;YAChD,IAAI,QAAQ,GAAgD,MAAM,IAAA,+BAAiB,EACjF,qBAAqB,CAAC,CAAC,CAAC,EACxB,mCAAkB,CAAC,oBAAoB,EACvC;gBACE,eAAe,EAAE,KAAK;aACvB,CACF,CAAC;YACF,IAAI,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC;YACxC,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,CAAC,UAAU,MAAM,4DAA4D,CAAC,CAAC;gBACpF,uBAAuB,GAAG,MAAM,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,sBAAsB;gBACtB,gDAAgD;gBAChD,QAAQ,GAAG,MAAM,IAAA,+BAAiB,EAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,mCAAkB,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtH,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC;YACtC,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,6GAA6G;gBAC7G,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,MAAM,KAAK,CAAC,UAAU,MAAM,6CAA6C,qBAAqB,4CAA4C,CAAC,CAAC;gBAC9I,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,uBAAuB,EAAE,CAAC;oBAC7B,uBAAuB,GAAG,WAAW,CAAC;gBACxC,CAAC;gBACD,KAAK,CAAC,UAAU,MAAM,QAAQ,uBAAuB,yCAAyC,CAAC,CAAC;gBAChG,IAAI,CAAC,YAAY,CAAC,sBAAsB,EAAE,CAAC;oBACzC,OAAO,CAAC,IAAI,CACV,UAAU,MAAM,YAAY,uBAAuB,4CAA4C,sBAAsB,4CAA4C,CAClK,CAAC;gBACJ,CAAC;qBAAM,IAAI,sBAAsB,IAAI,YAAY,CAAC,sBAAsB,KAAK,sBAAsB,EAAE,CAAC;oBACpG,MAAM,KAAK,CACT,6DAA6D,sBAAsB,oCAAoC,YAAY,CAAC,sBAAsB,GAAG,CAC9J,CAAC;gBACJ,CAAC;gBACD,sBAAsB,GAAG,YAAY,CAAC,sBAAsB,CAAC;gBAC7D,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;oBACjC,MAAM,KAAK,CAAC,uBAAuB,qBAAqB,mCAAmC,CAAC,CAAC;gBAC/F,CAAC;qBAAM,IAAI,cAAc,IAAI,YAAY,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;oBAC5E,MAAM,KAAK,CACT,qDAAqD,cAAc,oCAAoC,YAAY,CAAC,cAAc,GAAG,CACtI,CAAC;gBACJ,CAAC;gBACD,cAAc,GAAG,YAAY,CAAC,cAAc,CAAC;gBAC7C,IAAI,YAAY,CAAC,mBAAmB,EAAE,CAAC;oBACrC,IAAI,mBAAmB,IAAI,YAAY,CAAC,mBAAmB,KAAK,mBAAmB,EAAE,CAAC;wBACpF,KAAK,CACH,0DAA0D,mBAAmB,oCAAoC,YAAY,CAAC,mBAAmB,8BAA8B,CAChL,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,mBAAmB,GAAG,YAAY,CAAC,mBAAmB,CAAC;oBACzD,CAAC;gBACH,CAAC;gBACD,IAAI,YAAY,CAAC,4BAA4B,EAAE,CAAC;oBAC9C,IAAI,4BAA4B,IAAI,YAAY,CAAC,4BAA4B,KAAK,4BAA4B,EAAE,CAAC;wBAC/G,KAAK,CACH,mEAAmE,4BAA4B,oCAAoC,YAAY,CAAC,4BAA4B,8BAA8B,CAC3M,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,4BAA4B,GAAG,YAAY,CAAC,4BAA4B,CAAC;oBAC3E,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC5B,KAAK,CAAC,UAAU,MAAM,6EAA6E,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,KAAK,CAAC,UAAU,MAAM,iEAAiE,CAAC,CAAC;gBACzF,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe,EAAE,CAAC;oBAC1B,MAAM,KAAK,CAAC,2CAA2C,MAAM,EAAE,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3E,CAAC;YACH,CAAC;YACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,KAAK,CAAC,UAAU,MAAM,sEAAsE,CAAC,CAAC;gBAC9F,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe,EAAE,CAAC;oBAC1B,MAAM,KAAK,CAAC,gDAAgD,MAAM,EAAE,CAAC,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,mBAAmB,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;gBAC1F,CAAC;YACH,CAAC;YAED,IAAI,CAAC,wBAAwB,IAAI,YAAY,EAAE,CAAC;gBAC9C,+JAA+J;gBAC/J,wBAAwB,GAAG,YAA+C,CAAC;YAC7E,CAAC;YACD,KAAK,CAAC,UAAU,MAAM,mBAAmB,cAAc,yBAAyB,mBAAmB,EAAE,CAAC,CAAC;YACvG,OAAO;gBACL,MAAM;gBACN,cAAc;gBACd,mBAAmB;gBACnB,4BAA4B;gBAC5B,oBAAoB,EAAE,qBAAqB,CAAC,CAAC,CAAC;gBAC9C,sBAAsB;gBACtB,uBAAuB;gBACvB,wBAAwB,EAAE,wBAAwB;gBAClD,2BAA2B,EAAE,YAAY;aAC1C,CAAC;QACJ,CAAC;KAAA;IAED;;;;OAIG;IACI,MAAM,CAAO,gCAAgC,CAClD,UAAkB,EAClB,IAEC;;YAED,OAAO,IAAA,+BAAiB,EAAC,UAAU,EAAE,mCAAkB,CAAC,iBAAiB,EAAE;gBACzE,eAAe,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe,MAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe;aACnF,CAAC,CAAC;QACL,CAAC;KAAA;CACF;AAzKD,sDAyKC"}
@@ -1,19 +1,10 @@
1
- import { AccessTokenResponse, Alg, AuthorizationRequestOpts, AuthorizationResponse, AuthzFlowType, CredentialOfferRequestWithBaseUrl, CredentialResponse, CredentialSupported, EndpointMetadataResult, JWK, OID4VCICredentialFormat, OpenId4VCIVersion, PKCEOpts, ProofOfPossessionCallbacks } from '@sphereon/oid4vci-common';
1
+ import { AccessTokenResponse, Alg, AuthorizationRequestOpts, AuthorizationResponse, AuthzFlowType, CredentialConfigurationSupported, CredentialConfigurationSupportedV1_0_13, CredentialOfferRequestWithBaseUrl, CredentialResponse, EndpointMetadataResultV1_0_11, EndpointMetadataResultV1_0_13, JWK, NotificationRequest, NotificationResult, OID4VCICredentialFormat, OpenId4VCIVersion, PKCEOpts, ProofOfPossessionCallbacks } from '@sphereon/oid4vci-common';
2
2
  import { CredentialFormat } from '@sphereon/ssi-types';
3
- export interface OpenID4VCIClientState {
4
- credentialIssuer: string;
5
- credentialOffer?: CredentialOfferRequestWithBaseUrl;
6
- clientId?: string;
7
- kid?: string;
8
- jwk?: JWK;
9
- alg?: Alg | string;
10
- endpointMetadata?: EndpointMetadataResult;
11
- accessTokenResponse?: AccessTokenResponse;
12
- authorizationRequestOpts?: AuthorizationRequestOpts;
13
- authorizationCodeResponse?: AuthorizationResponse;
14
- pkce: PKCEOpts;
15
- authorizationURL?: string;
16
- }
3
+ import { CredentialRequestOpts } from './CredentialRequestClient';
4
+ import { OpenID4VCIClientStateV1_0_11 } from './OpenID4VCIClientV1_0_11';
5
+ import { OpenID4VCIClientStateV1_0_13 } from './OpenID4VCIClientV1_0_13';
6
+ export type OpenID4VCIClientState = OpenID4VCIClientStateV1_0_11 | OpenID4VCIClientStateV1_0_13;
7
+ export type EndpointMetadataResult = EndpointMetadataResultV1_0_11 | EndpointMetadataResultV1_0_13;
17
8
  export declare class OpenID4VCIClient {
18
9
  private readonly _state;
19
10
  private constructor();
@@ -72,10 +63,14 @@ export declare class OpenID4VCIClient {
72
63
  jti?: string;
73
64
  deferredCredentialAwait?: boolean;
74
65
  deferredCredentialIntervalInMS?: number;
75
- }): Promise<CredentialResponse>;
66
+ experimentalHolderIssuanceSupported?: boolean;
67
+ }): Promise<CredentialResponse & {
68
+ access_token: string;
69
+ }>;
76
70
  exportState(): Promise<string>;
77
- getCredentialsSupported(restrictToInitiationTypes: boolean, format?: (OID4VCICredentialFormat | string) | (OID4VCICredentialFormat | string)[]): CredentialSupported[];
78
- getCredentialOfferTypes(): string[][];
71
+ getCredentialsSupported(restrictToInitiationTypes?: boolean, format?: (OID4VCICredentialFormat | string) | (OID4VCICredentialFormat | string)[]): Record<string, CredentialConfigurationSupportedV1_0_13> | Array<CredentialConfigurationSupported>;
72
+ sendNotification(credentialRequestOpts: Partial<CredentialRequestOpts>, request: NotificationRequest, accessToken?: string): Promise<NotificationResult>;
73
+ getCredentialOfferTypes(): string[][] | undefined;
79
74
  issuerSupportedFlowTypes(): AuthzFlowType[];
80
75
  isFlowTypeSupported(flowType: AuthzFlowType): boolean;
81
76
  get authorizationURL(): string | undefined;
@@ -97,7 +92,7 @@ export declare class OpenID4VCIClient {
97
92
  /**
98
93
  * Too bad we need a method like this, but EBSI is not exposing metadata
99
94
  */
100
- isEBSI(): boolean | undefined;
95
+ isEBSI(): any;
101
96
  private assertIssuerData;
102
97
  private assertServerMetadata;
103
98
  private assertAccessToken;
@@ -1 +1 @@
1
- {"version":3,"file":"OpenID4VCIClient.d.ts","sourceRoot":"","sources":["../lib/OpenID4VCIClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,GAAG,EACH,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EAGb,iCAAiC,EACjC,kBAAkB,EAClB,mBAAmB,EAEnB,sBAAsB,EAKtB,GAAG,EAEH,uBAAuB,EACvB,iBAAiB,EACjB,QAAQ,EACR,0BAA0B,EAE3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAavD,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,iCAAiC,CAAC;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,yBAAyB,CAAC,EAAE,qBAAqB,CAAC;IAClD,IAAI,EAAE,QAAQ,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAE/C,OAAO;WAuDa,oBAAoB,CAAC,EACvC,GAAG,EACH,GAAG,EACH,sBAAsB,EACtB,QAAQ,EACR,gBAAgB,EAChB,IAAI,EACJ,oBAAoB,EACpB,6BAA6B,GAC9B,EAAE;QACD,gBAAgB,EAAE,MAAM,CAAC;QACzB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,6BAA6B,CAAC,EAAE,OAAO,CAAC;QACxC,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;QAChD,IAAI,CAAC,EAAE,QAAQ,CAAC;KACjB;WAkBmB,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE;QAAE,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;WAM1F,OAAO,CAAC,EAC1B,GAAG,EACH,GAAG,EACH,GAAG,EACH,sBAAsB,EACtB,QAAQ,EACR,IAAI,EACJ,6BAA6B,EAC7B,oBAAoB,EACpB,eAAe,GAChB,EAAE;QACD,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,6BAA6B,CAAC,EAAE,OAAO,CAAC;QACxC,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,IAAI,CAAC,EAAE,QAAQ,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;KACjD,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyB7B;;;;;OAKG;IACU,6BAA6B,CAAC,IAAI,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;QAAC,IAAI,CAAC,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IA2B3H,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAetE,OAAO,CAAC,iBAAiB;IAIZ,kBAAkB,CAAC,IAAI,CAAC,EAAE;QACrC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,qBAAqB,CAAC,EAAE,MAAM,GAAG,qBAAqB,CAAC;QACvD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA8DnB,kBAAkB,CAAC,EAC9B,eAAe,EACf,OAAO,EACP,cAAc,EACd,MAAM,EACN,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EACH,uBAAuB,EACvB,8BAA8B,GAC/B,EAAE;QACD,eAAe,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,cAAc,EAAE,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,gBAAgB,GAAG,uBAAuB,CAAC;QACpD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,GAAG,CAAC;QACV,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,8BAA8B,CAAC,EAAE,MAAM,CAAC;KACzC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkGlB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAQ3C,uBAAuB,CACrB,yBAAyB,EAAE,OAAO,EAClC,MAAM,CAAC,EAAE,CAAC,uBAAuB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,GAAG,MAAM,CAAC,EAAE,GACjF,mBAAmB,EAAE;IASxB,uBAAuB,IAAI,MAAM,EAAE,EAAE;IAwBrC,wBAAwB,IAAI,aAAa,EAAE;IAO3C,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO;IAIrD,IAAI,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAEzC;IAEM,mBAAmB,IAAI,OAAO;IAIrC,IAAI,eAAe,IAAI,iCAAiC,GAAG,SAAS,CAEnE;IAEM,OAAO,IAAI,iBAAiB;IAInC,IAAW,gBAAgB,IAAI,sBAAsB,CAIpD;IAED,IAAI,GAAG,IAAI,MAAM,CAMhB;IAED,IAAI,GAAG,IAAI,MAAM,CAMhB;IAED,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAErC;IAED,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IAEM,sBAAsB,IAAI,OAAO;IAIxC,IAAI,mBAAmB,IAAI,mBAAmB,CAI7C;IAEM,SAAS,IAAI,MAAM;IAKnB,sBAAsB,IAAI,MAAM;IAOhC,qBAAqB,IAAI,MAAM;IAK/B,6BAA6B,IAAI,OAAO;IAIxC,6BAA6B,IAAI,MAAM;IAK9C;;OAEG;IACI,MAAM;IAeb,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,4BAA4B;CAcrC"}
1
+ {"version":3,"file":"OpenID4VCIClient.d.ts","sourceRoot":"","sources":["../lib/OpenID4VCIClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,GAAG,EACH,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EAEb,gCAAgC,EAChC,uCAAuC,EAGvC,iCAAiC,EACjC,kBAAkB,EAIlB,6BAA6B,EAC7B,6BAA6B,EAO7B,GAAG,EAEH,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,QAAQ,EACR,0BAA0B,EAE3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAQvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAIlE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAMzE,MAAM,MAAM,qBAAqB,GAAG,4BAA4B,GAAG,4BAA4B,CAAC;AAEhG,MAAM,MAAM,sBAAsB,GAAG,6BAA6B,GAAG,6BAA6B,CAAC;AAEnG,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAE/C,OAAO;WA2Da,oBAAoB,CAAC,EACvC,GAAG,EACH,GAAG,EACH,sBAAsB,EACtB,QAAQ,EACR,gBAAgB,EAChB,IAAI,EACJ,oBAAoB,EACpB,6BAA6B,GAC9B,EAAE;QACD,gBAAgB,EAAE,MAAM,CAAC;QACzB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,6BAA6B,CAAC,EAAE,OAAO,CAAC;QACxC,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;QAChD,IAAI,CAAC,EAAE,QAAQ,CAAC;KACjB;WAkBmB,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE;QAAE,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;WAM1F,OAAO,CAAC,EAC1B,GAAG,EACH,GAAG,EACH,GAAG,EACH,sBAAsB,EACtB,QAAQ,EACR,IAAI,EACJ,6BAA6B,EAC7B,oBAAoB,EACpB,eAAe,GAChB,EAAE;QACD,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,6BAA6B,CAAC,EAAE,OAAO,CAAC;QACxC,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,IAAI,CAAC,EAAE,QAAQ,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;KACjD,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyB7B;;;;;OAKG;IACU,6BAA6B,CAAC,IAAI,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;QAAC,IAAI,CAAC,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAqC3H,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAetE,OAAO,CAAC,iBAAiB;IAIZ,kBAAkB,CAAC,IAAI,CAAC,EAAE;QACrC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,qBAAqB,CAAC,EAAE,MAAM,GAAG,qBAAqB,CAAC;QACvD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA+DnB,kBAAkB,CAAC,EAC9B,eAAe,EACf,OAAO,EACP,cAAc,EACd,MAAM,EACN,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EACH,uBAAuB,EACvB,8BAA8B,GAC/B,EAAE;QACD,eAAe,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,cAAc,EAAE,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,gBAAgB,GAAG,uBAAuB,CAAC;QACpD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,GAAG,CAAC;QACV,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,mCAAmC,CAAC,EAAE,OAAO,CAAC;KAC/C,GAAG,OAAO,CAAC,kBAAkB,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA0H7C,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAI3C,uBAAuB,CACrB,yBAAyB,CAAC,EAAE,OAAO,EACnC,MAAM,CAAC,EAAE,CAAC,uBAAuB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,GAAG,MAAM,CAAC,EAAE,GACjF,MAAM,CAAC,MAAM,EAAE,uCAAuC,CAAC,GAAG,KAAK,CAAC,gCAAgC,CAAC;IASvF,gBAAgB,CAC3B,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,CAAC,EACrD,OAAO,EAAE,mBAAmB,EAC5B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAI9B,uBAAuB,IAAI,MAAM,EAAE,EAAE,GAAG,SAAS;IAgBjD,wBAAwB,IAAI,aAAa,EAAE;IAS3C,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO;IAIrD,IAAI,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAEzC;IAEM,mBAAmB,IAAI,OAAO;IAIrC,IAAI,eAAe,IAAI,iCAAiC,GAAG,SAAS,CAEnE;IAEM,OAAO,IAAI,iBAAiB;IAcnC,IAAW,gBAAgB,IAAI,sBAAsB,CAIpD;IAED,IAAI,GAAG,IAAI,MAAM,CAMhB;IAED,IAAI,GAAG,IAAI,MAAM,CAMhB;IAED,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAErC;IAED,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IAEM,sBAAsB,IAAI,OAAO;IAIxC,IAAI,mBAAmB,IAAI,mBAAmB,CAI7C;IAEM,SAAS,IAAI,MAAM;IAKnB,sBAAsB,IAAI,MAAM;IAUhC,qBAAqB,IAAI,MAAM;IAK/B,6BAA6B,IAAI,OAAO;IAIxC,6BAA6B,IAAI,MAAM;IAK9C;;OAEG;IACI,MAAM;IAmBb,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,4BAA4B;CAmBrC"}