@sphereon/oid4vci-client 0.19.1-feature.SSISDK.78.code.auth.flow.220 → 0.19.1-feature.SSISDK.78.code.auth.flow.224

package/dist/index.cjs

@@ -1205,7 +1205,7 @@ var createAuthorizationRequestUrl = /* @__PURE__ */ __name(async ({ pkce, endpoi
     ...credentialOffer?.issuerState && {
       issuer_state: credentialOffer.issuerState
     },
-    scope: authorizationRequest.scope
+    scope: authorizationRequest.scope ?? "openid"
   };
   if (credentialOffer?.issuerState) {
     queryObj.state = credentialOffer?.issuerState;
@@ -1214,7 +1214,7 @@ var createAuthorizationRequestUrl = /* @__PURE__ */ __name(async ({ pkce, endpoi
     throw Error(`PAR mode is set to required by Authorization Server does not support PAR!`);
   } else if (parEndpoint && parMode !== import_oid4vci_common11.PARMode.NEVER) {
     logger4.debug(`USING PAR with endpoint ${parEndpoint}`);
-    const parResponse = await (0, import_oid4vci_common11.formPost)(parEndpoint, (0, import_oid4vci_common11.convertJsonToURI)(queryObj, {
+    const parBody = (0, import_oid4vci_common11.convertJsonToURI)(queryObj, {
       mode: import_oid4vci_common11.JsonURIMode.X_FORM_WWW_URLENCODED,
       uriTypeProperties: [
         "client_id",
@@ -1225,7 +1225,8 @@ var createAuthorizationRequestUrl = /* @__PURE__ */ __name(async ({ pkce, endpoi
         "issuer_state",
         "state"
       ]
-    }), {
+    });
+    const parResponse = await (0, import_oid4vci_common11.formPost)(parEndpoint, parBody, {
       contentType: "application/x-www-form-urlencoded",
       accept: "application/json"
     });
@@ -1304,6 +1305,11 @@ var handleLocations = /* @__PURE__ */ __name((endpointMetadata, authorizationDet
         endpointMetadata.issuer
       ];
     }
+    if (Array.isArray(authorizationDetails.locations)) {
+      authorizationDetails.locations = [
+        ...new Set(authorizationDetails.locations)
+      ];
+    }
   }
   return authorizationDetails;
 }, "handleLocations");
@@ -1503,11 +1509,6 @@ var CredentialRequestClient = class {
       });
     }
     response.access_token = requestToken;
-    if (uniformRequest.credential_subject_issuance && response.successBody || response.successBody?.credential_subject_issuance) {
-      if (JSON.stringify(uniformRequest.credential_subject_issuance) !== JSON.stringify(response.successBody?.credential_subject_issuance)) {
-        throw Error("Subject signing was requested, but issuer did not provide the options in its response");
-      }
-    }
     logger5.debug(`Credential endpoint ${credentialEndpoint} response:\r
 ${JSON.stringify(response, null, 2)}`);
     return {