@sphereon/oid4vci-client 0.2.0 → 0.4.1-unstable.247

package/dist/OpenID4VCIClient.js

@@ -0,0 +1,361 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenID4VCIClient = void 0;
+const oid4vci_common_1 = require("@sphereon/oid4vci-common");
+const debug_1 = __importDefault(require("debug"));
+const AccessTokenClient_1 = require("./AccessTokenClient");
+const CredentialOffer_1 = require("./CredentialOffer");
+const CredentialRequestClientBuilderV1_0_09_1 = require("./CredentialRequestClientBuilderV1_0_09");
+const MetadataClient_1 = require("./MetadataClient");
+const ProofOfPossessionBuilder_1 = require("./ProofOfPossessionBuilder");
+const functions_1 = require("./functions");
+const debug = (0, debug_1.default)('sphereon:openid4vci:flow');
+class OpenID4VCIClient {
+    constructor(credentialOffer, flowType, kid, alg, clientId) {
+        this._flowType = flowType;
+        this._credentialOffer = credentialOffer;
+        this._kid = kid;
+        this._alg = alg;
+        this._clientId = clientId;
+    }
+    static fromURI({ uri, flowType, kid, alg, retrieveServerMetadata, clientId, }) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const client = new OpenID4VCIClient(CredentialOffer_1.CredentialOffer.fromURI(uri), flowType, kid, alg, clientId);
+            // noinspection PointlessBooleanExpressionJS
+            if (retrieveServerMetadata !== false) {
+                yield client.retrieveServerMetadata();
+            }
+            return client;
+        });
+    }
+    retrieveServerMetadata() {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.assertIssuerData();
+            if (!this._endpointMetadata) {
+                this._endpointMetadata = yield MetadataClient_1.MetadataClient.retrieveAllMetadataFromCredentialOffer(this._credentialOffer);
+            }
+            return this._endpointMetadata;
+        });
+    }
+    createAuthorizationRequestUrl({ clientId, codeChallengeMethod, codeChallenge, authorizationDetails, redirectUri, scope, }) {
+        var _a;
+        // Scope and authorization_details can be used in the same authorization request
+        // https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar-23#name-relationship-to-scope-param
+        if (!scope && !authorizationDetails) {
+            throw Error('Please provide a scope or authorization_details');
+        }
+        // todo: handling this because of the support for v1_0-08
+        if (this._endpointMetadata && this._endpointMetadata.issuerMetadata && 'authorization_endpoint' in this._endpointMetadata.issuerMetadata) {
+            this._endpointMetadata.authorization_endpoint = this._endpointMetadata.issuerMetadata.authorization_endpoint;
+        }
+        if (!((_a = this._endpointMetadata) === null || _a === void 0 ? void 0 : _a.authorization_endpoint)) {
+            throw Error('Server metadata does not contain authorization endpoint');
+        }
+        // add 'openid' scope if not present
+        if (scope && !scope.includes('openid')) {
+            scope = `openid ${scope}`;
+        }
+        //fixme: handle this for v11
+        const queryObj = {
+            response_type: oid4vci_common_1.ResponseType.AUTH_CODE,
+            client_id: clientId,
+            code_challenge_method: codeChallengeMethod,
+            code_challenge: codeChallenge,
+            authorization_details: JSON.stringify(this.handleAuthorizationDetails(authorizationDetails)),
+            redirect_uri: redirectUri,
+            scope: scope,
+        };
+        return (0, functions_1.convertJsonToURI)(queryObj, {
+            baseUrl: this._endpointMetadata.authorization_endpoint,
+            uriTypeProperties: ['redirect_uri', 'scope', 'authorization_details'],
+        });
+    }
+    acquirePushedAuthorizationRequestURI({ clientId, codeChallengeMethod, codeChallenge, authorizationDetails, redirectUri, scope, }) {
+        var _a;
+        return __awaiter(this, void 0, void 0, function* () {
+            // Scope and authorization_details can be used in the same authorization request
+            // https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar-23#name-relationship-to-scope-param
+            if (!scope && !authorizationDetails) {
+                throw Error('Please provide a scope or authorization_details');
+            }
+            // Authorization servers supporting PAR SHOULD include the URL of their pushed authorization request endpoint in their authorization server metadata document
+            // Note that the presence of pushed_authorization_request_endpoint is sufficient for a client to determine that it may use the PAR flow.
+            // What happens if it doesn't ???
+            if (!((_a = this._endpointMetadata) === null || _a === void 0 ? void 0 : _a.issuerMetadata) || !('pushed_authorization_request_endpoint' in this._endpointMetadata.issuerMetadata)) {
+                throw Error('Server metadata does not contain pushed authorization request endpoint');
+            }
+            // add 'openid' scope if not present
+            if (scope && !scope.includes('openid')) {
+                scope = `openid ${scope}`;
+            }
+            //fixme: handle this for v11
+            const queryObj = {
+                response_type: oid4vci_common_1.ResponseType.AUTH_CODE,
+                client_id: clientId,
+                code_challenge_method: codeChallengeMethod,
+                code_challenge: codeChallenge,
+                authorization_details: JSON.stringify(this.handleAuthorizationDetails(authorizationDetails)),
+                redirect_uri: redirectUri,
+                scope: scope,
+            };
+            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+            return yield (0, functions_1.formPost)(this._endpointMetadata.issuerMetadata.pushed_authorization_request_endpoint, JSON.stringify(queryObj));
+        });
+    }
+    handleAuthorizationDetails(authorizationDetails) {
+        if (authorizationDetails) {
+            if (Array.isArray(authorizationDetails)) {
+                return authorizationDetails.map((value) => this.handleLocations(Object.assign({}, value)));
+            }
+            else {
+                return this.handleLocations(Object.assign({}, authorizationDetails));
+            }
+        }
+        return authorizationDetails;
+    }
+    handleLocations(authorizationDetails) {
+        var _a;
+        if (authorizationDetails && (((_a = this.endpointMetadata.issuerMetadata) === null || _a === void 0 ? void 0 : _a.authorization_server) || this.endpointMetadata.authorization_endpoint)) {
+            if (authorizationDetails.locations) {
+                if (Array.isArray(authorizationDetails.locations)) {
+                    authorizationDetails.locations.push(this.endpointMetadata.issuer);
+                }
+                else {
+                    authorizationDetails.locations = [authorizationDetails.locations, this.endpointMetadata.issuer];
+                }
+            }
+            else {
+                authorizationDetails.locations = this.endpointMetadata.issuer;
+            }
+        }
+        return authorizationDetails;
+    }
+    acquireAccessToken({ pin, clientId, codeVerifier, code, redirectUri, }) {
+        var _a, _b;
+        return __awaiter(this, void 0, void 0, function* () {
+            this.assertIssuerData();
+            if (clientId) {
+                this._clientId = clientId;
+            }
+            if (!this._accessTokenResponse) {
+                const accessTokenClient = new AccessTokenClient_1.AccessTokenClient();
+                const response = yield accessTokenClient.acquireAccessToken({
+                    credentialOffer: this.credentialOffer,
+                    metadata: this._endpointMetadata,
+                    pin,
+                    codeVerifier,
+                    code,
+                    redirectUri,
+                    asOpts: { clientId: this.clientId },
+                });
+                if (response.errorBody) {
+                    debug(`Access token error:\r\n${response.errorBody}`);
+                    throw Error(`Retrieving an access token from ${(_a = this._endpointMetadata) === null || _a === void 0 ? void 0 : _a.token_endpoint} for issuer ${this.getIssuer()} failed with status: ${response.origResponse.status}`);
+                }
+                else if (!response.successBody) {
+                    debug(`Access token error. No succes body`);
+                    throw Error(`Retrieving an access token from ${(_b = this._endpointMetadata) === null || _b === void 0 ? void 0 : _b.token_endpoint} for issuer ${this.getIssuer()} failed as there was no success response body`);
+                }
+                this._accessTokenResponse = response.successBody;
+            }
+            return this._accessTokenResponse;
+        });
+    }
+    acquireCredentials({ credentialType, proofCallbacks, format, kid, alg, jti, }) {
+        var _a, _b, _c;
+        return __awaiter(this, void 0, void 0, function* () {
+            if (alg) {
+                this._alg = alg;
+            }
+            if (kid) {
+                this._kid = kid;
+            }
+            const requestBuilder = CredentialRequestClientBuilderV1_0_09_1.CredentialRequestClientBuilderV1_0_09.fromCredentialOffer({
+                credentialOffer: this.credentialOffer,
+                metadata: this.endpointMetadata,
+            });
+            requestBuilder.withToken(this.accessTokenResponse.access_token);
+            if ((_a = this.endpointMetadata) === null || _a === void 0 ? void 0 : _a.issuerMetadata) {
+                const metadata = this.endpointMetadata.issuerMetadata;
+                const types = Array.isArray(credentialType) ? credentialType : [credentialType];
+                if (metadata.credentials_supported && Array.isArray(metadata.credentials_supported)) {
+                    for (const type of types) {
+                        let typeSupported = false;
+                        for (const credentialSupported of metadata.credentials_supported) {
+                            if (credentialSupported.types.indexOf(type) != -1) {
+                                typeSupported = true;
+                            }
+                        }
+                        if (!typeSupported) {
+                            throw Error(`Not all credential types ${JSON.stringify(credentialType)} are supported by issuer ${this.getIssuer()}`);
+                        }
+                    }
+                }
+                else if (metadata.credentials_supported && !Array.isArray(metadata.credentials_supported)) {
+                    const credentialsSupported = metadata.credentials_supported;
+                    if (types.some((type) => !metadata.credentials_supported || !credentialsSupported[type])) {
+                        throw Error(`Not all credential types ${JSON.stringify(credentialType)} are supported by issuer ${this.getIssuer()}`);
+                    }
+                }
+                // todo: Format check? We might end up with some disjoint type / format combinations supported by the server
+            }
+            const credentialRequestClient = requestBuilder.build();
+            const proofBuilder = ProofOfPossessionBuilder_1.ProofOfPossessionBuilder.fromAccessTokenResponse({
+                accessTokenResponse: this.accessTokenResponse,
+                callbacks: proofCallbacks,
+            })
+                .withIssuer(this.getIssuer())
+                .withAlg(this.alg)
+                .withClientId(this.clientId)
+                .withKid(this.kid);
+            if (jti) {
+                proofBuilder.withJti(jti);
+            }
+            const response = yield credentialRequestClient.acquireCredentialsUsingProof({
+                proofInput: proofBuilder,
+                credentialType,
+                format,
+            });
+            if (response.errorBody) {
+                debug(`Credential request error:\r\n${response.errorBody}`);
+                throw Error(`Retrieving a credential from ${(_b = this._endpointMetadata) === null || _b === void 0 ? void 0 : _b.credential_endpoint} for issuer ${this.getIssuer()} failed with status: ${response.origResponse.status}`);
+            }
+            else if (!response.successBody) {
+                debug(`Credential request error. No success body`);
+                throw Error(`Retrieving a credential from ${(_c = this._endpointMetadata) === null || _c === void 0 ? void 0 : _c.credential_endpoint} for issuer ${this.getIssuer()} failed as there was no success response body`);
+            }
+            return response.successBody;
+        });
+    }
+    getCredentialsSupported(restrictToInitiationTypes, supportedType) {
+        var _a, _b;
+        const credentialsSupported = (_b = (_a = this.endpointMetadata) === null || _a === void 0 ? void 0 : _a.issuerMetadata) === null || _b === void 0 ? void 0 : _b.credentials_supported;
+        if (!credentialsSupported) {
+            return [];
+        }
+        else if (!restrictToInitiationTypes) {
+            return credentialsSupported;
+        }
+        /**
+         * the following (not array part is a legacy code from version 1_0-08 which jff implementors used)
+         */
+        if (!Array.isArray(credentialsSupported)) {
+            const credentialsSupportedV8 = credentialsSupported;
+            const initiationTypes = supportedType ? [supportedType] : this.getCredentialTypes();
+            const supported = {};
+            for (const [key, value] of Object.entries(credentialsSupportedV8)) {
+                if (initiationTypes.includes(key)) {
+                    supported[key] = value;
+                }
+            }
+            // todo: fix this later. we're returning CredentialSupportedV1_0_08 as a list of CredentialSupported (for v09 onward)
+            return supported;
+        }
+        const initiationTypes = supportedType ? [supportedType] : this.getCredentialTypes();
+        const credentialSupportedOverlap = [];
+        for (const supported of credentialsSupported) {
+            const supportedTypeOverlap = [];
+            for (const type of supported.types) {
+                initiationTypes.includes(type);
+                supportedTypeOverlap.push(type);
+            }
+            if (supportedTypeOverlap.length > 0) {
+                credentialSupportedOverlap.push({
+                    types: supportedTypeOverlap,
+                    format: supported.format,
+                    cryptographic_suites_supported: supported.cryptographic_suites_supported,
+                    cryptographic_binding_methods_supported: supported.cryptographic_binding_methods_supported,
+                });
+            }
+        }
+        return credentialSupportedOverlap;
+    }
+    getCredentialMetadata(type) {
+        return this.getCredentialsSupported(false, type);
+    }
+    // todo https://sphereon.atlassian.net/browse/VDX-184
+    getCredentialTypes() {
+        return typeof this.credentialOffer.request.credential_type === 'string'
+            ? [this.credentialOffer.request.credential_type]
+            : this.credentialOffer.request.credential_type;
+    }
+    get flowType() {
+        return this._flowType;
+    }
+    get credentialOffer() {
+        return this._credentialOffer;
+    }
+    get endpointMetadata() {
+        this.assertServerMetadata();
+        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+        return this._endpointMetadata;
+    }
+    get kid() {
+        this.assertIssuerData();
+        if (!this._kid) {
+            throw new Error('No value for kid is supplied');
+        }
+        return this._kid;
+    }
+    get alg() {
+        this.assertIssuerData();
+        if (!this._alg) {
+            throw new Error('No value for alg is supplied');
+        }
+        return this._alg;
+    }
+    get clientId() {
+        if (!this._clientId) {
+            throw Error('No client id present');
+        }
+        return this._clientId;
+    }
+    get accessTokenResponse() {
+        this.assertAccessToken();
+        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+        return this._accessTokenResponse;
+    }
+    getIssuer() {
+        this.assertIssuerData();
+        return this._endpointMetadata ? this.endpointMetadata.issuer : this.getIssuer();
+    }
+    getAccessTokenEndpoint() {
+        this.assertIssuerData();
+        return this.endpointMetadata
+            ? this.endpointMetadata.token_endpoint
+            : AccessTokenClient_1.AccessTokenClient.determineTokenURL({ issuerOpts: { issuer: this.getIssuer() } });
+    }
+    getCredentialEndpoint() {
+        this.assertIssuerData();
+        return this.endpointMetadata ? this.endpointMetadata.credential_endpoint : `${this.getIssuer()}/credential`;
+    }
+    assertIssuerData() {
+        if (!this._credentialOffer) {
+            throw Error(`No issuance initiation or credential offer present`);
+        }
+    }
+    assertServerMetadata() {
+        if (!this._endpointMetadata) {
+            throw Error('No server metadata');
+        }
+    }
+    assertAccessToken() {
+        if (!this._accessTokenResponse) {
+            throw Error(`No access token present`);
+        }
+    }
+}
+exports.OpenID4VCIClient = OpenID4VCIClient;
+//# sourceMappingURL=OpenID4VCIClient.js.map

package/dist/OpenID4VCIClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenID4VCIClient.js","sourceRoot":"","sources":["../lib/OpenID4VCIClient.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAgBkC;AAGlC,kDAA0B;AAE1B,2DAAwD;AACxD,uDAAoD;AACpD,mGAAgG;AAChG,qDAAkD;AAClD,yEAAsE;AACtE,2CAAyD;AAEzD,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,0BAA0B,CAAC,CAAC;AAmBhD,MAAa,gBAAgB;IAS3B,YACE,eAAkD,EAClD,QAAuB,EACvB,GAAY,EACZ,GAAkB,EAClB,QAAiB;QAEjB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAEM,MAAM,CAAO,OAAO,CAAC,EAC1B,GAAG,EACH,QAAQ,EACR,GAAG,EACH,GAAG,EACH,sBAAsB,EACtB,QAAQ,GAQT;;YACC,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,iCAAe,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChG,4CAA4C;YAC5C,IAAI,sBAAsB,KAAK,KAAK,EAAE;gBACpC,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC;aACvC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAEY,sBAAsB;;YACjC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC3B,IAAI,CAAC,iBAAiB,GAAG,MAAM,+BAAc,CAAC,sCAAsC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;aAC7G;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;QAChC,CAAC;KAAA;IAEM,6BAA6B,CAAC,EACnC,QAAQ,EACR,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,KAAK,GACW;;QAChB,gFAAgF;QAChF,iGAAiG;QACjG,IAAI,CAAC,KAAK,IAAI,CAAC,oBAAoB,EAAE;YACnC,MAAM,KAAK,CAAC,iDAAiD,CAAC,CAAC;SAChE;QACD,yDAAyD;QACzD,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB,CAAC,cAAc,IAAI,wBAAwB,IAAI,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE;YACxI,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,sBAAgC,CAAC;SACxH;QACD,IAAI,CAAC,CAAA,MAAA,IAAI,CAAC,iBAAiB,0CAAE,sBAAsB,CAAA,EAAE;YACnD,MAAM,KAAK,CAAC,yDAAyD,CAAC,CAAC;SACxE;QAED,oCAAoC;QACpC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YACtC,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC;SAC3B;QAED,4BAA4B;QAC5B,MAAM,QAAQ,GAAG;YACf,aAAa,EAAE,6BAAY,CAAC,SAAS;YACrC,SAAS,EAAE,QAAQ;YACnB,qBAAqB,EAAE,mBAAmB;YAC1C,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;YAC5F,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,KAAK;SACkB,CAAC;QAEjC,OAAO,IAAA,4BAAgB,EAAC,QAAQ,EAAE;YAChC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,sBAAsB;YACtD,iBAAiB,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,uBAAuB,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IAEY,oCAAoC,CAAC,EAChD,QAAQ,EACR,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,KAAK,GACW;;;YAChB,gFAAgF;YAChF,iGAAiG;YACjG,IAAI,CAAC,KAAK,IAAI,CAAC,oBAAoB,EAAE;gBACnC,MAAM,KAAK,CAAC,iDAAiD,CAAC,CAAC;aAChE;YAED,6JAA6J;YAC7J,wIAAwI;YACxI,iCAAiC;YACjC,IAAI,CAAC,CAAA,MAAA,IAAI,CAAC,iBAAiB,0CAAE,cAAc,CAAA,IAAI,CAAC,CAAC,uCAAuC,IAAI,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE;gBAClI,MAAM,KAAK,CAAC,wEAAwE,CAAC,CAAC;aACvF;YAED,oCAAoC;YACpC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACtC,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC;aAC3B;YAED,4BAA4B;YAC5B,MAAM,QAAQ,GAAgC;gBAC5C,aAAa,EAAE,6BAAY,CAAC,SAAS;gBACrC,SAAS,EAAE,QAAQ;gBACnB,qBAAqB,EAAE,mBAAmB;gBAC1C,cAAc,EAAE,aAAa;gBAC7B,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;gBAC5F,YAAY,EAAE,WAAW;gBACzB,KAAK,EAAE,KAAK;aACb,CAAC;YACF,oEAAoE;YACpE,OAAO,MAAM,IAAA,oBAAQ,EAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,qCAAsC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;;KAC/H;IAEM,0BAA0B,CAAC,oBAAkD;QAClF,IAAI,oBAAoB,EAAE;YACxB,IAAI,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE;gBACvC,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,mBAAM,KAAK,EAAG,CAAC,CAAC;aAChF;iBAAM;gBACL,OAAO,IAAI,CAAC,eAAe,mBAAM,oBAAoB,EAAG,CAAC;aAC1D;SACF;QACD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACO,eAAe,CAAC,oBAAiC;;QACvD,IAAI,oBAAoB,IAAI,CAAC,CAAA,MAAA,IAAI,CAAC,gBAAgB,CAAC,cAAc,0CAAE,oBAAoB,KAAI,IAAI,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE;YACxI,IAAI,oBAAoB,CAAC,SAAS,EAAE;gBAClC,IAAI,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE;oBAChD,oBAAoB,CAAC,SAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;iBACjF;qBAAM;oBACL,oBAAoB,CAAC,SAAS,GAAG,CAAC,oBAAoB,CAAC,SAAmB,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;iBAC3G;aACF;iBAAM;gBACL,oBAAoB,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;aAC/D;SACF;QACD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAEY,kBAAkB,CAAC,EAC9B,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,WAAW,GAOZ;;;YACC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,IAAI,QAAQ,EAAE;gBACZ,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;aAC3B;YACD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC9B,MAAM,iBAAiB,GAAG,IAAI,qCAAiB,EAAE,CAAC;gBAElD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC;oBAC1D,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,QAAQ,EAAE,IAAI,CAAC,iBAAiB;oBAChC,GAAG;oBACH,YAAY;oBACZ,IAAI;oBACJ,WAAW;oBACX,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;iBACpC,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,KAAK,CAAC,0BAA0B,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;oBACtD,MAAM,KAAK,CACT,mCAAmC,MAAA,IAAI,CAAC,iBAAiB,0CAAE,cAAc,eAAe,IAAI,CAAC,SAAS,EAAE,wBACtG,QAAQ,CAAC,YAAY,CAAC,MACxB,EAAE,CACH,CAAC;iBACH;qBAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;oBAChC,KAAK,CAAC,oCAAoC,CAAC,CAAC;oBAC5C,MAAM,KAAK,CACT,mCACE,MAAA,IAAI,CAAC,iBAAiB,0CAAE,cAC1B,eAAe,IAAI,CAAC,SAAS,EAAE,+CAA+C,CAC/E,CAAC;iBACH;gBACD,IAAI,CAAC,oBAAoB,GAAG,QAAQ,CAAC,WAAW,CAAC;aAClD;YAED,OAAO,IAAI,CAAC,oBAAoB,CAAC;;KAClC;IAEY,kBAAkB,CAAC,EAC9B,cAAc,EACd,cAAc,EACd,MAAM,EACN,GAAG,EACH,GAAG,EACH,GAAG,GAQJ;;;YACC,IAAI,GAAG,EAAE;gBACP,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;aACjB;YACD,IAAI,GAAG,EAAE;gBACP,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;aACjB;YAED,MAAM,cAAc,GAAG,6EAAqC,CAAC,mBAAmB,CAAC;gBAC/E,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,QAAQ,EAAE,IAAI,CAAC,gBAAgB;aAChC,CAAC,CAAC;YACH,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAChE,IAAI,MAAA,IAAI,CAAC,gBAAgB,0CAAE,cAAc,EAAE;gBACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACtD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;gBAChF,IAAI,QAAQ,CAAC,qBAAqB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE;oBACnF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;wBACxB,IAAI,aAAa,GAAG,KAAK,CAAC;wBAC1B,KAAK,MAAM,mBAAmB,IAAI,QAAQ,CAAC,qBAAqB,EAAE;4BAChE,IAAI,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE;gCACjD,aAAa,GAAG,IAAI,CAAC;6BACtB;yBACF;wBACD,IAAI,CAAC,aAAa,EAAE;4BAClB,MAAM,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,4BAA4B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;yBACvH;qBACF;iBACF;qBAAM,IAAI,QAAQ,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE;oBAC3F,MAAM,oBAAoB,GAAG,QAAQ,CAAC,qBAAuD,CAAC;oBAC9F,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,EAAE;wBACxF,MAAM,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,4BAA4B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;qBACvH;iBACF;gBACD,4GAA4G;aAC7G;YACD,MAAM,uBAAuB,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;YACvD,MAAM,YAAY,GAAG,mDAAwB,CAAC,uBAAuB,CAAC;gBACpE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,SAAS,EAAE,cAAc;aAC1B,CAAC;iBACC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;iBAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;iBACjB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;iBAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAErB,IAAI,GAAG,EAAE;gBACP,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;aAC3B;YACD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,4BAA4B,CAAC;gBAC1E,UAAU,EAAE,YAAY;gBACxB,cAAc;gBACd,MAAM;aACP,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,SAAS,EAAE;gBACtB,KAAK,CAAC,gCAAgC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC5D,MAAM,KAAK,CACT,gCAAgC,MAAA,IAAI,CAAC,iBAAiB,0CAAE,mBAAmB,eAAe,IAAI,CAAC,SAAS,EAAE,wBACxG,QAAQ,CAAC,YAAY,CAAC,MACxB,EAAE,CACH,CAAC;aACH;iBAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAChC,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBACnD,MAAM,KAAK,CACT,gCACE,MAAA,IAAI,CAAC,iBAAiB,0CAAE,mBAC1B,eAAe,IAAI,CAAC,SAAS,EAAE,+CAA+C,CAC/E,CAAC;aACH;YACD,OAAO,QAAQ,CAAC,WAAW,CAAC;;KAC7B;IAED,uBAAuB,CAAC,yBAAkC,EAAE,aAAsB;;QAChF,MAAM,oBAAoB,GAAG,MAAA,MAAA,IAAI,CAAC,gBAAgB,0CAAE,cAAc,0CAAE,qBAAqB,CAAC;QAC1F,IAAI,CAAC,oBAAoB,EAAE;YACzB,OAAO,EAAE,CAAC;SACX;aAAM,IAAI,CAAC,yBAAyB,EAAE;YACrC,OAAO,oBAAoB,CAAC;SAC7B;QACD;;WAEG;QACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE;YACxC,MAAM,sBAAsB,GAA+B,oBAAkD,CAAC;YAC9G,MAAM,eAAe,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACpF,MAAM,SAAS,GAA4B,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE;gBACjE,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;oBACjC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;iBACxB;aACF;YACD,qHAAqH;YACrH,OAAO,SAA6C,CAAC;SACtD;QACD,MAAM,eAAe,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACpF,MAAM,0BAA0B,GAA0B,EAAE,CAAC;QAC7D,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE;YAC5C,MAAM,oBAAoB,GAAa,EAAE,CAAC;YAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE;gBAClC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC/B,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACjC;YACD,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE;gBACnC,0BAA0B,CAAC,IAAI,CAAC;oBAC9B,KAAK,EAAE,oBAAoB;oBAC3B,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,8BAA8B,EAAE,SAAS,CAAC,8BAA8B;oBACxE,uCAAuC,EAAE,SAAS,CAAC,uCAAuC;iBAC3F,CAAC,CAAC;aACJ;SACF;QACD,OAAO,0BAA0B,CAAC;IACpC,CAAC;IAED,qBAAqB,CAAC,IAAY;QAChC,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,qDAAqD;IACrD,kBAAkB;QAChB,OAAO,OAAQ,IAAI,CAAC,eAAe,CAAC,OAAyC,CAAC,eAAe,KAAK,QAAQ;YACxG,CAAC,CAAC,CAAE,IAAI,CAAC,eAAe,CAAC,OAAyC,CAAC,eAAyB,CAAC;YAC7F,CAAC,CAAG,IAAI,CAAC,eAAe,CAAC,OAAyC,CAAC,eAA4B,CAAC;IACpG,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,IAAW,gBAAgB;QACzB,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,oEAAoE;QACpE,OAAO,IAAI,CAAC,iBAAkB,CAAC;IACjC,CAAC;IAED,IAAI,GAAG;QACL,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;SACjD;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,GAAG;QACL,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;SACjD;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,QAAQ;QACV,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YACnB,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;SACrC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,mBAAmB;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,oEAAoE;QACpE,OAAO,IAAI,CAAC,oBAAqB,CAAC;IACpC,CAAC;IAEM,SAAS;QACd,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IAClF,CAAC;IAEM,sBAAsB;QAC3B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,gBAAgB;YAC1B,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc;YACtC,CAAC,CAAC,qCAAiB,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACxF,CAAC;IAEM,qBAAqB;QAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;IAC9G,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC1B,MAAM,KAAK,CAAC,oDAAoD,CAAC,CAAC;SACnE;IACH,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC3B,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;SACnC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9B,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;SACxC;IACH,CAAC;CACF;AA7aD,4CA6aC"}

package/dist/ProofOfPossessionBuilder.d.ts

@@ -0,0 +1,35 @@
+import { AccessTokenResponse, Alg, EndpointMetadata, Jwt, ProofOfPossession, ProofOfPossessionCallbacks } from '@sphereon/oid4vci-common';
+export declare class ProofOfPossessionBuilder {
+    private readonly proof?;
+    private readonly callbacks?;
+    private kid?;
+    private clientId?;
+    private issuer?;
+    private jwt?;
+    private alg?;
+    private jti?;
+    private cNonce?;
+    private typ?;
+    private constructor();
+    static fromJwt({ jwt, callbacks }: {
+        jwt: Jwt;
+        callbacks: ProofOfPossessionCallbacks;
+    }): ProofOfPossessionBuilder;
+    static fromAccessTokenResponse({ accessTokenResponse, callbacks, }: {
+        accessTokenResponse: AccessTokenResponse;
+        callbacks: ProofOfPossessionCallbacks;
+    }): ProofOfPossessionBuilder;
+    static fromProof(proof: ProofOfPossession): ProofOfPossessionBuilder;
+    withClientId(clientId: string): ProofOfPossessionBuilder;
+    withKid(kid: string): ProofOfPossessionBuilder;
+    withIssuer(issuer: string): ProofOfPossessionBuilder;
+    withAlg(alg: Alg | string): ProofOfPossessionBuilder;
+    withJti(jti: string): ProofOfPossessionBuilder;
+    withTyp(typ: string): ProofOfPossessionBuilder;
+    withAccessTokenNonce(cNonce: string): ProofOfPossessionBuilder;
+    withAccessTokenResponse(accessToken: AccessTokenResponse): ProofOfPossessionBuilder;
+    withEndpointMetadata(endpointMetadata: EndpointMetadata): ProofOfPossessionBuilder;
+    withJwt(jwt: Jwt): ProofOfPossessionBuilder;
+    build(): Promise<ProofOfPossession>;
+}
+//# sourceMappingURL=ProofOfPossessionBuilder.d.ts.map

package/dist/ProofOfPossessionBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProofOfPossessionBuilder.d.ts","sourceRoot":"","sources":["../lib/ProofOfPossessionBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,GAAG,EACH,gBAAgB,EAChB,GAAG,EAGH,iBAAiB,EACjB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAIlC,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA6B;IAExD,OAAO,CAAC,GAAG,CAAC,CAAS;IACrB,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,GAAG,CAAC,CAAM;IAClB,OAAO,CAAC,GAAG,CAAC,CAAS;IACrB,OAAO,CAAC,GAAG,CAAC,CAAS;IACrB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,GAAG,CAAC,CAAS;IAErB,OAAO;IAqBP,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QAAE,GAAG,EAAE,GAAG,CAAC;QAAC,SAAS,EAAE,0BAA0B,CAAA;KAAE,GAAG,wBAAwB;IAIjH,MAAM,CAAC,uBAAuB,CAAC,EAC7B,mBAAmB,EACnB,SAAS,GACV,EAAE;QACD,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,SAAS,EAAE,0BAA0B,CAAC;KACvC,GAAG,wBAAwB;IAI5B,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,iBAAiB,GAAG,wBAAwB;IAIpE,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB;IAKxD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB;IAK9C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB;IAKpD,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,wBAAwB;IAKpD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB;IAK9C,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB;IAK9C,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB;IAK9D,uBAAuB,CAAC,WAAW,EAAE,mBAAmB,GAAG,wBAAwB;IAOnF,oBAAoB,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,wBAAwB;IAKlF,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,wBAAwB;IAuB9B,KAAK,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAoBjD"}

package/dist/ProofOfPossessionBuilder.js

@@ -0,0 +1,120 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProofOfPossessionBuilder = void 0;
+const oid4vci_common_1 = require("@sphereon/oid4vci-common");
+const functions_1 = require("./functions");
+class ProofOfPossessionBuilder {
+    constructor({ proof, callbacks, jwt, accessTokenResponse, }) {
+        this.proof = proof;
+        this.callbacks = callbacks;
+        if (jwt) {
+            this.withJwt(jwt);
+        }
+        if (accessTokenResponse) {
+            this.withAccessTokenResponse(accessTokenResponse);
+        }
+    }
+    static fromJwt({ jwt, callbacks }) {
+        return new ProofOfPossessionBuilder({ callbacks, jwt });
+    }
+    static fromAccessTokenResponse({ accessTokenResponse, callbacks, }) {
+        return new ProofOfPossessionBuilder({ callbacks, accessTokenResponse });
+    }
+    static fromProof(proof) {
+        return new ProofOfPossessionBuilder({ proof });
+    }
+    withClientId(clientId) {
+        this.clientId = clientId;
+        return this;
+    }
+    withKid(kid) {
+        this.kid = kid;
+        return this;
+    }
+    withIssuer(issuer) {
+        this.issuer = issuer;
+        return this;
+    }
+    withAlg(alg) {
+        this.alg = alg;
+        return this;
+    }
+    withJti(jti) {
+        this.jti = jti;
+        return this;
+    }
+    withTyp(typ) {
+        this.typ = typ;
+        return this;
+    }
+    withAccessTokenNonce(cNonce) {
+        this.cNonce = cNonce;
+        return this;
+    }
+    withAccessTokenResponse(accessToken) {
+        if (accessToken.c_nonce) {
+            this.withAccessTokenNonce(accessToken.c_nonce);
+        }
+        return this;
+    }
+    withEndpointMetadata(endpointMetadata) {
+        this.withIssuer(endpointMetadata.issuer);
+        return this;
+    }
+    withJwt(jwt) {
+        if (!jwt) {
+            throw new Error(oid4vci_common_1.NO_JWT_PROVIDED);
+        }
+        this.jwt = jwt;
+        if (jwt.header) {
+            if (jwt.header.kid) {
+                this.withKid(jwt.header.kid);
+            }
+            if (jwt.header.typ) {
+                this.withTyp(jwt.header.typ);
+            }
+            this.withAlg(jwt.header.alg);
+        }
+        if (jwt.payload) {
+            if (jwt.payload.iss)
+                this.withClientId(jwt.payload.iss);
+            if (jwt.payload.aud)
+                this.withIssuer(jwt.payload.aud);
+            if (jwt.payload.jti)
+                this.withJti(jwt.payload.jti);
+            if (jwt.payload.nonce)
+                this.withAccessTokenNonce(jwt.payload.nonce);
+        }
+        return this;
+    }
+    build() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this.proof) {
+                return Promise.resolve(this.proof);
+            }
+            else if (this.callbacks) {
+                return yield (0, functions_1.createProofOfPossession)(this.callbacks, {
+                    typ: this.typ,
+                    kid: this.kid,
+                    jti: this.jti,
+                    alg: this.alg,
+                    issuer: this.issuer,
+                    clientId: this.clientId,
+                    nonce: this.cNonce,
+                }, this.jwt);
+            }
+            throw new Error(oid4vci_common_1.PROOF_CANT_BE_CONSTRUCTED);
+        });
+    }
+}
+exports.ProofOfPossessionBuilder = ProofOfPossessionBuilder;
+//# sourceMappingURL=ProofOfPossessionBuilder.js.map

package/dist/ProofOfPossessionBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProofOfPossessionBuilder.js","sourceRoot":"","sources":["../lib/ProofOfPossessionBuilder.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6DASkC;AAElC,2CAAsD;AAEtD,MAAa,wBAAwB;IAanC,YAAoB,EAClB,KAAK,EACL,SAAS,EACT,GAAG,EACH,mBAAmB,GAMpB;QACC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,GAAG,EAAE;YACP,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;SACnB;QACD,IAAI,mBAAmB,EAAE;YACvB,IAAI,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;SACnD;IACH,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAuD;QACpF,OAAO,IAAI,wBAAwB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,uBAAuB,CAAC,EAC7B,mBAAmB,EACnB,SAAS,GAIV;QACC,OAAO,IAAI,wBAAwB,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,KAAwB;QACvC,OAAO,IAAI,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAiB;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oBAAoB,CAAC,MAAc;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uBAAuB,CAAC,WAAgC;QACtD,IAAI,WAAW,CAAC,OAAO,EAAE;YACvB,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;SAChD;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oBAAoB,CAAC,gBAAkC;QACrD,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAQ;QACd,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,IAAI,KAAK,CAAC,gCAAe,CAAC,CAAC;SAClC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,GAAG,CAAC,MAAM,EAAE;YACd,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC9B;YACD,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC9B;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SAC9B;QACD,IAAI,GAAG,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG;gBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG;gBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK;gBAAE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SACrE;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEY,KAAK;;YAChB,IAAI,IAAI,CAAC,KAAK,EAAE;gBACd,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACpC;iBAAM,IAAI,IAAI,CAAC,SAAS,EAAE;gBACzB,OAAO,MAAM,IAAA,mCAAuB,EAClC,IAAI,CAAC,SAAS,EACd;oBACE,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,IAAI,CAAC,MAAM;iBACnB,EACD,IAAI,CAAC,GAAG,CACT,CAAC;aACH;YACD,MAAM,IAAI,KAAK,CAAC,0CAAyB,CAAC,CAAC;QAC7C,CAAC;KAAA;CACF;AA9ID,4DA8IC"}

package/dist/{main/lib/functions → functions}/Encoding.d.ts

@@ -1,17 +1,20 @@
-import { DecodeURIAsJsonOpts, EncodeJsonAsURIOpts } from '../types';
-/**
- * @function encodeJsonAsURI encodes a Json object into a URI
- * @param json object
- * @param opts:
- *          - urlTypeProperties: a list of properties of which the value is a URL
- *          - arrayTypeProperties: a list of properties which are an array
- */
-export declare function convertJsonToURI(json: unknown, opts?: EncodeJsonAsURIOpts): string;
-/**
- * @function decodeUriAsJson decodes an URI into a Json object
- * @param uri string
- * @param opts:
- *          - requiredProperties: the required properties
- *          - arrayTypeProperties: properties that can show up more that once
- */
-export declare function convertURIToJsonObject(uri: string, opts?: DecodeURIAsJsonOpts): unknown;
+import { DecodeURIAsJsonOpts, EncodeJsonAsURIOpts } from '@sphereon/oid4vci-common';
+/**
+ * @function encodeJsonAsURI encodes a Json object into a URI
+ * @param json object
+ * @param opts:
+ *          - urlTypeProperties: a list of properties of which the value is a URL
+ *          - arrayTypeProperties: a list of properties which are an array
+ */
+export declare function convertJsonToURI(json: {
+    [s: string]: any;
+} | ArrayLike<any> | string, opts?: EncodeJsonAsURIOpts): string;
+/**
+ * @function decodeUriAsJson decodes a URI into a Json object
+ * @param uri string
+ * @param opts:
+ *          - requiredProperties: the required properties
+ *          - arrayTypeProperties: properties that can show up more that once
+ */
+export declare function convertURIToJsonObject(uri: string, opts?: DecodeURIAsJsonOpts): unknown;
+//# sourceMappingURL=Encoding.d.ts.map

package/dist/functions/Encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Encoding.d.ts","sourceRoot":"","sources":["../../lib/functions/Encoding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,mBAAmB,EAAE,mBAAmB,EAAe,MAAM,0BAA0B,CAAC;AAE7G;;;;;;GAMG;AAEH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAyCzH;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAMvF"}