@sphereon/oid4vci-common 0.18.2 → 0.19.1-next.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +201 -201
- package/dist/index.cjs +119 -192
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +2 -62
- package/dist/index.d.ts +2 -62
- package/dist/index.js +79 -56
- package/dist/index.js.map +1 -1
- package/package.json +12 -13
package/dist/index.cjs
CHANGED
|
@@ -6,6 +6,12 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
|
6
6
|
var __getProtoOf = Object.getPrototypeOf;
|
|
7
7
|
var __hasOwnProp = Object.prototype.hasOwnProperty;
|
|
8
8
|
var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
|
|
9
|
+
var __esm = (fn, res) => function __init() {
|
|
10
|
+
return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
|
|
11
|
+
};
|
|
12
|
+
var __commonJS = (cb, mod) => function __require() {
|
|
13
|
+
return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
|
|
14
|
+
};
|
|
9
15
|
var __export = (target, all) => {
|
|
10
16
|
for (var name in all)
|
|
11
17
|
__defProp(target, name, { get: all[name], enumerable: true });
|
|
@@ -28,6 +34,48 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
|
|
|
28
34
|
));
|
|
29
35
|
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
30
36
|
|
|
37
|
+
// ../../node_modules/.pnpm/tsup@8.5.0_@swc+core@1.11.29_postcss@8.5.3_tsx@4.19.4_typescript@5.8.3_yaml@2.8.0/node_modules/tsup/assets/cjs_shims.js
|
|
38
|
+
var init_cjs_shims = __esm({
|
|
39
|
+
"../../node_modules/.pnpm/tsup@8.5.0_@swc+core@1.11.29_postcss@8.5.3_tsx@4.19.4_typescript@5.8.3_yaml@2.8.0/node_modules/tsup/assets/cjs_shims.js"() {
|
|
40
|
+
"use strict";
|
|
41
|
+
}
|
|
42
|
+
});
|
|
43
|
+
|
|
44
|
+
// lib/functions/randomBytes.cjs
|
|
45
|
+
var require_randomBytes = __commonJS({
|
|
46
|
+
"lib/functions/randomBytes.cjs"(exports, module2) {
|
|
47
|
+
"use strict";
|
|
48
|
+
init_cjs_shims();
|
|
49
|
+
var MAX_BYTES = 65536;
|
|
50
|
+
var MAX_UINT32 = 4294967295;
|
|
51
|
+
var _global = typeof globalThis !== "undefined" ? globalThis : global;
|
|
52
|
+
var crypto = _global.crypto || _global.msCrypto;
|
|
53
|
+
if (!crypto) {
|
|
54
|
+
try {
|
|
55
|
+
crypto = require("crypto");
|
|
56
|
+
} catch (err) {
|
|
57
|
+
throw Error("crypto module is not available");
|
|
58
|
+
}
|
|
59
|
+
}
|
|
60
|
+
function randomBytes2(size) {
|
|
61
|
+
if (size > MAX_UINT32) throw new Error("requested too many random bytes");
|
|
62
|
+
const bytes = Buffer.allocUnsafe(size);
|
|
63
|
+
if (size > 0) {
|
|
64
|
+
if (size > MAX_BYTES) {
|
|
65
|
+
for (let generated = 0; generated < size; generated += MAX_BYTES) {
|
|
66
|
+
crypto.getRandomValues(bytes.slice(generated, generated + MAX_BYTES));
|
|
67
|
+
}
|
|
68
|
+
} else {
|
|
69
|
+
crypto.getRandomValues(bytes);
|
|
70
|
+
}
|
|
71
|
+
}
|
|
72
|
+
return Uint8Array.from(bytes);
|
|
73
|
+
}
|
|
74
|
+
__name(randomBytes2, "randomBytes");
|
|
75
|
+
module2.exports = randomBytes2;
|
|
76
|
+
}
|
|
77
|
+
});
|
|
78
|
+
|
|
31
79
|
// lib/index.ts
|
|
32
80
|
var index_exports = {};
|
|
33
81
|
__export(index_exports, {
|
|
@@ -151,7 +199,6 @@ __export(index_exports, {
|
|
|
151
199
|
isValidURL: () => isValidURL,
|
|
152
200
|
isW3cCredentialSupported: () => isW3cCredentialSupported,
|
|
153
201
|
post: () => post,
|
|
154
|
-
randomBytes: () => randomBytes,
|
|
155
202
|
resolveCredentialOfferURI: () => resolveCredentialOfferURI,
|
|
156
203
|
toAuthorizationResponsePayload: () => toAuthorizationResponsePayload,
|
|
157
204
|
toUniformCredentialOfferPayload: () => toUniformCredentialOfferPayload,
|
|
@@ -162,45 +209,26 @@ __export(index_exports, {
|
|
|
162
209
|
validateJWT: () => validateJWT
|
|
163
210
|
});
|
|
164
211
|
module.exports = __toCommonJS(index_exports);
|
|
165
|
-
|
|
212
|
+
init_cjs_shims();
|
|
213
|
+
var import_ssi_types5 = require("@sphereon/ssi-types");
|
|
166
214
|
|
|
167
|
-
// lib/functions/
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
}
|
|
182
|
-
}
|
|
183
|
-
var randomBytes = /* @__PURE__ */ __name((size) => {
|
|
184
|
-
if (size > MAX_UINT32) throw new Error("requested too many random bytes");
|
|
185
|
-
const bytes = Buffer.allocUnsafe(size);
|
|
186
|
-
if (size > 0) {
|
|
187
|
-
if (size > MAX_BYTES) {
|
|
188
|
-
for (let generated = 0; generated < size; generated += MAX_BYTES) {
|
|
189
|
-
crypto.getRandomValues(bytes.slice(generated, generated + MAX_BYTES));
|
|
190
|
-
}
|
|
191
|
-
} else {
|
|
192
|
-
crypto.getRandomValues(bytes);
|
|
193
|
-
}
|
|
194
|
-
}
|
|
195
|
-
return Uint8Array.from(bytes);
|
|
196
|
-
}, "randomBytes");
|
|
197
|
-
if (crypto && crypto.getRandomValues) {
|
|
198
|
-
module.exports = randomBytes;
|
|
199
|
-
} else {
|
|
200
|
-
module.exports = oldBrowser;
|
|
201
|
-
}
|
|
215
|
+
// lib/functions/index.ts
|
|
216
|
+
init_cjs_shims();
|
|
217
|
+
|
|
218
|
+
// lib/functions/CredentialRequestUtil.ts
|
|
219
|
+
init_cjs_shims();
|
|
220
|
+
|
|
221
|
+
// lib/types/index.ts
|
|
222
|
+
init_cjs_shims();
|
|
223
|
+
|
|
224
|
+
// lib/types/OpenIDClient.ts
|
|
225
|
+
init_cjs_shims();
|
|
226
|
+
|
|
227
|
+
// lib/types/Authorization.types.ts
|
|
228
|
+
init_cjs_shims();
|
|
202
229
|
|
|
203
230
|
// lib/types/Generic.types.ts
|
|
231
|
+
init_cjs_shims();
|
|
204
232
|
var PRE_AUTH_CODE_LITERAL = "pre-authorized_code";
|
|
205
233
|
var PRE_AUTH_GRANT_LITERAL = "urn:ietf:params:oauth:grant-type:pre-authorized_code";
|
|
206
234
|
|
|
@@ -264,6 +292,7 @@ var AuthzFlowType = /* @__PURE__ */ function(AuthzFlowType2) {
|
|
|
264
292
|
})(AuthzFlowType || (AuthzFlowType = {}));
|
|
265
293
|
|
|
266
294
|
// lib/types/CredentialIssuance.types.ts
|
|
295
|
+
init_cjs_shims();
|
|
267
296
|
var JsonURIMode = /* @__PURE__ */ function(JsonURIMode2) {
|
|
268
297
|
JsonURIMode2[JsonURIMode2["JSON_STRINGIFY"] = 0] = "JSON_STRINGIFY";
|
|
269
298
|
JsonURIMode2[JsonURIMode2["X_FORM_WWW_URLENCODED"] = 1] = "X_FORM_WWW_URLENCODED";
|
|
@@ -282,19 +311,25 @@ var Alg = /* @__PURE__ */ function(Alg2) {
|
|
|
282
311
|
return Alg2;
|
|
283
312
|
}({});
|
|
284
313
|
|
|
314
|
+
// lib/types/v1_0_08.types.ts
|
|
315
|
+
init_cjs_shims();
|
|
316
|
+
|
|
285
317
|
// lib/types/v1_0_09.types.ts
|
|
318
|
+
init_cjs_shims();
|
|
286
319
|
function isAuthorizationRequestV1_0_09(request) {
|
|
287
320
|
return request && "op_state" in request;
|
|
288
321
|
}
|
|
289
322
|
__name(isAuthorizationRequestV1_0_09, "isAuthorizationRequestV1_0_09");
|
|
290
323
|
|
|
291
324
|
// lib/types/v1_0_11.types.ts
|
|
325
|
+
init_cjs_shims();
|
|
292
326
|
function isAuthorizationRequestV1_0_11(request) {
|
|
293
327
|
return request && "issuer_state" in request;
|
|
294
328
|
}
|
|
295
329
|
__name(isAuthorizationRequestV1_0_11, "isAuthorizationRequestV1_0_11");
|
|
296
330
|
|
|
297
331
|
// lib/types/v1_0_13.types.ts
|
|
332
|
+
init_cjs_shims();
|
|
298
333
|
var credentialIssuerMetadataFieldNames = [
|
|
299
334
|
// Required fields
|
|
300
335
|
"credential_issuer",
|
|
@@ -315,6 +350,7 @@ var credentialIssuerMetadataFieldNames = [
|
|
|
315
350
|
];
|
|
316
351
|
|
|
317
352
|
// lib/types/ServerMetadata.ts
|
|
353
|
+
init_cjs_shims();
|
|
318
354
|
var authorizationServerMetadataFieldNames = [
|
|
319
355
|
"issuer",
|
|
320
356
|
"authorization_endpoint",
|
|
@@ -349,6 +385,7 @@ var WellKnownEndpoints = /* @__PURE__ */ function(WellKnownEndpoints2) {
|
|
|
349
385
|
}({});
|
|
350
386
|
|
|
351
387
|
// lib/types/OpenID4VCIErrors.ts
|
|
388
|
+
init_cjs_shims();
|
|
352
389
|
var BAD_PARAMS = "Wrong parameters provided";
|
|
353
390
|
var URL_NOT_VALID = "Request url is not valid";
|
|
354
391
|
var JWS_NOT_VALID = "JWS is not valid";
|
|
@@ -387,6 +424,7 @@ var ACCESS_TOKEN_ISSUER_REQUIRED_ERROR = "access token issuer is required";
|
|
|
387
424
|
var WRONG_METADATA_FORMAT = "Wrong metadata format";
|
|
388
425
|
|
|
389
426
|
// lib/types/OpenID4VCIVersions.types.ts
|
|
427
|
+
init_cjs_shims();
|
|
390
428
|
var OpenId4VCIVersion = /* @__PURE__ */ function(OpenId4VCIVersion2) {
|
|
391
429
|
OpenId4VCIVersion2[OpenId4VCIVersion2["VER_1_0_08"] = 1008] = "VER_1_0_08";
|
|
392
430
|
OpenId4VCIVersion2[OpenId4VCIVersion2["VER_1_0_09"] = 1009] = "VER_1_0_09";
|
|
@@ -403,6 +441,7 @@ var DefaultURISchemes = /* @__PURE__ */ function(DefaultURISchemes2) {
|
|
|
403
441
|
}({});
|
|
404
442
|
|
|
405
443
|
// lib/types/StateManager.types.ts
|
|
444
|
+
init_cjs_shims();
|
|
406
445
|
var IssueStatus = /* @__PURE__ */ function(IssueStatus2) {
|
|
407
446
|
IssueStatus2["OFFER_CREATED"] = "OFFER_CREATED";
|
|
408
447
|
IssueStatus2["ACCESS_TOKEN_REQUESTED"] = "ACCESS_TOKEN_REQUESTED";
|
|
@@ -417,6 +456,7 @@ var IssueStatus = /* @__PURE__ */ function(IssueStatus2) {
|
|
|
417
456
|
}({});
|
|
418
457
|
|
|
419
458
|
// lib/types/Token.types.ts
|
|
459
|
+
init_cjs_shims();
|
|
420
460
|
var TokenErrorResponse = /* @__PURE__ */ function(TokenErrorResponse2) {
|
|
421
461
|
TokenErrorResponse2["invalid_request"] = "invalid_request";
|
|
422
462
|
TokenErrorResponse2["invalid_grant"] = "invalid_grant";
|
|
@@ -448,7 +488,11 @@ var TokenError = class _TokenError extends Error {
|
|
|
448
488
|
}
|
|
449
489
|
};
|
|
450
490
|
|
|
491
|
+
// lib/types/QRCode.types.ts
|
|
492
|
+
init_cjs_shims();
|
|
493
|
+
|
|
451
494
|
// lib/functions/FormatUtils.ts
|
|
495
|
+
init_cjs_shims();
|
|
452
496
|
function isFormat(formatObject, format) {
|
|
453
497
|
return formatObject.format === format;
|
|
454
498
|
}
|
|
@@ -544,10 +588,14 @@ function getCredentialRequestForVersion(credentialRequest, version) {
|
|
|
544
588
|
}
|
|
545
589
|
__name(getCredentialRequestForVersion, "getCredentialRequestForVersion");
|
|
546
590
|
|
|
591
|
+
// lib/functions/CredentialResponseUtil.ts
|
|
592
|
+
init_cjs_shims();
|
|
593
|
+
|
|
547
594
|
// lib/functions/HttpUtils.ts
|
|
595
|
+
init_cjs_shims();
|
|
596
|
+
var import_ssi_types = require("@sphereon/ssi-types");
|
|
548
597
|
var import_cross_fetch = require("cross-fetch");
|
|
549
|
-
var
|
|
550
|
-
var debug = (0, import_debug.default)("sphereon:openid4vci:http");
|
|
598
|
+
var logger = import_ssi_types.Loggers.DEFAULT.get("sphereon:openid4vci:http");
|
|
551
599
|
var getJson = /* @__PURE__ */ __name(async (URL1, opts) => {
|
|
552
600
|
return await openIdFetch(URL1, void 0, {
|
|
553
601
|
method: "GET",
|
|
@@ -592,25 +640,25 @@ var openIdFetch = /* @__PURE__ */ __name(async (url, body, opts) => {
|
|
|
592
640
|
headers,
|
|
593
641
|
body
|
|
594
642
|
};
|
|
595
|
-
debug(`START fetching url: ${url}`);
|
|
643
|
+
logger.debug(`START fetching url: ${url}`);
|
|
596
644
|
if (body) {
|
|
597
|
-
debug(`Body:\r
|
|
645
|
+
logger.debug(`Body:\r
|
|
598
646
|
${typeof body == "string" ? body : JSON.stringify(body)}`);
|
|
599
647
|
}
|
|
600
|
-
debug(`Headers:\r
|
|
648
|
+
logger.debug(`Headers:\r
|
|
601
649
|
${JSON.stringify(payload.headers)}`);
|
|
602
650
|
const origResponse = await (0, import_cross_fetch.fetch)(url, payload);
|
|
603
651
|
const isJSONResponse = accept === "application/json" || origResponse.headers.get("Content-Type") === "application/json";
|
|
604
652
|
const success = origResponse && origResponse.status >= 200 && origResponse.status < 400;
|
|
605
653
|
const responseText = await origResponse.text();
|
|
606
654
|
const responseBody = isJSONResponse && responseText.includes("{") ? JSON.parse(responseText) : responseText;
|
|
607
|
-
debug(`${success ? "success" : "error"} status: ${origResponse.status}, body:\r
|
|
655
|
+
logger.debug(`${success ? "success" : "error"} status: ${origResponse.status}, body:\r
|
|
608
656
|
${JSON.stringify(responseBody)}`);
|
|
609
657
|
if (!success && opts?.exceptionOnHttpErrorStatus) {
|
|
610
658
|
const error = JSON.stringify(responseBody);
|
|
611
659
|
throw new Error(error === "{}" ? '{"error": "not found"}' : error);
|
|
612
660
|
}
|
|
613
|
-
debug(`END fetching url: ${url}`);
|
|
661
|
+
logger.debug(`END fetching url: ${url}`);
|
|
614
662
|
return {
|
|
615
663
|
origResponse,
|
|
616
664
|
successBody: success ? responseBody : void 0,
|
|
@@ -741,9 +789,10 @@ async function acquireDeferredCredentialImpl({ bearerToken, transactionId, defer
|
|
|
741
789
|
__name(acquireDeferredCredentialImpl, "acquireDeferredCredentialImpl");
|
|
742
790
|
|
|
743
791
|
// lib/functions/CredentialOfferUtil.ts
|
|
744
|
-
|
|
792
|
+
init_cjs_shims();
|
|
793
|
+
var import_ssi_types2 = require("@sphereon/ssi-types");
|
|
745
794
|
var import_jwt_decode = require("jwt-decode");
|
|
746
|
-
var
|
|
795
|
+
var logger2 = import_ssi_types2.Loggers.DEFAULT.get("sphereon:oid4vci:offer");
|
|
747
796
|
function determineSpecVersionFromURI(uri) {
|
|
748
797
|
let version = determineSpecVersionFromScheme(uri, OpenId4VCIVersion.VER_UNKNOWN) ?? OpenId4VCIVersion.VER_UNKNOWN;
|
|
749
798
|
version = getVersionFromURIParam(uri, version, [
|
|
@@ -871,10 +920,10 @@ function isCredentialOfferVersion(offer, min, max) {
|
|
|
871
920
|
}
|
|
872
921
|
const version = determineSpecVersionFromOffer(offer);
|
|
873
922
|
if (version.valueOf() < min.valueOf()) {
|
|
874
|
-
|
|
923
|
+
logger2.debug(`Credential offer version (${version.valueOf()}) is lower than minimum required version (${min.valueOf()})`);
|
|
875
924
|
return false;
|
|
876
925
|
} else if (max && version.valueOf() > max.valueOf()) {
|
|
877
|
-
|
|
926
|
+
logger2.debug(`Credential offer version (${version.valueOf()}) is higher than maximum required version (${max.valueOf()})`);
|
|
878
927
|
return false;
|
|
879
928
|
}
|
|
880
929
|
return true;
|
|
@@ -1155,6 +1204,7 @@ function getTypesFromOfferV1_0_11(credentialOffer, opts) {
|
|
|
1155
1204
|
__name(getTypesFromOfferV1_0_11, "getTypesFromOfferV1_0_11");
|
|
1156
1205
|
|
|
1157
1206
|
// lib/functions/Encoding.ts
|
|
1207
|
+
init_cjs_shims();
|
|
1158
1208
|
function convertJsonToURI(json, opts) {
|
|
1159
1209
|
if (typeof json === "string") {
|
|
1160
1210
|
return convertJsonToURI(JSON.parse(json), opts);
|
|
@@ -1281,6 +1331,7 @@ function customEncodeURIComponent(uriComponent, searchValue) {
|
|
|
1281
1331
|
__name(customEncodeURIComponent, "customEncodeURIComponent");
|
|
1282
1332
|
|
|
1283
1333
|
// lib/functions/TypeConversionUtils.ts
|
|
1334
|
+
init_cjs_shims();
|
|
1284
1335
|
function isW3cCredentialSupported(supported) {
|
|
1285
1336
|
return [
|
|
1286
1337
|
"jwt_vc_json",
|
|
@@ -1394,6 +1445,7 @@ function getTypesFromCredentialSupported(credentialSupported, opts) {
|
|
|
1394
1445
|
__name(getTypesFromCredentialSupported, "getTypesFromCredentialSupported");
|
|
1395
1446
|
|
|
1396
1447
|
// lib/functions/IssuerMetadataUtils.ts
|
|
1448
|
+
init_cjs_shims();
|
|
1397
1449
|
function getSupportedCredentials(opts) {
|
|
1398
1450
|
const { version = OpenId4VCIVersion.VER_1_0_13, types } = opts ?? {};
|
|
1399
1451
|
if (types && Array.isArray(types)) {
|
|
@@ -1561,12 +1613,13 @@ function getIssuerName(url, credentialIssuerMetadata) {
|
|
|
1561
1613
|
__name(getIssuerName, "getIssuerName");
|
|
1562
1614
|
|
|
1563
1615
|
// lib/functions/ProofUtil.ts
|
|
1564
|
-
|
|
1616
|
+
init_cjs_shims();
|
|
1617
|
+
var import_ssi_types3 = require("@sphereon/ssi-types");
|
|
1565
1618
|
var import_jwt_decode2 = require("jwt-decode");
|
|
1566
|
-
var
|
|
1619
|
+
var logger3 = import_ssi_types3.Loggers.DEFAULT.get("sphereon:oid4vci:common");
|
|
1567
1620
|
var createProofOfPossession = /* @__PURE__ */ __name(async (popMode, callbacks, jwtProps, existingJwt) => {
|
|
1568
1621
|
if (!callbacks.signCallback) {
|
|
1569
|
-
|
|
1622
|
+
logger3.debug(`no jwt signer callback or arguments supplied!`);
|
|
1570
1623
|
throw new Error(BAD_PARAMS);
|
|
1571
1624
|
}
|
|
1572
1625
|
const jwtPayload = createJWT(popMode, jwtProps, existingJwt);
|
|
@@ -1578,18 +1631,18 @@ var createProofOfPossession = /* @__PURE__ */ __name(async (popMode, callbacks,
|
|
|
1578
1631
|
try {
|
|
1579
1632
|
partiallyValidateJWS(jwt);
|
|
1580
1633
|
if (callbacks.verifyCallback) {
|
|
1581
|
-
|
|
1634
|
+
logger3.debug(`Calling supplied verify callback....`);
|
|
1582
1635
|
await callbacks.verifyCallback({
|
|
1583
1636
|
jwt,
|
|
1584
1637
|
kid: jwtPayload.header.kid
|
|
1585
1638
|
});
|
|
1586
|
-
|
|
1639
|
+
logger3.debug(`Supplied verify callback return success result`);
|
|
1587
1640
|
}
|
|
1588
1641
|
} catch {
|
|
1589
|
-
|
|
1642
|
+
logger3.debug(`JWS was not valid`);
|
|
1590
1643
|
throw new Error(JWS_NOT_VALID);
|
|
1591
1644
|
}
|
|
1592
|
-
|
|
1645
|
+
logger3.debug(`Proof of Possession JWT:\r
|
|
1593
1646
|
${jwt}`);
|
|
1594
1647
|
return proof;
|
|
1595
1648
|
}, "createProofOfPossession");
|
|
@@ -1708,6 +1761,7 @@ var getJwtProperty = /* @__PURE__ */ __name((propertyName, required, option, jwt
|
|
|
1708
1761
|
}, "getJwtProperty");
|
|
1709
1762
|
|
|
1710
1763
|
// lib/functions/AuthorizationResponseUtil.ts
|
|
1764
|
+
init_cjs_shims();
|
|
1711
1765
|
var toAuthorizationResponsePayload = /* @__PURE__ */ __name((input) => {
|
|
1712
1766
|
let response = input;
|
|
1713
1767
|
if (typeof input === "string") {
|
|
@@ -1724,12 +1778,15 @@ var toAuthorizationResponsePayload = /* @__PURE__ */ __name((input) => {
|
|
|
1724
1778
|
}, "toAuthorizationResponsePayload");
|
|
1725
1779
|
|
|
1726
1780
|
// lib/functions/RandomUtils.ts
|
|
1781
|
+
init_cjs_shims();
|
|
1727
1782
|
var import_oid4vc_common = require("@sphereon/oid4vc-common");
|
|
1728
1783
|
var u8a = __toESM(require("uint8arrays"), 1);
|
|
1784
|
+
var import_randomBytes = __toESM(require_randomBytes(), 1);
|
|
1785
|
+
var { toString } = u8a;
|
|
1729
1786
|
var CODE_VERIFIER_DEFAULT_LENGTH = 128;
|
|
1730
1787
|
var NONCE_LENGTH = 32;
|
|
1731
1788
|
var generateRandomString = /* @__PURE__ */ __name((length, encoding) => {
|
|
1732
|
-
return
|
|
1789
|
+
return toString((0, import_randomBytes.default)(length), encoding).slice(0, length);
|
|
1733
1790
|
}, "generateRandomString");
|
|
1734
1791
|
var generateNonce = /* @__PURE__ */ __name((length) => {
|
|
1735
1792
|
return generateRandomString(length ?? NONCE_LENGTH);
|
|
@@ -1743,7 +1800,7 @@ var createCodeChallenge = /* @__PURE__ */ __name((codeVerifier, codeChallengeMet
|
|
|
1743
1800
|
if (codeChallengeMethod === CodeChallengeMethod.plain) {
|
|
1744
1801
|
return codeVerifier;
|
|
1745
1802
|
} else if (!codeChallengeMethod || codeChallengeMethod === CodeChallengeMethod.S256) {
|
|
1746
|
-
return
|
|
1803
|
+
return toString((0, import_oid4vc_common.defaultHasher)(codeVerifier, "sha256"), "base64url");
|
|
1747
1804
|
} else {
|
|
1748
1805
|
throw Error(`code challenge method ${codeChallengeMethod} not implemented`);
|
|
1749
1806
|
}
|
|
@@ -1758,10 +1815,12 @@ var assertValidCodeVerifier = /* @__PURE__ */ __name((codeVerifier) => {
|
|
|
1758
1815
|
}, "assertValidCodeVerifier");
|
|
1759
1816
|
|
|
1760
1817
|
// lib/experimental/holder-vci.ts
|
|
1818
|
+
init_cjs_shims();
|
|
1761
1819
|
var EXPERIMENTAL_SUBJECT_PROOF_MODE_ENABLED = process.env.EXPERIMENTAL_SUBJECT_PROOF_MODE?.trim().toLowerCase() === "true";
|
|
1762
1820
|
|
|
1763
1821
|
// lib/events/index.ts
|
|
1764
|
-
|
|
1822
|
+
init_cjs_shims();
|
|
1823
|
+
var import_ssi_types4 = require("@sphereon/ssi-types");
|
|
1765
1824
|
var CredentialOfferEventNames = /* @__PURE__ */ function(CredentialOfferEventNames2) {
|
|
1766
1825
|
CredentialOfferEventNames2["OID4VCI_OFFER_CREATED"] = "OID4VCI_OFFER_CREATED";
|
|
1767
1826
|
CredentialOfferEventNames2["OID4VCI_OFFER_EXPIRED"] = "OID4VCI_OFFER_EXPIRED";
|
|
@@ -1778,141 +1837,9 @@ var NotificationStatusEventNames = /* @__PURE__ */ function(NotificationStatusEv
|
|
|
1778
1837
|
NotificationStatusEventNames2["OID4VCI_NOTIFICATION_ERROR"] = "OID4VCI_NOTIFICATION_ERROR";
|
|
1779
1838
|
return NotificationStatusEventNames2;
|
|
1780
1839
|
}({});
|
|
1781
|
-
var EVENTS =
|
|
1840
|
+
var EVENTS = import_ssi_types4.EventManager.instance();
|
|
1782
1841
|
|
|
1783
1842
|
// lib/index.ts
|
|
1784
|
-
var VCI_LOGGERS =
|
|
1843
|
+
var VCI_LOGGERS = import_ssi_types5.Loggers.DEFAULT;
|
|
1785
1844
|
var VCI_LOG_COMMON = VCI_LOGGERS.get("sphereon:oid4vci:common");
|
|
1786
|
-
// Annotate the CommonJS export names for ESM import in node:
|
|
1787
|
-
0 && (module.exports = {
|
|
1788
|
-
ACCESS_TOKEN_ISSUER_REQUIRED_ERROR,
|
|
1789
|
-
ALG_ERROR,
|
|
1790
|
-
AUD_ERROR,
|
|
1791
|
-
Alg,
|
|
1792
|
-
AuthorizationChallengeError,
|
|
1793
|
-
AuthzFlowType,
|
|
1794
|
-
BAD_PARAMS,
|
|
1795
|
-
CODE_VERIFIER_DEFAULT_LENGTH,
|
|
1796
|
-
CREDENTIAL_MISSING_ERROR,
|
|
1797
|
-
CodeChallengeMethod,
|
|
1798
|
-
CreateRequestObjectMode,
|
|
1799
|
-
CredentialEventNames,
|
|
1800
|
-
CredentialOfferEventNames,
|
|
1801
|
-
DID_NO_DIDDOC_ERROR,
|
|
1802
|
-
DefaultURISchemes,
|
|
1803
|
-
EVENTS,
|
|
1804
|
-
EXPERIMENTAL_SUBJECT_PROOF_MODE_ENABLED,
|
|
1805
|
-
EXPIRED_PRE_AUTHORIZED_CODE,
|
|
1806
|
-
Encoding,
|
|
1807
|
-
GRANTS_MUST_NOT_BE_UNDEFINED,
|
|
1808
|
-
GrantTypes,
|
|
1809
|
-
IAT_ERROR,
|
|
1810
|
-
INVALID_PRE_AUTHORIZED_CODE,
|
|
1811
|
-
ISSUER_CONFIG_ERROR,
|
|
1812
|
-
ISS_MUST_BE_CLIENT_ID,
|
|
1813
|
-
ISS_PRESENT_IN_PRE_AUTHORIZED_CODE_CONTEXT,
|
|
1814
|
-
IssueStatus,
|
|
1815
|
-
JWS_NOT_VALID,
|
|
1816
|
-
JWT_SIGNER_CALLBACK_REQUIRED_ERROR,
|
|
1817
|
-
JWT_VERIFY_CONFIG_ERROR,
|
|
1818
|
-
JsonURIMode,
|
|
1819
|
-
KID_DID_NO_DID_ERROR,
|
|
1820
|
-
KID_JWK_X5C_ERROR,
|
|
1821
|
-
NONCE_ERROR,
|
|
1822
|
-
NONCE_LENGTH,
|
|
1823
|
-
NONCE_STATE_MANAGER_REQUIRED_ERROR,
|
|
1824
|
-
NO_ISS_IN_AUTHORIZATION_CODE_CONTEXT,
|
|
1825
|
-
NO_JWT_PROVIDED,
|
|
1826
|
-
NotificationStatusEventNames,
|
|
1827
|
-
OpenId4VCIVersion,
|
|
1828
|
-
PARMode,
|
|
1829
|
-
PIN_NOT_MATCH_ERROR,
|
|
1830
|
-
PIN_VALIDATION_ERROR,
|
|
1831
|
-
PRE_AUTHORIZED_CODE_REQUIRED_ERROR,
|
|
1832
|
-
PRE_AUTH_CODE_LITERAL,
|
|
1833
|
-
PRE_AUTH_GRANT_LITERAL,
|
|
1834
|
-
PROOF_CANT_BE_CONSTRUCTED,
|
|
1835
|
-
ResponseType,
|
|
1836
|
-
STATE_MANAGER_REQUIRED_ERROR,
|
|
1837
|
-
STATE_MISSING_ERROR,
|
|
1838
|
-
TYP_ERROR,
|
|
1839
|
-
TokenError,
|
|
1840
|
-
TokenErrorResponse,
|
|
1841
|
-
UNKNOWN_CLIENT_ERROR,
|
|
1842
|
-
UNSUPPORTED_GRANT_TYPE_ERROR,
|
|
1843
|
-
URL_NOT_VALID,
|
|
1844
|
-
USER_PIN_NOT_REQUIRED_ERROR,
|
|
1845
|
-
USER_PIN_REQUIRED_ERROR,
|
|
1846
|
-
USER_PIN_TX_CODE_SPEC_ERROR,
|
|
1847
|
-
VCI_LOGGERS,
|
|
1848
|
-
VCI_LOG_COMMON,
|
|
1849
|
-
WRONG_METADATA_FORMAT,
|
|
1850
|
-
WellKnownEndpoints,
|
|
1851
|
-
acquireDeferredCredential,
|
|
1852
|
-
adjustUrl,
|
|
1853
|
-
assertValidCodeVerifier,
|
|
1854
|
-
assertedUniformCredentialOffer,
|
|
1855
|
-
authorizationServerMetadataFieldNames,
|
|
1856
|
-
convertJsonToURI,
|
|
1857
|
-
convertURIToJsonObject,
|
|
1858
|
-
createCodeChallenge,
|
|
1859
|
-
createProofOfPossession,
|
|
1860
|
-
credentialIssuerMetadataFieldNames,
|
|
1861
|
-
credentialSupportedV8ToV13,
|
|
1862
|
-
credentialsSupportedV8ToV13,
|
|
1863
|
-
decodeJsonProperties,
|
|
1864
|
-
determineFlowType,
|
|
1865
|
-
determineGrantTypes,
|
|
1866
|
-
determineSpecVersionFromOffer,
|
|
1867
|
-
determineSpecVersionFromScheme,
|
|
1868
|
-
determineSpecVersionFromURI,
|
|
1869
|
-
determineVersionsFromIssuerMetadata,
|
|
1870
|
-
extractBearerToken,
|
|
1871
|
-
formPost,
|
|
1872
|
-
generateCodeVerifier,
|
|
1873
|
-
generateNonce,
|
|
1874
|
-
generateRandomString,
|
|
1875
|
-
getClientIdFromCredentialOfferPayload,
|
|
1876
|
-
getCredentialOfferPayload,
|
|
1877
|
-
getCredentialRequestForVersion,
|
|
1878
|
-
getFormatForVersion,
|
|
1879
|
-
getIssuerDisplays,
|
|
1880
|
-
getIssuerFromCredentialOfferPayload,
|
|
1881
|
-
getIssuerName,
|
|
1882
|
-
getJson,
|
|
1883
|
-
getNumberOrUndefined,
|
|
1884
|
-
getScheme,
|
|
1885
|
-
getStateFromCredentialOfferPayload,
|
|
1886
|
-
getSupportedCredential,
|
|
1887
|
-
getSupportedCredentials,
|
|
1888
|
-
getTypesFromAuthorizationDetails,
|
|
1889
|
-
getTypesFromCredentialOffer,
|
|
1890
|
-
getTypesFromCredentialSupported,
|
|
1891
|
-
getTypesFromObject,
|
|
1892
|
-
getTypesFromOfferV1_0_11,
|
|
1893
|
-
getTypesFromRequest,
|
|
1894
|
-
getURIComponentsAsArray,
|
|
1895
|
-
getUniformFormat,
|
|
1896
|
-
isAuthorizationRequestV1_0_09,
|
|
1897
|
-
isAuthorizationRequestV1_0_11,
|
|
1898
|
-
isCredentialOfferVersion,
|
|
1899
|
-
isDeferredCredentialIssuancePending,
|
|
1900
|
-
isDeferredCredentialResponse,
|
|
1901
|
-
isFormat,
|
|
1902
|
-
isJWS,
|
|
1903
|
-
isNotFormat,
|
|
1904
|
-
isPreAuthCode,
|
|
1905
|
-
isValidURL,
|
|
1906
|
-
isW3cCredentialSupported,
|
|
1907
|
-
post,
|
|
1908
|
-
randomBytes,
|
|
1909
|
-
resolveCredentialOfferURI,
|
|
1910
|
-
toAuthorizationResponsePayload,
|
|
1911
|
-
toUniformCredentialOfferPayload,
|
|
1912
|
-
toUniformCredentialOfferRequest,
|
|
1913
|
-
trimBoth,
|
|
1914
|
-
trimEnd,
|
|
1915
|
-
trimStart,
|
|
1916
|
-
validateJWT
|
|
1917
|
-
});
|
|
1918
1845
|
//# sourceMappingURL=index.cjs.map
|