@sphereon/oid4vci-common 0.8.2-unstable.39 → 0.8.2-unstable.41

package/dist/functions/CredentialOfferUtil.d.ts

@@ -1,28 +1,28 @@
-import { AssertedUniformCredentialOffer, AuthzFlowType, CredentialOffer, CredentialOfferPayload, Grant, GrantTypes, OpenId4VCIVersion, UniformCredentialOffer, UniformCredentialOfferPayload, UniformCredentialOfferRequest } from '../types';
-export declare function determineSpecVersionFromURI(uri: string): OpenId4VCIVersion;
-export declare function determineSpecVersionFromScheme(credentialOfferURI: string, openId4VCIVersion: OpenId4VCIVersion): OpenId4VCIVersion;
-export declare function getScheme(credentialOfferURI: string): string;
-export declare function getIssuerFromCredentialOfferPayload(request: CredentialOfferPayload): string | undefined;
-export declare function determineSpecVersionFromOffer(offer: CredentialOfferPayload | CredentialOffer): OpenId4VCIVersion;
-export declare function isCredentialOfferVersion(offer: CredentialOfferPayload | CredentialOffer, min: OpenId4VCIVersion, max?: OpenId4VCIVersion): boolean;
-export declare function toUniformCredentialOfferRequest(offer: CredentialOffer, opts?: {
-    resolve?: boolean;
-    version?: OpenId4VCIVersion;
-}): Promise<UniformCredentialOfferRequest>;
-export declare function isPreAuthCode(request: UniformCredentialOfferPayload | UniformCredentialOffer): boolean;
-export declare function assertedUniformCredentialOffer(origCredentialOffer: UniformCredentialOffer, opts?: {
-    resolve?: boolean;
-}): Promise<AssertedUniformCredentialOffer>;
-export declare function resolveCredentialOfferURI(uri?: string): Promise<UniformCredentialOfferPayload | undefined>;
-export declare function toUniformCredentialOfferPayload(offer: CredentialOfferPayload, opts?: {
-    version?: OpenId4VCIVersion;
-}): UniformCredentialOfferPayload;
-export declare function determineFlowType(suppliedOffer: AssertedUniformCredentialOffer | UniformCredentialOfferPayload, version: OpenId4VCIVersion): AuthzFlowType[];
-export declare function getCredentialOfferPayload(offer: AssertedUniformCredentialOffer | UniformCredentialOfferPayload): UniformCredentialOfferPayload;
-export declare function determineGrantTypes(offer: AssertedUniformCredentialOffer | UniformCredentialOfferPayload | ({
-    grants: Grant;
-} & Record<never, never>)): GrantTypes[];
-export declare function getTypesFromOffer(credentialOffer: UniformCredentialOfferPayload, opts?: {
-    filterVerifiableCredential: boolean;
-}): string[];
+import { AssertedUniformCredentialOffer, AuthzFlowType, CredentialOffer, CredentialOfferPayload, Grant, GrantTypes, OpenId4VCIVersion, UniformCredentialOffer, UniformCredentialOfferPayload, UniformCredentialOfferRequest } from '../types';
+export declare function determineSpecVersionFromURI(uri: string): OpenId4VCIVersion;
+export declare function determineSpecVersionFromScheme(credentialOfferURI: string, openId4VCIVersion: OpenId4VCIVersion): OpenId4VCIVersion;
+export declare function getScheme(credentialOfferURI: string): string;
+export declare function getIssuerFromCredentialOfferPayload(request: CredentialOfferPayload): string | undefined;
+export declare function determineSpecVersionFromOffer(offer: CredentialOfferPayload | CredentialOffer): OpenId4VCIVersion;
+export declare function isCredentialOfferVersion(offer: CredentialOfferPayload | CredentialOffer, min: OpenId4VCIVersion, max?: OpenId4VCIVersion): boolean;
+export declare function toUniformCredentialOfferRequest(offer: CredentialOffer, opts?: {
+    resolve?: boolean;
+    version?: OpenId4VCIVersion;
+}): Promise<UniformCredentialOfferRequest>;
+export declare function isPreAuthCode(request: UniformCredentialOfferPayload | UniformCredentialOffer): boolean;
+export declare function assertedUniformCredentialOffer(origCredentialOffer: UniformCredentialOffer, opts?: {
+    resolve?: boolean;
+}): Promise<AssertedUniformCredentialOffer>;
+export declare function resolveCredentialOfferURI(uri?: string): Promise<UniformCredentialOfferPayload | undefined>;
+export declare function toUniformCredentialOfferPayload(offer: CredentialOfferPayload, opts?: {
+    version?: OpenId4VCIVersion;
+}): UniformCredentialOfferPayload;
+export declare function determineFlowType(suppliedOffer: AssertedUniformCredentialOffer | UniformCredentialOfferPayload, version: OpenId4VCIVersion): AuthzFlowType[];
+export declare function getCredentialOfferPayload(offer: AssertedUniformCredentialOffer | UniformCredentialOfferPayload): UniformCredentialOfferPayload;
+export declare function determineGrantTypes(offer: AssertedUniformCredentialOffer | UniformCredentialOfferPayload | ({
+    grants: Grant;
+} & Record<never, never>)): GrantTypes[];
+export declare function getTypesFromOffer(credentialOffer: UniformCredentialOfferPayload, opts?: {
+    filterVerifiableCredential: boolean;
+}): string[];
 //# sourceMappingURL=CredentialOfferUtil.d.ts.map

package/dist/functions/CredentialOfferUtil.js

@@ -1,262 +1,262 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getTypesFromOffer = exports.determineGrantTypes = exports.getCredentialOfferPayload = exports.determineFlowType = exports.toUniformCredentialOfferPayload = exports.resolveCredentialOfferURI = exports.assertedUniformCredentialOffer = exports.isPreAuthCode = exports.toUniformCredentialOfferRequest = exports.isCredentialOfferVersion = exports.determineSpecVersionFromOffer = exports.getIssuerFromCredentialOfferPayload = exports.getScheme = exports.determineSpecVersionFromScheme = exports.determineSpecVersionFromURI = void 0;
-const debug_1 = __importDefault(require("debug"));
-const types_1 = require("../types");
-const HttpUtils_1 = require("./HttpUtils");
-const debug = (0, debug_1.default)('sphereon:oid4vci:offer');
-function determineSpecVersionFromURI(uri) {
-    let version = types_1.OpenId4VCIVersion.VER_UNKNOWN;
-    version = determineSpecVersionFromScheme(uri, version);
-    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_UNSUPPORTED, 'initiate_issuance');
-    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_UNSUPPORTED, 'credential_type');
-    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_UNSUPPORTED, 'op_state');
-    // version = getVersionFromURIParam(uri, version, OpenId4VCIVersion.VER_1_0_09, 'credentials');
-    // version = getVersionFromURIParam(uri, version, OpenId4VCIVersion.VER_1_0_09, 'initiate_issuance_uri')
-    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_1_0_12, 'credential_offer_uri=');
-    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_1_0_12, 'credential_issuer');
-    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_1_0_12, 'grants');
-    /*
-      if (version === OpenId4VCIVersion.VER_UNKNOWN) {  Why would we impose a version when required parameters are missing? If we need it for a specific case, please add a comment.
-        version = OpenId4VCIVersion.VER_1_0_12;
-      }
-    */
-    return version;
-}
-exports.determineSpecVersionFromURI = determineSpecVersionFromURI;
-function determineSpecVersionFromScheme(credentialOfferURI, openId4VCIVersion) {
-    const scheme = getScheme(credentialOfferURI);
-    if (credentialOfferURI.includes(types_1.DefaultURISchemes.INITIATE_ISSUANCE)) {
-        return recordVersion(openId4VCIVersion, types_1.OpenId4VCIVersion.VER_UNSUPPORTED, scheme);
-    }
-    else if (credentialOfferURI.includes(types_1.DefaultURISchemes.CREDENTIAL_OFFER)) {
-        return recordVersion(openId4VCIVersion, types_1.OpenId4VCIVersion.VER_1_0_12, scheme);
-    }
-    else {
-        return recordVersion(openId4VCIVersion, types_1.OpenId4VCIVersion.VER_UNKNOWN, scheme);
-    }
-}
-exports.determineSpecVersionFromScheme = determineSpecVersionFromScheme;
-function getScheme(credentialOfferURI) {
-    if (!credentialOfferURI || !credentialOfferURI.includes('://')) {
-        throw Error('Invalid credential offer URI');
-    }
-    return credentialOfferURI.split('://')[0];
-}
-exports.getScheme = getScheme;
-function getIssuerFromCredentialOfferPayload(request) {
-    if (!request || (!('issuer' in request) && !('credential_issuer' in request))) {
-        return undefined;
-    }
-    return request['credential_issuer'];
-}
-exports.getIssuerFromCredentialOfferPayload = getIssuerFromCredentialOfferPayload;
-function determineSpecVersionFromOffer(offer) {
-    if (isCredentialOfferV1_0_12(offer)) {
-        return types_1.OpenId4VCIVersion.VER_1_0_12;
-    }
-    return types_1.OpenId4VCIVersion.VER_UNKNOWN;
-}
-exports.determineSpecVersionFromOffer = determineSpecVersionFromOffer;
-function isCredentialOfferVersion(offer, min, max) {
-    if (max && max.valueOf() < min.valueOf()) {
-        throw Error(`Cannot have a max ${max.valueOf()} version smaller than the min version ${min.valueOf()}`);
-    }
-    const version = determineSpecVersionFromOffer(offer);
-    if (version.valueOf() < min.valueOf()) {
-        debug(`Credential offer version (${version.valueOf()}) is lower than minimum required version (${min.valueOf()})`);
-        return false;
-    }
-    else if (max && version.valueOf() > max.valueOf()) {
-        debug(`Credential offer version (${version.valueOf()}) is higher than maximum required version (${max.valueOf()})`);
-        return false;
-    }
-    return true;
-}
-exports.isCredentialOfferVersion = isCredentialOfferVersion;
-function isCredentialOfferV1_0_12(offer) {
-    if (!offer) {
-        return false;
-    }
-    if ('credential_issuer' in offer && 'credentials' in offer) {
-        // payload
-        return true;
-    }
-    if ('credential_offer' in offer && offer['credential_offer']) {
-        // offer, so check payload
-        return isCredentialOfferV1_0_12(offer['credential_offer']);
-    }
-    return 'credential_offer_uri' in offer;
-}
-function toUniformCredentialOfferRequest(offer, opts) {
-    var _a;
-    return __awaiter(this, void 0, void 0, function* () {
-        const version = (_a = opts === null || opts === void 0 ? void 0 : opts.version) !== null && _a !== void 0 ? _a : determineSpecVersionFromOffer(offer);
-        let originalCredentialOffer = offer.credential_offer;
-        let credentialOfferURI;
-        if ('credential_offer_uri' in offer && (offer === null || offer === void 0 ? void 0 : offer.credential_offer_uri) !== undefined) {
-            credentialOfferURI = offer.credential_offer_uri;
-            if ((opts === null || opts === void 0 ? void 0 : opts.resolve) || (opts === null || opts === void 0 ? void 0 : opts.resolve) === undefined) {
-                originalCredentialOffer = (yield resolveCredentialOfferURI(credentialOfferURI));
-            }
-            else if (!originalCredentialOffer) {
-                throw Error(`Credential offer uri (${credentialOfferURI}) found, but resolution was explicitly disabled and credential_offer was supplied`);
-            }
-        }
-        if (!originalCredentialOffer) {
-            throw Error('No credential offer available');
-        }
-        const payload = toUniformCredentialOfferPayload(originalCredentialOffer, opts);
-        const supportedFlows = determineFlowType(payload, version);
-        return Object.assign(Object.assign({ credential_offer: payload, original_credential_offer: originalCredentialOffer }, (credentialOfferURI && { credential_offer_uri: credentialOfferURI })), { supportedFlows,
-            version });
-    });
-}
-exports.toUniformCredentialOfferRequest = toUniformCredentialOfferRequest;
-function isPreAuthCode(request) {
-    var _a, _b;
-    const payload = 'credential_offer' in request ? request.credential_offer : request;
-    return ((_b = (_a = payload === null || payload === void 0 ? void 0 : payload.grants) === null || _a === void 0 ? void 0 : _a['urn:ietf:params:oauth:grant-type:pre-authorized_code']) === null || _b === void 0 ? void 0 : _b['pre-authorized_code']) !== undefined;
-}
-exports.isPreAuthCode = isPreAuthCode;
-function assertedUniformCredentialOffer(origCredentialOffer, opts) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const credentialOffer = JSON.parse(JSON.stringify(origCredentialOffer));
-        if (credentialOffer.credential_offer_uri && !credentialOffer.credential_offer) {
-            if ((opts === null || opts === void 0 ? void 0 : opts.resolve) === undefined || opts.resolve) {
-                credentialOffer.credential_offer = yield resolveCredentialOfferURI(credentialOffer.credential_offer_uri);
-            }
-            else {
-                throw Error(`No credential_offer present, but we did get a URI, but resolution was explicitly disabled`);
-            }
-        }
-        if (!credentialOffer.credential_offer) {
-            throw Error(`No credential_offer present`);
-        }
-        credentialOffer.credential_offer = yield toUniformCredentialOfferPayload(credentialOffer.credential_offer, { version: credentialOffer.version });
-        return credentialOffer;
-    });
-}
-exports.assertedUniformCredentialOffer = assertedUniformCredentialOffer;
-function resolveCredentialOfferURI(uri) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (!uri) {
-            return undefined;
-        }
-        const response = (yield (0, HttpUtils_1.getJson)(uri));
-        if (!response || !response.successBody) {
-            throw Error(`Could not get credential offer from uri: ${uri}: ${JSON.stringify(response === null || response === void 0 ? void 0 : response.errorBody)}`);
-        }
-        return response.successBody;
-    });
-}
-exports.resolveCredentialOfferURI = resolveCredentialOfferURI;
-function toUniformCredentialOfferPayload(offer, opts) {
-    var _a;
-    // todo: create test to check idempotence once a payload is already been made uniform.
-    const version = (_a = opts === null || opts === void 0 ? void 0 : opts.version) !== null && _a !== void 0 ? _a : determineSpecVersionFromOffer(offer);
-    if (version >= types_1.OpenId4VCIVersion.VER_1_0_12) {
-        const orig = offer;
-        return Object.assign({}, orig);
-    }
-    throw Error(`Could not create uniform payload for version ${version}`);
-}
-exports.toUniformCredentialOfferPayload = toUniformCredentialOfferPayload;
-function determineFlowType(suppliedOffer, version) {
-    var _a, _b, _c;
-    const payload = getCredentialOfferPayload(suppliedOffer);
-    const supportedFlows = [];
-    if ((_a = payload.grants) === null || _a === void 0 ? void 0 : _a.authorization_code) {
-        supportedFlows.push(types_1.AuthzFlowType.AUTHORIZATION_CODE_FLOW);
-    }
-    if ((_c = (_b = payload.grants) === null || _b === void 0 ? void 0 : _b['urn:ietf:params:oauth:grant-type:pre-authorized_code']) === null || _c === void 0 ? void 0 : _c['pre-authorized_code']) {
-        supportedFlows.push(types_1.AuthzFlowType.PRE_AUTHORIZED_CODE_FLOW);
-    }
-    return supportedFlows;
-}
-exports.determineFlowType = determineFlowType;
-function getCredentialOfferPayload(offer) {
-    let payload;
-    if ('credential_offer' in offer && offer['credential_offer']) {
-        payload = offer.credential_offer;
-    }
-    else {
-        payload = offer;
-    }
-    return payload;
-}
-exports.getCredentialOfferPayload = getCredentialOfferPayload;
-function determineGrantTypes(offer) {
-    let grants;
-    if ('grants' in offer && offer.grants) {
-        grants = offer.grants;
-    }
-    else {
-        grants = getCredentialOfferPayload(offer).grants;
-    }
-    const types = [];
-    if (grants) {
-        if (grants.authorization_code) {
-            types.push(types_1.GrantTypes.AUTHORIZATION_CODE);
-        }
-        if (grants['urn:ietf:params:oauth:grant-type:pre-authorized_code'] &&
-            grants['urn:ietf:params:oauth:grant-type:pre-authorized_code']['pre-authorized_code']) {
-            types.push(types_1.GrantTypes.PRE_AUTHORIZED_CODE);
-        }
-    }
-    return types;
-}
-exports.determineGrantTypes = determineGrantTypes;
-function getVersionFromURIParam(credentialOfferURI, currentVersion, matchingVersion, param) {
-    if (credentialOfferURI.includes(param)) {
-        return recordVersion(currentVersion, matchingVersion, param);
-    }
-    return currentVersion;
-}
-function recordVersion(currentVersion, matchingVersion, key) {
-    if (currentVersion === types_1.OpenId4VCIVersion.VER_UNKNOWN || matchingVersion === currentVersion) {
-        return matchingVersion;
-    }
-    throw new Error(`Invalid param. Some keys have been used from version: ${currentVersion} version while '${key}' is used from version: ${matchingVersion}`);
-}
-function getTypesFromOffer(credentialOffer, opts) {
-    const types = credentialOffer.credentials.reduce((prev, curr) => {
-        // FIXME returning the string value is wrong (as it's an id), but just matching the current behavior of this library
-        // The credential_type (from draft 8) and the actual 'type' value in a VC (from draft 11) are mixed up
-        // Fix for this here: https://github.com/Sphereon-Opensource/OID4VCI/pull/54
-        if (typeof curr === 'string') {
-            return [...prev, curr];
-        }
-        else if (curr.format === 'jwt_vc_json-ld' || curr.format === 'ldp_vc') {
-            return [...prev, ...curr.credential_definition.type];
-        }
-        else if (curr.format === 'jwt_vc_json' || curr.format === 'jwt_vc') {
-            return [...prev, ...curr.types];
-        }
-        else if (curr.format === 'vc+sd-jwt') {
-            return [...prev, curr.vct];
-        }
-        return prev;
-    }, []);
-    if (!types || types.length === 0) {
-        throw Error('Could not deduce types from credential offer');
-    }
-    if (opts === null || opts === void 0 ? void 0 : opts.filterVerifiableCredential) {
-        return types.filter((type) => type !== 'VerifiableCredential');
-    }
-    return types;
-}
-exports.getTypesFromOffer = getTypesFromOffer;
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getTypesFromOffer = exports.determineGrantTypes = exports.getCredentialOfferPayload = exports.determineFlowType = exports.toUniformCredentialOfferPayload = exports.resolveCredentialOfferURI = exports.assertedUniformCredentialOffer = exports.isPreAuthCode = exports.toUniformCredentialOfferRequest = exports.isCredentialOfferVersion = exports.determineSpecVersionFromOffer = exports.getIssuerFromCredentialOfferPayload = exports.getScheme = exports.determineSpecVersionFromScheme = exports.determineSpecVersionFromURI = void 0;
+const debug_1 = __importDefault(require("debug"));
+const types_1 = require("../types");
+const HttpUtils_1 = require("./HttpUtils");
+const debug = (0, debug_1.default)('sphereon:oid4vci:offer');
+function determineSpecVersionFromURI(uri) {
+    let version = types_1.OpenId4VCIVersion.VER_UNKNOWN;
+    version = determineSpecVersionFromScheme(uri, version);
+    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_UNSUPPORTED, 'initiate_issuance');
+    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_UNSUPPORTED, 'credential_type');
+    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_UNSUPPORTED, 'op_state');
+    // version = getVersionFromURIParam(uri, version, OpenId4VCIVersion.VER_1_0_09, 'credentials');
+    // version = getVersionFromURIParam(uri, version, OpenId4VCIVersion.VER_1_0_09, 'initiate_issuance_uri')
+    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_1_0_12, 'credential_offer_uri=');
+    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_1_0_12, 'credential_issuer');
+    version = getVersionFromURIParam(uri, version, types_1.OpenId4VCIVersion.VER_1_0_12, 'grants');
+    /*
+      if (version === OpenId4VCIVersion.VER_UNKNOWN) {  Why would we impose a version when required parameters are missing? If we need it for a specific case, please add a comment.
+        version = OpenId4VCIVersion.VER_1_0_12;
+      }
+    */
+    return version;
+}
+exports.determineSpecVersionFromURI = determineSpecVersionFromURI;
+function determineSpecVersionFromScheme(credentialOfferURI, openId4VCIVersion) {
+    const scheme = getScheme(credentialOfferURI);
+    if (credentialOfferURI.includes(types_1.DefaultURISchemes.INITIATE_ISSUANCE)) {
+        return recordVersion(openId4VCIVersion, types_1.OpenId4VCIVersion.VER_UNSUPPORTED, scheme);
+    }
+    else if (credentialOfferURI.includes(types_1.DefaultURISchemes.CREDENTIAL_OFFER)) {
+        return recordVersion(openId4VCIVersion, types_1.OpenId4VCIVersion.VER_1_0_12, scheme);
+    }
+    else {
+        return recordVersion(openId4VCIVersion, types_1.OpenId4VCIVersion.VER_UNKNOWN, scheme);
+    }
+}
+exports.determineSpecVersionFromScheme = determineSpecVersionFromScheme;
+function getScheme(credentialOfferURI) {
+    if (!credentialOfferURI || !credentialOfferURI.includes('://')) {
+        throw Error('Invalid credential offer URI');
+    }
+    return credentialOfferURI.split('://')[0];
+}
+exports.getScheme = getScheme;
+function getIssuerFromCredentialOfferPayload(request) {
+    if (!request || (!('issuer' in request) && !('credential_issuer' in request))) {
+        return undefined;
+    }
+    return request['credential_issuer'];
+}
+exports.getIssuerFromCredentialOfferPayload = getIssuerFromCredentialOfferPayload;
+function determineSpecVersionFromOffer(offer) {
+    if (isCredentialOfferV1_0_12(offer)) {
+        return types_1.OpenId4VCIVersion.VER_1_0_12;
+    }
+    return types_1.OpenId4VCIVersion.VER_UNKNOWN;
+}
+exports.determineSpecVersionFromOffer = determineSpecVersionFromOffer;
+function isCredentialOfferVersion(offer, min, max) {
+    if (max && max.valueOf() < min.valueOf()) {
+        throw Error(`Cannot have a max ${max.valueOf()} version smaller than the min version ${min.valueOf()}`);
+    }
+    const version = determineSpecVersionFromOffer(offer);
+    if (version.valueOf() < min.valueOf()) {
+        debug(`Credential offer version (${version.valueOf()}) is lower than minimum required version (${min.valueOf()})`);
+        return false;
+    }
+    else if (max && version.valueOf() > max.valueOf()) {
+        debug(`Credential offer version (${version.valueOf()}) is higher than maximum required version (${max.valueOf()})`);
+        return false;
+    }
+    return true;
+}
+exports.isCredentialOfferVersion = isCredentialOfferVersion;
+function isCredentialOfferV1_0_12(offer) {
+    if (!offer) {
+        return false;
+    }
+    if ('credential_issuer' in offer && 'credentials' in offer) {
+        // payload
+        return true;
+    }
+    if ('credential_offer' in offer && offer['credential_offer']) {
+        // offer, so check payload
+        return isCredentialOfferV1_0_12(offer['credential_offer']);
+    }
+    return 'credential_offer_uri' in offer;
+}
+function toUniformCredentialOfferRequest(offer, opts) {
+    var _a;
+    return __awaiter(this, void 0, void 0, function* () {
+        const version = (_a = opts === null || opts === void 0 ? void 0 : opts.version) !== null && _a !== void 0 ? _a : determineSpecVersionFromOffer(offer);
+        let originalCredentialOffer = offer.credential_offer;
+        let credentialOfferURI;
+        if ('credential_offer_uri' in offer && (offer === null || offer === void 0 ? void 0 : offer.credential_offer_uri) !== undefined) {
+            credentialOfferURI = offer.credential_offer_uri;
+            if ((opts === null || opts === void 0 ? void 0 : opts.resolve) || (opts === null || opts === void 0 ? void 0 : opts.resolve) === undefined) {
+                originalCredentialOffer = (yield resolveCredentialOfferURI(credentialOfferURI));
+            }
+            else if (!originalCredentialOffer) {
+                throw Error(`Credential offer uri (${credentialOfferURI}) found, but resolution was explicitly disabled and credential_offer was supplied`);
+            }
+        }
+        if (!originalCredentialOffer) {
+            throw Error('No credential offer available');
+        }
+        const payload = toUniformCredentialOfferPayload(originalCredentialOffer, opts);
+        const supportedFlows = determineFlowType(payload, version);
+        return Object.assign(Object.assign({ credential_offer: payload, original_credential_offer: originalCredentialOffer }, (credentialOfferURI && { credential_offer_uri: credentialOfferURI })), { supportedFlows,
+            version });
+    });
+}
+exports.toUniformCredentialOfferRequest = toUniformCredentialOfferRequest;
+function isPreAuthCode(request) {
+    var _a, _b;
+    const payload = 'credential_offer' in request ? request.credential_offer : request;
+    return ((_b = (_a = payload === null || payload === void 0 ? void 0 : payload.grants) === null || _a === void 0 ? void 0 : _a['urn:ietf:params:oauth:grant-type:pre-authorized_code']) === null || _b === void 0 ? void 0 : _b['pre-authorized_code']) !== undefined;
+}
+exports.isPreAuthCode = isPreAuthCode;
+function assertedUniformCredentialOffer(origCredentialOffer, opts) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const credentialOffer = JSON.parse(JSON.stringify(origCredentialOffer));
+        if (credentialOffer.credential_offer_uri && !credentialOffer.credential_offer) {
+            if ((opts === null || opts === void 0 ? void 0 : opts.resolve) === undefined || opts.resolve) {
+                credentialOffer.credential_offer = yield resolveCredentialOfferURI(credentialOffer.credential_offer_uri);
+            }
+            else {
+                throw Error(`No credential_offer present, but we did get a URI, but resolution was explicitly disabled`);
+            }
+        }
+        if (!credentialOffer.credential_offer) {
+            throw Error(`No credential_offer present`);
+        }
+        credentialOffer.credential_offer = yield toUniformCredentialOfferPayload(credentialOffer.credential_offer, { version: credentialOffer.version });
+        return credentialOffer;
+    });
+}
+exports.assertedUniformCredentialOffer = assertedUniformCredentialOffer;
+function resolveCredentialOfferURI(uri) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (!uri) {
+            return undefined;
+        }
+        const response = (yield (0, HttpUtils_1.getJson)(uri));
+        if (!response || !response.successBody) {
+            throw Error(`Could not get credential offer from uri: ${uri}: ${JSON.stringify(response === null || response === void 0 ? void 0 : response.errorBody)}`);
+        }
+        return response.successBody;
+    });
+}
+exports.resolveCredentialOfferURI = resolveCredentialOfferURI;
+function toUniformCredentialOfferPayload(offer, opts) {
+    var _a;
+    // todo: create test to check idempotence once a payload is already been made uniform.
+    const version = (_a = opts === null || opts === void 0 ? void 0 : opts.version) !== null && _a !== void 0 ? _a : determineSpecVersionFromOffer(offer);
+    if (version >= types_1.OpenId4VCIVersion.VER_1_0_12) {
+        const orig = offer;
+        return Object.assign({}, orig);
+    }
+    throw Error(`Could not create uniform payload for version ${version}`);
+}
+exports.toUniformCredentialOfferPayload = toUniformCredentialOfferPayload;
+function determineFlowType(suppliedOffer, version) {
+    var _a, _b, _c;
+    const payload = getCredentialOfferPayload(suppliedOffer);
+    const supportedFlows = [];
+    if ((_a = payload.grants) === null || _a === void 0 ? void 0 : _a.authorization_code) {
+        supportedFlows.push(types_1.AuthzFlowType.AUTHORIZATION_CODE_FLOW);
+    }
+    if ((_c = (_b = payload.grants) === null || _b === void 0 ? void 0 : _b['urn:ietf:params:oauth:grant-type:pre-authorized_code']) === null || _c === void 0 ? void 0 : _c['pre-authorized_code']) {
+        supportedFlows.push(types_1.AuthzFlowType.PRE_AUTHORIZED_CODE_FLOW);
+    }
+    return supportedFlows;
+}
+exports.determineFlowType = determineFlowType;
+function getCredentialOfferPayload(offer) {
+    let payload;
+    if ('credential_offer' in offer && offer['credential_offer']) {
+        payload = offer.credential_offer;
+    }
+    else {
+        payload = offer;
+    }
+    return payload;
+}
+exports.getCredentialOfferPayload = getCredentialOfferPayload;
+function determineGrantTypes(offer) {
+    let grants;
+    if ('grants' in offer && offer.grants) {
+        grants = offer.grants;
+    }
+    else {
+        grants = getCredentialOfferPayload(offer).grants;
+    }
+    const types = [];
+    if (grants) {
+        if (grants.authorization_code) {
+            types.push(types_1.GrantTypes.AUTHORIZATION_CODE);
+        }
+        if (grants['urn:ietf:params:oauth:grant-type:pre-authorized_code'] &&
+            grants['urn:ietf:params:oauth:grant-type:pre-authorized_code']['pre-authorized_code']) {
+            types.push(types_1.GrantTypes.PRE_AUTHORIZED_CODE);
+        }
+    }
+    return types;
+}
+exports.determineGrantTypes = determineGrantTypes;
+function getVersionFromURIParam(credentialOfferURI, currentVersion, matchingVersion, param) {
+    if (credentialOfferURI.includes(param)) {
+        return recordVersion(currentVersion, matchingVersion, param);
+    }
+    return currentVersion;
+}
+function recordVersion(currentVersion, matchingVersion, key) {
+    if (currentVersion === types_1.OpenId4VCIVersion.VER_UNKNOWN || matchingVersion === currentVersion) {
+        return matchingVersion;
+    }
+    throw new Error(`Invalid param. Some keys have been used from version: ${currentVersion} version while '${key}' is used from version: ${matchingVersion}`);
+}
+function getTypesFromOffer(credentialOffer, opts) {
+    const types = credentialOffer.credentials.reduce((prev, curr) => {
+        // FIXME returning the string value is wrong (as it's an id), but just matching the current behavior of this library
+        // The credential_type (from draft 8) and the actual 'type' value in a VC (from draft 11) are mixed up
+        // Fix for this here: https://github.com/Sphereon-Opensource/OID4VCI/pull/54
+        if (typeof curr === 'string') {
+            return [...prev, curr];
+        }
+        else if (curr.format === 'jwt_vc_json-ld' || curr.format === 'ldp_vc') {
+            return [...prev, ...curr.credential_definition.type];
+        }
+        else if (curr.format === 'jwt_vc_json' || curr.format === 'jwt_vc') {
+            return [...prev, ...curr.types];
+        }
+        else if (curr.format === 'vc+sd-jwt') {
+            return [...prev, curr.vct];
+        }
+        return prev;
+    }, []);
+    if (!types || types.length === 0) {
+        throw Error('Could not deduce types from credential offer');
+    }
+    if (opts === null || opts === void 0 ? void 0 : opts.filterVerifiableCredential) {
+        return types.filter((type) => type !== 'VerifiableCredential');
+    }
+    return types;
+}
+exports.getTypesFromOffer = getTypesFromOffer;
 //# sourceMappingURL=CredentialOfferUtil.js.map

package/dist/functions/CredentialRequestUtil.d.ts

@@ -1,6 +1,6 @@
-import { OpenId4VCIVersion, UniformCredentialRequest } from '../types';
-export declare function getTypesFromRequest(credentialRequest: UniformCredentialRequest, opts?: {
-    filterVerifiableCredential: boolean;
-}): string[];
-export declare function getCredentialRequestForVersion(credentialRequest: UniformCredentialRequest, version: OpenId4VCIVersion): UniformCredentialRequest;
+import { OpenId4VCIVersion, UniformCredentialRequest } from '../types';
+export declare function getTypesFromRequest(credentialRequest: UniformCredentialRequest, opts?: {
+    filterVerifiableCredential: boolean;
+}): string[];
+export declare function getCredentialRequestForVersion(credentialRequest: UniformCredentialRequest, version: OpenId4VCIVersion): UniformCredentialRequest;
 //# sourceMappingURL=CredentialRequestUtil.d.ts.map