@sphereon/ssi-sdk-ext.identifier-resolution 0.24.1-next.100

package/dist/functions/managedIdentifierFunctions.js

@@ -0,0 +1,252 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.managedIdentifierToJwk = exports.managedIdentifierToKeyResult = exports.getManagedIdentifier = exports.getManagedX5cIdentifier = exports.getManagedJwkIdentifier = exports.getManagedDidIdentifier = exports.getManagedKeyIdentifier = exports.ensureManagedIdentifierResult = exports.getManagedKidIdentifier = void 0;
+const ssi_sdk_ext_did_utils_1 = require("@sphereon/ssi-sdk-ext.did-utils");
+const ssi_sdk_ext_key_utils_1 = require("@sphereon/ssi-sdk-ext.key-utils");
+const ssi_sdk_ext_x509_utils_1 = require("@sphereon/ssi-sdk-ext.x509-utils");
+const ssi_sdk_agent_config_1 = require("@sphereon/ssi-sdk.agent-config");
+const pkijs_1 = require("pkijs");
+const types_1 = require("../types");
+function getManagedKidIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        const method = 'kid';
+        if (!(0, ssi_sdk_agent_config_1.contextHasKeyManager)(context)) {
+            return Promise.reject(Error(`Cannot get Key/JWK identifier if KeyManager plugin is not enabled!`));
+        }
+        const key = yield context.agent.keyManagerGet({ kid: (_a = opts.kmsKeyRef) !== null && _a !== void 0 ? _a : opts.identifier });
+        const jwk = (0, ssi_sdk_ext_key_utils_1.toJwk)(key.publicKeyHex, key.type, { key });
+        const jwkThumbprint = (_c = (_b = key.meta) === null || _b === void 0 ? void 0 : _b.jwkThumbprint) !== null && _c !== void 0 ? _c : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        const kid = (_g = (_d = opts.kid) !== null && _d !== void 0 ? _d : (_f = (_e = key.meta) === null || _e === void 0 ? void 0 : _e.verificationMethod) === null || _f === void 0 ? void 0 : _f.id) !== null && _g !== void 0 ? _g : jwkThumbprint;
+        const issuer = (_h = opts.issuer) !== null && _h !== void 0 ? _h : kid; // The different identifiers should set the value. Defaults to the kid
+        return {
+            method,
+            key,
+            identifier: opts.identifier,
+            jwk,
+            jwkThumbprint,
+            kid,
+            issuer,
+            kmsKeyRef: key.kid,
+            opts,
+        };
+    });
+}
+exports.getManagedKidIdentifier = getManagedKidIdentifier;
+function isManagedIdentifierResult(identifier) {
+    return 'key' in identifier && 'kmsKeyRef' in identifier && 'method' in identifier && 'opts' in identifier;
+}
+/**
+ * Allows to get a managed identifier result in case identifier options are passed in, but returns the identifier directly in case results are passed in. This means resolution can have happened before, or happens in this method
+ * @param identifier
+ * @param context
+ */
+function ensureManagedIdentifierResult(identifier, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { lazyDisabled = false } = identifier;
+        return !lazyDisabled && isManagedIdentifierResult(identifier) ? identifier : yield getManagedIdentifier(identifier, context);
+    });
+}
+exports.ensureManagedIdentifierResult = ensureManagedIdentifierResult;
+/**
+ * This function is just a convenience function to get a common result. The user already apparently had a key, so could have called the kid version as well
+ * @param opts
+ * @param _context
+ */
+function getManagedKeyIdentifier(opts, _context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g;
+        const method = 'key';
+        const key = opts.identifier;
+        if (opts.kmsKeyRef && opts.kmsKeyRef !== key.kid) {
+            return Promise.reject(Error(`Cannot get a managed key object by providing a key and a kmsKeyRef that are different.}`));
+        }
+        const jwk = (0, ssi_sdk_ext_key_utils_1.toJwk)(key.publicKeyHex, key.type, { key });
+        const jwkThumbprint = (_b = (_a = key.meta) === null || _a === void 0 ? void 0 : _a.jwkThumbprint) !== null && _b !== void 0 ? _b : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        const kid = (_f = (_c = opts.kid) !== null && _c !== void 0 ? _c : (_e = (_d = key.meta) === null || _d === void 0 ? void 0 : _d.verificationMethod) === null || _e === void 0 ? void 0 : _e.id) !== null && _f !== void 0 ? _f : jwkThumbprint;
+        const issuer = (_g = opts.issuer) !== null && _g !== void 0 ? _g : kid; // The different identifiers should set the value. Defaults to the kid
+        return {
+            method,
+            key,
+            identifier: key,
+            jwk,
+            jwkThumbprint,
+            kid,
+            issuer,
+            kmsKeyRef: key.kid,
+            opts,
+        };
+    });
+}
+exports.getManagedKeyIdentifier = getManagedKeyIdentifier;
+function getManagedDidIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g;
+        const method = 'did';
+        if (!(0, ssi_sdk_agent_config_1.contextHasDidManager)(context)) {
+            return Promise.reject(Error(`Cannot get DID identifier if DID Manager plugin is not enabled!`));
+        }
+        let identifier;
+        if (typeof opts.identifier === 'string') {
+            identifier = yield context.agent.didManagerGet({ did: opts.identifier.split('#')[0] });
+        }
+        else {
+            identifier = opts.identifier;
+        }
+        const did = identifier.did;
+        const keys = identifier === null || identifier === void 0 ? void 0 : identifier.keys; // fixme: We really want to return the vmRelationship keys here actually
+        const extendedKey = yield (0, ssi_sdk_ext_did_utils_1.getFirstKeyWithRelation)(Object.assign(Object.assign({}, opts), { identifier, vmRelationship: (_a = opts.vmRelationship) !== null && _a !== void 0 ? _a : 'verificationMethod' }), context);
+        const key = extendedKey;
+        const controllerKeyId = identifier.controllerKeyId;
+        const jwk = (0, ssi_sdk_ext_key_utils_1.toJwk)(key.publicKeyHex, key.type, { key });
+        const jwkThumbprint = (_c = (_b = key.meta) === null || _b === void 0 ? void 0 : _b.jwkThumbprint) !== null && _c !== void 0 ? _c : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        let kid = (_d = opts.kid) !== null && _d !== void 0 ? _d : (_f = (_e = extendedKey.meta) === null || _e === void 0 ? void 0 : _e.verificationMethod) === null || _f === void 0 ? void 0 : _f.id;
+        if (!kid.startsWith(did)) {
+            // Make sure we create a fully qualified kid
+            const hash = kid.startsWith('#') ? '' : '#';
+            kid = `${did}${hash}${kid}`;
+        }
+        const issuer = (_g = opts.issuer) !== null && _g !== void 0 ? _g : did;
+        return {
+            method,
+            key,
+            did,
+            kmsKeyRef: key.kid,
+            jwk,
+            jwkThumbprint,
+            controllerKeyId,
+            kid,
+            keys,
+            issuer,
+            identifier,
+            opts,
+        };
+    });
+}
+exports.getManagedDidIdentifier = getManagedDidIdentifier;
+function getManagedJwkIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d;
+        const method = 'jwk';
+        const { kid, issuer } = opts;
+        if (!(0, ssi_sdk_agent_config_1.contextHasKeyManager)(context)) {
+            return Promise.reject(Error(`Cannot get Key/JWK identifier if KeyManager plugin is not enabled!`));
+        }
+        const key = yield context.agent.keyManagerGet({ kid: (_a = opts.kmsKeyRef) !== null && _a !== void 0 ? _a : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk: opts.identifier }) });
+        const jwk = (_b = opts.identifier) !== null && _b !== void 0 ? _b : (0, ssi_sdk_ext_key_utils_1.toJwk)(key.publicKeyHex, key.type, { key });
+        const jwkThumbprint = (_d = (_c = key.meta) === null || _c === void 0 ? void 0 : _c.jwkThumbprint) !== null && _d !== void 0 ? _d : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        // we explicitly do not set the kid and issuer, meaning it can remain null. Normally you do not provide a kid and issuer with Jwks.
+        return {
+            method,
+            key,
+            kmsKeyRef: key.kid,
+            identifier: jwk,
+            jwk,
+            jwkThumbprint,
+            kid,
+            issuer,
+            opts,
+        };
+    });
+}
+exports.getManagedJwkIdentifier = getManagedJwkIdentifier;
+function getManagedX5cIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        const { kid, issuer } = opts;
+        const method = 'x5c';
+        const x5c = opts.identifier;
+        if (x5c.length === 0) {
+            return Promise.reject(`Cannot resolve x5c when an empty x5c is passed in`);
+        }
+        else if (!(0, ssi_sdk_agent_config_1.contextHasKeyManager)(context)) {
+            return Promise.reject(Error(`Cannot get X5c identifier if KeyManager plugin is not enabled!`));
+        }
+        const cryptoImpl = (_a = opts.crypto) !== null && _a !== void 0 ? _a : crypto;
+        const certificate = (0, ssi_sdk_ext_x509_utils_1.pemOrDerToX509Certificate)(x5c[0]);
+        const cryptoEngine = new pkijs_1.CryptoEngine({ name: 'identifier_resolver_managed', crypto: cryptoImpl });
+        (0, pkijs_1.setEngine)(cryptoEngine.name, cryptoEngine);
+        const pk = yield certificate.getPublicKey(undefined, cryptoEngine);
+        const jwk = (yield cryptoEngine.subtle.exportKey('jwk', pk));
+        const jwkThumbprint = (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        const key = yield context.agent.keyManagerGet({ kid: (_b = opts.kmsKeyRef) !== null && _b !== void 0 ? _b : jwkThumbprint });
+        // we explicitly do not set the kid and issuer, meaning it can remain null. Normally you do not provide a kid and issuer with x5c.
+        return {
+            method,
+            x5c,
+            identifier: x5c,
+            certificate,
+            jwk,
+            jwkThumbprint,
+            key,
+            kmsKeyRef: key.kid,
+            kid,
+            issuer,
+            opts,
+        };
+    });
+}
+exports.getManagedX5cIdentifier = getManagedX5cIdentifier;
+function getManagedIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let resolutionResult;
+        if (isManagedIdentifierResult(opts)) {
+            opts;
+        }
+        if ((0, types_1.isManagedIdentifierKidOpts)(opts)) {
+            resolutionResult = yield getManagedKidIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierDidOpts)(opts)) {
+            resolutionResult = yield getManagedDidIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierJwkOpts)(opts)) {
+            resolutionResult = yield getManagedJwkIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierX5cOpts)(opts)) {
+            resolutionResult = yield getManagedX5cIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierKeyOpts)(opts)) {
+            resolutionResult = yield getManagedKeyIdentifier(opts, context);
+        }
+        else {
+            return Promise.reject(Error(`Could not determine identifier method. Please provide explicitly`));
+        }
+        const { key } = resolutionResult;
+        if (!key || ((0, types_1.isManagedIdentifierDidOpts)(opts) && (0, types_1.isManagedIdentifierDidResult)(resolutionResult) && !resolutionResult.identifier)) {
+            console.log(`Cannot find identifier`, opts.identifier);
+            return Promise.reject(`Cannot find identifier ${opts.identifier}`);
+        }
+        return resolutionResult;
+    });
+}
+exports.getManagedIdentifier = getManagedIdentifier;
+function managedIdentifierToKeyResult(identifier, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const resolved = yield ensureManagedIdentifierResult(identifier, context);
+        if ((0, types_1.isManagedIdentifierKeyResult)(resolved)) {
+            return resolved;
+        }
+        return Object.assign(Object.assign({}, resolved), { method: 'key', identifier: resolved.key });
+    });
+}
+exports.managedIdentifierToKeyResult = managedIdentifierToKeyResult;
+function managedIdentifierToJwk(identifier, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const resolved = yield ensureManagedIdentifierResult(identifier, context);
+        if ((0, types_1.isManagedIdentifierJwkResult)(resolved)) {
+            return resolved;
+        }
+        return Object.assign(Object.assign({}, resolved), { method: 'jwk', identifier: resolved.jwk });
+    });
+}
+exports.managedIdentifierToJwk = managedIdentifierToJwk;
+//# sourceMappingURL=managedIdentifierFunctions.js.map

package/dist/functions/managedIdentifierFunctions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managedIdentifierFunctions.js","sourceRoot":"","sources":["../../src/functions/managedIdentifierFunctions.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2EAAyE;AACzE,2EAAoF;AACpF,6EAA4E;AAC5E,yEAA2F;AAE3F,iCAA+C;AAC/C,oCAsBiB;AAEjB,SAAsB,uBAAuB,CAC3C,IAA8B,EAC9B,OAAmC;;;QAEnC,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;QACzF,MAAM,GAAG,GAAG,IAAA,6BAAK,EAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtD,MAAM,aAAa,GAAG,MAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAwB,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,MAAM,GAAG,GAAG,MAAA,MAAA,IAAI,CAAC,GAAG,mCAAK,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,kBAAkB,0CAAE,EAAa,mCAAI,aAAa,CAAA;QACrF,MAAM,MAAM,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,GAAG,CAAA,CAAC,sEAAsE;QACxG,OAAO;YACL,MAAM;YACN,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG;YACH,aAAa;YACb,GAAG;YACH,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,IAAI;SACgC,CAAA;IACxC,CAAC;CAAA;AAxBD,0DAwBC;AAED,SAAS,yBAAyB,CAAC,UAA+D;IAChG,OAAO,KAAK,IAAI,UAAU,IAAI,WAAW,IAAI,UAAU,IAAI,QAAQ,IAAI,UAAU,IAAI,MAAM,IAAI,UAAU,CAAA;AAC3G,CAAC;AAED;;;;GAIG;AACH,SAAsB,6BAA6B,CACjD,UAEC,EACD,OAAmC;;QAEnC,MAAM,EAAE,YAAY,GAAG,KAAK,EAAE,GAAG,UAAU,CAAA;QAC3C,OAAO,CAAC,YAAY,IAAI,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9H,CAAC;CAAA;AARD,sEAQC;AAED;;;;GAIG;AACH,SAAsB,uBAAuB,CAAC,IAA8B,EAAE,QAA6B;;;QACzG,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,MAAM,GAAG,GAAS,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;YACjD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC,CAAA;QACzH,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,6BAAK,EAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtD,MAAM,aAAa,GAAG,MAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAwB,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,MAAM,GAAG,GAAG,MAAA,MAAA,IAAI,CAAC,GAAG,mCAAK,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,kBAAkB,0CAAE,EAAa,mCAAI,aAAa,CAAA;QACrF,MAAM,MAAM,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,GAAG,CAAA,CAAC,sEAAsE;QACxG,OAAO;YACL,MAAM;YACN,GAAG;YACH,UAAU,EAAE,GAAG;YACf,GAAG;YACH,aAAa;YACb,GAAG;YACH,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,IAAI;SACgC,CAAA;IACxC,CAAC;CAAA;AArBD,0DAqBC;AAED,SAAsB,uBAAuB,CAAC,IAA8B,EAAE,OAA2B;;;QACvG,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC,CAAA;QACjG,CAAC;QAED,IAAI,UAAuB,CAAA;QAC3B,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACxC,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACxF,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAC9B,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAA;QAC1B,MAAM,IAAI,GAAG,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,IAAI,CAAA,CAAC,wEAAwE;QACtG,MAAM,WAAW,GAAG,MAAM,IAAA,+CAAuB,kCAE1C,IAAI,KACP,UAAU,EACV,cAAc,EAAE,MAAA,IAAI,CAAC,cAAc,mCAAI,oBAAoB,KAE7D,OAAO,CACR,CAAA;QACD,MAAM,GAAG,GAAG,WAAW,CAAA;QACvB,MAAM,eAAe,GAAG,UAAU,CAAC,eAAe,CAAA;QAClD,MAAM,GAAG,GAAG,IAAA,6BAAK,EAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtD,MAAM,aAAa,GAAG,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAa,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAChF,IAAI,GAAG,GAAG,MAAA,IAAI,CAAC,GAAG,mCAAI,MAAA,MAAA,WAAW,CAAC,IAAI,0CAAE,kBAAkB,0CAAE,EAAE,CAAA;QAC9D,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,4CAA4C;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;YAC3C,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,EAAE,CAAA;QAC7B,CAAC;QACD,MAAM,MAAM,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,GAAG,CAAA;QACjC,OAAO;YACL,MAAM;YACN,GAAG;YACH,GAAG;YACH,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,GAAG;YACH,aAAa;YACb,eAAe;YACf,GAAG;YACH,IAAI;YACJ,MAAM;YACN,UAAU;YACV,IAAI;SACL,CAAA;IACH,CAAC;CAAA;AAhDD,0DAgDC;AAED,SAAsB,uBAAuB,CAC3C,IAA8B,EAC9B,OAAmC;;;QAEnC,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAC5B,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1H,MAAM,GAAG,GAAG,MAAA,IAAI,CAAC,UAAU,mCAAI,IAAA,6BAAK,EAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACzE,MAAM,aAAa,GAAG,MAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAwB,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,mIAAmI;QACnI,OAAO;YACL,MAAM;YACN,GAAG;YACH,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,UAAU,EAAE,GAAG;YACf,GAAG;YACH,aAAa;YACb,GAAG;YACH,MAAM;YACN,IAAI;SACgC,CAAA;IACxC,CAAC;CAAA;AAxBD,0DAwBC;AAED,SAAsB,uBAAuB,CAC3C,IAEC,EACD,OAAmC;;;QAEnC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAA;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAA;QAC5E,CAAC;aAAM,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC,CAAA;QAChG,CAAC;QACD,MAAM,UAAU,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,MAAM,CAAA;QACxC,MAAM,WAAW,GAAG,IAAA,kDAAyB,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACrD,MAAM,YAAY,GAAG,IAAI,oBAAY,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QAClG,IAAA,iBAAS,EAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAC1C,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAClE,MAAM,GAAG,GAAG,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAQ,CAAA;QACnE,MAAM,aAAa,GAAG,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAA,IAAI,CAAC,SAAS,mCAAI,aAAa,EAAE,CAAC,CAAA;QACvF,kIAAkI;QAElI,OAAO;YACL,MAAM;YACN,GAAG;YACH,UAAU,EAAE,GAAG;YACf,WAAW;YACX,GAAG;YACH,aAAa;YACb,GAAG;YACH,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,GAAG;YACH,MAAM;YACN,IAAI;SACgC,CAAA;IACxC,CAAC;CAAA;AArCD,0DAqCC;AAED,SAAsB,oBAAoB,CACxC,IAEC,EACD,OAAmC;;QAEnC,IAAI,gBAAyC,CAAA;QAC7C,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAA;QACN,CAAC;QACD,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YACrC,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC,CAAA;QAClG,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,GAAG,gBAAgB,CAAA;QAChC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAA,kCAA0B,EAAC,IAAI,CAAC,IAAI,IAAA,oCAA4B,EAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;YACjI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACtD,OAAO,OAAO,CAAC,MAAM,CAAC,0BAA0B,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,OAAO,gBAAgB,CAAA;IACzB,CAAC;CAAA;AA7BD,oDA6BC;AAED,SAAsB,4BAA4B,CAChD,UAAyC,EACzC,OAA2D;;QAE3D,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACzE,IAAI,IAAA,oCAA4B,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,OAAO,gCACF,QAAQ,KACX,MAAM,EAAE,KAAK,EACb,UAAU,EAAE,QAAQ,CAAC,GAAG,GACY,CAAA;IACxC,CAAC;CAAA;AAbD,oEAaC;AAED,SAAsB,sBAAsB,CAC1C,UAAyC,EACzC,OAA2D;;QAE3D,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACzE,IAAI,IAAA,oCAA4B,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,OAAO,gCACF,QAAQ,KACX,MAAM,EAAE,KAAK,EACb,UAAU,EAAE,QAAQ,CAAC,GAAG,GACY,CAAA;IACxC,CAAC;CAAA;AAbD,wDAaC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @internal
+ */
+declare const schema: any;
+export { schema };
+/**
+ * @public
+ */
+export { IdentifierResolution } from './agent/IdentifierResolution';
+export * from './functions';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,QAAA,MAAM,MAAM,KAAmC,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB;;GAEG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,cAAc,aAAa,CAAA;AAC3B,cAAc,SAAS,CAAA"}

package/dist/index.js

@@ -0,0 +1,30 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentifierResolution = exports.schema = void 0;
+/**
+ * @internal
+ */
+const schema = require('../plugin.schema.json');
+exports.schema = schema;
+/**
+ * @public
+ */
+var IdentifierResolution_1 = require("./agent/IdentifierResolution");
+Object.defineProperty(exports, "IdentifierResolution", { enumerable: true, get: function () { return IdentifierResolution_1.IdentifierResolution; } });
+__exportStar(require("./functions"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;GAEG;AACH,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;AACtC,wBAAM;AACf;;GAEG;AACH,qEAAmE;AAA1D,4HAAA,oBAAoB,OAAA;AAC7B,8CAA2B;AAC3B,0CAAuB"}

package/dist/tsdoc-metadata.json

@@ -0,0 +1,11 @@
+// This file is read by tools that parse documentation comments conforming to the TSDoc standard.
+// It should be published with your NPM package.  It should not be tracked by Git.
+{
+  "tsdocVersion": "0.12",
+  "toolPackages": [
+    {
+      "packageName": "@microsoft/api-extractor",
+      "packageVersion": "7.47.5"
+    }
+  ]
+}

package/dist/types/IIdentifierResolution.d.ts

@@ -0,0 +1,37 @@
+import { IAgentContext, IDIDManager, IKeyManager, IPluginMethodMap } from '@veramo/core';
+import { ExternalIdentifierDidOpts, ExternalIdentifierDidResult, ExternalIdentifierOpts, ExternalIdentifierResult, ExternalIdentifierX5cOpts, ExternalIdentifierX5cResult } from './externalIdentifierTypes';
+import { ManagedIdentifierDidOpts, ManagedIdentifierDidResult, ManagedIdentifierJwkOpts, ManagedIdentifierJwkResult, ManagedIdentifierKeyOpts, ManagedIdentifierKeyResult, ManagedIdentifierKidOpts, ManagedIdentifierKidResult, ManagedIdentifierOptsOrResult, ManagedIdentifierResult, ManagedIdentifierX5cOpts, ManagedIdentifierX5cResult } from './managedIdentifierTypes';
+export declare const identifierResolutionContextMethods: Array<string>;
+/**
+ * @public
+ */
+export interface IIdentifierResolution extends IPluginMethodMap {
+    /**
+     * Main method for managed identifiers. We always go through this method (also the others) as we want to integrate a plugin for anomaly detection. Having a single method helps
+     *
+     * The end result of all these methods is a common baseline response that allows to use a key from the registered KMS systems. It also provides kid and iss(uer) values that can be used in a JWT/JWS for instance
+     * Allows to get a managed identifier result in case identifier options are passed in, but returns the identifier directly in case results are passed in. This means resolution can have happened before, or happens in this method
+     *
+     * We use the opts or result type almost everywhere, as it allows for just in time resolution whenever this method is called and afterwards we have the result, so resolution doesn't have to hit the DB, or external endpoints.
+     * Also use this method in the local agent, not using REST. If case the identifier needs to be resolved, you can always have the above methods using REST
+     * @param args
+     * @param context
+     * @public
+     */
+    identifierManagedGet(args: ManagedIdentifierOptsOrResult, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierResult>;
+    identifierManagedGetByDid(args: ManagedIdentifierDidOpts, context: IAgentContext<IKeyManager & IDIDManager>): Promise<ManagedIdentifierDidResult>;
+    identifierManagedGetByKid(args: ManagedIdentifierKidOpts, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierKidResult>;
+    identifierManagedGetByJwk(args: ManagedIdentifierJwkOpts, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierJwkResult>;
+    identifierManagedGetByX5c(args: ManagedIdentifierX5cOpts, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierX5cResult>;
+    identifierManagedGetByKey(args: ManagedIdentifierKeyOpts, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierKeyResult>;
+    /**
+     * Main method for external identifiers. We always go through this method (also the others) as we want to integrate a plugin for anomaly detection. Having a single method helps
+     * @param args
+     * @param context
+     * @public
+     */
+    identifierExternalResolve(args: ExternalIdentifierOpts, context: IAgentContext<any>): Promise<ExternalIdentifierResult>;
+    identifierExternalResolveByDid(args: ExternalIdentifierDidOpts, context: IAgentContext<any>): Promise<ExternalIdentifierDidResult>;
+    identifierExternalResolveByX5c(args: ExternalIdentifierX5cOpts, context: IAgentContext<any>): Promise<ExternalIdentifierX5cResult>;
+}
+//# sourceMappingURL=IIdentifierResolution.d.ts.map

package/dist/types/IIdentifierResolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IIdentifierResolution.d.ts","sourceRoot":"","sources":["../../src/types/IIdentifierResolution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACxF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAA;AAGjC,eAAO,MAAM,kCAAkC,EAAE,KAAK,CAAC,MAAM,CAU5D,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D;;;;;;;;;;;OAWG;IACH,oBAAoB,CAAC,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAEhI,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAEjJ,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAEnI,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAEnI,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAEnI,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAInI;;;;;OAKG;IACH,yBAAyB,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IAEvH,8BAA8B,CAAC,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAElI,8BAA8B,CAAC,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAA;CACnI"}

package/dist/types/IIdentifierResolution.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.identifierResolutionContextMethods = void 0;
+// Exposing the methods here for any REST implementation
+exports.identifierResolutionContextMethods = [
+    'identifierManagedGet',
+    'identifierManagedGetByDid',
+    'identifierManagedGetByKid',
+    'identifierManagedGetByJwk',
+    'identifierManagedGetByX5c',
+    'identifierManagedGetByKey',
+    'identifierExternalResolve',
+    'identifierExternalResolveByDid',
+    'identifierExternalResolveByX5c',
+];
+//# sourceMappingURL=IIdentifierResolution.js.map

package/dist/types/IIdentifierResolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IIdentifierResolution.js","sourceRoot":"","sources":["../../src/types/IIdentifierResolution.ts"],"names":[],"mappings":";;;AAwBA,wDAAwD;AAC3C,QAAA,kCAAkC,GAAkB;IAC/D,sBAAsB;IACtB,2BAA2B;IAC3B,2BAA2B;IAC3B,2BAA2B;IAC3B,2BAA2B;IAC3B,2BAA2B;IAC3B,2BAA2B;IAC3B,gCAAgC;IAChC,gCAAgC;CACjC,CAAA"}

package/dist/types/common.d.ts

@@ -0,0 +1,17 @@
+import { JWK } from '@sphereon/ssi-sdk-ext.key-utils';
+import { IIdentifier, IKey } from '@veramo/core';
+import { ExternalIdentifierType } from './externalIdentifierTypes';
+import { ManagedIdentifierType } from './managedIdentifierTypes';
+export interface JwkInfo {
+    jwk: JWK;
+    jwkThumbprint: string;
+}
+export declare function isDidIdentifier(identifier: ManagedIdentifierType | ExternalIdentifierType): identifier is IIdentifier | string;
+export declare function isIIdentifier(identifier: ManagedIdentifierType | ExternalIdentifierType): identifier is IIdentifier;
+export declare function isJwkIdentifier(identifier: ManagedIdentifierType | ExternalIdentifierType): identifier is JWK;
+export declare function isOidcDiscoveryIdentifier(identifier: ManagedIdentifierType | ExternalIdentifierType): identifier is string;
+export declare function isJwksUrlIdentifier(identifier: ManagedIdentifierType | ExternalIdentifierType): identifier is string;
+export declare function isKidIdentifier(identifier: ManagedIdentifierType | ExternalIdentifierType): identifier is string;
+export declare function isKeyIdentifier(identifier: ManagedIdentifierType): identifier is IKey;
+export declare function isX5cIdentifier(identifier: ManagedIdentifierType | ExternalIdentifierType): identifier is string[];
+//# sourceMappingURL=common.d.ts.map

package/dist/types/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/types/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAEhE,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,GAAG,CAAA;IACR,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,UAAU,IAAI,WAAW,GAAG,MAAM,CAE9H;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,UAAU,IAAI,WAAW,CAEnH;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,UAAU,IAAI,GAAG,CAE7G;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,UAAU,IAAI,MAAM,CAE1H;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,UAAU,IAAI,MAAM,CAEpH;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,UAAU,IAAI,MAAM,CAEhH;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,UAAU,IAAI,IAAI,CAQrF;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,UAAU,IAAI,MAAM,EAAE,CAElH"}

package/dist/types/common.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isX5cIdentifier = exports.isKeyIdentifier = exports.isKidIdentifier = exports.isJwksUrlIdentifier = exports.isOidcDiscoveryIdentifier = exports.isJwkIdentifier = exports.isIIdentifier = exports.isDidIdentifier = void 0;
+function isDidIdentifier(identifier) {
+    return isIIdentifier(identifier) || (typeof identifier === 'string' && identifier.startsWith('did:'));
+}
+exports.isDidIdentifier = isDidIdentifier;
+function isIIdentifier(identifier) {
+    return typeof identifier === 'object' && !Array.isArray(identifier) && 'did' in identifier && 'keys' in identifier;
+}
+exports.isIIdentifier = isIIdentifier;
+function isJwkIdentifier(identifier) {
+    return typeof identifier === 'object' && !Array.isArray(identifier) && 'kty' in identifier;
+}
+exports.isJwkIdentifier = isJwkIdentifier;
+function isOidcDiscoveryIdentifier(identifier) {
+    return typeof identifier === 'string' && identifier.startsWith('http') && identifier.endsWith('/.well-known/openid-configuration');
+}
+exports.isOidcDiscoveryIdentifier = isOidcDiscoveryIdentifier;
+function isJwksUrlIdentifier(identifier) {
+    return typeof identifier === 'string' && identifier.startsWith('http') && identifier.endsWith('jwks.json');
+}
+exports.isJwksUrlIdentifier = isJwksUrlIdentifier;
+function isKidIdentifier(identifier) {
+    return typeof identifier === 'string' && !identifier.startsWith('did:');
+}
+exports.isKidIdentifier = isKidIdentifier;
+function isKeyIdentifier(identifier) {
+    return (typeof identifier === 'string' &&
+        !Array.isArray(identifier) &&
+        typeof identifier === 'object' &&
+        `kid` in identifier &&
+        'publicKeyHex' in identifier);
+}
+exports.isKeyIdentifier = isKeyIdentifier;
+function isX5cIdentifier(identifier) {
+    return Array.isArray(identifier) && identifier.length > 0; // todo: Do we want to do additional validation? We know it must be DER and thus hex for instance
+}
+exports.isX5cIdentifier = isX5cIdentifier;
+//# sourceMappingURL=common.js.map

package/dist/types/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/types/common.ts"],"names":[],"mappings":";;;AAUA,SAAgB,eAAe,CAAC,UAA0D;IACxF,OAAO,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AACvG,CAAC;AAFD,0CAEC;AAED,SAAgB,aAAa,CAAC,UAA0D;IACtF,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,UAAU,IAAI,MAAM,IAAI,UAAU,CAAA;AACpH,CAAC;AAFD,sCAEC;AAED,SAAgB,eAAe,CAAC,UAA0D;IACxF,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,UAAU,CAAA;AAC5F,CAAC;AAFD,0CAEC;AAED,SAAgB,yBAAyB,CAAC,UAA0D;IAClG,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAA;AACpI,CAAC;AAFD,8DAEC;AAED,SAAgB,mBAAmB,CAAC,UAA0D;IAC5F,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC5G,CAAC;AAFD,kDAEC;AAED,SAAgB,eAAe,CAAC,UAA0D;IACxF,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AACzE,CAAC;AAFD,0CAEC;AAED,SAAgB,eAAe,CAAC,UAAiC;IAC/D,OAAO,CACL,OAAO,UAAU,KAAK,QAAQ;QAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC1B,OAAO,UAAU,KAAK,QAAQ;QAC9B,KAAK,IAAI,UAAU;QACnB,cAAc,IAAI,UAAU,CAC7B,CAAA;AACH,CAAC;AARD,0CAQC;AAED,SAAgB,eAAe,CAAC,UAA0D;IACxF,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAA,CAAC,iGAAiG;AAC7J,CAAC;AAFD,0CAEC"}

package/dist/types/externalIdentifierTypes.d.ts

@@ -0,0 +1,80 @@
+import { DidDocumentJwks } from '@sphereon/ssi-sdk-ext.did-utils';
+import { JWK } from '@sphereon/ssi-sdk-ext.key-utils';
+import { X509ValidationResult } from '@sphereon/ssi-sdk-ext.x509-utils';
+import { IParsedDID } from '@sphereon/ssi-types';
+import { DIDDocument, DIDDocumentSection, DIDResolutionResult } from '@veramo/core';
+import { JwkInfo } from './common';
+/**
+ * Use whenever we need to resolve an external identifier. We can pass in kids, DIDs, and x5chains
+ *
+ * The functions below can be used to check the type, and they also provide the proper runtime types
+ */
+export type ExternalIdentifierType = string | string[] | JWK;
+export type ExternalIdentifierOptsBase = {
+    method?: ExternalIdentifierMethod;
+    identifier: ExternalIdentifierType;
+};
+export type ExternalIdentifierDidOpts = Omit<ExternalIdentifierOptsBase, 'method'> & {
+    method?: 'did';
+    identifier: string;
+    noVerificationMethodFallback?: boolean;
+    vmRelationship?: DIDDocumentSection;
+    localResolution?: boolean;
+    uniresolverResolution?: boolean;
+    resolverResolution?: boolean;
+};
+export declare function isExternalIdentifierDidOpts(opts: ExternalIdentifierOptsBase): opts is ExternalIdentifierDidOpts;
+export type ExternalIdentifierOpts = (ExternalIdentifierJwkOpts | ExternalIdentifierX5cOpts | ExternalIdentifierDidOpts | ExternalIdentifierKidOpts) & ExternalIdentifierOptsBase;
+export type ExternalIdentifierKidOpts = Omit<ExternalIdentifierOptsBase, 'method'> & {
+    method?: 'kid';
+    identifier: string;
+};
+export declare function isExternalIdentifierKidOpts(opts: ExternalIdentifierOptsBase): opts is ExternalIdentifierKidOpts;
+export type ExternalIdentifierJwkOpts = Omit<ExternalIdentifierOptsBase, 'method'> & {
+    method?: 'jwk';
+    identifier: JWK;
+};
+export declare function isExternalIdentifierJwkOpts(opts: ExternalIdentifierOptsBase): opts is ExternalIdentifierJwkOpts;
+export type ExternalIdentifierOidcDiscoveryOpts = Omit<ExternalIdentifierOptsBase, 'method'> & {
+    method?: 'oidc-discovery';
+    identifier: string;
+};
+export declare function isExternalIdentifierOidcDiscoveryOpts(opts: ExternalIdentifierOptsBase): opts is ExternalIdentifierJwkOpts;
+export type ExternalIdentifierJwksUrlOpts = Omit<ExternalIdentifierOptsBase, 'method'> & {
+    method?: 'jwks-url';
+    identifier: string;
+};
+export declare function isExternalIdentifierJwksUrlOpts(opts: ExternalIdentifierOptsBase): opts is ExternalIdentifierJwksUrlOpts;
+export type ExternalIdentifierX5cOpts = Omit<ExternalIdentifierOptsBase, 'method'> & {
+    method?: 'x5c';
+    identifier: string[];
+    verify?: boolean;
+    verificationTime?: Date;
+    trustAnchors?: string[];
+};
+export declare function isExternalIdentifierX5cOpts(opts: ExternalIdentifierOptsBase): opts is ExternalIdentifierX5cOpts;
+export type ExternalIdentifierMethod = 'did' | 'jwk' | 'x5c' | 'kid' | 'oidc-discovery' | 'jwks-url' | 'oid4vci-issuer';
+export type ExternalIdentifierResult = ExternalIdentifierDidResult | ExternalIdentifierX5cResult;
+export interface IExternalIdentifierResultBase {
+    method: ExternalIdentifierMethod;
+    jwks: Array<ExternalJwkInfo>;
+}
+export interface ExternalIdentifierX5cResult extends IExternalIdentifierResultBase {
+    method: 'x5c';
+    x5c: string[];
+    issuerJWK: JWK;
+    verificationResult?: X509ValidationResult;
+    certificates: any[];
+}
+export interface ExternalJwkInfo extends JwkInfo {
+    kid?: string;
+}
+export interface ExternalIdentifierDidResult extends IExternalIdentifierResultBase {
+    method: 'did';
+    did: string;
+    didDocument?: DIDDocument;
+    didJwks?: DidDocumentJwks;
+    didResolutionResult: Omit<DIDResolutionResult, 'didDocument'>;
+    didParsed: IParsedDID;
+}
+//# sourceMappingURL=externalIdentifierTypes.d.ts.map

package/dist/types/externalIdentifierTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalIdentifierTypes.d.ts","sourceRoot":"","sources":["../../src/types/externalIdentifierTypes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACnF,OAAO,EAAsH,OAAO,EAAE,MAAM,UAAU,CAAA;AAEtJ;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,GAAG,CAAA;AAE5D,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,CAAC,EAAE,wBAAwB,CAAA;IACjC,UAAU,EAAE,sBAAsB,CAAA;CACnC,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,GAAG;IACnF,MAAM,CAAC,EAAE,KAAK,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,4BAA4B,CAAC,EAAE,OAAO,CAAA;IACtC,cAAc,CAAC,EAAE,kBAAkB,CAAA;IACnC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC7B,CAAA;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,0BAA0B,GAAG,IAAI,IAAI,yBAAyB,CAG/G;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,yBAAyB,GAAG,yBAAyB,GAAG,yBAAyB,GAAG,yBAAyB,CAAC,GAClJ,0BAA0B,CAAA;AAE5B,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,GAAG;IACnF,MAAM,CAAC,EAAE,KAAK,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,0BAA0B,GAAG,IAAI,IAAI,yBAAyB,CAG/G;AAED,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,GAAG;IACnF,MAAM,CAAC,EAAE,KAAK,CAAA;IACd,UAAU,EAAE,GAAG,CAAA;CAChB,CAAA;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,0BAA0B,GAAG,IAAI,IAAI,yBAAyB,CAG/G;AAED,MAAM,MAAM,mCAAmC,GAAG,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,GAAG;IAC7F,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,qCAAqC,CAAC,IAAI,EAAE,0BAA0B,GAAG,IAAI,IAAI,yBAAyB,CAGzH;AAED,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,GAAG;IACvF,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,0BAA0B,GAAG,IAAI,IAAI,6BAA6B,CAGvH;AAED,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,GAAG;IACnF,MAAM,CAAC,EAAE,KAAK,CAAA;IACd,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,gBAAgB,CAAC,EAAE,IAAI,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CACxB,CAAA;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,0BAA0B,GAAG,IAAI,IAAI,yBAAyB,CAG/G;AAED,MAAM,MAAM,wBAAwB,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,gBAAgB,GAAG,UAAU,GAAG,gBAAgB,CAAA;AAEvH,MAAM,MAAM,wBAAwB,GAAG,2BAA2B,GAAG,2BAA2B,CAAA;AAEhG,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,wBAAwB,CAAA;IAChC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,2BAA4B,SAAQ,6BAA6B;IAChF,MAAM,EAAE,KAAK,CAAA;IACb,GAAG,EAAE,MAAM,EAAE,CAAA;IACb,SAAS,EAAE,GAAG,CAAA;IACd,kBAAkB,CAAC,EAAE,oBAAoB,CAAA;IACzC,YAAY,EAAE,GAAG,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,eAAgB,SAAQ,OAAO;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,2BAA4B,SAAQ,6BAA6B;IAChF,MAAM,EAAE,KAAK,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAA;IAC7D,SAAS,EAAE,UAAU,CAAA;CACtB"}

package/dist/types/externalIdentifierTypes.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isExternalIdentifierX5cOpts = exports.isExternalIdentifierJwksUrlOpts = exports.isExternalIdentifierOidcDiscoveryOpts = exports.isExternalIdentifierJwkOpts = exports.isExternalIdentifierKidOpts = exports.isExternalIdentifierDidOpts = void 0;
+const common_1 = require("./common");
+function isExternalIdentifierDidOpts(opts) {
+    const { identifier } = opts;
+    return ('method' in opts && opts.method === 'did') || (0, common_1.isDidIdentifier)(identifier);
+}
+exports.isExternalIdentifierDidOpts = isExternalIdentifierDidOpts;
+function isExternalIdentifierKidOpts(opts) {
+    const { identifier } = opts;
+    return ('method' in opts && opts.method === 'kid') || (0, common_1.isKidIdentifier)(identifier);
+}
+exports.isExternalIdentifierKidOpts = isExternalIdentifierKidOpts;
+function isExternalIdentifierJwkOpts(opts) {
+    const { identifier } = opts;
+    return ('method' in opts && opts.method === 'jwk') || (0, common_1.isJwkIdentifier)(identifier);
+}
+exports.isExternalIdentifierJwkOpts = isExternalIdentifierJwkOpts;
+function isExternalIdentifierOidcDiscoveryOpts(opts) {
+    const { identifier } = opts;
+    return ('method' in opts && opts.method === 'oidc-discovery') || (0, common_1.isOidcDiscoveryIdentifier)(identifier);
+}
+exports.isExternalIdentifierOidcDiscoveryOpts = isExternalIdentifierOidcDiscoveryOpts;
+function isExternalIdentifierJwksUrlOpts(opts) {
+    const { identifier } = opts;
+    return ('method' in opts && opts.method === 'oidc-discovery') || (0, common_1.isJwksUrlIdentifier)(identifier);
+}
+exports.isExternalIdentifierJwksUrlOpts = isExternalIdentifierJwksUrlOpts;
+function isExternalIdentifierX5cOpts(opts) {
+    const { identifier } = opts;
+    return ('method' in opts && opts.method === 'x5c') || (0, common_1.isX5cIdentifier)(identifier);
+}
+exports.isExternalIdentifierX5cOpts = isExternalIdentifierX5cOpts;
+//# sourceMappingURL=externalIdentifierTypes.js.map

package/dist/types/externalIdentifierTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalIdentifierTypes.js","sourceRoot":"","sources":["../../src/types/externalIdentifierTypes.ts"],"names":[],"mappings":";;;AAKA,qCAAsJ;AAwBtJ,SAAgB,2BAA2B,CAAC,IAAgC;IAC1E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAA,wBAAe,EAAC,UAAU,CAAC,CAAA;AACnF,CAAC;AAHD,kEAGC;AAUD,SAAgB,2BAA2B,CAAC,IAAgC;IAC1E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAA,wBAAe,EAAC,UAAU,CAAC,CAAA;AACnF,CAAC;AAHD,kEAGC;AAOD,SAAgB,2BAA2B,CAAC,IAAgC;IAC1E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAA,wBAAe,EAAC,UAAU,CAAC,CAAA;AACnF,CAAC;AAHD,kEAGC;AAOD,SAAgB,qCAAqC,CAAC,IAAgC;IACpF,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,IAAI,IAAA,kCAAyB,EAAC,UAAU,CAAC,CAAA;AACxG,CAAC;AAHD,sFAGC;AAOD,SAAgB,+BAA+B,CAAC,IAAgC;IAC9E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,IAAI,IAAA,4BAAmB,EAAC,UAAU,CAAC,CAAA;AAClG,CAAC;AAHD,0EAGC;AAUD,SAAgB,2BAA2B,CAAC,IAAgC;IAC1E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAA,wBAAe,EAAC,UAAU,CAAC,CAAA;AACnF,CAAC;AAHD,kEAGC"}

package/dist/types/index.d.ts

@@ -0,0 +1,5 @@
+export * from './common';
+export * from './externalIdentifierTypes';
+export * from './managedIdentifierTypes';
+export * from './IIdentifierResolution';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,cAAc,2BAA2B,CAAA;AACzC,cAAc,0BAA0B,CAAA;AACxC,cAAc,yBAAyB,CAAA"}

package/dist/types/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./common"), exports);
+__exportStar(require("./externalIdentifierTypes"), exports);
+__exportStar(require("./managedIdentifierTypes"), exports);
+__exportStar(require("./IIdentifierResolution"), exports);
+//# sourceMappingURL=index.js.map