@sphereon/ssi-sdk-ext.identifier-resolution 0.36.1-feature.integration.fides.68 → 0.36.1-feature.integration.fides.74

package/dist/index.js

@@ -4780,7 +4780,6 @@ async function getManagedDidIdentifier(opts, context) {
     identifier = opts.identifier;
   }
   const did = identifier.did;
-  const keys = identifier?.keys;
   const extendedKey = await getFirstKeyWithRelation({
     ...opts,
     // Make sure we use offline mode if no pref was supplied. We are looking for managed DIDs after all. Could be it is not published yet
@@ -4789,7 +4788,6 @@ async function getManagedDidIdentifier(opts, context) {
     vmRelationship: opts.vmRelationship ?? "verificationMethod"
   }, context);
   const key = extendedKey;
-  const controllerKeyId = identifier.controllerKeyId;
   const jwk = toJwk(key.publicKeyHex, key.type, {
     key
   });
@@ -4802,6 +4800,42 @@ async function getManagedDidIdentifier(opts, context) {
     kid = `${did}${hash}${kid}`;
   }
   const issuer = opts.issuer ?? did;
+  let filteredKeys = identifier?.keys ?? [];
+  if (opts.kmsKeyRef) {
+    const keysByKmsKeyRef = filteredKeys.filter((k) => k.kid === opts.kmsKeyRef);
+    if (keysByKmsKeyRef.length > 0) {
+      filteredKeys = keysByKmsKeyRef;
+    }
+  }
+  if (filteredKeys.length === identifier?.keys?.length && opts.vmRelationship) {
+    const keysByVmRelationship = filteredKeys.filter((k) => {
+      const purposes = k.meta?.purposes;
+      if (!purposes || purposes.length === 0) {
+        return opts.vmRelationship === "verificationMethod";
+      }
+      return purposes.includes(opts.vmRelationship);
+    });
+    if (keysByVmRelationship.length > 0) {
+      filteredKeys = keysByVmRelationship;
+    }
+  }
+  if (filteredKeys.length === identifier?.keys?.length && typeof opts.identifier === "string" && opts.identifier.includes("#")) {
+    const fragment = opts.identifier.split("#")[1];
+    const keysByFragment = filteredKeys.filter((k) => {
+      const vmId = k.meta?.verificationMethod?.id;
+      return vmId === `${did}#${fragment}` || vmId === fragment || k.kid === fragment;
+    });
+    if (keysByFragment.length > 0) {
+      filteredKeys = keysByFragment;
+    }
+  }
+  const keys = filteredKeys;
+  const controllerKeyId = key.kid;
+  const filteredIdentifier = {
+    ...identifier,
+    keys: filteredKeys,
+    controllerKeyId
+  };
   return {
     method,
     key,
@@ -4813,7 +4847,7 @@ async function getManagedDidIdentifier(opts, context) {
     kid,
     keys,
     issuer,
-    identifier,
+    identifier: filteredIdentifier,
     clientId: opts.clientId,
     clientIdScheme: opts.clientIdScheme,
     opts