@sphereon/ssi-sdk-ext.key-manager 0.24.1-unstable.53 → 0.24.1-unstable.54

package/dist/agent/SphereonKeyManager.d.ts

@@ -1,5 +1,5 @@
 import { KeyManager as VeramoKeyManager, AbstractKeyManagementSystem, AbstractKeyStore } from '@veramo/key-manager';
-import { ManagedKeyInfo } from '@veramo/core';
+import { IKey, IKeyManagerGetArgs, ManagedKeyInfo } from '@veramo/core';
 import { ISphereonKeyManager, ISphereonKeyManagerSignArgs, ISphereonKeyManagerVerifyArgs } from '../types/ISphereonKeyManager';
 export declare const sphereonKeyManagerMethods: Array<string>;
 export declare class SphereonKeyManager extends VeramoKeyManager {
@@ -14,5 +14,6 @@ export declare class SphereonKeyManager extends VeramoKeyManager {
     keyManagerSign(args: ISphereonKeyManagerSignArgs): Promise<string>;
     keyManagerVerify(args: ISphereonKeyManagerVerifyArgs): Promise<boolean>;
     keyManagerListKeys(): Promise<ManagedKeyInfo[]>;
+    keyManagerGet({ kid }: IKeyManagerGetArgs): Promise<IKey>;
 }
 //# sourceMappingURL=SphereonKeyManager.d.ts.map

package/dist/agent/SphereonKeyManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SphereonKeyManager.d.ts","sourceRoot":"","sources":["../../src/agent/SphereonKeyManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,gBAAgB,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEnH,OAAO,EAAQ,cAAc,EAAY,MAAM,cAAc,CAAA;AAE7D,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAE9H,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,MAAM,CAMnD,CAAA;AAED,qBAAa,kBAAmB,SAAQ,gBAAgB;IACtD,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6C;IAC5E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAA;gBAE9B,OAAO,EAAE;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAA;KAAE;IAUlG,OAAO,CAAC,eAAe;IASjB,cAAc,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,MAAM,CAAC;IAUlE,gBAAgB,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC,OAAO,CAAC;IASvE,kBAAkB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;CAGtD"}
+{"version":3,"file":"SphereonKeyManager.d.ts","sourceRoot":"","sources":["../../src/agent/SphereonKeyManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,gBAAgB,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEnH,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAY,MAAM,cAAc,CAAA;AAEjF,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAG9H,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,MAAM,CAMnD,CAAA;AAED,qBAAa,kBAAmB,SAAQ,gBAAgB;IACtD,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6C;IAC5E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAA;gBAE9B,OAAO,EAAE;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAA;KAAE;IAUlG,OAAO,CAAC,eAAe;IASjB,cAAc,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,MAAM,CAAC;IAUlE,gBAAgB,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC,OAAO,CAAC;IASvE,kBAAkB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAI/C,aAAa,CAAC,EAAE,GAAG,EAAE,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;CAmBhE"}

package/dist/agent/SphereonKeyManager.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SphereonKeyManager = exports.sphereonKeyManagerMethods = void 0;
 const key_manager_1 = require("@veramo/key-manager");
 const ssi_sdk_ext_kms_local_1 = require("@sphereon/ssi-sdk-ext.kms-local");
+const ssi_sdk_ext_key_utils_1 = require("@sphereon/ssi-sdk-ext.key-utils");
 exports.sphereonKeyManagerMethods = [
     'keyManagerCreate',
     'keyManagerImport',
@@ -66,6 +67,29 @@ class SphereonKeyManager extends key_manager_1.KeyManager {
             return this.localStore.list({}); // FIXME there are no args it seems
         });
     }
+    keyManagerGet(_a) {
+        return __awaiter(this, arguments, void 0, function* ({ kid }) {
+            try {
+                const key = yield this.localStore.get({ kid });
+                return key;
+            }
+            catch (e) {
+                const keys = yield this.keyManagerListKeys();
+                const foundKey = keys.find((key) => {
+                    var _a, _b;
+                    return key.publicKeyHex === kid ||
+                        ((_a = key.meta) === null || _a === void 0 ? void 0 : _a.jwkThumbprint) === kid ||
+                        (((_b = key.meta) === null || _b === void 0 ? void 0 : _b.jwkThumbprint) == null && (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprintForKey)({ key }) === kid);
+                });
+                if (foundKey) {
+                    return foundKey;
+                }
+                else {
+                    throw new Error(`Key with kid ${kid} not found`);
+                }
+            }
+        });
+    }
 }
 exports.SphereonKeyManager = SphereonKeyManager;
 //# sourceMappingURL=SphereonKeyManager.js.map

package/dist/agent/SphereonKeyManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"SphereonKeyManager.js","sourceRoot":"","sources":["../../src/agent/SphereonKeyManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAmH;AAGnH,2EAAsF;AAGzE,QAAA,yBAAyB,GAAkB;IACtD,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;CACrB,CAAA;AAED,MAAa,kBAAmB,SAAQ,wBAAgB;IAKtD,YAAY,OAAsF;QAChG,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAA;QAC/B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAA;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/D,IAAI,CAAC,YAAY,GAAkC,OAAQ,CAAA;IAC7D,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,KAAK,CAAC,iFAAiF,IAAI,GAAG,CAAC,CAAA;QACvG,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,8EAA8E;IACxE,cAAc,CAAC,IAAiC;;;;;YACpD,MAAM,OAAO,GAAS,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAS,CAAA;YAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC7C,IAAI,OAAO,CAAC,IAAI,KAAe,+BAAO,CAAC,UAAU,EAAE,CAAC;gBAClD,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAA;YAC3F,CAAC;YACD,aAAa;YACb,OAAO,MAAM,OAAM,cAAc,YAAC,IAAI,CAAC,CAAA;QACzC,CAAC;KAAA;IAEK,gBAAgB,CAAC,IAAmC;;YACxD,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1C,IAAI,CAAC,QAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,GAAG,YAAY,mDAA2B,EAAE,CAAC;gBACxG,aAAa;gBACb,OAAO,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;YACD,MAAM,KAAK,CAAC,OAAO,GAAG,gCAAgC,CAAC,CAAA;QACzD,CAAC;KAAA;IAEK,kBAAkB;;YACtB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA,CAAC,mCAAmC;QACrE,CAAC;KAAA;CACF;AA9CD,gDA8CC"}
+{"version":3,"file":"SphereonKeyManager.js","sourceRoot":"","sources":["../../src/agent/SphereonKeyManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAmH;AAGnH,2EAAsF;AAEtF,2EAA8E;AAEjE,QAAA,yBAAyB,GAAkB;IACtD,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;CACrB,CAAA;AAED,MAAa,kBAAmB,SAAQ,wBAAgB;IAKtD,YAAY,OAAsF;QAChG,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAA;QAC/B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAA;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/D,IAAI,CAAC,YAAY,GAAkC,OAAQ,CAAA;IAC7D,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,KAAK,CAAC,iFAAiF,IAAI,GAAG,CAAC,CAAA;QACvG,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,8EAA8E;IACxE,cAAc,CAAC,IAAiC;;;;;YACpD,MAAM,OAAO,GAAS,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAS,CAAA;YAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC7C,IAAI,OAAO,CAAC,IAAI,KAAe,+BAAO,CAAC,UAAU,EAAE,CAAC;gBAClD,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAA;YAC3F,CAAC;YACD,aAAa;YACb,OAAO,MAAM,OAAM,cAAc,YAAC,IAAI,CAAC,CAAA;QACzC,CAAC;KAAA;IAEK,gBAAgB,CAAC,IAAmC;;YACxD,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1C,IAAI,CAAC,QAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,GAAG,YAAY,mDAA2B,EAAE,CAAC;gBACxG,aAAa;gBACb,OAAO,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;YACD,MAAM,KAAK,CAAC,OAAO,GAAG,gCAAgC,CAAC,CAAA;QACzD,CAAC;KAAA;IAEK,kBAAkB;;YACtB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA,CAAC,mCAAmC;QACrE,CAAC;KAAA;IAEK,aAAa;6DAAC,EAAE,GAAG,EAAsB;YAC7C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC9C,OAAO,GAAG,CAAA;YACZ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,GAAqB,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;gBAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,CAAC,GAAG,EAAE,EAAE;;oBACN,OAAA,GAAG,CAAC,YAAY,KAAK,GAAG;wBACxB,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAa,MAAK,GAAG;wBAC/B,CAAC,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAa,KAAI,IAAI,IAAI,IAAA,oDAA4B,EAAC,EAAE,GAAG,EAAE,CAAC,KAAK,GAAG,CAAC,CAAA;iBAAA,CACrF,CAAA;gBACD,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,QAAgB,CAAA;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,YAAY,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;QACH,CAAC;KAAA;CACF;AAlED,gDAkEC"}

package/dist/ssi-sdk-ext.key-manager.d.ts

@@ -1,6 +1,8 @@
 import { AbstractKeyManagementSystem } from '@veramo/key-manager';
 import { AbstractKeyStore } from '@veramo/key-manager';
+import { IKey } from '@veramo/core';
 import { IKeyManager } from '@veramo/core';
+import { IKeyManagerGetArgs as IKeyManagerGetArgs_2 } from '@veramo/core';
 import { IKeyManagerSignArgs } from '@veramo/core';
 import { IPluginMethodMap } from '@veramo/core';
 import { KeyManager } from '@veramo/key-manager';
@@ -102,6 +104,7 @@ export declare class SphereonKeyManager extends KeyManager {
     keyManagerSign(args: ISphereonKeyManagerSignArgs): Promise<string>;
     keyManagerVerify(args: ISphereonKeyManagerVerifyArgs): Promise<boolean>;
     keyManagerListKeys(): Promise<ManagedKeyInfo[]>;
+    keyManagerGet({ kid }: IKeyManagerGetArgs_2): Promise<IKey>;
 }
 
 export declare const sphereonKeyManagerMethods: Array<string>;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sphereon/ssi-sdk-ext.key-manager",
   "description": "Sphereon Key Manager plugin with BLS support",
-  "version": "0.24.1-unstable.53+1ce3951",
+  "version": "0.24.1-unstable.54+5ce83cc",
   "source": "src/index.ts",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -15,13 +15,13 @@
     "generate-plugin-schema": "sphereon dev generate-plugin-schema"
   },
   "dependencies": {
-    "@sphereon/ssi-sdk-ext.kms-local": "0.24.1-unstable.53+1ce3951",
+    "@sphereon/ssi-sdk-ext.kms-local": "0.24.1-unstable.54+5ce83cc",
     "@veramo/core": "4.2.0",
     "@veramo/key-manager": "4.2.0"
   },
   "devDependencies": {
     "@mattrglobal/bbs-signatures": "^1.3.1",
-    "@sphereon/ssi-sdk-ext.key-utils": "0.24.1-unstable.53+1ce3951",
+    "@sphereon/ssi-sdk-ext.key-utils": "0.24.1-unstable.54+5ce83cc",
     "@sphereon/ssi-sdk.dev": "0.28.0"
   },
   "resolutions": {
@@ -46,5 +46,5 @@
     "kms",
     "Veramo"
   ],
-  "gitHead": "1ce395105f4b880461034f7fc910b21e20cba47a"
+  "gitHead": "5ce83cca64d55b664a2b0e6eb04660d299e2655c"
 }

package/src/__tests__/SphereonKeyManager.test.ts

@@ -0,0 +1,74 @@
+import { SphereonKeyManager } from '../agent/SphereonKeyManager'
+import { MemoryKeyStore, MemoryPrivateKeyStore } from '@veramo/key-manager'
+import { SphereonKeyManagementSystem } from '@sphereon/ssi-sdk-ext.kms-local'
+
+describe('@sphereon/ssi-sdk-ext.key-manager key functionalities', () => {
+  const kms = new SphereonKeyManager({
+    store: new MemoryKeyStore(),
+    kms: {
+      local: new SphereonKeyManagementSystem(new MemoryPrivateKeyStore()),
+    },
+  })
+
+  it('should create and fetch a RSA key', async () => {
+    const key = await kms.keyManagerCreate({ type: 'RSA', kms: 'local' })
+    const fetchByKid = await kms.keyManagerGet({ kid: key.kid })
+    expect(fetchByKid.kid).toEqual(key.kid)
+    expect(fetchByKid.publicKeyHex).toEqual(key.publicKeyHex)
+    expect(fetchByKid?.meta?.publicKeyJwk).toBeDefined()
+    expect(fetchByKid?.meta?.publicKeyPEM).toBeDefined()
+    expect(fetchByKid.type).toEqual('RSA')
+    const fetchByPublicKeyHex = await kms.keyManagerGet({ kid: key.publicKeyHex })
+    expect(fetchByPublicKeyHex.kid).toEqual(key.kid)
+    expect(fetchByPublicKeyHex?.meta?.publicKeyJwk).toBeDefined()
+    expect(fetchByPublicKeyHex?.meta?.publicKeyPEM).toBeDefined()
+    const deleteByPublicKeyHex = await kms.keyManagerDelete({ kid: key.publicKeyHex })
+    expect(deleteByPublicKeyHex).toBeTruthy()
+  })
+
+  it('should create and fetch a X25519 key', async () => {
+    const key = await kms.keyManagerCreate({ type: 'X25519', kms: 'local' })
+    const fetchByKid = await kms.keyManagerGet({ kid: key.kid })
+    expect(fetchByKid.type).toEqual('X25519')
+    expect(fetchByKid.kid).toEqual(key.kid)
+    expect(fetchByKid.publicKeyHex).toEqual(key.publicKeyHex)
+    expect(fetchByKid?.meta).toEqual({ algorithms: ['ECDH', 'ECDH-ES', 'ECDH-1PU'] })
+  })
+
+  it('should create and fetch a Ed25519 key', async () => {
+    const key = await kms.keyManagerCreate({ type: 'Ed25519', kms: 'local' })
+    const fetchByKid = await kms.keyManagerGet({ kid: key.kid })
+    expect(fetchByKid.type).toEqual('Ed25519')
+    expect(fetchByKid.kid).toEqual(key.kid)
+    expect(fetchByKid.publicKeyHex).toEqual(key.publicKeyHex)
+    expect(fetchByKid?.meta).toEqual({ algorithms: ['Ed25519', 'EdDSA'] })
+    const fetchByPublicKeyHex = await kms.keyManagerGet({ kid: key.publicKeyHex })
+    expect(fetchByPublicKeyHex.kid).toEqual(key.kid)
+  })
+
+  it('should create and fetch a Secp256k1 key', async () => {
+    const key = await kms.keyManagerCreate({ type: 'Secp256k1', kms: 'local' })
+    const fetchByKid = await kms.keyManagerGet({ kid: key.kid })
+    expect(fetchByKid.type).toEqual('Secp256k1')
+    expect(fetchByKid.kid).toEqual(key.kid)
+    expect(fetchByKid.publicKeyHex).toEqual(key.publicKeyHex)
+    expect(fetchByKid?.meta?.algorithms).toEqual(['ES256K', 'ES256K-R', 'eth_signTransaction', 'eth_signTypedData', 'eth_signMessage', 'eth_rawSign'])
+    const fetchByPublicKeyHex = await kms.keyManagerGet({ kid: key.publicKeyHex })
+    expect(fetchByPublicKeyHex.kid).toEqual(key.kid)
+    const fetchByThumbprint = await kms.keyManagerGet({ kid: key?.meta?.jwkThumbprint })
+    expect(fetchByThumbprint.kid).toEqual(fetchByThumbprint.kid)
+  })
+
+  it('should create and fetch a Secp256r1 key', async () => {
+    const key = await kms.keyManagerCreate({ type: 'Secp256r1', kms: 'local' })
+    const fetchByKid = await kms.keyManagerGet({ kid: key.kid })
+    expect(fetchByKid.kid).toEqual(key.kid)
+    expect(fetchByKid.type).toEqual('Secp256r1')
+    expect(fetchByKid.publicKeyHex).toEqual(key.publicKeyHex)
+    expect(fetchByKid?.meta?.algorithms).toEqual(['ES256'])
+    const fetchByPublicKeyHex = await kms.keyManagerGet({ kid: key.publicKeyHex })
+    expect(fetchByPublicKeyHex.kid).toEqual(key.kid)
+    const fetchByThumbprint = await kms.keyManagerGet({ kid: key?.meta?.jwkThumbprint })
+    expect(fetchByThumbprint.kid).toEqual(fetchByThumbprint.kid)
+  })
+})

package/src/agent/SphereonKeyManager.ts

@@ -1,8 +1,9 @@
 import { KeyManager as VeramoKeyManager, AbstractKeyManagementSystem, AbstractKeyStore } from '@veramo/key-manager'
 
-import { IKey, ManagedKeyInfo, TKeyType } from '@veramo/core'
+import { IKey, IKeyManagerGetArgs, ManagedKeyInfo, TKeyType } from '@veramo/core'
 import { KeyType, SphereonKeyManagementSystem } from '@sphereon/ssi-sdk-ext.kms-local'
 import { ISphereonKeyManager, ISphereonKeyManagerSignArgs, ISphereonKeyManagerVerifyArgs } from '../types/ISphereonKeyManager'
+import { calculateJwkThumbprintForKey } from '@sphereon/ssi-sdk-ext.key-utils'
 
 export const sphereonKeyManagerMethods: Array<string> = [
   'keyManagerCreate',
@@ -58,4 +59,24 @@ export class SphereonKeyManager extends VeramoKeyManager {
   async keyManagerListKeys(): Promise<ManagedKeyInfo[]> {
     return this.localStore.list({}) // FIXME there are no args it seems
   }
+
+  async keyManagerGet({ kid }: IKeyManagerGetArgs): Promise<IKey> {
+    try {
+      const key = await this.localStore.get({ kid })
+      return key
+    } catch (e) {
+      const keys: ManagedKeyInfo[] = await this.keyManagerListKeys()
+      const foundKey = keys.find(
+        (key) =>
+          key.publicKeyHex === kid ||
+          key.meta?.jwkThumbprint === kid ||
+          (key.meta?.jwkThumbprint == null && calculateJwkThumbprintForKey({ key }) === kid)
+      )
+      if (foundKey) {
+        return foundKey as IKey
+      } else {
+        throw new Error(`Key with kid ${kid} not found`)
+      }
+    }
+  }
 }