@sphereon/ssi-sdk.credential-vcdm 0.33.1-feature.jose.vcdm.55

package/dist/index.js

@@ -0,0 +1,375 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+// src/message-handler.ts
+import { AbstractMessageHandler } from "@veramo/message-handler";
+import { asArray, computeEntryHash, decodeCredentialToObject, extractIssuer } from "@veramo/utils";
+import { normalizeCredential, normalizePresentation, validateJwtCredentialPayload, validateJwtPresentationPayload } from "did-jwt-vc";
+import { v4 as uuidv4 } from "uuid";
+import Debug from "debug";
+var debug = Debug("sphereon:vcdm:message-handler");
+var MessageTypes = {
+  /** Represents a Verifiable Credential */
+  vc: "w3c.vc",
+  /** Represents a Verifiable Presentation */
+  vp: "w3c.vp"
+};
+var W3cMessageHandler = class extends AbstractMessageHandler {
+  static {
+    __name(this, "W3cMessageHandler");
+  }
+  async handle(message, context) {
+    const meta = message.getLastMetaData();
+    if (meta?.type === "JWT" && message.raw) {
+      const { data } = message;
+      try {
+        validateJwtPresentationPayload(data);
+        debug("JWT is", MessageTypes.vp);
+        const presentation = normalizePresentation(message.raw);
+        const credentials = presentation.verifiableCredential;
+        message.id = computeEntryHash(message.raw);
+        message.type = MessageTypes.vp;
+        message.from = presentation.holder;
+        message.to = presentation.verifier?.[0];
+        if (presentation.tag) {
+          message.threadId = presentation.tag;
+        }
+        message.createdAt = presentation.issuanceDate;
+        message.presentations = [
+          presentation
+        ];
+        message.credentials = credentials;
+        return message;
+      } catch (e) {
+      }
+      try {
+        validateJwtCredentialPayload(data);
+        debug("JWT is", MessageTypes.vc);
+        const credential = normalizeCredential(message.raw);
+        message.id = computeEntryHash(message.raw);
+        message.type = MessageTypes.vc;
+        message.from = credential.issuer.id;
+        message.to = credential.credentialSubject.id;
+        if (credential.tag) {
+          message.threadId = credential.tag;
+        }
+        message.createdAt = credential.issuanceDate;
+        message.credentials = [
+          credential
+        ];
+        return message;
+      } catch (e) {
+      }
+    }
+    if (message.type === MessageTypes.vc && message.data) {
+      const credential = message.data;
+      const result = await context.agent.verifyCredential({
+        credential
+      });
+      if (result.verified) {
+        message.id = computeEntryHash(message.raw || message.id || uuidv4());
+        message.type = MessageTypes.vc;
+        message.from = extractIssuer(credential);
+        message.to = credential.credentialSubject.id;
+        if (credential.tag) {
+          message.threadId = credential.tag;
+        }
+        message.createdAt = credential.issuanceDate;
+        message.credentials = [
+          credential
+        ];
+        return message;
+      } else {
+        throw new Error(result.error?.message);
+      }
+    }
+    if (message.type === MessageTypes.vp && message.data) {
+      const presentation = message.data;
+      const result = await context.agent.verifyPresentation({
+        presentation,
+        // FIXME: HARDCODED CHALLENGE VERIFICATION FOR NOW
+        challenge: "VERAMO",
+        domain: "VERAMO"
+      });
+      if (result.verified) {
+        message.id = computeEntryHash(message.raw || message.id || uuidv4());
+        message.type = MessageTypes.vp;
+        message.from = presentation.holder;
+        if (presentation.tag) {
+          message.threadId = presentation.tag;
+        }
+        message.presentations = [
+          presentation
+        ];
+        message.credentials = asArray(presentation.verifiableCredential).map(decodeCredentialToObject);
+        return message;
+      } else {
+        throw new Error(result.error?.message);
+      }
+    }
+    return super.handle(message, context);
+  }
+};
+
+// src/action-handler.ts
+import { schema } from "@veramo/core";
+import { isDefined as isDefined2, MANDATORY_CREDENTIAL_CONTEXT, processEntryToArray } from "@veramo/utils";
+import Debug2 from "debug";
+
+// src/functions.ts
+import { isDefined } from "@veramo/utils";
+import { decodeJWT } from "did-jwt";
+function extractIssuer2(input, options = {}) {
+  if (!isDefined(input)) {
+    return "";
+  } else if (typeof input === "string") {
+    try {
+      const { payload } = decodeJWT(input.split(`~`)[0]);
+      const iss = payload.iss ?? "";
+      return !!options.removeParameters ? removeDIDParameters(iss) : iss;
+    } catch (e) {
+      return "";
+    }
+  } else {
+    let iss;
+    if (input.issuer) {
+      iss = input.issuer;
+    } else if (input.holder) {
+      iss = input.holder;
+    } else {
+      iss = "";
+    }
+    if (typeof iss !== "string") iss = iss.id ?? "";
+    return !!options.removeParameters ? removeDIDParameters(iss) : iss;
+  }
+}
+__name(extractIssuer2, "extractIssuer");
+function removeDIDParameters(did) {
+  return did.replace(/\?.*$/, "");
+}
+__name(removeDIDParameters, "removeDIDParameters");
+function pickSigningKey(identifier, keyRef) {
+  let key;
+  if (!keyRef) {
+    key = identifier.keys.find((k) => k.type === "Secp256k1" || k.type === "Ed25519" || k.type === "Secp256r1");
+    if (!key) throw Error("key_not_found: No signing key for " + identifier.did);
+  } else {
+    key = identifier.keys.find((k) => k.kid === keyRef);
+    if (!key) throw Error("key_not_found: No signing key for " + identifier.did + " with kid " + keyRef);
+  }
+  return key;
+}
+__name(pickSigningKey, "pickSigningKey");
+async function isRevoked(credential, context) {
+  if (!credential.credentialStatus) return false;
+  if (typeof context.agent.checkCredentialStatus === "function") {
+    const status = await context.agent.checkCredentialStatus({
+      credential
+    });
+    return status?.revoked == true || status?.verified === false;
+  }
+  throw new Error(`invalid_setup: The credential status can't be verified because there is no ICredentialStatusVerifier plugin installed.`);
+}
+__name(isRevoked, "isRevoked");
+
+// src/action-handler.ts
+var debug2 = Debug2("sphereon:ssi-sdk:vcdm");
+var VcdmCredentialPlugin = class {
+  static {
+    __name(this, "VcdmCredentialPlugin");
+  }
+  methods;
+  schema = {
+    components: {
+      schemas: {
+        ...schema.ICredentialIssuer.components.schemas,
+        ...schema.ICredentialVerifier.components.schemas
+      },
+      methods: {
+        ...schema.ICredentialIssuer.components.methods,
+        ...schema.ICredentialVerifier.components.methods
+      }
+    }
+  };
+  issuers;
+  constructor(options) {
+    this.issuers = options.issuers;
+    this.methods = {
+      listUsableProofFormats: this.listUsableProofFormats.bind(this),
+      createVerifiableCredential: this.createVerifiableCredential.bind(this),
+      verifyCredential: this.verifyCredential.bind(this),
+      createVerifiablePresentation: this.createVerifiablePresentation.bind(this),
+      verifyPresentation: this.verifyPresentation.bind(this)
+    };
+  }
+  async listUsableProofFormats(did, context) {
+    const signingOptions = [];
+    const keys = did.keys;
+    for (const key of keys) {
+      for (const issuer of this.issuers) {
+        if (issuer.matchKeyForType(key)) {
+          signingOptions.push(issuer.getTypeProofFormat());
+        }
+      }
+    }
+    return signingOptions;
+  }
+  /** {@inheritdoc @veramo/core#ICredentialIssuer.createVerifiableCredential} */
+  async createVerifiableCredential(args, context) {
+    let {
+      credential,
+      proofFormat,
+      /* keyRef, removeOriginalFields,*/
+      now
+      /*, ...otherOptions */
+    } = args;
+    const credentialContext = processEntryToArray(credential["@context"], MANDATORY_CREDENTIAL_CONTEXT);
+    const credentialType = processEntryToArray(credential.type, "VerifiableCredential");
+    now = typeof now === "number" ? new Date(now * 1e3) : now;
+    if (!Object.getOwnPropertyNames(credential).includes("issuanceDate")) {
+      credential.issuanceDate = (now instanceof Date ? now : /* @__PURE__ */ new Date()).toISOString();
+    }
+    credential = {
+      ...credential,
+      "@context": credentialContext,
+      type: credentialType
+    };
+    const issuer = extractIssuer2(credential, {
+      removeParameters: true
+    });
+    if (!issuer || typeof issuer === "undefined") {
+      throw new Error("invalid_argument: credential.issuer must not be empty");
+    }
+    try {
+      await context.agent.didManagerGet({
+        did: issuer
+      });
+    } catch (e) {
+      throw new Error(`invalid_argument: credential.issuer must be a DID managed by this agent. ${e}`);
+    }
+    try {
+      async function findAndIssueCredential(issuers) {
+        for (const issuer2 of issuers) {
+          if (issuer2.canIssueCredentialType({
+            proofFormat
+          })) {
+            return await issuer2.createVerifiableCredential(args, context);
+          }
+        }
+        throw new Error("invalid_setup: No issuer found for the requested proof format");
+      }
+      __name(findAndIssueCredential, "findAndIssueCredential");
+      const verifiableCredential = await findAndIssueCredential(this.issuers);
+      return verifiableCredential;
+    } catch (error) {
+      debug2(error);
+      return Promise.reject(error);
+    }
+  }
+  /** {@inheritdoc @veramo/core#ICredentialVerifier.verifyCredential} */
+  async verifyCredential(args, context) {
+    let {
+      credential,
+      policies
+      /*, ...otherOptions*/
+    } = args;
+    let verifiedCredential;
+    let verificationResult = {
+      verified: false
+    };
+    async function findAndVerifyCredential(issuers) {
+      for (const issuer of issuers) {
+        if (issuer.canVerifyDocumentType({
+          document: credential
+        })) {
+          return issuer.verifyCredential(args, context);
+        }
+      }
+      return Promise.reject(Error("invalid_setup: No issuer found for the provided credential"));
+    }
+    __name(findAndVerifyCredential, "findAndVerifyCredential");
+    verificationResult = await findAndVerifyCredential(this.issuers);
+    verifiedCredential = credential;
+    if (policies?.credentialStatus !== false && await isRevoked(verifiedCredential, context)) {
+      verificationResult = {
+        verified: false,
+        error: {
+          message: "revoked: The credential was revoked by the issuer",
+          errorCode: "revoked"
+        }
+      };
+    }
+    return verificationResult;
+  }
+  /** {@inheritdoc @veramo/core#ICredentialIssuer.createVerifiablePresentation} */
+  async createVerifiablePresentation(args, context) {
+    let { presentation, proofFormat } = args;
+    const presentationContext = processEntryToArray(args?.presentation?.["@context"], MANDATORY_CREDENTIAL_CONTEXT);
+    const presentationType = processEntryToArray(args?.presentation?.type, "VerifiablePresentation");
+    presentation = {
+      ...presentation,
+      "@context": presentationContext,
+      type: presentationType
+    };
+    if (!isDefined2(presentation.holder)) {
+      throw new Error("invalid_argument: presentation.holder must not be empty");
+    }
+    if (presentation.verifiableCredential) {
+      presentation.verifiableCredential = presentation.verifiableCredential.map((cred) => {
+        if (typeof cred !== "string" && cred.proof.jwt) {
+          return cred.proof.jwt;
+        } else {
+          return cred;
+        }
+      });
+    }
+    let verifiablePresentation;
+    async function findAndCreatePresentation(issuers) {
+      for (const issuer of issuers) {
+        if (issuer.canIssueCredentialType({
+          proofFormat
+        })) {
+          return await issuer.createVerifiablePresentation(args, context);
+        }
+      }
+      throw new Error("invalid_setup: No issuer found for the requested proof format");
+    }
+    __name(findAndCreatePresentation, "findAndCreatePresentation");
+    verifiablePresentation = await findAndCreatePresentation(this.issuers);
+    return verifiablePresentation;
+  }
+  /** {@inheritdoc @veramo/core#ICredentialVerifier.verifyPresentation} */
+  async verifyPresentation(args, context) {
+    let {
+      presentation
+      /*domain, challenge, fetchRemoteContexts, policies, ...otherOptions*/
+    } = args;
+    async function findAndVerifyPresentation(issuers) {
+      for (const issuer of issuers) {
+        if (issuer.canVerifyDocumentType({
+          document: presentation
+        })) {
+          return issuer.verifyPresentation(args, context);
+        }
+      }
+      throw new Error("invalid_setup: No verifier found for the provided presentation");
+    }
+    __name(findAndVerifyPresentation, "findAndVerifyPresentation");
+    const result = await findAndVerifyPresentation(this.issuers);
+    return result;
+  }
+};
+
+// src/index.ts
+var CredentialIssuer = VcdmCredentialPlugin;
+export {
+  CredentialIssuer,
+  MessageTypes,
+  VcdmCredentialPlugin,
+  W3cMessageHandler,
+  extractIssuer2 as extractIssuer,
+  isRevoked,
+  pickSigningKey,
+  removeDIDParameters
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/message-handler.ts","../src/action-handler.ts","../src/functions.ts","../src/index.ts"],"sourcesContent":["import type {\n  IAgentContext,\n  ICredentialVerifier,\n  IResolver,\n  VerifiableCredential,\n  VerifiablePresentation,\n} from '@veramo/core'\nimport { AbstractMessageHandler, Message } from '@veramo/message-handler'\nimport { asArray, computeEntryHash, decodeCredentialToObject, extractIssuer } from '@veramo/utils'\n\nimport {\n  normalizeCredential,\n  normalizePresentation,\n  validateJwtCredentialPayload,\n  validateJwtPresentationPayload,\n}// @ts-ignore\nfrom 'did-jwt-vc'\n\nimport { v4 as uuidv4 } from 'uuid'\nimport Debug from 'debug'\n\nconst debug = Debug('sphereon:vcdm:message-handler')\n\n/**\n * These types are used by `@veramo/data-store` when storing Verifiable Credentials and Presentations\n *\n * @internal\n */\nexport const MessageTypes = {\n  /** Represents a Verifiable Credential */\n  vc: 'w3c.vc',\n  /** Represents a Verifiable Presentation */\n  vp: 'w3c.vp',\n}\n\n/**\n * Represents the requirements that this plugin has.\n * The agent that is using this plugin is expected to provide these methods.\n *\n * This interface can be used for static type checks, to make sure your application is properly initialized.\n */\nexport type IContext = IAgentContext<IResolver & ICredentialVerifier>\n\n/**\n * An implementation of the {@link @veramo/message-handler#AbstractMessageHandler}.\n *\n * This plugin can handle incoming W3C Verifiable Credentials and Presentations and prepare them\n * for internal storage as {@link @veramo/message-handler#Message} types.\n *\n * The current version can only handle `JWT` encoded\n *\n * @remarks {@link @veramo/core#IDataStore | IDataStore }\n *\n * @public\n */\nexport class W3cMessageHandler extends AbstractMessageHandler {\n  async handle(message: Message, context: IContext): Promise<Message> {\n    const meta = message.getLastMetaData()\n\n    // console.log(JSON.stringify(message, null,  2))\n\n    //FIXME: messages should not be expected to be only JWT\n    if (meta?.type === 'JWT' && message.raw) {\n      const { data } = message\n\n      try {\n        validateJwtPresentationPayload(data)\n\n        //FIXME: flagging this for potential privacy leaks\n        debug('JWT is', MessageTypes.vp)\n        const presentation = normalizePresentation(message.raw)\n        const credentials = presentation.verifiableCredential\n\n        message.id = computeEntryHash(message.raw)\n        message.type = MessageTypes.vp\n        message.from = presentation.holder\n        message.to = presentation.verifier?.[0]\n\n        if (presentation.tag) {\n          message.threadId = presentation.tag\n        }\n\n        message.createdAt = presentation.issuanceDate\n        message.presentations = [presentation]\n        message.credentials = credentials\n\n        return message\n      } catch (e) {}\n\n      try {\n        validateJwtCredentialPayload(data)\n        //FIXME: flagging this for potential privacy leaks\n        debug('JWT is', MessageTypes.vc)\n        const credential = normalizeCredential(message.raw)\n\n        message.id = computeEntryHash(message.raw)\n        message.type = MessageTypes.vc\n        message.from = credential.issuer.id\n        message.to = credential.credentialSubject.id\n\n        if (credential.tag) {\n          message.threadId = credential.tag\n        }\n\n        message.createdAt = credential.issuanceDate\n        message.credentials = [credential]\n        return message\n      } catch (e) {}\n    }\n\n    // LDS Verification and Handling\n    if (message.type === MessageTypes.vc && message.data) {\n      // verify credential\n      const credential = message.data as VerifiableCredential\n\n      const result = await context.agent.verifyCredential({ credential })\n      if (result.verified) {\n        message.id = computeEntryHash(message.raw || message.id || uuidv4())\n        message.type = MessageTypes.vc\n        message.from = extractIssuer(credential)\n        message.to = credential.credentialSubject.id\n\n        if (credential.tag) {\n          message.threadId = credential.tag\n        }\n\n        message.createdAt = credential.issuanceDate\n        message.credentials = [credential]\n        return message\n      } else {\n        throw new Error(result.error?.message)\n      }\n    }\n\n    if (message.type === MessageTypes.vp && message.data) {\n      // verify presentation\n      const presentation = message.data as VerifiablePresentation\n\n      // throws on error.\n      const result = await context.agent.verifyPresentation({\n        presentation,\n        // FIXME: HARDCODED CHALLENGE VERIFICATION FOR NOW\n        challenge: 'VERAMO',\n        domain: 'VERAMO',\n      })\n      if (result.verified) {\n        message.id = computeEntryHash(message.raw || message.id || uuidv4())\n        message.type = MessageTypes.vp\n        message.from = presentation.holder\n        // message.to = presentation.verifier?.[0]\n\n        if (presentation.tag) {\n          message.threadId = presentation.tag\n        }\n\n        // message.createdAt = presentation.issuanceDate\n        message.presentations = [presentation]\n        message.credentials = asArray(presentation.verifiableCredential).map(decodeCredentialToObject)\n        return message\n      } else {\n        throw new Error(result.error?.message)\n      }\n    }\n\n    return super.handle(message, context)\n  }\n}\n","import type { IAgentPlugin, IIdentifier, IVerifyResult, VerifiableCredential, VerifiablePresentation } from '@veramo/core'\nimport { schema } from '@veramo/core'\n\nimport type {\n  ICreateVerifiableCredentialLDArgs,\n  ICreateVerifiablePresentationLDArgs,\n  IVcdmCredentialPlugin,\n  IVcdmCredentialProvider,\n  IVcdmIssuerAgentContext,\n  IVcdmVerifierAgentContext,\n  IVerifyCredentialLDArgs,\n  IVerifyPresentationLDArgs,\n} from './types'\n\nimport { isDefined, MANDATORY_CREDENTIAL_CONTEXT, processEntryToArray } from '@veramo/utils'\nimport Debug from 'debug'\nimport { extractIssuer, isRevoked } from './functions'\nimport type { W3CVerifiableCredential, W3CVerifiablePresentation } from '@sphereon/ssi-types'\nimport type { VerifiableCredentialSP, VerifiablePresentationSP } from '@sphereon/ssi-sdk.core'\n\nconst debug = Debug('sphereon:ssi-sdk:vcdm')\n\n/**\n * A plugin that implements the {@link @sphereon/ssi-sdk.credential-vcdm#IVcdmCredentialPlugin} methods.\n *\n * @public\n */\nexport class VcdmCredentialPlugin implements IAgentPlugin {\n  readonly methods: IVcdmCredentialPlugin\n  readonly schema = {\n    components: {\n      schemas: {\n        ...schema.ICredentialIssuer.components.schemas,\n        ...schema.ICredentialVerifier.components.schemas,\n      },\n      methods: {\n        ...schema.ICredentialIssuer.components.methods,\n        ...schema.ICredentialVerifier.components.methods,\n      },\n    },\n  }\n  private issuers: IVcdmCredentialProvider[]\n\n  constructor(options: { issuers: IVcdmCredentialProvider[] }) {\n    this.issuers = options.issuers\n    this.methods = {\n      listUsableProofFormats: this.listUsableProofFormats.bind(this),\n      createVerifiableCredential: this.createVerifiableCredential.bind(this),\n      verifyCredential: this.verifyCredential.bind(this),\n      createVerifiablePresentation: this.createVerifiablePresentation.bind(this),\n      verifyPresentation: this.verifyPresentation.bind(this),\n    }\n  }\n\n  async listUsableProofFormats(did: IIdentifier, context: IVcdmIssuerAgentContext): Promise<string[]> {\n    const signingOptions: string[] = []\n    const keys = did.keys\n    for (const key of keys) {\n      for (const issuer of this.issuers) {\n        if (issuer.matchKeyForType(key)) {\n          signingOptions.push(issuer.getTypeProofFormat())\n        }\n      }\n    }\n    return signingOptions\n  }\n\n  /** {@inheritdoc @veramo/core#ICredentialIssuer.createVerifiableCredential} */\n  async createVerifiableCredential(args: ICreateVerifiableCredentialLDArgs, context: IVcdmIssuerAgentContext): Promise<VerifiableCredentialSP> {\n    let { credential, proofFormat, /* keyRef, removeOriginalFields,*/ now /*, ...otherOptions */ } = args\n    const credentialContext = processEntryToArray(credential['@context'], MANDATORY_CREDENTIAL_CONTEXT)\n    const credentialType = processEntryToArray(credential.type, 'VerifiableCredential')\n\n    // only add issuanceDate for JWT\n    now = typeof now === 'number' ? new Date(now * 1000) : now\n    if (!Object.getOwnPropertyNames(credential).includes('issuanceDate')) {\n      credential.issuanceDate = (now instanceof Date ? now : new Date()).toISOString()\n    }\n\n    credential = {\n      ...credential,\n      '@context': credentialContext,\n      type: credentialType,\n    }\n\n    //FIXME: if the identifier is not found, the error message should reflect that.\n    const issuer = extractIssuer(credential, { removeParameters: true })\n    if (!issuer || typeof issuer === 'undefined') {\n      throw new Error('invalid_argument: credential.issuer must not be empty')\n    }\n\n    try {\n      await context.agent.didManagerGet({ did: issuer })\n    } catch (e) {\n      throw new Error(`invalid_argument: credential.issuer must be a DID managed by this agent. ${e}`)\n    }\n    try {\n      async function findAndIssueCredential(issuers: IVcdmCredentialProvider[]) {\n        for (const issuer of issuers) {\n          if (issuer.canIssueCredentialType({ proofFormat })) {\n            return await issuer.createVerifiableCredential(args, context)\n          }\n        }\n        throw new Error('invalid_setup: No issuer found for the requested proof format')\n      }\n      const verifiableCredential = await findAndIssueCredential(this.issuers)\n      return verifiableCredential\n    } catch (error) {\n      debug(error)\n      return Promise.reject(error)\n    }\n  }\n\n  /** {@inheritdoc @veramo/core#ICredentialVerifier.verifyCredential} */\n  async verifyCredential(args: IVerifyCredentialLDArgs, context: IVcdmVerifierAgentContext): Promise<IVerifyResult> {\n    let { credential, policies /*, ...otherOptions*/ } = args\n    let verifiedCredential: VerifiableCredential\n    let verificationResult: IVerifyResult | undefined = { verified: false }\n\n    async function findAndVerifyCredential(issuers: IVcdmCredentialProvider[]): Promise<IVerifyResult> {\n      for (const issuer of issuers) {\n        if (issuer.canVerifyDocumentType({ document: credential as W3CVerifiableCredential })) {\n          return issuer.verifyCredential(args, context)\n        }\n      }\n      return Promise.reject(Error('invalid_setup: No issuer found for the provided credential'))\n    }\n    verificationResult = await findAndVerifyCredential(this.issuers)\n    verifiedCredential = <VerifiableCredential>credential\n\n    if (policies?.credentialStatus !== false && (await isRevoked(verifiedCredential, context as any))) {\n      verificationResult = {\n        verified: false,\n        error: {\n          message: 'revoked: The credential was revoked by the issuer',\n          errorCode: 'revoked',\n        },\n      }\n    }\n\n    return verificationResult\n  }\n\n  /** {@inheritdoc @veramo/core#ICredentialIssuer.createVerifiablePresentation} */\n  async createVerifiablePresentation(args: ICreateVerifiablePresentationLDArgs, context: IVcdmIssuerAgentContext): Promise<VerifiablePresentationSP> {\n    let {\n      presentation,\n      proofFormat,\n      /*      domain,\n      challenge,\n      removeOriginalFields,\n      keyRef,*/\n      // save,\n      /*now,*/\n      /*...otherOptions*/\n    } = args\n    const presentationContext: string[] = processEntryToArray(args?.presentation?.['@context'], MANDATORY_CREDENTIAL_CONTEXT)\n    const presentationType = processEntryToArray(args?.presentation?.type, 'VerifiablePresentation')\n    presentation = {\n      ...presentation,\n      '@context': presentationContext,\n      type: presentationType,\n    }\n\n    if (!isDefined(presentation.holder)) {\n      throw new Error('invalid_argument: presentation.holder must not be empty')\n    }\n\n    if (presentation.verifiableCredential) {\n      presentation.verifiableCredential = presentation.verifiableCredential.map((cred) => {\n        // map JWT credentials to their canonical form\n        if (typeof cred !== 'string' && cred.proof.jwt) {\n          return cred.proof.jwt\n        } else {\n          return cred\n        }\n      })\n    }\n\n    let verifiablePresentation: VerifiablePresentation | undefined\n\n    async function findAndCreatePresentation(issuers: IVcdmCredentialProvider[]) {\n      for (const issuer of issuers) {\n        if (issuer.canIssueCredentialType({ proofFormat })) {\n          return await issuer.createVerifiablePresentation(args, context)\n        }\n      }\n      throw new Error('invalid_setup: No issuer found for the requested proof format')\n    }\n\n    verifiablePresentation = await findAndCreatePresentation(this.issuers)\n    return verifiablePresentation as VerifiablePresentationSP // fixme: this is a hack to get around the fact that the return type is not correct.\n  }\n\n  /** {@inheritdoc @veramo/core#ICredentialVerifier.verifyPresentation} */\n  async verifyPresentation(args: IVerifyPresentationLDArgs, context: IVcdmVerifierAgentContext): Promise<IVerifyResult> {\n    let { presentation /*domain, challenge, fetchRemoteContexts, policies, ...otherOptions*/ } = args\n    async function findAndVerifyPresentation(issuers: IVcdmCredentialProvider[]): Promise<IVerifyResult> {\n      for (const issuer of issuers) {\n        if (issuer.canVerifyDocumentType({ document: presentation as W3CVerifiablePresentation })) {\n          return issuer.verifyPresentation(args, context)\n        }\n      }\n      throw new Error('invalid_setup: No verifier found for the provided presentation')\n    }\n    const result = await findAndVerifyPresentation(this.issuers)\n    return result\n  }\n}\n","import {\n  CredentialPayload,\n  IAgentContext, ICredentialStatusVerifier,\n  IIdentifier,\n  IKey,\n  IssuerType,\n  PresentationPayload,\n  VerifiableCredential,\n  W3CVerifiableCredential,\n  W3CVerifiablePresentation\n} from '@veramo/core'\nimport { isDefined } from '@veramo/utils'\nimport { decodeJWT } from 'did-jwt'\n\n/**\n * Decodes a credential or presentation and returns the issuer ID\n * `iss` from a JWT or `issuer`/`issuer.id` from a VC or `holder` from a VP\n *\n * @param input - the credential or presentation whose issuer/holder needs to be extracted.\n * @param options - options for the extraction\n *   removeParameters - Remove all DID parameters from the issuer ID\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport function extractIssuer(\n  input?:\n    | W3CVerifiableCredential\n    | W3CVerifiablePresentation\n    | CredentialPayload\n    | PresentationPayload\n    | null,\n  options: { removeParameters?: boolean } = {}\n): string {\n  if (!isDefined(input)) {\n    return ''\n  } else if (typeof input === 'string') {\n    // JWT\n    try {\n      const { payload } = decodeJWT(input.split(`~`)[0])\n      const iss = payload.iss ?? ''\n      return !!options.removeParameters ? removeDIDParameters(iss) : iss\n    } catch (e: any) {\n      return ''\n    }\n  } else {\n    // JSON\n    let iss: IssuerType\n    if (input.issuer) {\n      iss = input.issuer\n    } else if (input.holder) {\n      iss = input.holder\n    } else {\n      iss = ''\n    }\n    if (typeof iss !== 'string') iss = iss.id ?? ''\n    return !!options.removeParameters ? removeDIDParameters(iss) : iss\n  }\n}\n\n\n/**\n * Remove all DID parameters from a DID url after the query part (?)\n *\n * @param did - the DID URL\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport function removeDIDParameters(did: string): string {\n  return did.replace(/\\?.*$/, '')\n}\n\n\nexport function pickSigningKey(identifier: IIdentifier, keyRef?: string): IKey {\n  let key: IKey | undefined\n\n  if (!keyRef) {\n    key = identifier.keys.find((k) => k.type === 'Secp256k1' || k.type === 'Ed25519' || k.type === 'Secp256r1')\n    if (!key) throw Error('key_not_found: No signing key for ' + identifier.did)\n  } else {\n    key = identifier.keys.find((k) => k.kid === keyRef)\n    if (!key) throw Error('key_not_found: No signing key for ' + identifier.did + ' with kid ' + keyRef)\n  }\n\n  return key as IKey\n}\n\nexport async function isRevoked(credential: VerifiableCredential, context: IAgentContext<ICredentialStatusVerifier>): Promise<boolean> {\n  if (!credential.credentialStatus) return false\n\n  if (typeof context.agent.checkCredentialStatus === 'function') {\n    const status = await context.agent.checkCredentialStatus({ credential })\n    return status?.revoked == true || status?.verified === false\n  }\n\n  throw new Error(`invalid_setup: The credential status can't be verified because there is no ICredentialStatusVerifier plugin installed.`)\n}\n","/**\n * Provides a {@link @veramo/credential-w3c#CredentialPlugin | plugin} for the {@link @veramo/core#Agent} that\n * implements\n * {@link @veramo/core#ICredentialIssuer} interface.\n *\n * Provides a {@link @veramo/credential-w3c#W3cMessageHandler | plugin} for the\n * {@link @veramo/message-handler#MessageHandler} that verifies Credentials and Presentations in a message.\n *\n * @packageDocumentation\n */\nexport type * from './types'\nexport { W3cMessageHandler, MessageTypes } from './message-handler'\nimport { VcdmCredentialPlugin } from './action-handler'\n\n/**\n * @deprecated please use {@link VcdmCredentialPlugin} instead\n * @public\n */\nconst CredentialIssuer = VcdmCredentialPlugin\nexport { CredentialIssuer, VcdmCredentialPlugin }\n\n// For backward compatibility, re-export the plugin types that were moved to core in v4\nexport type { ICredentialIssuer, ICredentialVerifier } from '@veramo/core'\n\nexport * from './functions'\n"],"mappings":";;;;AAOA,SAASA,8BAAuC;AAChD,SAASC,SAASC,kBAAkBC,0BAA0BC,qBAAqB;AAEnF,SACEC,qBACAC,uBACAC,8BACAC,sCAEG;AAEL,SAASC,MAAMC,cAAc;AAC7B,OAAOC,WAAW;AAElB,IAAMC,QAAQC,MAAM,+BAAA;AAOb,IAAMC,eAAe;;EAE1BC,IAAI;;EAEJC,IAAI;AACN;AAsBO,IAAMC,oBAAN,cAAgCC,uBAAAA;EAhDvC,OAgDuCA;;;EACrC,MAAMC,OAAOC,SAAkBC,SAAqC;AAClE,UAAMC,OAAOF,QAAQG,gBAAe;AAKpC,QAAID,MAAME,SAAS,SAASJ,QAAQK,KAAK;AACvC,YAAM,EAAEC,KAAI,IAAKN;AAEjB,UAAI;AACFO,uCAA+BD,IAAAA;AAG/Bd,cAAM,UAAUE,aAAaE,EAAE;AAC/B,cAAMY,eAAeC,sBAAsBT,QAAQK,GAAG;AACtD,cAAMK,cAAcF,aAAaG;AAEjCX,gBAAQY,KAAKC,iBAAiBb,QAAQK,GAAG;AACzCL,gBAAQI,OAAOV,aAAaE;AAC5BI,gBAAQc,OAAON,aAAaO;AAC5Bf,gBAAQgB,KAAKR,aAAaS,WAAW,CAAA;AAErC,YAAIT,aAAaU,KAAK;AACpBlB,kBAAQmB,WAAWX,aAAaU;QAClC;AAEAlB,gBAAQoB,YAAYZ,aAAaa;AACjCrB,gBAAQsB,gBAAgB;UAACd;;AACzBR,gBAAQU,cAAcA;AAEtB,eAAOV;MACT,SAASuB,GAAG;MAAC;AAEb,UAAI;AACFC,qCAA6BlB,IAAAA;AAE7Bd,cAAM,UAAUE,aAAaC,EAAE;AAC/B,cAAM8B,aAAaC,oBAAoB1B,QAAQK,GAAG;AAElDL,gBAAQY,KAAKC,iBAAiBb,QAAQK,GAAG;AACzCL,gBAAQI,OAAOV,aAAaC;AAC5BK,gBAAQc,OAAOW,WAAWE,OAAOf;AACjCZ,gBAAQgB,KAAKS,WAAWG,kBAAkBhB;AAE1C,YAAIa,WAAWP,KAAK;AAClBlB,kBAAQmB,WAAWM,WAAWP;QAChC;AAEAlB,gBAAQoB,YAAYK,WAAWJ;AAC/BrB,gBAAQU,cAAc;UAACe;;AACvB,eAAOzB;MACT,SAASuB,GAAG;MAAC;IACf;AAGA,QAAIvB,QAAQI,SAASV,aAAaC,MAAMK,QAAQM,MAAM;AAEpD,YAAMmB,aAAazB,QAAQM;AAE3B,YAAMuB,SAAS,MAAM5B,QAAQ6B,MAAMC,iBAAiB;QAAEN;MAAW,CAAA;AACjE,UAAII,OAAOG,UAAU;AACnBhC,gBAAQY,KAAKC,iBAAiBb,QAAQK,OAAOL,QAAQY,MAAMqB,OAAAA,CAAAA;AAC3DjC,gBAAQI,OAAOV,aAAaC;AAC5BK,gBAAQc,OAAOoB,cAAcT,UAAAA;AAC7BzB,gBAAQgB,KAAKS,WAAWG,kBAAkBhB;AAE1C,YAAIa,WAAWP,KAAK;AAClBlB,kBAAQmB,WAAWM,WAAWP;QAChC;AAEAlB,gBAAQoB,YAAYK,WAAWJ;AAC/BrB,gBAAQU,cAAc;UAACe;;AACvB,eAAOzB;MACT,OAAO;AACL,cAAM,IAAImC,MAAMN,OAAOO,OAAOpC,OAAAA;MAChC;IACF;AAEA,QAAIA,QAAQI,SAASV,aAAaE,MAAMI,QAAQM,MAAM;AAEpD,YAAME,eAAeR,QAAQM;AAG7B,YAAMuB,SAAS,MAAM5B,QAAQ6B,MAAMO,mBAAmB;QACpD7B;;QAEA8B,WAAW;QACXC,QAAQ;MACV,CAAA;AACA,UAAIV,OAAOG,UAAU;AACnBhC,gBAAQY,KAAKC,iBAAiBb,QAAQK,OAAOL,QAAQY,MAAMqB,OAAAA,CAAAA;AAC3DjC,gBAAQI,OAAOV,aAAaE;AAC5BI,gBAAQc,OAAON,aAAaO;AAG5B,YAAIP,aAAaU,KAAK;AACpBlB,kBAAQmB,WAAWX,aAAaU;QAClC;AAGAlB,gBAAQsB,gBAAgB;UAACd;;AACzBR,gBAAQU,cAAc8B,QAAQhC,aAAaG,oBAAoB,EAAE8B,IAAIC,wBAAAA;AACrE,eAAO1C;MACT,OAAO;AACL,cAAM,IAAImC,MAAMN,OAAOO,OAAOpC,OAAAA;MAChC;IACF;AAEA,WAAO,MAAMD,OAAOC,SAASC,OAAAA;EAC/B;AACF;;;ACrKA,SAAS0C,cAAc;AAavB,SAASC,aAAAA,YAAWC,8BAA8BC,2BAA2B;AAC7E,OAAOC,YAAW;;;ACJlB,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAYnB,SAASC,eACdC,OAMAC,UAA0C,CAAC,GAAC;AAE5C,MAAI,CAACC,UAAUF,KAAAA,GAAQ;AACrB,WAAO;EACT,WAAW,OAAOA,UAAU,UAAU;AAEpC,QAAI;AACF,YAAM,EAAEG,QAAO,IAAKC,UAAUJ,MAAMK,MAAM,GAAG,EAAE,CAAA,CAAE;AACjD,YAAMC,MAAMH,QAAQG,OAAO;AAC3B,aAAO,CAAC,CAACL,QAAQM,mBAAmBC,oBAAoBF,GAAAA,IAAOA;IACjE,SAASG,GAAQ;AACf,aAAO;IACT;EACF,OAAO;AAEL,QAAIH;AACJ,QAAIN,MAAMU,QAAQ;AAChBJ,YAAMN,MAAMU;IACd,WAAWV,MAAMW,QAAQ;AACvBL,YAAMN,MAAMW;IACd,OAAO;AACLL,YAAM;IACR;AACA,QAAI,OAAOA,QAAQ,SAAUA,OAAMA,IAAIM,MAAM;AAC7C,WAAO,CAAC,CAACX,QAAQM,mBAAmBC,oBAAoBF,GAAAA,IAAOA;EACjE;AACF;AAjCgBP,OAAAA,gBAAAA;AA2CT,SAASS,oBAAoBK,KAAW;AAC7C,SAAOA,IAAIC,QAAQ,SAAS,EAAA;AAC9B;AAFgBN;AAKT,SAASO,eAAeC,YAAyBC,QAAe;AACrE,MAAIC;AAEJ,MAAI,CAACD,QAAQ;AACXC,UAAMF,WAAWG,KAAKC,KAAK,CAACC,MAAMA,EAAEC,SAAS,eAAeD,EAAEC,SAAS,aAAaD,EAAEC,SAAS,WAAA;AAC/F,QAAI,CAACJ,IAAK,OAAMK,MAAM,uCAAuCP,WAAWH,GAAG;EAC7E,OAAO;AACLK,UAAMF,WAAWG,KAAKC,KAAK,CAACC,MAAMA,EAAEG,QAAQP,MAAAA;AAC5C,QAAI,CAACC,IAAK,OAAMK,MAAM,uCAAuCP,WAAWH,MAAM,eAAeI,MAAAA;EAC/F;AAEA,SAAOC;AACT;AAZgBH;AAchB,eAAsBU,UAAUC,YAAkCC,SAAiD;AACjH,MAAI,CAACD,WAAWE,iBAAkB,QAAO;AAEzC,MAAI,OAAOD,QAAQE,MAAMC,0BAA0B,YAAY;AAC7D,UAAMC,SAAS,MAAMJ,QAAQE,MAAMC,sBAAsB;MAAEJ;IAAW,CAAA;AACtE,WAAOK,QAAQC,WAAW,QAAQD,QAAQE,aAAa;EACzD;AAEA,QAAM,IAAIV,MAAM,wHAAwH;AAC1I;AATsBE;;;ADlEtB,IAAMS,SAAQC,OAAM,uBAAA;AAOb,IAAMC,uBAAN,MAAMA;EA1Bb,OA0BaA;;;EACFC;EACAC,SAAS;IAChBC,YAAY;MACVC,SAAS;QACP,GAAGF,OAAOG,kBAAkBF,WAAWC;QACvC,GAAGF,OAAOI,oBAAoBH,WAAWC;MAC3C;MACAH,SAAS;QACP,GAAGC,OAAOG,kBAAkBF,WAAWF;QACvC,GAAGC,OAAOI,oBAAoBH,WAAWF;MAC3C;IACF;EACF;EACQM;EAERC,YAAYC,SAAiD;AAC3D,SAAKF,UAAUE,QAAQF;AACvB,SAAKN,UAAU;MACbS,wBAAwB,KAAKA,uBAAuBC,KAAK,IAAI;MAC7DC,4BAA4B,KAAKA,2BAA2BD,KAAK,IAAI;MACrEE,kBAAkB,KAAKA,iBAAiBF,KAAK,IAAI;MACjDG,8BAA8B,KAAKA,6BAA6BH,KAAK,IAAI;MACzEI,oBAAoB,KAAKA,mBAAmBJ,KAAK,IAAI;IACvD;EACF;EAEA,MAAMD,uBAAuBM,KAAkBC,SAAqD;AAClG,UAAMC,iBAA2B,CAAA;AACjC,UAAMC,OAAOH,IAAIG;AACjB,eAAWC,OAAOD,MAAM;AACtB,iBAAWE,UAAU,KAAKd,SAAS;AACjC,YAAIc,OAAOC,gBAAgBF,GAAAA,GAAM;AAC/BF,yBAAeK,KAAKF,OAAOG,mBAAkB,CAAA;QAC/C;MACF;IACF;AACA,WAAON;EACT;;EAGA,MAAMN,2BAA2Ba,MAAyCR,SAAmE;AAC3I,QAAI;MAAES;MAAYC;;MAAgDC;;IAAwB,IAAOH;AACjG,UAAMI,oBAAoBC,oBAAoBJ,WAAW,UAAA,GAAaK,4BAAAA;AACtE,UAAMC,iBAAiBF,oBAAoBJ,WAAWO,MAAM,sBAAA;AAG5DL,UAAM,OAAOA,QAAQ,WAAW,IAAIM,KAAKN,MAAM,GAAA,IAAQA;AACvD,QAAI,CAACO,OAAOC,oBAAoBV,UAAAA,EAAYW,SAAS,cAAA,GAAiB;AACpEX,iBAAWY,gBAAgBV,eAAeM,OAAON,MAAM,oBAAIM,KAAAA,GAAQK,YAAW;IAChF;AAEAb,iBAAa;MACX,GAAGA;MACH,YAAYG;MACZI,MAAMD;IACR;AAGA,UAAMX,SAASmB,eAAcd,YAAY;MAAEe,kBAAkB;IAAK,CAAA;AAClE,QAAI,CAACpB,UAAU,OAAOA,WAAW,aAAa;AAC5C,YAAM,IAAIqB,MAAM,uDAAA;IAClB;AAEA,QAAI;AACF,YAAMzB,QAAQ0B,MAAMC,cAAc;QAAE5B,KAAKK;MAAO,CAAA;IAClD,SAASwB,GAAG;AACV,YAAM,IAAIH,MAAM,4EAA4EG,CAAAA,EAAG;IACjG;AACA,QAAI;AACF,qBAAeC,uBAAuBvC,SAAkC;AACtE,mBAAWc,WAAUd,SAAS;AAC5B,cAAIc,QAAO0B,uBAAuB;YAAEpB;UAAY,CAAA,GAAI;AAClD,mBAAO,MAAMN,QAAOT,2BAA2Ba,MAAMR,OAAAA;UACvD;QACF;AACA,cAAM,IAAIyB,MAAM,+DAAA;MAClB;AAPeI;AAQf,YAAME,uBAAuB,MAAMF,uBAAuB,KAAKvC,OAAO;AACtE,aAAOyC;IACT,SAASC,OAAO;AACdnD,MAAAA,OAAMmD,KAAAA;AACN,aAAOC,QAAQC,OAAOF,KAAAA;IACxB;EACF;;EAGA,MAAMpC,iBAAiBY,MAA+BR,SAA4D;AAChH,QAAI;MAAES;MAAY0B;;IAA4B,IAAO3B;AACrD,QAAI4B;AACJ,QAAIC,qBAAgD;MAAEC,UAAU;IAAM;AAEtE,mBAAeC,wBAAwBjD,SAAkC;AACvE,iBAAWc,UAAUd,SAAS;AAC5B,YAAIc,OAAOoC,sBAAsB;UAAEC,UAAUhC;QAAsC,CAAA,GAAI;AACrF,iBAAOL,OAAOR,iBAAiBY,MAAMR,OAAAA;QACvC;MACF;AACA,aAAOiC,QAAQC,OAAOT,MAAM,4DAAA,CAAA;IAC9B;AAPec;AAQfF,yBAAqB,MAAME,wBAAwB,KAAKjD,OAAO;AAC/D8C,yBAA2C3B;AAE3C,QAAI0B,UAAUO,qBAAqB,SAAU,MAAMC,UAAUP,oBAAoBpC,OAAAA,GAAkB;AACjGqC,2BAAqB;QACnBC,UAAU;QACVN,OAAO;UACLY,SAAS;UACTC,WAAW;QACb;MACF;IACF;AAEA,WAAOR;EACT;;EAGA,MAAMxC,6BAA6BW,MAA2CR,SAAqE;AACjJ,QAAI,EACF8C,cACApC,YAAW,IAQTF;AACJ,UAAMuC,sBAAgClC,oBAAoBL,MAAMsC,eAAe,UAAA,GAAahC,4BAAAA;AAC5F,UAAMkC,mBAAmBnC,oBAAoBL,MAAMsC,cAAc9B,MAAM,wBAAA;AACvE8B,mBAAe;MACb,GAAGA;MACH,YAAYC;MACZ/B,MAAMgC;IACR;AAEA,QAAI,CAACC,WAAUH,aAAaI,MAAM,GAAG;AACnC,YAAM,IAAIzB,MAAM,yDAAA;IAClB;AAEA,QAAIqB,aAAaf,sBAAsB;AACrCe,mBAAaf,uBAAuBe,aAAaf,qBAAqBoB,IAAI,CAACC,SAAAA;AAEzE,YAAI,OAAOA,SAAS,YAAYA,KAAKC,MAAMC,KAAK;AAC9C,iBAAOF,KAAKC,MAAMC;QACpB,OAAO;AACL,iBAAOF;QACT;MACF,CAAA;IACF;AAEA,QAAIG;AAEJ,mBAAeC,0BAA0BlE,SAAkC;AACzE,iBAAWc,UAAUd,SAAS;AAC5B,YAAIc,OAAO0B,uBAAuB;UAAEpB;QAAY,CAAA,GAAI;AAClD,iBAAO,MAAMN,OAAOP,6BAA6BW,MAAMR,OAAAA;QACzD;MACF;AACA,YAAM,IAAIyB,MAAM,+DAAA;IAClB;AAPe+B;AASfD,6BAAyB,MAAMC,0BAA0B,KAAKlE,OAAO;AACrE,WAAOiE;EACT;;EAGA,MAAMzD,mBAAmBU,MAAiCR,SAA4D;AACpH,QAAI;MAAE8C;;IAAgF,IAAOtC;AAC7F,mBAAeiD,0BAA0BnE,SAAkC;AACzE,iBAAWc,UAAUd,SAAS;AAC5B,YAAIc,OAAOoC,sBAAsB;UAAEC,UAAUK;QAA0C,CAAA,GAAI;AACzF,iBAAO1C,OAAON,mBAAmBU,MAAMR,OAAAA;QACzC;MACF;AACA,YAAM,IAAIyB,MAAM,gEAAA;IAClB;AAPegC;AAQf,UAAMC,SAAS,MAAMD,0BAA0B,KAAKnE,OAAO;AAC3D,WAAOoE;EACT;AACF;;;AE9LA,IAAMC,mBAAmBC;","names":["AbstractMessageHandler","asArray","computeEntryHash","decodeCredentialToObject","extractIssuer","normalizeCredential","normalizePresentation","validateJwtCredentialPayload","validateJwtPresentationPayload","v4","uuidv4","Debug","debug","Debug","MessageTypes","vc","vp","W3cMessageHandler","AbstractMessageHandler","handle","message","context","meta","getLastMetaData","type","raw","data","validateJwtPresentationPayload","presentation","normalizePresentation","credentials","verifiableCredential","id","computeEntryHash","from","holder","to","verifier","tag","threadId","createdAt","issuanceDate","presentations","e","validateJwtCredentialPayload","credential","normalizeCredential","issuer","credentialSubject","result","agent","verifyCredential","verified","uuidv4","extractIssuer","Error","error","verifyPresentation","challenge","domain","asArray","map","decodeCredentialToObject","schema","isDefined","MANDATORY_CREDENTIAL_CONTEXT","processEntryToArray","Debug","isDefined","decodeJWT","extractIssuer","input","options","isDefined","payload","decodeJWT","split","iss","removeParameters","removeDIDParameters","e","issuer","holder","id","did","replace","pickSigningKey","identifier","keyRef","key","keys","find","k","type","Error","kid","isRevoked","credential","context","credentialStatus","agent","checkCredentialStatus","status","revoked","verified","debug","Debug","VcdmCredentialPlugin","methods","schema","components","schemas","ICredentialIssuer","ICredentialVerifier","issuers","constructor","options","listUsableProofFormats","bind","createVerifiableCredential","verifyCredential","createVerifiablePresentation","verifyPresentation","did","context","signingOptions","keys","key","issuer","matchKeyForType","push","getTypeProofFormat","args","credential","proofFormat","now","credentialContext","processEntryToArray","MANDATORY_CREDENTIAL_CONTEXT","credentialType","type","Date","Object","getOwnPropertyNames","includes","issuanceDate","toISOString","extractIssuer","removeParameters","Error","agent","didManagerGet","e","findAndIssueCredential","canIssueCredentialType","verifiableCredential","error","Promise","reject","policies","verifiedCredential","verificationResult","verified","findAndVerifyCredential","canVerifyDocumentType","document","credentialStatus","isRevoked","message","errorCode","presentation","presentationContext","presentationType","isDefined","holder","map","cred","proof","jwt","verifiablePresentation","findAndCreatePresentation","findAndVerifyPresentation","result","CredentialIssuer","VcdmCredentialPlugin"]}

package/package.json

@@ -0,0 +1,93 @@
+{
+  "name": "@sphereon/ssi-sdk.credential-vcdm",
+  "description": "Plugin for working with W3C Verifiable Credentials DataModel 1 and 2 Credentials & Presentations.",
+  "version": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
+  "source": "src/index.ts",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    "react-native": "./dist/index.js",
+    "import": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "require": {
+      "types": "./dist/index.d.cts",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "veramo": {
+    "pluginInterfaces": {
+      "IVcdmCredentialProvider": "./src/types.ts"
+    }
+  },
+  "scripts": {
+    "build": "tsup --config ../../tsup.config.ts --tsconfig ../../tsconfig.tsup.json",
+    "generate-plugin-schema": "tsx ../../packages/dev/bin/sphereon.js dev generate-plugin-schema"
+  },
+  "dependencies": {
+    "@sphereon/ssi-sdk.agent-config": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
+    "@sphereon/ssi-sdk.core": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
+    "@sphereon/ssi-sdk.vc-status-list": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
+    "@sphereon/ssi-types": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
+    "@veramo/core": "4.2.0",
+    "@veramo/message-handler": "4.2.0",
+    "@veramo/utils": "4.2.0",
+    "canonicalize": "^2.0.0",
+    "debug": "^4.3.3",
+    "did-jwt": "6.11.6",
+    "did-jwt-vc": "3.1.3",
+    "did-resolver": "^4.1.0",
+    "uuid": "^9.0.1"
+  },
+  "devDependencies": {
+    "@sphereon/ssi-sdk-ext.did-provider-key": "0.28.1-feature.esm.cjs.18",
+    "@sphereon/ssi-sdk-ext.key-manager": "0.28.1-feature.esm.cjs.18",
+    "@sphereon/ssi-sdk-ext.kms-local": "0.28.1-feature.esm.cjs.18",
+    "@types/debug": "4.1.8",
+    "@types/uuid": "9.0.2",
+    "@veramo/did-manager": "4.2.0",
+    "@veramo/did-provider-ethr": "4.2.0",
+    "@veramo/did-resolver": "4.2.0",
+    "@veramo/key-manager": "4.2.0",
+    "ethr-did-resolver": "^11.0.3",
+    "typescript": "5.8.3"
+  },
+  "files": [
+    "dist/**/*",
+    "src/**/*",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/decentralized-identity/veramo.git",
+    "directory": "packages/credential-w3c"
+  },
+  "author": "Consensys Mesh R&D <hello@veramo.io>",
+  "contributors": [
+    "Simonas Karuzas <simonas.karuzas@mesh.xyz>",
+    "Mircea Nistor <mircea.nistor@mesh.xyz>"
+  ],
+  "keywords": [
+    "Veramo",
+    "DID",
+    "Verifiable Credential",
+    "JWT",
+    "W3C",
+    "aggregator",
+    "vc-jwt",
+    "veramo-plugin"
+  ],
+  "license": "Apache-2.0",
+  "moduleDirectories": [
+    "node_modules",
+    "src"
+  ],
+  "gitHead": "6f02f6f83679198268c6e1ea956be24cc1017234"
+}

package/src/__tests__/action-handler.test.ts

@@ -0,0 +1,130 @@
+import { beforeAll, describe, expect, test } from 'vitest'
+
+import { CredentialPayload, ICredentialPlugin, IDIDManager, IIdentifier, IKeyManager, IResolver, PresentationPayload, TAgent } from '@veramo/core'
+import { VcdmCredentialPlugin } from '../action-handler.js'
+import { CredentialProviderJWT } from '../../../credential-jwt/src'
+
+import { getDidKeyResolver, SphereonKeyDidProvider } from '@sphereon/ssi-sdk-ext.did-provider-key'
+import { Resolver } from 'did-resolver'
+import { getResolver as ethrDidResolver } from 'ethr-did-resolver'
+import { createAgent } from '@sphereon/ssi-sdk.agent-config'
+import { MemoryKeyStore, MemoryPrivateKeyStore, SphereonKeyManager } from '@sphereon/ssi-sdk-ext.key-manager'
+import { SphereonKeyManagementSystem } from '@sphereon/ssi-sdk-ext.kms-local'
+import { DIDManager, MemoryDIDStore } from '@veramo/did-manager'
+import { EthrDIDProvider } from '@veramo/did-provider-ethr'
+import { DIDResolverPlugin } from '@veramo/did-resolver'
+
+const infuraProjectId = '3586660d179141e3801c3895de1c2eba'
+
+let didKeyIdentifier: IIdentifier
+let didEthrIdentifier: IIdentifier
+let agent: TAgent<IResolver & IKeyManager & IDIDManager & ICredentialPlugin>
+
+describe('@sphereon/ssi-sdk.credential-vcdm', () => {
+  beforeAll(async () => {
+    const jwt = new CredentialProviderJWT()
+    agent = await createAgent<IResolver & IKeyManager & IDIDManager & ICredentialPlugin>({
+      plugins: [
+        new SphereonKeyManager({
+          store: new MemoryKeyStore(),
+          kms: {
+            local: new SphereonKeyManagementSystem(new MemoryPrivateKeyStore()),
+          },
+        }),
+        new DIDManager({
+          providers: {
+            'did:key': new SphereonKeyDidProvider({ defaultKms: 'local' }),
+            'did:ethr': new EthrDIDProvider({
+              defaultKms: 'local',
+              network: 'mainnet',
+            }),
+          },
+          store: new MemoryDIDStore(),
+          defaultProvider: 'did:key',
+        }),
+        new DIDResolverPlugin({
+          resolver: new Resolver({
+            ...getDidKeyResolver(),
+            ...ethrDidResolver({ infuraProjectId }),
+          }),
+        }),
+        new VcdmCredentialPlugin({ issuers: [jwt] }),
+      ],
+    })
+    didKeyIdentifier = await agent.didManagerCreate()
+    didEthrIdentifier = await agent.didManagerCreate({ provider: 'did:ethr' })
+  })
+
+  test('handles createVerifiableCredential', async () => {
+    expect.assertions(1)
+
+    const issuerId = didEthrIdentifier.did
+
+    const credential: CredentialPayload = {
+      '@context': ['https://www.w3.org/2018/credentials/v1', 'https://www.w3.org/2020/demo/4342323'],
+      type: ['VerifiableCredential', 'PublicProfile'],
+      issuer: { id: issuerId },
+      issuanceDate: new Date().toISOString(),
+      id: 'vc1',
+      credentialSubject: {
+        id: 'https://example.com/user/alice',
+        name: 'Alice',
+        profilePicture: 'https://example.com/a.png',
+        address: {
+          street: 'Some str.',
+          house: 1,
+        },
+      },
+    }
+
+    const vc = await agent.createVerifiableCredential({
+      credential,
+      save: false,
+      proofFormat: 'jwt',
+    })
+    expect(vc.id).toEqual('vc1')
+  })
+
+  test('handles createVerifiablePresentation', async () => {
+    expect.assertions(1)
+
+    const issuerId = didEthrIdentifier.did
+
+    const credential = await agent.createVerifiableCredential({
+      credential: {
+        '@context': ['https://www.w3.org/2018/credentials/v1'],
+        type: ['VerifiableCredential', 'PublicProfile'],
+        issuer: { id: issuerId },
+        issuanceDate: new Date().toISOString(),
+        id: 'vc1',
+        credentialSubject: {
+          id: 'https://example.com/user/alice',
+          name: 'Alice',
+          profilePicture: 'https://example.com/a.png',
+          address: {
+            street: 'Some str.',
+            house: 1,
+          },
+        },
+      },
+      save: false,
+      proofFormat: 'jwt',
+    })
+
+    const presentation: PresentationPayload = {
+      '@context': ['https://www.w3.org/2018/credentials/v1'],
+      type: ['VerifiablePresentation'],
+      holder: didEthrIdentifier.did + '?versionTime=2023-01-01T00:00:00Z',
+      issuanceDate: new Date().toISOString(),
+      verifiableCredential: [credential],
+    }
+
+    const vp = await agent.createVerifiablePresentation({
+      presentation,
+      save: false,
+      proofFormat: 'jwt',
+    })
+
+    expect(vp.holder).toEqual(issuerId)
+  })
+})