@sphereon/ssi-sdk.ebsi-support 0.27.0 → 0.27.1-next.10

package/src/agent/EbsiSupport.ts

@@ -30,6 +30,16 @@ import {
 
 import { v4 } from 'uuid'
 
+
+export const ebsiSupportMethods: Array<string> = [
+    'ebsiWellknownMetadata',
+    'ebsiAuthorizationServerJwks',
+    'ebsiPresentationDefinitionGet',
+    'ebsiAccessTokenGet',
+    'ebsiCreateAttestationAuthRequestURL',
+    'ebsiGetAttestation'
+]
+
 export class EbsiSupport implements IAgentPlugin {
   readonly schema = schema.IEbsiSupport
   readonly methods: IEbsiSupport = {

package/src/did/EbsiDidProvider.ts

@@ -35,6 +35,7 @@ export class EbsiDidProvider extends AbstractIdentifierProvider {
       notAfter,
       secp256k1Key,
       secp256r1Key,
+      keys,
       accessTokenOpts,
       executeLedgerOperation = !!args.options?.accessTokenOpts,
       methodSpecificId = generateEbsiMethodSpecificId(EBSI_DID_SPEC_INFOS.V1),
@@ -48,9 +49,11 @@ export class EbsiDidProvider extends AbstractIdentifierProvider {
     const rpcId = options?.rpcId ?? randomRpcId()
 
     if (type === EBSI_DID_SPEC_INFOS.KEY) {
-      throw new Error(`Type ${type} not supported. Please use @sphereon/ssi-sdk-ext.did-provider-key for Natural Person EBSI DIDs`)
+      return Promise.reject(Error(`Type ${type} not supported. Please use @sphereon/ssi-sdk-ext.did-provider-key for Natural Person EBSI DIDs`))
     } else if (!kms) {
       return Promise.reject(Error(`No KMS value provided`))
+    } else if (keys && keys.length > 0 && !executeLedgerOperation) {
+      return Promise.reject(Error(`Cannot add additional keys if ledger operation is not enabled at creation. Please add the keys later yourself`))
     }
 
     // CapabilityInvocation purpose
@@ -106,6 +109,20 @@ export class EbsiDidProvider extends AbstractIdentifierProvider {
         },
         context,
       )
+      if (keys && keys.length > 0) {
+        for (const keyOpts of keys) {
+          const key = await ebsiGenerateOrUseKeyPair(
+            {
+              keyOpts,
+              keyType: keyOpts.type ?? 'Secp256r1',
+              kms,
+            },
+            context,
+          )
+          const managedKeyInfo = await context.agent.keyManagerImport(key)
+          console.warn(`FIXME: Anchor additional key on EBSI`, managedKeyInfo)
+        }
+      }
     }
 
     debug('Created', identifier.did)

package/src/did/functions.ts

@@ -253,7 +253,8 @@ export const assertedPurposes = (args: { key?: IKeyOpts }): EbsiPublicKeyPurpose
         if (
           key?.purposes &&
           key.purposes.length > 0 &&
-          key.purposes.every((purpose) => [EbsiPublicKeyPurpose.AssertionMethod, EbsiPublicKeyPurpose.Authentication].includes(purpose))
+          key.purposes.includes(EbsiPublicKeyPurpose.AssertionMethod) &&
+          key.purposes.includes(EbsiPublicKeyPurpose.Authentication)
         ) {
           return key.purposes
         }

package/src/did/types.ts

@@ -83,6 +83,7 @@ export type EbsiCreateIdentifierOpts = {
   rpcId?: number
   secp256k1Key?: IKeyOpts
   secp256r1Key?: IKeyOpts
+  keys?: IKeyOpts[] // additional importable keys, but only in case execute ledger is true
   executeLedgerOperation?: boolean // Whether to persist on the EBSI ledger. By default looks at whether access token opts are set or not
   baseDocument?: string
   notBefore?: number
@@ -379,7 +380,7 @@ export type GetDidDocumentsResponse = {
   links: Links
 }
 
-type EbsiAccessTokenOpts = {
+export type EbsiAccessTokenOpts = {
   attestationToOnboard?: W3CVerifiableCredential
   jwksUri?: string
   redirectUri: string

package/src/index.ts

@@ -3,6 +3,6 @@ import { Loggers } from '@sphereon/ssi-types'
 export const logger = Loggers.DEFAULT.get('sphereon:ebsi-support')
 const schema = require('../plugin.schema.json')
 export { schema }
-export { EbsiSupport } from './agent/EbsiSupport'
+export { EbsiSupport, ebsiSupportMethods } from './agent/EbsiSupport'
 export * from './types/IEbsiSupport'
 export { EbsiDidProvider } from './did'