@sphereon/ssi-sdk.mdl-mdoc 0.30.2-fix.367 → 0.30.2-fix.395

package/dist/agent/mDLMdoc.d.ts

@@ -1,6 +1,11 @@
 import { IAgentPlugin } from '@veramo/core';
 import { ImDLMdoc } from '../types/ImDLMdoc';
 export declare const mdocSupportMethods: Array<string>;
+/**
+ * The MDLMdoc class implements the IAgentPlugin interface, providing methods for
+ * verification and information retrieval related to X.509 certificates and mDL (mobile
+ * driver's license) documents.
+ */
 export declare class MDLMdoc implements IAgentPlugin {
     readonly schema: any;
     readonly methods: ImDLMdoc;
@@ -14,10 +19,50 @@ export declare class MDLMdoc implements IAgentPlugin {
             blindlyTrustedAnchors?: string[];
         };
     });
+    /**
+     * Processes and verifies the provided mdoc, generates device response and presentation submission tokens.
+     *
+     * @param {MdocOid4vpPresentArgs} args - An object containing arguments for mdoc oid4vp holder presentation.
+     * @param {IRequiredContext} _context - Required context for the operation.
+     * @return {Promise<MdocOid4VPPresentationAuth>} A promise that resolves to an object containing vp_token and presentation_submission.
+     */
     private mdocOid4vpHolderPresent;
+    /**
+     * Verifies the Result Provider (RP) for mdoc (mobile document) OIDC4VP (OpenID Connect for Verifiable Presentations).
+     *
+     * @param {MdocOid4vpRPVerifyArgs} args - The arguments required for verification, including the vp_token, presentation_submission, and trustAnchors.
+     * @param {IRequiredContext} _context - The required context for this method.
+     * @return {Promise<MdocOid4vpRPVerifyResult>} - A promise that resolves to an object containing error status,
+     * validated documents, and the original presentation submission.
+     */
     private mdocOid4vpRPVerify;
+    /**
+     * Verifies the issuer-signed Mobile Document (mDoc) using the provided arguments and context.
+     *
+     * @param {MdocVerifyIssuerSignedArgs} args - The arguments required for verification, including input and key information.
+     * @param {IRequiredContext} context - The context encompassing necessary dependencies and configurations.
+     * @return {Promise<IVerifySignatureResult<KeyType>>} A promise that resolves to the result of the signature verification, including key information if available.
+     */
     private mdocVerifyIssuerSigned;
+    /**
+     * Verifies an X.509 certificate chain against a set of trust anchors.
+     *
+     * @param {VerifyCertificateChainArgs} args - The arguments required for verifying the certificate chain.
+     * This includes the certificate chain to be verified and any additional trust anchors to be used.
+     * @param {IRequiredContext} _context - The context required for verification, including necessary dependencies and settings.
+     * @return {Promise<X509ValidationResult>} A promise that resolves to the result of the validation process, indicating the success or failure of the certificate chain verification.
+     */
     private x509VerifyCertificateChain;
+    /**
+     * Extracts information from a list of X509 certificates.
+     *
+     * @param {GetX509CertificateInfoArgs} args - Arguments required to retrieve certificate information,
+     * including the certificates and optional Subject Alternative Name (SAN) type filter.
+     * @param {IRequiredContext} context - The context required for the operation, which may include
+     * logging, configuration, and other operational details.
+     * @return {Promise<CertificateInfo[]>} A promise that resolves with an array of certificate
+     * information objects, each containing details extracted from individual certificates.
+     */
     private x509GetCertificateInfo;
 }
 //# sourceMappingURL=mDLMdoc.d.ts.map

package/dist/agent/mDLMdoc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mDLMdoc.d.ts","sourceRoot":"","sources":["../../src/agent/mDLMdoc.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAG3C,OAAO,EAEL,QAAQ,EAKT,MAAM,mBAAmB,CAAA;AAc1B,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAM5C,CAAA;AAED,qBAAa,OAAQ,YAAW,YAAY;IAC1C,QAAQ,CAAC,MAAM,MAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAMzB;IACD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;IACvC,OAAO,CAAC,IAAI,CAIX;gBAEW,IAAI,CAAC,EAAE;QACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;QACvB,IAAI,CAAC,EAAE;YAEL,sBAAsB,CAAC,EAAE,OAAO,CAAA;YAEhC,2BAA2B,CAAC,EAAE,OAAO,CAAA;YAGrC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;SACjC,CAAA;KACF;YAKa,uBAAuB;YAsBvB,kBAAkB;YA4BlB,sBAAsB;YAWtB,0BAA0B;YAU1B,sBAAsB;CAIrC"}
+{"version":3,"file":"mDLMdoc.d.ts","sourceRoot":"","sources":["../../src/agent/mDLMdoc.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAS3C,OAAO,EAEL,QAAQ,EAKT,MAAM,mBAAmB,CAAA;AAiB1B,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAM5C,CAAA;AAED;;;;GAIG;AACH,qBAAa,OAAQ,YAAW,YAAY;IAC1C,QAAQ,CAAC,MAAM,MAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAMzB;IACD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;IACvC,OAAO,CAAC,IAAI,CAIX;gBAEW,IAAI,CAAC,EAAE;QACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;QACvB,IAAI,CAAC,EAAE;YAEL,sBAAsB,CAAC,EAAE,OAAO,CAAA;YAEhC,2BAA2B,CAAC,EAAE,OAAO,CAAA;YAGrC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;SACjC,CAAA;KACF;IAKD;;;;;;OAMG;YACW,uBAAuB;IAgFrC;;;;;;;OAOG;YACW,kBAAkB;IA+ChC;;;;;;OAMG;YACW,sBAAsB;IAWpC;;;;;;;OAOG;YACW,0BAA0B;IAUxC;;;;;;;;;OASG;YACW,sBAAsB;CAIrC"}

package/dist/agent/mDLMdoc.js

@@ -10,25 +10,33 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MDLMdoc = exports.mdocSupportMethods = void 0;
-const kmp_mdl_mdoc_1 = require("@sphereon/kmp-mdl-mdoc");
+const kmp_mdoc_core_1 = require("@sphereon/kmp-mdoc-core");
 const ssi_sdk_ext_x509_utils_1 = require("@sphereon/ssi-sdk-ext.x509-utils");
 const __1 = require("..");
 const functions_1 = require("../functions");
-var CoseSign1Json = kmp_mdl_mdoc_1.com.sphereon.crypto.cose.CoseSign1Json;
-var decodeFrom = kmp_mdl_mdoc_1.com.sphereon.kmp.decodeFrom;
-var encodeTo = kmp_mdl_mdoc_1.com.sphereon.kmp.encodeTo;
-var Encoding = kmp_mdl_mdoc_1.com.sphereon.kmp.Encoding;
-var DeviceResponseCbor = kmp_mdl_mdoc_1.com.sphereon.mdoc.data.device.DeviceResponseCbor;
-var DocumentCbor = kmp_mdl_mdoc_1.com.sphereon.mdoc.data.device.DocumentCbor;
-var Oid4VPPresentationSubmission = kmp_mdl_mdoc_1.com.sphereon.mdoc.oid4vp.Oid4VPPresentationSubmission;
-var ValidationsJS = kmp_mdl_mdoc_1.com.sphereon.mdoc.ValidationsJS;
+var CoseSign1Json = kmp_mdoc_core_1.com.sphereon.crypto.cose.CoseSign1Json;
+var CoseCryptoServiceJS = kmp_mdoc_core_1.com.sphereon.crypto.CoseCryptoServiceJS;
+var CoseJoseKeyMappingService = kmp_mdoc_core_1.com.sphereon.crypto.CoseJoseKeyMappingService;
+var DateTimeUtils = kmp_mdoc_core_1.com.sphereon.kmp.DateTimeUtils;
+var decodeFrom = kmp_mdoc_core_1.com.sphereon.kmp.decodeFrom;
+var encodeTo = kmp_mdoc_core_1.com.sphereon.kmp.encodeTo;
+var Encoding = kmp_mdoc_core_1.com.sphereon.kmp.Encoding;
+var DeviceResponseCbor = kmp_mdoc_core_1.com.sphereon.mdoc.data.device.DeviceResponseCbor;
+var MdocValidations = kmp_mdoc_core_1.com.sphereon.mdoc.data.MdocValidations;
+var MdocOid4vpService = kmp_mdoc_core_1.com.sphereon.mdoc.oid4vp.MdocOid4vpServiceJs;
+var Oid4VPPresentationSubmission = kmp_mdoc_core_1.com.sphereon.mdoc.oid4vp.Oid4VPPresentationSubmission;
 exports.mdocSupportMethods = [
     'x509VerifyCertificateChain',
     'x509GetCertificateInfo',
     'mdocVerifyIssuerSigned',
     'mdocOid4vpHolderPresent',
-    'mdocOid4vpRPVerify',
+    'mdocOid4vpRPVerify'
 ];
+/**
+ * The MDLMdoc class implements the IAgentPlugin interface, providing methods for
+ * verification and information retrieval related to X.509 certificates and mDL (mobile
+ * driver's license) documents.
+ */
 class MDLMdoc {
     constructor(args) {
         var _a, _b;
@@ -38,28 +46,81 @@ class MDLMdoc {
             x509GetCertificateInfo: this.x509GetCertificateInfo.bind(this),
             mdocVerifyIssuerSigned: this.mdocVerifyIssuerSigned.bind(this),
             mdocOid4vpHolderPresent: this.mdocOid4vpHolderPresent.bind(this),
-            mdocOid4vpRPVerify: this.mdocOid4vpRPVerify.bind(this),
+            mdocOid4vpRPVerify: this.mdocOid4vpRPVerify.bind(this)
         };
         this.trustAnchors = (_a = args === null || args === void 0 ? void 0 : args.trustAnchors) !== null && _a !== void 0 ? _a : [];
         this.opts = (_b = args === null || args === void 0 ? void 0 : args.opts) !== null && _b !== void 0 ? _b : { trustRootWhenNoAnchors: true };
     }
+    /**
+     * Processes and verifies the provided mdoc, generates device response and presentation submission tokens.
+     *
+     * @param {MdocOid4vpPresentArgs} args - An object containing arguments for mdoc oid4vp holder presentation.
+     * @param {IRequiredContext} _context - Required context for the operation.
+     * @return {Promise<MdocOid4VPPresentationAuth>} A promise that resolves to an object containing vp_token and presentation_submission.
+     */
     mdocOid4vpHolderPresent(args, _context) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { mdocHex, presentationDefinition, trustAnchors, verifications } = args;
-            const mdoc = DocumentCbor.Static.cborDecode(decodeFrom(mdocHex, Encoding.HEX));
-            const validations = yield ValidationsJS.fromDocumentAsync(mdoc, null, trustAnchors !== null && trustAnchors !== void 0 ? trustAnchors : this.trustAnchors, verifications === null || verifications === void 0 ? void 0 : verifications.allowExpiredDocuments);
-            if (validations.error) {
-                return Promise.reject(Error(`Validation for the MSO_MDOC failed. ${validations.verifications
-                    .filter((ver) => ver.error)
-                    .map((ver) => `${ver.name}(critical${ver.critical}): ${ver.message}`)
-                    .join(',')}`));
+            var _a;
+            const { mdocs, presentationDefinition, trustAnchors, verifications, mdocHolderNonce, authorizationRequestNonce, responseUri, clientId } = args;
+            const oid4vpService = new MdocOid4vpService();
+            // const mdoc = DocumentCbor.Static.cborDecode(decodeFrom(mdocBase64Url, Encoding.BASE64URL))
+            const validate = (mdoc) => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b;
+                try {
+                    const result = yield MdocValidations.fromDocumentAsync(mdoc, null, trustAnchors !== null && trustAnchors !== void 0 ? trustAnchors : this.trustAnchors, DateTimeUtils.Static.DEFAULT.dateTimeLocal(((_b = (_a = verifications === null || verifications === void 0 ? void 0 : verifications.verificationTime) === null || _a === void 0 ? void 0 : _a.getTime()) !== null && _b !== void 0 ? _b : Date.now()) / 1000), verifications === null || verifications === void 0 ? void 0 : verifications.allowExpiredDocuments);
+                    if (result.error) {
+                        console.log(JSON.stringify(result, null, 2));
+                    }
+                    return result;
+                }
+                catch (e) {
+                    console.log(e);
+                    return {
+                        error: true,
+                        verifications: [{
+                                name: 'mdoc',
+                                error: true,
+                                critical: true,
+                                message: e.message
+                            }]
+                    };
+                }
+            });
+            const allMatches = oid4vpService.matchDocumentsAndDescriptors(mdocHolderNonce, mdocs, presentationDefinition);
+            const docsAndDescriptors = [];
+            var lastError = undefined;
+            for (const match of allMatches) {
+                if (match.document) {
+                    const result = yield validate(match.document);
+                    if (!result.error || responseUri.includes('openid.net')) {
+                        // TODO: We relax for the conformance suite, as the cert would be invalid
+                        docsAndDescriptors.push(match);
+                    }
+                    else if (result.error) {
+                        lastError = result;
+                    }
+                }
             }
-            const deviceResponse = mdoc.toSingleDocDeviceResponse(presentationDefinition);
+            if (docsAndDescriptors.length === 0) {
+                if (lastError) {
+                    return Promise.reject(Error((_a = lastError.verifications[0].message) !== null && _a !== void 0 ? _a : 'No matching documents found'));
+                }
+                return Promise.reject(Error('No matching documents found'));
+            }
+            const deviceResponse = yield oid4vpService.createDeviceResponse(docsAndDescriptors, presentationDefinition, clientId, responseUri, authorizationRequestNonce);
             const vp_token = encodeTo(deviceResponse.cborEncode(), Encoding.BASE64URL);
             const presentation_submission = Oid4VPPresentationSubmission.Static.fromPresentationDefinition(presentationDefinition);
             return { vp_token, presentation_submission };
         });
     }
+    /**
+     * Verifies the Result Provider (RP) for mdoc (mobile document) OIDC4VP (OpenID Connect for Verifiable Presentations).
+     *
+     * @param {MdocOid4vpRPVerifyArgs} args - The arguments required for verification, including the vp_token, presentation_submission, and trustAnchors.
+     * @param {IRequiredContext} _context - The required context for this method.
+     * @return {Promise<MdocOid4vpRPVerifyResult>} - A promise that resolves to an object containing error status,
+     * validated documents, and the original presentation submission.
+     */
     mdocOid4vpRPVerify(args, _context) {
         return __awaiter(this, void 0, void 0, function* () {
             const { vp_token, presentation_submission, trustAnchors } = args;
@@ -69,32 +130,65 @@ class MDLMdoc {
             }
             let error = false;
             const documents = yield Promise.all(deviceResponse.documents.map((document) => __awaiter(this, void 0, void 0, function* () {
-                const validations = yield ValidationsJS.fromDocumentAsync(document, null, trustAnchors !== null && trustAnchors !== void 0 ? trustAnchors : this.trustAnchors);
-                if (!validations || validations.error) {
-                    error = true;
+                try {
+                    const validations = yield MdocValidations.fromDocumentAsync(document, null, trustAnchors !== null && trustAnchors !== void 0 ? trustAnchors : this.trustAnchors);
+                    if (!validations || validations.error) {
+                        error = true;
+                    }
+                    if (presentation_submission.descriptor_map.find((m) => m.id === document.docType.value) === null) {
+                        error = true;
+                        validations.verifications.push({
+                            name: 'mdoc',
+                            error,
+                            critical: error,
+                            message: `No descriptor map id with document type ${document.docType.value} present`
+                        });
+                    }
+                    return { document: document.toJson(), validations };
                 }
-                if (presentation_submission.descriptor_map.find((m) => m.id === document.docType.value) === null) {
+                catch (e) {
                     error = true;
-                    validations.verifications.push({
-                        name: 'mdoc',
-                        error,
-                        critical: error,
-                        message: `No descriptor map id with document type ${document.docType.value} present`,
-                    });
+                    return {
+                        document: document.toJson(), validations: {
+                            error: true, verifications: [{
+                                    name: 'mdoc',
+                                    error,
+                                    critical: true,
+                                    message: e.message
+                                }]
+                        }
+                    };
                 }
-                return { document: document.toJson(), validations };
             })));
+            if (error) {
+                console.log(JSON.stringify(documents, null, 2));
+            }
             return { error, documents, presentation_submission };
         });
     }
+    /**
+     * Verifies the issuer-signed Mobile Document (mDoc) using the provided arguments and context.
+     *
+     * @param {MdocVerifyIssuerSignedArgs} args - The arguments required for verification, including input and key information.
+     * @param {IRequiredContext} context - The context encompassing necessary dependencies and configurations.
+     * @return {Promise<IVerifySignatureResult<KeyType>>} A promise that resolves to the result of the signature verification, including key information if available.
+     */
     mdocVerifyIssuerSigned(args, context) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { input, keyInfo } = args;
-            // FIXME: The ignore because of json/cbor
-            // @ts-ignore
-            return yield new functions_1.CoseCryptoService().verify1(CoseSign1Json.Static.fromDTO(input).toCbor(), Object.assign(Object.assign({}, keyInfo), { key: keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key })); // fixme: Json to Cbor for key
+            const { input, keyInfo, requireX5Chain } = args;
+            const coseKeyInfo = keyInfo && CoseJoseKeyMappingService.toCoseKeyInfo(keyInfo);
+            const verification = yield new CoseCryptoServiceJS(new functions_1.CoseCryptoService(context)).verify1(CoseSign1Json.Static.fromDTO(input).toCbor(), coseKeyInfo, requireX5Chain);
+            return Object.assign(Object.assign({}, verification), { keyInfo: keyInfo });
         });
     }
+    /**
+     * Verifies an X.509 certificate chain against a set of trust anchors.
+     *
+     * @param {VerifyCertificateChainArgs} args - The arguments required for verifying the certificate chain.
+     * This includes the certificate chain to be verified and any additional trust anchors to be used.
+     * @param {IRequiredContext} _context - The context required for verification, including necessary dependencies and settings.
+     * @return {Promise<X509ValidationResult>} A promise that resolves to the result of the validation process, indicating the success or failure of the certificate chain verification.
+     */
     x509VerifyCertificateChain(args, _context) {
         return __awaiter(this, void 0, void 0, function* () {
             var _a, _b;
@@ -103,6 +197,16 @@ class MDLMdoc {
             return yield new functions_1.X509CallbackService().verifyCertificateChain(Object.assign(Object.assign({}, args), { trustAnchors: Array.from(trustAnchors), opts: (_b = args === null || args === void 0 ? void 0 : args.opts) !== null && _b !== void 0 ? _b : this.opts }));
         });
     }
+    /**
+     * Extracts information from a list of X509 certificates.
+     *
+     * @param {GetX509CertificateInfoArgs} args - Arguments required to retrieve certificate information,
+     * including the certificates and optional Subject Alternative Name (SAN) type filter.
+     * @param {IRequiredContext} context - The context required for the operation, which may include
+     * logging, configuration, and other operational details.
+     * @return {Promise<CertificateInfo[]>} A promise that resolves with an array of certificate
+     * information objects, each containing details extracted from individual certificates.
+     */
     x509GetCertificateInfo(args, context) {
         return __awaiter(this, void 0, void 0, function* () {
             const certificates = args.certificates.map((cert) => (0, ssi_sdk_ext_x509_utils_1.pemOrDerToX509Certificate)(cert));

package/dist/agent/mDLMdoc.js.map

@@ -1 +1 @@
-{"version":3,"file":"mDLMdoc.js","sourceRoot":"","sources":["../../src/agent/mDLMdoc.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAA4C;AAC5C,6EAAuI;AAEvI,0BAAgI;AAChI,4CAAqE;AASrE,IAAO,aAAa,GAAG,kBAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;AAI7D,IAAO,UAAU,GAAG,kBAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAA;AAC/C,IAAO,QAAQ,GAAG,kBAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAA;AAC3C,IAAO,QAAQ,GAAG,kBAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAA;AAC3C,IAAO,kBAAkB,GAAG,kBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAA;AAC5E,IAAO,YAAY,GAAG,kBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAA;AAEhE,IAAO,4BAA4B,GAAG,kBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAA;AAC3F,IAAO,aAAa,GAAG,kBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAA;AAEzC,QAAA,kBAAkB,GAAkB;IAC/C,4BAA4B;IAC5B,wBAAwB;IACxB,wBAAwB;IACxB,yBAAyB;IACzB,oBAAoB;CACrB,CAAA;AAED,MAAa,OAAO;IAgBlB,YAAY,IAWX;;QA1BQ,WAAM,GAAG,UAAM,CAAC,QAAQ,CAAA;QACxB,YAAO,GAAa;YAC3B,0BAA0B,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;YACtE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9D,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9D,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;SACvD,CAAA;QAoBC,IAAI,CAAC,YAAY,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,mCAAI,EAAE,CAAA;QAC5C,IAAI,CAAC,IAAI,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,mCAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAA;IAC5D,CAAC;IAEa,uBAAuB,CAAC,IAA2B,EAAE,QAA0B;;YAC3F,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,IAAI,CAAA;YAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;YAC9E,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,IAAI,CAAC,YAAY,EAAE,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,qBAAqB,CAAC,CAAA;YAC9I,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,OAAO,CAAC,MAAM,CACnB,KAAK,CACH,uCAAuC,WAAW,CAAC,aAAa;qBAC7D,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;qBAC1B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;qBACpE,IAAI,CAAC,GAAG,CAAC,EAAE,CACf,CACF,CAAA;YACH,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,CAAC,yBAAyB,CAAC,sBAAuD,CAAC,CAAA;YAC9G,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;YAC1E,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,MAAM,CAAC,0BAA0B,CAC5F,sBAAuD,CACxD,CAAA;YACD,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAA;QAC9C,CAAC;KAAA;IAEa,kBAAkB,CAAC,IAA4B,EAAE,QAA0B;;YACvF,MAAM,EAAE,QAAQ,EAAE,uBAAuB,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;YAChE,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;YACrG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;gBAC9B,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA;YAChE,CAAC;YACD,IAAI,KAAK,GAAG,KAAK,CAAA;YACjB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAO,QAAQ,EAAE,EAAE;gBAC9C,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,IAAI,CAAC,YAAY,CAAC,CAAA;gBAC5G,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;oBACtC,KAAK,GAAG,IAAI,CAAA;gBACd,CAAC;gBACD,IAAI,uBAAuB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBACjG,KAAK,GAAG,IAAI,CAAA;oBACZ,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC;wBAC7B,IAAI,EAAE,MAAM;wBACZ,KAAK;wBACL,QAAQ,EAAE,KAAK;wBACf,OAAO,EAAE,2CAA2C,QAAQ,CAAC,OAAO,CAAC,KAAK,UAAU;qBACrF,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAA;YACrD,CAAC,CAAA,CAAC,CACH,CAAA;YACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAA;QACtD,CAAC;KAAA;IAEa,sBAAsB,CAAC,IAAgC,EAAE,OAAyB;;YAC9F,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;YAE/B,yCAAyC;YACzC,aAAa;YACb,OAAO,MAAM,IAAI,6BAAiB,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,gCACtF,OAAO,KACV,GAAG,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,GACQ,CAAC,CAAA,CAAC,8BAA8B;QAC7D,CAAC;KAAA;IAEa,0BAA0B,CAAC,IAAgC,EAAE,QAA0B;;;YACnG,MAAM,aAAa,GAAa,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,MAAA,IAAI,CAAC,YAAY,mCAAI,EAAE,CAAC,CAAC,CAAA;YACpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAA;YACnD,OAAO,MAAM,IAAI,+BAAmB,EAAE,CAAC,sBAAsB,iCACxD,IAAI,KACP,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EACtC,IAAI,EAAE,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,mCAAI,IAAI,CAAC,IAAI,IAC7B,CAAA;QACJ,CAAC;KAAA;IAEa,sBAAsB,CAAC,IAAgC,EAAE,OAAyB;;YAC9F,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,kDAAyB,EAAC,IAAI,CAAC,CAAC,CAAA;YACrF,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,2CAAkB,EAAC,IAAI,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;QAC7I,CAAC;KAAA;CACF;AA3GD,0BA2GC"}
+{"version":3,"file":"mDLMdoc.js","sourceRoot":"","sources":["../../src/agent/mDLMdoc.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2DAA6C;AAC7C,6EAKyC;AAEzC,0BAMW;AACX,4CAAqE;AASrE,IAAO,aAAa,GAAG,mBAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;AAC7D,IAAO,mBAAmB,GAAG,mBAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAA;AACpE,IAAO,yBAAyB,GAAG,mBAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,yBAAyB,CAAA;AAEhF,IAAO,aAAa,GAAG,mBAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAA;AACrD,IAAO,UAAU,GAAG,mBAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAA;AAC/C,IAAO,QAAQ,GAAG,mBAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAA;AAC3C,IAAO,QAAQ,GAAG,mBAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAA;AAC3C,IAAO,kBAAkB,GAAG,mBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAA;AAE5E,IAAO,eAAe,GAAG,mBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAA;AAG/D,IAAO,iBAAiB,GAAG,mBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAA;AACvE,IAAO,4BAA4B,GAAG,mBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAA;AAE9E,QAAA,kBAAkB,GAAkB;IAC/C,4BAA4B;IAC5B,wBAAwB;IACxB,wBAAwB;IACxB,yBAAyB;IACzB,oBAAoB;CACrB,CAAA;AAED;;;;GAIG;AACH,MAAa,OAAO;IAgBlB,YAAY,IAWX;;QA1BQ,WAAM,GAAG,UAAM,CAAC,QAAQ,CAAA;QACxB,YAAO,GAAa;YAC3B,0BAA0B,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;YACtE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9D,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9D,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;SACvD,CAAA;QAoBC,IAAI,CAAC,YAAY,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,mCAAI,EAAE,CAAA;QAC5C,IAAI,CAAC,IAAI,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,mCAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAA;IAC5D,CAAC;IAED;;;;;;OAMG;IACW,uBAAuB,CAAC,IAA2B,EAAE,QAA0B;;;YAC3F,MAAM,EACJ,KAAK,EACL,sBAAsB,EACtB,YAAY,EACZ,aAAa,EACb,eAAe,EACf,yBAAyB,EACzB,WAAW,EACX,QAAQ,EACT,GAAG,IAAI,CAAA;YAER,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAE,CAAA;YAC7C,6FAA6F;YAC7F,MAAM,QAAQ,GAAG,CAAO,IAAkB,EAAE,EAAE;;gBAC5C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,iBAAiB,CACpD,IAAI,EACJ,IAAI,EACJ,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,IAAI,CAAC,YAAY,EACjC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAA,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,gBAAgB,0CAAE,OAAO,EAAE,mCAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAC7G,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,qBAAqB,CACrC,CAAA;oBACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;wBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;oBAC9C,CAAC;oBACD,OAAO,MAAM,CAAA;gBACf,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBACd,OAAO;wBACL,KAAK,EAAE,IAAI;wBACX,aAAa,EAAE,CAAC;gCACd,IAAI,EAAE,MAAM;gCACZ,KAAK,EAAE,IAAI;gCACX,QAAQ,EAAE,IAAI;gCACd,OAAO,EAAE,CAAC,CAAC,OAAiB;6BAC7B,CAAC;qBACH,CAAA;gBACH,CAAC;YAEH,CAAC,CAAA,CAAA;YAED,MAAM,UAAU,GAAoC,aAAa,CAAC,4BAA4B,CAC5F,eAAe,EACf,KAAK,EACL,sBAAuD,CACxD,CAAA;YACD,MAAM,kBAAkB,GAAoC,EAAE,CAAA;YAC9D,IAAI,SAAS,GAAkG,SAAS,CAAA;YACxH,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;oBAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBACxD,yEAAyE;wBACzE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBAChC,CAAC;yBAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;wBACxB,SAAS,GAAG,MAAM,CAAA;oBACpB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAA,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,mCAAI,6BAA6B,CAAC,CAAC,CAAA;gBACnG,CAAC;gBACD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAA;YAC7D,CAAC;YACD,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAC7D,kBAAkB,EAClB,sBAAuD,EACvD,QAAQ,EACR,WAAW,EACX,yBAAyB,CAC1B,CAAA;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;YAC1E,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,MAAM,CAAC,0BAA0B,CAC5F,sBAAuD,CACxD,CAAA;YACD,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAA;QAC9C,CAAC;KAAA;IAED;;;;;;;OAOG;IACW,kBAAkB,CAAC,IAA4B,EAAE,QAA0B;;YACvF,MAAM,EAAE,QAAQ,EAAE,uBAAuB,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;YAChE,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;YACrG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;gBAC9B,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA;YAChE,CAAC;YACD,IAAI,KAAK,GAAG,KAAK,CAAA;YACjB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAO,QAAQ,EAAE,EAAE;gBAC9C,IAAI,CAAC;oBAEH,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,IAAI,CAAC,YAAY,CAAC,CAAA;oBAC9G,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;wBACtC,KAAK,GAAG,IAAI,CAAA;oBACd,CAAC;oBACD,IAAI,uBAAuB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;wBACjG,KAAK,GAAG,IAAI,CAAA;wBACZ,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC;4BAC7B,IAAI,EAAE,MAAM;4BACZ,KAAK;4BACL,QAAQ,EAAE,KAAK;4BACf,OAAO,EAAE,2CAA2C,QAAQ,CAAC,OAAO,CAAC,KAAK,UAAU;yBACrF,CAAC,CAAA;oBACJ,CAAC;oBACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAA;gBACrD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,KAAK,GAAG,IAAI,CAAA;oBACZ,OAAO;wBACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE;4BACxC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;oCAC3B,IAAI,EAAE,MAAM;oCACZ,KAAK;oCACL,QAAQ,EAAE,IAAI;oCACd,OAAO,EAAE,CAAC,CAAC,OAAiB;iCAC7B,CAAC;yBACH;qBACF,CAAA;gBACH,CAAC;YAEH,CAAC,CAAA,CAAC,CACH,CAAA;YACD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACjD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAA;QACtD,CAAC;KAAA;IAED;;;;;;OAMG;IACW,sBAAsB,CAAC,IAAgC,EAAE,OAAyB;;YAC9F,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI,CAAA;YAC/C,MAAM,WAAW,GAAG,OAAO,IAAI,yBAAyB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;YAC/E,MAAM,YAAY,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,6BAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CACxF,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAC5C,WAAW,EACX,cAAc,CACf,CAAA;YACD,uCAAY,YAAY,KAAE,OAAO,EAAE,OAAO,IAAE;QAC9C,CAAC;KAAA;IAED;;;;;;;OAOG;IACW,0BAA0B,CAAC,IAAgC,EAAE,QAA0B;;;YACnG,MAAM,aAAa,GAAa,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,MAAA,IAAI,CAAC,YAAY,mCAAI,EAAE,CAAC,CAAC,CAAA;YACpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAA;YACnD,OAAO,MAAM,IAAI,+BAAmB,EAAE,CAAC,sBAAsB,iCACxD,IAAI,KACP,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EACtC,IAAI,EAAE,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,mCAAI,IAAI,CAAC,IAAI,IAC7B,CAAA;QACJ,CAAC;KAAA;IAED;;;;;;;;;OASG;IACW,sBAAsB,CAAC,IAAgC,EAAE,OAAyB;;YAC9F,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,kDAAyB,EAAC,IAAI,CAAC,CAAC,CAAA;YACrF,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,2CAAkB,EAAC,IAAI,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;QAC7I,CAAC;KAAA;CACF;AAhOD,0BAgOC"}

package/dist/functions/index.d.ts

@@ -1,19 +1,24 @@
-import { com, Nullable } from '@sphereon/kmp-mdl-mdoc';
+import { com, Nullable } from '@sphereon/kmp-mdoc-core';
 import { X509ValidationResult } from '@sphereon/ssi-sdk-ext.x509-utils';
-import { VerifyCertificateChainArgs } from '../types/ImDLMdoc';
+import { IRequiredContext, VerifyCertificateChainArgs } from '../types/ImDLMdoc';
 import CoseSign1Cbor = com.sphereon.crypto.cose.CoseSign1Cbor;
-import CoseSign1InputCbor = com.sphereon.crypto.cose.CoseSign1InputCbor;
 import ICoseKeyCbor = com.sphereon.crypto.cose.ICoseKeyCbor;
+import ToBeSignedCbor = com.sphereon.crypto.cose.ToBeSignedCbor;
+import IVerifySignatureResult = com.sphereon.crypto.generic.IVerifySignatureResult;
 import ICoseCryptoCallbackJS = com.sphereon.crypto.ICoseCryptoCallbackJS;
 import IKey = com.sphereon.crypto.IKey;
 import IKeyInfo = com.sphereon.crypto.IKeyInfo;
-import IVerifySignatureResult = com.sphereon.crypto.IVerifySignatureResult;
 import IX509ServiceJS = com.sphereon.crypto.IX509ServiceJS;
 import IX509VerificationResult = com.sphereon.crypto.IX509VerificationResult;
 import X509VerificationProfile = com.sphereon.crypto.X509VerificationProfile;
+import LocalDateTimeKMP = com.sphereon.kmp.LocalDateTimeKMP;
 export declare class CoseCryptoService implements ICoseCryptoCallbackJS {
-    sign1<CborType>(input: CoseSign1InputCbor, keyInfo?: IKeyInfo<ICoseKeyCbor>): Promise<CoseSign1Cbor<CborType>>;
-    verify1<CborType>(input: CoseSign1Cbor<CborType>, keyInfo?: IKeyInfo<ICoseKeyCbor>): Promise<IVerifySignatureResult<ICoseKeyCbor>>;
+    private context?;
+    constructor(context?: IRequiredContext | undefined);
+    setContext(context: IRequiredContext): void;
+    signAsync(input: ToBeSignedCbor, requireX5Chain: Nullable<boolean>): Promise<Int8Array>;
+    verify1Async<CborType>(input: CoseSign1Cbor<CborType>, keyInfo: IKeyInfo<ICoseKeyCbor>, requireX5Chain: Nullable<boolean>): Promise<IVerifySignatureResult<ICoseKeyCbor>>;
+    resolvePublicKeyAsync<KT extends com.sphereon.crypto.IKey>(keyInfo: com.sphereon.crypto.IKeyInfo<KT>): Promise<com.sphereon.crypto.IResolvedKeyInfo<KT>>;
 }
 /**
  * This class can be used for X509 validations.
@@ -31,11 +36,11 @@ export declare class X509CallbackService implements IX509ServiceJS {
      * @param trustAnchors
      * @param verificationTime
      */
-    verifyCertificateChain({ chain, trustAnchors, verificationTime, opts, }: VerifyCertificateChainArgs): Promise<X509ValidationResult>;
+    verifyCertificateChain({ chain, trustAnchors, verificationTime, opts }: VerifyCertificateChainArgs): Promise<X509ValidationResult>;
     /**
      * This method is the implementation used within the mDL/Mdoc library
      */
-    verifyCertificateChainJS<KeyType extends IKey>(chainDER: Nullable<Int8Array[]>, chainPEM: Nullable<string[]>, trustedCerts: Nullable<string[]>, verificationProfile?: X509VerificationProfile | undefined): Promise<IX509VerificationResult<KeyType>>;
+    verifyCertificateChainJS<KeyType extends IKey>(chainDER: Nullable<Int8Array[]>, chainPEM: Nullable<string[]>, trustedCerts: Nullable<string[]>, verificationProfile?: X509VerificationProfile | undefined, verificationTime?: Nullable<LocalDateTimeKMP>): Promise<IX509VerificationResult<KeyType>>;
     setTrustedCerts: (trustedCertsInPEM?: Array<string>) => void;
     getTrustedCerts: () => string[] | undefined;
 }

package/dist/functions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/functions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAML,oBAAoB,EACrB,MAAM,kCAAkC,CAAA;AAGzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAE9D,OAAO,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;AAC7D,OAAO,kBAAkB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAA;AACvE,OAAO,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAA;AAE3D,OAAO,qBAAqB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAA;AACxE,OAAO,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAA;AACtC,OAAO,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAA;AAC9C,OAAO,sBAAsB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAA;AAC1E,OAAO,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAA;AAC1D,OAAO,uBAAuB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAA;AAE5E,OAAO,uBAAuB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAA;AAI5E,qBAAa,iBAAkB,YAAW,qBAAqB;IACvD,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAI9G,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;CA2FzI;AAED;;;;;;GAMG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,OAAO,CAAC,aAAa,CAAC,CAAe;gBAEzB,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC;IAIxC;;;;;OAKG;IACG,sBAAsB,CAAC,EAC3B,KAAK,EACL,YAAqC,EACrC,gBAAgB,EAChB,IAAI,GACL,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAS7D;;OAEG;IACG,wBAAwB,CAAC,OAAO,SAAS,IAAI,EACjD,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,EAC/B,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAC5B,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAChC,mBAAmB,CAAC,EAAE,uBAAuB,GAAG,SAAS,GACxD,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IA0B5C,eAAe,uBAAwB,KAAK,CAAC,MAAM,CAAC,UAQnD;IAED,eAAe,6BAA2B;CAC3C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/functions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAML,oBAAoB,EACrB,MAAM,kCAAkC,CAAA;AAGzC,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAEhF,OAAO,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;AAC7D,OAAO,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAA;AAC3D,OAAO,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAA;AAG/D,OAAO,sBAAsB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAA;AAElF,OAAO,qBAAqB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAA;AACxE,OAAO,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAA;AACtC,OAAO,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAA;AAC9C,OAAO,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAA;AAC1D,OAAO,uBAAuB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAA;AAI5E,OAAO,uBAAuB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAA;AAK5E,OAAO,gBAAgB,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAA;AAE3D,qBAAa,iBAAkB,YAAW,qBAAqB;IAEjD,OAAO,CAAC,OAAO,CAAC;gBAAR,OAAO,CAAC,EAAE,gBAAgB,YAAA;IAG9C,UAAU,CAAC,OAAO,EAAE,gBAAgB;IAI9B,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IA6BvF,YAAY,CAAC,QAAQ,EACzB,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC9B,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC/B,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAChC,OAAO,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IA4FhD,qBAAqB,CAAC,EAAE,SAAS,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EACvD,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,GACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;CAMrD;AAED;;;;;;GAMG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,OAAO,CAAC,aAAa,CAAC,CAAe;gBAEzB,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC;IAIxC;;;;;OAKG;IACG,sBAAsB,CAAC,EACE,KAAK,EACL,YAAqC,EACrC,gBAAgB,EAChB,IAAI,EACL,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAS1F;;OAEG;IACG,wBAAwB,CAAC,OAAO,SAAS,IAAI,EACjD,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,EAC/B,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAC5B,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAChC,mBAAmB,CAAC,EAAE,uBAAuB,GAAG,SAAS,EACzD,gBAAgB,CAAC,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAC5C,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IA6B5C,eAAe,uBAAwB,KAAK,CAAC,MAAM,CAAC,UAQnD;IAED,eAAe,6BAA2B;CAC3C"}

package/dist/functions/index.js

@@ -33,35 +33,72 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.X509CallbackService = exports.CoseCryptoService = void 0;
-const kmp_mdl_mdoc_1 = require("@sphereon/kmp-mdl-mdoc");
+const kmp_mdoc_core_1 = require("@sphereon/kmp-mdoc-core");
 const ssi_sdk_ext_x509_utils_1 = require("@sphereon/ssi-sdk-ext.x509-utils");
 const crypto = __importStar(require("crypto"));
 const pkijs_1 = require("pkijs");
-var CryptoServiceJS = kmp_mdl_mdoc_1.com.sphereon.crypto.CryptoServiceJS;
-var Jwk = kmp_mdl_mdoc_1.com.sphereon.crypto.jose.Jwk;
-var decodeFrom = kmp_mdl_mdoc_1.com.sphereon.kmp.decodeFrom;
-var Encoding = kmp_mdl_mdoc_1.com.sphereon.kmp.Encoding;
+var CoseJoseKeyMappingService = kmp_mdoc_core_1.com.sphereon.crypto.CoseJoseKeyMappingService;
+var DefaultCallbacks = kmp_mdoc_core_1.com.sphereon.crypto.DefaultCallbacks;
+var SignatureAlgorithm = kmp_mdoc_core_1.com.sphereon.crypto.generic.SignatureAlgorithm;
+var Jwk = kmp_mdoc_core_1.com.sphereon.crypto.jose.Jwk;
+var KeyInfo = kmp_mdoc_core_1.com.sphereon.crypto.KeyInfo;
+var ResolvedKeyInfo = kmp_mdoc_core_1.com.sphereon.crypto.ResolvedKeyInfo;
+var DateTimeUtils = kmp_mdoc_core_1.com.sphereon.kmp.DateTimeUtils;
+var decodeFrom = kmp_mdoc_core_1.com.sphereon.kmp.decodeFrom;
+var encodeTo = kmp_mdoc_core_1.com.sphereon.kmp.encodeTo;
+var Encoding = kmp_mdoc_core_1.com.sphereon.kmp.Encoding;
 class CoseCryptoService {
-    sign1(input, keyInfo) {
+    constructor(context) {
+        this.context = context;
+    }
+    setContext(context) {
+        this.context = context;
+    }
+    signAsync(input, requireX5Chain) {
         return __awaiter(this, void 0, void 0, function* () {
-            throw new Error('Method not implemented.');
+            var _a, _b, _c;
+            if (!this.context) {
+                throw Error('No context provided. Please provide a context with the setContext method or constructor');
+            }
+            const { keyInfo, alg, value } = input;
+            let kmsKeyRef = (_a = keyInfo.kmsKeyRef) !== null && _a !== void 0 ? _a : undefined;
+            if (!kmsKeyRef) {
+                const key = keyInfo.key;
+                if (key == null) {
+                    return Promise.reject(Error('No key present in keyInfo. This implementation cannot sign without a key!'));
+                }
+                const resolvedKeyInfo = ResolvedKeyInfo.Static.fromKeyInfo(keyInfo, key);
+                const jwkKeyInfo = CoseJoseKeyMappingService.toResolvedJwkKeyInfo(resolvedKeyInfo);
+                const kid = (_c = (_b = jwkKeyInfo.kid) !== null && _b !== void 0 ? _b : key.getKidAsString(true)) !== null && _c !== void 0 ? _c : undefined;
+                if (!kid) {
+                    return Promise.reject(Error('No kid present'));
+                }
+                kmsKeyRef = kid;
+            }
+            const result = yield this.context.agent.keyManagerSign({
+                algorithm: alg.jose.value,
+                data: encodeTo(value, Encoding.UTF8),
+                encoding: 'utf-8',
+                keyRef: kmsKeyRef
+            });
+            return decodeFrom(result, Encoding.UTF8);
         });
     }
-    verify1(input, keyInfo) {
+    verify1Async(input, keyInfo, requireX5Chain) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s;
-            function getCertAndKey(x5c) {
-                return __awaiter(this, void 0, void 0, function* () {
-                    if (!x5c || x5c.length === 0) {
-                        // We should not be able to get here anyway, as the MLD-mdoc library already validated at this point. But let's make sure
-                        return Promise.reject(new Error(`No x5chain was present in the CoseSign headers!`));
-                    }
-                    // TODO: According to the IETF spec there should be a x5t in case the x5chain is in the protected headers. In the Funke this does not seem to be done/used!
-                    issuerCert = (0, ssi_sdk_ext_x509_utils_1.pemOrDerToX509Certificate)(x5c[0]);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p;
+            const getCertAndKey = (x5c) => __awaiter(this, void 0, void 0, function* () {
+                if (requireX5Chain && (!x5c || x5c.length === 0)) {
+                    // We should not be able to get here anyway, as the MLD-mdoc library already validated at this point. But let's make sure
+                    return Promise.reject(new Error(`No x5chain was present in the CoseSign headers!`));
+                }
+                // TODO: According to the IETF spec there should be a x5t in case the x5chain is in the protected headers. In the Funke this does not seem to be done/used!
+                issuerCert = x5c ? (0, ssi_sdk_ext_x509_utils_1.pemOrDerToX509Certificate)(x5c[0]) : undefined;
+                if (issuerCert) {
                     issuerPublicKey = yield issuerCert.getPublicKey();
-                    return { issuerCert, issuerPublicKey };
-                });
-            }
+                }
+                return { issuerCert, issuerPublicKey };
+            });
             if ((_a = keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key) === null || _a === void 0 ? void 0 : _a.d) {
                 throw Error('Do not use private keys to verify!');
             }
@@ -77,43 +114,50 @@ class CoseCryptoService {
             let issuerCert;
             let kid = (_d = (_c = keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.kid) !== null && _c !== void 0 ? _c : sign1Json.protectedHeader.kid) !== null && _d !== void 0 ? _d : (_e = sign1Json.unprotectedHeader) === null || _e === void 0 ? void 0 : _e.kid;
             // Please note this method does not perform chain validation. The MDL-MSO_MDOC library already performed this before this step
-            const x5c = (_m = (_k = (_j = (_h = (_g = (_f = keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key) === null || _f === void 0 ? void 0 : _f.x5chain) === null || _g === void 0 ? void 0 : _g.value) === null || _h === void 0 ? void 0 : _h.asJsArrayView()) === null || _j === void 0 ? void 0 : _j.map((x509) => x509.encodeTo(Encoding.BASE64))) !== null && _k !== void 0 ? _k : (_l = sign1Json.protectedHeader) === null || _l === void 0 ? void 0 : _l.x5chain) !== null && _m !== void 0 ? _m : (_o = sign1Json.unprotectedHeader) === null || _o === void 0 ? void 0 : _o.x5chain;
-            if (!keyInfo || !(keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key) || ((_p = keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key) === null || _p === void 0 ? void 0 : _p.x5chain)) {
+            const x5c = (_j = (_g = (_f = keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key) === null || _f === void 0 ? void 0 : _f.getX509CertificateChain()) !== null && _g !== void 0 ? _g : (_h = sign1Json.protectedHeader) === null || _h === void 0 ? void 0 : _h.x5chain) !== null && _j !== void 0 ? _j : (_k = sign1Json.unprotectedHeader) === null || _k === void 0 ? void 0 : _k.x5chain;
+            if (!keyInfo || !(keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key) || ((_l = keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key) === null || _l === void 0 ? void 0 : _l.x5chain)) {
                 const certAndKey = yield getCertAndKey(x5c);
                 issuerPublicKey = certAndKey.issuerPublicKey;
                 issuerCert = certAndKey.issuerCert;
             }
             else {
-                if (!(keyInfo === null || keyInfo === void 0 ? void 0 : keyInfo.key)) {
+                const jwkKeyInfo = CoseJoseKeyMappingService.toJwkKeyInfo(keyInfo);
+                if (!(jwkKeyInfo === null || jwkKeyInfo === void 0 ? void 0 : jwkKeyInfo.key)) {
                     return Promise.reject(Error(`Either a x5c needs to be in the headers, or you need to provide a key for verification`));
                 }
-                const key = keyInfo.key;
-                // todo: Workaround as the Agent only works with cosekey json objects and we do not support conversion of these from Json to cbor yet
-                const jwk = typeof key.x === 'string' ? Jwk.Static.fromCoseKeyJson(keyInfo.key) : Jwk.Static.fromCoseKey(keyInfo.key);
+                const jwk = jwkKeyInfo.key;
                 if (kid === null) {
                     kid = jwk.kid;
                 }
-                let keyAlg = (_q = jwk.kty) !== null && _q !== void 0 ? _q : 'ECDSA';
-                const crv = (_s = (_r = jwk.crv) === null || _r === void 0 ? void 0 : _r.value) !== null && _s !== void 0 ? _s : 'P-256';
+                let keyAlg = (_m = jwk.kty) !== null && _m !== void 0 ? _m : 'ECDSA';
+                const crv = (_p = (_o = jwk.crv) === null || _o === void 0 ? void 0 : _o.value) !== null && _p !== void 0 ? _p : 'P-256';
                 issuerPublicKey = yield crypto.subtle.importKey('jwk', Object.assign(Object.assign(Object.assign({ kty: jwk.kty.value, crv }, (jwk.x5c && { x5c: jwk.x5c })), (jwk.x && { x: jwk.x })), (jwk.y && { y: jwk.y })), {
                     name: keyAlg.value === 'EC' ? 'ECDSA' : keyAlg.value,
-                    namedCurve: crv,
+                    namedCurve: crv
                 }, true, ['verify']);
             }
             const exportedJwk = yield crypto.subtle.exportKey('jwk', issuerPublicKey);
             const crv = exportedJwk.crv;
-            const coseKey = Jwk.Static.fromJson(exportedJwk).jwkToCoseKeyJson();
-            const recalculatedToBeSigned = input.toBeSignedJson(coseKey, coseAlg);
-            const valid = yield crypto.subtle.verify(Object.assign(Object.assign({}, issuerPublicKey.algorithm), { hash: (crv === null || crv === void 0 ? void 0 : crv.includes('-')) ? `SHA-${crv.split('-')[1]}` : 'SHA-256' }), issuerPublicKey, decodeFrom(sign1Json.signature, Encoding.BASE64URL), decodeFrom(recalculatedToBeSigned.hexValue, Encoding.HEX));
+            const coseKey = Jwk.Static.fromDTO(exportedJwk).jwkToCoseKeyJson();
+            const coseKeyInfo = CoseJoseKeyMappingService.toCoseKeyInfo(keyInfo !== null && keyInfo !== void 0 ? keyInfo : new KeyInfo(kid, coseKey.toCbor()));
+            const recalculatedToBeSigned = input.toBeSignedJson(coseKeyInfo, SignatureAlgorithm.Static.fromCose(coseAlg));
+            const valid = yield crypto.subtle.verify(Object.assign(Object.assign({}, issuerPublicKey.algorithm), { hash: (crv === null || crv === void 0 ? void 0 : crv.includes('-')) ? `SHA-${crv.split('-')[1]}` : 'SHA-256' // todo: this needs to be more robust
+             }), issuerPublicKey, decodeFrom(sign1Json.signature, Encoding.BASE64URL), decodeFrom(recalculatedToBeSigned.base64UrlValue, Encoding.BASE64URL));
             return {
                 name: 'mdoc',
                 critical: true,
                 error: !valid,
                 message: `Signature of '${issuerCert ? (0, ssi_sdk_ext_x509_utils_1.getSubjectDN)(issuerCert).DN : kid}' was ${valid ? '' : 'in'}valid`,
-                keyInfo: keyInfo !== null && keyInfo !== void 0 ? keyInfo : { kid, key: coseKey.toCbor() },
+                keyInfo: coseKeyInfo
             };
         });
     }
+    resolvePublicKeyAsync(keyInfo) {
+        if (keyInfo.key) {
+            return Promise.resolve(CoseJoseKeyMappingService.toResolvedKeyInfo(keyInfo, keyInfo.key));
+        }
+        return Promise.reject(Error('No key present in keyInfo. This implementation cannot resolve public keys on its own currently!'));
+    }
 }
 exports.CoseCryptoService = CoseCryptoService;
 /**
@@ -144,21 +188,22 @@ class X509CallbackService {
      * @param verificationTime
      */
     verifyCertificateChain(_a) {
-        return __awaiter(this, arguments, void 0, function* ({ chain, trustAnchors = this.getTrustedCerts(), verificationTime, opts, }) {
+        return __awaiter(this, arguments, void 0, function* ({ chain, trustAnchors = this.getTrustedCerts(), verificationTime, opts }) {
             return yield (0, ssi_sdk_ext_x509_utils_1.validateX509CertificateChain)({
                 chain,
                 trustAnchors,
                 verificationTime,
-                opts,
+                opts
             });
         });
     }
     /**
      * This method is the implementation used within the mDL/Mdoc library
      */
-    verifyCertificateChainJS(chainDER, chainPEM, trustedCerts, verificationProfile) {
+    verifyCertificateChainJS(chainDER, chainPEM, trustedCerts, verificationProfile, verificationTime) {
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
+            const verificationAt = verificationTime !== null && verificationTime !== void 0 ? verificationTime : DateTimeUtils.Static.DEFAULT.dateTimeLocal();
             let chain = [];
             if (chainDER && chainDER.length > 0) {
                 chain = chainDER.map((der) => Uint8Array.from(der));
@@ -169,7 +214,8 @@ class X509CallbackService {
             const result = yield (0, ssi_sdk_ext_x509_utils_1.validateX509CertificateChain)({
                 chain: chain, // The function will handle an empty array
                 trustAnchors: trustedCerts !== null && trustedCerts !== void 0 ? trustedCerts : this.getTrustedCerts(),
-                opts: { trustRootWhenNoAnchors: true },
+                verificationTime: new Date(verificationAt.toEpochSeconds().toULong() * 1000),
+                opts: { trustRootWhenNoAnchors: true }
             });
             const cert = result.certificateChain ? result.certificateChain[result.certificateChain.length - 1] : undefined;
             return {
@@ -179,6 +225,7 @@ class X509CallbackService {
                 critical: result.critical,
                 message: result.message,
                 error: result.error,
+                verificationTime: verificationAt
             };
         });
     }
@@ -210,7 +257,7 @@ const defaultCryptoEngine = () => {
     }
 };
 defaultCryptoEngine();
-// We register the services with the mDL/mdoc library
-CryptoServiceJS.X509.register(new X509CallbackService());
-CryptoServiceJS.COSE.register(new CoseCryptoService());
+// We register the services with the mDL/mdoc library. Please note that the context is not passed in, meaning we cannot sign by default.
+DefaultCallbacks.setCoseCryptoDefault(new CoseCryptoService());
+DefaultCallbacks.setX509Default(new X509CallbackService());
 //# sourceMappingURL=index.js.map