@sphereon/ssi-sdk.ms-request-api 0.33.0 → 0.33.1-feature.jose.vcdm.55

package/dist/index.d.ts

@@ -1,9 +1,86 @@
+import { IPluginMethodMap, IAgentContext, IAgentPlugin } from '@veramo/core';
+import { IMsAuthenticationClientCredentialArgs } from '@sphereon/ssi-sdk.ms-authenticator';
+
+interface IMsRequestApi extends IPluginMethodMap {
+    issuanceRequestMsVc(clientIssueRequest: IClientIssueRequest, context: IRequiredContext): Promise<IIssueRequestResponse>;
+}
+interface IClientIssueRequest {
+    authenticationInfo: IMsAuthenticationClientCredentialArgs;
+    clientIssuanceConfig: IClientIssuanceConfig;
+    claims: CredentialSubject;
+}
+interface IClientIssuanceConfig {
+    authority: string;
+    includeQRCode: boolean;
+    registration: Registration;
+    callback: Callback;
+    issuance: IClientIssuance;
+}
+interface IClientIssuance {
+    type: string;
+    manifest: string;
+    pin: Pin;
+}
+interface IIssueRequest {
+    authenticationInfo: IMsAuthenticationClientCredentialArgs;
+    issuanceConfig: IssuanceConfig;
+}
+interface IIssueRequestResponse {
+    id: string;
+    requestId: string;
+    url: string;
+    expiry: Date;
+    pin: string;
+}
+interface Registration {
+    clientName: string;
+}
+interface Headers {
+    apiKey: string;
+}
+interface Callback {
+    url: string;
+    state: string;
+    headers: Headers;
+}
+interface Pin {
+    value: string;
+    length: number;
+}
+type CredentialSubject = {
+    [x: string]: any;
+};
+interface Issuance {
+    type: string;
+    manifest: string;
+    pin: Pin;
+    claims: CredentialSubject;
+}
+interface IssuanceConfig {
+    authority: string;
+    includeQRCode: boolean;
+    registration: Registration;
+    callback: Callback;
+    issuance: Issuance;
+}
+type IRequiredContext = IAgentContext<Record<string, never>>;
+
+/**
+ * {@inheritDoc IMsRequestApi}
+ */
+declare class MsRequestApi implements IAgentPlugin {
+    private clients;
+    readonly methods: IMsRequestApi;
+    /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */
+    private issuanceRequestMsVc;
+}
+
+declare function fetchIssuanceRequestMs(issuanceInfo: IIssueRequest, accessToken: string, msIdentityHostName: string): Promise<IIssueRequestResponse>;
+declare function generatePin(digits: number): string;
+
 /**
  * @public
  */
 declare const schema: any;
-export { schema };
-export { MsRequestApi } from './agent/MsRequestApi';
-export * from './types/IMsRequestApi';
-export * from './IssuerUtil';
-//# sourceMappingURL=index.d.ts.map
+
+export { type Callback, type CredentialSubject, type Headers, type IClientIssuance, type IClientIssuanceConfig, type IClientIssueRequest, type IIssueRequest, type IIssueRequestResponse, type IMsRequestApi, type IRequiredContext, type Issuance, type IssuanceConfig, MsRequestApi, type Pin, type Registration, fetchIssuanceRequestMs, generatePin, schema };

package/dist/index.js

@@ -1,27 +1,344 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+
+// plugin.schema.json
+var require_plugin_schema = __commonJS({
+  "plugin.schema.json"(exports, module) {
+    module.exports = {
+      IMsRequestApi: {
+        components: {
+          schemas: {
+            IClientIssueRequest: {
+              type: "object",
+              properties: {
+                authenticationInfo: {
+                  $ref: "#/components/schemas/IMsAuthenticationClientCredentialArgs"
+                },
+                clientIssuanceConfig: {
+                  $ref: "#/components/schemas/IClientIssuanceConfig"
+                },
+                claims: {
+                  $ref: "#/components/schemas/CredentialSubject"
+                }
+              },
+              required: [
+                "authenticationInfo",
+                "clientIssuanceConfig",
+                "claims"
+              ],
+              additionalProperties: false
+            },
+            IMsAuthenticationClientCredentialArgs: {
+              type: "object",
+              properties: {
+                azClientId: {
+                  type: "string"
+                },
+                azTenantId: {
+                  type: "string"
+                },
+                azClientSecret: {
+                  type: "string"
+                },
+                credentialManifestUrl: {
+                  type: "string"
+                },
+                authority: {
+                  type: "string"
+                },
+                region: {
+                  type: "string"
+                },
+                scopes: {
+                  type: "array",
+                  items: {
+                    type: "string"
+                  }
+                },
+                skipCache: {
+                  type: "boolean"
+                },
+                piiLoggingEnabled: {
+                  type: "boolean"
+                },
+                logLevel: {
+                  $ref: "#/components/schemas/LogLevel"
+                }
+              },
+              required: [
+                "azClientId",
+                "azTenantId",
+                "azClientSecret"
+              ],
+              additionalProperties: false,
+              description: "azClientId: clientId of the application you're trying to login azClientSecret: secret of the application you're trying to login azTenantId: your MS Azure tenantId credentialManifestUrl: url of your credential manifest. usually in following format:  https://beta.eu.did.msidentity.com/v1.0/<tenant_id>/verifiableCredential/contracts/<verifiable_credential_schema> authority: optional. if not provided, we'll use the azClientId to create the Tenanted format if provided should be one of these two formats:  - Tenanted: https://login.microsoftonline.com/{tenant}/, where {tenant} is either the GUID representing the tenant ID or a domain name associated with the tenant.  - Work and school accounts: https://login.microsoftonline.com/organizations/. region?: if present will use the provided, if not will make a request to determine the region scopes?: scopes that you want to access via this authentication skipCache?: whether to skip cache piiLoggingEnabled?: if not provided defaults to false logLevel?: can be one of these values:   Error = 0,   Warning = 1,   Info = 2,   Verbose = 3,   Trace = 4   if not provided defaults to LogLevel.Verbose"
+            },
+            LogLevel: {
+              type: "number",
+              enum: [
+                0,
+                1,
+                2,
+                3,
+                4
+              ],
+              description: "Log message level."
+            },
+            IClientIssuanceConfig: {
+              type: "object",
+              properties: {
+                authority: {
+                  type: "string"
+                },
+                includeQRCode: {
+                  type: "boolean"
+                },
+                registration: {
+                  $ref: "#/components/schemas/Registration"
+                },
+                callback: {
+                  $ref: "#/components/schemas/Callback"
+                },
+                issuance: {
+                  $ref: "#/components/schemas/IClientIssuance"
+                }
+              },
+              required: [
+                "authority",
+                "includeQRCode",
+                "registration",
+                "callback",
+                "issuance"
+              ],
+              additionalProperties: false
+            },
+            Registration: {
+              type: "object",
+              properties: {
+                clientName: {
+                  type: "string"
+                }
+              },
+              required: [
+                "clientName"
+              ],
+              additionalProperties: false
+            },
+            Callback: {
+              type: "object",
+              properties: {
+                url: {
+                  type: "string"
+                },
+                state: {
+                  type: "string"
+                },
+                headers: {
+                  $ref: "#/components/schemas/Headers"
+                }
+              },
+              required: [
+                "url",
+                "state",
+                "headers"
+              ],
+              additionalProperties: false
+            },
+            Headers: {
+              type: "object",
+              properties: {
+                apiKey: {
+                  type: "string"
+                }
+              },
+              required: [
+                "apiKey"
+              ],
+              additionalProperties: false
+            },
+            IClientIssuance: {
+              type: "object",
+              properties: {
+                type: {
+                  type: "string"
+                },
+                manifest: {
+                  type: "string"
+                },
+                pin: {
+                  $ref: "#/components/schemas/Pin"
+                }
+              },
+              required: [
+                "type",
+                "manifest",
+                "pin"
+              ],
+              additionalProperties: false
+            },
+            Pin: {
+              type: "object",
+              properties: {
+                value: {
+                  type: "string"
+                },
+                length: {
+                  type: "number"
+                }
+              },
+              required: [
+                "value",
+                "length"
+              ],
+              additionalProperties: false
+            },
+            CredentialSubject: {
+              type: "object"
+            },
+            IIssueRequestResponse: {
+              type: "object",
+              properties: {
+                id: {
+                  type: "string"
+                },
+                requestId: {
+                  type: "string"
+                },
+                url: {
+                  type: "string"
+                },
+                expiry: {
+                  type: "string",
+                  format: "date-time"
+                },
+                pin: {
+                  type: "string"
+                }
+              },
+              required: [
+                "id",
+                "requestId",
+                "url",
+                "expiry",
+                "pin"
+              ],
+              additionalProperties: false
+            }
+          },
+          methods: {
+            issuanceRequestMsVc: {
+              description: "",
+              arguments: {
+                $ref: "#/components/schemas/IClientIssueRequest"
+              },
+              returnType: {
+                $ref: "#/components/schemas/IIssueRequestResponse"
+              }
+            }
+          }
+        }
+      }
+    };
+  }
+});
+
+// src/agent/MsRequestApi.ts
+import { assertEntraCredentialManifestUrlInCorrectRegion, determineMSAuthId, getMSClientCredentialAccessToken, newMSClientCredentialAuthenticator } from "@sphereon/ssi-sdk.ms-authenticator";
+
+// src/IssuerUtil.ts
+import { fetch } from "cross-fetch";
+async function fetchIssuanceRequestMs(issuanceInfo, accessToken, msIdentityHostName) {
+  const requestEndpoint = `${msIdentityHostName}${issuanceInfo.authenticationInfo.azTenantId}/verifiablecredentials/request`;
+  const payload = JSON.stringify(issuanceInfo.issuanceConfig);
+  const fetchOptions = {
+    method: "POST",
+    body: payload,
+    headers: {
+      "Content-Type": "application/json",
+      "Content-Length": payload.length.toString(),
+      Authorization: `Bearer ${accessToken}`
+    }
+  };
+  const response = await fetch(requestEndpoint, fetchOptions);
+  return await response.json();
+}
+__name(fetchIssuanceRequestMs, "fetchIssuanceRequestMs");
+function generatePin(digits) {
+  const add = 1;
+  let max = 12 - add;
+  max = Math.pow(10, digits + add);
+  const min = max / 10;
+  const number = Math.floor(Math.random() * (max - min + 1)) + min;
+  return ("" + number).substring(add);
+}
+__name(generatePin, "generatePin");
+
+// src/agent/MsRequestApi.ts
+var MsRequestApi = class {
+  static {
+    __name(this, "MsRequestApi");
+  }
+  clients = /* @__PURE__ */ new Map();
+  methods = {
+    issuanceRequestMsVc: this.issuanceRequestMsVc.bind(this)
+  };
+  /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */
+  async issuanceRequestMsVc(clientIssueRequest, context) {
+    const id = determineMSAuthId(clientIssueRequest.authenticationInfo);
+    if (!this.clients.has(id)) {
+      this.clients.set(id, await newMSClientCredentialAuthenticator(clientIssueRequest.authenticationInfo));
+    }
+    const clientInfo = this.clients.get(id);
+    if (!clientInfo) {
+      throw Error(`Could not get client from arguments for id: ${id}`);
+    }
+    const authResult = await getMSClientCredentialAccessToken(clientIssueRequest.authenticationInfo, {
+      confidentialClient: clientInfo.confidentialClient
+    });
+    const accessToken = authResult.accessToken;
+    const msIdentityHostName = await assertEntraCredentialManifestUrlInCorrectRegion(clientIssueRequest.authenticationInfo);
+    if (!clientIssueRequest.authenticationInfo.azTenantId) {
+      throw new Error("azTenantId is missing.");
     }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+    if (clientIssueRequest.clientIssuanceConfig.issuance.pin) {
+      clientIssueRequest.clientIssuanceConfig.issuance.pin.value = generatePin(clientIssueRequest.clientIssuanceConfig.issuance.pin.length);
+    }
+    const issuance = {
+      type: clientIssueRequest.clientIssuanceConfig.issuance.type,
+      manifest: clientIssueRequest.clientIssuanceConfig.issuance.manifest,
+      pin: clientIssueRequest.clientIssuanceConfig.issuance.pin,
+      claims: clientIssueRequest.claims
+    };
+    const issuanceConfig = {
+      authority: clientIssueRequest.clientIssuanceConfig.authority,
+      includeQRCode: clientIssueRequest.clientIssuanceConfig.includeQRCode,
+      registration: clientIssueRequest.clientIssuanceConfig.registration,
+      callback: clientIssueRequest.clientIssuanceConfig.callback,
+      issuance
+    };
+    const issueRequest = {
+      authenticationInfo: clientIssueRequest.authenticationInfo,
+      issuanceConfig
+    };
+    const resp = await fetchIssuanceRequestMs(issueRequest, accessToken, msIdentityHostName);
+    resp.id = issueRequest.issuanceConfig.callback.state;
+    if (issueRequest.issuanceConfig.issuance.pin) {
+      resp.pin = issueRequest.issuanceConfig.issuance.pin.value;
+    }
+    return resp;
+  }
+};
+
+// src/index.ts
+var schema = require_plugin_schema();
+export {
+  MsRequestApi,
+  fetchIssuanceRequestMs,
+  generatePin,
+  schema
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MsRequestApi = exports.schema = void 0;
-/**
- * @public
- */
-const schema = require('../plugin.schema.json');
-exports.schema = schema;
-var MsRequestApi_1 = require("./agent/MsRequestApi");
-Object.defineProperty(exports, "MsRequestApi", { enumerable: true, get: function () { return MsRequestApi_1.MsRequestApi; } });
-__exportStar(require("./types/IMsRequestApi"), exports);
-__exportStar(require("./IssuerUtil"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;GAEG;AACH,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;AACtC,wBAAM;AACf,qDAAmD;AAA1C,4GAAA,YAAY,OAAA;AACrB,wDAAqC;AACrC,+CAA4B"}
+{"version":3,"sources":["../plugin.schema.json","../src/agent/MsRequestApi.ts","../src/IssuerUtil.ts","../src/index.ts"],"sourcesContent":["{\n  \"IMsRequestApi\": {\n    \"components\": {\n      \"schemas\": {\n        \"IClientIssueRequest\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"authenticationInfo\": {\n              \"$ref\": \"#/components/schemas/IMsAuthenticationClientCredentialArgs\"\n            },\n            \"clientIssuanceConfig\": {\n              \"$ref\": \"#/components/schemas/IClientIssuanceConfig\"\n            },\n            \"claims\": {\n              \"$ref\": \"#/components/schemas/CredentialSubject\"\n            }\n          },\n          \"required\": [\n            \"authenticationInfo\",\n            \"clientIssuanceConfig\",\n            \"claims\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"IMsAuthenticationClientCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"azClientId\": {\n              \"type\": \"string\"\n            },\n            \"azTenantId\": {\n              \"type\": \"string\"\n            },\n            \"azClientSecret\": {\n              \"type\": \"string\"\n            },\n            \"credentialManifestUrl\": {\n              \"type\": \"string\"\n            },\n            \"authority\": {\n              \"type\": \"string\"\n            },\n            \"region\": {\n              \"type\": \"string\"\n            },\n            \"scopes\": {\n              \"type\": \"array\",\n              \"items\": {\n                \"type\": \"string\"\n              }\n            },\n            \"skipCache\": {\n              \"type\": \"boolean\"\n            },\n            \"piiLoggingEnabled\": {\n              \"type\": \"boolean\"\n            },\n            \"logLevel\": {\n              \"$ref\": \"#/components/schemas/LogLevel\"\n            }\n          },\n          \"required\": [\n            \"azClientId\",\n            \"azTenantId\",\n            \"azClientSecret\"\n          ],\n          \"additionalProperties\": false,\n          \"description\": \"azClientId: clientId of the application you're trying to login azClientSecret: secret of the application you're trying to login azTenantId: your MS Azure tenantId credentialManifestUrl: url of your credential manifest. usually in following format:  https://beta.eu.did.msidentity.com/v1.0/<tenant_id>/verifiableCredential/contracts/<verifiable_credential_schema> authority: optional. if not provided, we'll use the azClientId to create the Tenanted format if provided should be one of these two formats:  - Tenanted: https://login.microsoftonline.com/{tenant}/, where {tenant} is either the GUID representing the tenant ID or a domain name associated with the tenant.  - Work and school accounts: https://login.microsoftonline.com/organizations/. region?: if present will use the provided, if not will make a request to determine the region scopes?: scopes that you want to access via this authentication skipCache?: whether to skip cache piiLoggingEnabled?: if not provided defaults to false logLevel?: can be one of these values:   Error = 0,   Warning = 1,   Info = 2,   Verbose = 3,   Trace = 4   if not provided defaults to LogLevel.Verbose\"\n        },\n        \"LogLevel\": {\n          \"type\": \"number\",\n          \"enum\": [\n            0,\n            1,\n            2,\n            3,\n            4\n          ],\n          \"description\": \"Log message level.\"\n        },\n        \"IClientIssuanceConfig\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"authority\": {\n              \"type\": \"string\"\n            },\n            \"includeQRCode\": {\n              \"type\": \"boolean\"\n            },\n            \"registration\": {\n              \"$ref\": \"#/components/schemas/Registration\"\n            },\n            \"callback\": {\n              \"$ref\": \"#/components/schemas/Callback\"\n            },\n            \"issuance\": {\n              \"$ref\": \"#/components/schemas/IClientIssuance\"\n            }\n          },\n          \"required\": [\n            \"authority\",\n            \"includeQRCode\",\n            \"registration\",\n            \"callback\",\n            \"issuance\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"Registration\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"clientName\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"clientName\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"Callback\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"url\": {\n              \"type\": \"string\"\n            },\n            \"state\": {\n              \"type\": \"string\"\n            },\n            \"headers\": {\n              \"$ref\": \"#/components/schemas/Headers\"\n            }\n          },\n          \"required\": [\n            \"url\",\n            \"state\",\n            \"headers\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"Headers\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"apiKey\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"apiKey\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"IClientIssuance\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"type\": {\n              \"type\": \"string\"\n            },\n            \"manifest\": {\n              \"type\": \"string\"\n            },\n            \"pin\": {\n              \"$ref\": \"#/components/schemas/Pin\"\n            }\n          },\n          \"required\": [\n            \"type\",\n            \"manifest\",\n            \"pin\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"Pin\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"value\": {\n              \"type\": \"string\"\n            },\n            \"length\": {\n              \"type\": \"number\"\n            }\n          },\n          \"required\": [\n            \"value\",\n            \"length\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"CredentialSubject\": {\n          \"type\": \"object\"\n        },\n        \"IIssueRequestResponse\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"requestId\": {\n              \"type\": \"string\"\n            },\n            \"url\": {\n              \"type\": \"string\"\n            },\n            \"expiry\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            },\n            \"pin\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"requestId\",\n            \"url\",\n            \"expiry\",\n            \"pin\"\n          ],\n          \"additionalProperties\": false\n        }\n      },\n      \"methods\": {\n        \"issuanceRequestMsVc\": {\n          \"description\": \"\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/IClientIssueRequest\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/IIssueRequestResponse\"\n          }\n        }\n      }\n    }\n  }\n}","import {\n  assertEntraCredentialManifestUrlInCorrectRegion,\n  IMSClientCredentialAuthInfo,\n  determineMSAuthId,\n  getMSClientCredentialAccessToken,\n  newMSClientCredentialAuthenticator,\n} from '@sphereon/ssi-sdk.ms-authenticator'\nimport { IAgentPlugin } from '@veramo/core'\nimport { fetchIssuanceRequestMs, generatePin } from '../IssuerUtil'\nimport {\n  IClientIssueRequest,\n  IIssueRequest,\n  IIssueRequestResponse,\n  IMsRequestApi,\n  IRequiredContext,\n  Issuance,\n  IssuanceConfig,\n} from '../types/IMsRequestApi'\n\n/**\n * {@inheritDoc IMsRequestApi}\n */\nexport class MsRequestApi implements IAgentPlugin {\n  private clients: Map<string, IMSClientCredentialAuthInfo> = new Map<string, IMSClientCredentialAuthInfo>()\n\n  readonly methods: IMsRequestApi = {\n    issuanceRequestMsVc: this.issuanceRequestMsVc.bind(this),\n  }\n\n  /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */\n  private async issuanceRequestMsVc(clientIssueRequest: IClientIssueRequest, context: IRequiredContext): Promise<IIssueRequestResponse> {\n    const id = determineMSAuthId(clientIssueRequest.authenticationInfo)\n    if (!this.clients.has(id)) {\n      this.clients.set(id, await newMSClientCredentialAuthenticator(clientIssueRequest.authenticationInfo))\n    }\n    const clientInfo = this.clients.get(id)\n    if (!clientInfo) {\n      throw Error(`Could not get client from arguments for id: ${id}`)\n    }\n    const authResult = await getMSClientCredentialAccessToken(clientIssueRequest.authenticationInfo, {\n      confidentialClient: clientInfo.confidentialClient,\n    })\n    const accessToken = authResult.accessToken\n\n    const msIdentityHostName = await assertEntraCredentialManifestUrlInCorrectRegion(clientIssueRequest.authenticationInfo)\n\n    // Config Request and App Config File should be a parameter to this function\n    if (!clientIssueRequest.authenticationInfo.azTenantId) {\n      throw new Error('azTenantId is missing.')\n    }\n\n    // check if pin is required, if found make sure we set a new random pin\n    // pincode is only used when the payload contains claim value pairs which results in an IDTokenhint\n    if (clientIssueRequest.clientIssuanceConfig.issuance.pin) {\n      clientIssueRequest.clientIssuanceConfig.issuance.pin.value = generatePin(clientIssueRequest.clientIssuanceConfig.issuance.pin.length)\n    }\n\n    const issuance: Issuance = {\n      type: clientIssueRequest.clientIssuanceConfig.issuance.type,\n      manifest: clientIssueRequest.clientIssuanceConfig.issuance.manifest,\n      pin: clientIssueRequest.clientIssuanceConfig.issuance.pin,\n      claims: clientIssueRequest.claims,\n    }\n\n    const issuanceConfig: IssuanceConfig = {\n      authority: clientIssueRequest.clientIssuanceConfig.authority,\n      includeQRCode: clientIssueRequest.clientIssuanceConfig.includeQRCode,\n      registration: clientIssueRequest.clientIssuanceConfig.registration,\n      callback: clientIssueRequest.clientIssuanceConfig.callback,\n      issuance: issuance,\n    }\n    const issueRequest: IIssueRequest = {\n      authenticationInfo: clientIssueRequest.authenticationInfo,\n      issuanceConfig: issuanceConfig,\n    }\n\n    const resp = await fetchIssuanceRequestMs(issueRequest, accessToken, msIdentityHostName)\n\n    // the response from the VC Request API call is returned to the caller (the UI). It contains the URI to the request which Authenticator can download after\n    // it has scanned the QR code. If the payload requested the VC Request service to create the QR code that is returned as well\n    // the javascript in the UI will use that QR code to display it on the screen to the user.\n    resp.id = issueRequest.issuanceConfig.callback.state // add session id so browser can pull status\n    if (issueRequest.issuanceConfig.issuance.pin) {\n      resp.pin = issueRequest.issuanceConfig.issuance.pin.value // add pin code so browser can display it\n    }\n    return resp\n  }\n}\n","import { IIssueRequest, IIssueRequestResponse } from './types/IMsRequestApi'\n\nimport { fetch } from 'cross-fetch'\nexport async function fetchIssuanceRequestMs(\n  issuanceInfo: IIssueRequest,\n  accessToken: string,\n  msIdentityHostName: string,\n): Promise<IIssueRequestResponse> {\n  const requestEndpoint = `${msIdentityHostName}${issuanceInfo.authenticationInfo.azTenantId}/verifiablecredentials/request`\n\n  const payload = JSON.stringify(issuanceInfo.issuanceConfig)\n  const fetchOptions = {\n    method: 'POST',\n    body: payload,\n    headers: {\n      'Content-Type': 'application/json',\n      'Content-Length': payload.length.toString(),\n      Authorization: `Bearer ${accessToken}`,\n    },\n  }\n  const response = await fetch(requestEndpoint, fetchOptions)\n  return await response.json()\n}\n\nexport function generatePin(digits: number) {\n  const add = 1\n  let max = 12 - add\n  max = Math.pow(10, digits + add)\n  const min = max / 10 // Math.pow(10, n) basically\n  const number = Math.floor(Math.random() * (max - min + 1)) + min\n  return ('' + number).substring(add)\n}\n","/**\n * @public\n */\nconst schema = require('../plugin.schema.json')\nexport { schema }\nexport { MsRequestApi } from './agent/MsRequestApi'\nexport * from './types/IMsRequestApi'\nexport * from './IssuerUtil'\n"],"mappings":";;;;;;;;AAAA;AAAA;AAAA;AAAA,MACE,eAAiB;AAAA,QACf,YAAc;AAAA,UACZ,SAAW;AAAA,YACT,qBAAuB;AAAA,cACrB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,oBAAsB;AAAA,kBACpB,MAAQ;AAAA,gBACV;AAAA,gBACA,sBAAwB;AAAA,kBACtB,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,YAC1B;AAAA,YACA,uCAAyC;AAAA,cACvC,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,gBACA,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,gBACA,gBAAkB;AAAA,kBAChB,MAAQ;AAAA,gBACV;AAAA,gBACA,uBAAyB;AAAA,kBACvB,MAAQ;AAAA,gBACV;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,kBACR,OAAS;AAAA,oBACP,MAAQ;AAAA,kBACV;AAAA,gBACF;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,mBAAqB;AAAA,kBACnB,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,cACxB,aAAe;AAAA,YACjB;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,MAAQ;AAAA,gBACN;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,aAAe;AAAA,YACjB;AAAA,YACA,uBAAyB;AAAA,cACvB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,eAAiB;AAAA,kBACf,MAAQ;AAAA,gBACV;AAAA,gBACA,cAAgB;AAAA,kBACd,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,YAC1B;AAAA,YACA,cAAgB;AAAA,cACd,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,YAC1B;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,gBACA,OAAS;AAAA,kBACP,MAAQ;AAAA,gBACV;AAAA,gBACA,SAAW;AAAA,kBACT,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,YAC1B;AAAA,YACA,SAAW;AAAA,cACT,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,YAC1B;AAAA,YACA,iBAAmB;AAAA,cACjB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,MAAQ;AAAA,kBACN,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,YAC1B;AAAA,YACA,KAAO;AAAA,cACL,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,OAAS;AAAA,kBACP,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,gBACA;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,YAC1B;AAAA,YACA,mBAAqB;AAAA,cACnB,MAAQ;AAAA,YACV;AAAA,YACA,uBAAyB;AAAA,cACvB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,IAAM;AAAA,kBACJ,MAAQ;AAAA,gBACV;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,kBACR,QAAU;AAAA,gBACZ;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY;AAAA,gBACV;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,sBAAwB;AAAA,YAC1B;AAAA,UACF;AAAA,UACA,SAAW;AAAA,YACT,qBAAuB;AAAA,cACrB,aAAe;AAAA,cACf,WAAa;AAAA,gBACX,MAAQ;AAAA,cACV;AAAA,cACA,YAAc;AAAA,gBACZ,MAAQ;AAAA,cACV;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;AC1OA,SACEA,iDAEAC,mBACAC,kCACAC,0CACK;;;ACJP,SAASC,aAAa;AACtB,eAAsBC,uBACpBC,cACAC,aACAC,oBAA0B;AAE1B,QAAMC,kBAAkB,GAAGD,kBAAAA,GAAqBF,aAAaI,mBAAmBC,UAAU;AAE1F,QAAMC,UAAUC,KAAKC,UAAUR,aAAaS,cAAc;AAC1D,QAAMC,eAAe;IACnBC,QAAQ;IACRC,MAAMN;IACNO,SAAS;MACP,gBAAgB;MAChB,kBAAkBP,QAAQQ,OAAOC,SAAQ;MACzCC,eAAe,UAAUf,WAAAA;IAC3B;EACF;AACA,QAAMgB,WAAW,MAAMC,MAAMf,iBAAiBO,YAAAA;AAC9C,SAAO,MAAMO,SAASE,KAAI;AAC5B;AAnBsBpB;AAqBf,SAASqB,YAAYC,QAAc;AACxC,QAAMC,MAAM;AACZ,MAAIC,MAAM,KAAKD;AACfC,QAAMC,KAAKC,IAAI,IAAIJ,SAASC,GAAAA;AAC5B,QAAMI,MAAMH,MAAM;AAClB,QAAMI,SAASH,KAAKI,MAAMJ,KAAKK,OAAM,KAAMN,MAAMG,MAAM,EAAA,IAAMA;AAC7D,UAAQ,KAAKC,QAAQG,UAAUR,GAAAA;AACjC;AAPgBF;;;ADFT,IAAMW,eAAN,MAAMA;EAtBb,OAsBaA;;;EACHC,UAAoD,oBAAIC,IAAAA;EAEvDC,UAAyB;IAChCC,qBAAqB,KAAKA,oBAAoBC,KAAK,IAAI;EACzD;;EAGA,MAAcD,oBAAoBE,oBAAyCC,SAA2D;AACpI,UAAMC,KAAKC,kBAAkBH,mBAAmBI,kBAAkB;AAClE,QAAI,CAAC,KAAKT,QAAQU,IAAIH,EAAAA,GAAK;AACzB,WAAKP,QAAQW,IAAIJ,IAAI,MAAMK,mCAAmCP,mBAAmBI,kBAAkB,CAAA;IACrG;AACA,UAAMI,aAAa,KAAKb,QAAQc,IAAIP,EAAAA;AACpC,QAAI,CAACM,YAAY;AACf,YAAME,MAAM,+CAA+CR,EAAAA,EAAI;IACjE;AACA,UAAMS,aAAa,MAAMC,iCAAiCZ,mBAAmBI,oBAAoB;MAC/FS,oBAAoBL,WAAWK;IACjC,CAAA;AACA,UAAMC,cAAcH,WAAWG;AAE/B,UAAMC,qBAAqB,MAAMC,gDAAgDhB,mBAAmBI,kBAAkB;AAGtH,QAAI,CAACJ,mBAAmBI,mBAAmBa,YAAY;AACrD,YAAM,IAAIP,MAAM,wBAAA;IAClB;AAIA,QAAIV,mBAAmBkB,qBAAqBC,SAASC,KAAK;AACxDpB,yBAAmBkB,qBAAqBC,SAASC,IAAIC,QAAQC,YAAYtB,mBAAmBkB,qBAAqBC,SAASC,IAAIG,MAAM;IACtI;AAEA,UAAMJ,WAAqB;MACzBK,MAAMxB,mBAAmBkB,qBAAqBC,SAASK;MACvDC,UAAUzB,mBAAmBkB,qBAAqBC,SAASM;MAC3DL,KAAKpB,mBAAmBkB,qBAAqBC,SAASC;MACtDM,QAAQ1B,mBAAmB0B;IAC7B;AAEA,UAAMC,iBAAiC;MACrCC,WAAW5B,mBAAmBkB,qBAAqBU;MACnDC,eAAe7B,mBAAmBkB,qBAAqBW;MACvDC,cAAc9B,mBAAmBkB,qBAAqBY;MACtDC,UAAU/B,mBAAmBkB,qBAAqBa;MAClDZ;IACF;AACA,UAAMa,eAA8B;MAClC5B,oBAAoBJ,mBAAmBI;MACvCuB;IACF;AAEA,UAAMM,OAAO,MAAMC,uBAAuBF,cAAclB,aAAaC,kBAAAA;AAKrEkB,SAAK/B,KAAK8B,aAAaL,eAAeI,SAASI;AAC/C,QAAIH,aAAaL,eAAeR,SAASC,KAAK;AAC5Ca,WAAKb,MAAMY,aAAaL,eAAeR,SAASC,IAAIC;IACtD;AACA,WAAOY;EACT;AACF;;;AEpFA,IAAMG,SAASC;","names":["assertEntraCredentialManifestUrlInCorrectRegion","determineMSAuthId","getMSClientCredentialAccessToken","newMSClientCredentialAuthenticator","fetch","fetchIssuanceRequestMs","issuanceInfo","accessToken","msIdentityHostName","requestEndpoint","authenticationInfo","azTenantId","payload","JSON","stringify","issuanceConfig","fetchOptions","method","body","headers","length","toString","Authorization","response","fetch","json","generatePin","digits","add","max","Math","pow","min","number","floor","random","substring","MsRequestApi","clients","Map","methods","issuanceRequestMsVc","bind","clientIssueRequest","context","id","determineMSAuthId","authenticationInfo","has","set","newMSClientCredentialAuthenticator","clientInfo","get","Error","authResult","getMSClientCredentialAccessToken","confidentialClient","accessToken","msIdentityHostName","assertEntraCredentialManifestUrlInCorrectRegion","azTenantId","clientIssuanceConfig","issuance","pin","value","generatePin","length","type","manifest","claims","issuanceConfig","authority","includeQRCode","registration","callback","issueRequest","resp","fetchIssuanceRequestMs","state","schema","require"]}

package/package.json

@@ -1,30 +1,41 @@
 {
   "name": "@sphereon/ssi-sdk.ms-request-api",
-  "version": "0.33.0",
+  "version": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
   "source": "src/index.ts",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    "react-native": "./dist/index.js",
+    "import": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "require": {
+      "types": "./dist/index.d.cts",
+      "require": "./dist/index.cjs"
+    }
+  },
   "veramo": {
     "pluginInterfaces": {
       "IMsRequestApi": "./src/types/IMsRequestApi.ts"
     }
   },
   "scripts": {
-    "build": "tsc --build",
-    "build:clean": "tsc --build --clean && tsc --build",
+    "build": "tsup --config ../../tsup.config.ts --tsconfig ../../tsconfig.tsup.json",
     "generate-plugin-schema": "ts-node ../../packages/dev/bin/sphereon.js dev generate-plugin-schema"
   },
   "dependencies": {
-    "@sphereon/ssi-sdk.ms-authenticator": "0.33.0",
+    "@sphereon/ssi-sdk.ms-authenticator": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
     "@veramo/core": "4.2.0",
     "cross-fetch": "^3.1.8"
   },
   "devDependencies": {
-    "@sphereon/ssi-sdk.agent-config": "0.33.0",
-    "@sphereon/ssi-sdk.credential-store": "0.33.0",
+    "@sphereon/ssi-sdk.agent-config": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
+    "@sphereon/ssi-sdk.credential-store": "0.33.1-feature.jose.vcdm.55+6f02f6f8",
     "@types/express": "^4.17.21",
     "@types/express-session": "^1.18.0",
-    "@types/jest": "^27.5.2",
     "@types/node": "^20.17.1",
     "@types/uuid": "^9.0.8",
     "@veramo/data-store": "4.2.0",
@@ -32,17 +43,15 @@
     "@veramo/remote-server": "4.2.0",
     "express": "^4.19.2",
     "express-session": "^1.18.0",
-    "jest": "^27.5.1",
     "prettier": "^2.8.8",
     "sqlite3": "^5.1.7",
-    "ts-jest": "^27.1.5",
-    "typeorm": "^0.3.21",
-    "typescript": "5.4.2",
+    "typeorm": "0.3.20",
+    "typescript": "5.8.3",
     "uuid": "^9.0.1"
   },
   "files": [
-    "dist/**/*",
-    "src/**/*",
+    "dist",
+    "src",
     "README.md",
     "plugin.schema.json",
     "LICENSE"
@@ -65,6 +74,5 @@
     "API",
     "Issuer"
   ],
-  "nx": {},
-  "gitHead": "c575bdd6642bda761881f0152e0a70ddc82d7f61"
+  "gitHead": "6f02f6f83679198268c6e1ea956be24cc1017234"
 }

package/plugin.schema.json

@@ -19,7 +19,8 @@
             "authenticationInfo",
             "clientIssuanceConfig",
             "claims"
-          ]
+          ],
+          "additionalProperties": false
         },
         "IMsAuthenticationClientCredentialArgs": {
           "type": "object",
@@ -63,6 +64,7 @@
             "azTenantId",
             "azClientSecret"
           ],
+          "additionalProperties": false,
           "description": "azClientId: clientId of the application you're trying to login azClientSecret: secret of the application you're trying to login azTenantId: your MS Azure tenantId credentialManifestUrl: url of your credential manifest. usually in following format:  https://beta.eu.did.msidentity.com/v1.0/<tenant_id>/verifiableCredential/contracts/<verifiable_credential_schema> authority: optional. if not provided, we'll use the azClientId to create the Tenanted format if provided should be one of these two formats:  - Tenanted: https://login.microsoftonline.com/{tenant}/, where {tenant} is either the GUID representing the tenant ID or a domain name associated with the tenant.  - Work and school accounts: https://login.microsoftonline.com/organizations/. region?: if present will use the provided, if not will make a request to determine the region scopes?: scopes that you want to access via this authentication skipCache?: whether to skip cache piiLoggingEnabled?: if not provided defaults to false logLevel?: can be one of these values:   Error = 0,   Warning = 1,   Info = 2,   Verbose = 3,   Trace = 4   if not provided defaults to LogLevel.Verbose"
         },
         "LogLevel": {
@@ -101,7 +103,8 @@
             "registration",
             "callback",
             "issuance"
-          ]
+          ],
+          "additionalProperties": false
         },
         "Registration": {
           "type": "object",
@@ -112,7 +115,8 @@
           },
           "required": [
             "clientName"
-          ]
+          ],
+          "additionalProperties": false
         },
         "Callback": {
           "type": "object",
@@ -131,7 +135,8 @@
             "url",
             "state",
             "headers"
-          ]
+          ],
+          "additionalProperties": false
         },
         "Headers": {
           "type": "object",
@@ -142,7 +147,8 @@
           },
           "required": [
             "apiKey"
-          ]
+          ],
+          "additionalProperties": false
         },
         "IClientIssuance": {
           "type": "object",
@@ -161,7 +167,8 @@
             "type",
             "manifest",
             "pin"
-          ]
+          ],
+          "additionalProperties": false
         },
         "Pin": {
           "type": "object",
@@ -176,7 +183,8 @@
           "required": [
             "value",
             "length"
-          ]
+          ],
+          "additionalProperties": false
         },
         "CredentialSubject": {
           "type": "object"
@@ -207,7 +215,8 @@
             "url",
             "expiry",
             "pin"
-          ]
+          ],
+          "additionalProperties": false
         }
       },
       "methods": {