@sphereon/ssi-sdk.ms-request-api 0.33.1-next.2 → 0.33.1-next.68

package/dist/index.cjs

@@ -0,0 +1,323 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// plugin.schema.json
+var require_plugin_schema = __commonJS({
+  "plugin.schema.json"(exports, module2) {
+    module2.exports = {
+      IMsRequestApi: {
+        components: {
+          schemas: {
+            IClientIssueRequest: {
+              type: "object",
+              properties: {
+                authenticationInfo: {
+                  $ref: "#/components/schemas/IMsAuthenticationClientCredentialArgs"
+                },
+                clientIssuanceConfig: {
+                  $ref: "#/components/schemas/IClientIssuanceConfig"
+                },
+                claims: {
+                  $ref: "#/components/schemas/CredentialSubject"
+                }
+              },
+              required: ["authenticationInfo", "clientIssuanceConfig", "claims"],
+              additionalProperties: false
+            },
+            IMsAuthenticationClientCredentialArgs: {
+              type: "object",
+              properties: {
+                azClientId: {
+                  type: "string"
+                },
+                azTenantId: {
+                  type: "string"
+                },
+                azClientSecret: {
+                  type: "string"
+                },
+                credentialManifestUrl: {
+                  type: "string"
+                },
+                authority: {
+                  type: "string"
+                },
+                region: {
+                  type: "string"
+                },
+                scopes: {
+                  type: "array",
+                  items: {
+                    type: "string"
+                  }
+                },
+                skipCache: {
+                  type: "boolean"
+                },
+                piiLoggingEnabled: {
+                  type: "boolean"
+                },
+                logLevel: {
+                  $ref: "#/components/schemas/LogLevel"
+                }
+              },
+              required: ["azClientId", "azTenantId", "azClientSecret"],
+              additionalProperties: false,
+              description: "azClientId: clientId of the application you're trying to login azClientSecret: secret of the application you're trying to login azTenantId: your MS Azure tenantId credentialManifestUrl: url of your credential manifest. usually in following format:  https://beta.eu.did.msidentity.com/v1.0/<tenant_id>/verifiableCredential/contracts/<verifiable_credential_schema> authority: optional. if not provided, we'll use the azClientId to create the Tenanted format if provided should be one of these two formats:  - Tenanted: https://login.microsoftonline.com/{tenant}/, where {tenant} is either the GUID representing the tenant ID or a domain name associated with the tenant.  - Work and school accounts: https://login.microsoftonline.com/organizations/. region?: if present will use the provided, if not will make a request to determine the region scopes?: scopes that you want to access via this authentication skipCache?: whether to skip cache piiLoggingEnabled?: if not provided defaults to false logLevel?: can be one of these values:   Error = 0,   Warning = 1,   Info = 2,   Verbose = 3,   Trace = 4   if not provided defaults to LogLevel.Verbose"
+            },
+            LogLevel: {
+              type: "number",
+              enum: [0, 1, 2, 3, 4],
+              description: "Log message level."
+            },
+            IClientIssuanceConfig: {
+              type: "object",
+              properties: {
+                authority: {
+                  type: "string"
+                },
+                includeQRCode: {
+                  type: "boolean"
+                },
+                registration: {
+                  $ref: "#/components/schemas/Registration"
+                },
+                callback: {
+                  $ref: "#/components/schemas/Callback"
+                },
+                issuance: {
+                  $ref: "#/components/schemas/IClientIssuance"
+                }
+              },
+              required: ["authority", "includeQRCode", "registration", "callback", "issuance"],
+              additionalProperties: false
+            },
+            Registration: {
+              type: "object",
+              properties: {
+                clientName: {
+                  type: "string"
+                }
+              },
+              required: ["clientName"],
+              additionalProperties: false
+            },
+            Callback: {
+              type: "object",
+              properties: {
+                url: {
+                  type: "string"
+                },
+                state: {
+                  type: "string"
+                },
+                headers: {
+                  $ref: "#/components/schemas/Headers"
+                }
+              },
+              required: ["url", "state", "headers"],
+              additionalProperties: false
+            },
+            Headers: {
+              type: "object",
+              properties: {
+                apiKey: {
+                  type: "string"
+                }
+              },
+              required: ["apiKey"],
+              additionalProperties: false
+            },
+            IClientIssuance: {
+              type: "object",
+              properties: {
+                type: {
+                  type: "string"
+                },
+                manifest: {
+                  type: "string"
+                },
+                pin: {
+                  $ref: "#/components/schemas/Pin"
+                }
+              },
+              required: ["type", "manifest", "pin"],
+              additionalProperties: false
+            },
+            Pin: {
+              type: "object",
+              properties: {
+                value: {
+                  type: "string"
+                },
+                length: {
+                  type: "number"
+                }
+              },
+              required: ["value", "length"],
+              additionalProperties: false
+            },
+            CredentialSubject: {
+              type: "object"
+            },
+            IIssueRequestResponse: {
+              type: "object",
+              properties: {
+                id: {
+                  type: "string"
+                },
+                requestId: {
+                  type: "string"
+                },
+                url: {
+                  type: "string"
+                },
+                expiry: {
+                  type: "string",
+                  format: "date-time"
+                },
+                pin: {
+                  type: "string"
+                }
+              },
+              required: ["id", "requestId", "url", "expiry", "pin"],
+              additionalProperties: false
+            }
+          },
+          methods: {
+            issuanceRequestMsVc: {
+              description: "",
+              arguments: {
+                $ref: "#/components/schemas/IClientIssueRequest"
+              },
+              returnType: {
+                $ref: "#/components/schemas/IIssueRequestResponse"
+              }
+            }
+          }
+        }
+      }
+    };
+  }
+});
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  MsRequestApi: () => MsRequestApi,
+  fetchIssuanceRequestMs: () => fetchIssuanceRequestMs,
+  generatePin: () => generatePin,
+  schema: () => schema
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/agent/MsRequestApi.ts
+var import_ssi_sdk = require("@sphereon/ssi-sdk.ms-authenticator");
+
+// src/IssuerUtil.ts
+var import_cross_fetch = require("cross-fetch");
+async function fetchIssuanceRequestMs(issuanceInfo, accessToken, msIdentityHostName) {
+  const requestEndpoint = `${msIdentityHostName}${issuanceInfo.authenticationInfo.azTenantId}/verifiablecredentials/request`;
+  const payload = JSON.stringify(issuanceInfo.issuanceConfig);
+  const fetchOptions = {
+    method: "POST",
+    body: payload,
+    headers: {
+      "Content-Type": "application/json",
+      "Content-Length": payload.length.toString(),
+      Authorization: `Bearer ${accessToken}`
+    }
+  };
+  const response = await (0, import_cross_fetch.fetch)(requestEndpoint, fetchOptions);
+  return await response.json();
+}
+__name(fetchIssuanceRequestMs, "fetchIssuanceRequestMs");
+function generatePin(digits) {
+  const add = 1;
+  let max = 12 - add;
+  max = Math.pow(10, digits + add);
+  const min = max / 10;
+  const number = Math.floor(Math.random() * (max - min + 1)) + min;
+  return ("" + number).substring(add);
+}
+__name(generatePin, "generatePin");
+
+// src/agent/MsRequestApi.ts
+var MsRequestApi = class {
+  static {
+    __name(this, "MsRequestApi");
+  }
+  clients = /* @__PURE__ */ new Map();
+  methods = {
+    issuanceRequestMsVc: this.issuanceRequestMsVc.bind(this)
+  };
+  /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */
+  async issuanceRequestMsVc(clientIssueRequest, context) {
+    const id = (0, import_ssi_sdk.determineMSAuthId)(clientIssueRequest.authenticationInfo);
+    if (!this.clients.has(id)) {
+      this.clients.set(id, await (0, import_ssi_sdk.newMSClientCredentialAuthenticator)(clientIssueRequest.authenticationInfo));
+    }
+    const clientInfo = this.clients.get(id);
+    if (!clientInfo) {
+      throw Error(`Could not get client from arguments for id: ${id}`);
+    }
+    const authResult = await (0, import_ssi_sdk.getMSClientCredentialAccessToken)(clientIssueRequest.authenticationInfo, {
+      confidentialClient: clientInfo.confidentialClient
+    });
+    const accessToken = authResult.accessToken;
+    const msIdentityHostName = await (0, import_ssi_sdk.assertEntraCredentialManifestUrlInCorrectRegion)(clientIssueRequest.authenticationInfo);
+    if (!clientIssueRequest.authenticationInfo.azTenantId) {
+      throw new Error("azTenantId is missing.");
+    }
+    if (clientIssueRequest.clientIssuanceConfig.issuance.pin) {
+      clientIssueRequest.clientIssuanceConfig.issuance.pin.value = generatePin(clientIssueRequest.clientIssuanceConfig.issuance.pin.length);
+    }
+    const issuance = {
+      type: clientIssueRequest.clientIssuanceConfig.issuance.type,
+      manifest: clientIssueRequest.clientIssuanceConfig.issuance.manifest,
+      pin: clientIssueRequest.clientIssuanceConfig.issuance.pin,
+      claims: clientIssueRequest.claims
+    };
+    const issuanceConfig = {
+      authority: clientIssueRequest.clientIssuanceConfig.authority,
+      includeQRCode: clientIssueRequest.clientIssuanceConfig.includeQRCode,
+      registration: clientIssueRequest.clientIssuanceConfig.registration,
+      callback: clientIssueRequest.clientIssuanceConfig.callback,
+      issuance
+    };
+    const issueRequest = {
+      authenticationInfo: clientIssueRequest.authenticationInfo,
+      issuanceConfig
+    };
+    const resp = await fetchIssuanceRequestMs(issueRequest, accessToken, msIdentityHostName);
+    resp.id = issueRequest.issuanceConfig.callback.state;
+    if (issueRequest.issuanceConfig.issuance.pin) {
+      resp.pin = issueRequest.issuanceConfig.issuance.pin.value;
+    }
+    return resp;
+  }
+};
+
+// src/index.ts
+var schema = require_plugin_schema();
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../plugin.schema.json","../src/index.ts","../src/agent/MsRequestApi.ts","../src/IssuerUtil.ts"],"sourcesContent":["{\n  \"IMsRequestApi\": {\n    \"components\": {\n      \"schemas\": {\n        \"IClientIssueRequest\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"authenticationInfo\": {\n              \"$ref\": \"#/components/schemas/IMsAuthenticationClientCredentialArgs\"\n            },\n            \"clientIssuanceConfig\": {\n              \"$ref\": \"#/components/schemas/IClientIssuanceConfig\"\n            },\n            \"claims\": {\n              \"$ref\": \"#/components/schemas/CredentialSubject\"\n            }\n          },\n          \"required\": [\"authenticationInfo\", \"clientIssuanceConfig\", \"claims\"],\n          \"additionalProperties\": false\n        },\n        \"IMsAuthenticationClientCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"azClientId\": {\n              \"type\": \"string\"\n            },\n            \"azTenantId\": {\n              \"type\": \"string\"\n            },\n            \"azClientSecret\": {\n              \"type\": \"string\"\n            },\n            \"credentialManifestUrl\": {\n              \"type\": \"string\"\n            },\n            \"authority\": {\n              \"type\": \"string\"\n            },\n            \"region\": {\n              \"type\": \"string\"\n            },\n            \"scopes\": {\n              \"type\": \"array\",\n              \"items\": {\n                \"type\": \"string\"\n              }\n            },\n            \"skipCache\": {\n              \"type\": \"boolean\"\n            },\n            \"piiLoggingEnabled\": {\n              \"type\": \"boolean\"\n            },\n            \"logLevel\": {\n              \"$ref\": \"#/components/schemas/LogLevel\"\n            }\n          },\n          \"required\": [\"azClientId\", \"azTenantId\", \"azClientSecret\"],\n          \"additionalProperties\": false,\n          \"description\": \"azClientId: clientId of the application you're trying to login azClientSecret: secret of the application you're trying to login azTenantId: your MS Azure tenantId credentialManifestUrl: url of your credential manifest. usually in following format:  https://beta.eu.did.msidentity.com/v1.0/<tenant_id>/verifiableCredential/contracts/<verifiable_credential_schema> authority: optional. if not provided, we'll use the azClientId to create the Tenanted format if provided should be one of these two formats:  - Tenanted: https://login.microsoftonline.com/{tenant}/, where {tenant} is either the GUID representing the tenant ID or a domain name associated with the tenant.  - Work and school accounts: https://login.microsoftonline.com/organizations/. region?: if present will use the provided, if not will make a request to determine the region scopes?: scopes that you want to access via this authentication skipCache?: whether to skip cache piiLoggingEnabled?: if not provided defaults to false logLevel?: can be one of these values:   Error = 0,   Warning = 1,   Info = 2,   Verbose = 3,   Trace = 4   if not provided defaults to LogLevel.Verbose\"\n        },\n        \"LogLevel\": {\n          \"type\": \"number\",\n          \"enum\": [0, 1, 2, 3, 4],\n          \"description\": \"Log message level.\"\n        },\n        \"IClientIssuanceConfig\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"authority\": {\n              \"type\": \"string\"\n            },\n            \"includeQRCode\": {\n              \"type\": \"boolean\"\n            },\n            \"registration\": {\n              \"$ref\": \"#/components/schemas/Registration\"\n            },\n            \"callback\": {\n              \"$ref\": \"#/components/schemas/Callback\"\n            },\n            \"issuance\": {\n              \"$ref\": \"#/components/schemas/IClientIssuance\"\n            }\n          },\n          \"required\": [\"authority\", \"includeQRCode\", \"registration\", \"callback\", \"issuance\"],\n          \"additionalProperties\": false\n        },\n        \"Registration\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"clientName\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\"clientName\"],\n          \"additionalProperties\": false\n        },\n        \"Callback\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"url\": {\n              \"type\": \"string\"\n            },\n            \"state\": {\n              \"type\": \"string\"\n            },\n            \"headers\": {\n              \"$ref\": \"#/components/schemas/Headers\"\n            }\n          },\n          \"required\": [\"url\", \"state\", \"headers\"],\n          \"additionalProperties\": false\n        },\n        \"Headers\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"apiKey\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\"apiKey\"],\n          \"additionalProperties\": false\n        },\n        \"IClientIssuance\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"type\": {\n              \"type\": \"string\"\n            },\n            \"manifest\": {\n              \"type\": \"string\"\n            },\n            \"pin\": {\n              \"$ref\": \"#/components/schemas/Pin\"\n            }\n          },\n          \"required\": [\"type\", \"manifest\", \"pin\"],\n          \"additionalProperties\": false\n        },\n        \"Pin\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"value\": {\n              \"type\": \"string\"\n            },\n            \"length\": {\n              \"type\": \"number\"\n            }\n          },\n          \"required\": [\"value\", \"length\"],\n          \"additionalProperties\": false\n        },\n        \"CredentialSubject\": {\n          \"type\": \"object\"\n        },\n        \"IIssueRequestResponse\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"requestId\": {\n              \"type\": \"string\"\n            },\n            \"url\": {\n              \"type\": \"string\"\n            },\n            \"expiry\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            },\n            \"pin\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\"id\", \"requestId\", \"url\", \"expiry\", \"pin\"],\n          \"additionalProperties\": false\n        }\n      },\n      \"methods\": {\n        \"issuanceRequestMsVc\": {\n          \"description\": \"\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/IClientIssueRequest\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/IIssueRequestResponse\"\n          }\n        }\n      }\n    }\n  }\n}\n","/**\n * @public\n */\nconst schema = require('../plugin.schema.json')\nexport { schema }\nexport { MsRequestApi } from './agent/MsRequestApi'\nexport * from './types/IMsRequestApi'\nexport * from './IssuerUtil'\n","import {\n  assertEntraCredentialManifestUrlInCorrectRegion,\n  IMSClientCredentialAuthInfo,\n  determineMSAuthId,\n  getMSClientCredentialAccessToken,\n  newMSClientCredentialAuthenticator,\n} from '@sphereon/ssi-sdk.ms-authenticator'\nimport { IAgentPlugin } from '@veramo/core'\nimport { fetchIssuanceRequestMs, generatePin } from '../IssuerUtil'\nimport {\n  IClientIssueRequest,\n  IIssueRequest,\n  IIssueRequestResponse,\n  IMsRequestApi,\n  IRequiredContext,\n  Issuance,\n  IssuanceConfig,\n} from '../types/IMsRequestApi'\n\n/**\n * {@inheritDoc IMsRequestApi}\n */\nexport class MsRequestApi implements IAgentPlugin {\n  private clients: Map<string, IMSClientCredentialAuthInfo> = new Map<string, IMSClientCredentialAuthInfo>()\n\n  readonly methods: IMsRequestApi = {\n    issuanceRequestMsVc: this.issuanceRequestMsVc.bind(this),\n  }\n\n  /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */\n  private async issuanceRequestMsVc(clientIssueRequest: IClientIssueRequest, context: IRequiredContext): Promise<IIssueRequestResponse> {\n    const id = determineMSAuthId(clientIssueRequest.authenticationInfo)\n    if (!this.clients.has(id)) {\n      this.clients.set(id, await newMSClientCredentialAuthenticator(clientIssueRequest.authenticationInfo))\n    }\n    const clientInfo = this.clients.get(id)\n    if (!clientInfo) {\n      throw Error(`Could not get client from arguments for id: ${id}`)\n    }\n    const authResult = await getMSClientCredentialAccessToken(clientIssueRequest.authenticationInfo, {\n      confidentialClient: clientInfo.confidentialClient,\n    })\n    const accessToken = authResult.accessToken\n\n    const msIdentityHostName = await assertEntraCredentialManifestUrlInCorrectRegion(clientIssueRequest.authenticationInfo)\n\n    // Config Request and App Config File should be a parameter to this function\n    if (!clientIssueRequest.authenticationInfo.azTenantId) {\n      throw new Error('azTenantId is missing.')\n    }\n\n    // check if pin is required, if found make sure we set a new random pin\n    // pincode is only used when the payload contains claim value pairs which results in an IDTokenhint\n    if (clientIssueRequest.clientIssuanceConfig.issuance.pin) {\n      clientIssueRequest.clientIssuanceConfig.issuance.pin.value = generatePin(clientIssueRequest.clientIssuanceConfig.issuance.pin.length)\n    }\n\n    const issuance: Issuance = {\n      type: clientIssueRequest.clientIssuanceConfig.issuance.type,\n      manifest: clientIssueRequest.clientIssuanceConfig.issuance.manifest,\n      pin: clientIssueRequest.clientIssuanceConfig.issuance.pin,\n      claims: clientIssueRequest.claims,\n    }\n\n    const issuanceConfig: IssuanceConfig = {\n      authority: clientIssueRequest.clientIssuanceConfig.authority,\n      includeQRCode: clientIssueRequest.clientIssuanceConfig.includeQRCode,\n      registration: clientIssueRequest.clientIssuanceConfig.registration,\n      callback: clientIssueRequest.clientIssuanceConfig.callback,\n      issuance: issuance,\n    }\n    const issueRequest: IIssueRequest = {\n      authenticationInfo: clientIssueRequest.authenticationInfo,\n      issuanceConfig: issuanceConfig,\n    }\n\n    const resp = await fetchIssuanceRequestMs(issueRequest, accessToken, msIdentityHostName)\n\n    // the response from the VC Request API call is returned to the caller (the UI). It contains the URI to the request which Authenticator can download after\n    // it has scanned the QR code. If the payload requested the VC Request service to create the QR code that is returned as well\n    // the javascript in the UI will use that QR code to display it on the screen to the user.\n    resp.id = issueRequest.issuanceConfig.callback.state // add session id so browser can pull status\n    if (issueRequest.issuanceConfig.issuance.pin) {\n      resp.pin = issueRequest.issuanceConfig.issuance.pin.value // add pin code so browser can display it\n    }\n    return resp\n  }\n}\n","import { IIssueRequest, IIssueRequestResponse } from './types/IMsRequestApi'\n\nimport { fetch } from 'cross-fetch'\nexport async function fetchIssuanceRequestMs(\n  issuanceInfo: IIssueRequest,\n  accessToken: string,\n  msIdentityHostName: string,\n): Promise<IIssueRequestResponse> {\n  const requestEndpoint = `${msIdentityHostName}${issuanceInfo.authenticationInfo.azTenantId}/verifiablecredentials/request`\n\n  const payload = JSON.stringify(issuanceInfo.issuanceConfig)\n  const fetchOptions = {\n    method: 'POST',\n    body: payload,\n    headers: {\n      'Content-Type': 'application/json',\n      'Content-Length': payload.length.toString(),\n      Authorization: `Bearer ${accessToken}`,\n    },\n  }\n  const response = await fetch(requestEndpoint, fetchOptions)\n  return await response.json()\n}\n\nexport function generatePin(digits: number) {\n  const add = 1\n  let max = 12 - add\n  max = Math.pow(10, digits + add)\n  const min = max / 10 // Math.pow(10, n) basically\n  const number = Math.floor(Math.random() * (max - min + 1)) + min\n  return ('' + number).substring(add)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,gCAAAA,SAAA;AAAA,IAAAA,QAAA;AAAA,MACE,eAAiB;AAAA,QACf,YAAc;AAAA,UACZ,SAAW;AAAA,YACT,qBAAuB;AAAA,cACrB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,oBAAsB;AAAA,kBACpB,MAAQ;AAAA,gBACV;AAAA,gBACA,sBAAwB;AAAA,kBACtB,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,sBAAsB,wBAAwB,QAAQ;AAAA,cACnE,sBAAwB;AAAA,YAC1B;AAAA,YACA,uCAAyC;AAAA,cACvC,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,gBACA,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,gBACA,gBAAkB;AAAA,kBAChB,MAAQ;AAAA,gBACV;AAAA,gBACA,uBAAyB;AAAA,kBACvB,MAAQ;AAAA,gBACV;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,kBACR,OAAS;AAAA,oBACP,MAAQ;AAAA,kBACV;AAAA,gBACF;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,mBAAqB;AAAA,kBACnB,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,cAAc,cAAc,gBAAgB;AAAA,cACzD,sBAAwB;AAAA,cACxB,aAAe;AAAA,YACjB;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,MAAQ,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;AAAA,cACtB,aAAe;AAAA,YACjB;AAAA,YACA,uBAAyB;AAAA,cACvB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,eAAiB;AAAA,kBACf,MAAQ;AAAA,gBACV;AAAA,gBACA,cAAgB;AAAA,kBACd,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,aAAa,iBAAiB,gBAAgB,YAAY,UAAU;AAAA,cACjF,sBAAwB;AAAA,YAC1B;AAAA,YACA,cAAgB;AAAA,cACd,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,YAAY;AAAA,cACzB,sBAAwB;AAAA,YAC1B;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,gBACA,OAAS;AAAA,kBACP,MAAQ;AAAA,gBACV;AAAA,gBACA,SAAW;AAAA,kBACT,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,OAAO,SAAS,SAAS;AAAA,cACtC,sBAAwB;AAAA,YAC1B;AAAA,YACA,SAAW;AAAA,cACT,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,QAAQ;AAAA,cACrB,sBAAwB;AAAA,YAC1B;AAAA,YACA,iBAAmB;AAAA,cACjB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,MAAQ;AAAA,kBACN,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,QAAQ,YAAY,KAAK;AAAA,cACtC,sBAAwB;AAAA,YAC1B;AAAA,YACA,KAAO;AAAA,cACL,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,OAAS;AAAA,kBACP,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,SAAS,QAAQ;AAAA,cAC9B,sBAAwB;AAAA,YAC1B;AAAA,YACA,mBAAqB;AAAA,cACnB,MAAQ;AAAA,YACV;AAAA,YACA,uBAAyB;AAAA,cACvB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,IAAM;AAAA,kBACJ,MAAQ;AAAA,gBACV;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,kBACR,QAAU;AAAA,gBACZ;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,MAAM,aAAa,OAAO,UAAU,KAAK;AAAA,cACtD,sBAAwB;AAAA,YAC1B;AAAA,UACF;AAAA,UACA,SAAW;AAAA,YACT,qBAAuB;AAAA,cACrB,aAAe;AAAA,cACf,WAAa;AAAA,gBACX,MAAQ;AAAA,cACV;AAAA,cACA,YAAc;AAAA,gBACZ,MAAQ;AAAA,cACV;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;ACjMA;;;;;;;;;;ACAA,qBAMO;;;ACJP,yBAAsB;AACtB,eAAsBC,uBACpBC,cACAC,aACAC,oBAA0B;AAE1B,QAAMC,kBAAkB,GAAGD,kBAAAA,GAAqBF,aAAaI,mBAAmBC,UAAU;AAE1F,QAAMC,UAAUC,KAAKC,UAAUR,aAAaS,cAAc;AAC1D,QAAMC,eAAe;IACnBC,QAAQ;IACRC,MAAMN;IACNO,SAAS;MACP,gBAAgB;MAChB,kBAAkBP,QAAQQ,OAAOC,SAAQ;MACzCC,eAAe,UAAUf,WAAAA;IAC3B;EACF;AACA,QAAMgB,WAAW,UAAMC,0BAAMf,iBAAiBO,YAAAA;AAC9C,SAAO,MAAMO,SAASE,KAAI;AAC5B;AAnBsBpB;AAqBf,SAASqB,YAAYC,QAAc;AACxC,QAAMC,MAAM;AACZ,MAAIC,MAAM,KAAKD;AACfC,QAAMC,KAAKC,IAAI,IAAIJ,SAASC,GAAAA;AAC5B,QAAMI,MAAMH,MAAM;AAClB,QAAMI,SAASH,KAAKI,MAAMJ,KAAKK,OAAM,KAAMN,MAAMG,MAAM,EAAA,IAAMA;AAC7D,UAAQ,KAAKC,QAAQG,UAAUR,GAAAA;AACjC;AAPgBF;;;ADFT,IAAMW,eAAN,MAAMA;EAtBb,OAsBaA;;;EACHC,UAAoD,oBAAIC,IAAAA;EAEvDC,UAAyB;IAChCC,qBAAqB,KAAKA,oBAAoBC,KAAK,IAAI;EACzD;;EAGA,MAAcD,oBAAoBE,oBAAyCC,SAA2D;AACpI,UAAMC,SAAKC,kCAAkBH,mBAAmBI,kBAAkB;AAClE,QAAI,CAAC,KAAKT,QAAQU,IAAIH,EAAAA,GAAK;AACzB,WAAKP,QAAQW,IAAIJ,IAAI,UAAMK,mDAAmCP,mBAAmBI,kBAAkB,CAAA;IACrG;AACA,UAAMI,aAAa,KAAKb,QAAQc,IAAIP,EAAAA;AACpC,QAAI,CAACM,YAAY;AACf,YAAME,MAAM,+CAA+CR,EAAAA,EAAI;IACjE;AACA,UAAMS,aAAa,UAAMC,iDAAiCZ,mBAAmBI,oBAAoB;MAC/FS,oBAAoBL,WAAWK;IACjC,CAAA;AACA,UAAMC,cAAcH,WAAWG;AAE/B,UAAMC,qBAAqB,UAAMC,gEAAgDhB,mBAAmBI,kBAAkB;AAGtH,QAAI,CAACJ,mBAAmBI,mBAAmBa,YAAY;AACrD,YAAM,IAAIP,MAAM,wBAAA;IAClB;AAIA,QAAIV,mBAAmBkB,qBAAqBC,SAASC,KAAK;AACxDpB,yBAAmBkB,qBAAqBC,SAASC,IAAIC,QAAQC,YAAYtB,mBAAmBkB,qBAAqBC,SAASC,IAAIG,MAAM;IACtI;AAEA,UAAMJ,WAAqB;MACzBK,MAAMxB,mBAAmBkB,qBAAqBC,SAASK;MACvDC,UAAUzB,mBAAmBkB,qBAAqBC,SAASM;MAC3DL,KAAKpB,mBAAmBkB,qBAAqBC,SAASC;MACtDM,QAAQ1B,mBAAmB0B;IAC7B;AAEA,UAAMC,iBAAiC;MACrCC,WAAW5B,mBAAmBkB,qBAAqBU;MACnDC,eAAe7B,mBAAmBkB,qBAAqBW;MACvDC,cAAc9B,mBAAmBkB,qBAAqBY;MACtDC,UAAU/B,mBAAmBkB,qBAAqBa;MAClDZ;IACF;AACA,UAAMa,eAA8B;MAClC5B,oBAAoBJ,mBAAmBI;MACvCuB;IACF;AAEA,UAAMM,OAAO,MAAMC,uBAAuBF,cAAclB,aAAaC,kBAAAA;AAKrEkB,SAAK/B,KAAK8B,aAAaL,eAAeI,SAASI;AAC/C,QAAIH,aAAaL,eAAeR,SAASC,KAAK;AAC5Ca,WAAKb,MAAMY,aAAaL,eAAeR,SAASC,IAAIC;IACtD;AACA,WAAOY;EACT;AACF;;;ADpFA,IAAMG,SAASC;","names":["module","fetchIssuanceRequestMs","issuanceInfo","accessToken","msIdentityHostName","requestEndpoint","authenticationInfo","azTenantId","payload","JSON","stringify","issuanceConfig","fetchOptions","method","body","headers","length","toString","Authorization","response","fetch","json","generatePin","digits","add","max","Math","pow","min","number","floor","random","substring","MsRequestApi","clients","Map","methods","issuanceRequestMsVc","bind","clientIssueRequest","context","id","determineMSAuthId","authenticationInfo","has","set","newMSClientCredentialAuthenticator","clientInfo","get","Error","authResult","getMSClientCredentialAccessToken","confidentialClient","accessToken","msIdentityHostName","assertEntraCredentialManifestUrlInCorrectRegion","azTenantId","clientIssuanceConfig","issuance","pin","value","generatePin","length","type","manifest","claims","issuanceConfig","authority","includeQRCode","registration","callback","issueRequest","resp","fetchIssuanceRequestMs","state","schema","require"]}

package/dist/{ssi-sdk.ms-request-api.d.ts → index.d.cts}

@@ -1,103 +1,86 @@
-import { IAgentContext } from '@veramo/core';
-import { IAgentPlugin } from '@veramo/core';
-import { IMsAuthenticationClientCredentialArgs } from '@sphereon/ssi-sdk.ms-authenticator';
-import { IPluginMethodMap } from '@veramo/core';
-
-export declare interface Callback {
-    url: string;
-    state: string;
-    headers: Headers_2;
-}
-
-export declare type CredentialSubject = {
-    [x: string]: any;
-};
-
-export declare function fetchIssuanceRequestMs(issuanceInfo: IIssueRequest, accessToken: string, msIdentityHostName: string): Promise<IIssueRequestResponse>;
-
-export declare function generatePin(digits: number): string;
-
-declare interface Headers_2 {
-    apiKey: string;
-}
-export { Headers_2 as Headers }
-
-export declare interface IClientIssuance {
-    type: string;
-    manifest: string;
-    pin: Pin;
-}
-
-export declare interface IClientIssuanceConfig {
-    authority: string;
-    includeQRCode: boolean;
-    registration: Registration;
-    callback: Callback;
-    issuance: IClientIssuance;
-}
-
-export declare interface IClientIssueRequest {
-    authenticationInfo: IMsAuthenticationClientCredentialArgs;
-    clientIssuanceConfig: IClientIssuanceConfig;
-    claims: CredentialSubject;
-}
-
-export declare interface IIssueRequest {
-    authenticationInfo: IMsAuthenticationClientCredentialArgs;
-    issuanceConfig: IssuanceConfig;
-}
-
-export declare interface IIssueRequestResponse {
-    id: string;
-    requestId: string;
-    url: string;
-    expiry: Date;
-    pin: string;
-}
-
-export declare interface IMsRequestApi extends IPluginMethodMap {
-    issuanceRequestMsVc(clientIssueRequest: IClientIssueRequest, context: IRequiredContext): Promise<IIssueRequestResponse>;
-}
-
-export declare type IRequiredContext = IAgentContext<Record<string, never>>;
-
-export declare interface Issuance {
-    type: string;
-    manifest: string;
-    pin: Pin;
-    claims: CredentialSubject;
-}
-
-export declare interface IssuanceConfig {
-    authority: string;
-    includeQRCode: boolean;
-    registration: Registration;
-    callback: Callback;
-    issuance: Issuance;
-}
-
-/**
- * {@inheritDoc IMsRequestApi}
- */
-export declare class MsRequestApi implements IAgentPlugin {
-    private clients;
-    readonly methods: IMsRequestApi;
-    /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */
-    private issuanceRequestMsVc;
-}
-
-export declare interface Pin {
-    value: string;
-    length: number;
-}
-
-export declare interface Registration {
-    clientName: string;
-}
-
-/**
- * @public
- */
-export declare const schema: any;
-
-export { }
+import { IPluginMethodMap, IAgentContext, IAgentPlugin } from '@veramo/core';
+import { IMsAuthenticationClientCredentialArgs } from '@sphereon/ssi-sdk.ms-authenticator';
+
+interface IMsRequestApi extends IPluginMethodMap {
+    issuanceRequestMsVc(clientIssueRequest: IClientIssueRequest, context: IRequiredContext): Promise<IIssueRequestResponse>;
+}
+interface IClientIssueRequest {
+    authenticationInfo: IMsAuthenticationClientCredentialArgs;
+    clientIssuanceConfig: IClientIssuanceConfig;
+    claims: CredentialSubject;
+}
+interface IClientIssuanceConfig {
+    authority: string;
+    includeQRCode: boolean;
+    registration: Registration;
+    callback: Callback;
+    issuance: IClientIssuance;
+}
+interface IClientIssuance {
+    type: string;
+    manifest: string;
+    pin: Pin;
+}
+interface IIssueRequest {
+    authenticationInfo: IMsAuthenticationClientCredentialArgs;
+    issuanceConfig: IssuanceConfig;
+}
+interface IIssueRequestResponse {
+    id: string;
+    requestId: string;
+    url: string;
+    expiry: Date;
+    pin: string;
+}
+interface Registration {
+    clientName: string;
+}
+interface Headers {
+    apiKey: string;
+}
+interface Callback {
+    url: string;
+    state: string;
+    headers: Headers;
+}
+interface Pin {
+    value: string;
+    length: number;
+}
+type CredentialSubject = {
+    [x: string]: any;
+};
+interface Issuance {
+    type: string;
+    manifest: string;
+    pin: Pin;
+    claims: CredentialSubject;
+}
+interface IssuanceConfig {
+    authority: string;
+    includeQRCode: boolean;
+    registration: Registration;
+    callback: Callback;
+    issuance: Issuance;
+}
+type IRequiredContext = IAgentContext<Record<string, never>>;
+
+/**
+ * {@inheritDoc IMsRequestApi}
+ */
+declare class MsRequestApi implements IAgentPlugin {
+    private clients;
+    readonly methods: IMsRequestApi;
+    /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */
+    private issuanceRequestMsVc;
+}
+
+declare function fetchIssuanceRequestMs(issuanceInfo: IIssueRequest, accessToken: string, msIdentityHostName: string): Promise<IIssueRequestResponse>;
+declare function generatePin(digits: number): string;
+
+/**
+ * @public
+ */
+declare const schema: any;
+
+export { type Callback, type CredentialSubject, type Headers, type IClientIssuance, type IClientIssuanceConfig, type IClientIssueRequest, type IIssueRequest, type IIssueRequestResponse, type IMsRequestApi, type IRequiredContext, type Issuance, type IssuanceConfig, MsRequestApi, type Pin, type Registration, fetchIssuanceRequestMs, generatePin, schema };

package/dist/index.d.ts

@@ -1,9 +1,86 @@
+import { IPluginMethodMap, IAgentContext, IAgentPlugin } from '@veramo/core';
+import { IMsAuthenticationClientCredentialArgs } from '@sphereon/ssi-sdk.ms-authenticator';
+
+interface IMsRequestApi extends IPluginMethodMap {
+    issuanceRequestMsVc(clientIssueRequest: IClientIssueRequest, context: IRequiredContext): Promise<IIssueRequestResponse>;
+}
+interface IClientIssueRequest {
+    authenticationInfo: IMsAuthenticationClientCredentialArgs;
+    clientIssuanceConfig: IClientIssuanceConfig;
+    claims: CredentialSubject;
+}
+interface IClientIssuanceConfig {
+    authority: string;
+    includeQRCode: boolean;
+    registration: Registration;
+    callback: Callback;
+    issuance: IClientIssuance;
+}
+interface IClientIssuance {
+    type: string;
+    manifest: string;
+    pin: Pin;
+}
+interface IIssueRequest {
+    authenticationInfo: IMsAuthenticationClientCredentialArgs;
+    issuanceConfig: IssuanceConfig;
+}
+interface IIssueRequestResponse {
+    id: string;
+    requestId: string;
+    url: string;
+    expiry: Date;
+    pin: string;
+}
+interface Registration {
+    clientName: string;
+}
+interface Headers {
+    apiKey: string;
+}
+interface Callback {
+    url: string;
+    state: string;
+    headers: Headers;
+}
+interface Pin {
+    value: string;
+    length: number;
+}
+type CredentialSubject = {
+    [x: string]: any;
+};
+interface Issuance {
+    type: string;
+    manifest: string;
+    pin: Pin;
+    claims: CredentialSubject;
+}
+interface IssuanceConfig {
+    authority: string;
+    includeQRCode: boolean;
+    registration: Registration;
+    callback: Callback;
+    issuance: Issuance;
+}
+type IRequiredContext = IAgentContext<Record<string, never>>;
+
+/**
+ * {@inheritDoc IMsRequestApi}
+ */
+declare class MsRequestApi implements IAgentPlugin {
+    private clients;
+    readonly methods: IMsRequestApi;
+    /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */
+    private issuanceRequestMsVc;
+}
+
+declare function fetchIssuanceRequestMs(issuanceInfo: IIssueRequest, accessToken: string, msIdentityHostName: string): Promise<IIssueRequestResponse>;
+declare function generatePin(digits: number): string;
+
 /**
  * @public
  */
 declare const schema: any;
-export { schema };
-export { MsRequestApi } from './agent/MsRequestApi';
-export * from './types/IMsRequestApi';
-export * from './IssuerUtil';
-//# sourceMappingURL=index.d.ts.map
+
+export { type Callback, type CredentialSubject, type Headers, type IClientIssuance, type IClientIssuanceConfig, type IClientIssueRequest, type IIssueRequest, type IIssueRequestResponse, type IMsRequestApi, type IRequiredContext, type Issuance, type IssuanceConfig, MsRequestApi, type Pin, type Registration, fetchIssuanceRequestMs, generatePin, schema };