@sphereon/ssi-sdk.oid4vci-issuer-rest-api 0.11.1-next.112

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [2021] [Sphereon BV]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,65 @@
+<!--suppress HtmlDeprecatedAttribute -->
+<h1 align="center">
+  <br>
+  <a href="https://www.sphereon.com"><img src="https://sphereon.com/content/themes/sphereon/assets/img/logo.svg" alt="Sphereon" width="400"></a>
+  <br>SIOPv2 and OpenID4VP Relying Party REST endpoints  
+  <br>
+</h1>
+
+---
+
+**Warning: This package still is in very early development. Breaking changes without notice will happen at this point!**
+
+---
+
+An authentication plugin using the [Self Issued OpenID Provider v2 (SIOP)](https://github.com/Sphereon-Opensource/did-auth-siop) authentication library for having Relying Parties conforming to
+the [Self Issued OpenID Provider v2 (SIOPv2)](https://openid.net/specs/openid-connect-self-issued-v2-1_0.html)
+and [OpenID Connect for Verifiable Presentations (OIDC4VP)](https://openid.net/specs/openid-connect-4-verifiable-presentations-1_0.html)
+as specified in the OpenID Connect working group.
+
+## Self Issued OpenID Provider v2 (SIOPv2)
+
+For more information about [Self Issued OpenID Provider v2 (SIOP)](https://github.com/Sphereon-Opensource/did-auth-siop#introduction), see the documentation in the readme.
+
+## Requirements
+
+For this plugin a DID resolver is also required. A DID resolver can be added to the agent as plugin as seen in the example below.
+
+## Available functions
+
+## Usage
+
+### Adding the plugin to an agent:
+
+```typescript
+import { IDidAuthSiopOpAuthenticator } from '@sphereon/ssi-sdk-did-auth-siop-authenticator'
+import { Resolver } from 'did-resolver'
+import { getDidKeyResolver } from '@veramo/did-provider-key'
+import { DIDResolverPlugin } from '@veramo/did-resolver'
+import { getUniResolver } from '@sphereon/did-uni-client'
+
+const agent = createAgent<IDidAuthSiopOpAuthenticator & IResolver>({
+  plugins: [
+    new DidAuthSiopOpAuthenticator(),
+    new DIDResolverPlugin({
+      resolver: new Resolver({
+        ...getDidKeyResolver(),
+        ...getUniResolver('web'),
+        ...getUniResolver('jwk'),
+      }),
+    }),
+  ],
+})
+```
+
+## Installation
+
+```shell
+yarn add @sphereon/ssi-sdk-siopv2-openid4vp-rp
+```
+
+## Build
+
+```shell
+yarn build
+```

package/dist/OID4VCIRestAPI.d.ts

@@ -0,0 +1,32 @@
+import { CredentialDataSupplier, VcIssuer } from '@sphereon/oid4vci-issuer';
+import { OID4VCIServer } from '@sphereon/oid4vci-issuer-server';
+import { IOID4VCIServerOpts } from '@sphereon/oid4vci-issuer-server/lib/OID4VCIServer';
+import { IIssuerInstanceArgs, IssuerInstance } from '@sphereon/ssi-sdk.oid4vci-issuer';
+import { Express } from 'express';
+import { IRequiredContext } from './types';
+export interface IOID4VCIRestAPIOpts extends IOID4VCIServerOpts {
+}
+export declare class OID4VCIRestAPI {
+    private readonly _express;
+    private readonly _context;
+    private readonly _opts?;
+    private readonly _restApi;
+    private readonly _instance;
+    private readonly _issuer;
+    static init(args: {
+        context: IRequiredContext;
+        issuerInstanceArgs: IIssuerInstanceArgs;
+        credentialDataSupplier?: CredentialDataSupplier;
+        express?: Express;
+        opts?: IOID4VCIRestAPIOpts;
+    }): Promise<OID4VCIRestAPI>;
+    private constructor();
+    static setupExpress(opts: IOID4VCIServerOpts): Express;
+    get express(): Express;
+    get context(): IRequiredContext;
+    get opts(): IOID4VCIRestAPIOpts | undefined;
+    get restApi(): OID4VCIServer;
+    get instance(): IssuerInstance;
+    get issuer(): VcIssuer;
+}
+//# sourceMappingURL=OID4VCIRestAPI.d.ts.map

package/dist/OID4VCIRestAPI.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OID4VCIRestAPI.d.ts","sourceRoot":"","sources":["../src/OID4VCIRestAPI.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAA;AACtF,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAA;AAItF,OAAgB,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE1C,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;CAAG;AAElE,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;WAErB,IAAI,CAAC,IAAI,EAAE;QACtB,OAAO,EAAE,gBAAgB,CAAA;QACzB,kBAAkB,EAAE,mBAAmB,CAAA;QACvC,sBAAsB,CAAC,EAAE,sBAAsB,CAAA;QAC/C,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,IAAI,CAAC,EAAE,mBAAmB,CAAA;KAC3B,GAAG,OAAO,CAAC,cAAc,CAAC;IAoC3B,OAAO;WAsBO,YAAY,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO;IAkC7D,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,IAAI,OAAO,IAAI,gBAAgB,CAE9B;IAED,IAAI,IAAI,IAAI,mBAAmB,GAAG,SAAS,CAE1C;IAED,IAAI,OAAO,IAAI,aAAa,CAE3B;IAED,IAAI,QAAQ,IAAI,cAAc,CAE7B;IAED,IAAI,MAAM,IAAI,QAAQ,CAErB;CACF"}

package/dist/OID4VCIRestAPI.js

@@ -0,0 +1,139 @@
+"use strict";
+// noinspection JSUnusedGlobalSymbols
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OID4VCIRestAPI = void 0;
+const oid4vci_issuer_server_1 = require("@sphereon/oid4vci-issuer-server");
+const ssi_sdk_oid4vci_issuer_1 = require("@sphereon/ssi-sdk.oid4vci-issuer");
+const body_parser_1 = __importDefault(require("body-parser"));
+const dotenv = __importStar(require("dotenv-flow"));
+const express_1 = __importDefault(require("express"));
+class OID4VCIRestAPI {
+    static init(args) {
+        var _a, _b, _c, _d, _e;
+        return __awaiter(this, void 0, void 0, function* () {
+            const { issuerInstanceArgs, express, context } = args;
+            const instance = yield context.agent.oid4vciGetInstance(args.issuerInstanceArgs);
+            const issuer = yield instance.get({ context, credentialDataSupplier: args.credentialDataSupplier });
+            const opts = (_a = args.opts) !== null && _a !== void 0 ? _a : {};
+            if (!opts.tokenEndpointOpts) {
+                opts.tokenEndpointOpts = { accessTokenIssuer: (_b = instance.metadataOptions.credentialIssuer) !== null && _b !== void 0 ? _b : issuer.issuerMetadata.credential_issuer };
+            }
+            if (((_c = opts === null || opts === void 0 ? void 0 : opts.tokenEndpointOpts) === null || _c === void 0 ? void 0 : _c.tokenEndpointDisabled) !== true && typeof ((_d = opts === null || opts === void 0 ? void 0 : opts.tokenEndpointOpts) === null || _d === void 0 ? void 0 : _d.accessTokenSignerCallback) !== 'function') {
+                let keyRef;
+                const tokenOpts = {
+                    iss: (_e = opts.tokenEndpointOpts.accessTokenIssuer) !== null && _e !== void 0 ? _e : instance.metadataOptions.credentialIssuer,
+                    didOpts: instance.issuerOptions.didOpts,
+                };
+                if (!tokenOpts.didOpts.identifierOpts.kid || tokenOpts.didOpts.identifierOpts.kid.startsWith('did:')) {
+                    keyRef = yield (0, ssi_sdk_oid4vci_issuer_1.getAccessTokenKeyRef)(tokenOpts, context);
+                }
+                opts.tokenEndpointOpts.accessTokenSignerCallback = (0, ssi_sdk_oid4vci_issuer_1.getAccessTokenSignerCallback)(Object.assign(Object.assign({}, tokenOpts), { keyRef }), args.context);
+            }
+            if (!opts.serverOpts) {
+                opts.serverOpts = {
+                    port: 5000,
+                    host: '0.0.0.0',
+                    app: args.express,
+                };
+            }
+            return new OID4VCIRestAPI({ context, issuerInstanceArgs, express, opts, instance, issuer });
+        });
+    }
+    constructor(args) {
+        const { context, opts } = args;
+        this._context = context;
+        this._opts = opts !== null && opts !== void 0 ? opts : {};
+        this._express = OID4VCIRestAPI.setupExpress(opts);
+        this._issuer = args.issuer;
+        this._instance = args.instance;
+        this._opts.serverOpts = Object.assign(Object.assign({}, opts.serverOpts), { app: this._express });
+        this._restApi = new oid4vci_issuer_server_1.OID4VCIServer(Object.assign(Object.assign({}, opts), { issuer: this._issuer }));
+    }
+    static setupExpress(opts) {
+        var _a, _b, _c, _d, _e;
+        dotenv.config();
+        const existingExpress = !!((_a = opts.serverOpts) === null || _a === void 0 ? void 0 : _a.app);
+        const app = (_c = (_b = opts.serverOpts) === null || _b === void 0 ? void 0 : _b.app) !== null && _c !== void 0 ? _c : (0, express_1.default)();
+        if (!existingExpress) {
+            const port = ((_d = opts.serverOpts) === null || _d === void 0 ? void 0 : _d.port) || process.env.PORT || 5000;
+            const hostname = ((_e = opts.serverOpts) === null || _e === void 0 ? void 0 : _e.host) || '0.0.0.0';
+            app.use((req, res, next) => {
+                res.header('Access-Control-Allow-Origin', '*');
+                // Request methods you wish to allow
+                res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, PATCH, DELETE');
+                // Request headers you wish to allow
+                res.setHeader('Access-Control-Allow-Headers', 'X-Requested-With,content-type');
+                // Set to true if you need the website to include cookies in the requests sent
+                // to the API (e.g. in case you use sessions)
+                res.setHeader('Access-Control-Allow-Credentials', 'true');
+                next();
+            });
+            // this.express.use(cors({ credentials: true }));
+            // this.express.use('/proxy', proxy('www.gssoogle.com'));
+            app.use(body_parser_1.default.urlencoded({ extended: true }));
+            app.use(body_parser_1.default.json());
+            app.listen(port, hostname, () => console.log(`Listening on ${hostname}, port ${port}`));
+            if (!opts.serverOpts) {
+                opts.serverOpts = {};
+            }
+            // make sure that if these opts are passed on to another instance, it uses the existing app
+            opts.serverOpts.app = app;
+        }
+        return app;
+    }
+    get express() {
+        return this._express;
+    }
+    get context() {
+        return this._context;
+    }
+    get opts() {
+        return this._opts;
+    }
+    get restApi() {
+        return this._restApi;
+    }
+    get instance() {
+        return this._instance;
+    }
+    get issuer() {
+        return this._issuer;
+    }
+}
+exports.OID4VCIRestAPI = OID4VCIRestAPI;
+//# sourceMappingURL=OID4VCIRestAPI.js.map

package/dist/OID4VCIRestAPI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OID4VCIRestAPI.js","sourceRoot":"","sources":["../src/OID4VCIRestAPI.ts"],"names":[],"mappings":";AAAA,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGrC,2EAA+D;AAG/D,6EAAqG;AACrG,8DAAoC;AACpC,oDAAqC;AACrC,sDAA0C;AAK1C,MAAa,cAAc;IAQzB,MAAM,CAAO,IAAI,CAAC,IAMjB;;;YACC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;YACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAChF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAA;YACnG,MAAM,IAAI,GAAG,MAAA,IAAI,CAAC,IAAI,mCAAI,EAAE,CAAA;YAC5B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC3B,IAAI,CAAC,iBAAiB,GAAG,EAAE,iBAAiB,EAAE,MAAA,QAAQ,CAAC,eAAe,CAAC,gBAAgB,mCAAI,MAAM,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAA;aACrI;YACD,IAAI,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,iBAAiB,0CAAE,qBAAqB,MAAK,IAAI,IAAI,OAAO,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,iBAAiB,0CAAE,yBAAyB,CAAA,KAAK,UAAU,EAAE;gBACvI,IAAI,MAA0B,CAAA;gBAC9B,MAAM,SAAS,GAAG;oBAChB,GAAG,EAAE,MAAA,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,mCAAI,QAAQ,CAAC,eAAe,CAAC,gBAAgB;oBAC1F,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,OAAO;iBACxC,CAAA;gBACD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;oBACpG,MAAM,GAAG,MAAM,IAAA,6CAAoB,EAAC,SAAS,EAAE,OAAO,CAAC,CAAA;iBACxD;gBAED,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,GAAG,IAAA,qDAA4B,kCAExE,SAAS,KACZ,MAAM,KAER,IAAI,CAAC,OAAO,CACb,CAAA;aACF;YACD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACpB,IAAI,CAAC,UAAU,GAAG;oBAChB,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,SAAS;oBACf,GAAG,EAAE,IAAI,CAAC,OAAO;iBAClB,CAAA;aACF;YACD,OAAO,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;;KAC5F;IAED,YAAoB,IAOnB;QACC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;QAC9B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAA;QACvB,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACjD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAA;QAE9B,IAAI,CAAC,KAAK,CAAC,UAAU,mCAChB,IAAI,CAAC,UAAU,KAClB,GAAG,EAAE,IAAI,CAAC,QAAQ,GACnB,CAAA;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,qCAAa,iCAAM,IAAI,KAAE,MAAM,EAAE,IAAI,CAAC,OAAO,IAAG,CAAA;IACtE,CAAC;IAEM,MAAM,CAAC,YAAY,CAAC,IAAwB;;QACjD,MAAM,CAAC,MAAM,EAAE,CAAA;QACf,MAAM,eAAe,GAAG,CAAC,CAAC,CAAA,MAAA,IAAI,CAAC,UAAU,0CAAE,GAAG,CAAA,CAAA;QAC9C,MAAM,GAAG,GAAG,MAAA,MAAA,IAAI,CAAC,UAAU,0CAAE,GAAG,mCAAI,IAAA,iBAAO,GAAE,CAAA;QAC7C,IAAI,CAAC,eAAe,EAAE;YACpB,MAAM,IAAI,GAAG,CAAA,MAAA,IAAI,CAAC,UAAU,0CAAE,IAAI,KAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAA;YAC9D,MAAM,QAAQ,GAAG,CAAA,MAAA,IAAI,CAAC,UAAU,0CAAE,IAAI,KAAI,SAAS,CAAA;YACnD,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBACzB,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;gBAC9C,oCAAoC;gBACpC,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,wCAAwC,CAAC,CAAA;gBAEvF,oCAAoC;gBACpC,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,+BAA+B,CAAC,CAAA;gBAE9E,8EAA8E;gBAC9E,6CAA6C;gBAC7C,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;gBACzD,IAAI,EAAE,CAAA;YACR,CAAC,CAAC,CAAA;YACF,iDAAiD;YACjD,yDAAyD;YACzD,GAAG,CAAC,GAAG,CAAC,qBAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAClD,GAAG,CAAC,GAAG,CAAC,qBAAU,CAAC,IAAI,EAAE,CAAC,CAAA;YAC1B,GAAG,CAAC,MAAM,CAAC,IAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,UAAU,IAAI,EAAE,CAAC,CAAC,CAAA;YACjG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACpB,IAAI,CAAC,UAAU,GAAG,EAAE,CAAA;aACrB;YACD,2FAA2F;YAC3F,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAA;SAC1B;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;CACF;AAjID,wCAiIC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @public
+ */
+export * from './OID4VCIRestAPI';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,kBAAkB,CAAA;AAChC,cAAc,SAAS,CAAA"}

package/dist/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @public
+ */
+__exportStar(require("./OID4VCIRestAPI"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;GAEG;AACH,mDAAgC;AAChC,0CAAuB"}

package/dist/request-agent-router.d.ts

@@ -0,0 +1,30 @@
+import { IAgent } from '@veramo/core';
+import { Request, Router } from 'express';
+export interface RequestWithAgent extends Request {
+    agent?: IAgent;
+}
+/**
+ * @public
+ */
+export interface RequestWithAgentRouterOptions {
+    /**
+     * Optional. Pre-configured agent
+     */
+    agent?: IAgent;
+    /**
+     * Optional. Function that returns a Promise that resolves to a configured agent for specific request
+     */
+    getAgentForRequest?: (req: Request) => Promise<IAgent>;
+}
+/**
+ * Creates an expressjs router that adds a Veramo agent to the request object.
+ *
+ * This is needed by all other routers provided by this package to be able to perform their functions.
+ *
+ * @param options - Initialization option
+ * @returns Expressjs router
+ *
+ * @public
+ */
+export declare const RequestWithAgentRouter: (options: RequestWithAgentRouterOptions) => Router;
+//# sourceMappingURL=request-agent-router.d.ts.map

package/dist/request-agent-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-agent-router.d.ts","sourceRoot":"","sources":["../src/request-agent-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAEzC,MAAM,WAAW,gBAAiB,SAAQ,OAAO;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd;;OAEG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CACvD;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,YAAa,6BAA6B,KAAG,MAc/E,CAAA"}

package/dist/request-agent-router.js

@@ -0,0 +1,41 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequestWithAgentRouter = void 0;
+const express_1 = require("express");
+/**
+ * Creates an expressjs router that adds a Veramo agent to the request object.
+ *
+ * This is needed by all other routers provided by this package to be able to perform their functions.
+ *
+ * @param options - Initialization option
+ * @returns Expressjs router
+ *
+ * @public
+ */
+const RequestWithAgentRouter = (options) => {
+    const router = (0, express_1.Router)();
+    router.use((req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
+        if (options.agent) {
+            req.agent = options.agent;
+        }
+        else if (options.getAgentForRequest) {
+            req.agent = yield options.getAgentForRequest(req);
+        }
+        else {
+            throw Error('[RequestWithAgentRouter] agent or getAgentForRequest is required');
+        }
+        next();
+    }));
+    return router;
+};
+exports.RequestWithAgentRouter = RequestWithAgentRouter;
+//# sourceMappingURL=request-agent-router.js.map

package/dist/request-agent-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-agent-router.js","sourceRoot":"","sources":["../src/request-agent-router.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,qCAAyC;AAqBzC;;;;;;;;;GASG;AACI,MAAM,sBAAsB,GAAG,CAAC,OAAsC,EAAU,EAAE;IACvF,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAA;IACvB,MAAM,CAAC,GAAG,CAAC,CAAO,GAAqB,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACpD,IAAI,OAAO,CAAC,KAAK,EAAE;YACjB,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;SAC1B;aAAM,IAAI,OAAO,CAAC,kBAAkB,EAAE;YACrC,GAAG,CAAC,KAAK,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;SAClD;aAAM;YACL,MAAM,KAAK,CAAC,kEAAkE,CAAC,CAAA;SAChF;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAdY,QAAA,sBAAsB,0BAclC"}

package/dist/types.d.ts

@@ -0,0 +1,6 @@
+import { IOID4VCIIssuer } from '@sphereon/ssi-sdk.oid4vci-issuer';
+import { IOID4VCIStore } from '@sphereon/ssi-sdk.oid4vci-issuer-store';
+import { IAgentContext, ICredentialIssuer, ICredentialVerifier, IDataStore, IDataStoreORM, IDIDManager, IKeyManager, IResolver } from '@veramo/core';
+export type IRequiredContext = IAgentContext<IPlugins>;
+export type IPlugins = IDIDManager & IKeyManager & IDataStore & IDataStoreORM & IResolver & IOID4VCIStore & IOID4VCIIssuer & ICredentialVerifier & ICredentialIssuer;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAA;AACtE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAEpJ,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;AAEtD,MAAM,MAAM,QAAQ,GAAG,WAAW,GAChC,WAAW,GACX,UAAU,GACV,aAAa,GACb,SAAS,GACT,aAAa,GACb,cAAc,GACd,mBAAmB,GACnB,iBAAiB,CAAA"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,94 @@
+{
+  "name": "@sphereon/ssi-sdk.oid4vci-issuer-rest-api",
+  "version": "0.11.1-next.112+0ac00fe",
+  "source": "src/index.ts",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc --build",
+    "build:clean": "tsc --build --clean && tsc --build",
+    "start:prod": "node build/index.js",
+    "start:dev": "ts-node __tests__/RestAPI.ts"
+  },
+  "dependencies": {
+    "@sphereon/oid4vci-common": "0.4.1-unstable.286",
+    "@sphereon/oid4vci-issuer": "0.4.1-unstable.286",
+    "@sphereon/oid4vci-issuer-server": "0.4.1-unstable.286",
+    "@sphereon/ssi-sdk.kv-store-temp": "0.11.1-next.112+0ac00fe",
+    "@sphereon/ssi-sdk.oid4vci-issuer": "0.11.1-next.112+0ac00fe",
+    "@sphereon/ssi-sdk.oid4vci-issuer-store": "0.11.1-next.112+0ac00fe",
+    "@sphereon/ssi-types": "0.11.1-next.112+0ac00fe",
+    "@types/uuid": "^9.0.1",
+    "@veramo/core": "4.2.0",
+    "@veramo/credential-w3c": "4.2.0",
+    "body-parser": "^1.19.0",
+    "cookie-parser": "^1.4.5",
+    "cors": "^2.8.5",
+    "cross-fetch": "^3.1.5",
+    "dotenv-flow": "^3.2.0",
+    "express": "^4.18.2",
+    "short-uuid": "^4.2.2",
+    "uuid": "^8.3.2"
+  },
+  "devDependencies": {
+    "@decentralized-identity/ion-sdk": "^0.6.0",
+    "@sphereon/did-uni-client": "^0.6.0",
+    "@sphereon/pex": "^2.0.1",
+    "@sphereon/pex-models": "^2.0.2",
+    "@sphereon/ssi-sdk-ext.did-provider-jwk": "^0.12.0",
+    "@sphereon/ssi-sdk-ext.key-utils": "^0.12.0",
+    "@sphereon/ssi-sdk.data-store": "0.11.1-next.112+0ac00fe",
+    "@sphereon/ssi-sdk.vc-handler-ld-local": "0.11.1-next.112+0ac00fe",
+    "@types/body-parser": "^1.19.2",
+    "@types/cookie-parser": "^1.4.3",
+    "@types/cors": "^2.8.13",
+    "@types/debug": "^4.1.7",
+    "@types/dotenv-flow": "^3.2.0",
+    "@types/express": "^4.17.13",
+    "@types/express-http-proxy": "^1.6.3",
+    "@types/node": "^18.15.0",
+    "@veramo/data-store": "4.2.0",
+    "@veramo/did-manager": "4.2.0",
+    "@veramo/did-provider-ethr": "4.2.0",
+    "@veramo/did-provider-ion": "4.2.0",
+    "@veramo/did-provider-key": "4.2.0",
+    "@veramo/did-provider-web": "4.2.0",
+    "@veramo/did-resolver": "4.2.0",
+    "@veramo/key-manager": "4.2.0",
+    "@veramo/kms-local": "4.2.0",
+    "@veramo/utils": "4.2.0",
+    "did-resolver": "^4.1.0",
+    "nock": "^13.2.1",
+    "ts-node": "^10.9.1",
+    "typeorm": "^0.3.12",
+    "web-did-resolver": "^2.0.24"
+  },
+  "files": [
+    ".yalc/**/*",
+    "dist/**/*",
+    "src/**/*",
+    "README.md",
+    "plugin.schema.json",
+    "LICENSE"
+  ],
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": "git@github.com:Sphereon-Opensource/SSI-SDK.git",
+  "author": "Sphereon <dev@sphereon.com>",
+  "license": "Apache-2.0",
+  "keywords": [
+    "Sphereon",
+    "SSI",
+    "Veramo",
+    "DID",
+    "SIOP",
+    "SIOPv2",
+    "OIDC4VP",
+    "Presentation Exchange",
+    "OpenID Connect",
+    "Authenticator"
+  ],
+  "gitHead": "0ac00fe02a48ce2a14c61adb3a3430c79d7b8243"
+}

package/src/OID4VCIRestAPI.ts

@@ -0,0 +1,144 @@
+// noinspection JSUnusedGlobalSymbols
+
+import { CredentialDataSupplier, VcIssuer } from '@sphereon/oid4vci-issuer'
+import { OID4VCIServer } from '@sphereon/oid4vci-issuer-server'
+import { IOID4VCIServerOpts } from '@sphereon/oid4vci-issuer-server/lib/OID4VCIServer'
+import { IIssuerInstanceArgs, IssuerInstance } from '@sphereon/ssi-sdk.oid4vci-issuer'
+import { getAccessTokenKeyRef, getAccessTokenSignerCallback } from '@sphereon/ssi-sdk.oid4vci-issuer'
+import bodyParser from 'body-parser'
+import * as dotenv from 'dotenv-flow'
+import express, { Express } from 'express'
+import { IRequiredContext } from './types'
+
+export interface IOID4VCIRestAPIOpts extends IOID4VCIServerOpts {}
+
+export class OID4VCIRestAPI {
+  private readonly _express: Express
+  private readonly _context: IRequiredContext
+  private readonly _opts?: IOID4VCIRestAPIOpts
+  private readonly _restApi: OID4VCIServer
+  private readonly _instance: IssuerInstance
+  private readonly _issuer: VcIssuer
+
+  static async init(args: {
+    context: IRequiredContext
+    issuerInstanceArgs: IIssuerInstanceArgs
+    credentialDataSupplier?: CredentialDataSupplier
+    express?: Express
+    opts?: IOID4VCIRestAPIOpts
+  }): Promise<OID4VCIRestAPI> {
+    const { issuerInstanceArgs, express, context } = args
+    const instance = await context.agent.oid4vciGetInstance(args.issuerInstanceArgs)
+    const issuer = await instance.get({ context, credentialDataSupplier: args.credentialDataSupplier })
+    const opts = args.opts ?? {}
+    if (!opts.tokenEndpointOpts) {
+      opts.tokenEndpointOpts = { accessTokenIssuer: instance.metadataOptions.credentialIssuer ?? issuer.issuerMetadata.credential_issuer }
+    }
+    if (opts?.tokenEndpointOpts?.tokenEndpointDisabled !== true && typeof opts?.tokenEndpointOpts?.accessTokenSignerCallback !== 'function') {
+      let keyRef: string | undefined
+      const tokenOpts = {
+        iss: opts.tokenEndpointOpts.accessTokenIssuer ?? instance.metadataOptions.credentialIssuer,
+        didOpts: instance.issuerOptions.didOpts,
+      }
+      if (!tokenOpts.didOpts.identifierOpts.kid || tokenOpts.didOpts.identifierOpts.kid.startsWith('did:')) {
+        keyRef = await getAccessTokenKeyRef(tokenOpts, context)
+      }
+
+      opts.tokenEndpointOpts.accessTokenSignerCallback = getAccessTokenSignerCallback(
+        {
+          ...tokenOpts,
+          keyRef,
+        },
+        args.context
+      )
+    }
+    if (!opts.serverOpts) {
+      opts.serverOpts = {
+        port: 5000,
+        host: '0.0.0.0',
+        app: args.express,
+      }
+    }
+    return new OID4VCIRestAPI({ context, issuerInstanceArgs, express, opts, instance, issuer })
+  }
+
+  private constructor(args: {
+    issuer: VcIssuer
+    instance: IssuerInstance
+    context: IRequiredContext
+    issuerInstanceArgs: IIssuerInstanceArgs
+    express?: Express
+    opts: IOID4VCIRestAPIOpts
+  }) {
+    const { context, opts } = args
+    this._context = context
+    this._opts = opts ?? {}
+    this._express = OID4VCIRestAPI.setupExpress(opts)
+    this._issuer = args.issuer
+    this._instance = args.instance
+
+    this._opts.serverOpts = {
+      ...opts.serverOpts,
+      app: this._express,
+    }
+    this._restApi = new OID4VCIServer({ ...opts, issuer: this._issuer })
+  }
+
+  public static setupExpress(opts: IOID4VCIServerOpts): Express {
+    dotenv.config()
+    const existingExpress = !!opts.serverOpts?.app
+    const app = opts.serverOpts?.app ?? express()
+    if (!existingExpress) {
+      const port = opts.serverOpts?.port || process.env.PORT || 5000
+      const hostname = opts.serverOpts?.host || '0.0.0.0'
+      app.use((req, res, next) => {
+        res.header('Access-Control-Allow-Origin', '*')
+        // Request methods you wish to allow
+        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, PATCH, DELETE')
+
+        // Request headers you wish to allow
+        res.setHeader('Access-Control-Allow-Headers', 'X-Requested-With,content-type')
+
+        // Set to true if you need the website to include cookies in the requests sent
+        // to the API (e.g. in case you use sessions)
+        res.setHeader('Access-Control-Allow-Credentials', 'true')
+        next()
+      })
+      // this.express.use(cors({ credentials: true }));
+      // this.express.use('/proxy', proxy('www.gssoogle.com'));
+      app.use(bodyParser.urlencoded({ extended: true }))
+      app.use(bodyParser.json())
+      app.listen(port as number, hostname, () => console.log(`Listening on ${hostname}, port ${port}`))
+      if (!opts.serverOpts) {
+        opts.serverOpts = {}
+      }
+      // make sure that if these opts are passed on to another instance, it uses the existing app
+      opts.serverOpts.app = app
+    }
+    return app
+  }
+
+  get express(): Express {
+    return this._express
+  }
+
+  get context(): IRequiredContext {
+    return this._context
+  }
+
+  get opts(): IOID4VCIRestAPIOpts | undefined {
+    return this._opts
+  }
+
+  get restApi(): OID4VCIServer {
+    return this._restApi
+  }
+
+  get instance(): IssuerInstance {
+    return this._instance
+  }
+
+  get issuer(): VcIssuer {
+    return this._issuer
+  }
+}

package/src/index.ts

@@ -0,0 +1,5 @@
+/**
+ * @public
+ */
+export * from './OID4VCIRestAPI'
+export * from './types'

package/src/request-agent-router.ts

@@ -0,0 +1,47 @@
+import { IAgent } from '@veramo/core'
+import { Request, Router } from 'express'
+
+export interface RequestWithAgent extends Request {
+  agent?: IAgent
+}
+
+/**
+ * @public
+ */
+export interface RequestWithAgentRouterOptions {
+  /**
+   * Optional. Pre-configured agent
+   */
+  agent?: IAgent
+
+  /**
+   * Optional. Function that returns a Promise that resolves to a configured agent for specific request
+   */
+  getAgentForRequest?: (req: Request) => Promise<IAgent>
+}
+
+/**
+ * Creates an expressjs router that adds a Veramo agent to the request object.
+ *
+ * This is needed by all other routers provided by this package to be able to perform their functions.
+ *
+ * @param options - Initialization option
+ * @returns Expressjs router
+ *
+ * @public
+ */
+export const RequestWithAgentRouter = (options: RequestWithAgentRouterOptions): Router => {
+  const router = Router()
+  router.use(async (req: RequestWithAgent, res, next) => {
+    if (options.agent) {
+      req.agent = options.agent
+    } else if (options.getAgentForRequest) {
+      req.agent = await options.getAgentForRequest(req)
+    } else {
+      throw Error('[RequestWithAgentRouter] agent or getAgentForRequest is required')
+    }
+    next()
+  })
+
+  return router
+}

package/src/types.ts

@@ -0,0 +1,15 @@
+import { IOID4VCIIssuer } from '@sphereon/ssi-sdk.oid4vci-issuer'
+import { IOID4VCIStore } from '@sphereon/ssi-sdk.oid4vci-issuer-store'
+import { IAgentContext, ICredentialIssuer, ICredentialVerifier, IDataStore, IDataStoreORM, IDIDManager, IKeyManager, IResolver } from '@veramo/core'
+
+export type IRequiredContext = IAgentContext<IPlugins>
+
+export type IPlugins = IDIDManager &
+  IKeyManager &
+  IDataStore &
+  IDataStoreORM &
+  IResolver &
+  IOID4VCIStore &
+  IOID4VCIIssuer &
+  ICredentialVerifier &
+  ICredentialIssuer