@sphereon/ssi-sdk.sd-jwt 0.24.1-next.112

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Consensys AG
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,3 @@
+# Veramo selective disclosure JWT plugin
+
+This package provides a Veramo plugin that can create, present and verify selective disclosure JWTs.

package/dist/action-handler.d.ts

@@ -0,0 +1,69 @@
+import { SDJwtVcInstance } from '@sd-jwt/sd-jwt-vc';
+import { IAgentPlugin } from '@veramo/core';
+import { SdJWTImplementation, ICreateSdJwtVcArgs, ICreateSdJwtVcResult, ICreateSdJwtPresentationArgs, ICreateSdJwtPresentationResult, IRequiredContext, ISDJwtPlugin, IVerifySdJwtVcArgs, IVerifySdJwtVcResult, IVerifySdJwtPresentationArgs, IVerifySdJwtPresentationResult } from './types';
+/**
+ * @beta
+ * SD-JWT plugin for Veramo
+ */
+export declare class SDJwtPlugin implements IAgentPlugin {
+    private algorithms;
+    readonly schema: any;
+    constructor(algorithms: SdJWTImplementation);
+    readonly methods: ISDJwtPlugin;
+    /**
+     * Create a signed SD-JWT credential.
+     * @param args - Arguments necessary for the creation of a SD-JWT credential.
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @returns A signed SD-JWT credential.
+     */
+    createSdJwtVc(args: ICreateSdJwtVcArgs, context: IRequiredContext): Promise<ICreateSdJwtVcResult>;
+    /**
+     * Get the key to sign the SD-JWT
+     * @param issuer - did url like did:exmaple.com#key-1
+     * @param context - agent instance
+     * @returns the key to sign the SD-JWT
+     */
+    private getSignKey;
+    /**
+     * Create a signed SD-JWT presentation.
+     * @param args - Arguments necessary for the creation of a SD-JWT presentation.
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @returns A signed SD-JWT presentation.
+     */
+    createSdJwtPresentation(args: ICreateSdJwtPresentationArgs, context: IRequiredContext): Promise<ICreateSdJwtPresentationResult>;
+    /**
+     * Verify a signed SD-JWT credential.
+     * @param args - Arguments necessary for the verify a SD-JWT credential.
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @returns
+     */
+    verifySdJwtVc(args: IVerifySdJwtVcArgs, context: IRequiredContext): Promise<IVerifySdJwtVcResult>;
+    /**
+     * Verify the key binding of a SD-JWT by validating the signature of the key bound to the SD-JWT
+     * @param sdjwt - SD-JWT instance
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @param data - signed data
+     * @param signature - The signature
+     * @param payload - The payload of the SD-JWT
+     * @returns
+     */
+    private verifyKb;
+    /**
+     * Validates the signature of a SD-JWT
+     * @param sdjwt - SD-JWT instance
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @param data - signed data
+     * @param signature - The signature
+     * @returns
+     */
+    verify(sdjwt: SDJwtVcInstance, context: IRequiredContext, data: string, signature: string): Promise<boolean>;
+    /**
+     * Verify a signed SD-JWT presentation.
+     * @param args - Arguments necessary for the verify a SD-JWT presentation.
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @returns
+     */
+    verifySdJwtPresentation(args: IVerifySdJwtPresentationArgs, context: IRequiredContext): Promise<IVerifySdJwtPresentationResult>;
+    private getKeyTypeAlgorithm;
+}
+//# sourceMappingURL=action-handler.d.ts.map

package/dist/action-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-handler.d.ts","sourceRoot":"","sources":["../src/action-handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAA;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,EAC9B,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,EAE/B,MAAM,SAAS,CAAA;AAIhB;;;GAGG;AACH,qBAAa,WAAY,YAAW,YAAY;IAGlC,OAAO,CAAC,UAAU;IAF9B,QAAQ,CAAC,MAAM,MAAsB;gBAEjB,UAAU,EAAE,mBAAmB;IAGnD,QAAQ,CAAC,OAAO,EAAE,YAAY,CAK7B;IAED;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0BvG;;;;;OAKG;YACW,UAAU;IAiBxB;;;;;OAKG;IACG,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAmCrI;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAYvG;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ;IAQhB;;;;;;;OAOG;IACG,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAqB/F;;;;;OAKG;IACG,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAiBrI,OAAO,CAAC,mBAAmB;CAY5B"}

package/dist/action-handler.js

@@ -0,0 +1,220 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SDJwtPlugin = void 0;
+const index_1 = require("./index");
+const core_1 = require("@sd-jwt/core");
+const sd_jwt_vc_1 = require("@sd-jwt/sd-jwt-vc");
+const ssi_sdk_ext_did_utils_1 = require("@sphereon/ssi-sdk-ext.did-utils");
+const utils_1 = require("@veramo/utils");
+/**
+ * @beta
+ * SD-JWT plugin for Veramo
+ */
+class SDJwtPlugin {
+    constructor(algorithms) {
+        this.algorithms = algorithms;
+        this.schema = index_1.schema.ISDJwtPlugin;
+        // map the methods your plugin is declaring to their implementation
+        this.methods = {
+            createSdJwtVc: this.createSdJwtVc.bind(this),
+            createSdJwtPresentation: this.createSdJwtPresentation.bind(this),
+            verifySdJwtVc: this.verifySdJwtVc.bind(this),
+            verifySdJwtPresentation: this.verifySdJwtPresentation.bind(this),
+        };
+    }
+    /**
+     * Create a signed SD-JWT credential.
+     * @param args - Arguments necessary for the creation of a SD-JWT credential.
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @returns A signed SD-JWT credential.
+     */
+    createSdJwtVc(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const issuer = args.credentialPayload.iss;
+            if (!issuer) {
+                throw new Error('credential.issuer must not be empty');
+            }
+            const { alg, key } = yield this.getSignKey(issuer, context);
+            //TODO: let the user also insert a method to sign the data
+            const signer = (data) => __awaiter(this, void 0, void 0, function* () { return context.agent.keyManagerSign({ keyRef: key.kid, data }); });
+            const sdjwt = new sd_jwt_vc_1.SDJwtVcInstance({
+                signer,
+                hasher: this.algorithms.hasher,
+                saltGenerator: this.algorithms.saltGenerator,
+                signAlg: alg,
+                hashAlg: 'SHA-256',
+            });
+            const credential = yield sdjwt.issue(args.credentialPayload, args.disclosureFrame);
+            return { credential };
+        });
+    }
+    /**
+     * Get the key to sign the SD-JWT
+     * @param issuer - did url like did:exmaple.com#key-1
+     * @param context - agent instance
+     * @returns the key to sign the SD-JWT
+     */
+    getSignKey(issuer, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const identifier = yield context.agent.didManagerGet({
+                did: issuer.split('#')[0],
+            });
+            const doc = yield (0, ssi_sdk_ext_did_utils_1.mapIdentifierKeysToDocWithJwkSupport)(identifier, 'assertionMethod', context);
+            if (!doc || doc.length === 0) {
+                throw new Error('No key found for signing');
+            }
+            const key = doc.find((key) => key.meta.verificationMethod.id === issuer);
+            if (!key) {
+                throw new Error(`No key found with the given id: ${issuer}`);
+            }
+            const alg = this.getKeyTypeAlgorithm(key.type);
+            return { alg, key };
+        });
+    }
+    /**
+     * Create a signed SD-JWT presentation.
+     * @param args - Arguments necessary for the creation of a SD-JWT presentation.
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @returns A signed SD-JWT presentation.
+     */
+    createSdJwtPresentation(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const cred = yield core_1.SDJwt.fromEncode(args.presentation, this.algorithms.hasher);
+            const claims = yield cred.getClaims(this.algorithms.hasher);
+            let holderDID;
+            // we primarly look for a cnf field, if it's not there we look for a sub field. If this is also not given, we throw an error since we can not sign it.
+            if ((_a = claims.cnf) === null || _a === void 0 ? void 0 : _a.jwk) {
+                const key = claims.cnf.jwk;
+                //TODO SDK-19: convert the JWK to hex and search for the appropriate key and associated DID
+                //doesn't apply to did:jwk only, as you can represent any DID key as a JWK. So whenever you encounter a JWK it doesn't mean it had to come from a did:jwk in the system. It just can always be represented as a did:jwk
+                holderDID = `did:jwk:${(0, utils_1.encodeJoseBlob)(key)}#0`;
+            }
+            else if (claims.sub) {
+                holderDID = claims.sub;
+            }
+            else {
+                throw new Error('invalid_argument: credential does not include a holder reference');
+            }
+            const { alg, key } = yield this.getSignKey(holderDID, context);
+            const signer = (data) => __awaiter(this, void 0, void 0, function* () {
+                return context.agent.keyManagerSign({ keyRef: key.kid, data });
+            });
+            const sdjwt = new sd_jwt_vc_1.SDJwtVcInstance({
+                hasher: this.algorithms.hasher,
+                saltGenerator: this.algorithms.saltGenerator,
+                kbSigner: signer,
+                kbSignAlg: alg,
+            });
+            const credential = yield sdjwt.present(args.presentation, args.presentationFrame, { kb: args.kb });
+            return { presentation: credential };
+        });
+    }
+    /**
+     * Verify a signed SD-JWT credential.
+     * @param args - Arguments necessary for the verify a SD-JWT credential.
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @returns
+     */
+    verifySdJwtVc(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // biome-ignore lint/style/useConst: <explanation>
+            let sdjwt;
+            const verifier = (data, signature) => __awaiter(this, void 0, void 0, function* () { return this.verify(sdjwt, context, data, signature); });
+            sdjwt = new sd_jwt_vc_1.SDJwtVcInstance({ verifier, hasher: this.algorithms.hasher });
+            const verifiedPayloads = yield sdjwt.verify(args.credential);
+            return { verifiedPayloads };
+        });
+    }
+    /**
+     * Verify the key binding of a SD-JWT by validating the signature of the key bound to the SD-JWT
+     * @param sdjwt - SD-JWT instance
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @param data - signed data
+     * @param signature - The signature
+     * @param payload - The payload of the SD-JWT
+     * @returns
+     */
+    verifyKb(sdjwt, context, data, signature, payload) {
+        if (!payload.cnf) {
+            throw Error('other method than cnf is not supported yet');
+        }
+        const key = payload.cnf.jwk;
+        return this.algorithms.verifySignature(data, signature, key);
+    }
+    /**
+     * Validates the signature of a SD-JWT
+     * @param sdjwt - SD-JWT instance
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @param data - signed data
+     * @param signature - The signature
+     * @returns
+     */
+    verify(sdjwt, context, data, signature) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const decodedVC = yield sdjwt.decode(`${data}.${signature}`);
+            const issuer = decodedVC.jwt.payload.iss;
+            if (!issuer.startsWith('did:')) {
+                throw new Error('invalid_issuer: issuer must be a did');
+            }
+            const didDoc = yield context.agent.resolveDid({ didUrl: issuer });
+            if (!didDoc) {
+                throw new Error('invalid_issuer: issuer did not resolve to a did document');
+            }
+            //TODO SDK-20: This should be checking for an assertionMethod and not just an verificationMethod with an id
+            const didDocumentKey = (_b = (_a = didDoc.didDocument) === null || _a === void 0 ? void 0 : _a.verificationMethod) === null || _b === void 0 ? void 0 : _b.find((key) => key.id);
+            if (!didDocumentKey) {
+                throw new Error('invalid_issuer: issuer did document does not include referenced key');
+            }
+            //FIXME SDK-21: in case it's another did method, the value of the key can be also encoded as a base64url
+            //needs more checks. some DID methods do not expose the keys as publicKeyJwk
+            const key = didDocumentKey.publicKeyJwk;
+            return this.algorithms.verifySignature(data, signature, key);
+        });
+    }
+    /**
+     * Verify a signed SD-JWT presentation.
+     * @param args - Arguments necessary for the verify a SD-JWT presentation.
+     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
+     * @returns
+     */
+    verifySdJwtPresentation(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // biome-ignore lint/style/useConst: <explanation>
+            let sdjwt;
+            const verifier = (data, signature) => __awaiter(this, void 0, void 0, function* () { return this.verify(sdjwt, context, data, signature); });
+            const verifierKb = (data, signature, payload) => __awaiter(this, void 0, void 0, function* () { return this.verifyKb(sdjwt, context, data, signature, payload); });
+            sdjwt = new sd_jwt_vc_1.SDJwtVcInstance({
+                verifier,
+                hasher: this.algorithms.hasher,
+                kbVerifier: verifierKb,
+            });
+            const verifiedPayloads = yield sdjwt.verify(args.presentation, args.requiredClaimKeys, args.kb);
+            return { verifiedPayloads };
+        });
+    }
+    getKeyTypeAlgorithm(keyType) {
+        switch (keyType) {
+            case 'Ed25519':
+                return 'EdDSA';
+            case 'Secp256k1':
+                return 'ES256K';
+            case 'Secp256r1':
+                return 'ES256';
+            default:
+                throw new Error(`unsupported key type ${keyType}`);
+        }
+    }
+}
+exports.SDJwtPlugin = SDJwtPlugin;
+//# sourceMappingURL=action-handler.js.map

package/dist/action-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-handler.js","sourceRoot":"","sources":["../src/action-handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,mCAAgC;AAChC,uCAAyC;AACzC,iDAAmE;AAiBnE,2EAAsF;AACtF,yCAA8C;AAE9C;;;GAGG;AACH,MAAa,WAAW;IAGtB,YAAoB,UAA+B;QAA/B,eAAU,GAAV,UAAU,CAAqB;QAF1C,WAAM,GAAG,cAAM,CAAC,YAAY,CAAA;QAIrC,mEAAmE;QAC1D,YAAO,GAAiB;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChE,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;SACjE,CAAA;IARqD,CAAC;IAUvD;;;;;OAKG;IACG,aAAa,CAAC,IAAwB,EAAE,OAAyB;;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAA;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACxD,CAAC;YAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAE3D,0DAA0D;YAC1D,MAAM,MAAM,GAAW,CAAO,IAAY,EAAE,EAAE,gDAAC,OAAA,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA,GAAA,CAAA;YAEtG,MAAM,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAChC,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa;gBAC5C,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,SAAS;aACnB,CAAC,CAAA;YAEF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAClC,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,eAAiE,CACvE,CAAA;YACD,OAAO,EAAE,UAAU,EAAE,CAAA;QACvB,CAAC;KAAA;IAED;;;;;OAKG;IACW,UAAU,CAAC,MAAc,EAAE,OAAyB;;YAChE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;gBACnD,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC1B,CAAC,CAAA;YACF,MAAM,GAAG,GAAG,MAAM,IAAA,4DAAoC,EAAC,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;YAC9F,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC7C,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,KAAK,MAAM,CAAC,CAAA;YACxE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAA;YAC9D,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAE9C,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;QACrB,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAkC,EAAE,OAAyB;;;YACzF,MAAM,IAAI,GAAG,MAAM,YAAK,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACnE,IAAI,SAAiB,CAAA;YACrB,sJAAsJ;YACtJ,IAAI,MAAA,MAAM,CAAC,GAAG,0CAAE,GAAG,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAA;gBAC1B,2FAA2F;gBAC3F,uNAAuN;gBACvN,SAAS,GAAG,WAAW,IAAA,sBAAc,EAAC,GAAG,CAAC,IAAI,CAAA;YAChD,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACtB,SAAS,GAAG,MAAM,CAAC,GAAa,CAAA;YAClC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;YACrF,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YAE9D,MAAM,MAAM,GAAW,CAAO,IAAY,EAAE,EAAE;gBAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YAChE,CAAC,CAAA,CAAA;YAED,MAAM,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAChC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,GAAG;aACf,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,CACpC,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,iBAAsD,EAC3D,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAChB,CAAA;YACD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAA;QACrC,CAAC;KAAA;IAED;;;;;OAKG;IACG,aAAa,CAAC,IAAwB,EAAE,OAAyB;;YACrE,kDAAkD;YAClD,IAAI,KAAsB,CAAA;YAC1B,MAAM,QAAQ,GAAa,CAAO,IAAY,EAAE,SAAiB,EAAE,EAAE,gDACnE,OAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA,GAAA,CAAA;YAE9C,KAAK,GAAG,IAAI,2BAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;YACzE,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAE5D,OAAO,EAAE,gBAAgB,EAAE,CAAA;QAC7B,CAAC;KAAA;IAED;;;;;;;;OAQG;IACK,QAAQ,CAAC,KAAsB,EAAE,OAAyB,EAAE,IAAY,EAAE,SAAiB,EAAE,OAAmB;QACtH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAiB,CAAA;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAC9D,CAAC;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,KAAsB,EAAE,OAAyB,EAAE,IAAY,EAAE,SAAiB;;;YAC7F,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAA;YAC5D,MAAM,MAAM,GAAa,SAAS,CAAC,GAAW,CAAC,OAAmC,CAAC,GAAa,CAAA;YAChG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACzD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACjE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;YAC7E,CAAC;YACD,2GAA2G;YAC3G,MAAM,cAAc,GAAG,MAAA,MAAA,MAAM,CAAC,WAAW,0CAAE,kBAAkB,0CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;YACxF,CAAC;YACD,wGAAwG;YACxG,4EAA4E;YAC5E,MAAM,GAAG,GAAG,cAAc,CAAC,YAA0B,CAAA;YACrD,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;QAC9D,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAkC,EAAE,OAAyB;;YACzF,kDAAkD;YAClD,IAAI,KAAsB,CAAA;YAC1B,MAAM,QAAQ,GAAa,CAAO,IAAY,EAAE,SAAiB,EAAE,EAAE,gDACnE,OAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA,GAAA,CAAA;YAC9C,MAAM,UAAU,GAAe,CAAO,IAAY,EAAE,SAAiB,EAAE,OAAmB,EAAE,EAAE,gDAC5F,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA,GAAA,CAAA;YACzD,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAC1B,QAAQ;gBACR,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,UAAU,EAAE,UAAU;aACvB,CAAC,CAAA;YACF,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;YAE/F,OAAO,EAAE,gBAAgB,EAAE,CAAA;QAC7B,CAAC;KAAA;IAEO,mBAAmB,CAAC,OAAe;QACzC,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,SAAS;gBACZ,OAAO,OAAO,CAAA;YAChB,KAAK,WAAW;gBACd,OAAO,QAAQ,CAAA;YACjB,KAAK,WAAW;gBACd,OAAO,OAAO,CAAA;YAChB;gBACE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;CACF;AAhND,kCAgNC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @public
+ */
+declare const schema: any;
+export { schema };
+export { SDJwtPlugin } from './action-handler';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,QAAA,MAAM,MAAM,KAAmC,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,cAAc,SAAS,CAAA"}

package/dist/index.js

@@ -0,0 +1,26 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SDJwtPlugin = exports.schema = void 0;
+/**
+ * @public
+ */
+const schema = require('../plugin.schema.json');
+exports.schema = schema;
+var action_handler_1 = require("./action-handler");
+Object.defineProperty(exports, "SDJwtPlugin", { enumerable: true, get: function () { return action_handler_1.SDJwtPlugin; } });
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;GAEG;AACH,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;AACtC,wBAAM;AACf,mDAA8C;AAArC,6GAAA,WAAW,OAAA;AACpB,0CAAuB"}