@sphereon/ssi-sdk.sd-jwt 0.32.1-feature.IATAB2B.52.190 → 0.32.1-feature.MWALL.715.121

package/src/utils.ts

@@ -1,5 +1,7 @@
-import { AsyncHasher, SdJwtTypeMetadata } from '@sphereon/ssi-types'
+import { SdJwtTypeMetadata } from '@sphereon/ssi-types'
 import * as u8a from 'uint8arrays'
+import { HasherSync } from '@sd-jwt/types/src/type'
+import { Hasher } from '@sd-jwt/types'
 
 // Helper function to fetch API with error handling
 export async function fetchUrlWithErrorHandling(url: string): Promise<Response> {
@@ -10,9 +12,51 @@ export async function fetchUrlWithErrorHandling(url: string): Promise<Response>
   return response
 }
 
-export async function validateIntegrity(input: any, integrityValue: string, hasher: AsyncHasher, alg?: string): Promise<boolean> {
-  const hash = await hasher(input, alg ?? 'sha256')
-  return u8a.toString(hash, 'utf-8') === integrityValue
+export type IntegrityAlg = 'sha256' | 'sha384' | 'sha512'
+
+function extractHashAlgFromIntegrity(integrityValue?: string): IntegrityAlg | undefined {
+  const val = integrityValue?.toLowerCase().trim().split('-')[0]
+  if (val === 'sha256' || val === 'sha384' || val === 'sha512') {
+    return val as IntegrityAlg
+  }
+  return undefined
+}
+
+export function extractHashFromIntegrity(integrityValue?: string): string | undefined {
+  return integrityValue?.toLowerCase().trim().split('-')[1]
+}
+
+export async function validateIntegrity({
+  input,
+  integrityValue,
+  hasher,
+}: {
+  input: any
+  integrityValue?: string
+  hasher: HasherSync | Hasher
+}): Promise<boolean> {
+  if (!integrityValue) {
+    return true
+  }
+  const alg = extractHashAlgFromIntegrity(integrityValue)
+  if (!alg) {
+    return false
+  }
+  const calculatedHash = await createIntegrity({ hasher, input, alg })
+  return calculatedHash == integrityValue
+}
+
+export async function createIntegrity({
+  input,
+  hasher,
+  alg = 'sha256',
+}: {
+  input: any
+  hasher: HasherSync | Hasher
+  alg?: IntegrityAlg
+}): Promise<string> {
+  const calculatedHash = await hasher(typeof input === 'string' ? input : JSON.stringify(input), alg)
+  return `${alg}-${u8a.toString(calculatedHash, 'base64')}`
 }
 
 export function assertValidTypeMetadata(metadata: SdJwtTypeMetadata, vct: string): void {