@sphereon/ssi-sdk.siopv2-oid4vp-op-auth 0.33.1-feature.vcdm2.tsup.31 → 0.33.1-next.2

package/dist/session/OID4VP.js

@@ -0,0 +1,224 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OID4VP = void 0;
+const did_auth_siop_1 = require("@sphereon/did-auth-siop");
+const pex_1 = require("@sphereon/pex");
+const ssi_sdk_ext_identifier_resolution_1 = require("@sphereon/ssi-sdk-ext.identifier-resolution");
+const ssi_sdk_core_1 = require("@sphereon/ssi-sdk.core");
+const ssi_sdk_credential_store_1 = require("@sphereon/ssi-sdk.credential-store");
+const types_1 = require("../types");
+const functions_1 = require("./functions");
+class OID4VP {
+    constructor(args) {
+        const { session, allIdentifiers, hasher = ssi_sdk_core_1.defaultHasher } = args;
+        this.session = session;
+        this.allIdentifiers = allIdentifiers !== null && allIdentifiers !== void 0 ? allIdentifiers : [];
+        this.hasher = hasher;
+    }
+    static init(session, allIdentifiers, hasher) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return new OID4VP({ session, allIdentifiers: allIdentifiers !== null && allIdentifiers !== void 0 ? allIdentifiers : (yield session.getSupportedDIDs()), hasher });
+        });
+    }
+    getPresentationDefinitions() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const definitions = yield this.session.getPresentationDefinitions();
+            if (definitions) {
+                did_auth_siop_1.PresentationExchange.assertValidPresentationDefinitionWithLocations(definitions);
+            }
+            return definitions;
+        });
+    }
+    getPresentationExchange(args) {
+        const { verifiableCredentials, allIdentifiers, hasher } = args;
+        return new did_auth_siop_1.PresentationExchange({
+            allDIDs: allIdentifiers !== null && allIdentifiers !== void 0 ? allIdentifiers : this.allIdentifiers,
+            allVerifiableCredentials: verifiableCredentials,
+            hasher: hasher !== null && hasher !== void 0 ? hasher : this.hasher,
+        });
+    }
+    createVerifiablePresentations(credentialRole, credentialsWithDefinitions, opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield Promise.all(credentialsWithDefinitions.map((cred) => this.createVerifiablePresentation(credentialRole, cred, opts)));
+        });
+    }
+    createVerifiablePresentation(credentialRole, selectedVerifiableCredentials, opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h;
+            const { subjectIsHolder, holder, forceNoCredentialsInVP = false } = Object.assign({}, opts);
+            if (subjectIsHolder && holder) {
+                throw Error('Cannot both have subject is holder and a holderDID value at the same time (programming error)');
+            }
+            if (forceNoCredentialsInVP) {
+                selectedVerifiableCredentials.credentials = [];
+            }
+            else if (!(selectedVerifiableCredentials === null || selectedVerifiableCredentials === void 0 ? void 0 : selectedVerifiableCredentials.credentials) || selectedVerifiableCredentials.credentials.length === 0) {
+                throw Error('No verifiable verifiableCredentials provided for presentation definition');
+            }
+            const proofOptions = Object.assign(Object.assign({}, opts === null || opts === void 0 ? void 0 : opts.proofOpts), { challenge: (_d = (_b = (_a = opts === null || opts === void 0 ? void 0 : opts.proofOpts) === null || _a === void 0 ? void 0 : _a.nonce) !== null && _b !== void 0 ? _b : (_c = opts === null || opts === void 0 ? void 0 : opts.proofOpts) === null || _c === void 0 ? void 0 : _c.challenge) !== null && _d !== void 0 ? _d : this.session.nonce, domain: (_f = (_e = opts === null || opts === void 0 ? void 0 : opts.proofOpts) === null || _e === void 0 ? void 0 : _e.domain) !== null && _f !== void 0 ? _f : (yield this.session.getRedirectUri()) });
+            let idOpts = opts === null || opts === void 0 ? void 0 : opts.idOpts;
+            if (!idOpts) {
+                if (opts === null || opts === void 0 ? void 0 : opts.subjectIsHolder) {
+                    if (forceNoCredentialsInVP) {
+                        return Promise.reject(Error(`Cannot have subject is holder, when force no credentials is being used, as we could never determine the holder then. Please provide holderDID`));
+                    }
+                    const firstUniqueDC = selectedVerifiableCredentials.credentials[0];
+                    //        const firstVC = firstUniqueDC.uniformVerifiableCredential!
+                    if (typeof firstUniqueDC !== 'object' || !('digitalCredential' in firstUniqueDC)) {
+                        return Promise.reject(Error('If no opts provided, credentials should be of type UniqueDigitalCredential'));
+                    }
+                    idOpts = (0, ssi_sdk_ext_identifier_resolution_1.isOID4VCIssuerIdentifier)(firstUniqueDC.digitalCredential.kmsKeyRef)
+                        ? yield this.session.context.agent.identifierManagedGetByIssuer({
+                            identifier: firstUniqueDC.digitalCredential.kmsKeyRef,
+                        })
+                        : yield this.session.context.agent.identifierManagedGetByKid({
+                            identifier: firstUniqueDC.digitalCredential.kmsKeyRef,
+                            kmsKeyRef: firstUniqueDC.digitalCredential.kmsKeyRef,
+                        });
+                    /*
+                    const holder = CredentialMapper.isSdJwtDecodedCredential(firstVC)
+                      ? firstVC.decodedPayload.cnf?.jwk
+                        ? //TODO SDK-19: convert the JWK to hex and search for the appropriate key and associated DID
+                          //doesn't apply to did:jwk only, as you can represent any DID key as a JWK. So whenever you encounter a JWK it doesn't mean it had to come from a did:jwk in the system. It just can always be represented as a did:jwk
+                          `did:jwk:${encodeJoseBlob(firstVC.decodedPayload.cnf?.jwk)}#0`
+                        : firstVC.decodedPayload.sub
+                      : Array.isArray(firstVC.credentialSubject)
+                        ? firstVC.credentialSubject[0].id
+                        : firstVC.credentialSubject.id
+                    if (holder) {
+                      idOpts = { identifier: holder }
+                    }
+            */
+                }
+                else if (opts === null || opts === void 0 ? void 0 : opts.holder) {
+                    idOpts = { identifier: opts.holder };
+                }
+            }
+            // We are making sure to filter, in case the user submitted all verifiableCredentials in the wallet/agent. We also make sure to get original formats back
+            const vcs = forceNoCredentialsInVP
+                ? selectedVerifiableCredentials
+                : (opts === null || opts === void 0 ? void 0 : opts.applyFilter)
+                    ? yield this.filterCredentials(credentialRole, selectedVerifiableCredentials.definition, {
+                        restrictToFormats: opts === null || opts === void 0 ? void 0 : opts.restrictToFormats,
+                        restrictToDIDMethods: opts === null || opts === void 0 ? void 0 : opts.restrictToDIDMethods,
+                        filterOpts: {
+                            verifiableCredentials: selectedVerifiableCredentials.credentials,
+                        },
+                    })
+                    : {
+                        definition: selectedVerifiableCredentials.definition,
+                        credentials: selectedVerifiableCredentials.credentials,
+                    };
+            if (!idOpts) {
+                return Promise.reject(Error(`No identifier options present at this point`));
+            }
+            const signCallback = yield (0, functions_1.createOID4VPPresentationSignCallback)({
+                presentationSignCallback: this.session.options.presentationSignCallback,
+                idOpts,
+                context: this.session.context,
+                domain: proofOptions.domain,
+                challenge: proofOptions.challenge,
+                format: (_g = opts === null || opts === void 0 ? void 0 : opts.restrictToFormats) !== null && _g !== void 0 ? _g : selectedVerifiableCredentials.definition.definition.format,
+                skipDidResolution: (_h = opts === null || opts === void 0 ? void 0 : opts.skipDidResolution) !== null && _h !== void 0 ? _h : false,
+            });
+            const identifier = yield this.session.context.agent.identifierManagedGet(idOpts);
+            const verifiableCredentials = vcs.credentials.map((credential) => typeof credential === 'object' && 'digitalCredential' in credential ? credential.originalVerifiableCredential : credential);
+            const presentationResult = yield this.getPresentationExchange({
+                verifiableCredentials: verifiableCredentials,
+                allIdentifiers: this.allIdentifiers,
+                hasher: opts === null || opts === void 0 ? void 0 : opts.hasher,
+            }).createVerifiablePresentation(vcs.definition.definition, verifiableCredentials, signCallback, Object.assign({ proofOptions }, (identifier && (0, ssi_sdk_ext_identifier_resolution_1.isManagedIdentifierDidResult)(identifier) && { holderDID: identifier.did })));
+            const verifiablePresentations = presentationResult.verifiablePresentations.map((verifiablePresentation) => typeof verifiablePresentation !== 'string' &&
+                'proof' in verifiablePresentation &&
+                'jwt' in verifiablePresentation.proof &&
+                verifiablePresentation.proof.jwt
+                ? verifiablePresentation.proof.jwt
+                : verifiablePresentation);
+            return Object.assign(Object.assign({}, presentationResult), { verifiablePresentations, verifiableCredentials: verifiableCredentials, definition: selectedVerifiableCredentials.definition, idOpts });
+        });
+    }
+    filterCredentialsAgainstAllDefinitions(credentialRole, opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const defs = yield this.getPresentationDefinitions();
+            const result = [];
+            if (defs) {
+                for (const definition of defs) {
+                    result.push(yield this.filterCredentials(credentialRole, definition, opts));
+                }
+            }
+            return result;
+        });
+    }
+    filterCredentials(credentialRole, presentationDefinition, opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e;
+            const udcMap = new Map();
+            (_b = (_a = opts === null || opts === void 0 ? void 0 : opts.filterOpts) === null || _a === void 0 ? void 0 : _a.verifiableCredentials) === null || _b === void 0 ? void 0 : _b.forEach((credential) => {
+                if (typeof credential === 'object' && 'digitalCredential' in credential) {
+                    udcMap.set(credential.originalVerifiableCredential, credential);
+                }
+                else {
+                    udcMap.set(credential, credential);
+                }
+            });
+            const credentials = (yield this.filterCredentialsWithSelectionStatus(credentialRole, presentationDefinition, Object.assign(Object.assign({}, opts), { filterOpts: {
+                    verifiableCredentials: (_d = (_c = opts === null || opts === void 0 ? void 0 : opts.filterOpts) === null || _c === void 0 ? void 0 : _c.verifiableCredentials) === null || _d === void 0 ? void 0 : _d.map((credential) => {
+                        if (typeof credential === 'object' && 'digitalCredential' in credential) {
+                            return credential.originalVerifiableCredential;
+                        }
+                        else {
+                            return credential;
+                        }
+                    }),
+                } }))).verifiableCredential;
+            return {
+                definition: presentationDefinition,
+                credentials: (_e = credentials === null || credentials === void 0 ? void 0 : credentials.map((vc) => udcMap.get(vc))) !== null && _e !== void 0 ? _e : [],
+            };
+        });
+    }
+    filterCredentialsWithSelectionStatus(credentialRole, presentationDefinition, opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const selectionResults = yield this.getPresentationExchange({
+                verifiableCredentials: yield this.getCredentials(credentialRole, opts === null || opts === void 0 ? void 0 : opts.filterOpts),
+            }).selectVerifiableCredentialsForSubmission(presentationDefinition.definition, opts);
+            if (selectionResults.errors && selectionResults.errors.length > 0) {
+                throw Error(JSON.stringify(selectionResults.errors));
+            }
+            else if (selectionResults.areRequiredCredentialsPresent === pex_1.Status.ERROR) {
+                throw Error(`Not all required credentials are available to satisfy the relying party's request`);
+            }
+            const matches = selectionResults.matches;
+            if (!matches || matches.length === 0 || !selectionResults.verifiableCredential || selectionResults.verifiableCredential.length === 0) {
+                throw Error(JSON.stringify(selectionResults.errors));
+            }
+            return selectionResults;
+        });
+    }
+    getCredentials(credentialRole, filterOpts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if ((filterOpts === null || filterOpts === void 0 ? void 0 : filterOpts.verifiableCredentials) && filterOpts.verifiableCredentials.length > 0) {
+                return filterOpts.verifiableCredentials;
+            }
+            const filter = (0, ssi_sdk_credential_store_1.verifiableCredentialForRoleFilter)(credentialRole, filterOpts === null || filterOpts === void 0 ? void 0 : filterOpts.filter);
+            const uniqueCredentials = yield this.session.context.agent.crsGetUniqueCredentials({ filter });
+            return uniqueCredentials.map((uniqueVC) => {
+                const vc = uniqueVC.uniformVerifiableCredential;
+                const proof = Array.isArray(vc.proof) ? vc.proof : [vc.proof];
+                const jwtProof = proof.find((p) => (p === null || p === void 0 ? void 0 : p.type) === types_1.DEFAULT_JWT_PROOF_TYPE);
+                return jwtProof ? jwtProof.jwt : vc;
+            });
+        });
+    }
+}
+exports.OID4VP = OID4VP;
+//# sourceMappingURL=OID4VP.js.map

package/dist/session/OID4VP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OID4VP.js","sourceRoot":"","sources":["../../src/session/OID4VP.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2DAAkG;AAClG,uCAAiF;AAEjF,mGAKoD;AACpD,yDAAoE;AACpE,iFAA+G;AAG/G,oCAMiB;AACjB,2CAAkE;AAGlE,MAAa,MAAM;IAKjB,YAAoB,IAAiB;QACnC,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,GAAG,4BAAa,EAAE,GAAG,IAAI,CAAA;QAEhE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,cAAc,GAAG,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,EAAE,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAEM,MAAM,CAAO,IAAI,CAAC,OAAkB,EAAE,cAAwB,EAAE,MAAmB;;YACxF,OAAO,IAAI,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC9G,CAAC;KAAA;IAEY,0BAA0B;;YACrC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAA;YACnE,IAAI,WAAW,EAAE,CAAC;gBAChB,oCAAoB,CAAC,8CAA8C,CAAC,WAAW,CAAC,CAAA;YAClF,CAAC;YACD,OAAO,WAAW,CAAA;QACpB,CAAC;KAAA;IAEO,uBAAuB,CAAC,IAAkC;QAChE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAE9D,OAAO,IAAI,oCAAoB,CAAC;YAC9B,OAAO,EAAE,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,IAAI,CAAC,cAAc;YAC9C,wBAAwB,EAAE,qBAAqB;YAC/C,MAAM,EAAE,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,IAAI,CAAC,MAAM;SAC9B,CAAC,CAAA;IACJ,CAAC;IAEY,6BAA6B,CACxC,cAA8B,EAC9B,0BAAiE,EACjE,IAWC;;YAED,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACnI,CAAC;KAAA;IAEY,4BAA4B,CACvC,cAA8B,EAC9B,6BAAkE,EAClE,IAWC;;;YAED,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,sBAAsB,GAAG,KAAK,EAAE,qBAAQ,IAAI,CAAE,CAAA;YAC/E,IAAI,eAAe,IAAI,MAAM,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC,+FAA+F,CAAC,CAAA;YAC9G,CAAC;YACD,IAAI,sBAAsB,EAAE,CAAC;gBAC3B,6BAA6B,CAAC,WAAW,GAAG,EAAE,CAAA;YAChD,CAAC;iBAAM,IAAI,CAAC,CAAA,6BAA6B,aAA7B,6BAA6B,uBAA7B,6BAA6B,CAAE,WAAW,CAAA,IAAI,6BAA6B,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjH,MAAM,KAAK,CAAC,0EAA0E,CAAC,CAAA;YACzF,CAAC;YAED,MAAM,YAAY,mCACb,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,SAAS,KAClB,SAAS,EAAE,MAAA,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,SAAS,0CAAE,KAAK,mCAAI,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,SAAS,0CAAE,SAAS,mCAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EACrF,MAAM,EAAE,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,SAAS,0CAAE,MAAM,mCAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,GACzE,CAAA;YAED,IAAI,MAAM,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAA;YACzB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe,EAAE,CAAC;oBAC1B,IAAI,sBAAsB,EAAE,CAAC;wBAC3B,OAAO,OAAO,CAAC,MAAM,CACnB,KAAK,CACH,+IAA+I,CAChJ,CACF,CAAA;oBACH,CAAC;oBACD,MAAM,aAAa,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;oBAClE,oEAAoE;oBACpE,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,mBAAmB,IAAI,aAAa,CAAC,EAAE,CAAC;wBACjF,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC,CAAA;oBAC5G,CAAC;oBAED,MAAM,GAAG,IAAA,4DAAwB,EAAC,aAAa,CAAC,iBAAiB,CAAC,SAAS,CAAC;wBAC1E,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC;4BAC5D,UAAU,EAAE,aAAa,CAAC,iBAAiB,CAAC,SAAS;yBACtD,CAAC;wBACJ,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC;4BACzD,UAAU,EAAE,aAAa,CAAC,iBAAiB,CAAC,SAAS;4BACrD,SAAS,EAAE,aAAa,CAAC,iBAAiB,CAAC,SAAS;yBACrD,CAAC,CAAA;oBAEN;;;;;;;;;;;;;cAaN;gBACI,CAAC;qBAAM,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,EAAE,CAAC;oBACxB,MAAM,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;gBACtC,CAAC;YACH,CAAC;YAED,yJAAyJ;YACzJ,MAAM,GAAG,GAAG,sBAAsB;gBAChC,CAAC,CAAC,6BAA6B;gBAC/B,CAAC,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW;oBACjB,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,6BAA6B,CAAC,UAAU,EAAE;wBACrF,iBAAiB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,iBAAiB;wBAC1C,oBAAoB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,oBAAoB;wBAChD,UAAU,EAAE;4BACV,qBAAqB,EAAE,6BAA6B,CAAC,WAAW;yBACjE;qBACF,CAAC;oBACJ,CAAC,CAAC;wBACE,UAAU,EAAE,6BAA6B,CAAC,UAAU;wBACpD,WAAW,EAAE,6BAA6B,CAAC,WAAW;qBACvD,CAAA;YAEP,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAA;YAC7E,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,IAAA,gDAAoC,EAAC;gBAC9D,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB;gBACvE,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,MAAM,EAAE,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,iBAAiB,mCAAI,6BAA6B,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM;gBAC7F,iBAAiB,EAAE,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,iBAAiB,mCAAI,KAAK;aACpD,CAAC,CAAA;YACF,MAAM,UAAU,GAA4B,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;YACzG,MAAM,qBAAqB,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC/D,OAAO,UAAU,KAAK,QAAQ,IAAI,mBAAmB,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,4BAA6B,CAAC,CAAC,CAAC,UAAU,CAC5H,CAAA;YACD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC;gBAC5D,qBAAqB,EAAE,qBAAqB;gBAC5C,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,MAAM,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM;aACrB,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,qBAAqB,EAAE,YAAY,kBAC5F,YAAY,IAET,CAAC,UAAU,IAAI,IAAA,gEAA4B,EAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,EAC5F,CAAA;YAEF,MAAM,uBAAuB,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,sBAAsB,EAAE,EAAE,CACxG,OAAO,sBAAsB,KAAK,QAAQ;gBAC1C,OAAO,IAAI,sBAAsB;gBACjC,KAAK,IAAI,sBAAsB,CAAC,KAAK;gBACrC,sBAAsB,CAAC,KAAK,CAAC,GAAG;gBAC9B,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,GAAG;gBAClC,CAAC,CAAC,sBAAsB,CAC3B,CAAA;YAED,uCACK,kBAAkB,KACrB,uBAAuB,EACvB,qBAAqB,EAAE,qBAAqB,EAC5C,UAAU,EAAE,6BAA6B,CAAC,UAAU,EACpD,MAAM,IACP;QACH,CAAC;KAAA;IAEY,sCAAsC,CACjD,cAA8B,EAC9B,IAQC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAA;YACpD,MAAM,MAAM,GAA0C,EAAE,CAAA;YACxD,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAA;gBAC7E,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;KAAA;IAEY,iBAAiB,CAC5B,cAA8B,EAC9B,sBAA0D,EAC1D,IAKC;;;YAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwF,CAAA;YAC9G,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,0CAAE,qBAAqB,0CAAE,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;gBAC9D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,mBAAmB,IAAI,UAAU,EAAE,CAAC;oBACxE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,4BAA6B,EAAE,UAAU,CAAC,CAAA;gBAClE,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,MAAM,WAAW,GAAG,CAClB,MAAM,IAAI,CAAC,oCAAoC,CAAC,cAAc,EAAE,sBAAsB,kCACjF,IAAI,KACP,UAAU,EAAE;oBACV,qBAAqB,EAAE,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,0CAAE,qBAAqB,0CAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;wBACjF,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,mBAAmB,IAAI,UAAU,EAAE,CAAC;4BACxE,OAAO,UAAU,CAAC,4BAA6B,CAAA;wBACjD,CAAC;6BAAM,CAAC;4BACN,OAAO,UAAU,CAAA;wBACnB,CAAC;oBACH,CAAC,CAAC;iBACH,IACD,CACH,CAAC,oBAAoB,CAAA;YACtB,OAAO;gBACL,UAAU,EAAE,sBAAsB;gBAClC,WAAW,EAAE,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,mCAAI,EAAE;aAC7D,CAAA;QACH,CAAC;KAAA;IAEY,oCAAoC,CAC/C,cAA8B,EAC9B,sBAA0D,EAC1D,IAKC;;YAED,MAAM,gBAAgB,GAAkB,MAAM,IAAI,CAAC,uBAAuB,CAAC;gBACzE,qBAAqB,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,CAAC;aACnF,CAAC,CAAC,wCAAwC,CAAC,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YACpF,IAAI,gBAAgB,CAAC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;YACtD,CAAC;iBAAM,IAAI,gBAAgB,CAAC,6BAA6B,KAAK,YAAM,CAAC,KAAK,EAAE,CAAC;gBAC3E,MAAM,KAAK,CAAC,mFAAmF,CAAC,CAAA;YAClG,CAAC;YAED,MAAM,OAAO,GAA6C,gBAAgB,CAAC,OAAO,CAAA;YAClF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrI,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;YACtD,CAAC;YACD,OAAO,gBAAgB,CAAA;QACzB,CAAC;KAAA;IAEa,cAAc,CAC1B,cAA8B,EAC9B,UAGC;;YAED,IAAI,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,qBAAqB,KAAI,UAAU,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrF,OAAO,UAAU,CAAC,qBAAqB,CAAA;YACzC,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,4DAAiC,EAAC,cAAc,EAAE,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,MAAM,CAAC,CAAA;YACpF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;YAC9F,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAiC,EAAE,EAAE;gBACjE,MAAM,EAAE,GAAG,QAAQ,CAAC,2BAA4B,CAAA;gBAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;gBAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,MAAK,8BAAsB,CAAC,CAAA;gBAC9E,OAAO,QAAQ,CAAC,CAAC,CAAE,QAAQ,CAAC,GAAkB,CAAC,CAAC,CAAC,EAAE,CAAA;YACrD,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA;CACF;AA1SD,wBA0SC"}

package/dist/session/OpSession.d.ts

@@ -0,0 +1,39 @@
+import { PresentationDefinitionWithLocation, URI, VerifiedAuthorizationRequest } from '@sphereon/did-auth-siop';
+import { IIdentifier } from '@veramo/core';
+import { IOPOptions, IOpSessionArgs, IOpSessionGetOID4VPArgs, IOpsSendSiopAuthorizationResponseArgs, IRequiredContext } from '../types';
+import { OID4VP } from './OID4VP';
+export declare class OpSession {
+    readonly ts: number;
+    readonly id: string;
+    readonly options: IOPOptions;
+    readonly context: IRequiredContext;
+    private readonly requestJwtOrUri;
+    private verifiedAuthorizationRequest?;
+    private _nonce?;
+    private _state?;
+    private readonly _providedPresentationDefinitions?;
+    private constructor();
+    static init(options: Required<IOpSessionArgs>): Promise<OpSession>;
+    getAuthorizationRequest(): Promise<VerifiedAuthorizationRequest>;
+    getAuthorizationRequestURI(): Promise<URI>;
+    get nonce(): string;
+    get state(): string;
+    clear(): OpSession;
+    getSupportedDIDMethods(didPrefix?: boolean): Promise<string[]>;
+    private getAgentDIDMethodsSupported;
+    private getSubjectSyntaxTypesSupported;
+    private getRPDIDMethodsSupported;
+    getSupportedIdentifiers(opts?: {
+        createInCaseNoDIDFound?: boolean;
+    }): Promise<IIdentifier[]>;
+    getSupportedDIDs(): Promise<string[]>;
+    getRedirectUri(): Promise<string>;
+    hasPresentationDefinitions(): Promise<boolean>;
+    getPresentationDefinitions(): Promise<Array<PresentationDefinitionWithLocation> | undefined>;
+    getOID4VP(args: IOpSessionGetOID4VPArgs): Promise<OID4VP>;
+    private createPresentationVerificationCallback;
+    private createJarmResponseCallback;
+    sendAuthorizationResponse(args: IOpsSendSiopAuthorizationResponseArgs): Promise<Response>;
+    private countVCsInAllVPs;
+}
+//# sourceMappingURL=OpSession.d.ts.map

package/dist/session/OpSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpSession.d.ts","sourceRoot":"","sources":["../../src/session/OpSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,kCAAkC,EAMlC,GAAG,EAEH,4BAA4B,EAC7B,MAAM,yBAAyB,CAAA;AAehC,OAAO,EAAE,WAAW,EAA2B,MAAM,cAAc,CAAA;AAGnE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,uBAAuB,EAAE,qCAAqC,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAEvI,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAKjC,qBAAa,SAAS;IACpB,SAAgB,EAAE,SAAuB;IACzC,SAAgB,EAAE,EAAE,MAAM,CAAA;IAC1B,SAAgB,OAAO,EAAE,UAAU,CAAA;IACnC,SAAgB,OAAO,EAAE,gBAAgB,CAAA;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAc;IAC9C,OAAO,CAAC,4BAA4B,CAAC,CAA0C;IAC/E,OAAO,CAAC,MAAM,CAAC,CAAQ;IACvB,OAAO,CAAC,MAAM,CAAC,CAAQ;IACvB,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAsC;IAExF,OAAO;WAQa,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlE,uBAAuB,IAAI,OAAO,CAAC,4BAA4B,CAAC;IAahE,0BAA0B,IAAI,OAAO,CAAC,GAAG,CAAC;IAIvD,IAAI,KAAK,WAKR;IAED,IAAI,KAAK,WAKR;IAEM,KAAK,IAAI,SAAS;IAOZ,sBAAsB,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA0B3E,OAAO,CAAC,2BAA2B;YAMrB,8BAA8B;YAM9B,wBAAwB;IAiDzB,uBAAuB,CAAC,IAAI,CAAC,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IA6B5F,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAIrC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAIjC,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC;IAK9C,0BAA0B,IAAI,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,GAAG,SAAS,CAAC;IAO5F,SAAS,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC;IAItE,OAAO,CAAC,sCAAsC;YA6BhC,0BAA0B;IAyC3B,yBAAyB,CAAC,IAAI,EAAE,qCAAqC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyEtG,OAAO,CAAC,gBAAgB;CAoBzB"}

package/dist/session/OpSession.js

@@ -0,0 +1,365 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpSession = void 0;
+const did_auth_siop_1 = require("@sphereon/did-auth-siop");
+const ssi_sdk_ext_did_utils_1 = require("@sphereon/ssi-sdk-ext.did-utils");
+const ssi_sdk_core_1 = require("@sphereon/ssi-sdk.core");
+const ssi_types_1 = require("@sphereon/ssi-types");
+const debug_1 = __importDefault(require("debug"));
+const uuid_1 = require("uuid");
+const functions_1 = require("./functions");
+const OID4VP_1 = require("./OID4VP");
+const pex_1 = require("@sphereon/pex");
+const debug = (0, debug_1.default)(`sphereon:sdk:siop:op-session`);
+class OpSession {
+    constructor(options) {
+        this.ts = new Date().getDate();
+        this.id = options.sessionId;
+        this.options = options.op;
+        this.context = options.context;
+        this.requestJwtOrUri = options.requestJwtOrUri;
+        this._providedPresentationDefinitions = options.providedPresentationDefinitions;
+    }
+    static init(options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return new OpSession(options);
+        });
+    }
+    getAuthorizationRequest() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!this.verifiedAuthorizationRequest) {
+                const op = yield (0, functions_1.createOP)({ opOptions: this.options, context: this.context });
+                this.verifiedAuthorizationRequest = yield op.verifyAuthorizationRequest(this.requestJwtOrUri);
+                this._nonce = yield this.verifiedAuthorizationRequest.authorizationRequest.getMergedProperty('nonce');
+                this._state = yield this.verifiedAuthorizationRequest.authorizationRequest.getMergedProperty('state');
+                // only used to ensure that we have DID methods supported
+                yield this.getSupportedDIDMethods();
+            }
+            return this.verifiedAuthorizationRequest;
+        });
+    }
+    getAuthorizationRequestURI() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield did_auth_siop_1.URI.fromAuthorizationRequest((yield this.getAuthorizationRequest()).authorizationRequest);
+        });
+    }
+    get nonce() {
+        if (!this._nonce) {
+            throw Error('No nonce available. Please get authorization request first');
+        }
+        return this._nonce;
+    }
+    get state() {
+        if (!this._state) {
+            throw Error('No state available. Please get authorization request first');
+        }
+        return this._state;
+    }
+    clear() {
+        this._nonce = undefined;
+        this._state = undefined;
+        this.verifiedAuthorizationRequest = undefined;
+        return this;
+    }
+    getSupportedDIDMethods(didPrefix) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const agentMethods = this.getAgentDIDMethodsSupported({ didPrefix });
+            let rpMethods = yield this.getRPDIDMethodsSupported({ didPrefix, agentMethods });
+            debug(`RP supports subject syntax types: ${JSON.stringify(this.getSubjectSyntaxTypesSupported())}`);
+            if (rpMethods.dids.length === 0) {
+                debug(`RP does not support DIDs. Supported: ${JSON.stringify(this.getSubjectSyntaxTypesSupported())}`);
+                return [];
+            }
+            let intersection;
+            if (rpMethods.dids.includes('did')) {
+                intersection =
+                    agentMethods && agentMethods.length > 0
+                        ? agentMethods
+                        : (yield (0, ssi_sdk_ext_did_utils_1.getAgentDIDMethods)(this.context)).map((method) => convertDidMethod(method, didPrefix)); // fallback to the agent in case the agent methods are undefined
+            }
+            else if (!agentMethods || agentMethods.length === 0) {
+                intersection = (_a = rpMethods.dids) === null || _a === void 0 ? void 0 : _a.map((method) => convertDidMethod(method, didPrefix));
+            }
+            else {
+                intersection = agentMethods.filter((value) => rpMethods.dids.includes(value));
+            }
+            if (intersection.length === 0) {
+                throw Error('No matching DID methods between agent and relying party');
+            }
+            return intersection.map((value) => convertDidMethod(value, didPrefix));
+        });
+    }
+    getAgentDIDMethodsSupported(opts) {
+        var _a;
+        const agentMethods = (_a = this.options.supportedDIDMethods) === null || _a === void 0 ? void 0 : _a.map((method) => convertDidMethod(method, opts.didPrefix));
+        debug(`agent methods: ${JSON.stringify(agentMethods)}`);
+        return agentMethods;
+    }
+    getSubjectSyntaxTypesSupported() {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const authReq = yield this.getAuthorizationRequest();
+            const subjectSyntaxTypesSupported = (_a = authReq.registrationMetadataPayload) === null || _a === void 0 ? void 0 : _a.subject_syntax_types_supported;
+            return subjectSyntaxTypesSupported !== null && subjectSyntaxTypesSupported !== void 0 ? subjectSyntaxTypesSupported : [];
+        });
+    }
+    getRPDIDMethodsSupported(opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g;
+            let keyType;
+            const agentMethods = (_c = (_b = ((_a = opts.agentMethods) !== null && _a !== void 0 ? _a : this.getAgentDIDMethodsSupported(opts))) === null || _b === void 0 ? void 0 : _b.map((method) => convertDidMethod(method, opts.didPrefix))) !== null && _c !== void 0 ? _c : [];
+            debug(`agent methods supported: ${JSON.stringify(agentMethods)}`);
+            const authReq = yield this.getAuthorizationRequest();
+            const subjectSyntaxTypesSupported = (_e = (_d = authReq.registrationMetadataPayload) === null || _d === void 0 ? void 0 : _d.subject_syntax_types_supported) === null || _e === void 0 ? void 0 : _e.map((method) => convertDidMethod(method, opts.didPrefix)).filter((val) => !val.startsWith('did'));
+            debug(`subject syntax types supported in rp method supported: ${JSON.stringify(subjectSyntaxTypesSupported)}`);
+            const aud = yield authReq.authorizationRequest.getMergedProperty('aud');
+            let rpMethods = [];
+            if (aud && aud.startsWith('did:')) {
+                const didMethod = convertDidMethod((0, ssi_types_1.parseDid)(aud).method, opts.didPrefix);
+                debug(`aud did method: ${didMethod}`);
+                // The RP knows our DID, so we can use it to determine the supported DID methods
+                // If the aud did:method is not in the supported types, there still is something wrong, unless the RP signals to support all did methods
+                if (subjectSyntaxTypesSupported &&
+                    subjectSyntaxTypesSupported.length > 0 &&
+                    !subjectSyntaxTypesSupported.includes('did') &&
+                    !subjectSyntaxTypesSupported.includes(didMethod)) {
+                    throw Error(`The aud DID method ${didMethod} is not in the supported types ${subjectSyntaxTypesSupported}`);
+                }
+                rpMethods = [didMethod];
+            }
+            else if (subjectSyntaxTypesSupported) {
+                rpMethods = (Array.isArray(subjectSyntaxTypesSupported) ? subjectSyntaxTypesSupported : [subjectSyntaxTypesSupported]).map((method) => convertDidMethod(method, opts.didPrefix));
+            }
+            const isEBSI = rpMethods.length === 0 &&
+                (((_f = authReq.issuer) === null || _f === void 0 ? void 0 : _f.includes('.ebsi.eu')) || ((_g = (yield authReq.authorizationRequest.getMergedProperty('client_id'))) === null || _g === void 0 ? void 0 : _g.includes('.ebsi.eu')));
+            let codecName = undefined;
+            if (isEBSI && (!aud || !aud.startsWith('http'))) {
+                debug(`EBSI detected, adding did:key to supported DID methods for RP`);
+                const didKeyMethod = convertDidMethod('did:key', opts.didPrefix);
+                if (!(agentMethods === null || agentMethods === void 0 ? void 0 : agentMethods.includes(didKeyMethod))) {
+                    throw Error(`EBSI detected, but agent did not support did:key. Please reconfigure agent`);
+                }
+                rpMethods = [didKeyMethod];
+                keyType = 'Secp256r1';
+                codecName = 'jwk_jcs-pub';
+            }
+            return { dids: rpMethods, codecName, keyType };
+        });
+    }
+    getSupportedIdentifiers(opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // todo: we also need to check signature algo
+            const methods = yield this.getSupportedDIDMethods(true);
+            debug(`supported DID methods (did: prefix = true): ${JSON.stringify(methods)}`);
+            if (methods.length === 0) {
+                throw Error(`No DID methods are supported`);
+            }
+            const identifiers = yield this.context.agent
+                .didManagerFind()
+                .then((ids) => ids.filter((id) => methods.includes(id.provider)));
+            if (identifiers.length === 0) {
+                debug(`No identifiers available in agent supporting methods ${JSON.stringify(methods)}`);
+                if ((opts === null || opts === void 0 ? void 0 : opts.createInCaseNoDIDFound) !== false) {
+                    const { codecName, keyType } = yield this.getRPDIDMethodsSupported({
+                        didPrefix: true,
+                        agentMethods: methods,
+                    });
+                    const identifier = yield this.context.agent.didManagerCreate({
+                        provider: methods[0],
+                        options: { codecName, keyType, type: keyType }, // both keyType and type, because not every did provider has the same param
+                    });
+                    debug(`Created a new identifier for the SIOP interaction: ${identifier.did}`);
+                    identifiers.push(identifier);
+                }
+            }
+            debug(`supported identifiers: ${JSON.stringify(identifiers.map((id) => id.did))}`);
+            return identifiers;
+        });
+    }
+    getSupportedDIDs() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return (yield this.getSupportedIdentifiers()).map((id) => id.did);
+        });
+    }
+    getRedirectUri() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return Promise.resolve(this.verifiedAuthorizationRequest.responseURI);
+        });
+    }
+    hasPresentationDefinitions() {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const defs = (_a = this._providedPresentationDefinitions) !== null && _a !== void 0 ? _a : (yield this.getAuthorizationRequest()).presentationDefinitions;
+            return defs !== undefined && defs.length > 0;
+        });
+    }
+    getPresentationDefinitions() {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            if (!(yield this.hasPresentationDefinitions())) {
+                throw Error(`No presentation definitions found`);
+            }
+            return (_a = this._providedPresentationDefinitions) !== null && _a !== void 0 ? _a : (yield this.getAuthorizationRequest()).presentationDefinitions;
+        });
+    }
+    getOID4VP(args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return yield OID4VP_1.OID4VP.init(this, (_a = args.allIdentifiers) !== null && _a !== void 0 ? _a : [], args.hasher);
+        });
+    }
+    createPresentationVerificationCallback(context) {
+        function presentationVerificationCallback(args, presentationSubmission) {
+            return __awaiter(this, void 0, void 0, function* () {
+                let result;
+                if (ssi_types_1.CredentialMapper.isSdJwtEncoded(args)) {
+                    try {
+                        const sdJwtResult = yield context.agent.verifySdJwtPresentation({ presentation: args });
+                        result = {
+                            verified: 'header' in sdJwtResult,
+                            error: 'header' in sdJwtResult ? undefined : { message: 'could not verify SD JWT presentation' },
+                        };
+                    }
+                    catch (error) {
+                        result = {
+                            verified: false,
+                            error: { message: error.message },
+                        };
+                    }
+                }
+                else {
+                    // @ts-ignore TODO IVerifiablePresentation has too many union types for Veramo
+                    result = yield context.agent.verifyPresentation({ presentation: args });
+                }
+                return result;
+            });
+        }
+        return presentationVerificationCallback;
+    }
+    createJarmResponseCallback(_a) {
+        return __awaiter(this, arguments, void 0, function* ({ responseOpts, }) {
+            const agent = this.context.agent;
+            return function jarmResponse(opts) {
+                return __awaiter(this, void 0, void 0, function* () {
+                    var _a, _b;
+                    const { clientMetadata, requestObjectPayload, authorizationResponsePayload: authResponse } = opts;
+                    const jwk = yield did_auth_siop_1.OP.extractEncJwksFromClientMetadata(clientMetadata);
+                    // @ts-ignore // FIXME: Fix jwk inference
+                    const recipientKey = yield agent.identifierExternalResolveByJwk({ identifier: jwk });
+                    return yield agent
+                        .jwtEncryptJweCompactJwt({
+                        recipientKey,
+                        protectedHeader: {},
+                        alg: (_a = requestObjectPayload.client_metadata.authorization_encrypted_response_alg) !== null && _a !== void 0 ? _a : 'ECDH-ES',
+                        enc: (_b = requestObjectPayload.client_metadata.authorization_encrypted_response_enc) !== null && _b !== void 0 ? _b : 'A256GCM',
+                        apv: (0, ssi_sdk_core_1.encodeBase64url)(opts.requestObjectPayload.nonce),
+                        apu: (0, ssi_sdk_core_1.encodeBase64url)((0, uuid_1.v4)()),
+                        payload: authResponse,
+                        issuer: responseOpts.issuer,
+                        audience: responseOpts.audience,
+                    })
+                        .then((result) => {
+                        return { response: result.jwt };
+                    });
+                });
+            };
+        });
+    }
+    sendAuthorizationResponse(args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d;
+            const resolveOpts = (_a = this.options.resolveOpts) !== null && _a !== void 0 ? _a : {
+                resolver: (0, ssi_sdk_ext_did_utils_1.getAgentResolver)(this.context, {
+                    uniresolverResolution: true,
+                    localResolution: true,
+                    resolverResolution: true,
+                }),
+            };
+            if (!resolveOpts.subjectSyntaxTypesSupported || resolveOpts.subjectSyntaxTypesSupported.length === 0) {
+                resolveOpts.subjectSyntaxTypesSupported = yield this.getSupportedDIDMethods(true);
+            }
+            //todo: populate with the right verification params. In did-auth-siop we don't have any test that actually passes this parameter
+            const verification = {
+                presentationVerificationCallback: this.createPresentationVerificationCallback(this.context),
+            };
+            const request = yield this.getAuthorizationRequest();
+            const hasDefinitions = yield this.hasPresentationDefinitions();
+            if (hasDefinitions) {
+                const totalInputDescriptors = (_b = request.presentationDefinitions) === null || _b === void 0 ? void 0 : _b.reduce((sum, pd) => {
+                    return sum + pd.definition.input_descriptors.length;
+                }, 0);
+                const totalVCs = args.verifiablePresentations ? this.countVCsInAllVPs(args.verifiablePresentations, args.hasher) : 0;
+                if (!request.presentationDefinitions || !args.verifiablePresentations || totalVCs !== totalInputDescriptors) {
+                    throw Error(`Amount of presentations ${(_c = args.verifiablePresentations) === null || _c === void 0 ? void 0 : _c.length}, doesn't match expected ${(_d = request.presentationDefinitions) === null || _d === void 0 ? void 0 : _d.length}`);
+                }
+                else if (!args.presentationSubmission) {
+                    throw Error(`Presentation submission is required when verifiable presentations are required`);
+                }
+            }
+            const verifiablePresentations = args.verifiablePresentations
+                ? args.verifiablePresentations.map((vp) => ssi_types_1.CredentialMapper.storedPresentationToOriginalFormat(vp))
+                : [];
+            const op = yield (0, functions_1.createOP)({
+                opOptions: Object.assign(Object.assign({}, this.options), { resolveOpts: Object.assign({}, this.options.resolveOpts), eventEmitter: this.options.eventEmitter, presentationSignCallback: this.options.presentationSignCallback, wellknownDIDVerifyCallback: this.options.wellknownDIDVerifyCallback, supportedVersions: request.versions }),
+                idOpts: args.responseSignerOpts,
+                context: this.context,
+            });
+            //TODO change this to use the new functionalities by identifier-resolver and get the jwkIssuer for the responseOpts
+            let issuer = args.responseSignerOpts.issuer;
+            const responseOpts = Object.assign(Object.assign(Object.assign({ verification,
+                issuer }, (args.isFirstParty && { isFirstParty: args.isFirstParty })), (args.verifiablePresentations && {
+                presentationExchange: {
+                    verifiablePresentations,
+                    presentationSubmission: args.presentationSubmission,
+                },
+            })), { dcqlQuery: args.dcqlResponse });
+            const authResponse = yield op.createAuthorizationResponse(request, responseOpts);
+            const response = yield op.submitAuthorizationResponse(authResponse, yield this.createJarmResponseCallback({ responseOpts }));
+            if (response.status >= 400) {
+                throw Error(`Error ${response.status}: ${response.statusText || (yield response.text())}`);
+            }
+            else {
+                return response;
+            }
+        });
+    }
+    countVCsInAllVPs(verifiablePresentations, hasher) {
+        return verifiablePresentations.reduce((sum, vp) => {
+            var _a, _b;
+            if (ssi_types_1.CredentialMapper.isMsoMdocDecodedPresentation(vp) || ssi_types_1.CredentialMapper.isMsoMdocOid4VPEncoded(vp)) {
+                return sum + 1;
+            }
+            const uvp = ssi_types_1.CredentialMapper.toUniformPresentation(vp, { hasher: hasher !== null && hasher !== void 0 ? hasher : this.options.hasher });
+            if ((_a = uvp.verifiableCredential) === null || _a === void 0 ? void 0 : _a.length) {
+                return sum + ((_b = uvp.verifiableCredential) === null || _b === void 0 ? void 0 : _b.length);
+            }
+            const isSdJWT = ssi_types_1.CredentialMapper.isSdJwtDecodedCredential(uvp);
+            if (isSdJWT ||
+                (uvp.verifiableCredential && !pex_1.PEX.allowMultipleVCsPerPresentation(uvp.verifiableCredential))) {
+                return sum + 1;
+            }
+            return sum;
+        }, 0);
+    }
+}
+exports.OpSession = OpSession;
+function convertDidMethod(didMethod, didPrefix) {
+    if (didPrefix === false) {
+        return didMethod.startsWith('did:') ? didMethod.toLowerCase().replace('did:', '') : didMethod.toLowerCase();
+    }
+    return didMethod.startsWith('did:') ? didMethod.toLowerCase() : `did:${didMethod.toLowerCase().replace('did:', '')}`;
+}
+//# sourceMappingURL=OpSession.js.map