@sphereon/ssi-sdk.siopv2-oid4vp-rp-auth 0.34.1-feature.SSISDK.47.42 → 0.34.1-feature.SSISDK.50.100
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.cjs +351 -333
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +40 -739
- package/dist/index.d.ts +40 -739
- package/dist/index.js +344 -325
- package/dist/index.js.map +1 -1
- package/package.json +19 -19
- package/src/RPInstance.ts +4 -5
- package/src/agent/SIOPv2RP.ts +47 -35
- package/src/functions.ts +2 -2
- package/src/index.ts +1 -1
- package/src/types/ISIOPv2RP.ts +33 -42
package/dist/index.d.cts
CHANGED
|
@@ -1,393 +1,22 @@
|
|
|
1
1
|
import { IPluginMethodMap, IAgentContext, IResolver, IDIDManager, IKeyManager, ICredentialIssuer, ICredentialVerifier, IAgentPlugin } from '@veramo/core';
|
|
2
|
-
import { ResponseURIType, ClaimPayloadCommonOpts,
|
|
3
|
-
import {
|
|
4
|
-
import { DcqlQueryREST, HasherSync, W3CVerifiablePresentation } from '@sphereon/ssi-types';
|
|
5
|
-
import { Resolvable } from 'did-resolver';
|
|
2
|
+
import { ResponseURIType, ClaimPayloadCommonOpts, AuthorizationRequestPayload, RequestObjectPayload, AuthorizationRequestState, AuthorizationResponseState, AuthorizationResponsePayload, VerifiedAuthorizationResponse, ResponseMode, SupportedVersion, IRPSessionManager, ClientMetadataOpts, VerifyJwtCallback, PresentationVerificationCallback, RP, URI, AuthorizationRequest } from '@sphereon/did-auth-siop';
|
|
3
|
+
import { CheckLinkedDomain } from '@sphereon/did-auth-siop-adapter';
|
|
6
4
|
import { DIDDocument } from '@sphereon/did-uni-client';
|
|
7
|
-
import {
|
|
5
|
+
import { JwtIssuer } from '@sphereon/oid4vc-common';
|
|
8
6
|
import { IPresentationDefinition } from '@sphereon/pex';
|
|
9
7
|
import { IDIDOptions } from '@sphereon/ssi-sdk-ext.did-utils';
|
|
10
|
-
import {
|
|
11
|
-
import { VerifyCallback } from '@sphereon/wellknown-dids-client';
|
|
12
|
-
import { AuthorizationRequestStateStatus } from '@sphereon/ssi-sdk.siopv2-oid4vp-common';
|
|
13
|
-
import { IPDManager, VersionControlMode } from '@sphereon/ssi-sdk.pd-manager';
|
|
14
|
-
import { CheckLinkedDomain } from '@sphereon/did-auth-siop-adapter';
|
|
15
|
-
import { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt';
|
|
8
|
+
import { IIdentifierResolution, ManagedIdentifierOptsOrResult, ExternalIdentifierOIDFEntityIdOpts } from '@sphereon/ssi-sdk-ext.identifier-resolution';
|
|
16
9
|
import { IJwtService } from '@sphereon/ssi-sdk-ext.jwt-service';
|
|
17
|
-
import { JwtIssuer } from '@sphereon/oid4vc-common';
|
|
18
|
-
import { ImDLMdoc } from '@sphereon/ssi-sdk.mdl-mdoc';
|
|
19
10
|
import { ICredentialValidation, SchemaValidation } from '@sphereon/ssi-sdk.credential-validation';
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
},
|
|
30
|
-
additionalProperties: false
|
|
31
|
-
},
|
|
32
|
-
required: [
|
|
33
|
-
"sessionId"
|
|
34
|
-
],
|
|
35
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.getSessionForSiop } "
|
|
36
|
-
},
|
|
37
|
-
IRegisterSiopSessionArgs: {
|
|
38
|
-
type: "object",
|
|
39
|
-
properties: {
|
|
40
|
-
identifier: {
|
|
41
|
-
type: "object",
|
|
42
|
-
properties: {
|
|
43
|
-
did: {
|
|
44
|
-
type: "string"
|
|
45
|
-
},
|
|
46
|
-
alias: {
|
|
47
|
-
type: "string"
|
|
48
|
-
},
|
|
49
|
-
provider: {
|
|
50
|
-
type: "string"
|
|
51
|
-
},
|
|
52
|
-
controllerKeyId: {
|
|
53
|
-
type: "string"
|
|
54
|
-
},
|
|
55
|
-
keys: {
|
|
56
|
-
type: "array",
|
|
57
|
-
items: {
|
|
58
|
-
type: "object",
|
|
59
|
-
properties: {
|
|
60
|
-
additionalProperties: true
|
|
61
|
-
}
|
|
62
|
-
}
|
|
63
|
-
},
|
|
64
|
-
services: {
|
|
65
|
-
type: "array",
|
|
66
|
-
items: {
|
|
67
|
-
type: "object",
|
|
68
|
-
properties: {
|
|
69
|
-
additionalProperties: true
|
|
70
|
-
}
|
|
71
|
-
}
|
|
72
|
-
}
|
|
73
|
-
},
|
|
74
|
-
additionalProperties: false,
|
|
75
|
-
required: [
|
|
76
|
-
"did",
|
|
77
|
-
"provider",
|
|
78
|
-
"keys",
|
|
79
|
-
"services"
|
|
80
|
-
]
|
|
81
|
-
},
|
|
82
|
-
sessionId: {
|
|
83
|
-
type: "string"
|
|
84
|
-
},
|
|
85
|
-
expiresIn: {
|
|
86
|
-
type: "number"
|
|
87
|
-
},
|
|
88
|
-
additionalProperties: false
|
|
89
|
-
},
|
|
90
|
-
required: [
|
|
91
|
-
"identifier"
|
|
92
|
-
],
|
|
93
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.registerSessionForSiop } "
|
|
94
|
-
},
|
|
95
|
-
IRemoveSiopSessionArgs: {
|
|
96
|
-
type: "object",
|
|
97
|
-
properties: {
|
|
98
|
-
sessionId: {
|
|
99
|
-
type: "string"
|
|
100
|
-
},
|
|
101
|
-
additionalProperties: false
|
|
102
|
-
},
|
|
103
|
-
required: [
|
|
104
|
-
"sessionId"
|
|
105
|
-
],
|
|
106
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.removeSessionForSiop } "
|
|
107
|
-
},
|
|
108
|
-
IAuthenticateWithSiopArgs: {
|
|
109
|
-
type: "object",
|
|
110
|
-
properties: {
|
|
111
|
-
sessionId: {
|
|
112
|
-
type: "string"
|
|
113
|
-
},
|
|
114
|
-
stateId: {
|
|
115
|
-
type: "string"
|
|
116
|
-
},
|
|
117
|
-
redirectUrl: {
|
|
118
|
-
type: "string"
|
|
119
|
-
},
|
|
120
|
-
additionalProperties: false
|
|
121
|
-
},
|
|
122
|
-
required: [
|
|
123
|
-
"sessionId",
|
|
124
|
-
"stateId",
|
|
125
|
-
"redirectUrl"
|
|
126
|
-
],
|
|
127
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.authenticateWithSiop } "
|
|
128
|
-
},
|
|
129
|
-
IResponse: {
|
|
130
|
-
type: "object",
|
|
131
|
-
properties: {
|
|
132
|
-
status: {
|
|
133
|
-
type: "number"
|
|
134
|
-
},
|
|
135
|
-
additionalProperties: true
|
|
136
|
-
},
|
|
137
|
-
required: [
|
|
138
|
-
"status"
|
|
139
|
-
],
|
|
140
|
-
description: "Result of {@link DidAuthSiopOpAuthenticator.authenticateWithSiop & DidAuthSiopOpAuthenticator.sendSiopAuthenticationResponse } "
|
|
141
|
-
},
|
|
142
|
-
IGetSiopAuthenticationRequestFromRpArgs: {
|
|
143
|
-
type: "object",
|
|
144
|
-
properties: {
|
|
145
|
-
sessionId: {
|
|
146
|
-
type: "string"
|
|
147
|
-
},
|
|
148
|
-
stateId: {
|
|
149
|
-
type: "string"
|
|
150
|
-
},
|
|
151
|
-
redirectUrl: {
|
|
152
|
-
type: "string"
|
|
153
|
-
},
|
|
154
|
-
additionalProperties: false
|
|
155
|
-
},
|
|
156
|
-
required: [
|
|
157
|
-
"sessionId",
|
|
158
|
-
"stateId",
|
|
159
|
-
"redirectUrl"
|
|
160
|
-
],
|
|
161
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.getSiopAuthenticationRequestFromRP } "
|
|
162
|
-
},
|
|
163
|
-
ParsedAuthenticationRequestURI: {
|
|
164
|
-
type: "object",
|
|
165
|
-
properties: {
|
|
166
|
-
jwt: {
|
|
167
|
-
type: "string"
|
|
168
|
-
},
|
|
169
|
-
requestPayload: {
|
|
170
|
-
type: "object",
|
|
171
|
-
properties: {
|
|
172
|
-
additionalProperties: true
|
|
173
|
-
}
|
|
174
|
-
},
|
|
175
|
-
registration: {
|
|
176
|
-
type: "object",
|
|
177
|
-
properties: {
|
|
178
|
-
additionalProperties: true
|
|
179
|
-
}
|
|
180
|
-
},
|
|
181
|
-
additionalProperties: false
|
|
182
|
-
},
|
|
183
|
-
required: [
|
|
184
|
-
"jwt",
|
|
185
|
-
"requestPayload",
|
|
186
|
-
"registration"
|
|
187
|
-
],
|
|
188
|
-
description: "Result of {@link DidAuthSiopOpAuthenticator.getSiopAuthenticationRequestFromRP } "
|
|
189
|
-
},
|
|
190
|
-
IGetSiopAuthenticationRequestDetailsArgs: {
|
|
191
|
-
type: "object",
|
|
192
|
-
properties: {
|
|
193
|
-
sessionId: {
|
|
194
|
-
type: "string"
|
|
195
|
-
},
|
|
196
|
-
verifiedAuthenticationRequest: {
|
|
197
|
-
type: "object",
|
|
198
|
-
properties: {
|
|
199
|
-
additionalProperties: true
|
|
200
|
-
}
|
|
201
|
-
},
|
|
202
|
-
credentialFilter: {
|
|
203
|
-
type: "object",
|
|
204
|
-
properties: {
|
|
205
|
-
additionalProperties: true
|
|
206
|
-
}
|
|
207
|
-
},
|
|
208
|
-
additionalProperties: false
|
|
209
|
-
},
|
|
210
|
-
required: [
|
|
211
|
-
"sessionId",
|
|
212
|
-
"verifiedAuthenticationRequest"
|
|
213
|
-
],
|
|
214
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.getSiopAuthenticationRequestDetails } "
|
|
215
|
-
},
|
|
216
|
-
IAuthRequestDetails: {
|
|
217
|
-
type: "object",
|
|
218
|
-
properties: {
|
|
219
|
-
id: {
|
|
220
|
-
type: "string"
|
|
221
|
-
},
|
|
222
|
-
alsoKnownAs: {
|
|
223
|
-
type: "array",
|
|
224
|
-
items: {
|
|
225
|
-
type: "string"
|
|
226
|
-
}
|
|
227
|
-
},
|
|
228
|
-
vpResponseOpts: {
|
|
229
|
-
type: "object",
|
|
230
|
-
properties: {
|
|
231
|
-
additionalProperties: true
|
|
232
|
-
}
|
|
233
|
-
},
|
|
234
|
-
additionalProperties: false
|
|
235
|
-
},
|
|
236
|
-
required: [
|
|
237
|
-
"id",
|
|
238
|
-
"vpResponseOpts"
|
|
239
|
-
],
|
|
240
|
-
description: "Result of {@link DidAuthSiopOpAuthenticator.getSiopAuthenticationRequestDetails } "
|
|
241
|
-
},
|
|
242
|
-
IVerifySiopAuthenticationRequestUriArgs: {
|
|
243
|
-
type: "object",
|
|
244
|
-
properties: {
|
|
245
|
-
sessionId: {
|
|
246
|
-
type: "string"
|
|
247
|
-
},
|
|
248
|
-
ParsedAuthenticationRequestURI: {
|
|
249
|
-
type: "object",
|
|
250
|
-
properties: {
|
|
251
|
-
additionalProperties: true
|
|
252
|
-
}
|
|
253
|
-
},
|
|
254
|
-
additionalProperties: false
|
|
255
|
-
},
|
|
256
|
-
required: [
|
|
257
|
-
"sessionId",
|
|
258
|
-
"ParsedAuthenticationRequestURI"
|
|
259
|
-
],
|
|
260
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.verifySiopAuthenticationRequestURI } "
|
|
261
|
-
},
|
|
262
|
-
VerifiedAuthorizationRequest: {
|
|
263
|
-
type: "object",
|
|
264
|
-
properties: {
|
|
265
|
-
payload: {
|
|
266
|
-
type: "object",
|
|
267
|
-
properties: {
|
|
268
|
-
additionalProperties: true
|
|
269
|
-
}
|
|
270
|
-
},
|
|
271
|
-
presentationDefinitions: {
|
|
272
|
-
type: "object",
|
|
273
|
-
properties: {
|
|
274
|
-
additionalProperties: true
|
|
275
|
-
}
|
|
276
|
-
},
|
|
277
|
-
verifyOpts: {
|
|
278
|
-
type: "object",
|
|
279
|
-
properties: {
|
|
280
|
-
additionalProperties: true
|
|
281
|
-
}
|
|
282
|
-
},
|
|
283
|
-
additionalProperties: false
|
|
284
|
-
},
|
|
285
|
-
required: [
|
|
286
|
-
"payload",
|
|
287
|
-
"verifyOpts"
|
|
288
|
-
],
|
|
289
|
-
description: "Result of {@link DidAuthSiopOpAuthenticator.verifySiopAuthenticationRequestURI } "
|
|
290
|
-
},
|
|
291
|
-
ISendSiopAuthenticationResponseArgs: {
|
|
292
|
-
type: "object",
|
|
293
|
-
properties: {
|
|
294
|
-
sessionId: {
|
|
295
|
-
type: "string"
|
|
296
|
-
},
|
|
297
|
-
verifiedAuthenticationRequest: {
|
|
298
|
-
type: "object",
|
|
299
|
-
properties: {
|
|
300
|
-
additionalProperties: true
|
|
301
|
-
}
|
|
302
|
-
},
|
|
303
|
-
verifiablePresentationResponse: {
|
|
304
|
-
type: "object",
|
|
305
|
-
properties: {
|
|
306
|
-
additionalProperties: true
|
|
307
|
-
}
|
|
308
|
-
},
|
|
309
|
-
additionalProperties: false
|
|
310
|
-
},
|
|
311
|
-
required: [
|
|
312
|
-
"sessionId",
|
|
313
|
-
"verifiedAuthenticationRequest"
|
|
314
|
-
],
|
|
315
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.sendSiopAuthenticationResponse } "
|
|
316
|
-
}
|
|
317
|
-
},
|
|
318
|
-
methods: {
|
|
319
|
-
getSessionForSiop: {
|
|
320
|
-
description: "Get SIOP session",
|
|
321
|
-
"arguments": {
|
|
322
|
-
$ref: "#/components/schemas/IGetSiopSessionArgs"
|
|
323
|
-
},
|
|
324
|
-
returnType: "object"
|
|
325
|
-
},
|
|
326
|
-
registerSessionForSiop: {
|
|
327
|
-
description: "Register SIOP session",
|
|
328
|
-
"arguments": {
|
|
329
|
-
$ref: "#/components/schemas/IRegisterSiopSessionArgs"
|
|
330
|
-
},
|
|
331
|
-
returnType: "object"
|
|
332
|
-
},
|
|
333
|
-
removeSessionForSiop: {
|
|
334
|
-
description: "Remove SIOP session",
|
|
335
|
-
"arguments": {
|
|
336
|
-
$ref: "#/components/schemas/IRemoveSiopSessionArgs"
|
|
337
|
-
},
|
|
338
|
-
returnType: "boolean"
|
|
339
|
-
},
|
|
340
|
-
authenticateWithSiop: {
|
|
341
|
-
description: "Authenticate using DID Auth SIOP",
|
|
342
|
-
"arguments": {
|
|
343
|
-
$ref: "#/components/schemas/IAuthenticateWithSiopArgs"
|
|
344
|
-
},
|
|
345
|
-
returnType: {
|
|
346
|
-
$ref: "#/components/schemas/Response"
|
|
347
|
-
}
|
|
348
|
-
},
|
|
349
|
-
getSiopAuthenticationRequestFromRP: {
|
|
350
|
-
description: "Get authentication request from RP",
|
|
351
|
-
"arguments": {
|
|
352
|
-
$ref: "#/components/schemas/IGetSiopAuthenticationRequestFromRpArgs"
|
|
353
|
-
},
|
|
354
|
-
returnType: {
|
|
355
|
-
$ref: "#/components/schemas/ParsedAuthenticationRequestURI"
|
|
356
|
-
}
|
|
357
|
-
},
|
|
358
|
-
getSiopAuthenticationRequestDetails: {
|
|
359
|
-
description: "Get authentication request details",
|
|
360
|
-
"arguments": {
|
|
361
|
-
$ref: "#/components/schemas/IGetSiopAuthenticationRequestDetailsArgs"
|
|
362
|
-
},
|
|
363
|
-
returnType: {
|
|
364
|
-
$ref: "#/components/schemas/IAuthRequestDetails"
|
|
365
|
-
}
|
|
366
|
-
},
|
|
367
|
-
verifySiopAuthenticationRequestURI: {
|
|
368
|
-
description: "Verify authentication request URI",
|
|
369
|
-
"arguments": {
|
|
370
|
-
$ref: "#/components/schemas/IVerifySiopAuthenticationRequestUriArgs"
|
|
371
|
-
},
|
|
372
|
-
returnType: {
|
|
373
|
-
$ref: "#/components/schemas/VerifiedAuthorizationRequest"
|
|
374
|
-
}
|
|
375
|
-
},
|
|
376
|
-
sendSiopAuthenticationResponse: {
|
|
377
|
-
description: "Send authentication response",
|
|
378
|
-
"arguments": {
|
|
379
|
-
$ref: "#/components/schemas/ISendSiopAuthenticationResponseArgs"
|
|
380
|
-
},
|
|
381
|
-
returnType: {
|
|
382
|
-
$ref: "#/components/schemas/IRequiredContext"
|
|
383
|
-
}
|
|
384
|
-
}
|
|
385
|
-
}
|
|
386
|
-
}
|
|
387
|
-
};
|
|
388
|
-
var plugin_schema = {
|
|
389
|
-
IDidAuthSiopOpAuthenticator: IDidAuthSiopOpAuthenticator
|
|
390
|
-
};
|
|
11
|
+
import { ImDLMdoc } from '@sphereon/ssi-sdk.mdl-mdoc';
|
|
12
|
+
import { IPDManager, VersionControlMode } from '@sphereon/ssi-sdk.pd-manager';
|
|
13
|
+
import { IPresentationExchange } from '@sphereon/ssi-sdk.presentation-exchange';
|
|
14
|
+
import { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt';
|
|
15
|
+
import { AuthorizationRequestStateStatus } from '@sphereon/ssi-sdk.siopv2-oid4vp-common';
|
|
16
|
+
import { AdditionalClaims, DcqlQueryPayload, HasherSync } from '@sphereon/ssi-types';
|
|
17
|
+
import { VerifyCallback } from '@sphereon/wellknown-dids-client';
|
|
18
|
+
import { Resolvable } from 'did-resolver';
|
|
19
|
+
import { EventEmitter } from 'events';
|
|
391
20
|
|
|
392
21
|
declare enum VerifiedDataMode {
|
|
393
22
|
NONE = "none",
|
|
@@ -412,9 +41,8 @@ interface ISiopv2RPOpts {
|
|
|
412
41
|
interface IRPDefaultOpts extends IRPOptions {
|
|
413
42
|
}
|
|
414
43
|
interface ICreateAuthRequestArgs {
|
|
415
|
-
|
|
44
|
+
definitionId: string;
|
|
416
45
|
correlationId: string;
|
|
417
|
-
useQueryIdInstance?: boolean;
|
|
418
46
|
responseURIType: ResponseURIType;
|
|
419
47
|
responseURI: string;
|
|
420
48
|
responseRedirectURI?: string;
|
|
@@ -423,51 +51,49 @@ interface ICreateAuthRequestArgs {
|
|
|
423
51
|
nonce?: string;
|
|
424
52
|
state?: string;
|
|
425
53
|
claims?: ClaimPayloadCommonOpts;
|
|
426
|
-
callback?: CallbackOpts;
|
|
427
54
|
}
|
|
428
55
|
interface IGetAuthRequestStateArgs {
|
|
429
56
|
correlationId: string;
|
|
430
|
-
|
|
57
|
+
definitionId: string;
|
|
431
58
|
errorOnNotFound?: boolean;
|
|
432
59
|
}
|
|
433
60
|
interface IGetAuthResponseStateArgs {
|
|
434
61
|
correlationId: string;
|
|
435
|
-
|
|
62
|
+
definitionId: string;
|
|
436
63
|
errorOnNotFound?: boolean;
|
|
437
64
|
progressRequestStateTo?: AuthorizationRequestStateStatus;
|
|
438
65
|
includeVerifiedData?: VerifiedDataMode;
|
|
439
66
|
}
|
|
440
67
|
interface IUpdateRequestStateArgs {
|
|
441
|
-
|
|
68
|
+
definitionId: string;
|
|
442
69
|
correlationId: string;
|
|
443
70
|
state: AuthorizationRequestStateStatus;
|
|
444
71
|
error?: string;
|
|
445
72
|
}
|
|
446
73
|
interface IDeleteAuthStateArgs {
|
|
447
74
|
correlationId: string;
|
|
448
|
-
|
|
75
|
+
definitionId: string;
|
|
449
76
|
}
|
|
450
77
|
interface IVerifyAuthResponseStateArgs {
|
|
451
78
|
authorizationResponse: string | AuthorizationResponsePayload;
|
|
452
|
-
|
|
79
|
+
definitionId?: string;
|
|
453
80
|
correlationId: string;
|
|
454
81
|
audience?: string;
|
|
455
|
-
|
|
456
|
-
dcqlQuery?: DcqlQueryREST;
|
|
82
|
+
dcqlQueryPayload?: DcqlQueryPayload;
|
|
457
83
|
}
|
|
458
84
|
interface IDefinitionPair {
|
|
459
|
-
definitionPayload
|
|
460
|
-
dcqlPayload?:
|
|
85
|
+
definitionPayload?: IPresentationDefinition;
|
|
86
|
+
dcqlPayload?: DcqlQueryPayload;
|
|
461
87
|
}
|
|
462
88
|
interface ImportDefinitionsArgs {
|
|
463
|
-
|
|
89
|
+
definitions: Array<IDefinitionPair>;
|
|
464
90
|
tenantId?: string;
|
|
465
91
|
version?: string;
|
|
466
92
|
versionControlMode?: VersionControlMode;
|
|
467
93
|
}
|
|
468
94
|
interface IGetRedirectUriArgs {
|
|
469
95
|
correlationId: string;
|
|
470
|
-
|
|
96
|
+
definitionId?: string;
|
|
471
97
|
state?: string;
|
|
472
98
|
}
|
|
473
99
|
interface IAuthorizationRequestPayloads {
|
|
@@ -480,7 +106,7 @@ interface IPEXDefinitionPersistArgs extends IPEXInstanceOptions {
|
|
|
480
106
|
ttl?: number;
|
|
481
107
|
}
|
|
482
108
|
interface ISiopRPInstanceArgs {
|
|
483
|
-
|
|
109
|
+
definitionId?: string;
|
|
484
110
|
responseRedirectURI?: string;
|
|
485
111
|
}
|
|
486
112
|
interface IPEXInstanceOptions extends IPEXOptions {
|
|
@@ -501,7 +127,7 @@ interface IRPOptions {
|
|
|
501
127
|
}
|
|
502
128
|
interface IPEXOptions {
|
|
503
129
|
presentationVerifyCallback?: PresentationVerificationCallback;
|
|
504
|
-
|
|
130
|
+
definitionId: string;
|
|
505
131
|
version?: string;
|
|
506
132
|
tenantId?: string;
|
|
507
133
|
}
|
|
@@ -515,15 +141,8 @@ interface PerDidResolver {
|
|
|
515
141
|
interface IAuthRequestDetails {
|
|
516
142
|
rpDIDDocument?: DIDDocument;
|
|
517
143
|
id: string;
|
|
518
|
-
verifiablePresentationMatches: IPresentationWithDefinition[];
|
|
519
144
|
alsoKnownAs?: string[];
|
|
520
145
|
}
|
|
521
|
-
interface IPresentationWithDefinition {
|
|
522
|
-
location: VPTokenLocation;
|
|
523
|
-
definition: PresentationDefinitionWithLocation;
|
|
524
|
-
format: VerifiablePresentationTypeFormat;
|
|
525
|
-
presentation: W3CVerifiablePresentation;
|
|
526
|
-
}
|
|
527
146
|
interface ISIOPIdentifierOptions extends Omit<IDIDOptions, 'idOpts'> {
|
|
528
147
|
idOpts: ManagedIdentifierOptsOrResult;
|
|
529
148
|
oidfOpts?: ExternalIdentifierOIDFEntityIdOpts;
|
|
@@ -533,6 +152,9 @@ interface ISIOPIdentifierOptions extends Omit<IDIDOptions, 'idOpts'> {
|
|
|
533
152
|
type CredentialOpts = {
|
|
534
153
|
hasher?: HasherSync;
|
|
535
154
|
};
|
|
155
|
+
interface AuthorizationResponseStateWithVerifiedData extends AuthorizationResponseState {
|
|
156
|
+
verifiedData?: AdditionalClaims;
|
|
157
|
+
}
|
|
536
158
|
type IRequiredContext = IAgentContext<IResolver & IDIDManager & IKeyManager & IIdentifierResolution & ICredentialIssuer & ICredentialValidation & ICredentialVerifier & IPresentationExchange & IPDManager & ISDJwtPlugin & IJwtService & ImDLMdoc>;
|
|
537
159
|
|
|
538
160
|
declare class RPInstance {
|
|
@@ -549,341 +171,15 @@ declare class RPInstance {
|
|
|
549
171
|
hasDefinition(): boolean;
|
|
550
172
|
get definitionId(): string | undefined;
|
|
551
173
|
getPresentationDefinition(context: IRequiredContext): Promise<IPresentationDefinition | undefined>;
|
|
552
|
-
createAuthorizationRequestURI(createArgs: Omit<ICreateAuthRequestArgs, '
|
|
553
|
-
createAuthorizationRequest(createArgs: Omit<ICreateAuthRequestArgs, '
|
|
174
|
+
createAuthorizationRequestURI(createArgs: Omit<ICreateAuthRequestArgs, 'definitionId'>, context: IRequiredContext): Promise<URI>;
|
|
175
|
+
createAuthorizationRequest(createArgs: Omit<ICreateAuthRequestArgs, 'definitionId'>, context: IRequiredContext): Promise<AuthorizationRequest>;
|
|
554
176
|
}
|
|
555
177
|
|
|
556
178
|
declare class SIOPv2RP implements IAgentPlugin {
|
|
557
179
|
private readonly opts;
|
|
558
180
|
private static readonly _DEFAULT_OPTS_KEY;
|
|
559
181
|
private readonly instances;
|
|
560
|
-
readonly schema:
|
|
561
|
-
components: {
|
|
562
|
-
schemas: {
|
|
563
|
-
IGetSiopSessionArgs: {
|
|
564
|
-
type: string;
|
|
565
|
-
properties: {
|
|
566
|
-
sessionId: {
|
|
567
|
-
type: string;
|
|
568
|
-
};
|
|
569
|
-
additionalProperties: boolean;
|
|
570
|
-
};
|
|
571
|
-
required: string[];
|
|
572
|
-
description: string;
|
|
573
|
-
};
|
|
574
|
-
IRegisterSiopSessionArgs: {
|
|
575
|
-
type: string;
|
|
576
|
-
properties: {
|
|
577
|
-
identifier: {
|
|
578
|
-
type: string;
|
|
579
|
-
properties: {
|
|
580
|
-
did: {
|
|
581
|
-
type: string;
|
|
582
|
-
};
|
|
583
|
-
alias: {
|
|
584
|
-
type: string;
|
|
585
|
-
};
|
|
586
|
-
provider: {
|
|
587
|
-
type: string;
|
|
588
|
-
};
|
|
589
|
-
controllerKeyId: {
|
|
590
|
-
type: string;
|
|
591
|
-
};
|
|
592
|
-
keys: {
|
|
593
|
-
type: string;
|
|
594
|
-
items: {
|
|
595
|
-
type: string;
|
|
596
|
-
properties: {
|
|
597
|
-
additionalProperties: boolean;
|
|
598
|
-
};
|
|
599
|
-
};
|
|
600
|
-
};
|
|
601
|
-
services: {
|
|
602
|
-
type: string;
|
|
603
|
-
items: {
|
|
604
|
-
type: string;
|
|
605
|
-
properties: {
|
|
606
|
-
additionalProperties: boolean;
|
|
607
|
-
};
|
|
608
|
-
};
|
|
609
|
-
};
|
|
610
|
-
};
|
|
611
|
-
additionalProperties: boolean;
|
|
612
|
-
required: string[];
|
|
613
|
-
};
|
|
614
|
-
sessionId: {
|
|
615
|
-
type: string;
|
|
616
|
-
};
|
|
617
|
-
expiresIn: {
|
|
618
|
-
type: string;
|
|
619
|
-
};
|
|
620
|
-
additionalProperties: boolean;
|
|
621
|
-
};
|
|
622
|
-
required: string[];
|
|
623
|
-
description: string;
|
|
624
|
-
};
|
|
625
|
-
IRemoveSiopSessionArgs: {
|
|
626
|
-
type: string;
|
|
627
|
-
properties: {
|
|
628
|
-
sessionId: {
|
|
629
|
-
type: string;
|
|
630
|
-
};
|
|
631
|
-
additionalProperties: boolean;
|
|
632
|
-
};
|
|
633
|
-
required: string[];
|
|
634
|
-
description: string;
|
|
635
|
-
};
|
|
636
|
-
IAuthenticateWithSiopArgs: {
|
|
637
|
-
type: string;
|
|
638
|
-
properties: {
|
|
639
|
-
sessionId: {
|
|
640
|
-
type: string;
|
|
641
|
-
};
|
|
642
|
-
stateId: {
|
|
643
|
-
type: string;
|
|
644
|
-
};
|
|
645
|
-
redirectUrl: {
|
|
646
|
-
type: string;
|
|
647
|
-
};
|
|
648
|
-
additionalProperties: boolean;
|
|
649
|
-
};
|
|
650
|
-
required: string[];
|
|
651
|
-
description: string;
|
|
652
|
-
};
|
|
653
|
-
IResponse: {
|
|
654
|
-
type: string;
|
|
655
|
-
properties: {
|
|
656
|
-
status: {
|
|
657
|
-
type: string;
|
|
658
|
-
};
|
|
659
|
-
additionalProperties: boolean;
|
|
660
|
-
};
|
|
661
|
-
required: string[];
|
|
662
|
-
description: string;
|
|
663
|
-
};
|
|
664
|
-
IGetSiopAuthenticationRequestFromRpArgs: {
|
|
665
|
-
type: string;
|
|
666
|
-
properties: {
|
|
667
|
-
sessionId: {
|
|
668
|
-
type: string;
|
|
669
|
-
};
|
|
670
|
-
stateId: {
|
|
671
|
-
type: string;
|
|
672
|
-
};
|
|
673
|
-
redirectUrl: {
|
|
674
|
-
type: string;
|
|
675
|
-
};
|
|
676
|
-
additionalProperties: boolean;
|
|
677
|
-
};
|
|
678
|
-
required: string[];
|
|
679
|
-
description: string;
|
|
680
|
-
};
|
|
681
|
-
ParsedAuthenticationRequestURI: {
|
|
682
|
-
type: string;
|
|
683
|
-
properties: {
|
|
684
|
-
jwt: {
|
|
685
|
-
type: string;
|
|
686
|
-
};
|
|
687
|
-
requestPayload: {
|
|
688
|
-
type: string;
|
|
689
|
-
properties: {
|
|
690
|
-
additionalProperties: boolean;
|
|
691
|
-
};
|
|
692
|
-
};
|
|
693
|
-
registration: {
|
|
694
|
-
type: string;
|
|
695
|
-
properties: {
|
|
696
|
-
additionalProperties: boolean;
|
|
697
|
-
};
|
|
698
|
-
};
|
|
699
|
-
additionalProperties: boolean;
|
|
700
|
-
};
|
|
701
|
-
required: string[];
|
|
702
|
-
description: string;
|
|
703
|
-
};
|
|
704
|
-
IGetSiopAuthenticationRequestDetailsArgs: {
|
|
705
|
-
type: string;
|
|
706
|
-
properties: {
|
|
707
|
-
sessionId: {
|
|
708
|
-
type: string;
|
|
709
|
-
};
|
|
710
|
-
verifiedAuthenticationRequest: {
|
|
711
|
-
type: string;
|
|
712
|
-
properties: {
|
|
713
|
-
additionalProperties: boolean;
|
|
714
|
-
};
|
|
715
|
-
};
|
|
716
|
-
credentialFilter: {
|
|
717
|
-
type: string;
|
|
718
|
-
properties: {
|
|
719
|
-
additionalProperties: boolean;
|
|
720
|
-
};
|
|
721
|
-
};
|
|
722
|
-
additionalProperties: boolean;
|
|
723
|
-
};
|
|
724
|
-
required: string[];
|
|
725
|
-
description: string;
|
|
726
|
-
};
|
|
727
|
-
IAuthRequestDetails: {
|
|
728
|
-
type: string;
|
|
729
|
-
properties: {
|
|
730
|
-
id: {
|
|
731
|
-
type: string;
|
|
732
|
-
};
|
|
733
|
-
alsoKnownAs: {
|
|
734
|
-
type: string;
|
|
735
|
-
items: {
|
|
736
|
-
type: string;
|
|
737
|
-
};
|
|
738
|
-
};
|
|
739
|
-
vpResponseOpts: {
|
|
740
|
-
type: string;
|
|
741
|
-
properties: {
|
|
742
|
-
additionalProperties: boolean;
|
|
743
|
-
};
|
|
744
|
-
};
|
|
745
|
-
additionalProperties: boolean;
|
|
746
|
-
};
|
|
747
|
-
required: string[];
|
|
748
|
-
description: string;
|
|
749
|
-
};
|
|
750
|
-
IVerifySiopAuthenticationRequestUriArgs: {
|
|
751
|
-
type: string;
|
|
752
|
-
properties: {
|
|
753
|
-
sessionId: {
|
|
754
|
-
type: string;
|
|
755
|
-
};
|
|
756
|
-
ParsedAuthenticationRequestURI: {
|
|
757
|
-
type: string;
|
|
758
|
-
properties: {
|
|
759
|
-
additionalProperties: boolean;
|
|
760
|
-
};
|
|
761
|
-
};
|
|
762
|
-
additionalProperties: boolean;
|
|
763
|
-
};
|
|
764
|
-
required: string[];
|
|
765
|
-
description: string;
|
|
766
|
-
};
|
|
767
|
-
VerifiedAuthorizationRequest: {
|
|
768
|
-
type: string;
|
|
769
|
-
properties: {
|
|
770
|
-
payload: {
|
|
771
|
-
type: string;
|
|
772
|
-
properties: {
|
|
773
|
-
additionalProperties: boolean;
|
|
774
|
-
};
|
|
775
|
-
};
|
|
776
|
-
presentationDefinitions: {
|
|
777
|
-
type: string;
|
|
778
|
-
properties: {
|
|
779
|
-
additionalProperties: boolean;
|
|
780
|
-
};
|
|
781
|
-
};
|
|
782
|
-
verifyOpts: {
|
|
783
|
-
type: string;
|
|
784
|
-
properties: {
|
|
785
|
-
additionalProperties: boolean;
|
|
786
|
-
};
|
|
787
|
-
};
|
|
788
|
-
additionalProperties: boolean;
|
|
789
|
-
};
|
|
790
|
-
required: string[];
|
|
791
|
-
description: string;
|
|
792
|
-
};
|
|
793
|
-
ISendSiopAuthenticationResponseArgs: {
|
|
794
|
-
type: string;
|
|
795
|
-
properties: {
|
|
796
|
-
sessionId: {
|
|
797
|
-
type: string;
|
|
798
|
-
};
|
|
799
|
-
verifiedAuthenticationRequest: {
|
|
800
|
-
type: string;
|
|
801
|
-
properties: {
|
|
802
|
-
additionalProperties: boolean;
|
|
803
|
-
};
|
|
804
|
-
};
|
|
805
|
-
verifiablePresentationResponse: {
|
|
806
|
-
type: string;
|
|
807
|
-
properties: {
|
|
808
|
-
additionalProperties: boolean;
|
|
809
|
-
};
|
|
810
|
-
};
|
|
811
|
-
additionalProperties: boolean;
|
|
812
|
-
};
|
|
813
|
-
required: string[];
|
|
814
|
-
description: string;
|
|
815
|
-
};
|
|
816
|
-
};
|
|
817
|
-
methods: {
|
|
818
|
-
getSessionForSiop: {
|
|
819
|
-
description: string;
|
|
820
|
-
arguments: {
|
|
821
|
-
$ref: string;
|
|
822
|
-
};
|
|
823
|
-
returnType: string;
|
|
824
|
-
};
|
|
825
|
-
registerSessionForSiop: {
|
|
826
|
-
description: string;
|
|
827
|
-
arguments: {
|
|
828
|
-
$ref: string;
|
|
829
|
-
};
|
|
830
|
-
returnType: string;
|
|
831
|
-
};
|
|
832
|
-
removeSessionForSiop: {
|
|
833
|
-
description: string;
|
|
834
|
-
arguments: {
|
|
835
|
-
$ref: string;
|
|
836
|
-
};
|
|
837
|
-
returnType: string;
|
|
838
|
-
};
|
|
839
|
-
authenticateWithSiop: {
|
|
840
|
-
description: string;
|
|
841
|
-
arguments: {
|
|
842
|
-
$ref: string;
|
|
843
|
-
};
|
|
844
|
-
returnType: {
|
|
845
|
-
$ref: string;
|
|
846
|
-
};
|
|
847
|
-
};
|
|
848
|
-
getSiopAuthenticationRequestFromRP: {
|
|
849
|
-
description: string;
|
|
850
|
-
arguments: {
|
|
851
|
-
$ref: string;
|
|
852
|
-
};
|
|
853
|
-
returnType: {
|
|
854
|
-
$ref: string;
|
|
855
|
-
};
|
|
856
|
-
};
|
|
857
|
-
getSiopAuthenticationRequestDetails: {
|
|
858
|
-
description: string;
|
|
859
|
-
arguments: {
|
|
860
|
-
$ref: string;
|
|
861
|
-
};
|
|
862
|
-
returnType: {
|
|
863
|
-
$ref: string;
|
|
864
|
-
};
|
|
865
|
-
};
|
|
866
|
-
verifySiopAuthenticationRequestURI: {
|
|
867
|
-
description: string;
|
|
868
|
-
arguments: {
|
|
869
|
-
$ref: string;
|
|
870
|
-
};
|
|
871
|
-
returnType: {
|
|
872
|
-
$ref: string;
|
|
873
|
-
};
|
|
874
|
-
};
|
|
875
|
-
sendSiopAuthenticationResponse: {
|
|
876
|
-
description: string;
|
|
877
|
-
arguments: {
|
|
878
|
-
$ref: string;
|
|
879
|
-
};
|
|
880
|
-
returnType: {
|
|
881
|
-
$ref: string;
|
|
882
|
-
};
|
|
883
|
-
};
|
|
884
|
-
};
|
|
885
|
-
};
|
|
886
|
-
};
|
|
182
|
+
readonly schema: any;
|
|
887
183
|
readonly methods: ISIOPv2RP;
|
|
888
184
|
constructor(opts: ISiopv2RPOpts);
|
|
889
185
|
setDefaultOpts(rpDefaultOpts: IRPDefaultOpts, context: IRequiredContext): void;
|
|
@@ -897,13 +193,18 @@ declare class SIOPv2RP implements IAgentPlugin {
|
|
|
897
193
|
private siopVerifyAuthResponse;
|
|
898
194
|
private siopImportDefinitions;
|
|
899
195
|
private siopGetRedirectURI;
|
|
900
|
-
getRPInstance({
|
|
196
|
+
getRPInstance({ definitionId, responseRedirectURI }: ISiopRPInstanceArgs, context: IRequiredContext): Promise<RPInstance>;
|
|
901
197
|
getRPOptions(context: IRequiredContext, opts: {
|
|
902
|
-
|
|
198
|
+
definitionId?: string;
|
|
903
199
|
responseRedirectURI?: string;
|
|
904
200
|
}): Promise<IRPOptions>;
|
|
905
201
|
getInstanceOpts(definitionId?: string): IPEXInstanceOptions | undefined;
|
|
906
202
|
private getDefaultOptions;
|
|
907
203
|
}
|
|
908
204
|
|
|
909
|
-
|
|
205
|
+
/**
|
|
206
|
+
* @public
|
|
207
|
+
*/
|
|
208
|
+
declare const schema: any;
|
|
209
|
+
|
|
210
|
+
export { type AuthorizationResponseStateWithVerifiedData, type CredentialOpts, type IAuthRequestDetails, type IAuthorizationRequestPayloads, type ICreateAuthRequestArgs, type IDefinitionPair, type IDeleteAuthStateArgs, type IGetAuthRequestStateArgs, type IGetAuthResponseStateArgs, type IGetRedirectUriArgs, type IPEXDefinitionPersistArgs, type IPEXInstanceOptions, type IPEXOptions, type IRPDefaultOpts, type IRPOptions, type IRequiredContext, type ISIOPIdentifierOptions, type ISIOPv2RP, type ISiopRPInstanceArgs, type ISiopv2RPOpts, type IUpdateRequestStateArgs, type IVerifyAuthResponseStateArgs, type ImportDefinitionsArgs, type PerDidResolver, SIOPv2RP, type VerificationPolicies, VerifiedDataMode, schema };
|