@sphereon/ssi-sdk.siopv2-oid4vp-rp-auth 0.34.1-feature.SSISDK.57.uni.client.205 → 0.34.1-feature.SSISDK.58.host.nonce.endpoint.145
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.cjs +403 -417
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +45 -729
- package/dist/index.d.ts +45 -729
- package/dist/index.js +397 -410
- package/dist/index.js.map +1 -1
- package/package.json +17 -17
- package/src/RPInstance.ts +28 -11
- package/src/agent/SIOPv2RP.ts +55 -76
- package/src/functions.ts +46 -49
- package/src/index.ts +1 -1
- package/src/types/ISIOPv2RP.ts +32 -22
package/dist/index.d.cts
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
import { IPluginMethodMap, IAgentContext, IResolver, IDIDManager, IKeyManager, ICredentialVerifier, IAgentPlugin } from '@veramo/core';
|
|
2
|
-
import { ResponseURIType, ClaimPayloadCommonOpts,
|
|
1
|
+
import { IPluginMethodMap, IAgentContext, IResolver, IDIDManager, IKeyManager, ICredentialIssuer, ICredentialVerifier, IAgentPlugin } from '@veramo/core';
|
|
2
|
+
import { ResponseURIType, ClaimPayloadCommonOpts, AuthorizationRequestPayload, RequestObjectPayload, AuthorizationRequestState, AuthorizationResponseState, AuthorizationResponsePayload, VerifiedAuthorizationResponse, ResponseMode, SupportedVersion, IRPSessionManager, ClientMetadataOpts, VerifyJwtCallback, PresentationVerificationCallback, RP, URI, AuthorizationRequest } from '@sphereon/did-auth-siop';
|
|
3
3
|
import { CheckLinkedDomain } from '@sphereon/did-auth-siop-adapter';
|
|
4
4
|
import { DIDDocument } from '@sphereon/did-uni-client';
|
|
5
5
|
import { JwtIssuer } from '@sphereon/oid4vc-common';
|
|
@@ -9,387 +9,15 @@ import { IIdentifierResolution, ManagedIdentifierOptsOrResult, ExternalIdentifie
|
|
|
9
9
|
import { IJwtService } from '@sphereon/ssi-sdk-ext.jwt-service';
|
|
10
10
|
import { ICredentialValidation, SchemaValidation } from '@sphereon/ssi-sdk.credential-validation';
|
|
11
11
|
import { ImDLMdoc } from '@sphereon/ssi-sdk.mdl-mdoc';
|
|
12
|
-
import { IPDManager,
|
|
12
|
+
import { IPDManager, VersionControlMode } from '@sphereon/ssi-sdk.pd-manager';
|
|
13
13
|
import { IPresentationExchange } from '@sphereon/ssi-sdk.presentation-exchange';
|
|
14
14
|
import { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt';
|
|
15
15
|
import { AuthorizationRequestStateStatus } from '@sphereon/ssi-sdk.siopv2-oid4vp-common';
|
|
16
|
-
import { HasherSync } from '@sphereon/ssi-types';
|
|
16
|
+
import { AdditionalClaims, DcqlQueryPayload, HasherSync } from '@sphereon/ssi-types';
|
|
17
17
|
import { VerifyCallback } from '@sphereon/wellknown-dids-client';
|
|
18
|
-
import { DcqlQuery } from 'dcql';
|
|
19
18
|
import { Resolvable } from 'did-resolver';
|
|
20
19
|
import { EventEmitter } from 'events';
|
|
21
20
|
|
|
22
|
-
var IDidAuthSiopOpAuthenticator = {
|
|
23
|
-
components: {
|
|
24
|
-
schemas: {
|
|
25
|
-
IGetSiopSessionArgs: {
|
|
26
|
-
type: "object",
|
|
27
|
-
properties: {
|
|
28
|
-
sessionId: {
|
|
29
|
-
type: "string"
|
|
30
|
-
},
|
|
31
|
-
additionalProperties: false
|
|
32
|
-
},
|
|
33
|
-
required: [
|
|
34
|
-
"sessionId"
|
|
35
|
-
],
|
|
36
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.getSessionForSiop } "
|
|
37
|
-
},
|
|
38
|
-
IRegisterSiopSessionArgs: {
|
|
39
|
-
type: "object",
|
|
40
|
-
properties: {
|
|
41
|
-
identifier: {
|
|
42
|
-
type: "object",
|
|
43
|
-
properties: {
|
|
44
|
-
did: {
|
|
45
|
-
type: "string"
|
|
46
|
-
},
|
|
47
|
-
alias: {
|
|
48
|
-
type: "string"
|
|
49
|
-
},
|
|
50
|
-
provider: {
|
|
51
|
-
type: "string"
|
|
52
|
-
},
|
|
53
|
-
controllerKeyId: {
|
|
54
|
-
type: "string"
|
|
55
|
-
},
|
|
56
|
-
keys: {
|
|
57
|
-
type: "array",
|
|
58
|
-
items: {
|
|
59
|
-
type: "object",
|
|
60
|
-
properties: {
|
|
61
|
-
additionalProperties: true
|
|
62
|
-
}
|
|
63
|
-
}
|
|
64
|
-
},
|
|
65
|
-
services: {
|
|
66
|
-
type: "array",
|
|
67
|
-
items: {
|
|
68
|
-
type: "object",
|
|
69
|
-
properties: {
|
|
70
|
-
additionalProperties: true
|
|
71
|
-
}
|
|
72
|
-
}
|
|
73
|
-
}
|
|
74
|
-
},
|
|
75
|
-
additionalProperties: false,
|
|
76
|
-
required: [
|
|
77
|
-
"did",
|
|
78
|
-
"provider",
|
|
79
|
-
"keys",
|
|
80
|
-
"services"
|
|
81
|
-
]
|
|
82
|
-
},
|
|
83
|
-
sessionId: {
|
|
84
|
-
type: "string"
|
|
85
|
-
},
|
|
86
|
-
expiresIn: {
|
|
87
|
-
type: "number"
|
|
88
|
-
},
|
|
89
|
-
additionalProperties: false
|
|
90
|
-
},
|
|
91
|
-
required: [
|
|
92
|
-
"identifier"
|
|
93
|
-
],
|
|
94
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.registerSessionForSiop } "
|
|
95
|
-
},
|
|
96
|
-
IRemoveSiopSessionArgs: {
|
|
97
|
-
type: "object",
|
|
98
|
-
properties: {
|
|
99
|
-
sessionId: {
|
|
100
|
-
type: "string"
|
|
101
|
-
},
|
|
102
|
-
additionalProperties: false
|
|
103
|
-
},
|
|
104
|
-
required: [
|
|
105
|
-
"sessionId"
|
|
106
|
-
],
|
|
107
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.removeSessionForSiop } "
|
|
108
|
-
},
|
|
109
|
-
IAuthenticateWithSiopArgs: {
|
|
110
|
-
type: "object",
|
|
111
|
-
properties: {
|
|
112
|
-
sessionId: {
|
|
113
|
-
type: "string"
|
|
114
|
-
},
|
|
115
|
-
stateId: {
|
|
116
|
-
type: "string"
|
|
117
|
-
},
|
|
118
|
-
redirectUrl: {
|
|
119
|
-
type: "string"
|
|
120
|
-
},
|
|
121
|
-
additionalProperties: false
|
|
122
|
-
},
|
|
123
|
-
required: [
|
|
124
|
-
"sessionId",
|
|
125
|
-
"stateId",
|
|
126
|
-
"redirectUrl"
|
|
127
|
-
],
|
|
128
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.authenticateWithSiop } "
|
|
129
|
-
},
|
|
130
|
-
IResponse: {
|
|
131
|
-
type: "object",
|
|
132
|
-
properties: {
|
|
133
|
-
status: {
|
|
134
|
-
type: "number"
|
|
135
|
-
},
|
|
136
|
-
additionalProperties: true
|
|
137
|
-
},
|
|
138
|
-
required: [
|
|
139
|
-
"status"
|
|
140
|
-
],
|
|
141
|
-
description: "Result of {@link DidAuthSiopOpAuthenticator.authenticateWithSiop & DidAuthSiopOpAuthenticator.sendSiopAuthenticationResponse } "
|
|
142
|
-
},
|
|
143
|
-
IGetSiopAuthenticationRequestFromRpArgs: {
|
|
144
|
-
type: "object",
|
|
145
|
-
properties: {
|
|
146
|
-
sessionId: {
|
|
147
|
-
type: "string"
|
|
148
|
-
},
|
|
149
|
-
stateId: {
|
|
150
|
-
type: "string"
|
|
151
|
-
},
|
|
152
|
-
redirectUrl: {
|
|
153
|
-
type: "string"
|
|
154
|
-
},
|
|
155
|
-
additionalProperties: false
|
|
156
|
-
},
|
|
157
|
-
required: [
|
|
158
|
-
"sessionId",
|
|
159
|
-
"stateId",
|
|
160
|
-
"redirectUrl"
|
|
161
|
-
],
|
|
162
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.getSiopAuthenticationRequestFromRP } "
|
|
163
|
-
},
|
|
164
|
-
ParsedAuthenticationRequestURI: {
|
|
165
|
-
type: "object",
|
|
166
|
-
properties: {
|
|
167
|
-
jwt: {
|
|
168
|
-
type: "string"
|
|
169
|
-
},
|
|
170
|
-
requestPayload: {
|
|
171
|
-
type: "object",
|
|
172
|
-
properties: {
|
|
173
|
-
additionalProperties: true
|
|
174
|
-
}
|
|
175
|
-
},
|
|
176
|
-
registration: {
|
|
177
|
-
type: "object",
|
|
178
|
-
properties: {
|
|
179
|
-
additionalProperties: true
|
|
180
|
-
}
|
|
181
|
-
},
|
|
182
|
-
additionalProperties: false
|
|
183
|
-
},
|
|
184
|
-
required: [
|
|
185
|
-
"jwt",
|
|
186
|
-
"requestPayload",
|
|
187
|
-
"registration"
|
|
188
|
-
],
|
|
189
|
-
description: "Result of {@link DidAuthSiopOpAuthenticator.getSiopAuthenticationRequestFromRP } "
|
|
190
|
-
},
|
|
191
|
-
IGetSiopAuthenticationRequestDetailsArgs: {
|
|
192
|
-
type: "object",
|
|
193
|
-
properties: {
|
|
194
|
-
sessionId: {
|
|
195
|
-
type: "string"
|
|
196
|
-
},
|
|
197
|
-
verifiedAuthenticationRequest: {
|
|
198
|
-
type: "object",
|
|
199
|
-
properties: {
|
|
200
|
-
additionalProperties: true
|
|
201
|
-
}
|
|
202
|
-
},
|
|
203
|
-
credentialFilter: {
|
|
204
|
-
type: "object",
|
|
205
|
-
properties: {
|
|
206
|
-
additionalProperties: true
|
|
207
|
-
}
|
|
208
|
-
},
|
|
209
|
-
additionalProperties: false
|
|
210
|
-
},
|
|
211
|
-
required: [
|
|
212
|
-
"sessionId",
|
|
213
|
-
"verifiedAuthenticationRequest"
|
|
214
|
-
],
|
|
215
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.getSiopAuthenticationRequestDetails } "
|
|
216
|
-
},
|
|
217
|
-
IAuthRequestDetails: {
|
|
218
|
-
type: "object",
|
|
219
|
-
properties: {
|
|
220
|
-
id: {
|
|
221
|
-
type: "string"
|
|
222
|
-
},
|
|
223
|
-
alsoKnownAs: {
|
|
224
|
-
type: "array",
|
|
225
|
-
items: {
|
|
226
|
-
type: "string"
|
|
227
|
-
}
|
|
228
|
-
},
|
|
229
|
-
vpResponseOpts: {
|
|
230
|
-
type: "object",
|
|
231
|
-
properties: {
|
|
232
|
-
additionalProperties: true
|
|
233
|
-
}
|
|
234
|
-
},
|
|
235
|
-
additionalProperties: false
|
|
236
|
-
},
|
|
237
|
-
required: [
|
|
238
|
-
"id",
|
|
239
|
-
"vpResponseOpts"
|
|
240
|
-
],
|
|
241
|
-
description: "Result of {@link DidAuthSiopOpAuthenticator.getSiopAuthenticationRequestDetails } "
|
|
242
|
-
},
|
|
243
|
-
IVerifySiopAuthenticationRequestUriArgs: {
|
|
244
|
-
type: "object",
|
|
245
|
-
properties: {
|
|
246
|
-
sessionId: {
|
|
247
|
-
type: "string"
|
|
248
|
-
},
|
|
249
|
-
ParsedAuthenticationRequestURI: {
|
|
250
|
-
type: "object",
|
|
251
|
-
properties: {
|
|
252
|
-
additionalProperties: true
|
|
253
|
-
}
|
|
254
|
-
},
|
|
255
|
-
additionalProperties: false
|
|
256
|
-
},
|
|
257
|
-
required: [
|
|
258
|
-
"sessionId",
|
|
259
|
-
"ParsedAuthenticationRequestURI"
|
|
260
|
-
],
|
|
261
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.verifySiopAuthenticationRequestURI } "
|
|
262
|
-
},
|
|
263
|
-
VerifiedAuthorizationRequest: {
|
|
264
|
-
type: "object",
|
|
265
|
-
properties: {
|
|
266
|
-
payload: {
|
|
267
|
-
type: "object",
|
|
268
|
-
properties: {
|
|
269
|
-
additionalProperties: true
|
|
270
|
-
}
|
|
271
|
-
},
|
|
272
|
-
presentationDefinitions: {
|
|
273
|
-
type: "object",
|
|
274
|
-
properties: {
|
|
275
|
-
additionalProperties: true
|
|
276
|
-
}
|
|
277
|
-
},
|
|
278
|
-
verifyOpts: {
|
|
279
|
-
type: "object",
|
|
280
|
-
properties: {
|
|
281
|
-
additionalProperties: true
|
|
282
|
-
}
|
|
283
|
-
},
|
|
284
|
-
additionalProperties: false
|
|
285
|
-
},
|
|
286
|
-
required: [
|
|
287
|
-
"payload",
|
|
288
|
-
"verifyOpts"
|
|
289
|
-
],
|
|
290
|
-
description: "Result of {@link DidAuthSiopOpAuthenticator.verifySiopAuthenticationRequestURI } "
|
|
291
|
-
},
|
|
292
|
-
ISendSiopAuthenticationResponseArgs: {
|
|
293
|
-
type: "object",
|
|
294
|
-
properties: {
|
|
295
|
-
sessionId: {
|
|
296
|
-
type: "string"
|
|
297
|
-
},
|
|
298
|
-
verifiedAuthenticationRequest: {
|
|
299
|
-
type: "object",
|
|
300
|
-
properties: {
|
|
301
|
-
additionalProperties: true
|
|
302
|
-
}
|
|
303
|
-
},
|
|
304
|
-
verifiablePresentationResponse: {
|
|
305
|
-
type: "object",
|
|
306
|
-
properties: {
|
|
307
|
-
additionalProperties: true
|
|
308
|
-
}
|
|
309
|
-
},
|
|
310
|
-
additionalProperties: false
|
|
311
|
-
},
|
|
312
|
-
required: [
|
|
313
|
-
"sessionId",
|
|
314
|
-
"verifiedAuthenticationRequest"
|
|
315
|
-
],
|
|
316
|
-
description: "Arguments needed for {@link DidAuthSiopOpAuthenticator.sendSiopAuthenticationResponse } "
|
|
317
|
-
}
|
|
318
|
-
},
|
|
319
|
-
methods: {
|
|
320
|
-
getSessionForSiop: {
|
|
321
|
-
description: "Get SIOP session",
|
|
322
|
-
"arguments": {
|
|
323
|
-
$ref: "#/components/schemas/IGetSiopSessionArgs"
|
|
324
|
-
},
|
|
325
|
-
returnType: "object"
|
|
326
|
-
},
|
|
327
|
-
registerSessionForSiop: {
|
|
328
|
-
description: "Register SIOP session",
|
|
329
|
-
"arguments": {
|
|
330
|
-
$ref: "#/components/schemas/IRegisterSiopSessionArgs"
|
|
331
|
-
},
|
|
332
|
-
returnType: "object"
|
|
333
|
-
},
|
|
334
|
-
removeSessionForSiop: {
|
|
335
|
-
description: "Remove SIOP session",
|
|
336
|
-
"arguments": {
|
|
337
|
-
$ref: "#/components/schemas/IRemoveSiopSessionArgs"
|
|
338
|
-
},
|
|
339
|
-
returnType: "boolean"
|
|
340
|
-
},
|
|
341
|
-
authenticateWithSiop: {
|
|
342
|
-
description: "Authenticate using DID Auth SIOP",
|
|
343
|
-
"arguments": {
|
|
344
|
-
$ref: "#/components/schemas/IAuthenticateWithSiopArgs"
|
|
345
|
-
},
|
|
346
|
-
returnType: {
|
|
347
|
-
$ref: "#/components/schemas/Response"
|
|
348
|
-
}
|
|
349
|
-
},
|
|
350
|
-
getSiopAuthenticationRequestFromRP: {
|
|
351
|
-
description: "Get authentication request from RP",
|
|
352
|
-
"arguments": {
|
|
353
|
-
$ref: "#/components/schemas/IGetSiopAuthenticationRequestFromRpArgs"
|
|
354
|
-
},
|
|
355
|
-
returnType: {
|
|
356
|
-
$ref: "#/components/schemas/ParsedAuthenticationRequestURI"
|
|
357
|
-
}
|
|
358
|
-
},
|
|
359
|
-
getSiopAuthenticationRequestDetails: {
|
|
360
|
-
description: "Get authentication request details",
|
|
361
|
-
"arguments": {
|
|
362
|
-
$ref: "#/components/schemas/IGetSiopAuthenticationRequestDetailsArgs"
|
|
363
|
-
},
|
|
364
|
-
returnType: {
|
|
365
|
-
$ref: "#/components/schemas/IAuthRequestDetails"
|
|
366
|
-
}
|
|
367
|
-
},
|
|
368
|
-
verifySiopAuthenticationRequestURI: {
|
|
369
|
-
description: "Verify authentication request URI",
|
|
370
|
-
"arguments": {
|
|
371
|
-
$ref: "#/components/schemas/IVerifySiopAuthenticationRequestUriArgs"
|
|
372
|
-
},
|
|
373
|
-
returnType: {
|
|
374
|
-
$ref: "#/components/schemas/VerifiedAuthorizationRequest"
|
|
375
|
-
}
|
|
376
|
-
},
|
|
377
|
-
sendSiopAuthenticationResponse: {
|
|
378
|
-
description: "Send authentication response",
|
|
379
|
-
"arguments": {
|
|
380
|
-
$ref: "#/components/schemas/ISendSiopAuthenticationResponseArgs"
|
|
381
|
-
},
|
|
382
|
-
returnType: {
|
|
383
|
-
$ref: "#/components/schemas/IRequiredContext"
|
|
384
|
-
}
|
|
385
|
-
}
|
|
386
|
-
}
|
|
387
|
-
}
|
|
388
|
-
};
|
|
389
|
-
var plugin_schema = {
|
|
390
|
-
IDidAuthSiopOpAuthenticator: IDidAuthSiopOpAuthenticator
|
|
391
|
-
};
|
|
392
|
-
|
|
393
21
|
declare enum VerifiedDataMode {
|
|
394
22
|
NONE = "none",
|
|
395
23
|
VERIFIED_PRESENTATION = "vp",
|
|
@@ -413,9 +41,8 @@ interface ISiopv2RPOpts {
|
|
|
413
41
|
interface IRPDefaultOpts extends IRPOptions {
|
|
414
42
|
}
|
|
415
43
|
interface ICreateAuthRequestArgs {
|
|
416
|
-
|
|
44
|
+
definitionId: string;
|
|
417
45
|
correlationId: string;
|
|
418
|
-
useQueryIdInstance?: boolean;
|
|
419
46
|
responseURIType: ResponseURIType;
|
|
420
47
|
responseURI: string;
|
|
421
48
|
responseRedirectURI?: string;
|
|
@@ -424,46 +51,49 @@ interface ICreateAuthRequestArgs {
|
|
|
424
51
|
nonce?: string;
|
|
425
52
|
state?: string;
|
|
426
53
|
claims?: ClaimPayloadCommonOpts;
|
|
427
|
-
callback?: CallbackOpts;
|
|
428
54
|
}
|
|
429
55
|
interface IGetAuthRequestStateArgs {
|
|
430
56
|
correlationId: string;
|
|
431
|
-
|
|
57
|
+
definitionId: string;
|
|
432
58
|
errorOnNotFound?: boolean;
|
|
433
59
|
}
|
|
434
60
|
interface IGetAuthResponseStateArgs {
|
|
435
61
|
correlationId: string;
|
|
436
|
-
|
|
62
|
+
definitionId: string;
|
|
437
63
|
errorOnNotFound?: boolean;
|
|
438
64
|
progressRequestStateTo?: AuthorizationRequestStateStatus;
|
|
439
65
|
includeVerifiedData?: VerifiedDataMode;
|
|
440
66
|
}
|
|
441
67
|
interface IUpdateRequestStateArgs {
|
|
442
|
-
|
|
68
|
+
definitionId: string;
|
|
443
69
|
correlationId: string;
|
|
444
70
|
state: AuthorizationRequestStateStatus;
|
|
445
71
|
error?: string;
|
|
446
72
|
}
|
|
447
73
|
interface IDeleteAuthStateArgs {
|
|
448
74
|
correlationId: string;
|
|
449
|
-
|
|
75
|
+
definitionId: string;
|
|
450
76
|
}
|
|
451
77
|
interface IVerifyAuthResponseStateArgs {
|
|
452
78
|
authorizationResponse: string | AuthorizationResponsePayload;
|
|
453
|
-
|
|
79
|
+
definitionId?: string;
|
|
454
80
|
correlationId: string;
|
|
455
81
|
audience?: string;
|
|
456
|
-
|
|
82
|
+
dcqlQueryPayload?: DcqlQueryPayload;
|
|
83
|
+
}
|
|
84
|
+
interface IDefinitionPair {
|
|
85
|
+
definitionPayload?: IPresentationDefinition;
|
|
86
|
+
dcqlPayload?: DcqlQueryPayload;
|
|
457
87
|
}
|
|
458
88
|
interface ImportDefinitionsArgs {
|
|
459
|
-
|
|
89
|
+
definitions: Array<IDefinitionPair>;
|
|
460
90
|
tenantId?: string;
|
|
461
91
|
version?: string;
|
|
462
92
|
versionControlMode?: VersionControlMode;
|
|
463
93
|
}
|
|
464
94
|
interface IGetRedirectUriArgs {
|
|
465
95
|
correlationId: string;
|
|
466
|
-
|
|
96
|
+
definitionId?: string;
|
|
467
97
|
state?: string;
|
|
468
98
|
}
|
|
469
99
|
interface IAuthorizationRequestPayloads {
|
|
@@ -476,11 +106,10 @@ interface IPEXDefinitionPersistArgs extends IPEXInstanceOptions {
|
|
|
476
106
|
ttl?: number;
|
|
477
107
|
}
|
|
478
108
|
interface ISiopRPInstanceArgs {
|
|
479
|
-
|
|
480
|
-
queryId?: string;
|
|
109
|
+
definitionId?: string;
|
|
481
110
|
responseRedirectURI?: string;
|
|
482
111
|
}
|
|
483
|
-
interface IPEXInstanceOptions extends
|
|
112
|
+
interface IPEXInstanceOptions extends IPEXOptions {
|
|
484
113
|
rpOpts?: IRPOptions;
|
|
485
114
|
}
|
|
486
115
|
interface IRPOptions {
|
|
@@ -496,9 +125,11 @@ interface IRPOptions {
|
|
|
496
125
|
verifyJwtCallback?: VerifyJwtCallback;
|
|
497
126
|
responseRedirectUri?: string;
|
|
498
127
|
}
|
|
499
|
-
interface
|
|
500
|
-
queryId: string;
|
|
128
|
+
interface IPEXOptions {
|
|
501
129
|
presentationVerifyCallback?: PresentationVerificationCallback;
|
|
130
|
+
definitionId: string;
|
|
131
|
+
version?: string;
|
|
132
|
+
tenantId?: string;
|
|
502
133
|
}
|
|
503
134
|
type VerificationPolicies = {
|
|
504
135
|
schemaValidation: SchemaValidation;
|
|
@@ -521,354 +152,34 @@ interface ISIOPIdentifierOptions extends Omit<IDIDOptions, 'idOpts'> {
|
|
|
521
152
|
type CredentialOpts = {
|
|
522
153
|
hasher?: HasherSync;
|
|
523
154
|
};
|
|
524
|
-
|
|
155
|
+
interface AuthorizationResponseStateWithVerifiedData extends AuthorizationResponseState {
|
|
156
|
+
verifiedData?: AdditionalClaims;
|
|
157
|
+
}
|
|
158
|
+
type IRequiredContext = IAgentContext<IResolver & IDIDManager & IKeyManager & IIdentifierResolution & ICredentialIssuer & ICredentialValidation & ICredentialVerifier & IPresentationExchange & IPDManager & ISDJwtPlugin & IJwtService & ImDLMdoc>;
|
|
525
159
|
|
|
526
160
|
declare class RPInstance {
|
|
527
161
|
private _rp;
|
|
528
|
-
private readonly
|
|
162
|
+
private readonly _pexOptions;
|
|
529
163
|
private readonly _rpOptions;
|
|
530
164
|
constructor({ rpOpts, pexOpts }: {
|
|
531
165
|
rpOpts: IRPOptions;
|
|
532
|
-
pexOpts?:
|
|
166
|
+
pexOpts?: IPEXOptions;
|
|
533
167
|
});
|
|
534
168
|
get(context: IRequiredContext): Promise<RP>;
|
|
535
169
|
get rpOptions(): IRPOptions;
|
|
536
|
-
get
|
|
537
|
-
|
|
538
|
-
|
|
170
|
+
get pexOptions(): IPEXOptions | undefined;
|
|
171
|
+
hasDefinition(): boolean;
|
|
172
|
+
get definitionId(): string | undefined;
|
|
173
|
+
getPresentationDefinition(context: IRequiredContext): Promise<IPresentationDefinition | undefined>;
|
|
174
|
+
createAuthorizationRequestURI(createArgs: Omit<ICreateAuthRequestArgs, 'definitionId'>, context: IRequiredContext): Promise<URI>;
|
|
175
|
+
createAuthorizationRequest(createArgs: Omit<ICreateAuthRequestArgs, 'definitionId'>, context: IRequiredContext): Promise<AuthorizationRequest>;
|
|
539
176
|
}
|
|
540
177
|
|
|
541
178
|
declare class SIOPv2RP implements IAgentPlugin {
|
|
542
179
|
private readonly opts;
|
|
543
180
|
private static readonly _DEFAULT_OPTS_KEY;
|
|
544
181
|
private readonly instances;
|
|
545
|
-
readonly schema:
|
|
546
|
-
components: {
|
|
547
|
-
schemas: {
|
|
548
|
-
IGetSiopSessionArgs: {
|
|
549
|
-
type: string;
|
|
550
|
-
properties: {
|
|
551
|
-
sessionId: {
|
|
552
|
-
type: string;
|
|
553
|
-
};
|
|
554
|
-
additionalProperties: boolean;
|
|
555
|
-
};
|
|
556
|
-
required: string[];
|
|
557
|
-
description: string;
|
|
558
|
-
};
|
|
559
|
-
IRegisterSiopSessionArgs: {
|
|
560
|
-
type: string;
|
|
561
|
-
properties: {
|
|
562
|
-
identifier: {
|
|
563
|
-
type: string;
|
|
564
|
-
properties: {
|
|
565
|
-
did: {
|
|
566
|
-
type: string;
|
|
567
|
-
};
|
|
568
|
-
alias: {
|
|
569
|
-
type: string;
|
|
570
|
-
};
|
|
571
|
-
provider: {
|
|
572
|
-
type: string;
|
|
573
|
-
};
|
|
574
|
-
controllerKeyId: {
|
|
575
|
-
type: string;
|
|
576
|
-
};
|
|
577
|
-
keys: {
|
|
578
|
-
type: string;
|
|
579
|
-
items: {
|
|
580
|
-
type: string;
|
|
581
|
-
properties: {
|
|
582
|
-
additionalProperties: boolean;
|
|
583
|
-
};
|
|
584
|
-
};
|
|
585
|
-
};
|
|
586
|
-
services: {
|
|
587
|
-
type: string;
|
|
588
|
-
items: {
|
|
589
|
-
type: string;
|
|
590
|
-
properties: {
|
|
591
|
-
additionalProperties: boolean;
|
|
592
|
-
};
|
|
593
|
-
};
|
|
594
|
-
};
|
|
595
|
-
};
|
|
596
|
-
additionalProperties: boolean;
|
|
597
|
-
required: string[];
|
|
598
|
-
};
|
|
599
|
-
sessionId: {
|
|
600
|
-
type: string;
|
|
601
|
-
};
|
|
602
|
-
expiresIn: {
|
|
603
|
-
type: string;
|
|
604
|
-
};
|
|
605
|
-
additionalProperties: boolean;
|
|
606
|
-
};
|
|
607
|
-
required: string[];
|
|
608
|
-
description: string;
|
|
609
|
-
};
|
|
610
|
-
IRemoveSiopSessionArgs: {
|
|
611
|
-
type: string;
|
|
612
|
-
properties: {
|
|
613
|
-
sessionId: {
|
|
614
|
-
type: string;
|
|
615
|
-
};
|
|
616
|
-
additionalProperties: boolean;
|
|
617
|
-
};
|
|
618
|
-
required: string[];
|
|
619
|
-
description: string;
|
|
620
|
-
};
|
|
621
|
-
IAuthenticateWithSiopArgs: {
|
|
622
|
-
type: string;
|
|
623
|
-
properties: {
|
|
624
|
-
sessionId: {
|
|
625
|
-
type: string;
|
|
626
|
-
};
|
|
627
|
-
stateId: {
|
|
628
|
-
type: string;
|
|
629
|
-
};
|
|
630
|
-
redirectUrl: {
|
|
631
|
-
type: string;
|
|
632
|
-
};
|
|
633
|
-
additionalProperties: boolean;
|
|
634
|
-
};
|
|
635
|
-
required: string[];
|
|
636
|
-
description: string;
|
|
637
|
-
};
|
|
638
|
-
IResponse: {
|
|
639
|
-
type: string;
|
|
640
|
-
properties: {
|
|
641
|
-
status: {
|
|
642
|
-
type: string;
|
|
643
|
-
};
|
|
644
|
-
additionalProperties: boolean;
|
|
645
|
-
};
|
|
646
|
-
required: string[];
|
|
647
|
-
description: string;
|
|
648
|
-
};
|
|
649
|
-
IGetSiopAuthenticationRequestFromRpArgs: {
|
|
650
|
-
type: string;
|
|
651
|
-
properties: {
|
|
652
|
-
sessionId: {
|
|
653
|
-
type: string;
|
|
654
|
-
};
|
|
655
|
-
stateId: {
|
|
656
|
-
type: string;
|
|
657
|
-
};
|
|
658
|
-
redirectUrl: {
|
|
659
|
-
type: string;
|
|
660
|
-
};
|
|
661
|
-
additionalProperties: boolean;
|
|
662
|
-
};
|
|
663
|
-
required: string[];
|
|
664
|
-
description: string;
|
|
665
|
-
};
|
|
666
|
-
ParsedAuthenticationRequestURI: {
|
|
667
|
-
type: string;
|
|
668
|
-
properties: {
|
|
669
|
-
jwt: {
|
|
670
|
-
type: string;
|
|
671
|
-
};
|
|
672
|
-
requestPayload: {
|
|
673
|
-
type: string;
|
|
674
|
-
properties: {
|
|
675
|
-
additionalProperties: boolean;
|
|
676
|
-
};
|
|
677
|
-
};
|
|
678
|
-
registration: {
|
|
679
|
-
type: string;
|
|
680
|
-
properties: {
|
|
681
|
-
additionalProperties: boolean;
|
|
682
|
-
};
|
|
683
|
-
};
|
|
684
|
-
additionalProperties: boolean;
|
|
685
|
-
};
|
|
686
|
-
required: string[];
|
|
687
|
-
description: string;
|
|
688
|
-
};
|
|
689
|
-
IGetSiopAuthenticationRequestDetailsArgs: {
|
|
690
|
-
type: string;
|
|
691
|
-
properties: {
|
|
692
|
-
sessionId: {
|
|
693
|
-
type: string;
|
|
694
|
-
};
|
|
695
|
-
verifiedAuthenticationRequest: {
|
|
696
|
-
type: string;
|
|
697
|
-
properties: {
|
|
698
|
-
additionalProperties: boolean;
|
|
699
|
-
};
|
|
700
|
-
};
|
|
701
|
-
credentialFilter: {
|
|
702
|
-
type: string;
|
|
703
|
-
properties: {
|
|
704
|
-
additionalProperties: boolean;
|
|
705
|
-
};
|
|
706
|
-
};
|
|
707
|
-
additionalProperties: boolean;
|
|
708
|
-
};
|
|
709
|
-
required: string[];
|
|
710
|
-
description: string;
|
|
711
|
-
};
|
|
712
|
-
IAuthRequestDetails: {
|
|
713
|
-
type: string;
|
|
714
|
-
properties: {
|
|
715
|
-
id: {
|
|
716
|
-
type: string;
|
|
717
|
-
};
|
|
718
|
-
alsoKnownAs: {
|
|
719
|
-
type: string;
|
|
720
|
-
items: {
|
|
721
|
-
type: string;
|
|
722
|
-
};
|
|
723
|
-
};
|
|
724
|
-
vpResponseOpts: {
|
|
725
|
-
type: string;
|
|
726
|
-
properties: {
|
|
727
|
-
additionalProperties: boolean;
|
|
728
|
-
};
|
|
729
|
-
};
|
|
730
|
-
additionalProperties: boolean;
|
|
731
|
-
};
|
|
732
|
-
required: string[];
|
|
733
|
-
description: string;
|
|
734
|
-
};
|
|
735
|
-
IVerifySiopAuthenticationRequestUriArgs: {
|
|
736
|
-
type: string;
|
|
737
|
-
properties: {
|
|
738
|
-
sessionId: {
|
|
739
|
-
type: string;
|
|
740
|
-
};
|
|
741
|
-
ParsedAuthenticationRequestURI: {
|
|
742
|
-
type: string;
|
|
743
|
-
properties: {
|
|
744
|
-
additionalProperties: boolean;
|
|
745
|
-
};
|
|
746
|
-
};
|
|
747
|
-
additionalProperties: boolean;
|
|
748
|
-
};
|
|
749
|
-
required: string[];
|
|
750
|
-
description: string;
|
|
751
|
-
};
|
|
752
|
-
VerifiedAuthorizationRequest: {
|
|
753
|
-
type: string;
|
|
754
|
-
properties: {
|
|
755
|
-
payload: {
|
|
756
|
-
type: string;
|
|
757
|
-
properties: {
|
|
758
|
-
additionalProperties: boolean;
|
|
759
|
-
};
|
|
760
|
-
};
|
|
761
|
-
presentationDefinitions: {
|
|
762
|
-
type: string;
|
|
763
|
-
properties: {
|
|
764
|
-
additionalProperties: boolean;
|
|
765
|
-
};
|
|
766
|
-
};
|
|
767
|
-
verifyOpts: {
|
|
768
|
-
type: string;
|
|
769
|
-
properties: {
|
|
770
|
-
additionalProperties: boolean;
|
|
771
|
-
};
|
|
772
|
-
};
|
|
773
|
-
additionalProperties: boolean;
|
|
774
|
-
};
|
|
775
|
-
required: string[];
|
|
776
|
-
description: string;
|
|
777
|
-
};
|
|
778
|
-
ISendSiopAuthenticationResponseArgs: {
|
|
779
|
-
type: string;
|
|
780
|
-
properties: {
|
|
781
|
-
sessionId: {
|
|
782
|
-
type: string;
|
|
783
|
-
};
|
|
784
|
-
verifiedAuthenticationRequest: {
|
|
785
|
-
type: string;
|
|
786
|
-
properties: {
|
|
787
|
-
additionalProperties: boolean;
|
|
788
|
-
};
|
|
789
|
-
};
|
|
790
|
-
verifiablePresentationResponse: {
|
|
791
|
-
type: string;
|
|
792
|
-
properties: {
|
|
793
|
-
additionalProperties: boolean;
|
|
794
|
-
};
|
|
795
|
-
};
|
|
796
|
-
additionalProperties: boolean;
|
|
797
|
-
};
|
|
798
|
-
required: string[];
|
|
799
|
-
description: string;
|
|
800
|
-
};
|
|
801
|
-
};
|
|
802
|
-
methods: {
|
|
803
|
-
getSessionForSiop: {
|
|
804
|
-
description: string;
|
|
805
|
-
arguments: {
|
|
806
|
-
$ref: string;
|
|
807
|
-
};
|
|
808
|
-
returnType: string;
|
|
809
|
-
};
|
|
810
|
-
registerSessionForSiop: {
|
|
811
|
-
description: string;
|
|
812
|
-
arguments: {
|
|
813
|
-
$ref: string;
|
|
814
|
-
};
|
|
815
|
-
returnType: string;
|
|
816
|
-
};
|
|
817
|
-
removeSessionForSiop: {
|
|
818
|
-
description: string;
|
|
819
|
-
arguments: {
|
|
820
|
-
$ref: string;
|
|
821
|
-
};
|
|
822
|
-
returnType: string;
|
|
823
|
-
};
|
|
824
|
-
authenticateWithSiop: {
|
|
825
|
-
description: string;
|
|
826
|
-
arguments: {
|
|
827
|
-
$ref: string;
|
|
828
|
-
};
|
|
829
|
-
returnType: {
|
|
830
|
-
$ref: string;
|
|
831
|
-
};
|
|
832
|
-
};
|
|
833
|
-
getSiopAuthenticationRequestFromRP: {
|
|
834
|
-
description: string;
|
|
835
|
-
arguments: {
|
|
836
|
-
$ref: string;
|
|
837
|
-
};
|
|
838
|
-
returnType: {
|
|
839
|
-
$ref: string;
|
|
840
|
-
};
|
|
841
|
-
};
|
|
842
|
-
getSiopAuthenticationRequestDetails: {
|
|
843
|
-
description: string;
|
|
844
|
-
arguments: {
|
|
845
|
-
$ref: string;
|
|
846
|
-
};
|
|
847
|
-
returnType: {
|
|
848
|
-
$ref: string;
|
|
849
|
-
};
|
|
850
|
-
};
|
|
851
|
-
verifySiopAuthenticationRequestURI: {
|
|
852
|
-
description: string;
|
|
853
|
-
arguments: {
|
|
854
|
-
$ref: string;
|
|
855
|
-
};
|
|
856
|
-
returnType: {
|
|
857
|
-
$ref: string;
|
|
858
|
-
};
|
|
859
|
-
};
|
|
860
|
-
sendSiopAuthenticationResponse: {
|
|
861
|
-
description: string;
|
|
862
|
-
arguments: {
|
|
863
|
-
$ref: string;
|
|
864
|
-
};
|
|
865
|
-
returnType: {
|
|
866
|
-
$ref: string;
|
|
867
|
-
};
|
|
868
|
-
};
|
|
869
|
-
};
|
|
870
|
-
};
|
|
871
|
-
};
|
|
182
|
+
readonly schema: any;
|
|
872
183
|
readonly methods: ISIOPv2RP;
|
|
873
184
|
constructor(opts: ISiopv2RPOpts);
|
|
874
185
|
setDefaultOpts(rpDefaultOpts: IRPDefaultOpts, context: IRequiredContext): void;
|
|
@@ -882,13 +193,18 @@ declare class SIOPv2RP implements IAgentPlugin {
|
|
|
882
193
|
private siopVerifyAuthResponse;
|
|
883
194
|
private siopImportDefinitions;
|
|
884
195
|
private siopGetRedirectURI;
|
|
885
|
-
getRPInstance({
|
|
196
|
+
getRPInstance({ definitionId, responseRedirectURI }: ISiopRPInstanceArgs, context: IRequiredContext): Promise<RPInstance>;
|
|
886
197
|
getRPOptions(context: IRequiredContext, opts: {
|
|
887
|
-
|
|
198
|
+
definitionId?: string;
|
|
888
199
|
responseRedirectURI?: string;
|
|
889
200
|
}): Promise<IRPOptions>;
|
|
890
|
-
getInstanceOpts(
|
|
201
|
+
getInstanceOpts(definitionId?: string): IPEXInstanceOptions | undefined;
|
|
891
202
|
private getDefaultOptions;
|
|
892
203
|
}
|
|
893
204
|
|
|
894
|
-
|
|
205
|
+
/**
|
|
206
|
+
* @public
|
|
207
|
+
*/
|
|
208
|
+
declare const schema: any;
|
|
209
|
+
|
|
210
|
+
export { type AuthorizationResponseStateWithVerifiedData, type CredentialOpts, type IAuthRequestDetails, type IAuthorizationRequestPayloads, type ICreateAuthRequestArgs, type IDefinitionPair, type IDeleteAuthStateArgs, type IGetAuthRequestStateArgs, type IGetAuthResponseStateArgs, type IGetRedirectUriArgs, type IPEXDefinitionPersistArgs, type IPEXInstanceOptions, type IPEXOptions, type IRPDefaultOpts, type IRPOptions, type IRequiredContext, type ISIOPIdentifierOptions, type ISIOPv2RP, type ISiopRPInstanceArgs, type ISiopv2RPOpts, type IUpdateRequestStateArgs, type IVerifyAuthResponseStateArgs, type ImportDefinitionsArgs, type PerDidResolver, SIOPv2RP, type VerificationPolicies, VerifiedDataMode, schema };
|