@sphereon/ssi-sdk.w3c-vc-api 0.33.1-next.68 → 0.34.0

package/dist/index.cjs

@@ -46,14 +46,14 @@ var import_express = __toESM(require("express"), 1);
 
 // src/api-functions.ts
 var import_ssi_express_support = require("@sphereon/ssi-express-support");
+var import_ssi_sdk_ext = require("@sphereon/ssi-sdk-ext.identifier-resolution");
 var import_ssi_sdk = require("@sphereon/ssi-sdk.agent-config");
-var import_uuid = require("uuid");
-var import_debug = __toESM(require("debug"), 1);
 var import_ssi_sdk2 = require("@sphereon/ssi-sdk.credential-store");
-var import_ssi_sdk3 = require("@sphereon/ssi-sdk.data-store");
+var import_ssi_sdk3 = require("@sphereon/ssi-sdk.credential-vcdm");
+var import_ssi_sdk4 = require("@sphereon/ssi-sdk.data-store");
 var import_ssi_types = require("@sphereon/ssi-types");
-var import_ssi_sdk4 = require("@sphereon/ssi-sdk.credential-vcdm");
-var import_ssi_sdk_ext = require("@sphereon/ssi-sdk-ext.identifier-resolution");
+var import_debug = __toESM(require("debug"), 1);
+var import_uuid = require("uuid");
 var debug = (0, import_debug.default)("sphereon:ssi-sdk:w3c-vc-api");
 function issueCredentialEndpoint(router, context, opts) {
   if (opts?.enabled === false) {
@@ -109,7 +109,7 @@ function issueCredentialEndpoint(router, context, opts) {
       const rawDocument = import_ssi_types.CredentialMapper.storedCredentialToOriginalFormat(vc);
       const save = opts?.persistIssuedCredentials;
       if (save) {
-        const issuer = (0, import_ssi_sdk4.extractIssuer)(credential);
+        const issuer = (0, import_ssi_sdk3.extractIssuer)(credential);
         const identifier = await context.agent.identifierManagedGet({
           identifier: issuer,
           issuer,
@@ -134,7 +134,7 @@ function issueCredentialEndpoint(router, context, opts) {
         }
         const dc = {
           credential: {
-            credentialRole: import_ssi_sdk3.CredentialRole.HOLDER,
+            credentialRole: import_ssi_sdk4.CredentialRole.HOLDER,
             // tenantId: 'test-tenant',
             kmsKeyRef: identifier.kmsKeyRef,
             identifierMethod: identifier.method,
@@ -164,8 +164,8 @@ function getCredentialsEndpoint(router, context, opts) {
   const path = opts?.path ?? "/credentials";
   router.get(path, (0, import_ssi_express_support.checkAuth)(opts?.endpoint), async (request, response) => {
     try {
-      const credentialRole = request.query.credentialRole || import_ssi_sdk3.CredentialRole.HOLDER;
-      if (!Object.values(import_ssi_sdk3.CredentialRole).includes(credentialRole)) {
+      const credentialRole = request.query.credentialRole || import_ssi_sdk4.CredentialRole.HOLDER;
+      if (!Object.values(import_ssi_sdk4.CredentialRole).includes(credentialRole)) {
         return (0, import_ssi_express_support.sendErrorResponse)(response, 400, `Invalid credentialRole: ${credentialRole}`);
       }
       const documentType = request.query.documentType || import_ssi_sdk2.DocumentType.VC;
@@ -201,8 +201,8 @@ function getCredentialEndpoint(router, context, opts) {
       if (!id) {
         return (0, import_ssi_express_support.sendErrorResponse)(response, 400, "no id provided");
       }
-      const credentialRole = request.query.credentialRole || import_ssi_sdk3.CredentialRole.HOLDER;
-      if (!Object.values(import_ssi_sdk3.CredentialRole).includes(credentialRole)) {
+      const credentialRole = request.query.credentialRole || import_ssi_sdk4.CredentialRole.HOLDER;
+      if (!Object.values(import_ssi_sdk4.CredentialRole).includes(credentialRole)) {
         return (0, import_ssi_express_support.sendErrorResponse)(response, 400, `Invalid credentialRole: ${credentialRole}`);
       }
       const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({
@@ -229,12 +229,15 @@ function verifyCredentialEndpoint(router, context, opts) {
     try {
       debug(JSON.stringify(request.body, null, 2));
       const credential = request.body.verifiableCredential;
+      const options = request.body.options;
       if (!credential) {
         return (0, import_ssi_express_support.sendErrorResponse)(response, 400, "No verifiable credential supplied");
       }
       const verifyResult = await context.agent.verifyCredential({
+        ...options,
         credential,
         policies: {
+          ...options?.policies,
           credentialStatus: false
         },
         fetchRemoteContexts: opts?.fetchRemoteContexts !== false
@@ -262,7 +265,7 @@ function deleteCredentialEndpoint(router, context, opts) {
       if (credentialRole === void 0) {
         return (0, import_ssi_express_support.sendErrorResponse)(response, 400, "credentialRole query parameter is missing");
       }
-      if (!Object.values(import_ssi_sdk3.CredentialRole).includes(credentialRole)) {
+      if (!Object.values(import_ssi_sdk4.CredentialRole).includes(credentialRole)) {
         return (0, import_ssi_express_support.sendErrorResponse)(response, 400, `Invalid credentialRole: ${credentialRole}`);
       }
       const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/vc-api-server.ts","../src/api-functions.ts"],"sourcesContent":["/**\n * @public\n */\nexport * from './vc-api-server'\nexport * from './types'\nexport * from './api-functions'\n","import { agentContext } from '@sphereon/ssi-sdk.core'\nimport type { ExpressSupport } from '@sphereon/ssi-express-support'\nimport type { TAgent } from '@veramo/core'\n\nimport express, { type Express, Router } from 'express'\nimport {\n  deleteCredentialEndpoint,\n  getCredentialEndpoint,\n  getCredentialsEndpoint,\n  issueCredentialEndpoint,\n  verifyCredentialEndpoint,\n} from './api-functions'\nimport type { IRequiredPlugins, IVCAPIOpts } from './types'\n\nexport class VcApiServer {\n  get router(): express.Router {\n    return this._router\n  }\n\n  private readonly _express: Express\n  private readonly _agent: TAgent<IRequiredPlugins>\n  private readonly _opts?: IVCAPIOpts\n  private readonly _router: Router\n\n  constructor(args: { agent: TAgent<IRequiredPlugins>; expressSupport: ExpressSupport; opts?: IVCAPIOpts }) {\n    const { agent, opts } = args\n    this._agent = agent\n    if (opts?.endpointOpts?.globalAuth) {\n      copyGlobalAuthToEndpoint(opts, 'issueCredential')\n      copyGlobalAuthToEndpoint(opts, 'getCredential')\n      copyGlobalAuthToEndpoint(opts, 'getCredentials')\n      copyGlobalAuthToEndpoint(opts, 'deleteCredential')\n      copyGlobalAuthToEndpoint(opts, 'verifyCredential')\n    }\n\n    this._opts = opts\n    this._express = args.expressSupport.express\n    this._router = express.Router()\n\n    const context = agentContext(agent)\n\n    const features = opts?.issueCredentialOpts?.enableFeatures ?? ['vc-issue', 'vc-persist', 'vc-verify']\n    console.log(`VC API enabled, with features: ${JSON.stringify(features)}`)\n\n    // Credential endpoints\n    if (features.includes('vc-issue')) {\n      issueCredentialEndpoint(this.router, context, {\n        ...opts?.endpointOpts?.issueCredential,\n        issueCredentialOpts: opts?.issueCredentialOpts,\n      })\n    }\n    if (features.includes('vc-persist')) {\n      getCredentialEndpoint(this.router, context, opts?.endpointOpts?.getCredential)\n      getCredentialsEndpoint(this.router, context, opts?.endpointOpts?.getCredentials)\n      deleteCredentialEndpoint(this.router, context, opts?.endpointOpts?.deleteCredential) // not in spec.\n    }\n    if (features.includes('vc-verify')) {\n      verifyCredentialEndpoint(this.router, context, {\n        ...opts?.endpointOpts?.verifyCredential,\n        fetchRemoteContexts: opts?.issueCredentialOpts?.fetchRemoteContexts,\n      })\n    }\n    this._express.use(opts?.endpointOpts?.basePath ?? '', this.router)\n  }\n\n  get agent(): TAgent<IRequiredPlugins> {\n    return this._agent\n  }\n\n  get opts(): IVCAPIOpts | undefined {\n    return this._opts\n  }\n\n  get express(): Express {\n    return this._express\n  }\n}\n\nfunction copyGlobalAuthToEndpoint(opts: IVCAPIOpts, key: string) {\n  if (opts?.endpointOpts?.globalAuth) {\n    // @ts-ignore\n    opts.endpointOpts[key] = {\n      // @ts-ignore\n      ...opts.endpointOpts[key],\n      // @ts-ignore\n      endpoint: { ...opts.endpointOpts.globalAuth, ...opts.endpointOpts[key]?.endpoint },\n    }\n  }\n}\n","import { checkAuth, type ISingleEndpointOpts, sendErrorResponse } from '@sphereon/ssi-express-support'\nimport { contextHasPlugin } from '@sphereon/ssi-sdk.agent-config'\nimport type { CredentialPayload, ProofFormat } from '@veramo/core'\nimport { type Request, type Response, Router } from 'express'\nimport { v4 } from 'uuid'\nimport type { IIssueCredentialEndpointOpts, IRequiredContext, IVCAPIIssueOpts, IVerifyCredentialEndpointOpts } from './types'\nimport Debug from 'debug'\nimport { AddCredentialArgs, CredentialCorrelationType, DocumentType, type FindDigitalCredentialArgs } from '@sphereon/ssi-sdk.credential-store'\nimport type { IStatusListPlugin } from '@sphereon/ssi-sdk.vc-status-list'\nimport { CredentialRole } from '@sphereon/ssi-sdk.data-store'\nimport { CredentialMapper, CredentialProofFormat, isVcdm2Credential, OriginalVerifiableCredential } from '@sphereon/ssi-types'\nimport { extractIssuer } from '@sphereon/ssi-sdk.credential-vcdm'\nimport { isDidIdentifier, isIIdentifier } from '@sphereon/ssi-sdk-ext.identifier-resolution'\nimport type { VerifiableCredentialSP } from '@sphereon/ssi-sdk.core'\n\nconst debug = Debug('sphereon:ssi-sdk:w3c-vc-api')\n\nexport function issueCredentialEndpoint(router: Router, context: IRequiredContext, opts?: IIssueCredentialEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Issue credential endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials/issue'\n\n  router.post(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const credential: CredentialPayload = request.body.credential\n      const reqOpts = request.body.options ?? {}\n      const inputFormat = reqOpts.proofFormat?.toLocaleLowerCase()\n      let proofFormat: CredentialProofFormat | undefined = undefined\n      if (inputFormat) {\n        if (inputFormat === 'jwt') {\n          proofFormat = 'jwt'\n        } else if (inputFormat?.includes('jose') || inputFormat?.includes('vc+jwt')) {\n          proofFormat = 'vc+jwt'\n        } else if (inputFormat?.includes('ld')) {\n          proofFormat = 'lds'\n        }\n      }\n      if (proofFormat === undefined && opts?.issueCredentialOpts?.proofFormat) {\n        proofFormat = opts.issueCredentialOpts.proofFormat.toLocaleLowerCase() as CredentialProofFormat\n      }\n      if (proofFormat === undefined) {\n        if (isVcdm2Credential(credential)) {\n          proofFormat = 'vc+jwt'\n        } else {\n          proofFormat = 'lds'\n        }\n      }\n\n      if (!credential) {\n        return sendErrorResponse(response, 400, 'No credential supplied')\n      }\n      if (!credential.id) {\n        credential.id = `urn:uuid:${v4()}`\n      }\n      if (contextHasPlugin<IStatusListPlugin>(context, 'slAddStatusToCredential')) {\n        // Add status list if enabled (and when the input has a credentialStatus object (can be empty))\n        const credentialStatusVC = await context.agent.slAddStatusToCredential({ credential })\n        if (credential.credentialStatus && !credential.credentialStatus.statusListCredential) {\n          credential.credentialStatus = credentialStatusVC.credentialStatus\n        }\n      }\n\n      const issueOpts: IVCAPIIssueOpts | undefined = opts?.issueCredentialOpts\n      const vc = await context.agent.createVerifiableCredential({\n        credential,\n        proofFormat: proofFormat as ProofFormat,\n        fetchRemoteContexts: issueOpts?.fetchRemoteContexts !== false,\n      })\n      const rawDocument = CredentialMapper.storedCredentialToOriginalFormat(vc as OriginalVerifiableCredential)\n      const save = opts?.persistIssuedCredentials\n      if (save) {\n        const issuer = extractIssuer(credential)\n        const identifier = await context.agent.identifierManagedGet({ identifier: issuer, issuer: issuer, vmRelationship: 'assertionMethod' })\n\n        let issuerCorrelationId: string | undefined = identifier.issuer\n        if (!issuerCorrelationId && isDidIdentifier(identifier.identifier)) {\n          if (isIIdentifier(identifier.identifier)) {\n            issuerCorrelationId = identifier.identifier.did\n          } else if (typeof identifier.identifier === 'string') {\n            issuerCorrelationId = identifier.identifier\n          }\n        }\n        if (!issuerCorrelationId) {\n          if (typeof vc.issuer === 'string') {\n            issuerCorrelationId = vc.issuer\n          } else if (typeof vc.issuer?.id === 'string') {\n            issuerCorrelationId = vc.issuer.id\n          } else {\n            issuerCorrelationId = 'unknown'\n          }\n        }\n\n        const dc: AddCredentialArgs = {\n          credential: {\n            credentialRole: CredentialRole.HOLDER,\n            // tenantId: 'test-tenant',\n            kmsKeyRef: identifier.kmsKeyRef,\n            identifierMethod: identifier.method,\n            issuerCorrelationId: issuerCorrelationId,\n            issuerCorrelationType: CredentialCorrelationType.DID,\n            rawDocument: typeof rawDocument === 'string' ? rawDocument : JSON.stringify(rawDocument),\n          },\n        }\n        await context.agent.crsAddCredential(dc)\n      }\n      response.statusCode = 201\n      return response.send({ verifiableCredential: rawDocument, uniformCredential: CredentialMapper.toUniformCredential(vc as OriginalVerifiableCredential) })\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function getCredentialsEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Get credentials endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials'\n  router.get(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const credentialRole = (request.query.credentialRole as CredentialRole) || CredentialRole.HOLDER\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const documentType = (request.query.documentType as DocumentType) || DocumentType.VC\n      if (!Object.values(DocumentType).includes(documentType)) {\n        return sendErrorResponse(response, 400, `Invalid documentType: ${documentType}`)\n      }\n\n      const filter: FindDigitalCredentialArgs = [\n        {\n          documentType: documentType,\n          credentialRole: credentialRole,\n        },\n      ]\n      const uniqueVCs = await context.agent.crsGetUniqueCredentials({ filter })\n      response.statusCode = 202\n      return response.send(uniqueVCs.map((uVC) => uVC.uniformVerifiableCredential))\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function getCredentialEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Get credential endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials/:id'\n  router.get(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const id = request.params.id\n      if (!id) {\n        return sendErrorResponse(response, 400, 'no id provided')\n      }\n      const credentialRole = (request.query.credentialRole as CredentialRole) || CredentialRole.HOLDER\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({\n        credentialRole: credentialRole,\n        idOrHash: id,\n      })\n      if (!vcInfo) {\n        return sendErrorResponse(response, 403, `id ${id} not found`)\n      }\n      response.statusCode = 200\n      return response.send(vcInfo.uniformVerifiableCredential)\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function verifyCredentialEndpoint(router: Router, context: IRequiredContext, opts?: IVerifyCredentialEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Verify credential endpoint is disabled`)\n    return\n  }\n  router.post(opts?.path ?? '/credentials/verify', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      debug(JSON.stringify(request.body, null, 2))\n      const credential: VerifiableCredentialSP = request.body.verifiableCredential\n      // const options: IIssueOptionsPayload = request.body.options\n      if (!credential) {\n        return sendErrorResponse(response, 400, 'No verifiable credential supplied')\n      }\n      const verifyResult = await context.agent.verifyCredential({\n        credential,\n        policies: {\n          credentialStatus: false, // Do not use built-in. We have our own statusList implementations\n        },\n        fetchRemoteContexts: opts?.fetchRemoteContexts !== false,\n      })\n\n      response.statusCode = 200\n      return response.send(verifyResult)\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function deleteCredentialEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Delete credential endpoint is disabled`)\n    return\n  }\n  router.delete(opts?.path ?? '/credentials/:id', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const id = request.params.id\n      if (!id) {\n        return sendErrorResponse(response, 400, 'no id provided')\n      }\n      const credentialRole = request.query.credentialRole as CredentialRole\n      if (credentialRole === undefined) {\n        return sendErrorResponse(response, 400, 'credentialRole query parameter is missing')\n      }\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({\n        credentialRole: credentialRole,\n        idOrHash: id,\n      })\n      if (!vcInfo) {\n        return sendErrorResponse(response, 404, `id ${id} not found`)\n      }\n      const success = await context.agent.crsDeleteCredentials({ filter: [{ hash: vcInfo.hash }] })\n      if (success === 0) {\n        return sendErrorResponse(response, 400, `Could not delete Verifiable Credential with id ${id}`)\n      }\n      response.statusCode = 200\n      return response.send()\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;ACAA,IAAAA,kBAA6B;AAI7B,qBAA8C;;;ACJ9C,iCAAuE;AACvE,qBAAiC;AAGjC,kBAAmB;AAEnB,mBAAkB;AAClB,IAAAC,kBAA2G;AAE3G,IAAAA,kBAA+B;AAC/B,uBAAyG;AACzG,IAAAA,kBAA8B;AAC9B,yBAA+C;AAG/C,IAAMC,YAAQC,aAAAA,SAAM,6BAAA;AAEb,SAASC,wBAAwBC,QAAgBC,SAA2BC,MAAmC;AACpH,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,uCAAuC;AACnD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAE3BN,SAAOO,KAAKD,UAAME,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACpE,QAAI;AACF,YAAMC,aAAgCF,QAAQG,KAAKD;AACnD,YAAME,UAAUJ,QAAQG,KAAKE,WAAW,CAAC;AACzC,YAAMC,cAAcF,QAAQG,aAAaC,kBAAAA;AACzC,UAAID,cAAiDE;AACrD,UAAIH,aAAa;AACf,YAAIA,gBAAgB,OAAO;AACzBC,wBAAc;QAChB,WAAWD,aAAaI,SAAS,MAAA,KAAWJ,aAAaI,SAAS,QAAA,GAAW;AAC3EH,wBAAc;QAChB,WAAWD,aAAaI,SAAS,IAAA,GAAO;AACtCH,wBAAc;QAChB;MACF;AACA,UAAIA,gBAAgBE,UAAajB,MAAMmB,qBAAqBJ,aAAa;AACvEA,sBAAcf,KAAKmB,oBAAoBJ,YAAYC,kBAAiB;MACtE;AACA,UAAID,gBAAgBE,QAAW;AAC7B,gBAAIG,oCAAkBV,UAAAA,GAAa;AACjCK,wBAAc;QAChB,OAAO;AACLA,wBAAc;QAChB;MACF;AAEA,UAAI,CAACL,YAAY;AACf,mBAAOW,8CAAkBZ,UAAU,KAAK,wBAAA;MAC1C;AACA,UAAI,CAACC,WAAWY,IAAI;AAClBZ,mBAAWY,KAAK,gBAAYC,gBAAAA,CAAAA;MAC9B;AACA,cAAIC,iCAAoCzB,SAAS,yBAAA,GAA4B;AAE3E,cAAM0B,qBAAqB,MAAM1B,QAAQ2B,MAAMC,wBAAwB;UAAEjB;QAAW,CAAA;AACpF,YAAIA,WAAWkB,oBAAoB,CAAClB,WAAWkB,iBAAiBC,sBAAsB;AACpFnB,qBAAWkB,mBAAmBH,mBAAmBG;QACnD;MACF;AAEA,YAAME,YAAyC9B,MAAMmB;AACrD,YAAMY,KAAK,MAAMhC,QAAQ2B,MAAMM,2BAA2B;QACxDtB;QACAK;QACAkB,qBAAqBH,WAAWG,wBAAwB;MAC1D,CAAA;AACA,YAAMC,cAAcC,kCAAiBC,iCAAiCL,EAAAA;AACtE,YAAMM,OAAOrC,MAAMsC;AACnB,UAAID,MAAM;AACR,cAAME,aAASC,+BAAc9B,UAAAA;AAC7B,cAAM+B,aAAa,MAAM1C,QAAQ2B,MAAMgB,qBAAqB;UAAED,YAAYF;UAAQA;UAAgBI,gBAAgB;QAAkB,CAAA;AAEpI,YAAIC,sBAA0CH,WAAWF;AACzD,YAAI,CAACK,2BAAuBC,oCAAgBJ,WAAWA,UAAU,GAAG;AAClE,kBAAIK,kCAAcL,WAAWA,UAAU,GAAG;AACxCG,kCAAsBH,WAAWA,WAAWM;UAC9C,WAAW,OAAON,WAAWA,eAAe,UAAU;AACpDG,kCAAsBH,WAAWA;UACnC;QACF;AACA,YAAI,CAACG,qBAAqB;AACxB,cAAI,OAAOb,GAAGQ,WAAW,UAAU;AACjCK,kCAAsBb,GAAGQ;UAC3B,WAAW,OAAOR,GAAGQ,QAAQjB,OAAO,UAAU;AAC5CsB,kCAAsBb,GAAGQ,OAAOjB;UAClC,OAAO;AACLsB,kCAAsB;UACxB;QACF;AAEA,cAAMI,KAAwB;UAC5BtC,YAAY;YACVuC,gBAAgBC,+BAAeC;;YAE/BC,WAAWX,WAAWW;YACtBC,kBAAkBZ,WAAWa;YAC7BV;YACAW,uBAAuBC,0CAA0BC;YACjDvB,aAAa,OAAOA,gBAAgB,WAAWA,cAAcwB,KAAKC,UAAUzB,WAAAA;UAC9E;QACF;AACA,cAAMnC,QAAQ2B,MAAMkC,iBAAiBZ,EAAAA;MACvC;AACAvC,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAK;QAAEC,sBAAsB7B;QAAa8B,mBAAmB7B,kCAAiB8B,oBAAoBlC,EAAAA;MAAoC,CAAA;IACxJ,SAASmC,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AAhGgBrE;AAkGT,SAASuE,uBAAuBtE,QAAgBC,SAA2BC,MAA0B;AAC1G,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,sCAAsC;AAClD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAC3BN,SAAOuE,IAAIjE,UAAME,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnE,QAAI;AACF,YAAMwC,iBAAkBzC,QAAQ8D,MAAMrB,kBAAqCC,+BAAeC;AAC1F,UAAI,CAACoB,OAAOC,OAAOtB,8BAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,mBAAO5B,8CAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMwB,eAAgBjE,QAAQ8D,MAAMG,gBAAiCC,6BAAaC;AAClF,UAAI,CAACJ,OAAOC,OAAOE,4BAAAA,EAAcxD,SAASuD,YAAAA,GAAe;AACvD,mBAAOpD,8CAAkBZ,UAAU,KAAK,yBAAyBgE,YAAAA,EAAc;MACjF;AAEA,YAAMG,SAAoC;QACxC;UACEH;UACAxB;QACF;;AAEF,YAAM4B,YAAY,MAAM9E,QAAQ2B,MAAMoD,wBAAwB;QAAEF;MAAO,CAAA;AACvEnE,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAKe,UAAUE,IAAI,CAACC,QAAQA,IAAIC,2BAA2B,CAAA;IAC7E,SAASf,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA/BgBE;AAiCT,SAASc,sBAAsBpF,QAAgBC,SAA2BC,MAA0B;AACzG,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,qCAAqC;AACjD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAC3BN,SAAOuE,IAAIjE,UAAME,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnE,QAAI;AACF,YAAMa,KAAKd,QAAQ2E,OAAO7D;AAC1B,UAAI,CAACA,IAAI;AACP,mBAAOD,8CAAkBZ,UAAU,KAAK,gBAAA;MAC1C;AACA,YAAMwC,iBAAkBzC,QAAQ8D,MAAMrB,kBAAqCC,+BAAeC;AAC1F,UAAI,CAACoB,OAAOC,OAAOtB,8BAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,mBAAO5B,8CAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMmC,SAAS,MAAMrF,QAAQ2B,MAAM2D,iCAAiC;QAClEpC;QACAqC,UAAUhE;MACZ,CAAA;AACA,UAAI,CAAC8D,QAAQ;AACX,mBAAO/D,8CAAkBZ,UAAU,KAAK,MAAMa,EAAAA,YAAc;MAC9D;AACAb,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAKsB,OAAOH,2BAA2B;IACzD,SAASf,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA9BgBgB;AAgCT,SAASK,yBAAyBzF,QAAgBC,SAA2BC,MAAoC;AACtH,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,wCAAwC;AACpD;EACF;AACAL,SAAOO,KAAKL,MAAMI,QAAQ,2BAAuBE,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnG,QAAI;AACFd,YAAM+D,KAAKC,UAAUnD,QAAQG,MAAM,MAAM,CAAA,CAAA;AACzC,YAAMD,aAAqCF,QAAQG,KAAKoD;AAExD,UAAI,CAACrD,YAAY;AACf,mBAAOW,8CAAkBZ,UAAU,KAAK,mCAAA;MAC1C;AACA,YAAM+E,eAAe,MAAMzF,QAAQ2B,MAAM+D,iBAAiB;QACxD/E;QACAgF,UAAU;UACR9D,kBAAkB;QACpB;QACAK,qBAAqBjC,MAAMiC,wBAAwB;MACrD,CAAA;AAEAxB,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAK0B,YAAAA;IACvB,SAAStB,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA3BgBqB;AA6BT,SAASI,yBAAyB7F,QAAgBC,SAA2BC,MAA0B;AAC5G,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,wCAAwC;AACpD;EACF;AACAL,SAAO8F,OAAO5F,MAAMI,QAAQ,wBAAoBE,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AAClG,QAAI;AACF,YAAMa,KAAKd,QAAQ2E,OAAO7D;AAC1B,UAAI,CAACA,IAAI;AACP,mBAAOD,8CAAkBZ,UAAU,KAAK,gBAAA;MAC1C;AACA,YAAMwC,iBAAiBzC,QAAQ8D,MAAMrB;AACrC,UAAIA,mBAAmBhC,QAAW;AAChC,mBAAOI,8CAAkBZ,UAAU,KAAK,2CAAA;MAC1C;AACA,UAAI,CAAC8D,OAAOC,OAAOtB,8BAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,mBAAO5B,8CAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMmC,SAAS,MAAMrF,QAAQ2B,MAAM2D,iCAAiC;QAClEpC;QACAqC,UAAUhE;MACZ,CAAA;AACA,UAAI,CAAC8D,QAAQ;AACX,mBAAO/D,8CAAkBZ,UAAU,KAAK,MAAMa,EAAAA,YAAc;MAC9D;AACA,YAAMuE,UAAU,MAAM9F,QAAQ2B,MAAMoE,qBAAqB;QAAElB,QAAQ;UAAC;YAAEmB,MAAMX,OAAOW;UAAK;;MAAG,CAAA;AAC3F,UAAIF,YAAY,GAAG;AACjB,mBAAOxE,8CAAkBZ,UAAU,KAAK,kDAAkDa,EAAAA,EAAI;MAChG;AACAb,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAI;IACtB,SAASI,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AApCgByB;;;ADnMT,IAAMK,cAAN,MAAMA;EAdb,OAcaA;;;EACX,IAAIC,SAAyB;AAC3B,WAAO,KAAKC;EACd;EAEiBC;EACAC;EACAC;EACAH;EAEjBI,YAAYC,MAA8F;AACxG,UAAM,EAAEC,OAAOC,KAAI,IAAKF;AACxB,SAAKH,SAASI;AACd,QAAIC,MAAMC,cAAcC,YAAY;AAClCC,+BAAyBH,MAAM,iBAAA;AAC/BG,+BAAyBH,MAAM,eAAA;AAC/BG,+BAAyBH,MAAM,gBAAA;AAC/BG,+BAAyBH,MAAM,kBAAA;AAC/BG,+BAAyBH,MAAM,kBAAA;IACjC;AAEA,SAAKJ,QAAQI;AACb,SAAKN,WAAWI,KAAKM,eAAeC;AACpC,SAAKZ,UAAUY,eAAAA,QAAQC,OAAM;AAE7B,UAAMC,cAAUC,8BAAaT,KAAAA;AAE7B,UAAMU,WAAWT,MAAMU,qBAAqBC,kBAAkB;MAAC;MAAY;MAAc;;AACzFC,YAAQC,IAAI,kCAAkCC,KAAKC,UAAUN,QAAAA,CAAAA,EAAW;AAGxE,QAAIA,SAASO,SAAS,UAAA,GAAa;AACjCC,8BAAwB,KAAKzB,QAAQe,SAAS;QAC5C,GAAGP,MAAMC,cAAciB;QACvBR,qBAAqBV,MAAMU;MAC7B,CAAA;IACF;AACA,QAAID,SAASO,SAAS,YAAA,GAAe;AACnCG,4BAAsB,KAAK3B,QAAQe,SAASP,MAAMC,cAAcmB,aAAAA;AAChEC,6BAAuB,KAAK7B,QAAQe,SAASP,MAAMC,cAAcqB,cAAAA;AACjEC,+BAAyB,KAAK/B,QAAQe,SAASP,MAAMC,cAAcuB,gBAAAA;IACrE;AACA,QAAIf,SAASO,SAAS,WAAA,GAAc;AAClCS,+BAAyB,KAAKjC,QAAQe,SAAS;QAC7C,GAAGP,MAAMC,cAAcyB;QACvBC,qBAAqB3B,MAAMU,qBAAqBiB;MAClD,CAAA;IACF;AACA,SAAKjC,SAASkC,IAAI5B,MAAMC,cAAc4B,YAAY,IAAI,KAAKrC,MAAM;EACnE;EAEA,IAAIO,QAAkC;AACpC,WAAO,KAAKJ;EACd;EAEA,IAAIK,OAA+B;AACjC,WAAO,KAAKJ;EACd;EAEA,IAAIS,UAAmB;AACrB,WAAO,KAAKX;EACd;AACF;AAEA,SAASS,yBAAyBH,MAAkB8B,KAAW;AAC7D,MAAI9B,MAAMC,cAAcC,YAAY;AAElCF,SAAKC,aAAa6B,GAAAA,IAAO;;MAEvB,GAAG9B,KAAKC,aAAa6B,GAAAA;;MAErBC,UAAU;QAAE,GAAG/B,KAAKC,aAAaC;QAAY,GAAGF,KAAKC,aAAa6B,GAAAA,GAAMC;MAAS;IACnF;EACF;AACF;AAVS5B;","names":["import_ssi_sdk","import_ssi_sdk","debug","Debug","issueCredentialEndpoint","router","context","opts","enabled","console","log","path","post","checkAuth","endpoint","request","response","credential","body","reqOpts","options","inputFormat","proofFormat","toLocaleLowerCase","undefined","includes","issueCredentialOpts","isVcdm2Credential","sendErrorResponse","id","v4","contextHasPlugin","credentialStatusVC","agent","slAddStatusToCredential","credentialStatus","statusListCredential","issueOpts","vc","createVerifiableCredential","fetchRemoteContexts","rawDocument","CredentialMapper","storedCredentialToOriginalFormat","save","persistIssuedCredentials","issuer","extractIssuer","identifier","identifierManagedGet","vmRelationship","issuerCorrelationId","isDidIdentifier","isIIdentifier","did","dc","credentialRole","CredentialRole","HOLDER","kmsKeyRef","identifierMethod","method","issuerCorrelationType","CredentialCorrelationType","DID","JSON","stringify","crsAddCredential","statusCode","send","verifiableCredential","uniformCredential","toUniformCredential","e","message","getCredentialsEndpoint","get","query","Object","values","documentType","DocumentType","VC","filter","uniqueVCs","crsGetUniqueCredentials","map","uVC","uniformVerifiableCredential","getCredentialEndpoint","params","vcInfo","crsGetUniqueCredentialByIdOrHash","idOrHash","verifyCredentialEndpoint","verifyResult","verifyCredential","policies","deleteCredentialEndpoint","delete","success","crsDeleteCredentials","hash","VcApiServer","router","_router","_express","_agent","_opts","constructor","args","agent","opts","endpointOpts","globalAuth","copyGlobalAuthToEndpoint","expressSupport","express","Router","context","agentContext","features","issueCredentialOpts","enableFeatures","console","log","JSON","stringify","includes","issueCredentialEndpoint","issueCredential","getCredentialEndpoint","getCredential","getCredentialsEndpoint","getCredentials","deleteCredentialEndpoint","deleteCredential","verifyCredentialEndpoint","verifyCredential","fetchRemoteContexts","use","basePath","key","endpoint"]}
+{"version":3,"sources":["../src/index.ts","../src/vc-api-server.ts","../src/api-functions.ts"],"sourcesContent":["/**\n * @public\n */\nexport * from './vc-api-server'\nexport * from './types'\nexport * from './api-functions'\n","import { agentContext } from '@sphereon/ssi-sdk.core'\nimport type { ExpressSupport } from '@sphereon/ssi-express-support'\nimport type { TAgent } from '@veramo/core'\n\nimport express, { type Express, Router } from 'express'\nimport {\n  deleteCredentialEndpoint,\n  getCredentialEndpoint,\n  getCredentialsEndpoint,\n  issueCredentialEndpoint,\n  verifyCredentialEndpoint,\n} from './api-functions'\nimport type { IRequiredPlugins, IVCAPIOpts } from './types'\n\nexport class VcApiServer {\n  get router(): express.Router {\n    return this._router\n  }\n\n  private readonly _express: Express\n  private readonly _agent: TAgent<IRequiredPlugins>\n  private readonly _opts?: IVCAPIOpts\n  private readonly _router: Router\n\n  constructor(args: { agent: TAgent<IRequiredPlugins>; expressSupport: ExpressSupport; opts?: IVCAPIOpts }) {\n    const { agent, opts } = args\n    this._agent = agent\n    if (opts?.endpointOpts?.globalAuth) {\n      copyGlobalAuthToEndpoint(opts, 'issueCredential')\n      copyGlobalAuthToEndpoint(opts, 'getCredential')\n      copyGlobalAuthToEndpoint(opts, 'getCredentials')\n      copyGlobalAuthToEndpoint(opts, 'deleteCredential')\n      copyGlobalAuthToEndpoint(opts, 'verifyCredential')\n    }\n\n    this._opts = opts\n    this._express = args.expressSupport.express\n    this._router = express.Router()\n\n    const context = agentContext(agent)\n\n    const features = opts?.issueCredentialOpts?.enableFeatures ?? ['vc-issue', 'vc-persist', 'vc-verify']\n    console.log(`VC API enabled, with features: ${JSON.stringify(features)}`)\n\n    // Credential endpoints\n    if (features.includes('vc-issue')) {\n      issueCredentialEndpoint(this.router, context, {\n        ...opts?.endpointOpts?.issueCredential,\n        issueCredentialOpts: opts?.issueCredentialOpts,\n      })\n    }\n    if (features.includes('vc-persist')) {\n      getCredentialEndpoint(this.router, context, opts?.endpointOpts?.getCredential)\n      getCredentialsEndpoint(this.router, context, opts?.endpointOpts?.getCredentials)\n      deleteCredentialEndpoint(this.router, context, opts?.endpointOpts?.deleteCredential) // not in spec.\n    }\n    if (features.includes('vc-verify')) {\n      verifyCredentialEndpoint(this.router, context, {\n        ...opts?.endpointOpts?.verifyCredential,\n        fetchRemoteContexts: opts?.issueCredentialOpts?.fetchRemoteContexts,\n      })\n    }\n    this._express.use(opts?.endpointOpts?.basePath ?? '', this.router)\n  }\n\n  get agent(): TAgent<IRequiredPlugins> {\n    return this._agent\n  }\n\n  get opts(): IVCAPIOpts | undefined {\n    return this._opts\n  }\n\n  get express(): Express {\n    return this._express\n  }\n}\n\nfunction copyGlobalAuthToEndpoint(opts: IVCAPIOpts, key: string) {\n  if (opts?.endpointOpts?.globalAuth) {\n    // @ts-ignore\n    opts.endpointOpts[key] = {\n      // @ts-ignore\n      ...opts.endpointOpts[key],\n      // @ts-ignore\n      endpoint: { ...opts.endpointOpts.globalAuth, ...opts.endpointOpts[key]?.endpoint },\n    }\n  }\n}\n","import { checkAuth, type ISingleEndpointOpts, sendErrorResponse } from '@sphereon/ssi-express-support'\nimport { isDidIdentifier, isIIdentifier } from '@sphereon/ssi-sdk-ext.identifier-resolution'\nimport { contextHasPlugin } from '@sphereon/ssi-sdk.agent-config'\nimport {\n  AddCredentialArgs,\n  CredentialCorrelationType,\n  DocumentType,\n  type FindDigitalCredentialArgs\n} from '@sphereon/ssi-sdk.credential-store'\nimport { extractIssuer } from '@sphereon/ssi-sdk.credential-vcdm'\nimport { CredentialRole } from '@sphereon/ssi-sdk.data-store'\nimport type { IStatusListPlugin } from '@sphereon/ssi-sdk.vc-status-list'\nimport {\n  CredentialMapper,\n  CredentialProofFormat,\n  isVcdm2Credential,\n  OriginalVerifiableCredential\n} from '@sphereon/ssi-types'\nimport type { CredentialPayload, ProofFormat } from '@veramo/core'\nimport Debug from 'debug'\nimport { type Request, type Response, Router } from 'express'\nimport { v4 } from 'uuid'\nimport type {\n  IIssueCredentialEndpointOpts,\n  IRequiredContext,\n  IVCAPIIssueOpts,\n  IVerifyCredentialEndpointOpts\n} from './types'\n\nconst debug = Debug('sphereon:ssi-sdk:w3c-vc-api')\n\nexport function issueCredentialEndpoint(router: Router, context: IRequiredContext, opts?: IIssueCredentialEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Issue credential endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials/issue'\n\n  router.post(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const credential: CredentialPayload = request.body.credential\n      const reqOpts = request.body.options ?? {}\n      const inputFormat = reqOpts.proofFormat?.toLocaleLowerCase()\n      let proofFormat: CredentialProofFormat | undefined = undefined\n      if (inputFormat) {\n        if (inputFormat === 'jwt') {\n          proofFormat = 'jwt'\n        } else if (inputFormat?.includes('jose') || inputFormat?.includes('vc+jwt')) {\n          proofFormat = 'vc+jwt'\n        } else if (inputFormat?.includes('ld')) {\n          proofFormat = 'lds'\n        }\n      }\n      if (proofFormat === undefined && opts?.issueCredentialOpts?.proofFormat) {\n        proofFormat = opts.issueCredentialOpts.proofFormat.toLocaleLowerCase() as CredentialProofFormat\n      }\n      if (proofFormat === undefined) {\n        if (isVcdm2Credential(credential)) {\n          proofFormat = 'vc+jwt'\n        } else {\n          proofFormat = 'lds'\n        }\n      }\n\n      if (!credential) {\n        return sendErrorResponse(response, 400, 'No credential supplied')\n      }\n      if (!credential.id) {\n        credential.id = `urn:uuid:${v4()}`\n      }\n      if (contextHasPlugin<IStatusListPlugin>(context, 'slAddStatusToCredential')) {\n        // Add status list if enabled (and when the input has a credentialStatus object (can be empty))\n        const credentialStatusVC = await context.agent.slAddStatusToCredential({ credential })\n        if (credential.credentialStatus && !credential.credentialStatus.statusListCredential) {\n          credential.credentialStatus = credentialStatusVC.credentialStatus\n        }\n      }\n\n      const issueOpts: IVCAPIIssueOpts | undefined = opts?.issueCredentialOpts\n      const vc = await context.agent.createVerifiableCredential({\n        credential,\n        proofFormat: proofFormat as ProofFormat,\n        fetchRemoteContexts: issueOpts?.fetchRemoteContexts !== false,\n      })\n      const rawDocument = CredentialMapper.storedCredentialToOriginalFormat(vc as OriginalVerifiableCredential)\n      const save = opts?.persistIssuedCredentials\n      if (save) {\n        const issuer = extractIssuer(credential)\n        const identifier = await context.agent.identifierManagedGet({ identifier: issuer, issuer: issuer, vmRelationship: 'assertionMethod' })\n\n        let issuerCorrelationId: string | undefined = identifier.issuer\n        if (!issuerCorrelationId && isDidIdentifier(identifier.identifier)) {\n          if (isIIdentifier(identifier.identifier)) {\n            issuerCorrelationId = identifier.identifier.did\n          } else if (typeof identifier.identifier === 'string') {\n            issuerCorrelationId = identifier.identifier\n          }\n        }\n        if (!issuerCorrelationId) {\n          if (typeof vc.issuer === 'string') {\n            issuerCorrelationId = vc.issuer\n          } else if (typeof vc.issuer?.id === 'string') {\n            issuerCorrelationId = vc.issuer.id\n          } else {\n            issuerCorrelationId = 'unknown'\n          }\n        }\n\n        const dc: AddCredentialArgs = {\n          credential: {\n            credentialRole: CredentialRole.HOLDER,\n            // tenantId: 'test-tenant',\n            kmsKeyRef: identifier.kmsKeyRef,\n            identifierMethod: identifier.method,\n            issuerCorrelationId: issuerCorrelationId,\n            issuerCorrelationType: CredentialCorrelationType.DID,\n            rawDocument: typeof rawDocument === 'string' ? rawDocument : JSON.stringify(rawDocument),\n          },\n        }\n        await context.agent.crsAddCredential(dc)\n      }\n      response.statusCode = 201\n      return response.send({\n        verifiableCredential: rawDocument,\n        uniformCredential: CredentialMapper.toUniformCredential(vc as OriginalVerifiableCredential),\n      })\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function getCredentialsEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Get credentials endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials'\n  router.get(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const credentialRole = (request.query.credentialRole as CredentialRole) || CredentialRole.HOLDER\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const documentType = (request.query.documentType as DocumentType) || DocumentType.VC\n      if (!Object.values(DocumentType).includes(documentType)) {\n        return sendErrorResponse(response, 400, `Invalid documentType: ${documentType}`)\n      }\n\n      const filter: FindDigitalCredentialArgs = [\n        {\n          documentType: documentType,\n          credentialRole: credentialRole,\n        },\n      ]\n      const uniqueVCs = await context.agent.crsGetUniqueCredentials({ filter })\n      response.statusCode = 202\n      return response.send(uniqueVCs.map((uVC) => uVC.uniformVerifiableCredential))\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function getCredentialEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Get credential endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials/:id'\n  router.get(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const id = request.params.id\n      if (!id) {\n        return sendErrorResponse(response, 400, 'no id provided')\n      }\n      const credentialRole = (request.query.credentialRole as CredentialRole) || CredentialRole.HOLDER\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({\n        credentialRole: credentialRole,\n        idOrHash: id,\n      })\n      if (!vcInfo) {\n        return sendErrorResponse(response, 403, `id ${id} not found`)\n      }\n      response.statusCode = 200\n      return response.send(vcInfo.uniformVerifiableCredential)\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function verifyCredentialEndpoint(router: Router, context: IRequiredContext, opts?: IVerifyCredentialEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Verify credential endpoint is disabled`)\n    return\n  }\n  router.post(opts?.path ?? '/credentials/verify', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      debug(JSON.stringify(request.body, null, 2))\n      const credential: OriginalVerifiableCredential = request.body.verifiableCredential\n      const options = request.body.options\n      if (!credential) {\n        return sendErrorResponse(response, 400, 'No verifiable credential supplied')\n      }\n      const verifyResult = await context.agent.verifyCredential({\n        ...options,\n        credential,\n        policies: {\n          ...options?.policies,\n          credentialStatus: false, // Do not use built-in. We have our own statusList implementations\n        },\n        fetchRemoteContexts: opts?.fetchRemoteContexts !== false,\n      })\n\n      response.statusCode = 200\n      return response.send(verifyResult)\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function deleteCredentialEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Delete credential endpoint is disabled`)\n    return\n  }\n  router.delete(opts?.path ?? '/credentials/:id', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const id = request.params.id\n      if (!id) {\n        return sendErrorResponse(response, 400, 'no id provided')\n      }\n      const credentialRole = request.query.credentialRole as CredentialRole\n      if (credentialRole === undefined) {\n        return sendErrorResponse(response, 400, 'credentialRole query parameter is missing')\n      }\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({\n        credentialRole: credentialRole,\n        idOrHash: id,\n      })\n      if (!vcInfo) {\n        return sendErrorResponse(response, 404, `id ${id} not found`)\n      }\n      const success = await context.agent.crsDeleteCredentials({ filter: [{ hash: vcInfo.hash }] })\n      if (success === 0) {\n        return sendErrorResponse(response, 400, `Could not delete Verifiable Credential with id ${id}`)\n      }\n      response.statusCode = 200\n      return response.send()\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;ACAA,IAAAA,kBAA6B;AAI7B,qBAA8C;;;ACJ9C,iCAAuE;AACvE,yBAA+C;AAC/C,qBAAiC;AACjC,IAAAC,kBAKO;AACP,IAAAA,kBAA8B;AAC9B,IAAAA,kBAA+B;AAE/B,uBAKO;AAEP,mBAAkB;AAElB,kBAAmB;AAQnB,IAAMC,YAAQC,aAAAA,SAAM,6BAAA;AAEb,SAASC,wBAAwBC,QAAgBC,SAA2BC,MAAmC;AACpH,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,uCAAuC;AACnD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAE3BN,SAAOO,KAAKD,UAAME,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACpE,QAAI;AACF,YAAMC,aAAgCF,QAAQG,KAAKD;AACnD,YAAME,UAAUJ,QAAQG,KAAKE,WAAW,CAAC;AACzC,YAAMC,cAAcF,QAAQG,aAAaC,kBAAAA;AACzC,UAAID,cAAiDE;AACrD,UAAIH,aAAa;AACf,YAAIA,gBAAgB,OAAO;AACzBC,wBAAc;QAChB,WAAWD,aAAaI,SAAS,MAAA,KAAWJ,aAAaI,SAAS,QAAA,GAAW;AAC3EH,wBAAc;QAChB,WAAWD,aAAaI,SAAS,IAAA,GAAO;AACtCH,wBAAc;QAChB;MACF;AACA,UAAIA,gBAAgBE,UAAajB,MAAMmB,qBAAqBJ,aAAa;AACvEA,sBAAcf,KAAKmB,oBAAoBJ,YAAYC,kBAAiB;MACtE;AACA,UAAID,gBAAgBE,QAAW;AAC7B,gBAAIG,oCAAkBV,UAAAA,GAAa;AACjCK,wBAAc;QAChB,OAAO;AACLA,wBAAc;QAChB;MACF;AAEA,UAAI,CAACL,YAAY;AACf,mBAAOW,8CAAkBZ,UAAU,KAAK,wBAAA;MAC1C;AACA,UAAI,CAACC,WAAWY,IAAI;AAClBZ,mBAAWY,KAAK,gBAAYC,gBAAAA,CAAAA;MAC9B;AACA,cAAIC,iCAAoCzB,SAAS,yBAAA,GAA4B;AAE3E,cAAM0B,qBAAqB,MAAM1B,QAAQ2B,MAAMC,wBAAwB;UAAEjB;QAAW,CAAA;AACpF,YAAIA,WAAWkB,oBAAoB,CAAClB,WAAWkB,iBAAiBC,sBAAsB;AACpFnB,qBAAWkB,mBAAmBH,mBAAmBG;QACnD;MACF;AAEA,YAAME,YAAyC9B,MAAMmB;AACrD,YAAMY,KAAK,MAAMhC,QAAQ2B,MAAMM,2BAA2B;QACxDtB;QACAK;QACAkB,qBAAqBH,WAAWG,wBAAwB;MAC1D,CAAA;AACA,YAAMC,cAAcC,kCAAiBC,iCAAiCL,EAAAA;AACtE,YAAMM,OAAOrC,MAAMsC;AACnB,UAAID,MAAM;AACR,cAAME,aAASC,+BAAc9B,UAAAA;AAC7B,cAAM+B,aAAa,MAAM1C,QAAQ2B,MAAMgB,qBAAqB;UAAED,YAAYF;UAAQA;UAAgBI,gBAAgB;QAAkB,CAAA;AAEpI,YAAIC,sBAA0CH,WAAWF;AACzD,YAAI,CAACK,2BAAuBC,oCAAgBJ,WAAWA,UAAU,GAAG;AAClE,kBAAIK,kCAAcL,WAAWA,UAAU,GAAG;AACxCG,kCAAsBH,WAAWA,WAAWM;UAC9C,WAAW,OAAON,WAAWA,eAAe,UAAU;AACpDG,kCAAsBH,WAAWA;UACnC;QACF;AACA,YAAI,CAACG,qBAAqB;AACxB,cAAI,OAAOb,GAAGQ,WAAW,UAAU;AACjCK,kCAAsBb,GAAGQ;UAC3B,WAAW,OAAOR,GAAGQ,QAAQjB,OAAO,UAAU;AAC5CsB,kCAAsBb,GAAGQ,OAAOjB;UAClC,OAAO;AACLsB,kCAAsB;UACxB;QACF;AAEA,cAAMI,KAAwB;UAC5BtC,YAAY;YACVuC,gBAAgBC,+BAAeC;;YAE/BC,WAAWX,WAAWW;YACtBC,kBAAkBZ,WAAWa;YAC7BV;YACAW,uBAAuBC,0CAA0BC;YACjDvB,aAAa,OAAOA,gBAAgB,WAAWA,cAAcwB,KAAKC,UAAUzB,WAAAA;UAC9E;QACF;AACA,cAAMnC,QAAQ2B,MAAMkC,iBAAiBZ,EAAAA;MACvC;AACAvC,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAK;QACnBC,sBAAsB7B;QACtB8B,mBAAmB7B,kCAAiB8B,oBAAoBlC,EAAAA;MAC1D,CAAA;IACF,SAASmC,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AAnGgBrE;AAqGT,SAASuE,uBAAuBtE,QAAgBC,SAA2BC,MAA0B;AAC1G,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,sCAAsC;AAClD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAC3BN,SAAOuE,IAAIjE,UAAME,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnE,QAAI;AACF,YAAMwC,iBAAkBzC,QAAQ8D,MAAMrB,kBAAqCC,+BAAeC;AAC1F,UAAI,CAACoB,OAAOC,OAAOtB,8BAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,mBAAO5B,8CAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMwB,eAAgBjE,QAAQ8D,MAAMG,gBAAiCC,6BAAaC;AAClF,UAAI,CAACJ,OAAOC,OAAOE,4BAAAA,EAAcxD,SAASuD,YAAAA,GAAe;AACvD,mBAAOpD,8CAAkBZ,UAAU,KAAK,yBAAyBgE,YAAAA,EAAc;MACjF;AAEA,YAAMG,SAAoC;QACxC;UACEH;UACAxB;QACF;;AAEF,YAAM4B,YAAY,MAAM9E,QAAQ2B,MAAMoD,wBAAwB;QAAEF;MAAO,CAAA;AACvEnE,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAKe,UAAUE,IAAI,CAACC,QAAQA,IAAIC,2BAA2B,CAAA;IAC7E,SAASf,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA/BgBE;AAiCT,SAASc,sBAAsBpF,QAAgBC,SAA2BC,MAA0B;AACzG,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,qCAAqC;AACjD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAC3BN,SAAOuE,IAAIjE,UAAME,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnE,QAAI;AACF,YAAMa,KAAKd,QAAQ2E,OAAO7D;AAC1B,UAAI,CAACA,IAAI;AACP,mBAAOD,8CAAkBZ,UAAU,KAAK,gBAAA;MAC1C;AACA,YAAMwC,iBAAkBzC,QAAQ8D,MAAMrB,kBAAqCC,+BAAeC;AAC1F,UAAI,CAACoB,OAAOC,OAAOtB,8BAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,mBAAO5B,8CAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMmC,SAAS,MAAMrF,QAAQ2B,MAAM2D,iCAAiC;QAClEpC;QACAqC,UAAUhE;MACZ,CAAA;AACA,UAAI,CAAC8D,QAAQ;AACX,mBAAO/D,8CAAkBZ,UAAU,KAAK,MAAMa,EAAAA,YAAc;MAC9D;AACAb,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAKsB,OAAOH,2BAA2B;IACzD,SAASf,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA9BgBgB;AAgCT,SAASK,yBAAyBzF,QAAgBC,SAA2BC,MAAoC;AACtH,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,wCAAwC;AACpD;EACF;AACAL,SAAOO,KAAKL,MAAMI,QAAQ,2BAAuBE,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnG,QAAI;AACFd,YAAM+D,KAAKC,UAAUnD,QAAQG,MAAM,MAAM,CAAA,CAAA;AACzC,YAAMD,aAA2CF,QAAQG,KAAKoD;AAC9D,YAAMlD,UAAUL,QAAQG,KAAKE;AAC7B,UAAI,CAACH,YAAY;AACf,mBAAOW,8CAAkBZ,UAAU,KAAK,mCAAA;MAC1C;AACA,YAAM+E,eAAe,MAAMzF,QAAQ2B,MAAM+D,iBAAiB;QACxD,GAAG5E;QACHH;QACAgF,UAAU;UACR,GAAG7E,SAAS6E;UACZ9D,kBAAkB;QACpB;QACAK,qBAAqBjC,MAAMiC,wBAAwB;MACrD,CAAA;AAEAxB,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAK0B,YAAAA;IACvB,SAAStB,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA7BgBqB;AA+BT,SAASI,yBAAyB7F,QAAgBC,SAA2BC,MAA0B;AAC5G,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,wCAAwC;AACpD;EACF;AACAL,SAAO8F,OAAO5F,MAAMI,QAAQ,wBAAoBE,sCAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AAClG,QAAI;AACF,YAAMa,KAAKd,QAAQ2E,OAAO7D;AAC1B,UAAI,CAACA,IAAI;AACP,mBAAOD,8CAAkBZ,UAAU,KAAK,gBAAA;MAC1C;AACA,YAAMwC,iBAAiBzC,QAAQ8D,MAAMrB;AACrC,UAAIA,mBAAmBhC,QAAW;AAChC,mBAAOI,8CAAkBZ,UAAU,KAAK,2CAAA;MAC1C;AACA,UAAI,CAAC8D,OAAOC,OAAOtB,8BAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,mBAAO5B,8CAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMmC,SAAS,MAAMrF,QAAQ2B,MAAM2D,iCAAiC;QAClEpC;QACAqC,UAAUhE;MACZ,CAAA;AACA,UAAI,CAAC8D,QAAQ;AACX,mBAAO/D,8CAAkBZ,UAAU,KAAK,MAAMa,EAAAA,YAAc;MAC9D;AACA,YAAMuE,UAAU,MAAM9F,QAAQ2B,MAAMoE,qBAAqB;QAAElB,QAAQ;UAAC;YAAEmB,MAAMX,OAAOW;UAAK;;MAAG,CAAA;AAC3F,UAAIF,YAAY,GAAG;AACjB,mBAAOxE,8CAAkBZ,UAAU,KAAK,kDAAkDa,EAAAA,EAAI;MAChG;AACAb,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAI;IACtB,SAASI,GAAG;AACV,iBAAO7C,8CAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AApCgByB;;;ADtNT,IAAMK,cAAN,MAAMA;EAdb,OAcaA;;;EACX,IAAIC,SAAyB;AAC3B,WAAO,KAAKC;EACd;EAEiBC;EACAC;EACAC;EACAH;EAEjBI,YAAYC,MAA8F;AACxG,UAAM,EAAEC,OAAOC,KAAI,IAAKF;AACxB,SAAKH,SAASI;AACd,QAAIC,MAAMC,cAAcC,YAAY;AAClCC,+BAAyBH,MAAM,iBAAA;AAC/BG,+BAAyBH,MAAM,eAAA;AAC/BG,+BAAyBH,MAAM,gBAAA;AAC/BG,+BAAyBH,MAAM,kBAAA;AAC/BG,+BAAyBH,MAAM,kBAAA;IACjC;AAEA,SAAKJ,QAAQI;AACb,SAAKN,WAAWI,KAAKM,eAAeC;AACpC,SAAKZ,UAAUY,eAAAA,QAAQC,OAAM;AAE7B,UAAMC,cAAUC,8BAAaT,KAAAA;AAE7B,UAAMU,WAAWT,MAAMU,qBAAqBC,kBAAkB;MAAC;MAAY;MAAc;;AACzFC,YAAQC,IAAI,kCAAkCC,KAAKC,UAAUN,QAAAA,CAAAA,EAAW;AAGxE,QAAIA,SAASO,SAAS,UAAA,GAAa;AACjCC,8BAAwB,KAAKzB,QAAQe,SAAS;QAC5C,GAAGP,MAAMC,cAAciB;QACvBR,qBAAqBV,MAAMU;MAC7B,CAAA;IACF;AACA,QAAID,SAASO,SAAS,YAAA,GAAe;AACnCG,4BAAsB,KAAK3B,QAAQe,SAASP,MAAMC,cAAcmB,aAAAA;AAChEC,6BAAuB,KAAK7B,QAAQe,SAASP,MAAMC,cAAcqB,cAAAA;AACjEC,+BAAyB,KAAK/B,QAAQe,SAASP,MAAMC,cAAcuB,gBAAAA;IACrE;AACA,QAAIf,SAASO,SAAS,WAAA,GAAc;AAClCS,+BAAyB,KAAKjC,QAAQe,SAAS;QAC7C,GAAGP,MAAMC,cAAcyB;QACvBC,qBAAqB3B,MAAMU,qBAAqBiB;MAClD,CAAA;IACF;AACA,SAAKjC,SAASkC,IAAI5B,MAAMC,cAAc4B,YAAY,IAAI,KAAKrC,MAAM;EACnE;EAEA,IAAIO,QAAkC;AACpC,WAAO,KAAKJ;EACd;EAEA,IAAIK,OAA+B;AACjC,WAAO,KAAKJ;EACd;EAEA,IAAIS,UAAmB;AACrB,WAAO,KAAKX;EACd;AACF;AAEA,SAASS,yBAAyBH,MAAkB8B,KAAW;AAC7D,MAAI9B,MAAMC,cAAcC,YAAY;AAElCF,SAAKC,aAAa6B,GAAAA,IAAO;;MAEvB,GAAG9B,KAAKC,aAAa6B,GAAAA;;MAErBC,UAAU;QAAE,GAAG/B,KAAKC,aAAaC;QAAY,GAAGF,KAAKC,aAAa6B,GAAAA,GAAMC;MAAS;IACnF;EACF;AACF;AAVS5B;","names":["import_ssi_sdk","import_ssi_sdk","debug","Debug","issueCredentialEndpoint","router","context","opts","enabled","console","log","path","post","checkAuth","endpoint","request","response","credential","body","reqOpts","options","inputFormat","proofFormat","toLocaleLowerCase","undefined","includes","issueCredentialOpts","isVcdm2Credential","sendErrorResponse","id","v4","contextHasPlugin","credentialStatusVC","agent","slAddStatusToCredential","credentialStatus","statusListCredential","issueOpts","vc","createVerifiableCredential","fetchRemoteContexts","rawDocument","CredentialMapper","storedCredentialToOriginalFormat","save","persistIssuedCredentials","issuer","extractIssuer","identifier","identifierManagedGet","vmRelationship","issuerCorrelationId","isDidIdentifier","isIIdentifier","did","dc","credentialRole","CredentialRole","HOLDER","kmsKeyRef","identifierMethod","method","issuerCorrelationType","CredentialCorrelationType","DID","JSON","stringify","crsAddCredential","statusCode","send","verifiableCredential","uniformCredential","toUniformCredential","e","message","getCredentialsEndpoint","get","query","Object","values","documentType","DocumentType","VC","filter","uniqueVCs","crsGetUniqueCredentials","map","uVC","uniformVerifiableCredential","getCredentialEndpoint","params","vcInfo","crsGetUniqueCredentialByIdOrHash","idOrHash","verifyCredentialEndpoint","verifyResult","verifyCredential","policies","deleteCredentialEndpoint","delete","success","crsDeleteCredentials","hash","VcApiServer","router","_router","_express","_agent","_opts","constructor","args","agent","opts","endpointOpts","globalAuth","copyGlobalAuthToEndpoint","expressSupport","express","Router","context","agentContext","features","issueCredentialOpts","enableFeatures","console","log","JSON","stringify","includes","issueCredentialEndpoint","issueCredential","getCredentialEndpoint","getCredential","getCredentialsEndpoint","getCredentials","deleteCredentialEndpoint","deleteCredential","verifyCredentialEndpoint","verifyCredential","fetchRemoteContexts","use","basePath","key","endpoint"]}

package/dist/index.js

@@ -7,14 +7,14 @@ import express from "express";
 
 // src/api-functions.ts
 import { checkAuth, sendErrorResponse } from "@sphereon/ssi-express-support";
+import { isDidIdentifier, isIIdentifier } from "@sphereon/ssi-sdk-ext.identifier-resolution";
 import { contextHasPlugin } from "@sphereon/ssi-sdk.agent-config";
-import { v4 } from "uuid";
-import Debug from "debug";
 import { CredentialCorrelationType, DocumentType } from "@sphereon/ssi-sdk.credential-store";
+import { extractIssuer } from "@sphereon/ssi-sdk.credential-vcdm";
 import { CredentialRole } from "@sphereon/ssi-sdk.data-store";
 import { CredentialMapper, isVcdm2Credential } from "@sphereon/ssi-types";
-import { extractIssuer } from "@sphereon/ssi-sdk.credential-vcdm";
-import { isDidIdentifier, isIIdentifier } from "@sphereon/ssi-sdk-ext.identifier-resolution";
+import Debug from "debug";
+import { v4 } from "uuid";
 var debug = Debug("sphereon:ssi-sdk:w3c-vc-api");
 function issueCredentialEndpoint(router, context, opts) {
   if (opts?.enabled === false) {
@@ -190,12 +190,15 @@ function verifyCredentialEndpoint(router, context, opts) {
     try {
       debug(JSON.stringify(request.body, null, 2));
       const credential = request.body.verifiableCredential;
+      const options = request.body.options;
       if (!credential) {
         return sendErrorResponse(response, 400, "No verifiable credential supplied");
       }
       const verifyResult = await context.agent.verifyCredential({
+        ...options,
         credential,
         policies: {
+          ...options?.policies,
           credentialStatus: false
         },
         fetchRemoteContexts: opts?.fetchRemoteContexts !== false

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/vc-api-server.ts","../src/api-functions.ts"],"sourcesContent":["import { agentContext } from '@sphereon/ssi-sdk.core'\nimport type { ExpressSupport } from '@sphereon/ssi-express-support'\nimport type { TAgent } from '@veramo/core'\n\nimport express, { type Express, Router } from 'express'\nimport {\n  deleteCredentialEndpoint,\n  getCredentialEndpoint,\n  getCredentialsEndpoint,\n  issueCredentialEndpoint,\n  verifyCredentialEndpoint,\n} from './api-functions'\nimport type { IRequiredPlugins, IVCAPIOpts } from './types'\n\nexport class VcApiServer {\n  get router(): express.Router {\n    return this._router\n  }\n\n  private readonly _express: Express\n  private readonly _agent: TAgent<IRequiredPlugins>\n  private readonly _opts?: IVCAPIOpts\n  private readonly _router: Router\n\n  constructor(args: { agent: TAgent<IRequiredPlugins>; expressSupport: ExpressSupport; opts?: IVCAPIOpts }) {\n    const { agent, opts } = args\n    this._agent = agent\n    if (opts?.endpointOpts?.globalAuth) {\n      copyGlobalAuthToEndpoint(opts, 'issueCredential')\n      copyGlobalAuthToEndpoint(opts, 'getCredential')\n      copyGlobalAuthToEndpoint(opts, 'getCredentials')\n      copyGlobalAuthToEndpoint(opts, 'deleteCredential')\n      copyGlobalAuthToEndpoint(opts, 'verifyCredential')\n    }\n\n    this._opts = opts\n    this._express = args.expressSupport.express\n    this._router = express.Router()\n\n    const context = agentContext(agent)\n\n    const features = opts?.issueCredentialOpts?.enableFeatures ?? ['vc-issue', 'vc-persist', 'vc-verify']\n    console.log(`VC API enabled, with features: ${JSON.stringify(features)}`)\n\n    // Credential endpoints\n    if (features.includes('vc-issue')) {\n      issueCredentialEndpoint(this.router, context, {\n        ...opts?.endpointOpts?.issueCredential,\n        issueCredentialOpts: opts?.issueCredentialOpts,\n      })\n    }\n    if (features.includes('vc-persist')) {\n      getCredentialEndpoint(this.router, context, opts?.endpointOpts?.getCredential)\n      getCredentialsEndpoint(this.router, context, opts?.endpointOpts?.getCredentials)\n      deleteCredentialEndpoint(this.router, context, opts?.endpointOpts?.deleteCredential) // not in spec.\n    }\n    if (features.includes('vc-verify')) {\n      verifyCredentialEndpoint(this.router, context, {\n        ...opts?.endpointOpts?.verifyCredential,\n        fetchRemoteContexts: opts?.issueCredentialOpts?.fetchRemoteContexts,\n      })\n    }\n    this._express.use(opts?.endpointOpts?.basePath ?? '', this.router)\n  }\n\n  get agent(): TAgent<IRequiredPlugins> {\n    return this._agent\n  }\n\n  get opts(): IVCAPIOpts | undefined {\n    return this._opts\n  }\n\n  get express(): Express {\n    return this._express\n  }\n}\n\nfunction copyGlobalAuthToEndpoint(opts: IVCAPIOpts, key: string) {\n  if (opts?.endpointOpts?.globalAuth) {\n    // @ts-ignore\n    opts.endpointOpts[key] = {\n      // @ts-ignore\n      ...opts.endpointOpts[key],\n      // @ts-ignore\n      endpoint: { ...opts.endpointOpts.globalAuth, ...opts.endpointOpts[key]?.endpoint },\n    }\n  }\n}\n","import { checkAuth, type ISingleEndpointOpts, sendErrorResponse } from '@sphereon/ssi-express-support'\nimport { contextHasPlugin } from '@sphereon/ssi-sdk.agent-config'\nimport type { CredentialPayload, ProofFormat } from '@veramo/core'\nimport { type Request, type Response, Router } from 'express'\nimport { v4 } from 'uuid'\nimport type { IIssueCredentialEndpointOpts, IRequiredContext, IVCAPIIssueOpts, IVerifyCredentialEndpointOpts } from './types'\nimport Debug from 'debug'\nimport { AddCredentialArgs, CredentialCorrelationType, DocumentType, type FindDigitalCredentialArgs } from '@sphereon/ssi-sdk.credential-store'\nimport type { IStatusListPlugin } from '@sphereon/ssi-sdk.vc-status-list'\nimport { CredentialRole } from '@sphereon/ssi-sdk.data-store'\nimport { CredentialMapper, CredentialProofFormat, isVcdm2Credential, OriginalVerifiableCredential } from '@sphereon/ssi-types'\nimport { extractIssuer } from '@sphereon/ssi-sdk.credential-vcdm'\nimport { isDidIdentifier, isIIdentifier } from '@sphereon/ssi-sdk-ext.identifier-resolution'\nimport type { VerifiableCredentialSP } from '@sphereon/ssi-sdk.core'\n\nconst debug = Debug('sphereon:ssi-sdk:w3c-vc-api')\n\nexport function issueCredentialEndpoint(router: Router, context: IRequiredContext, opts?: IIssueCredentialEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Issue credential endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials/issue'\n\n  router.post(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const credential: CredentialPayload = request.body.credential\n      const reqOpts = request.body.options ?? {}\n      const inputFormat = reqOpts.proofFormat?.toLocaleLowerCase()\n      let proofFormat: CredentialProofFormat | undefined = undefined\n      if (inputFormat) {\n        if (inputFormat === 'jwt') {\n          proofFormat = 'jwt'\n        } else if (inputFormat?.includes('jose') || inputFormat?.includes('vc+jwt')) {\n          proofFormat = 'vc+jwt'\n        } else if (inputFormat?.includes('ld')) {\n          proofFormat = 'lds'\n        }\n      }\n      if (proofFormat === undefined && opts?.issueCredentialOpts?.proofFormat) {\n        proofFormat = opts.issueCredentialOpts.proofFormat.toLocaleLowerCase() as CredentialProofFormat\n      }\n      if (proofFormat === undefined) {\n        if (isVcdm2Credential(credential)) {\n          proofFormat = 'vc+jwt'\n        } else {\n          proofFormat = 'lds'\n        }\n      }\n\n      if (!credential) {\n        return sendErrorResponse(response, 400, 'No credential supplied')\n      }\n      if (!credential.id) {\n        credential.id = `urn:uuid:${v4()}`\n      }\n      if (contextHasPlugin<IStatusListPlugin>(context, 'slAddStatusToCredential')) {\n        // Add status list if enabled (and when the input has a credentialStatus object (can be empty))\n        const credentialStatusVC = await context.agent.slAddStatusToCredential({ credential })\n        if (credential.credentialStatus && !credential.credentialStatus.statusListCredential) {\n          credential.credentialStatus = credentialStatusVC.credentialStatus\n        }\n      }\n\n      const issueOpts: IVCAPIIssueOpts | undefined = opts?.issueCredentialOpts\n      const vc = await context.agent.createVerifiableCredential({\n        credential,\n        proofFormat: proofFormat as ProofFormat,\n        fetchRemoteContexts: issueOpts?.fetchRemoteContexts !== false,\n      })\n      const rawDocument = CredentialMapper.storedCredentialToOriginalFormat(vc as OriginalVerifiableCredential)\n      const save = opts?.persistIssuedCredentials\n      if (save) {\n        const issuer = extractIssuer(credential)\n        const identifier = await context.agent.identifierManagedGet({ identifier: issuer, issuer: issuer, vmRelationship: 'assertionMethod' })\n\n        let issuerCorrelationId: string | undefined = identifier.issuer\n        if (!issuerCorrelationId && isDidIdentifier(identifier.identifier)) {\n          if (isIIdentifier(identifier.identifier)) {\n            issuerCorrelationId = identifier.identifier.did\n          } else if (typeof identifier.identifier === 'string') {\n            issuerCorrelationId = identifier.identifier\n          }\n        }\n        if (!issuerCorrelationId) {\n          if (typeof vc.issuer === 'string') {\n            issuerCorrelationId = vc.issuer\n          } else if (typeof vc.issuer?.id === 'string') {\n            issuerCorrelationId = vc.issuer.id\n          } else {\n            issuerCorrelationId = 'unknown'\n          }\n        }\n\n        const dc: AddCredentialArgs = {\n          credential: {\n            credentialRole: CredentialRole.HOLDER,\n            // tenantId: 'test-tenant',\n            kmsKeyRef: identifier.kmsKeyRef,\n            identifierMethod: identifier.method,\n            issuerCorrelationId: issuerCorrelationId,\n            issuerCorrelationType: CredentialCorrelationType.DID,\n            rawDocument: typeof rawDocument === 'string' ? rawDocument : JSON.stringify(rawDocument),\n          },\n        }\n        await context.agent.crsAddCredential(dc)\n      }\n      response.statusCode = 201\n      return response.send({ verifiableCredential: rawDocument, uniformCredential: CredentialMapper.toUniformCredential(vc as OriginalVerifiableCredential) })\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function getCredentialsEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Get credentials endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials'\n  router.get(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const credentialRole = (request.query.credentialRole as CredentialRole) || CredentialRole.HOLDER\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const documentType = (request.query.documentType as DocumentType) || DocumentType.VC\n      if (!Object.values(DocumentType).includes(documentType)) {\n        return sendErrorResponse(response, 400, `Invalid documentType: ${documentType}`)\n      }\n\n      const filter: FindDigitalCredentialArgs = [\n        {\n          documentType: documentType,\n          credentialRole: credentialRole,\n        },\n      ]\n      const uniqueVCs = await context.agent.crsGetUniqueCredentials({ filter })\n      response.statusCode = 202\n      return response.send(uniqueVCs.map((uVC) => uVC.uniformVerifiableCredential))\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function getCredentialEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Get credential endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials/:id'\n  router.get(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const id = request.params.id\n      if (!id) {\n        return sendErrorResponse(response, 400, 'no id provided')\n      }\n      const credentialRole = (request.query.credentialRole as CredentialRole) || CredentialRole.HOLDER\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({\n        credentialRole: credentialRole,\n        idOrHash: id,\n      })\n      if (!vcInfo) {\n        return sendErrorResponse(response, 403, `id ${id} not found`)\n      }\n      response.statusCode = 200\n      return response.send(vcInfo.uniformVerifiableCredential)\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function verifyCredentialEndpoint(router: Router, context: IRequiredContext, opts?: IVerifyCredentialEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Verify credential endpoint is disabled`)\n    return\n  }\n  router.post(opts?.path ?? '/credentials/verify', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      debug(JSON.stringify(request.body, null, 2))\n      const credential: VerifiableCredentialSP = request.body.verifiableCredential\n      // const options: IIssueOptionsPayload = request.body.options\n      if (!credential) {\n        return sendErrorResponse(response, 400, 'No verifiable credential supplied')\n      }\n      const verifyResult = await context.agent.verifyCredential({\n        credential,\n        policies: {\n          credentialStatus: false, // Do not use built-in. We have our own statusList implementations\n        },\n        fetchRemoteContexts: opts?.fetchRemoteContexts !== false,\n      })\n\n      response.statusCode = 200\n      return response.send(verifyResult)\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function deleteCredentialEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Delete credential endpoint is disabled`)\n    return\n  }\n  router.delete(opts?.path ?? '/credentials/:id', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const id = request.params.id\n      if (!id) {\n        return sendErrorResponse(response, 400, 'no id provided')\n      }\n      const credentialRole = request.query.credentialRole as CredentialRole\n      if (credentialRole === undefined) {\n        return sendErrorResponse(response, 400, 'credentialRole query parameter is missing')\n      }\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({\n        credentialRole: credentialRole,\n        idOrHash: id,\n      })\n      if (!vcInfo) {\n        return sendErrorResponse(response, 404, `id ${id} not found`)\n      }\n      const success = await context.agent.crsDeleteCredentials({ filter: [{ hash: vcInfo.hash }] })\n      if (success === 0) {\n        return sendErrorResponse(response, 400, `Could not delete Verifiable Credential with id ${id}`)\n      }\n      response.statusCode = 200\n      return response.send()\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n"],"mappings":";;;;AAAA,SAASA,oBAAoB;AAI7B,OAAOC,aAAuC;;;ACJ9C,SAASC,WAAqCC,yBAAyB;AACvE,SAASC,wBAAwB;AAGjC,SAASC,UAAU;AAEnB,OAAOC,WAAW;AAClB,SAA4BC,2BAA2BC,oBAAoD;AAE3G,SAASC,sBAAsB;AAC/B,SAASC,kBAAyCC,yBAAuD;AACzG,SAASC,qBAAqB;AAC9B,SAASC,iBAAiBC,qBAAqB;AAG/C,IAAMC,QAAQC,MAAM,6BAAA;AAEb,SAASC,wBAAwBC,QAAgBC,SAA2BC,MAAmC;AACpH,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,uCAAuC;AACnD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAE3BN,SAAOO,KAAKD,MAAME,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACpE,QAAI;AACF,YAAMC,aAAgCF,QAAQG,KAAKD;AACnD,YAAME,UAAUJ,QAAQG,KAAKE,WAAW,CAAC;AACzC,YAAMC,cAAcF,QAAQG,aAAaC,kBAAAA;AACzC,UAAID,cAAiDE;AACrD,UAAIH,aAAa;AACf,YAAIA,gBAAgB,OAAO;AACzBC,wBAAc;QAChB,WAAWD,aAAaI,SAAS,MAAA,KAAWJ,aAAaI,SAAS,QAAA,GAAW;AAC3EH,wBAAc;QAChB,WAAWD,aAAaI,SAAS,IAAA,GAAO;AACtCH,wBAAc;QAChB;MACF;AACA,UAAIA,gBAAgBE,UAAajB,MAAMmB,qBAAqBJ,aAAa;AACvEA,sBAAcf,KAAKmB,oBAAoBJ,YAAYC,kBAAiB;MACtE;AACA,UAAID,gBAAgBE,QAAW;AAC7B,YAAIG,kBAAkBV,UAAAA,GAAa;AACjCK,wBAAc;QAChB,OAAO;AACLA,wBAAc;QAChB;MACF;AAEA,UAAI,CAACL,YAAY;AACf,eAAOW,kBAAkBZ,UAAU,KAAK,wBAAA;MAC1C;AACA,UAAI,CAACC,WAAWY,IAAI;AAClBZ,mBAAWY,KAAK,YAAYC,GAAAA,CAAAA;MAC9B;AACA,UAAIC,iBAAoCzB,SAAS,yBAAA,GAA4B;AAE3E,cAAM0B,qBAAqB,MAAM1B,QAAQ2B,MAAMC,wBAAwB;UAAEjB;QAAW,CAAA;AACpF,YAAIA,WAAWkB,oBAAoB,CAAClB,WAAWkB,iBAAiBC,sBAAsB;AACpFnB,qBAAWkB,mBAAmBH,mBAAmBG;QACnD;MACF;AAEA,YAAME,YAAyC9B,MAAMmB;AACrD,YAAMY,KAAK,MAAMhC,QAAQ2B,MAAMM,2BAA2B;QACxDtB;QACAK;QACAkB,qBAAqBH,WAAWG,wBAAwB;MAC1D,CAAA;AACA,YAAMC,cAAcC,iBAAiBC,iCAAiCL,EAAAA;AACtE,YAAMM,OAAOrC,MAAMsC;AACnB,UAAID,MAAM;AACR,cAAME,SAASC,cAAc9B,UAAAA;AAC7B,cAAM+B,aAAa,MAAM1C,QAAQ2B,MAAMgB,qBAAqB;UAAED,YAAYF;UAAQA;UAAgBI,gBAAgB;QAAkB,CAAA;AAEpI,YAAIC,sBAA0CH,WAAWF;AACzD,YAAI,CAACK,uBAAuBC,gBAAgBJ,WAAWA,UAAU,GAAG;AAClE,cAAIK,cAAcL,WAAWA,UAAU,GAAG;AACxCG,kCAAsBH,WAAWA,WAAWM;UAC9C,WAAW,OAAON,WAAWA,eAAe,UAAU;AACpDG,kCAAsBH,WAAWA;UACnC;QACF;AACA,YAAI,CAACG,qBAAqB;AACxB,cAAI,OAAOb,GAAGQ,WAAW,UAAU;AACjCK,kCAAsBb,GAAGQ;UAC3B,WAAW,OAAOR,GAAGQ,QAAQjB,OAAO,UAAU;AAC5CsB,kCAAsBb,GAAGQ,OAAOjB;UAClC,OAAO;AACLsB,kCAAsB;UACxB;QACF;AAEA,cAAMI,KAAwB;UAC5BtC,YAAY;YACVuC,gBAAgBC,eAAeC;;YAE/BC,WAAWX,WAAWW;YACtBC,kBAAkBZ,WAAWa;YAC7BV;YACAW,uBAAuBC,0BAA0BC;YACjDvB,aAAa,OAAOA,gBAAgB,WAAWA,cAAcwB,KAAKC,UAAUzB,WAAAA;UAC9E;QACF;AACA,cAAMnC,QAAQ2B,MAAMkC,iBAAiBZ,EAAAA;MACvC;AACAvC,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAK;QAAEC,sBAAsB7B;QAAa8B,mBAAmB7B,iBAAiB8B,oBAAoBlC,EAAAA;MAAoC,CAAA;IACxJ,SAASmC,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AAhGgBrE;AAkGT,SAASuE,uBAAuBtE,QAAgBC,SAA2BC,MAA0B;AAC1G,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,sCAAsC;AAClD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAC3BN,SAAOuE,IAAIjE,MAAME,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnE,QAAI;AACF,YAAMwC,iBAAkBzC,QAAQ8D,MAAMrB,kBAAqCC,eAAeC;AAC1F,UAAI,CAACoB,OAAOC,OAAOtB,cAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,eAAO5B,kBAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMwB,eAAgBjE,QAAQ8D,MAAMG,gBAAiCC,aAAaC;AAClF,UAAI,CAACJ,OAAOC,OAAOE,YAAAA,EAAcxD,SAASuD,YAAAA,GAAe;AACvD,eAAOpD,kBAAkBZ,UAAU,KAAK,yBAAyBgE,YAAAA,EAAc;MACjF;AAEA,YAAMG,SAAoC;QACxC;UACEH;UACAxB;QACF;;AAEF,YAAM4B,YAAY,MAAM9E,QAAQ2B,MAAMoD,wBAAwB;QAAEF;MAAO,CAAA;AACvEnE,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAKe,UAAUE,IAAI,CAACC,QAAQA,IAAIC,2BAA2B,CAAA;IAC7E,SAASf,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA/BgBE;AAiCT,SAASc,sBAAsBpF,QAAgBC,SAA2BC,MAA0B;AACzG,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,qCAAqC;AACjD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAC3BN,SAAOuE,IAAIjE,MAAME,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnE,QAAI;AACF,YAAMa,KAAKd,QAAQ2E,OAAO7D;AAC1B,UAAI,CAACA,IAAI;AACP,eAAOD,kBAAkBZ,UAAU,KAAK,gBAAA;MAC1C;AACA,YAAMwC,iBAAkBzC,QAAQ8D,MAAMrB,kBAAqCC,eAAeC;AAC1F,UAAI,CAACoB,OAAOC,OAAOtB,cAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,eAAO5B,kBAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMmC,SAAS,MAAMrF,QAAQ2B,MAAM2D,iCAAiC;QAClEpC;QACAqC,UAAUhE;MACZ,CAAA;AACA,UAAI,CAAC8D,QAAQ;AACX,eAAO/D,kBAAkBZ,UAAU,KAAK,MAAMa,EAAAA,YAAc;MAC9D;AACAb,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAKsB,OAAOH,2BAA2B;IACzD,SAASf,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA9BgBgB;AAgCT,SAASK,yBAAyBzF,QAAgBC,SAA2BC,MAAoC;AACtH,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,wCAAwC;AACpD;EACF;AACAL,SAAOO,KAAKL,MAAMI,QAAQ,uBAAuBE,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnG,QAAI;AACFd,YAAM+D,KAAKC,UAAUnD,QAAQG,MAAM,MAAM,CAAA,CAAA;AACzC,YAAMD,aAAqCF,QAAQG,KAAKoD;AAExD,UAAI,CAACrD,YAAY;AACf,eAAOW,kBAAkBZ,UAAU,KAAK,mCAAA;MAC1C;AACA,YAAM+E,eAAe,MAAMzF,QAAQ2B,MAAM+D,iBAAiB;QACxD/E;QACAgF,UAAU;UACR9D,kBAAkB;QACpB;QACAK,qBAAqBjC,MAAMiC,wBAAwB;MACrD,CAAA;AAEAxB,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAK0B,YAAAA;IACvB,SAAStB,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA3BgBqB;AA6BT,SAASI,yBAAyB7F,QAAgBC,SAA2BC,MAA0B;AAC5G,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,wCAAwC;AACpD;EACF;AACAL,SAAO8F,OAAO5F,MAAMI,QAAQ,oBAAoBE,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AAClG,QAAI;AACF,YAAMa,KAAKd,QAAQ2E,OAAO7D;AAC1B,UAAI,CAACA,IAAI;AACP,eAAOD,kBAAkBZ,UAAU,KAAK,gBAAA;MAC1C;AACA,YAAMwC,iBAAiBzC,QAAQ8D,MAAMrB;AACrC,UAAIA,mBAAmBhC,QAAW;AAChC,eAAOI,kBAAkBZ,UAAU,KAAK,2CAAA;MAC1C;AACA,UAAI,CAAC8D,OAAOC,OAAOtB,cAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,eAAO5B,kBAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMmC,SAAS,MAAMrF,QAAQ2B,MAAM2D,iCAAiC;QAClEpC;QACAqC,UAAUhE;MACZ,CAAA;AACA,UAAI,CAAC8D,QAAQ;AACX,eAAO/D,kBAAkBZ,UAAU,KAAK,MAAMa,EAAAA,YAAc;MAC9D;AACA,YAAMuE,UAAU,MAAM9F,QAAQ2B,MAAMoE,qBAAqB;QAAElB,QAAQ;UAAC;YAAEmB,MAAMX,OAAOW;UAAK;;MAAG,CAAA;AAC3F,UAAIF,YAAY,GAAG;AACjB,eAAOxE,kBAAkBZ,UAAU,KAAK,kDAAkDa,EAAAA,EAAI;MAChG;AACAb,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAI;IACtB,SAASI,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AApCgByB;;;ADnMT,IAAMK,cAAN,MAAMA;EAdb,OAcaA;;;EACX,IAAIC,SAAyB;AAC3B,WAAO,KAAKC;EACd;EAEiBC;EACAC;EACAC;EACAH;EAEjBI,YAAYC,MAA8F;AACxG,UAAM,EAAEC,OAAOC,KAAI,IAAKF;AACxB,SAAKH,SAASI;AACd,QAAIC,MAAMC,cAAcC,YAAY;AAClCC,+BAAyBH,MAAM,iBAAA;AAC/BG,+BAAyBH,MAAM,eAAA;AAC/BG,+BAAyBH,MAAM,gBAAA;AAC/BG,+BAAyBH,MAAM,kBAAA;AAC/BG,+BAAyBH,MAAM,kBAAA;IACjC;AAEA,SAAKJ,QAAQI;AACb,SAAKN,WAAWI,KAAKM,eAAeC;AACpC,SAAKZ,UAAUY,QAAQC,OAAM;AAE7B,UAAMC,UAAUC,aAAaT,KAAAA;AAE7B,UAAMU,WAAWT,MAAMU,qBAAqBC,kBAAkB;MAAC;MAAY;MAAc;;AACzFC,YAAQC,IAAI,kCAAkCC,KAAKC,UAAUN,QAAAA,CAAAA,EAAW;AAGxE,QAAIA,SAASO,SAAS,UAAA,GAAa;AACjCC,8BAAwB,KAAKzB,QAAQe,SAAS;QAC5C,GAAGP,MAAMC,cAAciB;QACvBR,qBAAqBV,MAAMU;MAC7B,CAAA;IACF;AACA,QAAID,SAASO,SAAS,YAAA,GAAe;AACnCG,4BAAsB,KAAK3B,QAAQe,SAASP,MAAMC,cAAcmB,aAAAA;AAChEC,6BAAuB,KAAK7B,QAAQe,SAASP,MAAMC,cAAcqB,cAAAA;AACjEC,+BAAyB,KAAK/B,QAAQe,SAASP,MAAMC,cAAcuB,gBAAAA;IACrE;AACA,QAAIf,SAASO,SAAS,WAAA,GAAc;AAClCS,+BAAyB,KAAKjC,QAAQe,SAAS;QAC7C,GAAGP,MAAMC,cAAcyB;QACvBC,qBAAqB3B,MAAMU,qBAAqBiB;MAClD,CAAA;IACF;AACA,SAAKjC,SAASkC,IAAI5B,MAAMC,cAAc4B,YAAY,IAAI,KAAKrC,MAAM;EACnE;EAEA,IAAIO,QAAkC;AACpC,WAAO,KAAKJ;EACd;EAEA,IAAIK,OAA+B;AACjC,WAAO,KAAKJ;EACd;EAEA,IAAIS,UAAmB;AACrB,WAAO,KAAKX;EACd;AACF;AAEA,SAASS,yBAAyBH,MAAkB8B,KAAW;AAC7D,MAAI9B,MAAMC,cAAcC,YAAY;AAElCF,SAAKC,aAAa6B,GAAAA,IAAO;;MAEvB,GAAG9B,KAAKC,aAAa6B,GAAAA;;MAErBC,UAAU;QAAE,GAAG/B,KAAKC,aAAaC;QAAY,GAAGF,KAAKC,aAAa6B,GAAAA,GAAMC;MAAS;IACnF;EACF;AACF;AAVS5B;","names":["agentContext","express","checkAuth","sendErrorResponse","contextHasPlugin","v4","Debug","CredentialCorrelationType","DocumentType","CredentialRole","CredentialMapper","isVcdm2Credential","extractIssuer","isDidIdentifier","isIIdentifier","debug","Debug","issueCredentialEndpoint","router","context","opts","enabled","console","log","path","post","checkAuth","endpoint","request","response","credential","body","reqOpts","options","inputFormat","proofFormat","toLocaleLowerCase","undefined","includes","issueCredentialOpts","isVcdm2Credential","sendErrorResponse","id","v4","contextHasPlugin","credentialStatusVC","agent","slAddStatusToCredential","credentialStatus","statusListCredential","issueOpts","vc","createVerifiableCredential","fetchRemoteContexts","rawDocument","CredentialMapper","storedCredentialToOriginalFormat","save","persistIssuedCredentials","issuer","extractIssuer","identifier","identifierManagedGet","vmRelationship","issuerCorrelationId","isDidIdentifier","isIIdentifier","did","dc","credentialRole","CredentialRole","HOLDER","kmsKeyRef","identifierMethod","method","issuerCorrelationType","CredentialCorrelationType","DID","JSON","stringify","crsAddCredential","statusCode","send","verifiableCredential","uniformCredential","toUniformCredential","e","message","getCredentialsEndpoint","get","query","Object","values","documentType","DocumentType","VC","filter","uniqueVCs","crsGetUniqueCredentials","map","uVC","uniformVerifiableCredential","getCredentialEndpoint","params","vcInfo","crsGetUniqueCredentialByIdOrHash","idOrHash","verifyCredentialEndpoint","verifyResult","verifyCredential","policies","deleteCredentialEndpoint","delete","success","crsDeleteCredentials","hash","VcApiServer","router","_router","_express","_agent","_opts","constructor","args","agent","opts","endpointOpts","globalAuth","copyGlobalAuthToEndpoint","expressSupport","express","Router","context","agentContext","features","issueCredentialOpts","enableFeatures","console","log","JSON","stringify","includes","issueCredentialEndpoint","issueCredential","getCredentialEndpoint","getCredential","getCredentialsEndpoint","getCredentials","deleteCredentialEndpoint","deleteCredential","verifyCredentialEndpoint","verifyCredential","fetchRemoteContexts","use","basePath","key","endpoint"]}
+{"version":3,"sources":["../src/vc-api-server.ts","../src/api-functions.ts"],"sourcesContent":["import { agentContext } from '@sphereon/ssi-sdk.core'\nimport type { ExpressSupport } from '@sphereon/ssi-express-support'\nimport type { TAgent } from '@veramo/core'\n\nimport express, { type Express, Router } from 'express'\nimport {\n  deleteCredentialEndpoint,\n  getCredentialEndpoint,\n  getCredentialsEndpoint,\n  issueCredentialEndpoint,\n  verifyCredentialEndpoint,\n} from './api-functions'\nimport type { IRequiredPlugins, IVCAPIOpts } from './types'\n\nexport class VcApiServer {\n  get router(): express.Router {\n    return this._router\n  }\n\n  private readonly _express: Express\n  private readonly _agent: TAgent<IRequiredPlugins>\n  private readonly _opts?: IVCAPIOpts\n  private readonly _router: Router\n\n  constructor(args: { agent: TAgent<IRequiredPlugins>; expressSupport: ExpressSupport; opts?: IVCAPIOpts }) {\n    const { agent, opts } = args\n    this._agent = agent\n    if (opts?.endpointOpts?.globalAuth) {\n      copyGlobalAuthToEndpoint(opts, 'issueCredential')\n      copyGlobalAuthToEndpoint(opts, 'getCredential')\n      copyGlobalAuthToEndpoint(opts, 'getCredentials')\n      copyGlobalAuthToEndpoint(opts, 'deleteCredential')\n      copyGlobalAuthToEndpoint(opts, 'verifyCredential')\n    }\n\n    this._opts = opts\n    this._express = args.expressSupport.express\n    this._router = express.Router()\n\n    const context = agentContext(agent)\n\n    const features = opts?.issueCredentialOpts?.enableFeatures ?? ['vc-issue', 'vc-persist', 'vc-verify']\n    console.log(`VC API enabled, with features: ${JSON.stringify(features)}`)\n\n    // Credential endpoints\n    if (features.includes('vc-issue')) {\n      issueCredentialEndpoint(this.router, context, {\n        ...opts?.endpointOpts?.issueCredential,\n        issueCredentialOpts: opts?.issueCredentialOpts,\n      })\n    }\n    if (features.includes('vc-persist')) {\n      getCredentialEndpoint(this.router, context, opts?.endpointOpts?.getCredential)\n      getCredentialsEndpoint(this.router, context, opts?.endpointOpts?.getCredentials)\n      deleteCredentialEndpoint(this.router, context, opts?.endpointOpts?.deleteCredential) // not in spec.\n    }\n    if (features.includes('vc-verify')) {\n      verifyCredentialEndpoint(this.router, context, {\n        ...opts?.endpointOpts?.verifyCredential,\n        fetchRemoteContexts: opts?.issueCredentialOpts?.fetchRemoteContexts,\n      })\n    }\n    this._express.use(opts?.endpointOpts?.basePath ?? '', this.router)\n  }\n\n  get agent(): TAgent<IRequiredPlugins> {\n    return this._agent\n  }\n\n  get opts(): IVCAPIOpts | undefined {\n    return this._opts\n  }\n\n  get express(): Express {\n    return this._express\n  }\n}\n\nfunction copyGlobalAuthToEndpoint(opts: IVCAPIOpts, key: string) {\n  if (opts?.endpointOpts?.globalAuth) {\n    // @ts-ignore\n    opts.endpointOpts[key] = {\n      // @ts-ignore\n      ...opts.endpointOpts[key],\n      // @ts-ignore\n      endpoint: { ...opts.endpointOpts.globalAuth, ...opts.endpointOpts[key]?.endpoint },\n    }\n  }\n}\n","import { checkAuth, type ISingleEndpointOpts, sendErrorResponse } from '@sphereon/ssi-express-support'\nimport { isDidIdentifier, isIIdentifier } from '@sphereon/ssi-sdk-ext.identifier-resolution'\nimport { contextHasPlugin } from '@sphereon/ssi-sdk.agent-config'\nimport {\n  AddCredentialArgs,\n  CredentialCorrelationType,\n  DocumentType,\n  type FindDigitalCredentialArgs\n} from '@sphereon/ssi-sdk.credential-store'\nimport { extractIssuer } from '@sphereon/ssi-sdk.credential-vcdm'\nimport { CredentialRole } from '@sphereon/ssi-sdk.data-store'\nimport type { IStatusListPlugin } from '@sphereon/ssi-sdk.vc-status-list'\nimport {\n  CredentialMapper,\n  CredentialProofFormat,\n  isVcdm2Credential,\n  OriginalVerifiableCredential\n} from '@sphereon/ssi-types'\nimport type { CredentialPayload, ProofFormat } from '@veramo/core'\nimport Debug from 'debug'\nimport { type Request, type Response, Router } from 'express'\nimport { v4 } from 'uuid'\nimport type {\n  IIssueCredentialEndpointOpts,\n  IRequiredContext,\n  IVCAPIIssueOpts,\n  IVerifyCredentialEndpointOpts\n} from './types'\n\nconst debug = Debug('sphereon:ssi-sdk:w3c-vc-api')\n\nexport function issueCredentialEndpoint(router: Router, context: IRequiredContext, opts?: IIssueCredentialEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Issue credential endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials/issue'\n\n  router.post(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const credential: CredentialPayload = request.body.credential\n      const reqOpts = request.body.options ?? {}\n      const inputFormat = reqOpts.proofFormat?.toLocaleLowerCase()\n      let proofFormat: CredentialProofFormat | undefined = undefined\n      if (inputFormat) {\n        if (inputFormat === 'jwt') {\n          proofFormat = 'jwt'\n        } else if (inputFormat?.includes('jose') || inputFormat?.includes('vc+jwt')) {\n          proofFormat = 'vc+jwt'\n        } else if (inputFormat?.includes('ld')) {\n          proofFormat = 'lds'\n        }\n      }\n      if (proofFormat === undefined && opts?.issueCredentialOpts?.proofFormat) {\n        proofFormat = opts.issueCredentialOpts.proofFormat.toLocaleLowerCase() as CredentialProofFormat\n      }\n      if (proofFormat === undefined) {\n        if (isVcdm2Credential(credential)) {\n          proofFormat = 'vc+jwt'\n        } else {\n          proofFormat = 'lds'\n        }\n      }\n\n      if (!credential) {\n        return sendErrorResponse(response, 400, 'No credential supplied')\n      }\n      if (!credential.id) {\n        credential.id = `urn:uuid:${v4()}`\n      }\n      if (contextHasPlugin<IStatusListPlugin>(context, 'slAddStatusToCredential')) {\n        // Add status list if enabled (and when the input has a credentialStatus object (can be empty))\n        const credentialStatusVC = await context.agent.slAddStatusToCredential({ credential })\n        if (credential.credentialStatus && !credential.credentialStatus.statusListCredential) {\n          credential.credentialStatus = credentialStatusVC.credentialStatus\n        }\n      }\n\n      const issueOpts: IVCAPIIssueOpts | undefined = opts?.issueCredentialOpts\n      const vc = await context.agent.createVerifiableCredential({\n        credential,\n        proofFormat: proofFormat as ProofFormat,\n        fetchRemoteContexts: issueOpts?.fetchRemoteContexts !== false,\n      })\n      const rawDocument = CredentialMapper.storedCredentialToOriginalFormat(vc as OriginalVerifiableCredential)\n      const save = opts?.persistIssuedCredentials\n      if (save) {\n        const issuer = extractIssuer(credential)\n        const identifier = await context.agent.identifierManagedGet({ identifier: issuer, issuer: issuer, vmRelationship: 'assertionMethod' })\n\n        let issuerCorrelationId: string | undefined = identifier.issuer\n        if (!issuerCorrelationId && isDidIdentifier(identifier.identifier)) {\n          if (isIIdentifier(identifier.identifier)) {\n            issuerCorrelationId = identifier.identifier.did\n          } else if (typeof identifier.identifier === 'string') {\n            issuerCorrelationId = identifier.identifier\n          }\n        }\n        if (!issuerCorrelationId) {\n          if (typeof vc.issuer === 'string') {\n            issuerCorrelationId = vc.issuer\n          } else if (typeof vc.issuer?.id === 'string') {\n            issuerCorrelationId = vc.issuer.id\n          } else {\n            issuerCorrelationId = 'unknown'\n          }\n        }\n\n        const dc: AddCredentialArgs = {\n          credential: {\n            credentialRole: CredentialRole.HOLDER,\n            // tenantId: 'test-tenant',\n            kmsKeyRef: identifier.kmsKeyRef,\n            identifierMethod: identifier.method,\n            issuerCorrelationId: issuerCorrelationId,\n            issuerCorrelationType: CredentialCorrelationType.DID,\n            rawDocument: typeof rawDocument === 'string' ? rawDocument : JSON.stringify(rawDocument),\n          },\n        }\n        await context.agent.crsAddCredential(dc)\n      }\n      response.statusCode = 201\n      return response.send({\n        verifiableCredential: rawDocument,\n        uniformCredential: CredentialMapper.toUniformCredential(vc as OriginalVerifiableCredential),\n      })\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function getCredentialsEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Get credentials endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials'\n  router.get(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const credentialRole = (request.query.credentialRole as CredentialRole) || CredentialRole.HOLDER\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const documentType = (request.query.documentType as DocumentType) || DocumentType.VC\n      if (!Object.values(DocumentType).includes(documentType)) {\n        return sendErrorResponse(response, 400, `Invalid documentType: ${documentType}`)\n      }\n\n      const filter: FindDigitalCredentialArgs = [\n        {\n          documentType: documentType,\n          credentialRole: credentialRole,\n        },\n      ]\n      const uniqueVCs = await context.agent.crsGetUniqueCredentials({ filter })\n      response.statusCode = 202\n      return response.send(uniqueVCs.map((uVC) => uVC.uniformVerifiableCredential))\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function getCredentialEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Get credential endpoint is disabled`)\n    return\n  }\n  const path = opts?.path ?? '/credentials/:id'\n  router.get(path, checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const id = request.params.id\n      if (!id) {\n        return sendErrorResponse(response, 400, 'no id provided')\n      }\n      const credentialRole = (request.query.credentialRole as CredentialRole) || CredentialRole.HOLDER\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({\n        credentialRole: credentialRole,\n        idOrHash: id,\n      })\n      if (!vcInfo) {\n        return sendErrorResponse(response, 403, `id ${id} not found`)\n      }\n      response.statusCode = 200\n      return response.send(vcInfo.uniformVerifiableCredential)\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function verifyCredentialEndpoint(router: Router, context: IRequiredContext, opts?: IVerifyCredentialEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Verify credential endpoint is disabled`)\n    return\n  }\n  router.post(opts?.path ?? '/credentials/verify', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      debug(JSON.stringify(request.body, null, 2))\n      const credential: OriginalVerifiableCredential = request.body.verifiableCredential\n      const options = request.body.options\n      if (!credential) {\n        return sendErrorResponse(response, 400, 'No verifiable credential supplied')\n      }\n      const verifyResult = await context.agent.verifyCredential({\n        ...options,\n        credential,\n        policies: {\n          ...options?.policies,\n          credentialStatus: false, // Do not use built-in. We have our own statusList implementations\n        },\n        fetchRemoteContexts: opts?.fetchRemoteContexts !== false,\n      })\n\n      response.statusCode = 200\n      return response.send(verifyResult)\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n\nexport function deleteCredentialEndpoint(router: Router, context: IRequiredContext, opts?: ISingleEndpointOpts) {\n  if (opts?.enabled === false) {\n    console.log(`Delete credential endpoint is disabled`)\n    return\n  }\n  router.delete(opts?.path ?? '/credentials/:id', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {\n    try {\n      const id = request.params.id\n      if (!id) {\n        return sendErrorResponse(response, 400, 'no id provided')\n      }\n      const credentialRole = request.query.credentialRole as CredentialRole\n      if (credentialRole === undefined) {\n        return sendErrorResponse(response, 400, 'credentialRole query parameter is missing')\n      }\n      if (!Object.values(CredentialRole).includes(credentialRole)) {\n        return sendErrorResponse(response, 400, `Invalid credentialRole: ${credentialRole}`)\n      }\n\n      const vcInfo = await context.agent.crsGetUniqueCredentialByIdOrHash({\n        credentialRole: credentialRole,\n        idOrHash: id,\n      })\n      if (!vcInfo) {\n        return sendErrorResponse(response, 404, `id ${id} not found`)\n      }\n      const success = await context.agent.crsDeleteCredentials({ filter: [{ hash: vcInfo.hash }] })\n      if (success === 0) {\n        return sendErrorResponse(response, 400, `Could not delete Verifiable Credential with id ${id}`)\n      }\n      response.statusCode = 200\n      return response.send()\n    } catch (e) {\n      return sendErrorResponse(response, 500, e.message as string, e)\n    }\n  })\n}\n"],"mappings":";;;;AAAA,SAASA,oBAAoB;AAI7B,OAAOC,aAAuC;;;ACJ9C,SAASC,WAAqCC,yBAAyB;AACvE,SAASC,iBAAiBC,qBAAqB;AAC/C,SAASC,wBAAwB;AACjC,SAEEC,2BACAC,oBAEK;AACP,SAASC,qBAAqB;AAC9B,SAASC,sBAAsB;AAE/B,SACEC,kBAEAC,yBAEK;AAEP,OAAOC,WAAW;AAElB,SAASC,UAAU;AAQnB,IAAMC,QAAQC,MAAM,6BAAA;AAEb,SAASC,wBAAwBC,QAAgBC,SAA2BC,MAAmC;AACpH,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,uCAAuC;AACnD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAE3BN,SAAOO,KAAKD,MAAME,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACpE,QAAI;AACF,YAAMC,aAAgCF,QAAQG,KAAKD;AACnD,YAAME,UAAUJ,QAAQG,KAAKE,WAAW,CAAC;AACzC,YAAMC,cAAcF,QAAQG,aAAaC,kBAAAA;AACzC,UAAID,cAAiDE;AACrD,UAAIH,aAAa;AACf,YAAIA,gBAAgB,OAAO;AACzBC,wBAAc;QAChB,WAAWD,aAAaI,SAAS,MAAA,KAAWJ,aAAaI,SAAS,QAAA,GAAW;AAC3EH,wBAAc;QAChB,WAAWD,aAAaI,SAAS,IAAA,GAAO;AACtCH,wBAAc;QAChB;MACF;AACA,UAAIA,gBAAgBE,UAAajB,MAAMmB,qBAAqBJ,aAAa;AACvEA,sBAAcf,KAAKmB,oBAAoBJ,YAAYC,kBAAiB;MACtE;AACA,UAAID,gBAAgBE,QAAW;AAC7B,YAAIG,kBAAkBV,UAAAA,GAAa;AACjCK,wBAAc;QAChB,OAAO;AACLA,wBAAc;QAChB;MACF;AAEA,UAAI,CAACL,YAAY;AACf,eAAOW,kBAAkBZ,UAAU,KAAK,wBAAA;MAC1C;AACA,UAAI,CAACC,WAAWY,IAAI;AAClBZ,mBAAWY,KAAK,YAAYC,GAAAA,CAAAA;MAC9B;AACA,UAAIC,iBAAoCzB,SAAS,yBAAA,GAA4B;AAE3E,cAAM0B,qBAAqB,MAAM1B,QAAQ2B,MAAMC,wBAAwB;UAAEjB;QAAW,CAAA;AACpF,YAAIA,WAAWkB,oBAAoB,CAAClB,WAAWkB,iBAAiBC,sBAAsB;AACpFnB,qBAAWkB,mBAAmBH,mBAAmBG;QACnD;MACF;AAEA,YAAME,YAAyC9B,MAAMmB;AACrD,YAAMY,KAAK,MAAMhC,QAAQ2B,MAAMM,2BAA2B;QACxDtB;QACAK;QACAkB,qBAAqBH,WAAWG,wBAAwB;MAC1D,CAAA;AACA,YAAMC,cAAcC,iBAAiBC,iCAAiCL,EAAAA;AACtE,YAAMM,OAAOrC,MAAMsC;AACnB,UAAID,MAAM;AACR,cAAME,SAASC,cAAc9B,UAAAA;AAC7B,cAAM+B,aAAa,MAAM1C,QAAQ2B,MAAMgB,qBAAqB;UAAED,YAAYF;UAAQA;UAAgBI,gBAAgB;QAAkB,CAAA;AAEpI,YAAIC,sBAA0CH,WAAWF;AACzD,YAAI,CAACK,uBAAuBC,gBAAgBJ,WAAWA,UAAU,GAAG;AAClE,cAAIK,cAAcL,WAAWA,UAAU,GAAG;AACxCG,kCAAsBH,WAAWA,WAAWM;UAC9C,WAAW,OAAON,WAAWA,eAAe,UAAU;AACpDG,kCAAsBH,WAAWA;UACnC;QACF;AACA,YAAI,CAACG,qBAAqB;AACxB,cAAI,OAAOb,GAAGQ,WAAW,UAAU;AACjCK,kCAAsBb,GAAGQ;UAC3B,WAAW,OAAOR,GAAGQ,QAAQjB,OAAO,UAAU;AAC5CsB,kCAAsBb,GAAGQ,OAAOjB;UAClC,OAAO;AACLsB,kCAAsB;UACxB;QACF;AAEA,cAAMI,KAAwB;UAC5BtC,YAAY;YACVuC,gBAAgBC,eAAeC;;YAE/BC,WAAWX,WAAWW;YACtBC,kBAAkBZ,WAAWa;YAC7BV;YACAW,uBAAuBC,0BAA0BC;YACjDvB,aAAa,OAAOA,gBAAgB,WAAWA,cAAcwB,KAAKC,UAAUzB,WAAAA;UAC9E;QACF;AACA,cAAMnC,QAAQ2B,MAAMkC,iBAAiBZ,EAAAA;MACvC;AACAvC,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAK;QACnBC,sBAAsB7B;QACtB8B,mBAAmB7B,iBAAiB8B,oBAAoBlC,EAAAA;MAC1D,CAAA;IACF,SAASmC,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AAnGgBrE;AAqGT,SAASuE,uBAAuBtE,QAAgBC,SAA2BC,MAA0B;AAC1G,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,sCAAsC;AAClD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAC3BN,SAAOuE,IAAIjE,MAAME,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnE,QAAI;AACF,YAAMwC,iBAAkBzC,QAAQ8D,MAAMrB,kBAAqCC,eAAeC;AAC1F,UAAI,CAACoB,OAAOC,OAAOtB,cAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,eAAO5B,kBAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMwB,eAAgBjE,QAAQ8D,MAAMG,gBAAiCC,aAAaC;AAClF,UAAI,CAACJ,OAAOC,OAAOE,YAAAA,EAAcxD,SAASuD,YAAAA,GAAe;AACvD,eAAOpD,kBAAkBZ,UAAU,KAAK,yBAAyBgE,YAAAA,EAAc;MACjF;AAEA,YAAMG,SAAoC;QACxC;UACEH;UACAxB;QACF;;AAEF,YAAM4B,YAAY,MAAM9E,QAAQ2B,MAAMoD,wBAAwB;QAAEF;MAAO,CAAA;AACvEnE,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAKe,UAAUE,IAAI,CAACC,QAAQA,IAAIC,2BAA2B,CAAA;IAC7E,SAASf,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA/BgBE;AAiCT,SAASc,sBAAsBpF,QAAgBC,SAA2BC,MAA0B;AACzG,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,qCAAqC;AACjD;EACF;AACA,QAAMC,OAAOJ,MAAMI,QAAQ;AAC3BN,SAAOuE,IAAIjE,MAAME,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnE,QAAI;AACF,YAAMa,KAAKd,QAAQ2E,OAAO7D;AAC1B,UAAI,CAACA,IAAI;AACP,eAAOD,kBAAkBZ,UAAU,KAAK,gBAAA;MAC1C;AACA,YAAMwC,iBAAkBzC,QAAQ8D,MAAMrB,kBAAqCC,eAAeC;AAC1F,UAAI,CAACoB,OAAOC,OAAOtB,cAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,eAAO5B,kBAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMmC,SAAS,MAAMrF,QAAQ2B,MAAM2D,iCAAiC;QAClEpC;QACAqC,UAAUhE;MACZ,CAAA;AACA,UAAI,CAAC8D,QAAQ;AACX,eAAO/D,kBAAkBZ,UAAU,KAAK,MAAMa,EAAAA,YAAc;MAC9D;AACAb,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAKsB,OAAOH,2BAA2B;IACzD,SAASf,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA9BgBgB;AAgCT,SAASK,yBAAyBzF,QAAgBC,SAA2BC,MAAoC;AACtH,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,wCAAwC;AACpD;EACF;AACAL,SAAOO,KAAKL,MAAMI,QAAQ,uBAAuBE,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AACnG,QAAI;AACFd,YAAM+D,KAAKC,UAAUnD,QAAQG,MAAM,MAAM,CAAA,CAAA;AACzC,YAAMD,aAA2CF,QAAQG,KAAKoD;AAC9D,YAAMlD,UAAUL,QAAQG,KAAKE;AAC7B,UAAI,CAACH,YAAY;AACf,eAAOW,kBAAkBZ,UAAU,KAAK,mCAAA;MAC1C;AACA,YAAM+E,eAAe,MAAMzF,QAAQ2B,MAAM+D,iBAAiB;QACxD,GAAG5E;QACHH;QACAgF,UAAU;UACR,GAAG7E,SAAS6E;UACZ9D,kBAAkB;QACpB;QACAK,qBAAqBjC,MAAMiC,wBAAwB;MACrD,CAAA;AAEAxB,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAK0B,YAAAA;IACvB,SAAStB,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AA7BgBqB;AA+BT,SAASI,yBAAyB7F,QAAgBC,SAA2BC,MAA0B;AAC5G,MAAIA,MAAMC,YAAY,OAAO;AAC3BC,YAAQC,IAAI,wCAAwC;AACpD;EACF;AACAL,SAAO8F,OAAO5F,MAAMI,QAAQ,oBAAoBE,UAAUN,MAAMO,QAAAA,GAAW,OAAOC,SAAkBC,aAAAA;AAClG,QAAI;AACF,YAAMa,KAAKd,QAAQ2E,OAAO7D;AAC1B,UAAI,CAACA,IAAI;AACP,eAAOD,kBAAkBZ,UAAU,KAAK,gBAAA;MAC1C;AACA,YAAMwC,iBAAiBzC,QAAQ8D,MAAMrB;AACrC,UAAIA,mBAAmBhC,QAAW;AAChC,eAAOI,kBAAkBZ,UAAU,KAAK,2CAAA;MAC1C;AACA,UAAI,CAAC8D,OAAOC,OAAOtB,cAAAA,EAAgBhC,SAAS+B,cAAAA,GAAiB;AAC3D,eAAO5B,kBAAkBZ,UAAU,KAAK,2BAA2BwC,cAAAA,EAAgB;MACrF;AAEA,YAAMmC,SAAS,MAAMrF,QAAQ2B,MAAM2D,iCAAiC;QAClEpC;QACAqC,UAAUhE;MACZ,CAAA;AACA,UAAI,CAAC8D,QAAQ;AACX,eAAO/D,kBAAkBZ,UAAU,KAAK,MAAMa,EAAAA,YAAc;MAC9D;AACA,YAAMuE,UAAU,MAAM9F,QAAQ2B,MAAMoE,qBAAqB;QAAElB,QAAQ;UAAC;YAAEmB,MAAMX,OAAOW;UAAK;;MAAG,CAAA;AAC3F,UAAIF,YAAY,GAAG;AACjB,eAAOxE,kBAAkBZ,UAAU,KAAK,kDAAkDa,EAAAA,EAAI;MAChG;AACAb,eAASoD,aAAa;AACtB,aAAOpD,SAASqD,KAAI;IACtB,SAASI,GAAG;AACV,aAAO7C,kBAAkBZ,UAAU,KAAKyD,EAAEC,SAAmBD,CAAAA;IAC/D;EACF,CAAA;AACF;AApCgByB;;;ADtNT,IAAMK,cAAN,MAAMA;EAdb,OAcaA;;;EACX,IAAIC,SAAyB;AAC3B,WAAO,KAAKC;EACd;EAEiBC;EACAC;EACAC;EACAH;EAEjBI,YAAYC,MAA8F;AACxG,UAAM,EAAEC,OAAOC,KAAI,IAAKF;AACxB,SAAKH,SAASI;AACd,QAAIC,MAAMC,cAAcC,YAAY;AAClCC,+BAAyBH,MAAM,iBAAA;AAC/BG,+BAAyBH,MAAM,eAAA;AAC/BG,+BAAyBH,MAAM,gBAAA;AAC/BG,+BAAyBH,MAAM,kBAAA;AAC/BG,+BAAyBH,MAAM,kBAAA;IACjC;AAEA,SAAKJ,QAAQI;AACb,SAAKN,WAAWI,KAAKM,eAAeC;AACpC,SAAKZ,UAAUY,QAAQC,OAAM;AAE7B,UAAMC,UAAUC,aAAaT,KAAAA;AAE7B,UAAMU,WAAWT,MAAMU,qBAAqBC,kBAAkB;MAAC;MAAY;MAAc;;AACzFC,YAAQC,IAAI,kCAAkCC,KAAKC,UAAUN,QAAAA,CAAAA,EAAW;AAGxE,QAAIA,SAASO,SAAS,UAAA,GAAa;AACjCC,8BAAwB,KAAKzB,QAAQe,SAAS;QAC5C,GAAGP,MAAMC,cAAciB;QACvBR,qBAAqBV,MAAMU;MAC7B,CAAA;IACF;AACA,QAAID,SAASO,SAAS,YAAA,GAAe;AACnCG,4BAAsB,KAAK3B,QAAQe,SAASP,MAAMC,cAAcmB,aAAAA;AAChEC,6BAAuB,KAAK7B,QAAQe,SAASP,MAAMC,cAAcqB,cAAAA;AACjEC,+BAAyB,KAAK/B,QAAQe,SAASP,MAAMC,cAAcuB,gBAAAA;IACrE;AACA,QAAIf,SAASO,SAAS,WAAA,GAAc;AAClCS,+BAAyB,KAAKjC,QAAQe,SAAS;QAC7C,GAAGP,MAAMC,cAAcyB;QACvBC,qBAAqB3B,MAAMU,qBAAqBiB;MAClD,CAAA;IACF;AACA,SAAKjC,SAASkC,IAAI5B,MAAMC,cAAc4B,YAAY,IAAI,KAAKrC,MAAM;EACnE;EAEA,IAAIO,QAAkC;AACpC,WAAO,KAAKJ;EACd;EAEA,IAAIK,OAA+B;AACjC,WAAO,KAAKJ;EACd;EAEA,IAAIS,UAAmB;AACrB,WAAO,KAAKX;EACd;AACF;AAEA,SAASS,yBAAyBH,MAAkB8B,KAAW;AAC7D,MAAI9B,MAAMC,cAAcC,YAAY;AAElCF,SAAKC,aAAa6B,GAAAA,IAAO;;MAEvB,GAAG9B,KAAKC,aAAa6B,GAAAA;;MAErBC,UAAU;QAAE,GAAG/B,KAAKC,aAAaC;QAAY,GAAGF,KAAKC,aAAa6B,GAAAA,GAAMC;MAAS;IACnF;EACF;AACF;AAVS5B;","names":["agentContext","express","checkAuth","sendErrorResponse","isDidIdentifier","isIIdentifier","contextHasPlugin","CredentialCorrelationType","DocumentType","extractIssuer","CredentialRole","CredentialMapper","isVcdm2Credential","Debug","v4","debug","Debug","issueCredentialEndpoint","router","context","opts","enabled","console","log","path","post","checkAuth","endpoint","request","response","credential","body","reqOpts","options","inputFormat","proofFormat","toLocaleLowerCase","undefined","includes","issueCredentialOpts","isVcdm2Credential","sendErrorResponse","id","v4","contextHasPlugin","credentialStatusVC","agent","slAddStatusToCredential","credentialStatus","statusListCredential","issueOpts","vc","createVerifiableCredential","fetchRemoteContexts","rawDocument","CredentialMapper","storedCredentialToOriginalFormat","save","persistIssuedCredentials","issuer","extractIssuer","identifier","identifierManagedGet","vmRelationship","issuerCorrelationId","isDidIdentifier","isIIdentifier","did","dc","credentialRole","CredentialRole","HOLDER","kmsKeyRef","identifierMethod","method","issuerCorrelationType","CredentialCorrelationType","DID","JSON","stringify","crsAddCredential","statusCode","send","verifiableCredential","uniformCredential","toUniformCredential","e","message","getCredentialsEndpoint","get","query","Object","values","documentType","DocumentType","VC","filter","uniqueVCs","crsGetUniqueCredentials","map","uVC","uniformVerifiableCredential","getCredentialEndpoint","params","vcInfo","crsGetUniqueCredentialByIdOrHash","idOrHash","verifyCredentialEndpoint","verifyResult","verifyCredential","policies","deleteCredentialEndpoint","delete","success","crsDeleteCredentials","hash","VcApiServer","router","_router","_express","_agent","_opts","constructor","args","agent","opts","endpointOpts","globalAuth","copyGlobalAuthToEndpoint","expressSupport","express","Router","context","agentContext","features","issueCredentialOpts","enableFeatures","console","log","JSON","stringify","includes","issueCredentialEndpoint","issueCredential","getCredentialEndpoint","getCredential","getCredentialsEndpoint","getCredentials","deleteCredentialEndpoint","deleteCredential","verifyCredentialEndpoint","verifyCredential","fetchRemoteContexts","use","basePath","key","endpoint"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sphereon/ssi-sdk.w3c-vc-api",
-  "version": "0.33.1-next.68+b6c8b366",
+  "version": "0.34.0",
   "source": "src/index.ts",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -23,19 +23,19 @@
     "start:dev": "ts-node __tests__/agent.ts"
   },
   "dependencies": {
-    "@sphereon/did-auth-siop": "0.17.1-next.39",
-    "@sphereon/ssi-express-support": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk-ext.identifier-resolution": "0.28.1-next.53",
-    "@sphereon/ssi-sdk-ext.jwt-service": "0.28.1-next.53",
-    "@sphereon/ssi-sdk.agent-config": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.core": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.credential-store": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.credential-vcdm": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.kv-store-temp": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.presentation-exchange": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.vc-status-list": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.vc-status-list-issuer": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-types": "0.33.1-next.68+b6c8b366",
+    "@sphereon/did-auth-siop": "0.19.0",
+    "@sphereon/ssi-express-support": "0.34.0",
+    "@sphereon/ssi-sdk-ext.identifier-resolution": "0.29.0",
+    "@sphereon/ssi-sdk-ext.jwt-service": "0.29.0",
+    "@sphereon/ssi-sdk.agent-config": "0.34.0",
+    "@sphereon/ssi-sdk.core": "0.34.0",
+    "@sphereon/ssi-sdk.credential-store": "0.34.0",
+    "@sphereon/ssi-sdk.credential-vcdm": "0.34.0",
+    "@sphereon/ssi-sdk.kv-store-temp": "0.34.0",
+    "@sphereon/ssi-sdk.presentation-exchange": "0.34.0",
+    "@sphereon/ssi-sdk.vc-status-list": "0.34.0",
+    "@sphereon/ssi-sdk.vc-status-list-issuer": "0.34.0",
+    "@sphereon/ssi-types": "0.34.0",
     "@veramo/core": "4.2.0",
     "body-parser": "^1.20.2",
     "casbin": "^5.30.0",
@@ -49,22 +49,22 @@
     "uuid": "^9.0.1"
   },
   "optionalDependencies": {
-    "@sphereon/ssi-sdk.credential-vcdm-jsonld-provider": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.credential-vcdm1-jwt-provider": "0.33.1-next.68+b6c8b366",
-    "@sphereon/ssi-sdk.credential-vcdm2-jose-provider": "0.33.1-next.68+b6c8b366"
+    "@sphereon/ssi-sdk.credential-vcdm-jsonld-provider": "0.34.0",
+    "@sphereon/ssi-sdk.credential-vcdm1-jwt-provider": "0.34.0",
+    "@sphereon/ssi-sdk.credential-vcdm2-jose-provider": "0.34.0"
   },
   "devDependencies": {
-    "@sphereon/did-provider-oyd": "0.28.1-next.53",
+    "@sphereon/did-provider-oyd": "0.29.0",
     "@sphereon/did-uni-client": "^0.6.3",
-    "@sphereon/ssi-sdk-ext.did-provider-jwk": "0.28.1-next.53",
-    "@sphereon/ssi-sdk-ext.did-resolver-jwk": "0.28.1-next.53",
-    "@sphereon/ssi-sdk-ext.key-manager": "0.28.1-next.53",
-    "@sphereon/ssi-sdk-ext.kms-local": "0.28.1-next.53",
+    "@sphereon/ssi-sdk-ext.did-provider-jwk": "0.29.0",
+    "@sphereon/ssi-sdk-ext.did-resolver-jwk": "0.29.0",
+    "@sphereon/ssi-sdk-ext.key-manager": "0.29.0",
+    "@sphereon/ssi-sdk-ext.kms-local": "0.29.0",
     "@sphereon/ssi-sdk.agent-config": "workspace:*",
     "@sphereon/ssi-sdk.credential-vcdm-jsonld-provider": "workspace:*",
     "@sphereon/ssi-sdk.credential-vcdm1-jwt-provider": "workspace:*",
     "@sphereon/ssi-sdk.credential-vcdm2-jose-provider": "workspace:*",
-    "@sphereon/ssi-sdk.data-store": "0.33.1-next.68+b6c8b366",
+    "@sphereon/ssi-sdk.data-store": "0.34.0",
     "@types/body-parser": "^1.19.5",
     "@types/cookie-parser": "^1.4.7",
     "@types/cors": "^2.8.17",
@@ -116,5 +116,5 @@
     "W3C",
     "VC API"
   ],
-  "gitHead": "b6c8b36636fa3777494f55860d6a75f2e5a5611e"
+  "gitHead": "b1c9c5e91a9ce4bc677ff2cce5f2d520a16b366d"
 }

package/src/api-functions.ts

@@ -1,17 +1,31 @@
 import { checkAuth, type ISingleEndpointOpts, sendErrorResponse } from '@sphereon/ssi-express-support'
+import { isDidIdentifier, isIIdentifier } from '@sphereon/ssi-sdk-ext.identifier-resolution'
 import { contextHasPlugin } from '@sphereon/ssi-sdk.agent-config'
+import {
+  AddCredentialArgs,
+  CredentialCorrelationType,
+  DocumentType,
+  type FindDigitalCredentialArgs
+} from '@sphereon/ssi-sdk.credential-store'
+import { extractIssuer } from '@sphereon/ssi-sdk.credential-vcdm'
+import { CredentialRole } from '@sphereon/ssi-sdk.data-store'
+import type { IStatusListPlugin } from '@sphereon/ssi-sdk.vc-status-list'
+import {
+  CredentialMapper,
+  CredentialProofFormat,
+  isVcdm2Credential,
+  OriginalVerifiableCredential
+} from '@sphereon/ssi-types'
 import type { CredentialPayload, ProofFormat } from '@veramo/core'
+import Debug from 'debug'
 import { type Request, type Response, Router } from 'express'
 import { v4 } from 'uuid'
-import type { IIssueCredentialEndpointOpts, IRequiredContext, IVCAPIIssueOpts, IVerifyCredentialEndpointOpts } from './types'
-import Debug from 'debug'
-import { AddCredentialArgs, CredentialCorrelationType, DocumentType, type FindDigitalCredentialArgs } from '@sphereon/ssi-sdk.credential-store'
-import type { IStatusListPlugin } from '@sphereon/ssi-sdk.vc-status-list'
-import { CredentialRole } from '@sphereon/ssi-sdk.data-store'
-import { CredentialMapper, CredentialProofFormat, isVcdm2Credential, OriginalVerifiableCredential } from '@sphereon/ssi-types'
-import { extractIssuer } from '@sphereon/ssi-sdk.credential-vcdm'
-import { isDidIdentifier, isIIdentifier } from '@sphereon/ssi-sdk-ext.identifier-resolution'
-import type { VerifiableCredentialSP } from '@sphereon/ssi-sdk.core'
+import type {
+  IIssueCredentialEndpointOpts,
+  IRequiredContext,
+  IVCAPIIssueOpts,
+  IVerifyCredentialEndpointOpts
+} from './types'
 
 const debug = Debug('sphereon:ssi-sdk:w3c-vc-api')
 
@@ -106,7 +120,10 @@ export function issueCredentialEndpoint(router: Router, context: IRequiredContex
         await context.agent.crsAddCredential(dc)
       }
       response.statusCode = 201
-      return response.send({ verifiableCredential: rawDocument, uniformCredential: CredentialMapper.toUniformCredential(vc as OriginalVerifiableCredential) })
+      return response.send({
+        verifiableCredential: rawDocument,
+        uniformCredential: CredentialMapper.toUniformCredential(vc as OriginalVerifiableCredential),
+      })
     } catch (e) {
       return sendErrorResponse(response, 500, e.message as string, e)
     }
@@ -186,14 +203,16 @@ export function verifyCredentialEndpoint(router: Router, context: IRequiredConte
   router.post(opts?.path ?? '/credentials/verify', checkAuth(opts?.endpoint), async (request: Request, response: Response) => {
     try {
       debug(JSON.stringify(request.body, null, 2))
-      const credential: VerifiableCredentialSP = request.body.verifiableCredential
-      // const options: IIssueOptionsPayload = request.body.options
+      const credential: OriginalVerifiableCredential = request.body.verifiableCredential
+      const options = request.body.options
       if (!credential) {
         return sendErrorResponse(response, 400, 'No verifiable credential supplied')
       }
       const verifyResult = await context.agent.verifyCredential({
+        ...options,
         credential,
         policies: {
+          ...options?.policies,
           credentialStatus: false, // Do not use built-in. We have our own statusList implementations
         },
         fetchRemoteContexts: opts?.fetchRemoteContexts !== false,