@sphereon/ssi-types 0.33.1-next.2 → 0.33.1-next.68

package/src/types/cose.ts

@@ -1,7 +1,8 @@
-import { com } from '@sphereon/kmp-mdoc-core'
-import SignatureAlgorithm = com.sphereon.crypto.generic.SignatureAlgorithm
-import KeyType = com.sphereon.crypto.generic.KeyType
-import KeyOperations = com.sphereon.crypto.generic.KeyOperations
+import * as mdoc from '@sphereon/kmp-mdoc-core'
+import { ICoseCurve, ICoseKeyOperation, ICoseKeyType, ICoseSignatureAlgorithm } from '../utils'
+type KeyType = mdoc.com.sphereon.crypto.generic.KeyType
+type KeyOperations = mdoc.com.sphereon.crypto.generic.KeyOperations
+type SignatureAlgorithm = mdoc.com.sphereon.crypto.generic.SignatureAlgorithm
 
 /**
  * See our mdl-mdoc and crypto library for more information
@@ -33,50 +34,3 @@ export interface ICoseKeyJson {
 
   [k: string]: unknown
 }
-
-export enum ICoseKeyType {
-  OKP = 1,
-  EC2 = 2,
-  RSA = 3,
-  Symmetric = 4,
-  Reserved = 0,
-}
-
-export enum ICoseSignatureAlgorithm {
-  ES256 = -7,
-  ES256K = -47,
-  ES384 = -35,
-  ES512 = -36,
-  EdDSA = -8,
-  HS256_64 = 4,
-  HS256 = 5,
-  HS384 = 6,
-  HS512 = 7,
-  PS256 = -37,
-  PS384 = -38,
-  PS512 = -39,
-}
-
-export enum ICoseKeyOperation {
-  SIGN = 1,
-  VERIFY = 2,
-  ENCRYPT = 3,
-  DECRYPT = 4,
-  WRAP_KEY = 5,
-  UNWRAP_KEY = 6,
-  DERIVE_KEY = 7,
-  DERIVE_BITS = 8,
-  MAC_CREATE = 9,
-  MAC_VERIFY = 10,
-}
-
-export enum ICoseCurve {
-  P_256 = 1,
-  P_384 = 2,
-  P_521 = 3,
-  X25519 = 4,
-  X448 = 5,
-  Ed25519 = 6,
-  Ed448 = 7,
-  secp256k1 = -1,
-}

package/src/types/did.ts

@@ -1,29 +1,3 @@
-export enum IProofPurpose {
-  verificationMethod = 'verificationMethod',
-  assertionMethod = 'assertionMethod',
-  authentication = 'authentication',
-  keyAgreement = 'keyAgreement',
-  contractAgreement = 'contactAgreement',
-  capabilityInvocation = 'capabilityInvocation',
-  capabilityDelegation = 'capabilityDelegation',
-}
-
-export enum IProofType {
-  Ed25519Signature2018 = 'Ed25519Signature2018',
-  Ed25519Signature2020 = 'Ed25519Signature2020',
-  EcdsaSecp256k1Signature2019 = 'EcdsaSecp256k1Signature2019',
-  EcdsaSecp256k1RecoverySignature2020 = 'EcdsaSecp256k1RecoverySignature2020',
-  JsonWebSignature2020 = 'JsonWebSignature2020',
-  RsaSignature2018 = 'RsaSignature2018',
-  GpgSignature2020 = 'GpgSignature2020',
-  JcsEd25519Signature2020 = 'JcsEd25519Signature2020',
-  BbsBlsSignatureProof2020 = 'BbsBlsSignatureProof2020',
-  BbsBlsBoundSignatureProof2020 = 'BbsBlsBoundSignatureProof2020',
-  JwtProof2020 = 'JwtProof2020',
-  SdJwtProof2024 = 'SdJwtProof2024',
-  MdocProof2024 = 'MsoMdocProof2024',
-}
-
 export interface IParsedDID {
   did: string
   didUrl: string
@@ -37,70 +11,6 @@ export interface IParsedDID {
   }
 }
 
-export const parseDid = (did: string): IParsedDID => {
-  const parsedDid = parse(did)
-  if (parsedDid === null) {
-    throw new Error('invalid did')
-  }
-
-  return parsedDid
-}
-
-const parse = (didUrl: string): IParsedDID | null => {
-  const PCT_ENCODED = '(?:%[0-9a-fA-F]{2})'
-  const ID_CHAR = `(?:[a-zA-Z0-9._-]|${PCT_ENCODED})`
-  const METHOD = '([a-z0-9]+)'
-  const METHOD_ID = `((?:${ID_CHAR}*:)*(${ID_CHAR}+))`
-  const PARAM_CHAR = '[a-zA-Z0-9_.:%-]'
-  const PARAM = `;${PARAM_CHAR}+=${PARAM_CHAR}*`
-  const PARAMS = `((${PARAM})*)`
-  const PATH = `(/[^#?]*)?`
-  const QUERY = `([?][^#]*)?`
-  const FRAGMENT = `(#.*)?`
-  const DID_MATCHER = new RegExp(`^did:${METHOD}:${METHOD_ID}${PARAMS}${PATH}${QUERY}${FRAGMENT}$`)
-
-  if (didUrl === '' || !didUrl) return null
-  const sections = didUrl.match(DID_MATCHER)
-  if (sections) {
-    const parts: IParsedDID = {
-      did: `did:${sections[1]}:${sections[2]}`,
-      method: sections[1],
-      id: sections[2],
-      didUrl,
-    }
-    if (sections[4]) {
-      const params = sections[4].slice(1).split(';')
-      parts.params = {}
-      for (const p of params) {
-        const kv = p.split('=')
-        parts.params[kv[0]] = kv[1]
-      }
-    }
-    if (sections[6]) parts.path = sections[6]
-    if (sections[7]) parts.query = sections[7].slice(1)
-    if (sections[8]) parts.fragment = sections[8].slice(1)
-    return parts
-  }
-
-  return null
-}
-
-// Copied from did-resolver, so we have types without external dep
-
-// Copyright 2018 Consensys AG
-
-// Licensed under the Apache License, Version 2.0(the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-
-// http://www.apache.org/licenses/LICENSE-2.0
-
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
 /**
  * Defines an object type that can be extended with other properties.
  */

package/src/types/index.ts

@@ -1,13 +1,13 @@
-export * from './did'
-export * from './pex'
-export * from './vc'
-export * from './generic'
-export * from './sd-jwt-vc'
-export * from './sd-jwt-type-metadata'
-export * from './w3c-vc'
-export * from './jose'
-export * from './cose'
-export * from './mso_mdoc'
-export * from './metadata-types'
-export * from './status-list'
-export * from './dcql'
+export type * from './generic'
+export type * from './did'
+export type * from './pex'
+export type * from './vc'
+export type * from './sd-jwt-vc'
+export type * from './sd-jwt-type-metadata'
+export type * from './w3c-vc'
+export type * from './jose'
+export type * from './cose'
+export type * from './mso_mdoc'
+export type * from './metadata-types'
+export type * from './status-list'
+export type * from './dcql'

package/src/types/jose.ts

@@ -1,6 +1,7 @@
 /**
  * Conversion functions to Cose available for TS in our @sphereon/ssi-sdk-ext.key-utils package
  */
+import { JoseCurve, JoseKeyOperation, JoseSignatureAlgorithm, JwkKeyType } from '../utils'
 
 export interface BaseJWK {
   kty: JwkKeyType | JwkKeyTypeString
@@ -12,6 +13,23 @@ export interface BaseJWK {
   n?: string
 }
 
+export type JoseSignatureAlgorithmString =
+  | 'RS256'
+  | 'RS384'
+  | 'RS512'
+  | 'ES256'
+  | 'ES256K'
+  | 'ES384'
+  | 'ES512'
+  | 'EdDSA'
+  | 'HS256'
+  | 'HS384'
+  | 'HS512'
+  | 'PS256'
+  | 'PS384'
+  | 'PS512'
+  | 'none'
+
 export interface JWK extends BaseJWK {
   d?: string
   dp?: string
@@ -43,73 +61,8 @@ export interface JWK extends BaseJWK {
   [propName: string]: unknown
 }
 
-export enum JwkKeyType {
-  EC = 'EC',
-  RSA = 'RSA',
-  oct = 'oct',
-  OKP = 'OKP',
-}
-
 export type JwkKeyTypeString = 'EC' | 'RSA' | 'oct' | 'OKP'
 
-export enum JoseSignatureAlgorithm {
-  RS256 = 'RS256',
-  RS384 = 'RS384',
-  RS512 = 'RS512',
-  ES256 = 'ES256',
-  ES256K = 'ES256K',
-  ES384 = 'ES384',
-  ES512 = 'ES512',
-  EdDSA = 'EdDSA',
-  HS256 = 'HS256',
-  HS384 = 'HS384',
-  HS512 = 'HS512',
-  PS256 = 'PS256',
-  PS384 = 'PS384',
-  PS512 = 'PS512',
-  none = 'none',
-}
-
-export type JoseSignatureAlgorithmString =
-  | 'RS256'
-  | 'RS384'
-  | 'RS512'
-  | 'ES256'
-  | 'ES256K'
-  | 'ES384'
-  | 'ES512'
-  | 'EdDSA'
-  | 'HS256'
-  | 'HS384'
-  | 'HS512'
-  | 'PS256'
-  | 'PS384'
-  | 'PS512'
-  | 'none'
-
-export enum JoseKeyOperation {
-  SIGN = 'sign',
-  VERIFY = 'verify',
-  ENCRYPT = 'encrypt',
-  DECRYPT = 'decrypt',
-  WRAP_KEY = 'wrapKey',
-  UNWRAP_KEY = 'unwrapKey',
-  DERIVE_KEY = 'deriveKey',
-  DERIVE_BITS = 'deriveBits',
-}
-
 export type JoseKeyOperationString = 'sign' | 'verify' | 'encrypt' | 'decrypt' | 'wrapKey' | 'unwrapKey' | 'deriveKey' | 'deriveBits'
 
-export enum JoseCurve {
-  P_256 = 'P-256',
-  P_384 = 'P-384',
-  P_521 = 'P-521',
-  X25519 = 'X25519',
-  X448 = 'X448',
-  EdDSA = 'EdDSA',
-  Ed25519 = 'Ed25519',
-  Ed448 = 'Ed448',
-  secp256k1 = 'secp256k1',
-}
-
 export type JoseCurveString = 'P-256' | 'P-384' | 'P-521' | 'X25519' | 'X448' | 'EdDSA' | 'Ed25519' | 'Ed448' | 'secp256k1'

package/src/types/mso_mdoc.ts

@@ -4,30 +4,23 @@
  * but it would be nice if we can remove the imports and just have some interfaces here we can then use, like done
  * for sd-jwts
  */
+import * as mdoc from '@sphereon/kmp-mdoc-core'
+import { OriginalType } from '../mapper'
 
-import { com } from '@sphereon/kmp-mdoc-core'
-import { IProofPurpose, IProofType } from './did'
-import { OriginalType, WrappedVerifiableCredential, WrappedVerifiablePresentation } from './vc'
-import { IVerifiableCredential } from './w3c-vc'
-import decodeFrom = com.sphereon.kmp.decodeFrom
-import encodeTo = com.sphereon.kmp.encodeTo
-import Encoding = com.sphereon.kmp.Encoding
-import DeviceResponseCbor = com.sphereon.mdoc.data.device.DeviceResponseCbor
-import DocumentJson = com.sphereon.mdoc.data.device.DocumentJson
-import IssuerSignedCbor = com.sphereon.mdoc.data.device.IssuerSignedCbor
-import IssuerSignedItemJson = com.sphereon.mdoc.data.device.IssuerSignedItemJson
+export type DocumentJson = mdoc.com.sphereon.mdoc.data.device.DocumentJson
+export type IssuerSignedItemJson = mdoc.com.sphereon.mdoc.data.device.IssuerSignedItemJson
 
 /**
  * Represents a selective disclosure JWT vc in compact form.
  */
 export type MdocOid4vpIssuerSigned = string
 export type MdocOid4vpMdocVpToken = string
-export type MdocIssuerSigned = com.sphereon.mdoc.data.device.IssuerSignedCbor
-export type MdocDocument = com.sphereon.mdoc.data.device.DocumentCbor
-export type MdocDocumentJson = com.sphereon.mdoc.data.device.DocumentJson
-export type IssuerSignedJson = com.sphereon.mdoc.data.device.IssuerSignedJson
-export type DeviceSignedJson = com.sphereon.mdoc.data.device.DeviceSignedJson
-export type MdocDeviceResponse = com.sphereon.mdoc.data.device.DeviceResponseCbor
+export type MdocIssuerSigned = mdoc.com.sphereon.mdoc.data.device.IssuerSignedCbor
+export type MdocDocument = mdoc.com.sphereon.mdoc.data.device.DocumentCbor
+export type MdocDocumentJson = mdoc.com.sphereon.mdoc.data.device.DocumentJson
+export type IssuerSignedJson = mdoc.com.sphereon.mdoc.data.device.IssuerSignedJson
+export type DeviceSignedJson = mdoc.com.sphereon.mdoc.data.device.DeviceSignedJson
+export type MdocDeviceResponse = mdoc.com.sphereon.mdoc.data.device.DeviceResponseCbor
 
 export interface WrappedMdocCredential {
   /**
@@ -81,128 +74,7 @@ export interface WrappedMdocPresentation {
   vcs: WrappedMdocCredential[]
 }
 
-export function isWrappedMdocCredential(vc: WrappedVerifiableCredential): vc is WrappedMdocCredential {
-  return vc.format === 'mso_mdoc'
-}
-
-export function isWrappedMdocPresentation(vp: WrappedVerifiablePresentation): vp is WrappedMdocPresentation {
-  return vp.format === 'mso_mdoc'
-}
 /**
  * Record where keys are the namespaces and the values are objects again with the namespace values
  */
 export type MdocDecodedPayload = Record<string, Record<string, string | number | boolean>>
-export function getMdocDecodedPayload(mdoc: MdocDocument): MdocDecodedPayload {
-  const mdocJson = mdoc.toJson()
-  if (!mdocJson.issuerSigned.nameSpaces) {
-    throw Error(`Cannot access Issuer Signed items from the Mdoc`)
-  }
-
-  const issuerSignedJson = mdoc.issuerSigned.toJsonDTO()
-  const namespaces = issuerSignedJson.nameSpaces as unknown as Record<string, IssuerSignedItemJson[]>
-
-  const decodedPayload: MdocDecodedPayload = {}
-  for (const [namespace, items] of Object.entries(namespaces)) {
-    decodedPayload[namespace] = items.reduce(
-      (acc, item) => ({
-        ...acc,
-        [item.key]: item.value.value,
-      }),
-      {},
-    )
-  }
-
-  return decodedPayload
-}
-
-/**
- * Decode an Mdoc from its issuerSigned OID4VP Base64URL (string) to an object containing the disclosures,
- * signed payload, decoded payload
- *
- */
-export function decodeMdocIssuerSigned(oid4vpIssuerSigned: MdocOid4vpIssuerSigned): MdocDocument {
-  // Issuer signed according to 18013-7 in base64url
-  const issuerSigned: MdocIssuerSigned = IssuerSignedCbor.Static.cborDecode(decodeFrom(oid4vpIssuerSigned, Encoding.BASE64URL))
-  // Create an mdoc from it. // Validations need to be performed by the caller after this!
-  const holderMdoc: MdocDocument = issuerSigned.toDocument()
-  return holderMdoc
-}
-
-export function encodeMdocIssuerSigned(issuerSigned: MdocIssuerSigned, encoding: 'base64url' = 'base64url') {
-  return encodeTo(issuerSigned.cborEncode(), Encoding.BASE64URL)
-}
-
-/**
- * Decode an Mdoc from its vp_token OID4VP Base64URL (string) to an object containing the disclosures,
- * signed payload, decoded payload
- *
- */
-export function decodeMdocDeviceResponse(vpToken: MdocOid4vpMdocVpToken): MdocDeviceResponse {
-  const deviceResponse = DeviceResponseCbor.Static.cborDecode(decodeFrom(vpToken, Encoding.BASE64URL))
-  return deviceResponse
-}
-
-// TODO naive implementation of mapping a mdoc onto a IVerifiableCredential. Needs some fixes and further implementation and needs to be moved out of ssi-types
-export const mdocDecodedCredentialToUniformCredential = (
-  decoded: MdocDocument,
-  // @ts-ignore
-  opts?: { maxTimeSkewInMS?: number },
-): IVerifiableCredential => {
-  const mdoc = decoded.toJson()
-  const json = mdoc.toJsonDTO<DocumentJson>()
-  const type = 'Personal Identification Data'
-  const MSO = mdoc.MSO
-  if (!MSO || !json.issuerSigned?.nameSpaces) {
-    throw Error(`Cannot access Mobile Security Object or Issuer Signed items from the Mdoc`)
-  }
-  const nameSpaces = json.issuerSigned.nameSpaces as unknown as Record<string, IssuerSignedItemJson[]>
-  if (!('eu.europa.ec.eudi.pid.1' in nameSpaces)) {
-    throw Error(`Only PID supported at present`)
-  }
-  const items = nameSpaces['eu.europa.ec.eudi.pid.1']
-  if (!items || items.length === 0) {
-    throw Error(`No issuer signed items were found`)
-  }
-  type DisclosuresAccumulator = {
-    [key: string]: any
-  }
-
-  const credentialSubject = items.reduce((acc: DisclosuresAccumulator, item: IssuerSignedItemJson) => {
-    if (Array.isArray(item.value)) {
-      acc[item.key] = item.value.map((val) => val.value).join(', ')
-    } else {
-      acc[item.key] = item.value.value
-    }
-    return acc
-  }, {})
-  const validFrom = MSO.validityInfo.validFrom
-  const validUntil = MSO.validityInfo.validUntil
-  const docType = MSO.docType
-  const expirationDate = validUntil
-  let issuanceDateStr = validFrom
-
-  const issuanceDate = issuanceDateStr
-  if (!issuanceDate) {
-    throw Error(`JWT issuance date is required but was not present`)
-  }
-
-  const credential: Omit<IVerifiableCredential, 'issuer' | 'issuanceDate'> = {
-    type: [docType], // Mdoc not a W3C VC, so no VerifiableCredential
-    '@context': [], // Mdoc has no JSON-LD by default. Certainly not the VC DM1 default context for JSON-LD
-    credentialSubject: {
-      type,
-      ...credentialSubject,
-    },
-    issuanceDate,
-    expirationDate,
-    proof: {
-      type: IProofType.MdocProof2024,
-      created: issuanceDate,
-      proofPurpose: IProofPurpose.authentication,
-      verificationMethod: json.issuerSigned.issuerAuth.payload,
-      mso_mdoc: encodeTo(decoded.cborEncode(), Encoding.BASE64URL),
-    },
-  }
-
-  return credential as IVerifiableCredential
-}

package/src/types/sd-jwt-vc.ts

@@ -1,8 +1,6 @@
-import { OriginalType, WrappedVerifiableCredential, WrappedVerifiablePresentation } from './vc'
-import { decodeSdJwt, decodeSdJwtSync, getClaims, getClaimsSync } from '@sd-jwt/decode'
-import { CompactJWT, IVerifiableCredential } from './w3c-vc'
-import { IProofPurpose, IProofType } from './did'
-import { OrPromise } from './generic'
+import { type CompactJWT } from './w3c-vc'
+import { type OrPromise } from './generic'
+import { OriginalType } from '../mapper'
 
 type JsonValue = string | number | boolean | { [x: string]: JsonValue | undefined } | Array<JsonValue>
 
@@ -47,7 +45,7 @@ export type CompactSdJwtVc = string
 /**
  * The signed payload of an SD-JWT. Includes fields such as `_sd`, `...` and `_sd_alg`
  */
-interface SdJwtSignedVerifiableCredentialPayload extends SdJwtDecodedVerifiableCredentialPayload {
+export interface SdJwtSignedVerifiableCredentialPayload extends SdJwtDecodedVerifiableCredentialPayload {
   // Only present if there are any selectively discloseable claims
   _sd?: string[]
   _sd_alg?: string
@@ -198,175 +196,3 @@ export interface WrappedSdJwtVerifiablePresentation {
    */
   vcs: [WrappedSdJwtVerifiableCredential]
 }
-
-export function isWrappedSdJwtVerifiableCredential(vc: WrappedVerifiableCredential): vc is WrappedSdJwtVerifiableCredential {
-  return vc.format === 'vc+sd-jwt'
-}
-
-export function isWrappedSdJwtVerifiablePresentation(vp: WrappedVerifiablePresentation): vp is WrappedSdJwtVerifiablePresentation {
-  return vp.format === 'vc+sd-jwt'
-}
-
-/**
- * Decode an SD-JWT vc from its compact format (string) to an object containing the disclosures,
- * signed payload, decoded payload and the compact SD-JWT vc.
- *
- * Both the input and output interfaces of this method are defined in `@sphereon/ssi-types`, so
- * this method hides the actual implementation of SD-JWT (which is currently based on @sd-jwt/core)
- */
-export function decodeSdJwtVc(compactSdJwtVc: CompactSdJwtVc, hasher: HasherSync): SdJwtDecodedVerifiableCredential {
-  const { jwt, disclosures, kbJwt } = decodeSdJwtSync(compactSdJwtVc, hasher)
-
-  const signedPayload = jwt.payload as SdJwtSignedVerifiableCredentialPayload
-  const decodedPayload = getClaimsSync(signedPayload, disclosures, hasher)
-  const compactKeyBindingJwt = kbJwt ? compactSdJwtVc.split('~').pop() : undefined
-
-  return {
-    compactSdJwtVc,
-    decodedPayload: decodedPayload as SdJwtDecodedVerifiableCredentialPayload,
-    disclosures: disclosures.map((d) => {
-      const decoded = d.key ? [d.salt, d.key, d.value] : [d.salt, d.value]
-      if (!d._digest) throw new Error('Implementation error: digest not present in disclosure')
-      return {
-        decoded: decoded as SdJwtDecodedDisclosure,
-        digest: d._digest,
-        encoded: d.encode(),
-      } satisfies SdJwtDisclosure
-    }),
-    signedPayload: signedPayload as SdJwtSignedVerifiableCredentialPayload,
-    ...(compactKeyBindingJwt &&
-      kbJwt && {
-        kbJwt: {
-          header: kbJwt.header as SdJwtVcKbJwtHeader,
-          compact: compactKeyBindingJwt,
-          payload: kbJwt.payload as SdJwtVcKbJwtPayload,
-        },
-      }),
-  }
-}
-
-/**
- * Decode an SD-JWT vc from its compact format (string) to an object containing the disclosures,
- * signed payload, decoded payload and the compact SD-JWT vc.
- *
- * Both the input and output interfaces of this method are defined in `@sphereon/ssi-types`, so
- * this method hides the actual implementation of SD-JWT (which is currently based on @sd-jwt/core)
- */
-export async function decodeSdJwtVcAsync(compactSdJwtVc: CompactSdJwtVc, hasher: Hasher): Promise<SdJwtDecodedVerifiableCredential> {
-  const { jwt, disclosures, kbJwt } = await decodeSdJwt(compactSdJwtVc, hasher)
-
-  const signedPayload = jwt.payload as SdJwtSignedVerifiableCredentialPayload
-  const decodedPayload = await getClaims(signedPayload, disclosures, hasher)
-  const compactKeyBindingJwt = kbJwt ? compactSdJwtVc.split('~').pop() : undefined
-
-  return {
-    compactSdJwtVc,
-    decodedPayload: decodedPayload as SdJwtDecodedVerifiableCredentialPayload,
-    disclosures: disclosures.map((d) => {
-      const decoded = d.key ? [d.salt, d.key, d.value] : [d.salt, d.value]
-      if (!d._digest) throw new Error('Implementation error: digest not present in disclosure')
-      return {
-        decoded: decoded as SdJwtDecodedDisclosure,
-        digest: d._digest,
-        encoded: d.encode(),
-      } satisfies SdJwtDisclosure
-    }),
-    signedPayload: signedPayload as SdJwtSignedVerifiableCredentialPayload,
-    ...(compactKeyBindingJwt &&
-      kbJwt && {
-        kbJwt: {
-          header: kbJwt.header as SdJwtVcKbJwtHeader,
-          payload: kbJwt.payload as SdJwtVcKbJwtPayload,
-          compact: compactKeyBindingJwt,
-        },
-      }),
-  }
-}
-
-export const sdJwtDecodedCredentialToUniformCredential = (
-  decoded: SdJwtDecodedVerifiableCredential,
-  opts?: { maxTimeSkewInMS?: number },
-): IVerifiableCredential => {
-  const { decodedPayload } = decoded
-  const { exp, nbf, iss, iat, vct, cnf, status, sub, jti } = decodedPayload
-
-  const maxSkewInMS = opts?.maxTimeSkewInMS ?? 1500
-
-  const expirationDate = jwtDateToISOString({ jwtClaim: exp, claimName: 'exp' })
-  let issuanceDateStr = jwtDateToISOString({ jwtClaim: iat, claimName: 'iat' })
-
-  let nbfDateAsStr: string | undefined
-  if (nbf) {
-    nbfDateAsStr = jwtDateToISOString({ jwtClaim: nbf, claimName: 'nbf' })
-    if (issuanceDateStr && nbfDateAsStr && issuanceDateStr !== nbfDateAsStr) {
-      const diff = Math.abs(new Date(nbfDateAsStr).getTime() - new Date(iss).getTime())
-      if (!maxSkewInMS || diff > maxSkewInMS) {
-        throw Error(`Inconsistent issuance dates between JWT claim (${nbfDateAsStr}) and VC value (${iss})`)
-      }
-    }
-    issuanceDateStr = nbfDateAsStr
-  }
-  const issuanceDate = issuanceDateStr
-  if (!issuanceDate) {
-    throw Error(`JWT issuance date is required but was not present`)
-  }
-
-  // Filter out the fields we don't want in credentialSubject
-  const excludedFields = new Set(['vct', 'cnf', 'iss', 'iat', 'exp', 'nbf', 'jti', 'sub'])
-  const credentialSubject = Object.entries(decodedPayload).reduce(
-    (acc, [key, value]) => {
-      if (
-        !excludedFields.has(key) &&
-        value !== undefined &&
-        value !== '' &&
-        !(typeof value === 'object' && value !== null && Object.keys(value).length === 0)
-      ) {
-        acc[key] = value
-      }
-      return acc
-    },
-    {} as Record<string, any>,
-  )
-
-  const credential: Omit<IVerifiableCredential, 'issuer' | 'issuanceDate'> = {
-    type: [vct], // SDJwt is not a W3C VC, so no VerifiableCredential
-    '@context': [], // SDJwt has no JSON-LD by default. Certainly not the VC DM1 default context for JSON-LD
-    credentialSubject: {
-      ...credentialSubject,
-      id: credentialSubject.id ?? sub ?? jti,
-    },
-    issuanceDate,
-    expirationDate,
-    issuer: iss,
-    ...(cnf && { cnf }),
-    ...(status && { status }),
-    proof: {
-      type: IProofType.SdJwtProof2024,
-      created: nbfDateAsStr ?? issuanceDate,
-      proofPurpose: IProofPurpose.authentication,
-      verificationMethod: iss,
-      jwt: decoded.compactSdJwtVc,
-    },
-  }
-
-  return credential as IVerifiableCredential
-}
-
-const jwtDateToISOString = ({
-  jwtClaim,
-  claimName,
-  isRequired = false,
-}: {
-  jwtClaim?: number
-  claimName: string
-  isRequired?: boolean
-}): string | undefined => {
-  if (jwtClaim) {
-    const claim = parseInt(jwtClaim.toString())
-    // change JWT seconds to millisecond for the date
-    return new Date(claim * (claim < 9999999999 ? 1000 : 1)).toISOString().replace(/\.000Z/, 'Z')
-  } else if (isRequired) {
-    throw Error(`JWT claim ${claimName} is required but was not present`)
-  }
-  return undefined
-}

package/src/types/status-list.ts

@@ -1,12 +1,5 @@
-import { W3CVerifiableCredential } from './w3c-vc'
-import { ProofFormat as VeramoProofFormat } from '@veramo/core'
+import { type W3CVerifiableCredential } from './w3c-vc'
 
-export enum StatusListType {
-  StatusList2021 = 'StatusList2021',
-  OAuthStatusList = 'OAuthStatusList',
-}
 export type CWT = string
 
 export type StatusListCredential = W3CVerifiableCredential | CWT
-
-export type ProofFormat = VeramoProofFormat | 'cbor'