@tdxvolt/volt-client-grpc 0.20.1 → 0.20.3

package/lib/index.cjs

@@ -2735,6 +2735,9 @@ message AuthenticateResponse {
 
   // Reserved for internal use.
   int64 decision_time = 8;
+
+  // Any credentials issued to the client as part of the authentication process.
+  repeated string credential = 9;
 }
 
 message CanAccessResourceRequest {
@@ -4839,6 +4842,11 @@ function issueAuthenticate(authenticateRequest, ttl) {
                 authenticateResponse.identity_did;
             }
 
+            this._credential.cache.vc = this._credential.cache.vc || [];
+            for (const credential of authenticateResponse.credential) {
+              this._credential.cache.vc.push(credential);
+            }
+
             this._credential.saveCache();
             break;
           }
@@ -4887,7 +4895,7 @@ function findDIDDocumentService(document, serviceType) {
   return matches;
 }
 
-async function authenticateInternal(noDID = false, ownDID = false) {
+async function authenticateInternal(noDID = false, ownDID = false, exchangeToken = "") {
   try {
     if (!this._credential.cache.ca) {
       this._credential.cache.ca = this._voltConfig.ca_pem;
@@ -4918,11 +4926,19 @@ async function authenticateInternal(noDID = false, ownDID = false) {
       host: this._credential.cache.bindIp
     };
 
+    if (exchangeToken) {
+      log$2("setting request exchange token");
+      authenticateRequest.exchange_token = exchangeToken;
+    } else {
+      log$2("no exchange token in request");
+    }
+
     if (this._credential.cache.challenge_code) {
+      log$2("setting request challenge code");
       authenticateRequest.challenge = this._credential.cache.challenge_code;
     } else {
       log$2(
-        "****challenge code NOT available**** => not sending challenge signature"
+        "no challenge code in request"
       );
     }
 
@@ -5672,9 +5688,10 @@ class VoltClient extends EventEmitter__default["default"] {
    * true  if you want to manage the DID yourself
    * @param {boolean} [options.noDID] - whether to create a key-based authentication session
    * instead of a DID-based authentication session.
+   * @param {string} [options.exchangeToken] - optional token to exchange in return for an authenticated session.
    */
   async initialise(config, options = {}) {
-    const { ownDID, noDID, didRegistryList, extraConfig } = options;
+    const { ownDID, noDID, didRegistryList, exchangeToken, extraConfig } = options;
     try {
       if (!config) {
         throw new Error(
@@ -5760,7 +5777,7 @@ class VoltClient extends EventEmitter__default["default"] {
       } else {
         // No certificate present in the cache yet => we need to authenticate.
         try {
-          isBound = await authenticateInternal.call(this, noDID, ownDID);
+          isBound = await authenticateInternal.call(this, noDID, ownDID, exchangeToken);
         } catch (bindErr) {
           if (bindErr.message === "invalid arguments") {
             // This is usually the result of a missing challenge signature or credential.

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.20.1",
+  "version": "0.20.3",
   "description": "tdx Volt library for nodejs clients",
   "type": "module",
   "exports": {

package/src/volt-client-internal.js

@@ -52,6 +52,11 @@ function issueAuthenticate(authenticateRequest, ttl) {
                 authenticateResponse.identity_did;
             }
 
+            this._credential.cache.vc = this._credential.cache.vc || [];
+            for (const credential of authenticateResponse.credential) {
+              this._credential.cache.vc.push(credential);
+            }
+
             this._credential.saveCache();
             break;
           }
@@ -100,7 +105,7 @@ function findDIDDocumentService(document, serviceType) {
   return matches;
 }
 
-export async function authenticateInternal(noDID = false, ownDID = false) {
+export async function authenticateInternal(noDID = false, ownDID = false, exchangeToken = "") {
   try {
     if (!this._credential.cache.ca) {
       this._credential.cache.ca = this._voltConfig.ca_pem;
@@ -131,11 +136,19 @@ export async function authenticateInternal(noDID = false, ownDID = false) {
       host: this._credential.cache.bindIp
     };
 
+    if (exchangeToken) {
+      log("setting request exchange token");
+      authenticateRequest.exchange_token = exchangeToken;
+    } else {
+      log("no exchange token in request");
+    }
+
     if (this._credential.cache.challenge_code) {
+      log("setting request challenge code");
       authenticateRequest.challenge = this._credential.cache.challenge_code;
     } else {
       log(
-        "****challenge code NOT available**** => not sending challenge signature"
+        "no challenge code in request"
       );
     }
 

package/src/volt-client.js

@@ -84,9 +84,10 @@ export class VoltClient extends EventEmitter {
    * true  if you want to manage the DID yourself
    * @param {boolean} [options.noDID] - whether to create a key-based authentication session
    * instead of a DID-based authentication session.
+   * @param {string} [options.exchangeToken] - optional token to exchange in return for an authenticated session.
    */
   async initialise(config, options = {}) {
-    const { ownDID, noDID, didRegistryList, extraConfig } = options;
+    const { ownDID, noDID, didRegistryList, exchangeToken, extraConfig } = options;
     try {
       if (!config) {
         throw new Error(
@@ -172,7 +173,7 @@ export class VoltClient extends EventEmitter {
       } else {
         // No certificate present in the cache yet => we need to authenticate.
         try {
-          isBound = await authenticateInternal.call(this, noDID, ownDID);
+          isBound = await authenticateInternal.call(this, noDID, ownDID, exchangeToken);
         } catch (bindErr) {
           if (bindErr.message === "invalid arguments") {
             // This is usually the result of a missing challenge signature or credential.

package/src/volt-proto-literals.js

@@ -2190,6 +2190,9 @@ message AuthenticateResponse {
 
   // Reserved for internal use.
   int64 decision_time = 8;
+
+  // Any credentials issued to the client as part of the authentication process.
+  repeated string credential = 9;
 }
 
 message CanAccessResourceRequest {