@velocitycareerlabs/server-webwallet 1.25.0-dev-build.12642c864

package/src/entities/issuing/schemas/webwallet-credential-manifest.schema.js

@@ -0,0 +1,198 @@
+/**
+ * Created by Michael Avoyan on 31/07/2024.
+ *
+ * Copyright 2022 Velocity Career Labs inc.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const webWalletCredentialManifestSchema = {
+  $schema: 'http://json-schema.org/draft-07/schema#',
+  $id: 'https://velocitycareerlabs.io/credential-manifest.schema.json',
+  title: 'credential-manifest',
+  description: 'The schema for credential manifest to issue credentials',
+  type: 'object',
+  properties: {
+    exchange_id: {
+      type: 'string',
+      description: 'Unique identifier for the exchange',
+    },
+    metadata: {
+      type: 'object',
+      description: 'Metadata about the client and exchange',
+      properties: {
+        client_name: {
+          type: 'string',
+          description: 'Name of the client',
+        },
+        logo_uri: {
+          type: 'string',
+          format: 'uri',
+          description: 'URI of the client logo',
+        },
+        tos_uri: {
+          type: 'string',
+          format: 'uri',
+          description: 'URI of the terms of service',
+        },
+        max_retention_period: {
+          type: 'string',
+          description: 'Maximum retention period',
+        },
+        progress_uri: {
+          type: 'string',
+          format: 'uri',
+          description: 'URI to check the progress of the exchange',
+        },
+        submit_presentation_uri: {
+          type: 'string',
+          format: 'uri',
+          description: 'URI to submit the presentation',
+        },
+        check_offers_uri: {
+          type: 'string',
+          format: 'uri',
+          description: 'URI to check credential offers',
+        },
+        finalize_offers_uri: {
+          type: 'string',
+          format: 'uri',
+          description: 'URI to finalize credential offers',
+        },
+      },
+      required: ['client_name', 'logo_uri', 'tos_uri'],
+    },
+    presentation_definition: {
+      type: 'object',
+      description: 'Definition of the presentation required for the exchange',
+      properties: {
+        id: {
+          type: 'string',
+          description: 'Unique identifier for the presentation definition',
+        },
+        purpose: {
+          type: 'string',
+          description: 'Purpose of the credential issuance',
+        },
+        name: {
+          type: 'string',
+          description: 'Name of the presentation definition',
+        },
+        format: {
+          type: 'object',
+          description: 'Format details of the presentation',
+          properties: {
+            jwt_vp: {
+              type: 'object',
+              properties: {
+                alg: {
+                  type: 'array',
+                  items: {
+                    type: 'string',
+                  },
+                },
+              },
+            },
+          },
+        },
+        input_descriptors: {
+          type: 'array',
+          items: {
+            type: 'object',
+            properties: {
+              id: {
+                type: 'string',
+                description: 'Identifier for the input descriptor',
+              },
+              name: {
+                type: 'string',
+                description: 'Name of the input descriptor',
+              },
+              schema: {
+                type: 'array',
+                items: {
+                  type: 'object',
+                  properties: {
+                    uri: {
+                      type: 'string',
+                      format: 'uri',
+                      description: 'URI of the schema',
+                    },
+                  },
+                  required: ['uri'],
+                },
+              },
+              group: {
+                type: 'array',
+                items: {
+                  type: 'string',
+                },
+              },
+            },
+            required: ['id', 'schema'],
+          },
+        },
+        submission_requirements: {
+          type: 'array',
+          items: {
+            type: 'object',
+            properties: {
+              rule: {
+                type: 'string',
+                description: 'Rule for submission requirements',
+              },
+              from: {
+                type: 'string',
+                description: 'Group from which the requirements are fulfilled',
+              },
+              min: {
+                type: 'integer',
+                description: 'Minimum number of items required',
+              },
+            },
+          },
+        },
+      },
+      required: ['id', 'input_descriptors'],
+    },
+    output_descriptors: {
+      type: 'array',
+      items: {
+        type: 'object',
+      },
+      description: 'Output descriptors of the exchange',
+    },
+    issuer: {
+      type: 'object',
+      properties: {
+        id: {
+          type: 'string',
+          description: 'Identifier of the issuer',
+        },
+      },
+    },
+    aud: {
+      type: 'string',
+      description: 'Audience of the credential',
+    },
+    nbf: {
+      type: 'integer',
+      description: 'Not before time for the exchange',
+    },
+    iss: {
+      type: 'string',
+      description: 'Issuer of the exchange',
+    },
+    exp: {
+      type: 'integer',
+      description: 'Expiration time of the exchange',
+    },
+    iat: {
+      type: 'integer',
+      description: 'Issued at time of the exchange',
+    },
+  },
+  required: ['metadata', 'exchange_id', 'presentation_definition'],
+};
+
+module.exports = {
+  webWalletCredentialManifestSchema,
+};

package/src/errors/error-codes.js

@@ -0,0 +1,12 @@
+/**
+ * Created by Michael Avoyan on 12/08/2024.
+ *
+ * Copyright 2022 Velocity Career Labs inc.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+const WebWalletServerError = 'web_wallet_server_error';
+
+module.exports = {
+  WebWalletServerError,
+};

package/src/fetchers/career-wallet/create-account-fetcher.js

@@ -0,0 +1,7 @@
+const createCareerWalletAccount = (payload, { careerWalletFetch }) => {
+  return careerWalletFetch.post('api/v0.6/accounts', { json: payload }).json();
+};
+
+module.exports = {
+  createCareerWalletAccount,
+};

package/src/fetchers/career-wallet/create-did-fetcher.js

@@ -0,0 +1,17 @@
+const createDidForAccount = (crv, accessToken, { careerWalletFetch }) => {
+  return careerWalletFetch
+    .post('api/v0.6/create_did_key', {
+      json: {
+        crv: `${crv}`,
+        didMethod: 'did:jwk',
+      },
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+      },
+    })
+    .json();
+};
+
+module.exports = {
+  createDidForAccount,
+};

package/src/fetchers/career-wallet/get-app-config.js

@@ -0,0 +1,11 @@
+const getAppConfig = async ({ careerWalletFetch, cache }) => {
+  return careerWalletFetch
+    .get('api/v0.6/careerwallet/appconfig', {
+      cache,
+    })
+    .json();
+};
+
+module.exports = {
+  getAppConfig,
+};

package/src/fetchers/career-wallet/get-consents.js

@@ -0,0 +1,13 @@
+const getConsentLatest = (accountId, { careerWalletFetch, config }) => {
+  return careerWalletFetch
+    .get(`api/v0.6/careerwallet/consents/latest?accountId=${accountId}`, {
+      headers: {
+        Authorization: `Bearer ${config.careerWalletAdminAccessToken}`,
+      },
+    })
+    .json();
+};
+
+module.exports = {
+  getConsentLatest,
+};

package/src/fetchers/career-wallet/get-credential-categories.js

@@ -0,0 +1,7 @@
+const getCredentialCategories = ({ careerWalletFetch }) => {
+  return careerWalletFetch.get('api/v0.6/credential-categories').json();
+};
+
+module.exports = {
+  getCredentialCategories,
+};

package/src/fetchers/career-wallet/get-personas.js

@@ -0,0 +1,7 @@
+const getPersonas = ({ careerWalletFetch, cache }) => {
+  return careerWalletFetch.get('reference/personas', { cache }).json();
+};
+
+module.exports = {
+  getPersonas,
+};

package/src/fetchers/career-wallet/index.js

@@ -0,0 +1,12 @@
+module.exports = {
+  ...require('./create-account-fetcher'),
+  ...require('./create-did-fetcher'),
+  ...require('./get-credential-categories'),
+  ...require('./verify-id-credential-request-code'),
+  ...require('./verify-id-credential-confirm-code'),
+  ...require('./get-app-config'),
+  ...require('./get-consents'),
+  ...require('./get-personas'),
+  ...require('./post-consent'),
+  ...require('./send-feedback'),
+};

package/src/fetchers/career-wallet/post-consent.js

@@ -0,0 +1,9 @@
+const postConsent = (payload, authorization, { careerWalletFetch }) => {
+  return careerWalletFetch
+    .post('api/v0.6/careerwallet/consents/add', { json: payload })
+    .json();
+};
+
+module.exports = {
+  postConsent,
+};

package/src/fetchers/career-wallet/send-feedback.js

@@ -0,0 +1,14 @@
+const sendFeedback = (payload, { careerWalletFetch, config }) => {
+  return careerWalletFetch
+    .post('api/v0.6/feedback', {
+      json: payload,
+      headers: {
+        Authorization: `Bearer ${config.careerWalletAdminAccessToken}`,
+      },
+    })
+    .json();
+};
+
+module.exports = {
+  sendFeedback,
+};

package/src/fetchers/career-wallet/sign-fetcher.js

@@ -0,0 +1,14 @@
+const signFetcher = (payload, accessToken, { careerWalletFetch }) => {
+  return careerWalletFetch
+    .post('api/v0.6/jwt/sign', {
+      json: { ...payload },
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+      },
+    })
+    .json();
+};
+
+module.exports = {
+  signFetcher,
+};

package/src/fetchers/career-wallet/verify-id-credential-confirm-code.js

@@ -0,0 +1,19 @@
+const verifyIdCredentialConfirmCode = async (
+  verificationCode,
+  { careerWalletFetch, cache, config }
+) => {
+  return careerWalletFetch
+    .post('api/v0.6/verify/confirm', {
+      json: { verificationCode },
+      headers: {
+        'x-vcl-verif-version': config.vclVerificationVersion,
+        Authorization: `Bearer ${config.careerWalletAdminAccessToken}`,
+      },
+      cache,
+    })
+    .json();
+};
+
+module.exports = {
+  verifyIdCredentialConfirmCode,
+};

package/src/fetchers/career-wallet/verify-id-credential-request-code.js

@@ -0,0 +1,20 @@
+const verifyIdCredentialRequestCode = async (
+  credentialType,
+  value,
+  { careerWalletFetch, cache, config }
+) => {
+  return careerWalletFetch
+    .post(`api/v0.6/verify/${credentialType}/request-code`, {
+      json: { value },
+      headers: {
+        'x-vcl-verif-version': config.vclVerificationVersion,
+        Authorization: `Bearer ${config.careerWalletAdminAccessToken}`,
+      },
+      cache,
+    })
+    .json();
+};
+
+module.exports = {
+  verifyIdCredentialRequestCode,
+};

package/src/fetchers/index.js

@@ -0,0 +1,4 @@
+module.exports = {
+  ...require('./career-wallet'),
+  ...require('./lib-api'),
+};

package/src/fetchers/lib-api/get-credential-display-schema.js

@@ -0,0 +1,12 @@
+const getCredentialDisplaySchema = async (
+  credentialType,
+  { libFetch, cache }
+) => {
+  return libFetch
+    .get(`display-descriptors/${credentialType}.descriptor.json`, { cache })
+    .json();
+};
+
+module.exports = {
+  getCredentialDisplaySchema,
+};

package/src/fetchers/lib-api/index.js

@@ -0,0 +1,3 @@
+module.exports = {
+  ...require('./get-credential-display-schema'),
+};

package/src/fetchers/linkedin/create-linkedin-post.js

@@ -0,0 +1,45 @@
+const createLinkedinPost = (
+  { accessToken, linkedinUserId, text, asset },
+  { linkedInFetch }
+) => {
+  return linkedInFetch
+    .post('ugcPosts', {
+      headers: {
+        'Content-Type': 'application/json',
+        'X-Restli-Protocol-Version': '2.0.0',
+        Authorization: `Bearer ${accessToken}`,
+      },
+      json: {
+        author: `urn:li:person:${linkedinUserId}`,
+        lifecycleState: 'PUBLISHED',
+        specificContent: {
+          'com.linkedin.ugc.ShareContent': {
+            shareCommentary: {
+              text,
+            },
+            ...(asset
+              ? {
+                  shareMediaCategory: 'IMAGE',
+                  media: [
+                    {
+                      status: 'READY',
+                      media: asset,
+                    },
+                  ],
+                }
+              : {
+                  shareMediaCategory: 'NONE',
+                }),
+          },
+        },
+        visibility: {
+          'com.linkedin.ugc.MemberNetworkVisibility': 'PUBLIC',
+        },
+      },
+    })
+    .json();
+};
+
+module.exports = {
+  createLinkedinPost,
+};

package/src/fetchers/linkedin/get-access-token.js

@@ -0,0 +1,26 @@
+const getLinkedInAccessToken = (
+  { code, redirectUri },
+  { config, linkedInAuthFetch }
+) => {
+  return linkedInAuthFetch
+    .post('accessToken', {
+      headers: {
+        'Content-Type': ' application/x-www-form-urlencoded',
+      },
+      body: String(
+        new URLSearchParams({
+          code,
+          redirect_uri:
+            redirectUri || `${config.webWalletBaseUrl}/share-to-linkedin`,
+          client_id: config.linkedIn.clientId,
+          client_secret: config.linkedIn.clientSecret,
+          grant_type: 'authorization_code',
+        })
+      ),
+    })
+    .json();
+};
+
+module.exports = {
+  getLinkedInAccessToken,
+};

package/src/fetchers/linkedin/get-linkedin-user-email.js

@@ -0,0 +1,13 @@
+const getLinkedInUserEmail = (accessToken, { linkedInFetch }) => {
+  return linkedInFetch
+    .get('emailAddress?q=members&projection=(elements*(handle~))', {
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+      },
+    })
+    .json();
+};
+
+module.exports = {
+  getLinkedInUserEmail,
+};

package/src/fetchers/linkedin/get-linkedin-user-id.js

@@ -0,0 +1,16 @@
+const getLinkedInUserId = (accessToken, { linkedInFetch }) => {
+  return linkedInFetch
+    .get(
+      'me?projection=(id,localizedFirstName,localizedLastName,profilePicture(displayImage~digitalmediaAsset:playableStreams))',
+      {
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+        },
+      }
+    )
+    .json();
+};
+
+module.exports = {
+  getLinkedInUserId,
+};

package/src/fetchers/linkedin/index.js

@@ -0,0 +1,9 @@
+module.exports = {
+  ...require('./get-access-token'),
+  ...require('./get-linkedin-user-id'),
+  ...require('./get-linkedin-user-email'),
+  ...require('./register-image-to-upload'),
+  ...require('./upload-image-to-linkedin'),
+  ...require('./create-linkedin-post'),
+  ...require('./revoke-linkedin-access'),
+};

package/src/fetchers/linkedin/register-image-to-upload.js

@@ -0,0 +1,30 @@
+const registerImageToUpload = (
+  { linkedinUserId, accessToken },
+  { linkedInFetch }
+) => {
+  return linkedInFetch
+    .post('assets?action=registerUpload', {
+      headers: {
+        'Content-Type': 'application/json',
+        'X-Restli-Protocol-Version': '2.0.0',
+        Authorization: `Bearer ${accessToken}`,
+      },
+      json: {
+        registerUploadRequest: {
+          recipes: ['urn:li:digitalmediaRecipe:feedshare-image'],
+          owner: `urn:li:person:${linkedinUserId}`,
+          serviceRelationships: [
+            {
+              relationshipType: 'OWNER',
+              identifier: 'urn:li:userGeneratedContent',
+            },
+          ],
+        },
+      },
+    })
+    .json();
+};
+
+module.exports = {
+  registerImageToUpload,
+};

package/src/fetchers/linkedin/revoke-linkedin-access.js

@@ -0,0 +1,20 @@
+const revokeLinkedinAccess = (accessToken, { config, linkedInAuthFetch }) => {
+  return linkedInAuthFetch
+    .post('revoke', {
+      headers: {
+        'Content-Type': ' application/x-www-form-urlencoded',
+      },
+      body: String(
+        new URLSearchParams({
+          client_id: config.linkedIn.clientId,
+          client_secret: config.linkedIn.clientSecret,
+          token: accessToken,
+        })
+      ),
+    })
+    .json();
+};
+
+module.exports = {
+  revokeLinkedinAccess,
+};

package/src/fetchers/linkedin/upload-image-to-linkedin.js

@@ -0,0 +1,16 @@
+const { default: got } = require('got');
+
+const uploadImageToLinkedin = ({ accessToken, uploadUrl, file }) => {
+  return got
+    .post(uploadUrl, {
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+      },
+      body: file,
+    })
+    .json();
+};
+
+module.exports = {
+  uploadImageToLinkedin,
+};

package/src/index.js

@@ -0,0 +1,15 @@
+const {
+  createServer,
+  listenServer,
+} = require('@velocitycareerlabs/server-provider');
+const { flow } = require('lodash/fp');
+const config = require('./config/config');
+const { initServer } = require('./init-server');
+
+/* istanbul ignore next */
+process.on('unhandledRejection', (error) => {
+  console.error(error);
+  process.exit(1);
+});
+
+flow(createServer, initServer, listenServer)(config);