@velocitycareerlabs/server-webwallet 1.26.0-dev-build.10a394937 → 1.26.0-dev-build.1675a0ab5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velocitycareerlabs/server-webwallet",
-  "version": "1.26.0-dev-build.10a394937",
+  "version": "1.26.0-dev-build.1675a0ab5",
   "description": "Web Wallet application",
   "repository": "https://github.com/velocitycareerlabs/packages",
   "engines": {
@@ -33,7 +33,7 @@
     "@fastify/swagger": "^9.0.0",
     "@fastify/swagger-ui": "^5.0.0",
     "@spencejs/spence-mongo-repos": "^0.10.2",
-    "@velocitycareerlabs/migrations": "1.26.0-dev-build.10a394937",
+    "@velocitycareerlabs/migrations": "1.26.0-dev-build.1675a0ab5",
     "@verii/auth": "1.0.0-pre.1754372712",
     "@verii/common-functions": "1.0.0-pre.1754372712",
     "@verii/common-schemas": "1.0.0-pre.1754372712",
@@ -73,5 +73,5 @@
     "nodemon": "3.1.10",
     "prettier": "2.8.8"
   },
-  "gitHead": "6cbb2d0baa2246c90789b0d84e86d874590cf46e"
+  "gitHead": "3b801a773c372d2d73b124d9463cc11dd324ecce"
 }

package/src/controllers/disclosures/controller.js

@@ -5,6 +5,7 @@ const {
   VCLDeepLink,
   VCLPresentationRequestDescriptor,
   VCLDidJwk,
+  VCLAuthTokenDescriptor,
 } = require('@verii/vnf-nodejs-wallet-sdk');
 const { getAppConfig } = require('../../fetchers/career-wallet/get-app-config');
 const {
@@ -119,7 +120,9 @@ const disclosureController = async (fastify) => {
 
       let authToken = null;
       if (presentationRequest.feed) {
-        authToken = await vclSdk.getAuthToken({ presentationRequest });
+        authToken = await vclSdk.getAuthToken(
+          new VCLAuthTokenDescriptor(presentationRequest)
+        );
       }
 
       const { payload: presentation } = jwtDecode(
@@ -148,6 +151,20 @@ const disclosureController = async (fastify) => {
         type: body.type,
       });
 
+      if (presentationRequest.feed) {
+        await repos.feeds.insert({
+          auth0UserId: user.sub,
+          authToken,
+          deeplink: body.link,
+          disclosureId: presentation.presentation_definition.id.split('.')[1],
+          inspectorDid: presentation.iss,
+          credentialTypes:
+            presentation.presentation_definition.input_descriptors.map(
+              (descriptor) => descriptor.id
+            ),
+        });
+      }
+
       return { disclosure };
     }
   );

package/src/controllers/feeds/autohooks.js

@@ -0,0 +1,20 @@
+const { oauthPlugin } = require('@verii/auth');
+const { values, forEach } = require('lodash/fp');
+
+const controllerSchemas = require('./schemas');
+const disclosureSchemas = require('../../entities/disclosures/schemas');
+
+module.exports = async (fastify) => {
+  forEach(
+    (schema) => fastify.addSchema(schema),
+    [...values(disclosureSchemas), ...values(controllerSchemas)]
+  );
+  fastify
+    .autoSchemaPreset({
+      tags: ['webwallet'],
+    })
+    .register(oauthPlugin, {
+      domain: fastify.config.auth0Domain,
+      audience: [fastify.config.auth0WebWalletAudience],
+    });
+};

package/src/controllers/feeds/controller.js

@@ -0,0 +1,181 @@
+const newError = require('http-errors');
+const { jwtDecode } = require('@verii/jwt');
+const {
+  VCLPresentationSubmission,
+  VCLDeepLink,
+  VCLPresentationRequestDescriptor,
+  VCLDidJwk,
+  VCLAuthTokenDescriptor,
+} = require('@verii/vnf-nodejs-wallet-sdk');
+
+/**
+ * @param {import('fastify').FastifyInstance} fastify
+ */
+const feedsController = async (fastify) => {
+  fastify.get(
+    '/',
+    {
+      preValidation: fastify.verifyAccessToken(),
+      schema: fastify.autoSchema({
+        tags: ['webwallet'],
+        response: {
+          200: {
+            $ref: 'https://velocitycareerlabs.io/webwallet-get-feeds-response.schema.json',
+          },
+          '4xx': { $ref: 'error#' },
+        },
+      }),
+    },
+    async ({ repos, user }) => {
+      const feeds = await repos.feeds.find({
+        filter: { auth0UserId: user.sub },
+      });
+
+      return feeds;
+    }
+  );
+  fastify.delete(
+    '/:feedId',
+    {
+      preValidation: fastify.verifyAccessToken(),
+      schema: fastify.autoSchema({
+        params: {
+          type: 'object',
+          properties: {
+            feedId: { type: 'string' },
+          },
+        },
+        response: {
+          204: { type: 'null' },
+        },
+      }),
+    },
+    async (req, reply) => {
+      const {
+        repos: { feeds: feedsRepo },
+        params,
+        user,
+      } = req;
+      const feed = await feedsRepo.findOne({
+        filter: { _id: params.feedId, auth0UserId: user.sub },
+      });
+
+      if (!feed) {
+        throw newError.NotFound(`Feed ${params.feedId} not found`);
+      }
+
+      await feedsRepo.update(params.feedId, {
+        revokedAt: new Date(),
+      });
+
+      reply.code(204);
+    }
+  );
+  fastify.post(
+    '/share-feed',
+    {
+      preValidation: fastify.verifyAccessToken(),
+      schema: fastify.autoSchema({
+        tags: ['webwallet'],
+        body: {
+          $ref: 'https://velocitycareerlabs.io/webwalletshare-feed-request-body.schema.json',
+        },
+        response: {
+          200: {
+            $ref: 'https://velocitycareerlabs.io/webwallet-share-feed-response.schema.json',
+          },
+          '4xx': { $ref: 'error#' },
+        },
+      }),
+    },
+    async ({
+      body,
+      vclSdk,
+      repos,
+      user,
+      config: { careerWalletAdminAccessToken },
+    }) => {
+      const { didKeyMetadatum } = await repos.accounts.findOne({
+        filter: { userId: user.sub },
+      });
+      const didJwk =
+        didKeyMetadatum &&
+        Array.isArray(didKeyMetadatum) &&
+        didKeyMetadatum.length > 0
+          ? VCLDidJwk.fromJSON(didKeyMetadatum[0])
+          : null;
+
+      const { did: userDid } = await repos.accounts.findOne({
+        filter: { userId: user.sub },
+      });
+
+      const feeds = await repos.feeds.find({
+        filter: {
+          auth0UserId: user.sub,
+        },
+      });
+
+      const disclosurePromises = feeds.map(async (feed) => {
+        const credentialsMatch = body.credentials.filter((credential) =>
+          feed.credentialTypes.includes(credential.inputDescriptor)
+        );
+        if (credentialsMatch.length === 0) {
+          return null;
+        }
+
+        const presentationRequest = await vclSdk.getPresentationRequest(
+          new VCLPresentationRequestDescriptor(
+            new VCLDeepLink(feed.deeplink),
+            null,
+            didJwk,
+            careerWalletAdminAccessToken
+          )
+        );
+
+        const { payload: presentation } = jwtDecode(
+          presentationRequest.jwt.encodedJwt
+        );
+
+        let { authToken } = feed;
+
+        const authTokenValid =
+          feed.authToken.accessToken.jwtValue.payload.exp >
+          Math.floor(Date.now() / 1000);
+
+        if (!authTokenValid) {
+          authToken = await vclSdk.getAuthToken(
+            new VCLAuthTokenDescriptor(presentationRequest),
+            feed.refreshToken
+          );
+        }
+
+        const submissionResult = await vclSdk.submitPresentation(
+          new VCLPresentationSubmission(presentationRequest, credentialsMatch),
+          authToken
+        );
+
+        const disclosure = await repos.disclosures.insert({
+          auth0UserId: user.sub,
+          userDid,
+          presentation,
+          encodedJwt: presentationRequest.jwt.encodedJwt,
+          jti: submissionResult.jti,
+          submissionId: submissionResult.submissionId,
+          presentationDefinitionId: presentation.presentation_definition.id,
+          token: submissionResult.sessionToken.value,
+          sharedCredentials: credentialsMatch.map(({ id }) => id),
+          type: body.type,
+          feed: true,
+        });
+
+        return disclosure;
+      });
+
+      const disclosures = await Promise.all(disclosurePromises);
+
+      return { disclosures };
+    }
+  );
+};
+
+module.exports = feedsController;

package/src/controllers/feeds/schemas/index.js

@@ -0,0 +1,5 @@
+module.exports = {
+  ...require('./webwallet-get-feeds-response.schema'),
+  ...require('./webwallet-share-feed-request-body.schema'),
+  ...require('./webwallet-share-feed-response-body.schema'),
+};

package/src/controllers/feeds/schemas/webwallet-get-feeds-response.schema.js

@@ -0,0 +1,39 @@
+const webWalletGetFeedsResponseSchema = {
+  $id: 'https://velocitycareerlabs.io/webwallet-get-feeds-response.schema.json',
+  title: 'webwallet-get-feeds-response',
+  description: 'an array of feed objects returned by webwallet get feeds',
+  type: 'array',
+  items: {
+    type: 'object',
+    properties: {
+      id: { type: 'string' },
+      auth0UserId: { type: 'string' },
+      authToken: { type: 'object', additionalProperties: true },
+      deeplink: { type: 'string' },
+      disclosureId: { type: 'string' },
+      inspectorDid: { type: 'string' },
+      credentialTypes: {
+        type: 'array',
+        items: { type: 'string' },
+      },
+      createdAt: { type: 'string' },
+      updatedAt: { type: 'string' },
+      revokedAt: { type: 'string' },
+    },
+    required: [
+      'auth0UserId',
+      'authToken',
+      'deeplink',
+      'disclosureId',
+      'inspectorDid',
+      'credentialTypes',
+      'createdAt',
+      'updatedAt',
+    ],
+    additionalProperties: false,
+  },
+};
+
+module.exports = {
+  webWalletGetFeedsResponseSchema,
+};

package/src/controllers/feeds/schemas/webwallet-share-feed-request-body.schema.js

@@ -0,0 +1,24 @@
+const webWalletShareFeedRequestBodySchema = {
+  $id: 'https://velocitycareerlabs.io/webwalletshare-feed-request-body.schema.json',
+  title: 'webwallet-accept-presentation-request',
+  description: 'the request schema for webwallet accept presentation request',
+  type: 'object',
+  properties: {
+    credentials: {
+      type: 'array',
+      items: {
+        type: 'object',
+        properties: {
+          id: { type: 'string' },
+          inputDescriptor: { type: 'string' },
+          jwtVc: { type: 'string' },
+        },
+      },
+    },
+  },
+  required: ['credentials'],
+};
+
+module.exports = {
+  webWalletShareFeedRequestBodySchema,
+};

package/src/controllers/feeds/schemas/webwallet-share-feed-response-body.schema.js

@@ -0,0 +1,19 @@
+const webWalletShareFeedResponseBodySchema = {
+  $id: 'https://velocitycareerlabs.io/webwallet-share-feed-response.schema.json',
+  title: 'webwallet-share-feed-response',
+  description: 'the response schema for webwallet accept presentation request',
+  type: 'object',
+  properties: {
+    disclosures: {
+      type: 'array',
+      items: {
+        $ref: 'https://velocitycareerlabs.io/webwallet-disclosure.schema.json',
+      },
+    },
+  },
+  required: ['disclosures'],
+};
+
+module.exports = {
+  webWalletShareFeedResponseBodySchema,
+};

package/src/controllers/issuing/deep-link/controller.js

@@ -9,7 +9,7 @@ const {
   VCLVerifiedProfile,
   VCLDidJwk,
 } = require('@verii/vnf-nodejs-wallet-sdk');
-const { omit, map } = require('lodash/fp');
+const { omit, map, intersection, isEmpty } = require('lodash/fp');
 const {
   loadAdditionalRenderInfo,
   getCredentialsFromOffers,
@@ -173,6 +173,11 @@ const issuingController = async (fastify) => {
         // eslint-disable-next-line no-unused-vars
         savedCredentials = await req.repos.credentials.insertMany(credentials);
       }
+      const feeds = await req.repos.feeds.find({
+        filter: {
+          auth0UserId: req.user.sub,
+        },
+      });
 
       return {
         passedCredentials:
@@ -180,6 +185,7 @@ const issuingController = async (fastify) => {
             (credential) => ({
               ...omit(['_id'], credential),
               id: credential._id,
+              feed: shouldShareViaFeeds(feeds, credential.type),
             }),
             savedCredentials
           ) || [],
@@ -195,6 +201,12 @@ const issuingController = async (fastify) => {
       ? VCLDidJwk.fromJSON(account.didKeyMetadatum[0])
       : null;
   };
+
+  const shouldShareViaFeeds = (feeds, credentialType) =>
+    feeds.some(
+      ({ credentialTypes }) =>
+        !isEmpty(intersection(credentialTypes, credentialType))
+    );
 };
 
 module.exports = issuingController;

package/src/entities/disclosures/repos/disclosures.repo.js

@@ -21,6 +21,7 @@ module.exports = (app, _, next = () => {}) => {
         token: 1,
         sharedCredentials: 1,
         type: 1,
+        feed: 1,
         createdAt: 1,
         updatedAt: 1,
         deletedAt: 1,

package/src/entities/disclosures/schemas/webwallet-disclosure.schema.js

@@ -18,6 +18,7 @@ const webWalletDisclosureSchema = {
       items: { type: 'string' },
     },
     type: { type: 'string', enum: ['public', 'linkedin'] },
+    feed: { type: 'boolean' },
     createdAt: { type: 'string' },
     updatedAt: { type: 'string' },
   },

package/src/entities/disclosures/schemas/webwallet-presentation-request.schema.js

@@ -64,6 +64,9 @@ const webWalletPresentationRequestSchema = {
         },
         progress_uri: { type: 'string', format: 'uri' },
         submit_presentation_uri: { type: 'string', format: 'uri' },
+        feed: {
+          type: 'boolean',
+        },
       },
       required: ['client_name', 'logo_uri', 'tos_uri'],
     },

package/src/entities/feeds/index.js

@@ -0,0 +1,4 @@
+module.exports = {
+  feedsRepoPlugin: require('./repos/feeds.repo'),
+  ...require('./schemas'),
+};

package/src/entities/feeds/repos/feeds.repo.js

@@ -0,0 +1,40 @@
+const {
+  autoboxIdsExtension,
+  repoFactory,
+} = require('@spencejs/spence-mongo-repos');
+
+module.exports = (app, _, next = () => {}) => {
+  next();
+  return repoFactory(
+    {
+      name: 'feeds',
+      entityName: 'feeds',
+      defaultProjection: {
+        _id: 1,
+        auth0UserId: 1,
+        authToken: 1,
+        deeplink: 1,
+        disclosureId: 1,
+        inspectorDid: 1,
+        credentialTypes: 1,
+        createdAt: 1,
+        updatedAt: 1,
+        revokedAt: 1,
+      },
+      extensions: [autoboxIdsExtension, filterRevokedFeedsExtension],
+    },
+    app
+  );
+};
+
+const filterRevokedFeedsExtension = (parent) => {
+  return {
+    prepFilter: (filter) => {
+      return parent.prepFilter({
+        ...filter,
+        revokedAt: filter.revokedAt ?? { $exists: false },
+      });
+    },
+    extensions: parent.extensions.concat(['filterRevokedFeedsExtension']),
+  };
+};

package/src/entities/feeds/repos/index.js

@@ -0,0 +1,3 @@
+module.exports = {
+  ...require('./feeds.repo'),
+};

package/src/entities/feeds/schemas/index.js

@@ -0,0 +1,3 @@
+module.exports = {
+  ...require('./webwallet-feed.schema'),
+};

package/src/entities/feeds/schemas/webwallet-feed.schema.js

@@ -0,0 +1,39 @@
+const webWalletFeedSchema = {
+  $id: 'https://velocitycareerlabs.io/webwallet-feed.schema.json',
+  title: 'webwallet-feed',
+  description: 'The schema of the accepted feed',
+  type: 'object',
+  properties: {
+    id: { type: 'string' },
+    auth0UserId: {
+      type: 'string',
+    },
+    authToken: { type: 'object', additionalProperties: true },
+    deeplink: { type: 'string' },
+    disclosureId: { type: 'string' },
+    inspectorDid: { type: 'string' },
+    credentialTypes: {
+      type: 'array',
+      items: { type: 'string' },
+    },
+    createdAt: { type: 'string' },
+    updatedAt: { type: 'string' },
+    revokedAt: { type: 'string' },
+  },
+  required: [
+    'id',
+    'auth0UserId',
+    'authToken',
+    'deeplink',
+    'disclosureId',
+    'inspectorDid',
+    'credentialTypes',
+    'createdAt',
+    'updatedAt',
+  ],
+  additionalProperties: true,
+};
+
+module.exports = {
+  webWalletFeedSchema,
+};

package/src/entities/index.js

@@ -3,4 +3,5 @@ module.exports = {
   ...require('./credentials'),
   ...require('./disclosures'),
   ...require('./issuing'),
+  ...require('./feeds'),
 };

package/test/disclosures-controller/disclosure-credentials.test.js

@@ -32,7 +32,11 @@ jest.mock('@verii/vnf-nodejs-wallet-sdk', () => {
           .fn()
           .mockResolvedValue(getCredentialManifestMock),
         submitPresentation: jest.fn().mockResolvedValue(submissionResultMock),
-        getAuthToken: jest.fn(),
+        getAuthToken: jest.fn().mockResolvedValue({
+          value: 'mock_auth_token',
+          accessToken: { value: 'mock_access_token' },
+          refreshToken: { value: 'mock_refresh_token' },
+        }),
       }),
     },
   };
@@ -77,6 +81,7 @@ describe('Test disclosure credentials controller', () => {
     nock.cleanAll();
     jest.clearAllMocks();
     await mongoDb().collection('disclosures').deleteMany();
+    await mongoDb().collection('feeds').deleteMany();
   });
 
   afterAll(async () => {
@@ -99,8 +104,8 @@ describe('Test disclosure credentials controller', () => {
 
       expect(response.statusCode).toBe(200);
 
-      expect(vclSdk.getPresentationRequest).toBeCalledTimes(1);
-      expect(vclSdk.getPresentationRequest).toBeCalledWith(
+      expect(vclSdk.getPresentationRequest).toHaveBeenCalledTimes(1);
+      expect(vclSdk.getPresentationRequest).toHaveBeenCalledWith(
         new VCLPresentationRequestDescriptor(
           new VCLDeepLink(inspectionDeepLink)
         )
@@ -188,8 +193,8 @@ describe('Test disclosure credentials controller', () => {
 
       expect(response.statusCode).toBe(200);
 
-      expect(vclSdk.getPresentationRequest).toBeCalledTimes(1);
-      expect(vclSdk.getPresentationRequest).toBeCalledWith(
+      expect(vclSdk.getPresentationRequest).toHaveBeenCalledTimes(1);
+      expect(vclSdk.getPresentationRequest).toHaveBeenCalledWith(
         new VCLPresentationRequestDescriptor(
           new VCLDeepLink(inspectionDeepLink),
           null,
@@ -202,8 +207,8 @@ describe('Test disclosure credentials controller', () => {
         presentationRequestMock.jwt.encodedJwt
       );
 
-      expect(vclSdk.submitPresentation).toBeCalledTimes(1);
-      expect(vclSdk.submitPresentation).toBeCalledWith(
+      expect(vclSdk.submitPresentation).toHaveBeenCalledTimes(1);
+      expect(vclSdk.submitPresentation).toHaveBeenCalledWith(
         expect.objectContaining({
           exchangeId: submissionResultMock.exchange.id,
           submitUri: presentationSubmissionMock.submitUri,
@@ -247,6 +252,81 @@ describe('Test disclosure credentials controller', () => {
       }).toEqual(response.json);
     });
 
+    it('should accept presentation and create feed when disclosure has feed', async () => {
+      const presentationRequestFeedMock = {
+        ...require('./mocks').presentationRequestMock,
+        feed: true,
+      };
+
+      vclSdk.getPresentationRequest.mockResolvedValueOnce(
+        presentationRequestFeedMock
+      );
+
+      const response = await fastify.injectJson({
+        method: 'POST',
+        url: '/disclosures/accept-presentation-request',
+        payload: {
+          link: inspectionDeepLink,
+          credentials: [
+            {
+              id: 'credential_id_feed',
+              inputDescriptor: 'EducationDegreeGraduationV1.1',
+              jwtVc: CredentialMocks.JwtCredentialEmail,
+            },
+          ],
+        },
+        headers: {
+          authorization: `Bearer ${idToken}`,
+        },
+      });
+
+      expect(response.statusCode).toBe(200);
+
+      expect(vclSdk.getAuthToken).toHaveBeenCalledTimes(1);
+
+      const savedDisclosure = await mongoDb()
+        .collection('disclosures')
+        .findOne();
+
+      expect(savedDisclosure).toEqual({
+        _id: expect.any(ObjectId),
+        auth0UserId: userId,
+        userDid: did,
+        presentation: expect.any(Object),
+        encodedJwt: presentationRequestFeedMock.jwt.encodedJwt,
+        jti: submissionResultMock.jti,
+        submissionId: submissionResultMock.submissionId,
+        presentationDefinitionId: expect.any(String),
+        token: submissionResultMock.sessionToken.value,
+        sharedCredentials: ['credential_id_feed'],
+        createdAt: expect.any(Date),
+        updatedAt: expect.any(Date),
+      });
+
+      const savedFeed = await mongoDb().collection('feeds').findOne();
+
+      expect(savedFeed).toEqual({
+        _id: expect.any(ObjectId),
+        auth0UserId: userId,
+        authToken: expect.any(Object),
+        deeplink: inspectionDeepLink,
+        disclosureId: expect.any(String),
+        inspectorDid: expect.any(String),
+        credentialTypes: expect.any(Array),
+        createdAt: expect.any(Date),
+        updatedAt: expect.any(Date),
+      });
+
+      expect(response.json).toEqual({
+        disclosure: {
+          ...omit(['_id', 'auth0UserId', 'userDid'], savedDisclosure),
+          id: savedDisclosure._id.toString(),
+          updatedAt: savedDisclosure.updatedAt.toISOString(),
+          createdAt: savedDisclosure.createdAt.toISOString(),
+        },
+      });
+    });
+
     it('should return 401 if no access token is provided', async () => {
       const response = await fastify.injectJson({
         method: 'POST',

package/test/factories/feeds.js

@@ -0,0 +1,96 @@
+/* eslint-disable max-len */
+const { register } = require('@spencejs/spence-factories');
+const { feedsRepoPlugin } = require('../../src/entities/feeds');
+
+module.exports = (app) => {
+  return register(
+    'feeds',
+    feedsRepoPlugin(app)({ config: app.config }),
+    async (overrides) => {
+      return {
+        auth0UserId: 'auth0|6798e0e98aea20c2a606d1ca',
+        authToken: {
+          payload: {
+            access_token:
+              'eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NksiLCJraWQiOiIjZXhjaGFuZ2Uta2V5LTEifQ.eyJuYmYiOjE3NTI0OTAyMDksImp0aSI6IlJGYXR4Z1VCN2hqOEJrbmxYSXpjRyIsImlzcyI6ImRpZDp3ZWI6ZGV2cmVnaXN0cmFyLnZlbG9jaXR5bmV0d29yay5mb3VuZGF0aW9uOmQ6d3d3LnVtYXNzLmVkdSIsImF1ZCI6ImRpZDp3ZWI6ZGV2cmVnaXN0cmFyLnZlbG9jaXR5bmV0d29yay5mb3VuZGF0aW9uOmQ6d3d3LnVtYXNzLmVkdSIsImV4cCI6MTc1MzA5NTAwOSwic3ViIjoiNjM4NmY4MjRlNzc0Nzg5YzQwM2M5NmEwIiwiaWF0IjoxNzUyNDkwMjA5fQ.ajqMpwmuIWzgHN-RsMpp7MFSA9EHVPtYST68TTexUCfGthX2oX-ocT2j0SrKJO931OH4DyXzDzAE6oZGrAtCnw',
+            token_type: 'Bearer',
+            refresh_token:
+              '211c1835e9845272f85bff7b2d3700f10e6dcedf926688bcea9b356059aeb99078d8155aca156df6a059d5b88ae66fdd6a979dd04767b120e3f94eb28352703e',
+          },
+          authTokenUri:
+            'https://devagent.velocitycareerlabs.io/api/holder/v0.6/org/did:web:devregistrar.velocitynetwork.foundation:d:www.umass.edu/oauth/token',
+          walletDid:
+            'did:jwk:eyJjcnYiOiJzZWNwMjU2azEiLCJrdHkiOiJFQyIsIngiOiJCbnhJcVBBUFB5RTNOVTJEejhaUnhIQUhIQW9aWmFUem95Ry1ONW1va2pjIiwieSI6ImQ3aEhUNlNqbVdOYkdpYnhzVnI3UThEVU1sbVNSY245bGFyUG04R3haTXMifQ',
+          relyingPartyDid:
+            'did:web:devregistrar.velocitynetwork.foundation:d:www.umass.edu',
+          accessToken: {
+            value:
+              'eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NksiLCJraWQiOiIjZXhjaGFuZ2Uta2V5LTEifQ.eyJuYmYiOjE3NTI0OTAyMDksImp0aSI6IlJGYXR4Z1VCN2hqOEJrbmxYSXpjRyIsImlzcyI6ImRpZDp3ZWI6ZGV2cmVnaXN0cmFyLnZlbG9jaXR5bmV0d29yay5mb3VuZGF0aW9uOmQ6d3d3LnVtYXNzLmVkdSIsImF1ZCI6ImRpZDp3ZWI6ZGV2cmVnaXN0cmFyLnZlbG9jaXR5bmV0d29yay5mb3VuZGF0aW9uOmQ6d3d3LnVtYXNzLmVkdSIsImV4cCI6MTc1MzA5NTAwOSwic3ViIjoiNjM4NmY4MjRlNzc0Nzg5YzQwM2M5NmEwIiwiaWF0IjoxNzUyNDkwMjA5fQ.ajqMpwmuIWzgHN-RsMpp7MFSA9EHVPtYST68TTexUCfGthX2oX-ocT2j0SrKJO931OH4DyXzDzAE6oZGrAtCnw',
+            jwtValue: {
+              signedJwt: {
+                header:
+                  'eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NksiLCJraWQiOiIjZXhjaGFuZ2Uta2V5LTEifQ',
+                payload:
+                  'eyJuYmYiOjE3NTI0OTAyMDksImp0aSI6IlJGYXR4Z1VCN2hqOEJrbmxYSXpjRyIsImlzcyI6ImRpZDp3ZWI6ZGV2cmVnaXN0cmFyLnZlbG9jaXR5bmV0d29yay5mb3VuZGF0aW9uOmQ6d3d3LnVtYXNzLmVkdSIsImF1ZCI6ImRpZDp3ZWI6ZGV2cmVnaXN0cmFyLnZlbG9jaXR5bmV0d29yay5mb3VuZGF0aW9uOmQ6d3d3LnVtYXNzLmVkdSIsImV4cCI6MTc1MzA5NTAwOSwic3ViIjoiNjM4NmY4MjRlNzc0Nzg5YzQwM2M5NmEwIiwiaWF0IjoxNzUyNDkwMjA5fQ',
+                signature:
+                  'ajqMpwmuIWzgHN-RsMpp7MFSA9EHVPtYST68TTexUCfGthX2oX-ocT2j0SrKJO931OH4DyXzDzAE6oZGrAtCnw',
+              },
+              encodedJwt:
+                'eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NksiLCJraWQiOiIjZXhjaGFuZ2Uta2V5LTEifQ.eyJuYmYiOjE3NTI0OTAyMDksImp0aSI6IlJGYXR4Z1VCN2hqOEJrbmxYSXpjRyIsImlzcyI6ImRpZDp3ZWI6ZGV2cmVnaXN0cmFyLnZlbG9jaXR5bmV0d29yay5mb3VuZGF0aW9uOmQ6d3d3LnVtYXNzLmVkdSIsImF1ZCI6ImRpZDp3ZWI6ZGV2cmVnaXN0cmFyLnZlbG9jaXR5bmV0d29yay5mb3VuZGF0aW9uOmQ6d3d3LnVtYXNzLmVkdSIsImV4cCI6MTc1MzA5NTAwOSwic3ViIjoiNjM4NmY4MjRlNzc0Nzg5YzQwM2M5NmEwIiwiaWF0IjoxNzUyNDkwMjA5fQ.ajqMpwmuIWzgHN-RsMpp7MFSA9EHVPtYST68TTexUCfGthX2oX-ocT2j0SrKJO931OH4DyXzDzAE6oZGrAtCnw',
+              header: {
+                typ: 'JWT',
+                alg: 'ES256K',
+                kid: '#exchange-key-1',
+              },
+              payload: {
+                nbf: 1752490209,
+                jti: 'RFatxgUB7hj8BknlXIzcG',
+                iss: 'did:web:devregistrar.velocitynetwork.foundation:d:www.umass.edu',
+                aud: 'did:web:devregistrar.velocitynetwork.foundation:d:www.umass.edu',
+                exp: 1753095009,
+                sub: '6386f824e774789c403c96a0',
+                iat: 1752490209,
+              },
+              signature:
+                'ajqMpwmuIWzgHN-RsMpp7MFSA9EHVPtYST68TTexUCfGthX2oX-ocT2j0SrKJO931OH4DyXzDzAE6oZGrAtCnw',
+            },
+          },
+          refreshToken: {
+            value:
+              '211c1835e9845272f85bff7b2d3700f10e6dcedf926688bcea9b356059aeb99078d8155aca156df6a059d5b88ae66fdd6a979dd04767b120e3f94eb28352703e',
+            jwtValue: {
+              signedJwt: {
+                header: '',
+                payload: '',
+                signature: '',
+              },
+              encodedJwt: '',
+              header: {},
+              payload: {},
+              signature: '',
+            },
+          },
+          tokenType: 'Bearer',
+        },
+        deeplink:
+          'velocity-network-devnet://inspect?request_uri=https://devagent.velocitycareerlabs.io/api/holder/v0.6/org/did:web:devregistrar.velocitynetwork.foundation:d:www.umass.edu/inspect/get-presentation-request?id=68736ac609c41e44796d040e%26inspectorDid%3Ddid%3Aweb%3Adevregistrar.velocitynetwork.foundation%3Ad%3Awww.umass.edu%26vendorOriginContext%3DAdam',
+        disclosureId: '68736ac609c41e44796d040e',
+        inspectorDid:
+          'did:web:devregistrar.velocitynetwork.foundation:d:www.umass.edu',
+        credentialTypes: [
+          'CertificationV1.1',
+          'LicenseV1.1',
+          'AssessmentV1.1',
+          'OpenBadgeCredential',
+        ],
+        createdAt: {
+          $date: '2025-07-14T10:52:35.522Z',
+        },
+        updatedAt: {
+          $date: '2025-07-14T10:52:35.522Z',
+        },
+        ...overrides(),
+      };
+    }
+  );
+};

package/test/feeds-controller.test.js

@@ -0,0 +1,124 @@
+const { mongoDb } = require('@spencejs/spence-mongo-repos');
+const nock = require('nock');
+const buildFastify = require('./helpers/webwallet-build-fastify');
+const initFeedsFactory = require('./factories/feeds');
+
+const auth0Token =
+  // eslint-disable-next-line max-len
+  'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IktFWSJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWUsImlzcyI6Imh0dHBzOi8vbG9jYWxob3N0LyIsImF1ZCI6ImZvbyIsInNjb3BlIjoicmVhZDp1c2VycyJ9.VwIIUqx9T-AxqbfL_FyNRAeOxTwiC2JpcwtrqnEWN3DdF07ijUkF1WYy8Ahfr_p4R3KnoPbiefZnIbVANCt-lt0ej32rfil2yHhQEsvFxSOjcrx6ARmPp0YAfWlN-5Sotzkxy29jaOZMEDkmRFZg3jkdC7wosPW_S6M-olC4g3HHfylpZI8O3Jdd87Qr9wD_QtUzANwnPbl2Q-9NEyxVjAZIWg_HWK9JAAaf_2IY5VwHBvyp0oeQSEHKi4hogcM59EOc4FxdR5WH45B_PenVa6W4mHFBkH8sAXxt2Zs9s2efujkfWYfyXvgL_lN7vT-TEADlAPP2L6CpWpDISOMsQWUSgGHcN_KwRh_E7qJwahR6mv4QHY6ReEoyjkmSS3swrD1l74jNs7QLAdsMywvzCMDsHabs7DYcEMGQBdP14PJ_ucLFnkivZeBDAc6sS445ocbyrpyO40XMaMorD5khRd9ej89SxR7d_v0W6Ne2Nn4XgW3pAZzu5Rdc4JvqfzLFxkp95jxy1MTAddjWISPmNOYYyXHM9SSqSpqVECOFS0f4z2zycHRqXUcOytWrvED6VGo9x7-IVCgu8vFzj0zToIWQmsDs3UoH9RnV12z0PMwGXQzca1lT_zGwJxBF3e4zJjmcJ05OMF2JgZ2_G48O3M4Dtb0jlgWbKLd0kWlIFzQ;';
+
+const auth0UserId = '1234567890';
+
+jest.mock('@verii/vnf-nodejs-wallet-sdk', () => {
+  const originalModule = jest.requireActual('@verii/vnf-nodejs-wallet-sdk');
+  return {
+    ...originalModule,
+    VCLProvider: {
+      getInstance: jest.fn().mockReturnValue({
+        initialize: jest.fn().mockResolvedValue(null),
+      }),
+    },
+  };
+});
+describe('Feeds Controller', () => {
+  let fastify;
+  let persistFeeds;
+
+  beforeAll(async () => {
+    fastify = buildFastify();
+    nock('https://localhost/').get('/.well-known/jwks.json').reply(200, jwks);
+    await fastify.ready();
+    await mongoDb().collection('feeds').deleteMany({});
+    ({ persistFeeds } = initFeedsFactory(fastify));
+  });
+
+  afterEach(async () => {
+    nock.cleanAll();
+    await mongoDb().collection('feeds').deleteMany({});
+  });
+
+  afterAll(async () => {
+    nock.restore();
+    await fastify.close();
+  });
+
+  describe('getFeeds', () => {
+    it('should return list of feeds on success', async () => {
+      await persistFeeds({
+        auth0UserId,
+      });
+
+      const response = await fastify.inject({
+        method: 'GET',
+        url: '/feeds',
+        headers: {
+          authorization: `Bearer ${auth0Token}`,
+        },
+      });
+
+      expect(response.statusCode).toBe(200);
+      expect(response.json()).toHaveLength(1);
+    });
+  });
+
+  describe('deleteFeed', () => {
+    it('should delete feed when exists', async () => {
+      const feed = await persistFeeds({
+        auth0UserId,
+      });
+
+      const response = await fastify.inject({
+        method: 'DELETE',
+        url: `/feeds/${feed._id}`,
+        headers: {
+          authorization: `Bearer ${auth0Token}`,
+        },
+      });
+
+      expect(response.statusCode).toBe(204);
+    });
+  });
+});
+
+const jwks = {
+  keys: [
+    {
+      alg: 'RS512',
+      kid: 'KEY',
+      x5c: ['UNUSED'],
+    },
+    {
+      alg: 'RS256',
+      kid: 'KEY',
+      x5c: [
+        `
+      MIIEnjCCAoYCCQDmnGII6qzGlTANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZ1
+      bnVzZWQwHhcNMjEwOTE5MDcxODQ2WhcNMjExMDE5MDcxODQ2WjARMQ8wDQYDVQQD
+      DAZ1bnVzZWQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDY2acJ8JAH
+      XjK8j3sAXOokSWwvaEg65UJS0C7KdnfbLTeaeYFHBRY0v9Jkk/PJSXv9hMWw1aD3
+      n7NrhVwXeRXi/7VZuW/S4ek+hK+IMDvpKqzn+XeCpaMoRpAgloADeNY0qhYKxpr2
+      L0SmRQDwVy1r/g31ECewD2WpEiRSmXsQ2Q2uYT3V60BmbhUw31KGEr4SLXL9pzmb
+      arOH/5Rhqg+YFMywNY6i01S3UdOlUtAyWT/mVRAkVTsUEou9tBw61zputPdMrl7p
+      d4InmlfCmXNTPFh9EDczPQiAVPq8MDyEdRGP134+HM9+YgQUZjy+WsxmGEvplJIf
+      KrYtlWe11//oAXC3690LUYtvg49lNY4+H0/nngjnCDXkZo6f+PEvnBZfYl596VTV
+      Fx4FGNOqLwg4bAyE5j5jXtEGW1oKo1pxBg7Oe3MteQUDwMrONB3CbxdxDiN3YH94
+      2nWGW9Le+CeA1QUhfjQqSoZRJURGYGoztVuIXOElnkrgwcJreX4b8y+Uo5kpp2By
+      6UUaD/mMj9XQ+Ygp/J8DlJlqDXOIp6JUJ75aSK5ZIjRtWq/Go5RUjW9IW0ldEehh
+      /4j0ZWC0vR1/le2UmAE6tXhkH4sdx9JM84V+qRzjiGqQx3Wn00uwMiHHhte17t41
+      vk+b75wuHbfiq9R8irL6wqWeeuzvCC37NwIDAQABMA0GCSqGSIb3DQEBCwUAA4IC
+      AQCZOT6S5HLUp0gBtWK6Fxyzb9lWPE+AJipjJ80lS3OnaOIyVtyJexJ2BjTKWldJ
+      48zkzLNIRsTEGEipNS6NkrkElfmoaNBpdbDch2WBkME3UYlFIR9GgbXPMlACQlwJ
+      f4qT3iIZ9zjpVMP8F63TzRRr7KEYW2PGHEtVQktMPprGEfU4Sz0OIa9RRV+BLsfh
+      x8he2pimJEzoEaWPgyJXV1S+tLUif8A/CEkZVRZ2vADA7WMGl2ZTdbmsTjXh4bf2
+      A4l4Zec+jwOjUPiEk5lLJwv1KeYos9wuUczAk7ku8wRzyZbrjwgRam9VQA5qmRzJ
+      PegEQwJaKMRu8PPK0L4KFN4v3ma7Ux6D719nko8mZ0kA2oUs6phsFmoWQfsbRbsD
+      CdUGnM2fPp6V285r9w9Y6+1nVdtJpbAPFJR3SxIpfYVfx3tI6C3BR9bIMr8uCf81
+      G+Ebvo4qTuY6Cg/mTpPLZ4cKpwSvB6cE+xeSHvKIRYm6QUYEReRxQ3b4aUKBSNwl
+      FEQufVGhGzeblNC3fjP+mMtqbyC8c1zkHc6tjJYO5yesKf8bjO71by2jgSced7nN
+      5JvJawfEcabgHJ1aAFLj0tlPMrViFzu6y8/A5aZLc5UMISXAZXfB4wIEdyUUXJh4
+      rJKE/ZCb2+W8g29N5cv2P6nhahT3mYatMiQ0U/gfaIrA0A==
+              `.trim(),
+      ],
+    },
+  ],
+};

package/test/issuing-controller/issuing-by-deeplink.test.js

@@ -310,6 +310,7 @@ describe('Test Deep Link issuing controller', () => {
       expect({
         ...omit(['_id'], savedCredential),
         id: savedCredential._id.toHexString(),
+        feed: false,
         updatedAt: savedCredential.updatedAt.toISOString(),
         createdAt: savedCredential.createdAt.toISOString(),
       }).toEqual(mockParsedResponse.passedCredentials[0]);

package/test/issuing-controller/mocks/accept-offers-response.js

@@ -59,6 +59,7 @@ const mockParsedResponse = {
       vnfProtocolVersion: 1,
       encodedCredential:
         mockAcceptedCredentials.passedCredentials[0].encodedJwt,
+      feed: false,
     },
   ],
   failedCredentials: [],