@zkpassport/sdk 0.1.2 → 0.2.1

package/src/index.ts

@@ -1,21 +1,44 @@
 import { randomBytes } from 'crypto'
 import { Alpha3Code, getAlpha3Code, registerLocale } from 'i18n-iso-countries'
 import {
-  DisclosableIDCredential,
-  IDCredential,
-  IDCredentialConfig,
-  IDCredentialValue,
-  NumericalIDCredential,
-} from './types/credentials'
-import { ProofResult } from './types/query-result'
-import { CountryName } from './types/countries'
-//import { UltraHonkBackend, ProofData, CompiledCircuit } from '@noir-lang/backend_barretenberg'
+  type DisclosableIDCredential,
+  type IDCredential,
+  type IDCredentialConfig,
+  type IDCredentialValue,
+  type NumericalIDCredential,
+  type ProofResult,
+  type QueryResult,
+  type CountryName,
+  type JsonRpcRequest,
+  getProofData,
+  getCommitmentFromDSCProof,
+  getCommitmentInFromIDDataProof,
+  getCommitmentOutFromIDDataProof,
+  getNullifierFromDisclosureProof,
+  getCommitmentInFromIntegrityProof,
+  getCommitmentOutFromIntegrityProof,
+  getCommitmentInFromDisclosureProof,
+  getMerkleRootFromDSCProof,
+  getCurrentDateFromIntegrityProof,
+  getMaxAgeFromProof,
+  getMinAgeFromProof,
+  getCurrentDateFromAgeProof,
+  getMinDateFromProof,
+  getMaxDateFromProof,
+  getCountryListFromExclusionProof,
+  getCountryListFromInclusionProof,
+  DisclosedData,
+  formatName,
+  getHostedPackagedCircuitByName,
+} from '@zkpassport/utils'
 import { bytesToHex } from '@noble/ciphers/utils'
 import { getWebSocketClient, WebSocketClient } from './websocket'
 import { createEncryptedJsonRpcRequest } from './json-rpc'
 import { decrypt, generateECDHKeyPair, getSharedSecret } from './encryption'
-import { JsonRpcRequest } from './types/json-rpc'
 import logger from './logger'
+import { ungzip } from 'node-gzip'
+//import initNoirC from '@noir-lang/noirc_abi'
+//import initACVM from '@noir-lang/acvm_js'
 
 registerLocale(require('i18n-iso-countries/langs/en.json'))
 
@@ -64,24 +87,178 @@ function generalCompare(
   }
 }
 
-export * from './constants'
-export * from './types'
+export type * from '@zkpassport/utils'
+export {
+  SANCTIONED_COUNTRIES,
+  EU_COUNTRIES,
+  EEA_COUNTRIES,
+  SCHENGEN_COUNTRIES,
+  ASEAN_COUNTRIES,
+  MERCOSUR_COUNTRIES,
+} from '@zkpassport/utils'
 
-export class ZkPassport {
+export type QueryBuilderResult = {
+  /**
+   * The URL of the request.
+   *
+   * You can either encode the URL in a QR code or let the user click the link
+   * to this URL on your website if they're visiting your website on their phone.
+   */
+  url: string
+  /**
+   * The id of the request.
+   */
+  requestId: string
+  /**
+   * Called when the user has scanned the QR code or clicked the link to the request.
+   *
+   * This means the user is currently viewing the request popup with your website information
+   * and the information requested from them.
+   */
+  onRequestReceived: (callback: () => void) => void
+  /**
+   * Called when the user has accepted the request and
+   * started to generate the proof on their phone.
+   */
+  onGeneratingProof: (callback: () => void) => void
+  /**
+   * Called when the SDK successfully connects to the bridge with the mobile app.
+   */
+  onBridgeConnect: (callback: () => void) => void
+  /**
+   * Called when the user has generated a proof.
+   *
+   * There is a minimum of 4 proofs, but there can be more depending
+   * on the type of information requested from the user.
+   */
+  onProofGenerated: (callback: (proof: ProofResult) => void) => void
+  /**
+   * Called when the user has sent the query result.
+   *
+   * The response contains the unique identifier associated to the user,
+   * your domain name and chosen scope, along with the query result and whether
+   * the proofs were successfully verified.
+   */
+  onResult: (
+    callback: (response: {
+      uniqueIdentifier: string | undefined
+      verified: boolean
+      result: QueryResult
+    }) => void,
+  ) => void
+  /**
+   * Called when the user has rejected the request.
+   */
+  onReject: (callback: () => void) => void
+  /**
+   * Called when an error occurs, such as one of the requirements not being met
+   * or a proof failing to be generated.
+   */
+  onError: (callback: (error: string) => void) => void
+  /**
+   * @returns true if the bridge with the mobile app is connected
+   */
+  isBridgeConnected: () => boolean
+  /**
+   * Get if the user has scanned the QR code or the link to this request
+   * @returns true if the request has been received by the user on their phone
+   */
+  requestReceived: () => boolean
+}
+
+export type QueryBuilder = {
+  /**
+   * Requires this attribute to be equal to the provided value.
+   * @param key The attribute to compare.
+   * @param value The value of the attribute you require.
+   */
+  eq: <T extends IDCredential>(key: T, value: IDCredentialValue<T>) => QueryBuilder
+  /**
+   * Requires this attribute to be greater than or equal to the provided value.
+   * @param key The attribute to compare.
+   * @param value The value of the attribute you require.
+   */
+  gte: <T extends NumericalIDCredential>(key: T, value: IDCredentialValue<T>) => QueryBuilder
+  /**
+   * Requires this attribute to be less than or equal to the provided value.
+   * @param key The attribute to compare.
+   * @param value The value of the attribute you require.
+   */
+  lte: <T extends 'birthdate' | 'expiry_date'>(key: T, value: IDCredentialValue<T>) => QueryBuilder
+  /**
+   * Requires this attribute to be less than the provided value.
+   * @param key The attribute to compare.
+   * @param value The value of the attribute you require.
+   */
+  lt: <T extends 'age'>(key: T, value: IDCredentialValue<T>) => QueryBuilder
+  /**
+   * Requires this attribute to be included in the provided range.
+   * @param key The attribute to compare.
+   * @param start The start of the range.
+   * @param end The end of the range.
+   */
+  range: <T extends NumericalIDCredential>(
+    key: T,
+    start: IDCredentialValue<T>,
+    end: IDCredentialValue<T>,
+  ) => QueryBuilder
+  /**
+   * Requires this attribute to be included in the provided list.
+   * @param key The attribute to compare.
+   * @param value The list of values to check inclusion against.
+   */
+  in: <T extends 'nationality'>(key: T, value: IDCredentialValue<T>[]) => QueryBuilder
+  /**
+   * Requires this attribute to be excluded from the provided list.
+   * @param key The attribute to compare.
+   * @param value The list of values to check exclusion against.
+   */
+  out: <T extends 'nationality'>(key: T, value: IDCredentialValue<T>[]) => QueryBuilder
+  /**
+   * Requires this attribute to be disclosed.
+   * @param key The attribute to disclose.
+   */
+  disclose: (key: DisclosableIDCredential) => QueryBuilder
+  /**
+   * Builds the request.
+   *
+   * This will return the URL of the request, which you can either encode in a QR code
+   * or provide as a link to the user if they're visiting your website on their phone.
+   * It also returns all the callbacks you can use to handle the user's response.
+   */
+  done: () => QueryBuilderResult
+}
+
+export class ZKPassport {
   private domain: string
   private topicToConfig: Record<string, Record<string, IDCredentialConfig>> = {}
   private topicToKeyPair: Record<string, { privateKey: Uint8Array; publicKey: Uint8Array }> = {}
   private topicToWebSocketClient: Record<string, WebSocketClient> = {}
   private topicToSharedSecret: Record<string, Uint8Array> = {}
-  private topicToQRCodeScanned: Record<string, boolean> = {}
+  private topicToRequestReceived: Record<string, boolean> = {}
+  private topicToService: Record<
+    string,
+    { name: string; logo: string; purpose: string; scope?: string }
+  > = {}
+  private topicToProofs: Record<string, Array<ProofResult>> = {}
 
-  private onQRCodeScannedCallbacks: Record<string, Array<() => void>> = {}
+  private onRequestReceivedCallbacks: Record<string, Array<() => void>> = {}
   private onGeneratingProofCallbacks: Record<string, Array<(topic: string) => void>> = {}
   private onBridgeConnectCallbacks: Record<string, Array<() => void>> = {}
-  private onProofGeneratedCallbacks: Record<string, Array<(result: ProofResult) => void>> = {}
+  private onProofGeneratedCallbacks: Record<string, Array<(proof: ProofResult) => void>> = {}
+  private onResultCallbacks: Record<
+    string,
+    Array<
+      (response: {
+        uniqueIdentifier: string | undefined
+        verified: boolean
+        result: QueryResult
+      }) => void
+    >
+  > = {}
   private onRejectCallbacks: Record<string, Array<() => void>> = {}
   private onErrorCallbacks: Record<string, Array<(topic: string) => void>> = {}
-  private topicToService: Record<string, { name: string; logo: string; purpose: string }> = {}
+  //private wasmVerifierInit: boolean = false
 
   constructor(_domain?: string) {
     if (!_domain && typeof window === 'undefined') {
@@ -90,12 +267,23 @@ export class ZkPassport {
     this.domain = _domain || window.location.hostname
   }
 
+  /*private async initWasmVerifier() {
+    const acvm = await import('@noir-lang/acvm_js/web/acvm_js_bg.wasm')
+    const noirc = await import('@noir-lang/noirc_abi/web/noirc_abi_wasm_bg.wasm')
+    await Promise.all([initACVM(acvm), initNoirC(noirc)])
+    this.wasmVerifierInit = true
+  }*/
+
   /**
    * @notice Handle an encrypted message.
    * @param request The request.
    * @param outerRequest The outer request.
    */
-  private async handleEncryptedMessage(topic: string, request: JsonRpcRequest, outerRequest: JsonRpcRequest) {
+  private async handleEncryptedMessage(
+    topic: string,
+    request: JsonRpcRequest,
+    outerRequest: JsonRpcRequest,
+  ) {
     logger.debug('Received encrypted message:', request)
     if (request.method === 'accept') {
       logger.debug(`User accepted the request and is generating a proof`)
@@ -103,15 +291,50 @@ export class ZkPassport {
     } else if (request.method === 'reject') {
       logger.debug(`User rejected the request`)
       await Promise.all(this.onRejectCallbacks[topic].map((callback) => callback()))
-    } else if (request.method === 'done') {
+    } else if (request.method === 'proof') {
       logger.debug(`User generated proof`)
-      await Promise.all(this.onProofGeneratedCallbacks[topic].map((callback) => callback(request.params.result)))
+      // Uncompress the proof and convert it to a hex string
+      const bytesProof = Buffer.from(request.params.proof, 'base64')
+      const uncompressedProof = await ungzip(bytesProof)
+      // The gzip lib in the app compress the proof as ASCII
+      // and since the app passes the proof as a hex string, we can
+      // just decode the bytes as hex characters using the TextDecoder
+      const hexProof = new TextDecoder().decode(uncompressedProof)
+      const processedProof: ProofResult = {
+        proof: hexProof,
+        vkeyHash: request.params.vkeyHash,
+        name: request.params.name,
+        version: request.params.version,
+      }
+      this.topicToProofs[topic].push(processedProof)
+      await Promise.all(
+        this.onProofGeneratedCallbacks[topic].map((callback) => callback(processedProof)),
+      )
+    } else if (request.method === 'done') {
+      logger.debug(`User sent the query result`)
+      // Verify the proofs and extract the unique identifier (aka nullifier) and the verification result
+      const { uniqueIdentifier, verified } = await this.verify(
+        topic,
+        this.topicToProofs[topic],
+        request.params,
+      )
+      await Promise.all(
+        this.onResultCallbacks[topic].map((callback) =>
+          callback({
+            uniqueIdentifier,
+            verified,
+            result: request.params,
+          }),
+        ),
+      )
     } else if (request.method === 'error') {
-      await Promise.all(this.onErrorCallbacks[topic].map((callback) => callback(request.params.error)))
+      await Promise.all(
+        this.onErrorCallbacks[topic].map((callback) => callback(request.params.error)),
+      )
     }
   }
 
-  private getZkPassportRequest(topic: string) {
+  private getZkPassportRequest(topic: string): QueryBuilder {
     return {
       eq: <T extends IDCredential>(key: T, value: IDCredentialValue<T>) => {
         if (key === 'issuing_country' || key === 'nationality') {
@@ -124,33 +347,33 @@ export class ZkPassport {
         numericalCompare('gte', key, value, topic, this.topicToConfig)
         return this.getZkPassportRequest(topic)
       },
-      gt: <T extends NumericalIDCredential>(key: T, value: IDCredentialValue<T>) => {
+      /*gt: <T extends NumericalIDCredential>(key: T, value: IDCredentialValue<T>) => {
         numericalCompare('gt', key, value, topic, this.topicToConfig)
         return this.getZkPassportRequest(topic)
-      },
-      lte: <T extends NumericalIDCredential>(key: T, value: IDCredentialValue<T>) => {
+      },*/
+      lte: <T extends 'birthdate' | 'expiry_date'>(key: T, value: IDCredentialValue<T>) => {
         numericalCompare('lte', key, value, topic, this.topicToConfig)
         return this.getZkPassportRequest(topic)
       },
-      lt: <T extends NumericalIDCredential>(key: T, value: IDCredentialValue<T>) => {
+      lt: <T extends 'age'>(key: T, value: IDCredentialValue<T>) => {
         numericalCompare('lt', key, value, topic, this.topicToConfig)
         return this.getZkPassportRequest(topic)
       },
-      range: <T extends NumericalIDCredential>(key: T, start: IDCredentialValue<T>, end: IDCredentialValue<T>) => {
+      range: <T extends NumericalIDCredential>(
+        key: T,
+        start: IDCredentialValue<T>,
+        end: IDCredentialValue<T>,
+      ) => {
         rangeCompare(key, [start, end], topic, this.topicToConfig)
         return this.getZkPassportRequest(topic)
       },
-      in: <T extends IDCredential>(key: T, value: IDCredentialValue<T>[]) => {
-        if (key === 'issuing_country' || key === 'nationality') {
-          value = value.map((v) => normalizeCountry(v as CountryName)) as IDCredentialValue<T>[]
-        }
+      in: <T extends 'nationality'>(key: T, value: IDCredentialValue<T>[]) => {
+        value = value.map((v) => normalizeCountry(v as CountryName)) as IDCredentialValue<T>[]
         generalCompare('in', key, value, topic, this.topicToConfig)
         return this.getZkPassportRequest(topic)
       },
-      out: <T extends IDCredential>(key: T, value: IDCredentialValue<T>[]) => {
-        if (key === 'issuing_country' || key === 'nationality') {
-          value = value.map((v) => normalizeCountry(v as CountryName)) as IDCredentialValue<T>[]
-        }
+      out: <T extends 'nationality'>(key: T, value: IDCredentialValue<T>[]) => {
+        value = value.map((v) => normalizeCountry(v as CountryName)) as IDCredentialValue<T>[]
         generalCompare('out', key, value, topic, this.topicToConfig)
         return this.getZkPassportRequest(topic)
       },
@@ -165,21 +388,36 @@ export class ZkPassport {
         return this.getZkPassportRequest(topic)
       },*/
       done: () => {
-        const base64Config = Buffer.from(JSON.stringify(this.topicToConfig[topic])).toString('base64')
-        const base64Service = Buffer.from(JSON.stringify(this.topicToService[topic])).toString('base64')
+        const base64Config = Buffer.from(JSON.stringify(this.topicToConfig[topic])).toString(
+          'base64',
+        )
+        const base64Service = Buffer.from(JSON.stringify(this.topicToService[topic])).toString(
+          'base64',
+        )
         const pubkey = bytesToHex(this.topicToKeyPair[topic].publicKey)
         return {
           url: `https://zkpassport.id/r?d=${this.domain}&t=${topic}&c=${base64Config}&s=${base64Service}&p=${pubkey}`,
           requestId: topic,
-          onQRCodeScanned: (callback: () => void) => this.onQRCodeScannedCallbacks[topic].push(callback),
-          onGeneratingProof: (callback: () => void) => this.onGeneratingProofCallbacks[topic].push(callback),
-          onBridgeConnect: (callback: () => void) => this.onBridgeConnectCallbacks[topic].push(callback),
-          onProofGenerated: (callback: (result: ProofResult) => void) =>
+          onRequestReceived: (callback: () => void) =>
+            this.onRequestReceivedCallbacks[topic].push(callback),
+          onGeneratingProof: (callback: () => void) =>
+            this.onGeneratingProofCallbacks[topic].push(callback),
+          onBridgeConnect: (callback: () => void) =>
+            this.onBridgeConnectCallbacks[topic].push(callback),
+          onProofGenerated: (callback: (proof: ProofResult) => void) =>
             this.onProofGeneratedCallbacks[topic].push(callback),
+          onResult: (
+            callback: (response: {
+              uniqueIdentifier: string | undefined
+              verified: boolean
+              result: QueryResult
+            }) => void,
+          ) => this.onResultCallbacks[topic].push(callback),
           onReject: (callback: () => void) => this.onRejectCallbacks[topic].push(callback),
-          onError: (callback: (error: string) => void) => this.onErrorCallbacks[topic].push(callback),
+          onError: (callback: (error: string) => void) =>
+            this.onErrorCallbacks[topic].push(callback),
           isBridgeConnected: () => this.topicToWebSocketClient[topic].readyState === WebSocket.OPEN,
-          isQRCodeScanned: () => this.topicToQRCodeScanned[topic] === true,
+          requestReceived: () => this.topicToRequestReceived[topic] === true,
         }
       },
     }
@@ -193,12 +431,14 @@ export class ZkPassport {
     name,
     logo,
     purpose,
+    scope,
     topicOverride,
     keyPairOverride,
   }: {
     name: string
     logo: string
     purpose: string
+    scope?: string
     topicOverride?: string
     keyPairOverride?: { privateKey: Uint8Array; publicKey: Uint8Array }
   }) {
@@ -211,12 +451,14 @@ export class ZkPassport {
     }
 
     this.topicToConfig[topic] = {}
-    this.topicToService[topic] = { name, logo, purpose }
+    this.topicToService[topic] = { name, logo, purpose, scope }
+    this.topicToProofs[topic] = []
 
-    this.onQRCodeScannedCallbacks[topic] = []
+    this.onRequestReceivedCallbacks[topic] = []
     this.onGeneratingProofCallbacks[topic] = []
     this.onBridgeConnectCallbacks[topic] = []
     this.onProofGeneratedCallbacks[topic] = []
+    this.onResultCallbacks[topic] = []
     this.onRejectCallbacks[topic] = []
     this.onErrorCallbacks[topic] = []
 
@@ -234,9 +476,15 @@ export class ZkPassport {
         if (data.method === 'handshake') {
           logger.debug('[frontend] Received handshake:', event.data)
 
-          this.topicToQRCodeScanned[topic] = true
-          this.topicToSharedSecret[topic] = await getSharedSecret(bytesToHex(keyPair.privateKey), data.params.pubkey)
-          logger.debug('[frontend] Shared secret:', Buffer.from(this.topicToSharedSecret[topic]).toString('hex'))
+          this.topicToRequestReceived[topic] = true
+          this.topicToSharedSecret[topic] = await getSharedSecret(
+            bytesToHex(keyPair.privateKey),
+            data.params.pubkey,
+          )
+          logger.debug(
+            '[frontend] Shared secret:',
+            Buffer.from(this.topicToSharedSecret[topic]).toString('hex'),
+          )
 
           const encryptedMessage = await createEncryptedJsonRpcRequest(
             'hello',
@@ -247,7 +495,7 @@ export class ZkPassport {
           logger.debug('[frontend] Sending encrypted message:', encryptedMessage)
           wsClient.send(JSON.stringify(encryptedMessage))
 
-          await Promise.all(this.onQRCodeScannedCallbacks[topic].map((callback) => callback()))
+          await Promise.all(this.onRequestReceivedCallbacks[topic].map((callback) => callback()))
           return
         }
 
@@ -279,20 +527,678 @@ export class ZkPassport {
     return this.getZkPassportRequest(topic)
   }
 
+  private async checkPublicInputs(proofs: Array<ProofResult>, queryResult: QueryResult) {
+    let commitmentIn: bigint | undefined
+    let commitmentOut: bigint | undefined
+    let isCorrect = true
+    let uniqueIdentifier: string | undefined
+    const expectedMerkleRoot = BigInt(
+      '21301853597069384763054217328384418971999152625381818922211526730996340553696',
+    )
+    const defaultDateValue = new Date(1111, 10, 11)
+    const currentTime = new Date()
+    const today = new Date(
+      currentTime.getFullYear(),
+      currentTime.getMonth(),
+      currentTime.getDate(),
+      0,
+      0,
+      0,
+      0,
+    )
+
+    // Since the order is important for the commitments, we need to sort the proofs
+    // by their expected order: root signature check -> ID signature check -> integrity check -> disclosure
+    const sortedProofs = proofs.sort((a, b) => {
+      const proofOrder = [
+        'sig_check_dsc',
+        'sig_check_id_data',
+        'data_check_integrity',
+        'disclose_bytes',
+        'compare_age',
+        'compare_birthdate',
+        'compare_expiry',
+        'exclusion_check_country',
+        'inclusion_check_country',
+      ]
+      const getIndex = (proof: ProofResult) => {
+        const name = proof.name || ''
+        return proofOrder.findIndex((p) => name.startsWith(p))
+      }
+      return getIndex(a) - getIndex(b)
+    })
+
+    for (const proof of sortedProofs!) {
+      const proofData = getProofData(proof.proof as string, true)
+      if (proof.name?.startsWith('sig_check_dsc')) {
+        commitmentOut = getCommitmentFromDSCProof(proofData)
+        const merkleRoot = getMerkleRootFromDSCProof(proofData)
+        if (merkleRoot !== expectedMerkleRoot) {
+          console.warn('The ID was signed by an unrecognized root certificate')
+          isCorrect = false
+          break
+        }
+      } else if (proof.name?.startsWith('sig_check_id_data')) {
+        commitmentIn = getCommitmentInFromIDDataProof(proofData)
+        if (commitmentIn !== commitmentOut) {
+          console.warn(
+            'Failed to check the link between the certificate signature and ID signature',
+          )
+          isCorrect = false
+          break
+        }
+        commitmentOut = getCommitmentOutFromIDDataProof(proofData)
+      } else if (proof.name?.startsWith('data_check_integrity')) {
+        commitmentIn = getCommitmentInFromIntegrityProof(proofData)
+        if (commitmentIn !== commitmentOut) {
+          console.warn('Failed to check the link between the ID signature and the data signed')
+          isCorrect = false
+          break
+        }
+        commitmentOut = getCommitmentOutFromIntegrityProof(proofData)
+        const currentDate = getCurrentDateFromIntegrityProof(proofData)
+        // The date should be today or yesterday
+        // (if the proof request was requested just before midnight and is finalized after)
+        if (
+          currentDate.getTime() !== today.getTime() &&
+          currentDate.getTime() !== today.getTime() - 86400000
+        ) {
+          console.warn('Current date used to check the validity of the ID is too old')
+          isCorrect = false
+          break
+        }
+      } else if (proof.name === 'disclose_bytes') {
+        commitmentIn = getCommitmentInFromDisclosureProof(proofData)
+        if (commitmentIn !== commitmentOut) {
+          console.warn(
+            'Failed to check the link between the validity of the ID and the data to disclose',
+          )
+          isCorrect = false
+          break
+        }
+        // We can't be certain that the disclosed data is for a passport or an ID card
+        // so we need to check both (unless the document type is revealed)
+        const disclosedDataPassport = DisclosedData.fromBytesProof(proofData, 'passport')
+        const disclosedDataIDCard = DisclosedData.fromBytesProof(proofData, 'id_card')
+        if (queryResult.document_type) {
+          // Document type is always at the same index in the disclosed data
+          if (
+            queryResult.document_type.eq &&
+            queryResult.document_type.eq.result &&
+            queryResult.document_type.eq.expected !== disclosedDataPassport.documentType
+          ) {
+            console.warn('Document type does not match the expected document type')
+            isCorrect = false
+            break
+          }
+          if (queryResult.document_type.disclose?.result !== disclosedDataIDCard.documentType) {
+            console.warn('Document type does not match the disclosed document type in query result')
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.birthdate) {
+          const birthdatePassport = disclosedDataPassport.dateOfBirth
+          const birthdateIDCard = disclosedDataIDCard.dateOfBirth
+          if (
+            queryResult.birthdate.eq &&
+            queryResult.birthdate.eq.result &&
+            queryResult.birthdate.eq.expected.getTime() !== birthdatePassport.getTime() &&
+            queryResult.birthdate.eq.expected.getTime() !== birthdateIDCard.getTime()
+          ) {
+            console.warn('Birthdate does not match the expected birthdate')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.birthdate.disclose &&
+            queryResult.birthdate.disclose.result.getTime() !== birthdatePassport.getTime() &&
+            queryResult.birthdate.disclose.result.getTime() !== birthdateIDCard.getTime()
+          ) {
+            console.warn('Birthdate does not match the disclosed birthdate in query result')
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.expiry_date) {
+          const expiryDatePassport = disclosedDataPassport.dateOfExpiry
+          const expiryDateIDCard = disclosedDataIDCard.dateOfExpiry
+          if (
+            queryResult.expiry_date.eq &&
+            queryResult.expiry_date.eq.result &&
+            queryResult.expiry_date.eq.expected.getTime() !== expiryDatePassport.getTime() &&
+            queryResult.expiry_date.eq.expected.getTime() !== expiryDateIDCard.getTime()
+          ) {
+            console.warn('Expiry date does not match the expected expiry date')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.expiry_date.disclose &&
+            queryResult.expiry_date.disclose.result.getTime() !== expiryDatePassport.getTime() &&
+            queryResult.expiry_date.disclose.result.getTime() !== expiryDateIDCard.getTime()
+          ) {
+            console.warn('Expiry date does not match the disclosed expiry date in query result')
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.nationality) {
+          const nationalityPassport = disclosedDataPassport.nationality
+          const nationalityIDCard = disclosedDataIDCard.nationality
+          if (
+            queryResult.nationality.eq &&
+            queryResult.nationality.eq.result &&
+            queryResult.nationality.eq.expected !== nationalityPassport &&
+            queryResult.nationality.eq.expected !== nationalityIDCard
+          ) {
+            console.warn('Nationality does not match the expected nationality')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.nationality.disclose &&
+            queryResult.nationality.disclose.result !== nationalityPassport &&
+            queryResult.nationality.disclose.result !== nationalityIDCard
+          ) {
+            console.warn('Nationality does not match the disclosed nationality in query result')
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.document_number) {
+          const documentNumberPassport = disclosedDataPassport.documentNumber
+          const documentNumberIDCard = disclosedDataIDCard.documentNumber
+          if (
+            queryResult.document_number.eq &&
+            queryResult.document_number.eq.result &&
+            queryResult.document_number.eq.expected !== documentNumberPassport &&
+            queryResult.document_number.eq.expected !== documentNumberIDCard
+          ) {
+            console.warn('Document number does not match the expected document number')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.document_number.disclose &&
+            queryResult.document_number.disclose.result !== documentNumberPassport &&
+            queryResult.document_number.disclose.result !== documentNumberIDCard
+          ) {
+            console.warn(
+              'Document number does not match the disclosed document number in query result',
+            )
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.gender) {
+          const genderPassport = disclosedDataPassport.gender
+          const genderIDCard = disclosedDataIDCard.gender
+          if (
+            queryResult.gender.eq &&
+            queryResult.gender.eq.result &&
+            queryResult.gender.eq.expected !== genderPassport &&
+            queryResult.gender.eq.expected !== genderIDCard
+          ) {
+            console.warn('Gender does not match the expected gender')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.gender.disclose &&
+            queryResult.gender.disclose.result !== genderPassport &&
+            queryResult.gender.disclose.result !== genderIDCard
+          ) {
+            console.warn('Gender does not match the disclosed gender in query result')
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.issuing_country) {
+          const issuingCountryPassport = disclosedDataPassport.issuingCountry
+          const issuingCountryIDCard = disclosedDataIDCard.issuingCountry
+          if (
+            queryResult.issuing_country.eq &&
+            queryResult.issuing_country.eq.result &&
+            queryResult.issuing_country.eq.expected !== issuingCountryPassport &&
+            queryResult.issuing_country.eq.expected !== issuingCountryIDCard
+          ) {
+            console.warn('Issuing country does not match the expected issuing country')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.issuing_country.disclose &&
+            queryResult.issuing_country.disclose.result !== issuingCountryPassport &&
+            queryResult.issuing_country.disclose.result !== issuingCountryIDCard
+          ) {
+            console.warn(
+              'Issuing country does not match the disclosed issuing country in query result',
+            )
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.fullname) {
+          const fullnamePassport = disclosedDataPassport.name
+          const fullnameIDCard = disclosedDataIDCard.name
+          if (
+            queryResult.fullname.eq &&
+            queryResult.fullname.eq.result &&
+            formatName(queryResult.fullname.eq.expected).toLowerCase() !==
+              fullnamePassport.toLowerCase() &&
+            formatName(queryResult.fullname.eq.expected).toLowerCase() !==
+              fullnameIDCard.toLowerCase()
+          ) {
+            console.warn('Fullname does not match the expected fullname')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.fullname.disclose &&
+            formatName(queryResult.fullname.disclose.result).toLowerCase() !==
+              fullnamePassport.toLowerCase() &&
+            formatName(queryResult.fullname.disclose.result).toLowerCase() !==
+              fullnameIDCard.toLowerCase()
+          ) {
+            console.warn('Fullname does not match the disclosed fullname in query result')
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.firstname) {
+          // If fullname was not revealed, then the name could be either the first name or last name
+          const firstnamePassport =
+            disclosedDataPassport.firstName && disclosedDataPassport.firstName.length > 0
+              ? disclosedDataPassport.firstName
+              : disclosedDataPassport.name
+          const firstnameIDCard =
+            disclosedDataIDCard.firstName && disclosedDataIDCard.firstName.length > 0
+              ? disclosedDataIDCard.firstName
+              : disclosedDataIDCard.name
+          if (
+            queryResult.firstname.eq &&
+            queryResult.firstname.eq.result &&
+            formatName(queryResult.firstname.eq.expected).toLowerCase() !==
+              firstnamePassport.toLowerCase() &&
+            formatName(queryResult.firstname.eq.expected).toLowerCase() !==
+              firstnameIDCard.toLowerCase()
+          ) {
+            console.warn('Firstname does not match the expected firstname')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.firstname.disclose &&
+            formatName(queryResult.firstname.disclose.result).toLowerCase() !==
+              firstnamePassport.toLowerCase() &&
+            formatName(queryResult.firstname.disclose.result).toLowerCase() !==
+              firstnameIDCard.toLowerCase()
+          ) {
+            console.warn('Firstname does not match the disclosed firstname in query result')
+            isCorrect = false
+            break
+          }
+        }
+        if (queryResult.lastname) {
+          // If fullname was not revealed, then the name could be either the first name or last name
+          const lastnamePassport =
+            disclosedDataPassport.lastName && disclosedDataPassport.lastName.length > 0
+              ? disclosedDataPassport.lastName
+              : disclosedDataPassport.name
+          const lastnameIDCard =
+            disclosedDataIDCard.lastName && disclosedDataIDCard.lastName.length > 0
+              ? disclosedDataIDCard.lastName
+              : disclosedDataIDCard.name
+          if (
+            queryResult.lastname.eq &&
+            queryResult.lastname.eq.result &&
+            formatName(queryResult.lastname.eq.expected).toLowerCase() !==
+              lastnamePassport.toLowerCase() &&
+            formatName(queryResult.lastname.eq.expected).toLowerCase() !==
+              lastnameIDCard.toLowerCase()
+          ) {
+            console.warn('Lastname does not match the expected lastname')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.lastname.disclose &&
+            formatName(queryResult.lastname.disclose.result).toLowerCase() !==
+              lastnamePassport.toLowerCase() &&
+            formatName(queryResult.lastname.disclose.result).toLowerCase() !==
+              lastnameIDCard.toLowerCase()
+          ) {
+            console.warn('Lastname does not match the disclosed lastname in query result')
+            isCorrect = false
+            break
+          }
+        }
+        uniqueIdentifier = getNullifierFromDisclosureProof(proofData).toString(10)
+      } else if (proof.name === 'compare_age') {
+        commitmentIn = getCommitmentInFromDisclosureProof(proofData)
+        if (commitmentIn !== commitmentOut) {
+          console.warn(
+            'Failed to check the link between the validity of the ID and the age derived from it',
+          )
+          isCorrect = false
+          break
+        }
+        const minAge = getMinAgeFromProof(proofData)
+        const maxAge = getMaxAgeFromProof(proofData)
+        if (queryResult.age) {
+          if (
+            queryResult.age.gte &&
+            queryResult.age.gte.result &&
+            minAge < (queryResult.age.gte.expected as number)
+          ) {
+            console.warn('Age is not greater than or equal to the expected age')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.age.lt &&
+            queryResult.age.lt.result &&
+            maxAge >= (queryResult.age.lt.expected as number)
+          ) {
+            console.warn('Age is not less than the expected age')
+            isCorrect = false
+            break
+          }
+          if (queryResult.age.range) {
+            if (
+              queryResult.age.range.result &&
+              (minAge < (queryResult.age.range.expected[0] as number) ||
+                maxAge >= (queryResult.age.range.expected[1] as number))
+            ) {
+              console.warn('Age is not in the expected range')
+              isCorrect = false
+              break
+            }
+          }
+          if (!queryResult.age.lt && !queryResult.age.range && maxAge != 0) {
+            console.warn('Maximum age should be equal to 0')
+            isCorrect = false
+            break
+          }
+          if (!queryResult.age.gte && !queryResult.age.range && minAge != 0) {
+            console.warn('Minimum age should be equal to 0')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.age.disclose &&
+            (queryResult.age.disclose.result !== minAge ||
+              queryResult.age.disclose.result !== maxAge)
+          ) {
+            console.warn('Age does not match the disclosed age in query result')
+            isCorrect = false
+            break
+          }
+        } else {
+          console.warn('Age is not set in the query result')
+          isCorrect = false
+          break
+        }
+        const currentDate = getCurrentDateFromAgeProof(proofData)
+        if (
+          currentDate.getTime() !== today.getTime() &&
+          currentDate.getTime() !== today.getTime() - 86400000
+        ) {
+          console.warn('Current date in the proof is too old')
+          isCorrect = false
+          break
+        }
+        uniqueIdentifier = getCommitmentInFromDisclosureProof(proofData).toString(10)
+      } else if (proof.name === 'compare_birthdate') {
+        commitmentIn = getCommitmentInFromDisclosureProof(proofData)
+        if (commitmentIn !== commitmentOut) {
+          console.warn(
+            'Failed to check the link between the validity of the ID and the birthdate derived from it',
+          )
+          isCorrect = false
+          break
+        }
+        const minDate = getMinDateFromProof(proofData)
+        const maxDate = getMaxDateFromProof(proofData)
+        if (queryResult.birthdate) {
+          if (
+            queryResult.birthdate.gte &&
+            queryResult.birthdate.gte.result &&
+            minDate < queryResult.birthdate.gte.expected
+          ) {
+            console.warn('Birthdate is not greater than or equal to the expected birthdate')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.birthdate.lte &&
+            queryResult.birthdate.lte.result &&
+            maxDate > queryResult.birthdate.lte.expected
+          ) {
+            console.warn('Birthdate is not less than the expected birthdate')
+            isCorrect = false
+            break
+          }
+          if (queryResult.birthdate.range) {
+            if (
+              queryResult.birthdate.range.result &&
+              (minDate < queryResult.birthdate.range.expected[0] ||
+                maxDate > queryResult.birthdate.range.expected[1])
+            ) {
+              console.warn('Birthdate is not in the expected range')
+              isCorrect = false
+              break
+            }
+          }
+          if (
+            !queryResult.birthdate.lte &&
+            !queryResult.birthdate.range &&
+            maxDate.getTime() != defaultDateValue.getTime()
+          ) {
+            console.warn('Maximum birthdate should be equal to default date value')
+            isCorrect = false
+            break
+          }
+          if (
+            !queryResult.birthdate.gte &&
+            !queryResult.birthdate.range &&
+            minDate.getTime() != defaultDateValue.getTime()
+          ) {
+            console.warn('Minimum birthdate should be equal to default date value')
+            isCorrect = false
+            break
+          }
+        } else {
+          console.warn('Birthdate is not set in the query result')
+          isCorrect = false
+          break
+        }
+        uniqueIdentifier = getCommitmentInFromDisclosureProof(proofData).toString(10)
+      } else if (proof.name === 'compare_expiry') {
+        commitmentIn = getCommitmentInFromDisclosureProof(proofData)
+        if (commitmentIn !== commitmentOut) {
+          console.warn(
+            'Failed to check the link between the validity of the ID and its expiry date',
+          )
+          isCorrect = false
+          break
+        }
+        const minDate = getMinDateFromProof(proofData)
+        const maxDate = getMaxDateFromProof(proofData)
+        if (queryResult.expiry_date) {
+          if (
+            queryResult.expiry_date.gte &&
+            queryResult.expiry_date.gte.result &&
+            minDate < queryResult.expiry_date.gte.expected
+          ) {
+            console.warn('Expiry date is not greater than or equal to the expected expiry date')
+            isCorrect = false
+            break
+          }
+          if (
+            queryResult.expiry_date.lte &&
+            queryResult.expiry_date.lte.result &&
+            maxDate > queryResult.expiry_date.lte.expected
+          ) {
+            console.warn('Expiry date is not less than the expected expiry date')
+            isCorrect = false
+            break
+          }
+          if (queryResult.expiry_date.range) {
+            if (
+              queryResult.expiry_date.range.result &&
+              (minDate < queryResult.expiry_date.range.expected[0] ||
+                maxDate > queryResult.expiry_date.range.expected[1])
+            ) {
+              console.warn('Expiry date is not in the expected range')
+              isCorrect = false
+              break
+            }
+          }
+          if (
+            !queryResult.expiry_date.lte &&
+            !queryResult.expiry_date.range &&
+            maxDate.getTime() != defaultDateValue.getTime()
+          ) {
+            console.warn('Maximum expiry date should be equal to default date value')
+            isCorrect = false
+            break
+          }
+          if (
+            !queryResult.expiry_date.gte &&
+            !queryResult.expiry_date.range &&
+            minDate.getTime() != defaultDateValue.getTime()
+          ) {
+            console.warn('Minimum expiry date should be equal to default date value')
+            isCorrect = false
+            break
+          }
+        } else {
+          console.warn('Expiry date is not set in the query result')
+          isCorrect = false
+          break
+        }
+        uniqueIdentifier = getNullifierFromDisclosureProof(proofData).toString(10)
+      } else if (proof.name === 'exclusion_check_country') {
+        commitmentIn = getCommitmentInFromDisclosureProof(proofData)
+        if (commitmentIn !== commitmentOut) {
+          console.warn(
+            'Failed to check the link between the validity of the ID and the country exclusion check',
+          )
+          isCorrect = false
+          break
+        }
+        const countryList = getCountryListFromExclusionProof(proofData)
+        if (
+          queryResult.nationality &&
+          queryResult.nationality.out &&
+          queryResult.nationality.out.result
+        ) {
+          if (
+            !queryResult.nationality.out.expected?.every((country) => countryList.includes(country))
+          ) {
+            console.warn('Country exclusion list does not match the one from the query results')
+            isCorrect = false
+            break
+          }
+        } else if (!queryResult.nationality || !queryResult.nationality.out) {
+          console.warn('Nationality exclusion is not set in the query result')
+          isCorrect = false
+          break
+        }
+        uniqueIdentifier = getNullifierFromDisclosureProof(proofData).toString(10)
+      } else if (proof.name === 'inclusion_check_country') {
+        commitmentIn = getCommitmentInFromDisclosureProof(proofData)
+        if (commitmentIn !== commitmentOut) {
+          console.warn(
+            'Failed to check the link between the validity of the ID and the country inclusion check',
+          )
+          isCorrect = false
+          break
+        }
+        const countryList = getCountryListFromInclusionProof(proofData)
+        if (
+          queryResult.nationality &&
+          queryResult.nationality.in &&
+          queryResult.nationality.in.result
+        ) {
+          if (
+            !queryResult.nationality.in.expected?.every((country) => countryList.includes(country))
+          ) {
+            console.warn('Country inclusion list does not match the one from the query results')
+            isCorrect = false
+            break
+          }
+        } else if (!queryResult.nationality || !queryResult.nationality.in) {
+          console.warn('Nationality inclusion is not set in the query result')
+          isCorrect = false
+          break
+        }
+        uniqueIdentifier = getNullifierFromDisclosureProof(proofData).toString(10)
+      }
+    }
+    return { isCorrect, uniqueIdentifier }
+  }
+
   /**
-   * @notice Verifies a proof.
-   * @param proof The proof to verify.
-   * @returns True if the proof is valid, false otherwise.
+   * @notice Verify the proofs received from the mobile app.
+   * @param requestId The request ID.
+   * @param proofs The proofs to verify.
+   * @param queryResult The query result to verify against
+   * @returns An object containing the unique identifier associated to the user
+   * and a boolean indicating whether the proofs were successfully verified.
    */
-  /*public verify(result: ProofResult) {
-    const backend = new UltraHonkBackend(proofOfAgeCircuit as CompiledCircuit)
-    const proofData: ProofData = {
-      proof: Buffer.from(result.proof as string, 'hex'),
-      // TODO: extract the public inputs from the proof
-      publicInputs: [],
+  public async verify(
+    requestId: string,
+    proofs?: Array<ProofResult>,
+    queryResult?: QueryResult,
+  ): Promise<{ uniqueIdentifier: string | undefined; verified: boolean }> {
+    let proofsToVerify = proofs
+    if (!proofs) {
+      proofsToVerify = this.topicToProofs[requestId]
+      if (!proofsToVerify || proofsToVerify.length === 0) {
+        throw new Error('No proofs to verify')
+      }
     }
-    return backend.verifyProof(proofData)
-  }*/
+    const { BarretenbergVerifier } = await import('@aztec/bb.js')
+    const verifier = new BarretenbergVerifier()
+    /*if (!this.wasmVerifierInit) {
+      await this.initWasmVerifier()
+    }*/
+    let verified = true
+    let uniqueIdentifier: string | undefined
+    if (queryResult) {
+      const { isCorrect, uniqueIdentifier: uniqueIdentifierFromPublicInputs } =
+        await this.checkPublicInputs(proofsToVerify!, queryResult!)
+      uniqueIdentifier = uniqueIdentifierFromPublicInputs
+      verified = isCorrect
+    }
+    // Only proceed with the proof verification if the public inputs are correct
+    if (verified) {
+      for (const proof of proofsToVerify!) {
+        const proofData = getProofData(proof.proof as string, true)
+        const hostedPackagedCircuit = await getHostedPackagedCircuitByName(
+          proof.version as any,
+          proof.name!,
+        )
+        const vkeyBytes = Buffer.from(hostedPackagedCircuit.vkey, 'base64')
+        try {
+          verified = await verifier.verifyUltraHonkProof(proofData, new Uint8Array(vkeyBytes))
+        } catch (e) {
+          console.warn('Error verifying proof', e)
+          verified = false
+        }
+        if (!verified) {
+          // Break the loop if the proof is not valid
+          // and don't bother checking the other proofs
+          break
+        }
+      }
+    }
+    this.topicToProofs[requestId] = []
+    return { uniqueIdentifier, verified }
+  }
 
   /**
    * @notice Returns the URL of the request.
@@ -301,8 +1207,12 @@ export class ZkPassport {
    */
   public getUrl(requestId: string) {
     const pubkey = bytesToHex(this.topicToKeyPair[requestId].publicKey)
-    const base64Config = Buffer.from(JSON.stringify(this.topicToConfig[requestId])).toString('base64')
-    const base64Service = Buffer.from(JSON.stringify(this.topicToService[requestId])).toString('base64')
+    const base64Config = Buffer.from(JSON.stringify(this.topicToConfig[requestId])).toString(
+      'base64',
+    )
+    const base64Service = Buffer.from(JSON.stringify(this.topicToService[requestId])).toString(
+      'base64',
+    )
     return `https://zkpassport.id/r?d=${this.domain}&t=${requestId}&c=${base64Config}&s=${base64Service}&p=${pubkey}`
   }
 
@@ -316,7 +1226,8 @@ export class ZkPassport {
     delete this.topicToKeyPair[requestId]
     delete this.topicToConfig[requestId]
     delete this.topicToSharedSecret[requestId]
-    this.onQRCodeScannedCallbacks[requestId] = []
+    delete this.topicToProofs[requestId]
+    this.onRequestReceivedCallbacks[requestId] = []
     this.onGeneratingProofCallbacks[requestId] = []
     this.onBridgeConnectCallbacks[requestId] = []
     this.onProofGeneratedCallbacks[requestId] = []