gdc-sdk-node-ts 2.4.11 → 2.4.13

package/dist/node-managed-wallet.js

@@ -307,6 +307,9 @@ export class NodeManagedWallet {
         };
         const protectedHeader = {
             enc: 'A256GCM',
+            // GW binds the encrypted channel to the sender's managed communication
+            // key before it decrypts or evaluates the nested DIDComm message.
+            skid: entry.descriptor.kid,
             ...(request.contentType ? { cty: request.contentType } : {}),
         };
         const plaintext = typeof request.plaintext === 'string'
@@ -358,9 +361,11 @@ export class NodeManagedWallet {
             header: {
                 typ: 'JWS',
             },
-            claims: {
-                payload: content,
-            },
+            // GW KMS decodes the JWS claims as the DIDComm message itself. Wrapping
+            // the message in `{ payload: ... }` hides `iss`, `thid` and `body` one
+            // level too deep and makes every encrypted resource action fail before
+            // routing or signature verification.
+            claims: content,
             key: signingKey,
         });
         return this.buildCompactJwe(options.context, {
@@ -404,8 +409,16 @@ export class NodeManagedWallet {
                     throw new Error('NodeManagedWallet.unpackWithContext expected a compact JWS payload.');
                 }
                 const payload = Content.base64UrlSafeToJSON(parts[1]);
+                const decodedPayload = payload;
+                const legacyWrappedContent = Object.keys(decodedPayload).length === 1
+                    && decodedPayload.payload
+                    && typeof decodedPayload.payload === 'object'
+                    ? decodedPayload.payload
+                    : decodedPayload;
                 return {
-                    content: payload.payload,
+                    // Read the canonical direct-message JWS and retain compatibility
+                    // with SDK <=2.4.11 envelopes already queued by an outbox.
+                    content: legacyWrappedContent,
                     meta: {
                         jwe: { protected: decodedProtectedHeader },
                         jws: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.11",
+  "version": "2.4.13",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",