ubid-common 0.1.0

package/dist/trust/AlgorithmPolicy.d.ts

@@ -0,0 +1,27 @@
+import type { JWK } from "jose";
+import { PublicKeyResolutionError } from "../error";
+import { Result } from "../types";
+import { TokenVerificationType } from "../interfaces";
+import { TrustRegistryEntry } from "./TrustRegistry";
+export interface AlgorithmRule {
+    kty: string;
+    crv?: string;
+}
+export type AlgorithmRules = Readonly<Record<string, Readonly<AlgorithmRule>>>;
+export declare class AlgorithmPolicy {
+    private readonly rules;
+    constructor(rules?: AlgorithmRules);
+    validateAlgorithm(args: {
+        entry: Readonly<TrustRegistryEntry>;
+        alg: string;
+        tokenType: TokenVerificationType;
+    }): Result<true, PublicKeyResolutionError>;
+    validateKey(args: {
+        entry: Readonly<TrustRegistryEntry>;
+        jwk: JWK;
+        kid: string;
+        alg: string;
+        tokenType: TokenVerificationType;
+    }): Result<true, PublicKeyResolutionError>;
+}
+//# sourceMappingURL=AlgorithmPolicy.d.ts.map

package/dist/trust/AlgorithmPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AlgorithmPolicy.d.ts","sourceRoot":"","sources":["../../src/trust/AlgorithmPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,WAAW,aAAa;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAc/E,qBAAa,eAAe;IACf,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,GAAE,cAA8B;IAElE,iBAAiB,CAAC,IAAI,EAAE;QACvB,KAAK,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACpC,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,qBAAqB,CAAC;KACjC,GAAG,MAAM,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAQ1C,WAAW,CAAC,IAAI,EAAE;QACjB,KAAK,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACpC,GAAG,EAAE,GAAG,CAAC;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,qBAAqB,CAAC;KACjC,GAAG,MAAM,CAAC,IAAI,EAAE,wBAAwB,CAAC;CAgC1C"}

package/dist/trust/AlgorithmPolicy.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AlgorithmPolicy = void 0;
+const error_1 = require("../error");
+const DEFAULT_RULES = Object.freeze({
+    ES256: Object.freeze({ kty: "EC", crv: "P-256" }),
+    ES256K: Object.freeze({ kty: "EC", crv: "secp256k1" }),
+    EdDSA: Object.freeze({ kty: "OKP", crv: "Ed25519" }),
+});
+const PRIVATE_JWK_PARAMETERS = ["d", "p", "q", "dp", "dq", "qi", "oth", "k"];
+function denied(error) {
+    return { success: false, error };
+}
+class AlgorithmPolicy {
+    rules;
+    constructor(rules = DEFAULT_RULES) {
+        this.rules = rules;
+    }
+    validateAlgorithm(args) {
+        const allowed = args.entry.algorithms[args.tokenType];
+        if (!this.rules[args.alg] || !allowed?.includes(args.alg)) {
+            return denied(error_1.PublicKeyResolutionError.AlgorithmNotAllowed);
+        }
+        return { success: true, value: true };
+    }
+    validateKey(args) {
+        const algorithmResult = this.validateAlgorithm(args);
+        if (!algorithmResult.success)
+            return algorithmResult;
+        const { jwk, kid, alg, entry } = args;
+        const rule = this.rules[alg];
+        if (!rule || jwk.kid !== kid || jwk.kty !== rule.kty || (rule.crv !== undefined && jwk.crv !== rule.crv)) {
+            return denied(error_1.PublicKeyResolutionError.KeyNotAllowed);
+        }
+        if (entry.activeKids && !entry.activeKids.includes(kid)) {
+            return denied(error_1.PublicKeyResolutionError.KeyNotAllowed);
+        }
+        if (jwk.alg !== undefined && jwk.alg !== alg) {
+            return denied(error_1.PublicKeyResolutionError.KeyNotAllowed);
+        }
+        if (jwk.use !== undefined && jwk.use !== "sig") {
+            return denied(error_1.PublicKeyResolutionError.KeyNotAllowed);
+        }
+        if (jwk.key_ops !== undefined && (!Array.isArray(jwk.key_ops) || !jwk.key_ops.includes("verify"))) {
+            return denied(error_1.PublicKeyResolutionError.KeyNotAllowed);
+        }
+        if (PRIVATE_JWK_PARAMETERS.some((parameter) => parameter in jwk)) {
+            return denied(error_1.PublicKeyResolutionError.KeyNotAllowed);
+        }
+        if (jwk.kty === "EC" && (typeof jwk.x !== "string" || !jwk.x || typeof jwk.y !== "string" || !jwk.y)) {
+            return denied(error_1.PublicKeyResolutionError.KeyNotAllowed);
+        }
+        if (jwk.kty === "OKP" && (typeof jwk.x !== "string" || !jwk.x)) {
+            return denied(error_1.PublicKeyResolutionError.KeyNotAllowed);
+        }
+        return { success: true, value: true };
+    }
+}
+exports.AlgorithmPolicy = AlgorithmPolicy;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/trust/TrustRegistry.d.ts

@@ -0,0 +1,49 @@
+import { TokenVerificationType } from "../interfaces";
+export type TrustedAlgorithms = Partial<Record<TokenVerificationType, readonly string[]>>;
+export interface TrustRegistryEntry {
+    /**
+     * Exact `iss` value accepted from a token.
+     */
+    issuer: string;
+    /**
+     * Explicit JWKS endpoint. It is never derived from `issuer`.
+     */
+    jwksUri: string;
+    /**
+     * Algorithms authorized for each token purpose.
+     */
+    algorithms: TrustedAlgorithms;
+    /**
+     * Optional allow-list used during controlled key rotations.
+     */
+    activeKids?: readonly string[];
+    /**
+     * Optional credential configurations/vct values governed by this entry.
+     */
+    credentialTypes?: readonly string[];
+    /**
+     * Exact Status List Token endpoints authorized for credentials from this
+     * issuer. A consumer must never fetch a status URI solely because it
+     * appeared in an untrusted credential.
+     */
+    statusListUris?: readonly string[];
+    /**
+     * Optional external Status Issuer. When omitted, the credential issuer is
+     * also the Status Issuer.
+     */
+    statusListIssuer?: string;
+}
+export interface TrustRegistryOptions {
+    /**
+     * Intended only for deterministic local tests and isolated development.
+     */
+    allowInsecureHttp?: boolean;
+}
+export declare class TrustRegistry {
+    private readonly entries;
+    private readonly allowInsecureHttp;
+    constructor(entries: readonly TrustRegistryEntry[], options?: TrustRegistryOptions);
+    get(issuer: string): Readonly<TrustRegistryEntry> | undefined;
+    has(issuer: string): boolean;
+}
+//# sourceMappingURL=TrustRegistry.d.ts.map

package/dist/trust/TrustRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustRegistry.d.ts","sourceRoot":"","sources":["../../src/trust/TrustRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;AAE1F,MAAM,WAAW,kBAAkB;IAClC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,UAAU,EAAE,iBAAiB,CAAC;IAC9B;;OAEG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;OAEG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;OAIG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACpC;;OAEG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAqED,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmD;IAC3E,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAU;gBAEhC,OAAO,EAAE,SAAS,kBAAkB,EAAE,EAAE,OAAO,GAAE,oBAAyB;IAgCtF,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,kBAAkB,CAAC,GAAG,SAAS;IAU7D,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;CAG5B"}

package/dist/trust/TrustRegistry.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrustRegistry = void 0;
+function normalizeIssuer(value, allowInsecureHttp) {
+    const url = validateUrl(value, allowInsecureHttp, "issuer");
+    if (url.search || url.hash) {
+        throw new TypeError("A trusted issuer must not contain a query or fragment");
+    }
+    return url.href.endsWith("/") ? url.href.slice(0, -1) : url.href;
+}
+function normalizeJwksUri(value, allowInsecureHttp) {
+    const url = validateUrl(value, allowInsecureHttp, "jwksUri");
+    if (url.hash) {
+        throw new TypeError("A trusted jwksUri must not contain a fragment");
+    }
+    return url.href;
+}
+function normalizeStatusListUri(value, allowInsecureHttp) {
+    const url = validateUrl(value, allowInsecureHttp, "statusListUri");
+    if (url.hash) {
+        throw new TypeError("A trusted statusListUri must not contain a fragment");
+    }
+    return url.href;
+}
+function validateUrl(value, allowInsecureHttp, field) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new TypeError(`Invalid ${field}`);
+    }
+    if (url.username || url.password) {
+        throw new TypeError(`${field} must not contain user information`);
+    }
+    if (url.protocol !== "https:" && !(allowInsecureHttp && url.protocol === "http:")) {
+        throw new TypeError(`${field} must use HTTPS`);
+    }
+    return url;
+}
+function uniqueNonEmpty(values, field) {
+    if (values === undefined)
+        return undefined;
+    if (values.length === 0 || values.some((value) => typeof value !== "string" || value.length === 0)) {
+        throw new TypeError(`${field} must contain non-empty strings`);
+    }
+    if (new Set(values).size !== values.length) {
+        throw new TypeError(`${field} must not contain duplicates`);
+    }
+    return Object.freeze([...values]);
+}
+function validateAlgorithms(algorithms) {
+    const result = {};
+    const tokenTypes = ["credential", "kb-jwt", "status-list"];
+    for (const tokenType of tokenTypes) {
+        const configured = algorithms[tokenType];
+        if (configured !== undefined) {
+            const values = uniqueNonEmpty(configured, `algorithms.${tokenType}`);
+            if (values)
+                result[tokenType] = values;
+        }
+    }
+    if (Object.keys(result).length === 0) {
+        throw new TypeError("At least one token algorithm policy is required");
+    }
+    return Object.freeze(result);
+}
+class TrustRegistry {
+    entries = new Map();
+    allowInsecureHttp;
+    constructor(entries, options = {}) {
+        this.allowInsecureHttp = options.allowInsecureHttp === true;
+        for (const entry of entries) {
+            const issuer = normalizeIssuer(entry.issuer, this.allowInsecureHttp);
+            if (this.entries.has(issuer)) {
+                throw new TypeError(`Duplicate trusted issuer: ${issuer}`);
+            }
+            const frozenEntry = Object.freeze({
+                issuer,
+                jwksUri: normalizeJwksUri(entry.jwksUri, this.allowInsecureHttp),
+                algorithms: validateAlgorithms(entry.algorithms),
+                activeKids: uniqueNonEmpty(entry.activeKids, "activeKids"),
+                credentialTypes: uniqueNonEmpty(entry.credentialTypes, "credentialTypes"),
+                statusListUris: entry.statusListUris === undefined
+                    ? undefined
+                    : Object.freeze(entry.statusListUris.map((uri) => normalizeStatusListUri(uri, this.allowInsecureHttp))),
+                statusListIssuer: entry.statusListIssuer === undefined
+                    ? undefined
+                    : normalizeIssuer(entry.statusListIssuer, this.allowInsecureHttp),
+            });
+            if (frozenEntry.statusListUris !== undefined &&
+                (frozenEntry.statusListUris.length === 0 ||
+                    new Set(frozenEntry.statusListUris).size !== frozenEntry.statusListUris.length)) {
+                throw new TypeError("statusListUris must contain unique trusted endpoints");
+            }
+            this.entries.set(issuer, frozenEntry);
+        }
+    }
+    get(issuer) {
+        let normalized;
+        try {
+            normalized = normalizeIssuer(issuer, this.allowInsecureHttp);
+        }
+        catch {
+            return undefined;
+        }
+        return this.entries.get(normalized);
+    }
+    has(issuer) {
+        return this.get(issuer) !== undefined;
+    }
+}
+exports.TrustRegistry = TrustRegistry;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/types.d.ts

@@ -0,0 +1,76 @@
+import { CredentialParsingError } from "./error";
+import { ClaimMetadataEntry } from "./schemas/SdJwtVcTypeMetadataSchema";
+export declare enum VerifiableCredentialFormat {
+    VC_SDJWT = "vc+sd-jwt",
+    DC_SDJWT = "dc+sd-jwt",
+    MSO_MDOC = "mso_mdoc"
+}
+export type CredentialIssuer = {
+    id: string;
+    name: string;
+};
+export type CredentialClaims = Record<string, unknown>;
+export type Result<T, E> = {
+    success: true;
+    value: T;
+} | {
+    success: false;
+    error: E;
+};
+export type ParserResult = {
+    success: true;
+    value: ParsedCredential;
+} | {
+    success: false;
+    error: CredentialParsingError;
+};
+export type CredentialPayload = {
+    iss: string;
+    vct: string;
+    [key: string]: unknown;
+};
+export type MetadataError = {
+    error: CredentialParsingError;
+};
+export type MetadataWarning = {
+    code: CredentialParsingError;
+};
+export type CredentialClaimPath = Array<string>;
+export type CredentialFriendlyNameCallback = (preferredLangs?: string[]) => Promise<string | null>;
+export type ImageDataUriCallback = (filter?: Array<CredentialClaimPath>, preferredLangs?: string[]) => Promise<string | null>;
+export type AugmentedClaimMetadataEntry = ClaimMetadataEntry & {
+    required?: boolean;
+};
+export type TypeMetadata = {
+    claims?: Array<AugmentedClaimMetadataEntry>;
+};
+export type ParsedCredential = {
+    metadata: {
+        credential: {
+            format: VerifiableCredentialFormat.VC_SDJWT | VerifiableCredentialFormat.DC_SDJWT;
+            vct: string;
+            name: CredentialFriendlyNameCallback;
+            TypeMetadata: TypeMetadata;
+            image: {
+                dataUri: ImageDataUriCallback;
+            };
+        } | {
+            format: VerifiableCredentialFormat.MSO_MDOC;
+            doctype: string;
+            name: CredentialFriendlyNameCallback;
+            TypeMetadata: TypeMetadata;
+            image: {
+                dataUri: ImageDataUriCallback;
+            };
+        };
+        issuer: CredentialIssuer;
+    };
+    validityInfo: {
+        validUntil?: Date;
+        validFrom?: Date;
+        signed?: Date;
+    };
+    signedClaims: CredentialClaims;
+    warnings?: Array<MetadataWarning>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,oBAAY,0BAA0B;IACrC,QAAQ,cAAc;IACtB,QAAQ,cAAc;IACtB,QAAQ,aAAa;CACrB;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CAGb,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEvD,MAAM,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC;AAEtF,MAAM,MAAM,YAAY,GACrB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAC1C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC3B,KAAK,EAAE,sBAAsB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,sBAAsB,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,MAAM,8BAA8B,GAAG,CAC5C,cAAc,CAAC,EAAE,MAAM,EAAE,KACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAE5B,MAAM,MAAM,oBAAoB,GAAG,CAClC,MAAM,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,EACnC,cAAc,CAAC,EAAE,MAAM,EAAE,KACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAG5B,MAAM,MAAM,2BAA2B,GAAG,kBAAkB,GAAG;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAC1B,MAAM,CAAC,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE;QACT,UAAU,EAAE;YACX,MAAM,EAAE,0BAA0B,CAAC,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC;YAClF,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,EAAE,8BAA8B,CAAC;YACrC,YAAY,EAAE,YAAY,CAAC;YAC3B,KAAK,EAAE;gBACN,OAAO,EAAE,oBAAoB,CAAC;aAC9B,CAAC;SACF,GAAG;YACH,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC;YAC5C,OAAO,EAAE,MAAM,CAAC;YAChB,IAAI,EAAE,8BAA8B,CAAC;YACrC,YAAY,EAAE,YAAY,CAAC;YAC3B,KAAK,EAAE;gBACN,OAAO,EAAE,oBAAoB,CAAC;aAC9B,CAAC;SACF,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC;KACzB,CAAC;IACF,YAAY,EAAE;QACb,UAAU,CAAC,EAAE,IAAI,CAAC;QAClB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,MAAM,CAAC,EAAE,IAAI,CAAC;KACd,CAAA;IACD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;CAClC,CAAC"}

package/dist/types.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifiableCredentialFormat = void 0;
+var VerifiableCredentialFormat;
+(function (VerifiableCredentialFormat) {
+    VerifiableCredentialFormat["VC_SDJWT"] = "vc+sd-jwt";
+    VerifiableCredentialFormat["DC_SDJWT"] = "dc+sd-jwt";
+    VerifiableCredentialFormat["MSO_MDOC"] = "mso_mdoc";
+})(VerifiableCredentialFormat || (exports.VerifiableCredentialFormat = VerifiableCredentialFormat = {}));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvdHlwZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBR0EsSUFBWSwwQkFJWDtBQUpELFdBQVksMEJBQTBCO0lBQ3JDLG9EQUFzQixDQUFBO0lBQ3RCLG9EQUFzQixDQUFBO0lBQ3RCLG1EQUFxQixDQUFBO0FBQ3RCLENBQUMsRUFKVywwQkFBMEIsMENBQTFCLDBCQUEwQixRQUlyQyJ9

package/dist/utils/escapeSVG.d.ts

@@ -0,0 +1,2 @@
+export declare function escapeSVG(str: string): string;
+//# sourceMappingURL=escapeSVG.d.ts.map

package/dist/utils/escapeSVG.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escapeSVG.d.ts","sourceRoot":"","sources":["../../src/utils/escapeSVG.ts"],"names":[],"mappings":"AAAA,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,UAapC"}

package/dist/utils/escapeSVG.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.escapeSVG = escapeSVG;
+function escapeSVG(str) {
+    if (typeof str !== "string")
+        return str;
+    return str.replace(/[<>&"']/g, function (match) {
+        switch (match) {
+            case '<': return '&lt;';
+            case '>': return '&gt;';
+            case '&': return '&amp;';
+            case '"': return '&quot;';
+            case "'": return '&apos;';
+            default: return match;
+        }
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/utils/getIssuerMetadata.d.ts

@@ -0,0 +1,8 @@
+import { z } from "zod";
+import { OpenidCredentialIssuerMetadataSchema } from "../schemas";
+import type { HttpClient } from "../interfaces";
+import { MetadataWarning } from "../types";
+export declare function getIssuerMetadata(httpClient: HttpClient, issuer: string, warnings: MetadataWarning[], useCache?: boolean): Promise<{
+    metadata: z.infer<typeof OpenidCredentialIssuerMetadataSchema> | null;
+}>;
+//# sourceMappingURL=getIssuerMetadata.d.ts.map

package/dist/utils/getIssuerMetadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIssuerMetadata.d.ts","sourceRoot":"","sources":["../../src/utils/getIssuerMetadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAG3C,wBAAsB,iBAAiB,CACtC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,eAAe,EAAE,EAC3B,QAAQ,GAAE,OAAc,GACtB,OAAO,CAAC;IACV,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,GAAG,IAAI,CAAC;CACtE,CAAC,CA+BD"}

package/dist/utils/getIssuerMetadata.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIssuerMetadata = getIssuerMetadata;
+const schemas_1 = require("../schemas");
+const error_1 = require("../error");
+async function getIssuerMetadata(httpClient, issuer, warnings, useCache = true) {
+    const url = `${issuer}/.well-known/openid-credential-issuer`;
+    let issuerResponse = null;
+    try {
+        issuerResponse = await httpClient.get(url, {}, { useCache });
+    }
+    catch (err) {
+        warnings.push({
+            code: error_1.CredentialParsingError.FailFetchIssuerMetadata,
+        });
+        return { metadata: null };
+    }
+    if (!issuerResponse || issuerResponse.status !== 200 || !issuerResponse.data) {
+        warnings.push({
+            code: error_1.CredentialParsingError.FailFetchIssuerMetadata,
+        });
+        return { metadata: null };
+    }
+    const parsed = schemas_1.OpenidCredentialIssuerMetadataSchema.safeParse(issuerResponse.data);
+    if (!parsed.success) {
+        warnings.push({
+            code: error_1.CredentialParsingError.FailSchemaIssuerMetadata,
+        });
+        return { metadata: null };
+    }
+    return { metadata: parsed.data };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/utils/getSdJwtVcMetadata.d.ts

@@ -0,0 +1,12 @@
+import { Context, HttpClient } from '../interfaces';
+import { MetadataError, MetadataWarning } from '../types';
+import { CredentialParsingError } from '../error';
+import { TypeMetadata as TypeMetadataSchema } from "../schemas/SdJwtVcTypeMetadataSchema";
+export declare function resolveIssuerMetadata(httpClient: any, issuerUrl: string): Promise<{
+    code: CredentialParsingError;
+} | undefined>;
+export declare function getSdJwtVcMetadata(context: Context, httpClient: HttpClient, credential: string, parsedClaims: Record<string, unknown>, warnings?: MetadataWarning[]): Promise<{
+    credentialMetadata: TypeMetadataSchema | undefined;
+    warnings: MetadataWarning[];
+} | MetadataError>;
+//# sourceMappingURL=getSdJwtVcMetadata.d.ts.map

package/dist/utils/getSdJwtVcMetadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSdJwtVcMetadata.d.ts","sourceRoot":"","sources":["../../src/utils/getSdJwtVcMetadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGpD,OAAO,EAAqB,aAAa,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAA+B,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AA8L1F,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,sBAAsB,CAAA;CAAE,GAAG,SAAS,CAAC,CAwBrI;AAeD,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAE,eAAe,EAAO,GAAG,OAAO,CAAC;IAAE,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAA;CAAE,GAAG,aAAa,CAAC,CA+E5R"}