ubid-common 0.1.0

package/dist/utils/getSdJwtVcMetadata.js

@@ -0,0 +1,274 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveIssuerMetadata = resolveIssuerMetadata;
+exports.getSdJwtVcMetadata = getSdJwtVcMetadata;
+const util_1 = require("./util");
+const verifySRIFromObject_1 = require("./verifySRIFromObject");
+const error_1 = require("../error");
+const SdJwtVcTypeMetadataSchema_1 = require("../schemas/SdJwtVcTypeMetadataSchema");
+function validateTypeMetadataShape(metadata) {
+    const res = SdJwtVcTypeMetadataSchema_1.TypeMetadata.safeParse(metadata);
+    if (!res.success) {
+        console.error("❌ Type Metadata shape validation failed:", res.error.issues);
+        return error_1.CredentialParsingError.SchemaShapeFail;
+    }
+    return undefined;
+}
+function handleMetadataCode(code, warnings) {
+    if ((0, error_1.isCredentialParsingWarnings)(code)) {
+        warnings.push({ code });
+        return undefined; // continue flow
+    }
+    else {
+        console.warn(`❌ Metadata Error [${code}]`);
+        return { error: code }; // now error
+    }
+}
+function deepMerge(parent, child) {
+    if (Array.isArray(parent) && Array.isArray(child)) {
+        // Merge display[] by locale
+        if (parent[0]?.locale && child[0]?.locale) {
+            const map = new Map();
+            for (const item of parent) {
+                map.set(item.locale, item);
+            }
+            for (const item of child) {
+                if (map.has(item.locale)) {
+                    // Recursively merge item with same locale
+                    const merged = deepMerge(map.get(item.locale), item);
+                    map.set(item.locale, merged);
+                }
+                else {
+                    map.set(item.locale, item);
+                }
+            }
+            return Array.from(map.values());
+        }
+        // Merge claims[] by path
+        if (parent[0]?.path && child[0]?.path) {
+            const map = new Map();
+            for (const item of parent) {
+                map.set(JSON.stringify(item.path), item);
+            }
+            for (const item of child) {
+                if (map.has(JSON.stringify(item.path))) {
+                    const merged = deepMerge(map.get(JSON.stringify(item.path)), item);
+                    map.set(JSON.stringify(item.path), merged);
+                }
+                else {
+                    map.set(JSON.stringify(item.path), item);
+                }
+            }
+            return Array.from(map.values());
+        }
+        // If they're not arrays of objects (i.e., primitives), override with child
+        if (typeof parent[0] !== 'object' ||
+            typeof child[0] !== 'object' ||
+            parent[0] === null ||
+            child[0] === null) {
+            return child;
+        }
+        // Otherwise, merge arrays of objects (default behavior)
+        return [...parent, ...child];
+    }
+    if (typeof parent === 'object' && typeof child === 'object' && parent !== null && child !== null) {
+        const result = { ...parent };
+        for (const key of Object.keys(child)) {
+            if (key in parent) {
+                result[key] = deepMerge(parent[key], child[key]); // RECURSIVE
+            }
+            else {
+                result[key] = child[key];
+            }
+        }
+        return result;
+    }
+    // Primitives: child overrides
+    return child;
+}
+async function fetchAndMergeMetadata(context, httpClient, metadataId, metadataArray, visited = new Set(), integrity, credentialPayload, warnings = []) {
+    if (visited.has(metadataId)) {
+        const resultCode = handleMetadataCode(error_1.CredentialParsingError.InfiniteRecursion, warnings);
+        if (resultCode)
+            return resultCode;
+    }
+    visited.add(metadataId);
+    let metadata;
+    if (metadataArray && Array.isArray(metadataArray)) {
+        metadata = metadataArray.find((m) => m.vct === metadataId);
+        if (!metadata) {
+            return undefined;
+        }
+        const resultShapeCheckCode = validateTypeMetadataShape(metadata);
+        if (resultShapeCheckCode) {
+            const resultCode = handleMetadataCode(resultShapeCheckCode, warnings);
+            if (resultCode)
+                return resultCode;
+        }
+        if (!integrity) {
+            const resultCode = handleMetadataCode(error_1.CredentialParsingError.IntegrityMissing, warnings);
+            if (resultCode)
+                return resultCode;
+        }
+        else {
+            const isValid = await (0, verifySRIFromObject_1.verifySRIFromObject)(context, metadata, integrity);
+            if (!isValid) {
+                const resultCode = handleMetadataCode(error_1.CredentialParsingError.IntegrityFail, warnings);
+                if (resultCode)
+                    return resultCode;
+            }
+        }
+    }
+    else {
+        const result = await httpClient.get(metadataId, {}, { useCache: true });
+        if (!result ||
+            result.status !== 200 ||
+            typeof result.data !== 'object' ||
+            result.data === null ||
+            !('vct' in result.data)) {
+            return undefined;
+        }
+        const resultShapeCheckCode = validateTypeMetadataShape(result.data);
+        if (resultShapeCheckCode) {
+            const resultCode = handleMetadataCode(resultShapeCheckCode, warnings);
+            if (resultCode)
+                return resultCode;
+        }
+        if (integrity) {
+            const isValid = await (0, verifySRIFromObject_1.verifySRIFromObject)(context, result.data, integrity);
+            if (!isValid) {
+                const resultCode = handleMetadataCode(error_1.CredentialParsingError.IntegrityFail, warnings);
+                if (resultCode)
+                    return resultCode;
+            }
+        }
+        metadata = result.data;
+    }
+    let merged;
+    if (typeof metadata.extends === 'string') {
+        const childIntegrity = metadata['extends#integrity'];
+        const parent = await fetchAndMergeMetadata(context, httpClient, metadata.extends, metadataArray || undefined, visited, childIntegrity, warnings);
+        if (parent === undefined) {
+            const resultCode = handleMetadataCode(error_1.CredentialParsingError.NotFoundExtends, warnings);
+            if (resultCode)
+                return resultCode;
+            return metadata;
+        }
+        if ('error' in parent)
+            return parent;
+        merged = deepMerge(parent, metadata);
+    }
+    else {
+        merged = metadata;
+    }
+    return merged;
+}
+async function resolveIssuerMetadata(httpClient, issuerUrl) {
+    try {
+        const issUrl = new URL(issuerUrl);
+        const result = await httpClient.get(`${issUrl.origin}/.well-known/jwt-vc-issuer`, {}, { useCache: true });
+        if (result &&
+            typeof result === 'object' &&
+            ('data' in result) &&
+            typeof result.data === 'object' &&
+            typeof result.data.issuer === 'string') {
+            if (result.data.issuer !== issUrl.origin) {
+                return { code: error_1.CredentialParsingError.JwtVcIssuerMismatch };
+            }
+        }
+        return undefined;
+    }
+    catch (err) {
+        return { code: error_1.CredentialParsingError.JwtVcIssuerFail };
+    }
+}
+function isValidHttpUrl(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol.startsWith('http');
+    }
+    catch {
+        return false;
+    }
+}
+function isCredentialPayload(obj) {
+    return typeof obj === 'object' && obj !== null && 'iss' in obj && typeof obj.iss === 'string';
+}
+async function getSdJwtVcMetadata(context, httpClient, credential, parsedClaims, warnings = []) {
+    try {
+        // Decode Header
+        let credentialHeader;
+        try {
+            credentialHeader = JSON.parse(new TextDecoder().decode((0, util_1.fromBase64Url)(credential.split('.')[0])));
+        }
+        catch (e) {
+            console.warn('Failed to decode credential header:', e);
+            const resultCode = handleMetadataCode(error_1.CredentialParsingError.HeaderFail, warnings);
+            if (resultCode)
+                return resultCode;
+        }
+        if (!credentialHeader || typeof credentialHeader !== 'object') {
+            console.warn('Invalid or missing credential header structure.');
+            return { error: error_1.CredentialParsingError.HeaderFail };
+        }
+        const credentialPayload = parsedClaims;
+        if (!credentialPayload || !isCredentialPayload(credentialPayload)) {
+            return { error: error_1.CredentialParsingError.PayloadFail };
+        }
+        const vct = credentialPayload.vct;
+        if (vct && typeof vct === 'string' && isValidHttpUrl(vct)) {
+            // Check jwt-vc-issuer by iss
+            const checkIssuer = await resolveIssuerMetadata(httpClient, credentialPayload.iss);
+            if (checkIssuer) {
+                const resultCode = handleMetadataCode(checkIssuer.code, warnings);
+                if (resultCode)
+                    return resultCode;
+            }
+            try {
+                const vctIntegrity = credentialPayload['vct#integrity'];
+                const mergedMetadata = await fetchAndMergeMetadata(context, httpClient, vct, undefined, new Set(), vctIntegrity, credentialPayload, warnings);
+                if (mergedMetadata) {
+                    if ('error' in mergedMetadata) {
+                        return { error: mergedMetadata.error };
+                    }
+                    else {
+                        return { credentialMetadata: mergedMetadata, warnings };
+                    }
+                }
+            }
+            catch (e) {
+                console.warn('Invalid vct URL:', vct, e);
+            }
+        }
+        if (credentialHeader.vctm && Array.isArray(credentialHeader.vctm)) {
+            const decodedVctmList = credentialHeader.vctm.map((encoded, index) => {
+                try {
+                    return JSON.parse(new TextDecoder().decode((0, util_1.fromBase64Url)(encoded)));
+                }
+                catch (err) {
+                    return { error: "VctmDecodeFail" };
+                }
+            });
+            const vctIntegrity = credentialPayload['vct#integrity'];
+            const vctmMergedMetadata = await fetchAndMergeMetadata(context, httpClient, credentialPayload.vct, decodedVctmList, new Set(), vctIntegrity, credentialPayload, warnings);
+            if (vctmMergedMetadata) {
+                if ('error' in vctmMergedMetadata) {
+                    return { error: vctmMergedMetadata.error };
+                }
+                else {
+                    // console.log('Final vctm Metadata:', vctmMergedMetadata);
+                    return { credentialMetadata: vctmMergedMetadata, warnings };
+                }
+            }
+        }
+        // if no metafata found return NotFound
+        // here you add more ways to find metadata (eg registry)
+        warnings.push({ code: error_1.CredentialParsingError.NotFound });
+        return { credentialMetadata: undefined, warnings };
+    }
+    catch (err) {
+        console.log(err);
+        return { error: error_1.CredentialParsingError.UnknownError };
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/utils/index.d.ts

@@ -0,0 +1,2 @@
+export { verifyX5C } from './verifyX5C';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyX5C = void 0;
+var verifyX5C_1 = require("./verifyX5C");
+Object.defineProperty(exports, "verifyX5C", { enumerable: true, get: function () { return verifyX5C_1.verifyX5C; } });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvdXRpbHMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEseUNBQXdDO0FBQS9CLHNHQUFBLFNBQVMsT0FBQSJ9

package/dist/utils/matchLocalizedDisplay.d.ts

@@ -0,0 +1,6 @@
+type DisplayWithLocale = {
+    locale?: string;
+};
+export declare function matchDisplayByLocale<T extends DisplayWithLocale>(arr: T[] | undefined, preferredLangs: string[]): T | null;
+export {};
+//# sourceMappingURL=matchLocalizedDisplay.d.ts.map

package/dist/utils/matchLocalizedDisplay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matchLocalizedDisplay.d.ts","sourceRoot":"","sources":["../../src/utils/matchLocalizedDisplay.ts"],"names":[],"mappings":"AAAA,KAAK,iBAAiB,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,iBAAiB,EAC/D,GAAG,EAAE,CAAC,EAAE,GAAG,SAAS,EACpB,cAAc,EAAE,MAAM,EAAE,GACtB,CAAC,GAAG,IAAI,CAYV"}

package/dist/utils/matchLocalizedDisplay.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.matchDisplayByLocale = matchDisplayByLocale;
+function matchDisplayByLocale(arr, preferredLangs) {
+    if (!Array.isArray(arr))
+        return null;
+    for (const lang of preferredLangs) {
+        const match = arr.find(d => d.locale === lang ||
+            d.locale?.startsWith(lang + '-') ||
+            lang?.startsWith(d.locale + '-'));
+        if (match)
+            return match;
+    }
+    return arr[0] ?? null;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/utils/util.d.ts

@@ -0,0 +1,6 @@
+export declare function toBase64(binary: BufferSource): string;
+export declare function toBase64Url(binary: BufferSource): string;
+export declare function byteArrayEquals(a: BufferSource, b: BufferSource): boolean;
+export declare function fromBase64(s: string): Uint8Array;
+export declare function fromBase64Url(s: string): Uint8Array;
+//# sourceMappingURL=util.d.ts.map

package/dist/utils/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/utils/util.ts"],"names":[],"mappings":"AAQA,wBAAgB,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CASrD;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAExD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,OAAO,CAEzE;AAeD,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAEhD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAEnD"}

package/dist/utils/util.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toBase64 = toBase64;
+exports.toBase64Url = toBase64Url;
+exports.byteArrayEquals = byteArrayEquals;
+exports.fromBase64 = fromBase64;
+exports.fromBase64Url = fromBase64Url;
+function toU8(b) {
+    if (b instanceof ArrayBuffer) {
+        return new Uint8Array(b);
+    }
+    else {
+        return new Uint8Array(b.buffer);
+    }
+}
+function toBase64(binary) {
+    const uint8Array = toU8(binary);
+    const chunkSize = 0x8000; // 32KB
+    let result = '';
+    for (let i = 0; i < uint8Array.length; i += chunkSize) {
+        const chunk = uint8Array.subarray(i, i + chunkSize);
+        result += String.fromCharCode(...chunk);
+    }
+    return btoa(result);
+}
+function toBase64Url(binary) {
+    return toBase64(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+function byteArrayEquals(a, b) {
+    return toBase64(a) === toBase64(b);
+}
+function base64pad(s) {
+    const m = s.length % 4;
+    if (m === 0) {
+        return s;
+    }
+    else if (m === 2) {
+        return s + "==";
+    }
+    else if (m === 3) {
+        return s + "=";
+    }
+    else {
+        throw Error("Invalid length of Base64 encoded data");
+    }
+}
+function fromBase64(s) {
+    return new Uint8Array(Array.from(atob(base64pad(s))).map(c => c.charCodeAt(0)));
+}
+function fromBase64Url(s) {
+    return fromBase64(s.replace(/-/g, "+").replace(/_/g, "/"));
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/utils/verifyCertificate.d.ts

@@ -0,0 +1,2 @@
+export declare function verifyCertificate(leafCertPem: string, trustedCerts: string[]): Promise<boolean>;
+//# sourceMappingURL=verifyCertificate.d.ts.map

package/dist/utils/verifyCertificate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyCertificate.d.ts","sourceRoot":"","sources":["../../src/utils/verifyCertificate.ts"],"names":[],"mappings":"AAmDA,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,oBAwBlF"}

package/dist/utils/verifyCertificate.js

@@ -0,0 +1,100 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyCertificate = verifyCertificate;
+const pkijs = __importStar(require("pkijs"));
+const asn1js = __importStar(require("asn1js"));
+const buffer_1 = require("buffer");
+const uncrypto_1 = __importDefault(require("uncrypto"));
+const crypto_1 = require("crypto");
+pkijs.setEngine("webcrypto", uncrypto_1.default, new pkijs.CryptoEngine({ name: "", crypto: uncrypto_1.default, subtle: uncrypto_1.default.subtle }));
+function pemToArrayBuffer(pem) {
+    const base64 = pem.replace(/(-----(BEGIN|END) CERTIFICATE-----|\s)/g, "");
+    const binaryString = buffer_1.Buffer.from(base64, "base64").toString("binary");
+    const byteArray = new Uint8Array(binaryString.length);
+    for (let i = 0; i < binaryString.length; i++) {
+        byteArray[i] = binaryString.charCodeAt(i);
+    }
+    return byteArray.buffer;
+}
+function parseCertificate(pem) {
+    const certBuffer = pemToArrayBuffer(pem);
+    const asn1 = asn1js.fromBER(certBuffer);
+    return new pkijs.Certificate({ schema: asn1.result });
+}
+function normalizeDn(value) {
+    return value.replace(/\s+/g, " ").trim();
+}
+function verifyLeafAgainstRootFallback(leafPem, rootPem) {
+    try {
+        const leaf = new crypto_1.X509Certificate(leafPem);
+        const root = new crypto_1.X509Certificate(rootPem);
+        const issuerMatches = normalizeDn(leaf.issuer) === normalizeDn(root.subject);
+        if (!issuerMatches) {
+            return false;
+        }
+        const rootPublicKey = (0, crypto_1.createPublicKey)(root.publicKey);
+        return leaf.verify(root.publicKey);
+        //return leaf.verify(rootPublicKey);
+    }
+    catch (err) {
+        console.error("Fallback verify error:", err);
+        return false;
+    }
+}
+async function verifyCertificate(leafCertPem, trustedCerts) {
+    const leafCert = parseCertificate(leafCertPem);
+    const caCerts = trustedCerts.map((caCertPem) => parseCertificate(caCertPem));
+    const certChainEngine = new pkijs.CertificateChainValidationEngine({
+        trustedCerts: [...caCerts],
+        certs: [leafCert],
+    });
+    const verificationResult = await certChainEngine.verify();
+    console.log("verifyCertificate result =", verificationResult);
+    if (verificationResult.result) {
+        return true;
+    }
+    for (const trusted of trustedCerts) {
+        if (verifyLeafAgainstRootFallback(leafCertPem, trusted)) {
+            console.log("verifyCertificate fallback accepted leaf signed by trusted root");
+            return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/utils/verifySRIFromObject.d.ts

@@ -0,0 +1,10 @@
+import { Context } from "../interfaces";
+export type Algorithm = 'sha256' | 'sha384' | 'sha512';
+/**
+ * Verifies that a given object matches the expected SRI integrity string.
+ * @param obj - The object to verify
+ * @param expectedIntegrity - The SRI string (e.g. 'sha256-<base64hash>')
+ * @returns Promise resolving to true if valid, false otherwise
+ */
+export declare function verifySRIFromObject(context: Context, obj: Record<string, any>, expectedIntegrity: string): Promise<boolean>;
+//# sourceMappingURL=verifySRIFromObject.d.ts.map

package/dist/utils/verifySRIFromObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifySRIFromObject.d.ts","sourceRoot":"","sources":["../../src/utils/verifySRIFromObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEvD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACxB,iBAAiB,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CA2BlB"}

package/dist/utils/verifySRIFromObject.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifySRIFromObject = verifySRIFromObject;
+/**
+ * Verifies that a given object matches the expected SRI integrity string.
+ * @param obj - The object to verify
+ * @param expectedIntegrity - The SRI string (e.g. 'sha256-<base64hash>')
+ * @returns Promise resolving to true if valid, false otherwise
+ */
+async function verifySRIFromObject(context, obj, expectedIntegrity) {
+    const [algorithm, expectedHash] = expectedIntegrity.split('-');
+    if (!algorithm || !expectedHash) {
+        throw new Error('Invalid integrity string format');
+    }
+    const jsonString = JSON.stringify(obj);
+    const encoder = new TextEncoder();
+    const data = encoder.encode(jsonString);
+    const algoMap = {
+        sha256: 'SHA-256',
+        sha384: 'SHA-384',
+        sha512: 'SHA-512',
+    };
+    const subtleAlgo = algoMap[algorithm.toLowerCase()];
+    if (!subtleAlgo) {
+        throw new Error(`Unsupported algorithm: ${algorithm}`);
+    }
+    const digest = await context.subtle.digest(subtleAlgo, data);
+    const hashArray = Array.from(new Uint8Array(digest));
+    const hashBase64 = btoa(String.fromCharCode(...hashArray));
+    return hashBase64 === expectedHash;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/utils/verifyX5C.d.ts

@@ -0,0 +1,11 @@
+export interface VerifyX5COptions {
+    algorithm?: string;
+    expectedHostname?: string;
+    validationTime?: Date;
+}
+/**
+ * Compatibility adapter for consumers of the historical boolean API.
+ * All validation is delegated to the canonical X509ChainVerifier.
+ */
+export declare function verifyX5C(x5c: string[], trustedCertificates: string[], options?: VerifyX5COptions): Promise<boolean>;
+//# sourceMappingURL=verifyX5C.d.ts.map

package/dist/utils/verifyX5C.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyX5C.d.ts","sourceRoot":"","sources":["../../src/utils/verifyX5C.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,IAAI,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,mBAAmB,EAAE,MAAM,EAAE,EAC7B,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,OAAO,CAAC,CASlB"}

package/dist/utils/verifyX5C.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyX5C = verifyX5C;
+const X509ChainVerifier_1 = require("../x509/X509ChainVerifier");
+/**
+ * Compatibility adapter for consumers of the historical boolean API.
+ * All validation is delegated to the canonical X509ChainVerifier.
+ */
+async function verifyX5C(x5c, trustedCertificates, options = {}) {
+    const result = await new X509ChainVerifier_1.X509ChainVerifier().verify({
+        x5c,
+        trustedCertificates,
+        algorithm: options.algorithm,
+        expectedHostname: options.expectedHostname,
+        validationTime: options.validationTime,
+    });
+    return result.success;
+}
+//# sourceMappingURL=data:application/json;base64,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