ubid-common 0.1.0

package/dist/credential-verifiers/SDJWTVCVerifier.js

@@ -0,0 +1,394 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveHolderAlgorithm = void 0;
+exports.SDJWTVCVerifier = SDJWTVCVerifier;
+const core_1 = require("@sd-jwt/core");
+const jose_1 = require("jose");
+const error_1 = require("../error");
+const util_1 = require("../utils/util");
+const X509ChainVerifier_1 = require("../x509/X509ChainVerifier");
+const SDJWTVCValidation_1 = require("./SDJWTVCValidation");
+function resultError(error) {
+    return { success: false, error };
+}
+function isCompactJwt(value) {
+    const parts = value.split(".");
+    return parts.length === 3 && parts.every((part) => /^[A-Za-z0-9_-]+$/.test(part));
+}
+function audienceMatches(expected, actual) {
+    if (typeof actual === "string")
+        return actual === expected;
+    return (Array.isArray(actual) &&
+        actual.length > 0 &&
+        actual.every((item) => typeof item === "string") &&
+        actual.includes(expected));
+}
+function hasClaimPath(claims, path) {
+    if (!path)
+        return false;
+    let current = claims;
+    for (const segment of path.split(".")) {
+        if (typeof current !== "object" ||
+            current === null ||
+            Array.isArray(current) ||
+            !Object.prototype.hasOwnProperty.call(current, segment)) {
+            return false;
+        }
+        current = current[segment];
+    }
+    return true;
+}
+var SDJWTVCValidation_2 = require("./SDJWTVCValidation");
+Object.defineProperty(exports, "deriveHolderAlgorithm", { enumerable: true, get: function () { return SDJWTVCValidation_2.deriveHolderAlgorithm; } });
+function SDJWTVCVerifier(args) {
+    const policy = (0, SDJWTVCValidation_1.normalizeSDJWTVCVerificationPolicy)(args.policy);
+    const x509ChainVerifier = args.x509ChainVerifier ?? new X509ChainVerifier_1.X509ChainVerifier();
+    const encoder = new TextEncoder();
+    if (policy.requireStatusCheck && !args.statusListVerifier) {
+        throw new TypeError("A TokenStatusListVerifier is required when requireStatusCheck is enabled");
+    }
+    const hasherAndAlgorithm = {
+        hasher: (data, alg) => {
+            const encoded = typeof data === "string" ? encoder.encode(data) : new Uint8Array(data);
+            return args.context.subtle.digest(alg, encoded).then((value) => new Uint8Array(value));
+        },
+        alg: "sha-256",
+    };
+    async function parseAndValidate(rawCredential, opts) {
+        if (!rawCredential.includes("~")) {
+            return resultError(error_1.CredentialVerificationError.InvalidFormat);
+        }
+        const parts = rawCredential.split("~");
+        const issuerJwt = parts[0];
+        const finalPart = parts[parts.length - 1];
+        if (!issuerJwt || !isCompactJwt(issuerJwt)) {
+            return resultError(error_1.CredentialVerificationError.InvalidFormat);
+        }
+        const kbJwt = finalPart ? finalPart : undefined;
+        if (kbJwt && !isCompactJwt(kbJwt)) {
+            return resultError(error_1.CredentialVerificationError.InvalidFormat);
+        }
+        const rawDisclosures = parts.slice(1, -1);
+        if (rawDisclosures.some((disclosure) => !/^[A-Za-z0-9_-]+$/.test(disclosure))) {
+            return resultError(error_1.CredentialVerificationError.InvalidDisclosures);
+        }
+        let sdJwt;
+        let claims;
+        try {
+            sdJwt = await core_1.SDJwt.fromEncode(rawCredential, hasherAndAlgorithm.hasher);
+            claims = await sdJwt.getClaims(hasherAndAlgorithm.hasher);
+        }
+        catch {
+            return resultError(error_1.CredentialVerificationError.InvalidFormat);
+        }
+        const header = sdJwt.jwt?.header;
+        const payload = sdJwt.jwt?.payload;
+        if (!header || !payload || typeof header !== "object" || typeof payload !== "object") {
+            return resultError(error_1.CredentialVerificationError.InvalidFormat);
+        }
+        const headerResult = (0, SDJWTVCValidation_1.validateCredentialHeader)(header, policy);
+        if (!headerResult.success)
+            return headerResult;
+        const payloadResult = (0, SDJWTVCValidation_1.validateCredentialPayload)(payload, policy, args.context.clockTolerance);
+        if (!payloadResult.success)
+            return payloadResult;
+        const disclosuresResult = (0, SDJWTVCValidation_1.validateDisclosures)({
+            sdJwt,
+            rawDisclosures,
+            payload,
+            policy,
+        });
+        if (!disclosuresResult.success)
+            return disclosuresResult;
+        if (opts.expectedIssuer !== undefined && payload.iss !== opts.expectedIssuer) {
+            return resultError(error_1.CredentialVerificationError.UnexpectedIssuer);
+        }
+        if (opts.expectedCredentialType !== undefined &&
+            payload.vct !== opts.expectedCredentialType) {
+            return resultError(error_1.CredentialVerificationError.UnexpectedCredentialType);
+        }
+        if (opts.requiredClaimKeys?.some((claimPath) => !hasClaimPath(claims, claimPath))) {
+            return resultError(error_1.CredentialVerificationError.MissingRequiredClaims);
+        }
+        const rawWithoutKbJwt = kbJwt
+            ? `${parts.slice(0, -1).join("~")}~`
+            : rawCredential;
+        return {
+            success: true,
+            value: {
+                sdJwt,
+                issuerJwt,
+                rawWithoutKbJwt,
+                rawDisclosures,
+                header,
+                payload,
+                claims,
+                kbJwt,
+            },
+        };
+    }
+    async function getHolderPublicKey(parsed) {
+        const cnf = parsed.claims.cnf;
+        if (typeof cnf !== "object" ||
+            cnf === null ||
+            Array.isArray(cnf) ||
+            typeof cnf.jwk !== "object" ||
+            cnf.jwk === null ||
+            Array.isArray(cnf.jwk)) {
+            return resultError(error_1.CredentialVerificationError.CannotExtractHolderPublicKey);
+        }
+        const jwk = cnf.jwk;
+        const algorithmResult = (0, SDJWTVCValidation_1.deriveHolderAlgorithm)(jwk);
+        if (!algorithmResult.success)
+            return algorithmResult;
+        if (!policy.allowedHolderAlgorithms.includes(algorithmResult.value)) {
+            return resultError(error_1.CredentialVerificationError.HolderKeyAlgorithmMismatch);
+        }
+        try {
+            return {
+                success: true,
+                value: {
+                    key: await (0, jose_1.importJWK)(jwk, algorithmResult.value),
+                    jwk: { ...jwk },
+                    alg: algorithmResult.value,
+                },
+            };
+        }
+        catch {
+            return resultError(error_1.CredentialVerificationError.CannotImportHolderPublicKey);
+        }
+    }
+    async function getIssuerPublicKey(parsed) {
+        const x5c = parsed.header.x5c;
+        const alg = parsed.header.alg;
+        if (x5c !== undefined) {
+            if (!Array.isArray(x5c) ||
+                x5c.length === 0 ||
+                !x5c.every((item) => typeof item === "string")) {
+                return resultError(error_1.CredentialVerificationError.InvalidCertificateChain);
+            }
+            const certificateValidationResult = await x509ChainVerifier.verify({
+                x5c,
+                trustedCertificates: args.context.trustedCertificates,
+                algorithm: alg,
+                expectedHostname: new URL(parsed.payload.iss).hostname,
+                validationTime: policy.now(),
+            });
+            if (!certificateValidationResult.success) {
+                console.error("[ubid-common][SDJWTVCVerifier] X.509 verification failed", {
+                    error: certificateValidationResult.error,
+                    issuer: parsed.payload.iss,
+                    algorithm: alg,
+                    expectedHostname: new URL(parsed.payload.iss).hostname,
+                });
+                return resultError(error_1.CredentialVerificationError.InvalidCertificateChain);
+            }
+            try {
+                return {
+                    success: true,
+                    value: await (0, jose_1.importX509)(certificateValidationResult.value.leafCertificatePem, alg),
+                };
+            }
+            catch {
+                return resultError(error_1.CredentialVerificationError.CannotImportIssuerPublicKey);
+            }
+        }
+        const kid = parsed.header.kid;
+        const resolutionResult = await args.pkResolverEngine.resolve({
+            identifier: parsed.payload.iss,
+            kid: typeof kid === "string" ? kid : undefined,
+            alg,
+            tokenType: "credential",
+            credentialType: parsed.payload.vct,
+        });
+        if (!resolutionResult.success) {
+            console.error("[ubid-common][SDJWTVCVerifier] issuer key resolution failed", {
+                error: resolutionResult.error,
+                issuer: parsed.payload.iss,
+                kid: typeof kid === "string" ? kid : undefined,
+                algorithm: alg,
+                credentialType: parsed.payload.vct,
+            });
+            return resultError(error_1.CredentialVerificationError.CannotResolveIssuerPublicKey);
+        }
+        try {
+            return {
+                success: true,
+                value: await (0, jose_1.importJWK)(resolutionResult.value.jwk, alg),
+            };
+        }
+        catch {
+            return resultError(error_1.CredentialVerificationError.CannotImportIssuerPublicKey);
+        }
+    }
+    async function verifyIssuerSignature(parsed) {
+        const issuerKeyResult = await getIssuerPublicKey(parsed);
+        if (!issuerKeyResult.success)
+            return issuerKeyResult;
+        try {
+            await (0, jose_1.jwtVerify)(parsed.issuerJwt, issuerKeyResult.value, {
+                algorithms: [parsed.header.alg],
+                clockTolerance: args.context.clockTolerance,
+                currentDate: policy.now(),
+            });
+            return { success: true, value: true };
+        }
+        catch (error) {
+            if (error instanceof Error && (error.name === "JWTExpired" || error.name === "JWTClaimValidationFailed")) {
+                return resultError(error_1.CredentialVerificationError.ExpiredCredential);
+            }
+            return resultError(error_1.CredentialVerificationError.InvalidSignature);
+        }
+    }
+    async function verifyKbJwt(parsed, holder, opts) {
+        if (!parsed.kbJwt) {
+            return resultError(error_1.CredentialVerificationError.KeyBindingRequired);
+        }
+        if (!opts.expectedNonce || !opts.expectedAudience) {
+            return resultError(error_1.CredentialVerificationError.MissingOpts);
+        }
+        let header;
+        try {
+            header = (0, jose_1.decodeProtectedHeader)(parsed.kbJwt);
+        }
+        catch {
+            return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedHeader);
+        }
+        if (header.typ !== "kb+jwt" ||
+            header.alg !== holder.alg ||
+            header.alg === "none" ||
+            header.b64 !== undefined ||
+            header.jku !== undefined ||
+            header.x5u !== undefined ||
+            header.jwk !== undefined ||
+            header.x5c !== undefined ||
+            (header.crit !== undefined && (!Array.isArray(header.crit) || header.crit.length > 0))) {
+            return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedHeader);
+        }
+        let verifiedPayload;
+        try {
+            const verified = await (0, jose_1.jwtVerify)(parsed.kbJwt, holder.key, {
+                algorithms: [holder.alg],
+                clockTolerance: args.context.clockTolerance,
+                currentDate: policy.now(),
+            });
+            verifiedPayload = verified.payload;
+        }
+        catch {
+            return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedSignatureValidation);
+        }
+        const { sd_hash: sdHash, nonce, aud, iat } = verifiedPayload;
+        if (typeof sdHash !== "string" ||
+            !sdHash ||
+            typeof nonce !== "string" ||
+            !nonce ||
+            !(typeof aud === "string" ||
+                (Array.isArray(aud) &&
+                    aud.length > 0 &&
+                    aud.every((item) => typeof item === "string") &&
+                    new Set(aud).size === aud.length)) ||
+            typeof iat !== "number" ||
+            !Number.isSafeInteger(iat) ||
+            iat < 0) {
+            return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedMissingParameters);
+        }
+        const now = Math.floor(policy.now().getTime() / 1000);
+        if (iat > now + args.context.clockTolerance ||
+            iat < now - policy.kbJwtMaxAgeSeconds - args.context.clockTolerance) {
+            return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedIat);
+        }
+        if (!audienceMatches(opts.expectedAudience, aud)) {
+            return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedUnexpectedAudience);
+        }
+        if (nonce !== opts.expectedNonce) {
+            return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedUnexpectedNonce);
+        }
+        const disclosureAlgorithm = typeof parsed.payload._sd_alg === "string" ? parsed.payload._sd_alg : "sha-256";
+        const hashBuffer = await args.context.subtle.digest(disclosureAlgorithm, encoder.encode(parsed.rawWithoutKbJwt));
+        if ((0, util_1.toBase64Url)(hashBuffer) !== sdHash) {
+            return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedWrongSdHash);
+        }
+        if (policy.replayGuard) {
+            try {
+                const accepted = await policy.replayGuard.consume({
+                    kbJwt: parsed.kbJwt,
+                    nonce,
+                    audience: aud,
+                    iat,
+                    holderJwk: holder.jwk,
+                });
+                if (!accepted) {
+                    return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedReplay);
+                }
+            }
+            catch {
+                return resultError(error_1.CredentialVerificationError.KbJwtVerificationFailedReplay);
+            }
+        }
+        return { success: true, value: true };
+    }
+    return {
+        async verify({ rawCredential, opts }) {
+            if (typeof rawCredential !== "string") {
+                return resultError(error_1.CredentialVerificationError.InvalidDatatype);
+            }
+            const parsedResult = await parseAndValidate(rawCredential, opts);
+            if (!parsedResult.success)
+                return parsedResult;
+            const parsed = parsedResult.value;
+            const issuerSignatureResult = await verifyIssuerSignature(parsed);
+            if (!issuerSignatureResult.success)
+                return issuerSignatureResult;
+            const holderResult = await getHolderPublicKey(parsed);
+            if (!holderResult.success)
+                return holderResult;
+            if (parsed.kbJwt) {
+                const kbResult = await verifyKbJwt(parsed, holderResult.value, opts);
+                if (!kbResult.success)
+                    return kbResult;
+            }
+            else if (opts.requireKeyBinding === true) {
+                return resultError(error_1.CredentialVerificationError.KeyBindingRequired);
+            }
+            let credentialStatus;
+            if (args.statusListVerifier && parsed.claims.status !== undefined) {
+                credentialStatus = await args.statusListVerifier.verify({
+                    credentialIssuer: parsed.payload.iss,
+                    status: parsed.claims.status,
+                });
+                if (!credentialStatus.success) {
+                    return resultError(error_1.CredentialVerificationError.CredentialStatusVerificationFailed);
+                }
+                if (credentialStatus.value.status === "revoked") {
+                    return resultError(error_1.CredentialVerificationError.CredentialRevoked);
+                }
+                if (credentialStatus.value.status === "suspended") {
+                    return resultError(error_1.CredentialVerificationError.CredentialSuspended);
+                }
+                if (credentialStatus.value.status === "application-specific") {
+                    return resultError(error_1.CredentialVerificationError.CredentialStatusApplicationSpecific);
+                }
+            }
+            else if (policy.requireStatusCheck) {
+                return resultError(error_1.CredentialVerificationError.CredentialStatusRequired);
+            }
+            return {
+                success: true,
+                value: {
+                    valid: true,
+                    holderPublicKey: { ...holderResult.value.jwk },
+                    credentialStatus: credentialStatus?.success
+                        ? credentialStatus.value.status
+                        : undefined,
+                    statusListUri: credentialStatus?.success
+                        ? credentialStatus.value.uri
+                        : undefined,
+                    statusListIndex: credentialStatus?.success
+                        ? credentialStatus.value.index
+                        : undefined,
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/defaultHttpClient.d.ts

@@ -0,0 +1,3 @@
+import { HttpClient } from "./interfaces";
+export declare const defaultHttpClient: HttpClient;
+//# sourceMappingURL=defaultHttpClient.d.ts.map

package/dist/defaultHttpClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultHttpClient.d.ts","sourceRoot":"","sources":["../src/defaultHttpClient.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,eAAO,MAAM,iBAAiB,EAAE,UAS/B,CAAA"}

package/dist/defaultHttpClient.js

@@ -0,0 +1,18 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultHttpClient = void 0;
+const axios_1 = __importDefault(require("axios"));
+exports.defaultHttpClient = {
+    async get(url, headers, opts) {
+        const response = await axios_1.default.get(url, { ...opts, headers: headers });
+        return { status: response.status, data: response.data, headers: response.headers };
+    },
+    async post(url, data, headers, opts) {
+        const response = await axios_1.default.post(url, data, { ...opts, headers: headers });
+        return { status: response.status, data: response.data, headers: response.headers };
+    },
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist/error.d.ts

@@ -0,0 +1,134 @@
+export declare enum CredentialParsingError {
+    CouldNotParse = "CouldNotParse",
+    InvalidSdJwtVcPayload = "InvalidSdJwtVcPayload",
+    InvalidDatatype = "InvalidDatatype",
+    NotSupportedCredentialType = "NotSupportedCredentialType",
+    HeaderFail = "HeaderFail",
+    InfiniteRecursion = "InfiniteRecursion",
+    PayloadFail = "PayloadFail",
+    VctmDecodeFail = "VctmDecodeFail",
+    UnknownError = "UnknownError",
+    NotFound = "NotFound",
+    NotFoundExtends = "NotFoundExtends",
+    IntegrityMissing = "IntegrityMissing",
+    JwtVcIssuerMismatch = "JwtVcIssuerMismatch",
+    IntegrityFail = "IntegrityFail",
+    SchemaShapeFail = "SchemaShapeFail",
+    JwtVcIssuerFail = "JwtVcIssuerFail",
+    FailFetchIssuerMetadata = "FailFetchIssuerMetadata",
+    FailSchemaIssuerMetadata = "FailSchemaIssuerMetadata"
+}
+export declare const CredentialParsingWarnings: Set<CredentialParsingError>;
+export declare function isCredentialParsingWarnings(code: CredentialParsingError): boolean;
+export declare enum GetMatchingCredentialsError {
+    PresentationDefinitionParseError = "PresentationDefinitionParseError"
+}
+export declare enum ValidatePresentationRequirementsError {
+    PresentationSubmissionParameterIsMissing = "PresentationSubmissionParameterIsMissing",
+    ConstraintsAreNotSatisfied = "ConstraintsAreNotSatisfied",
+    PresentationSubmissionParsingFailed = "PresentationSubmissionParsingFailed",
+    FailedToParseAtLeastOnePresentation = "FailedToParseAtLeastOnePresentation",
+    InvalidVpToken = "InvalidVpToken",
+    CredentialParsingError = "CredentialParsingError",
+    CouldNotFindAssociatedInputDescriptorBasedOnPresentationSubmission = "CouldNotFindAssociatedInputDescriptorBasedOnPresentationSubmission",
+    CouldNotVerifyParsedCredentialWithInputDescriptor = "CouldNotVerifyParsedCredentialWithInputDescriptor",
+    UnsupportedFormat = "UnsupportedFormat"
+}
+export declare enum CredentialVerificationError {
+    UnknownProblem = "UnknownProblem",
+    VerificationProcessNotStarted = "VerificationProcessNotStarted",// will be used when the verifier functions cannot start the verification process because of format
+    InvalidDatatype = "InvalidDatatype",
+    InvalidFormat = "InvalidFormat",
+    MissingOpts = "MissingOpts",
+    InvalidCertificateChain = "InvalidCertificateChain",
+    InvalidSignature = "InvalidSignature",
+    CannotResolveIssuerPublicKey = "CannotResolveIssuerPublicKey",
+    CannotImportIssuerPublicKey = "CannotImportIssuerPublicKey",
+    NotTrustedIssuer = "NotTrustedIssuer",
+    VctRegistryNotConfigured = "VctRegistryNotConfigured",
+    ExpiredCredential = "ExpiredCredential",
+    InvalidCredentialHeader = "InvalidCredentialHeader",
+    InvalidCredentialPayload = "InvalidCredentialPayload",
+    InvalidDisclosures = "InvalidDisclosures",
+    UnexpectedIssuer = "UnexpectedIssuer",
+    UnexpectedCredentialType = "UnexpectedCredentialType",
+    MissingRequiredClaims = "MissingRequiredClaims",
+    CannotImportHolderPublicKey = "CannotImportHolderPublicKey",
+    CannotExtractHolderPublicKey = "CannotExtractHolderPublicKey",
+    HolderKeyAlgorithmMismatch = "HolderKeyAlgorithmMismatch",
+    KeyBindingRequired = "KeyBindingRequired",
+    KbJwtVerificationFailedHeader = "KbJwtVerificationFailedHeader",
+    KbJwtVerificationFailedIat = "KbJwtVerificationFailedIat",
+    KbJwtVerificationFailedReplay = "KbJwtVerificationFailedReplay",
+    KbJwtVerificationFailedMissingParameters = "KbJwtVerificationFailedMissingParameters",
+    KbJwtVerificationFailedWrongSdHash = "KbJwtVerificationFailedWrongSdHash",
+    KbJwtVerificationFailedUnexpectedAudience = "KbJwtVerificationFailedUnexpectedAudience",
+    KbJwtVerificationFailedUnexpectedNonce = "KbJwtVerificationFailedUnexpectedNonce",
+    KbJwtVerificationFailedSignatureValidation = "KbJwtVerificationFailedSignatureValidation",
+    CredentialStatusRequired = "CredentialStatusRequired",
+    CredentialStatusVerificationFailed = "CredentialStatusVerificationFailed",
+    CredentialRevoked = "CredentialRevoked",
+    CredentialSuspended = "CredentialSuspended",
+    CredentialStatusApplicationSpecific = "CredentialStatusApplicationSpecific",
+    MsoMdocMissingDeviceKeyInfo = "MsoMdocMissingDeviceKeyInfo",
+    MsoMdocInvalidDeviceSignature = "MsoMdocInvalidDeviceSignature"
+}
+export declare enum TokenStatusListVerificationError {
+    InvalidReference = "InvalidReference",
+    StatusListUriNotTrusted = "StatusListUriNotTrusted",
+    FetchFailed = "FetchFailed",
+    InvalidResponse = "InvalidResponse",
+    ResponseTooLarge = "ResponseTooLarge",
+    InvalidHeader = "InvalidHeader",
+    CannotResolveSigningKey = "CannotResolveSigningKey",
+    CannotImportSigningKey = "CannotImportSigningKey",
+    InvalidSignature = "InvalidSignature",
+    InvalidPayload = "InvalidPayload",
+    ExpiredStatusList = "ExpiredStatusList",
+    DecompressionFailed = "DecompressionFailed",
+    DecompressedListTooLarge = "DecompressedListTooLarge",
+    IndexOutOfRange = "IndexOutOfRange"
+}
+export declare enum X509ChainVerificationError {
+    EmptyChain = "EmptyChain",
+    NoTrustAnchors = "NoTrustAnchors",
+    ChainTooLong = "ChainTooLong",
+    ChainTooLarge = "ChainTooLarge",
+    InvalidCertificateEncoding = "InvalidCertificateEncoding",
+    DuplicateCertificate = "DuplicateCertificate",
+    InvalidTrustAnchor = "InvalidTrustAnchor",
+    InvalidChainOrder = "InvalidChainOrder",
+    InvalidValidationTime = "InvalidValidationTime",
+    CertificateNotYetValid = "CertificateNotYetValid",
+    CertificateExpired = "CertificateExpired",
+    WeakCertificateSignature = "WeakCertificateSignature",
+    UnsupportedCriticalExtension = "UnsupportedCriticalExtension",
+    LeafIsCertificateAuthority = "LeafIsCertificateAuthority",
+    InvalidLeafKeyUsage = "InvalidLeafKeyUsage",
+    AlgorithmMismatch = "AlgorithmMismatch",
+    ExtendedKeyUsageMismatch = "ExtendedKeyUsageMismatch",
+    InvalidExpectedHostname = "InvalidExpectedHostname",
+    HostnameMismatch = "HostnameMismatch",
+    InvalidCertificateChain = "InvalidCertificateChain",
+    UntrustedRoot = "UntrustedRoot",
+    CertificateRevoked = "CertificateRevoked",
+    RevocationStatusUnavailable = "RevocationStatusUnavailable"
+}
+export declare enum PublicKeyResolutionError {
+    CannotResolvePublicKey = "CannotResolvePublicKey",
+    IssuerNotTrusted = "IssuerNotTrusted",
+    MissingKeyIdentifier = "MissingKeyIdentifier",
+    MissingAlgorithm = "MissingAlgorithm",
+    AlgorithmNotAllowed = "AlgorithmNotAllowed",
+    KeyNotFound = "KeyNotFound",
+    DuplicateKeyIdentifier = "DuplicateKeyIdentifier",
+    InvalidJwksResponse = "InvalidJwksResponse",
+    KeyNotAllowed = "KeyNotAllowed",
+    CredentialTypeNotAllowed = "CredentialTypeNotAllowed",
+    RemoteJwksFetchFailed = "RemoteJwksFetchFailed"
+}
+export declare enum CredentialRenderingError {
+    IntegrityCheckFailed = "IntegrityCheckFailed",
+    CouldNotFetchSvg = "CouldNotFetchSvg"
+}
+//# sourceMappingURL=error.d.ts.map

package/dist/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,oBAAY,sBAAsB;IACjC,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,eAAe,oBAAoB;IACnC,0BAA0B,+BAA+B;IACzD,UAAU,eAAe;IACzB,iBAAiB,sBAAsB;IACvC,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IACjC,YAAY,iBAAiB;IAC7B,QAAQ,aAAa;IACrB,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,mBAAmB,wBAAwB;IAC3C,aAAa,kBAAkB;IAC/B,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,uBAAuB,4BAA4B;IACnD,wBAAwB,6BAA6B;CACrD;AAED,eAAO,MAAM,yBAAyB,6BASpC,CAAC;AAEH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAEjF;AAED,oBAAY,2BAA2B;IACtC,gCAAgC,qCAAqC;CACrE;AAED,oBAAY,qCAAqC;IAChD,wCAAwC,6CAA6C;IACrF,0BAA0B,+BAA+B;IACzD,mCAAmC,wCAAwC;IAC3E,mCAAmC,wCAAwC;IAC3E,cAAc,mBAAmB;IACjC,sBAAsB,2BAA2B;IACjD,kEAAkE,uEAAuE;IACzI,iDAAiD,sDAAsD;IACvG,iBAAiB,sBAAsB;CAEvC;AAED,oBAAY,2BAA2B;IACtC,cAAc,mBAAmB;IACjC,6BAA6B,kCAAkC,CAAE,mGAAmG;IACpK,eAAe,oBAAoB;IACnC,aAAa,kBAAkB;IAC/B,WAAW,gBAAgB;IAC3B,uBAAuB,4BAA4B;IAGnD,gBAAgB,qBAAqB;IACrC,4BAA4B,iCAAiC;IAC7D,2BAA2B,gCAAgC;IAC3D,gBAAgB,qBAAqB;IACrC,wBAAwB,6BAA6B;IAErD,iBAAiB,sBAAsB;IACvC,uBAAuB,4BAA4B;IACnD,wBAAwB,6BAA6B;IACrD,kBAAkB,uBAAuB;IACzC,gBAAgB,qBAAqB;IACrC,wBAAwB,6BAA6B;IACrD,qBAAqB,0BAA0B;IAE/C,2BAA2B,gCAAgC;IAC3D,4BAA4B,iCAAiC;IAC7D,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,6BAA6B,kCAAkC;IAC/D,0BAA0B,+BAA+B;IACzD,6BAA6B,kCAAkC;IAC/D,wCAAwC,6CAA6C;IACrF,kCAAkC,uCAAuC;IACzE,yCAAyC,8CAA8C;IACvF,sCAAsC,2CAA2C;IACjF,0CAA0C,+CAA+C;IAGzF,wBAAwB,6BAA6B;IACrD,kCAAkC,uCAAuC;IACzE,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,mCAAmC,wCAAwC;IAG3E,2BAA2B,gCAAgC;IAC3D,6BAA6B,kCAAkC;CAC/D;AAED,oBAAY,gCAAgC;IAC3C,gBAAgB,qBAAqB;IACrC,uBAAuB,4BAA4B;IACnD,WAAW,gBAAgB;IAC3B,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,aAAa,kBAAkB;IAC/B,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,gBAAgB,qBAAqB;IACrC,cAAc,mBAAmB;IACjC,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,wBAAwB,6BAA6B;IACrD,eAAe,oBAAoB;CACnC;AAED,oBAAY,0BAA0B;IACrC,UAAU,eAAe;IACzB,cAAc,mBAAmB;IACjC,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,0BAA0B,+BAA+B;IACzD,oBAAoB,yBAAyB;IAC7C,kBAAkB,uBAAuB;IACzC,iBAAiB,sBAAsB;IACvC,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IACjD,kBAAkB,uBAAuB;IACzC,wBAAwB,6BAA6B;IACrD,4BAA4B,iCAAiC;IAC7D,0BAA0B,+BAA+B;IACzD,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,wBAAwB,6BAA6B;IACrD,uBAAuB,4BAA4B;IACnD,gBAAgB,qBAAqB;IACrC,uBAAuB,4BAA4B;IACnD,aAAa,kBAAkB;IAC/B,kBAAkB,uBAAuB;IACzC,2BAA2B,gCAAgC;CAC3D;AAED,oBAAY,wBAAwB;IACnC,sBAAsB,2BAA2B;IACjD,gBAAgB,qBAAqB;IACrC,oBAAoB,yBAAyB;IAC7C,gBAAgB,qBAAqB;IACrC,mBAAmB,wBAAwB;IAC3C,WAAW,gBAAgB;IAC3B,sBAAsB,2BAA2B;IACjD,mBAAmB,wBAAwB;IAC3C,aAAa,kBAAkB;IAC/B,wBAAwB,6BAA6B;IACrD,qBAAqB,0BAA0B;CAC/C;AAED,oBAAY,wBAAwB;IACnC,oBAAoB,yBAAyB;IAC7C,gBAAgB,qBAAqB;CACrC"}