Skip to content

Chore/allow sd jwt #54

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sosweetham merged 5 commits into from
Jan 27, 2025
Merged

Chore/allow sd jwt #54

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
70ff1a0
feat: allow sd-jwt
coodos Jan 27, 2025
4b87320
chore: add prettierrc
coodos Jan 27, 2025
23a4180
chore: bump version
coodos Jan 27, 2025
6d015fd
chore: fix mock
coodos Jan 27, 2025
d8395a9
chore: fix mocks
coodos Jan 27, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .prettierrc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
{
"singleQuote": true,
"trailingComma": "all",
"tabWidth": 4
}
81 changes: 41 additions & 40 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,41 +1,42 @@
{
"name": "@tanglelabs/oid4vc",
"version": "0.2.1-alpha.10",
"main": "dist/index.js",
"license": "MIT",
"type": "module",
"devDependencies": {
"@types/express": "^4.17.17",
"@types/jest": "^29.5.3",
"@types/mime": "^4.0.0",
"@types/node": "^20.4.2",
"express": "^4.18.2",
"express-async-handler": "^1.2.0",
"fix-esm-import-path": "^1.5.0",
"jest": "^29.6.2",
"key-did-resolver": "^3.0.0",
"nodemon": "^3.0.1",
"ts-jest": "^29.1.1",
"ts-jest-resolver": "^2.0.1",
"ts-node": "^10.9.1",
"typescript": "^5.1.6"
},
"dependencies": {
"@sphereon/did-resolver-jwk": "0.10.2-unstable.5",
"@sphereon/pex": "2.1.0",
"@sphereon/pex-models": "^2.0.3",
"axios": "^1.6.0",
"buffer": "^6.0.3",
"did-jwt": "^7.2.4",
"did-resolver": "^4.1.0",
"nanoid": "^3.0.0",
"tweetnacl": "^1.0.3",
"tweetnacl-util": "^0.15.1"
},
"scripts": {
"dev": "nodemon --watch './**/*.ts' --exec 'node --experimental-specifier-resolution=node --trace-warnings --loader ts-node/esm' src/test.ts",
"build": "tsc && fix-esm-import-path ./dist",
"test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
"test-cov": "node --experimental-vm-modules node_modules/jest/bin/jest.js --coverage"
}
}
"name": "@tanglelabs/oid4vc",
"version": "0.2.1-alpha.11",
"main": "dist/index.js",
"license": "MIT",
"type": "module",
"devDependencies": {
"@types/express": "^4.17.17",
"@types/jest": "^29.5.3",
"@types/mime": "^4.0.0",
"@types/node": "^20.4.2",
"express": "^4.18.2",
"express-async-errors": "^3.1.1",
"express-async-handler": "^1.2.0",
"fix-esm-import-path": "^1.5.0",
"jest": "^29.6.2",
"key-did-resolver": "^3.0.0",
"nodemon": "^3.0.1",
"ts-jest": "^29.1.1",
"ts-jest-resolver": "^2.0.1",
"ts-node": "^10.9.1",
"typescript": "^5.1.6"
},
"dependencies": {
"@sphereon/did-resolver-jwk": "0.10.2-unstable.5",
"@sphereon/pex": "2.1.0",
"@sphereon/pex-models": "^2.0.3",
"axios": "^1.6.0",
"buffer": "^6.0.3",
"did-jwt": "^7.2.4",
"did-resolver": "^4.1.0",
"nanoid": "^3.0.0",
"tweetnacl": "^1.0.3",
"tweetnacl-util": "^0.15.1"
},
"scripts": {
"dev": "nodemon --watch './**/*.ts' --exec 'node --experimental-specifier-resolution=node --trace-warnings --loader ts-node/esm' src/test.ts",
"build": "tsc && fix-esm-import-path ./dist",
"test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
"test-cov": "node --experimental-vm-modules node_modules/jest/bin/jest.js --coverage"
}
}
12 changes: 12 additions & 0 deletions pnpm-lock.yaml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

125 changes: 76 additions & 49 deletions src/oid4vci/Holder/holder.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,11 @@
import axios from "axios";
import { parseQueryStringToJson } from "../../utils/query";
import { CreateTokenRequestOptions } from "./index.types";
import { KeyPairRequirements } from "../../common/index.types";
import * as didJWT from "did-jwt";
import { buildSigner, snakeToCamelRecursive } from "../../utils/utils";
import { joinUrls } from "../../utils/url";
import axios from 'axios';
import { parseQueryStringToJson } from '../../utils/query';
import { CreateTokenRequestOptions } from './index.types';
import { KeyPairRequirements } from '../../common/index.types';
import * as didJWT from 'did-jwt';
import { buildSigner, snakeToCamelRecursive } from '../../utils/utils';
import { joinUrls } from '../../utils/url';
import qs from 'querystring';

export class VcHolder {
private holderKeys: KeyPairRequirements;
Expand All @@ -17,18 +18,18 @@ export class VcHolder {

async createTokenRequest(args: CreateTokenRequestOptions) {
const response = {
grant_type: "urn:ietf:params:oauth:grant-type:pre-authorized_code",
"pre-authorized_code": args.preAuthCode,
grant_type: 'urn:ietf:params:oauth:grant-type:pre-authorized_code',
'pre-authorized_code': args.preAuthCode,
};
// @ts-ignore
if (args.userPin) response.user_pin = args.userPin;
return response;
}

async parseCredentialOffer(offer: string): Promise<Record<string, any>> {
const rawOffer = parseQueryStringToJson(
decodeURI(offer.split("openid-credential-offer://")[1])
);
const decodedUri = decodeURI(offer);
const search = new URL(decodedUri).search;
const rawOffer = parseQueryStringToJson(search);
let credentialOffer;
if (rawOffer.credentialOfferUri) {
const { data } = await axios.get(rawOffer.credentialOfferUri);
Expand All @@ -44,11 +45,11 @@ export class VcHolder {
const offerRaw = await this.parseCredentialOffer(credentialOffer);
const metadataEndpoint = joinUrls(
offerRaw.credentialIssuer,
".well-known/openid-credential-issuer"
'.well-known/openid-credential-issuer',
);
const oauthMetadataUrl = joinUrls(
offerRaw.credentialIssuer,
".well-known/oauth-authorization-server"
'.well-known/oauth-authorization-server',
);
const { data } = await axios.get(metadataEndpoint);
const { data: oauthServerMetadata } = await axios.get(oauthMetadataUrl);
Expand All @@ -59,40 +60,60 @@ export class VcHolder {

const display =
metadata.display &&
metadata.display.find((d: any) => d.locale === "en-US");
metadata.display.find((d: any) => d.locale === 'en-US');
metadata.display = display;

return metadata;
}

constructPayload(
credentials: string[],
conf: Record<string, any>,
proof: string,
) {
let payload;
if (credentials.length > 1) {
payload = {
credential_requests: [
...credentials.map((c) => {
const format = conf[c].format;
let p: Record<string, any> = {
format,
proof: {
proof_type: 'jwt',
jwt: proof,
},
credential_definition:
conf[c].credential_definition,
};
if (format === 'vc+sd-jwt') p.vct = conf[c].vct;
return p;
}),
],
};
} else {
payload = {
format: conf[credentials[0]].format,
credential_definition:
conf[credentials[0]].credential_definition,
proof: {
proof_type: 'jwt',
jwt: proof,
},
};
}
return payload;
}

async retrieveCredential(
path: string,
accessToken: string,
credentials: string[],
proof: string
proof: string,
conf: Record<string, any> = null,
): Promise<string[]> {
const payload =
credentials.length > 1
? {
credential_requests: [
...credentials.map((c) => ({
format: "jwt_vc_json",
// credentials,
proof: {
proof_type: "jwt",
jwt: proof,
},
})),
],
}
: {
format: "jwt_vc_json",
// credentials,
proof: {
proof_type: "jwt",
jwt: proof,
},
};
const payload = this.constructPayload(credentials, conf, proof);

const { data } = await axios.post(path, payload, {
headers: {
Authorization: `Bearer ${accessToken}`,
Expand All @@ -102,7 +123,7 @@ export class VcHolder {
Object.keys(credentials).length > 1
? data.credential_responses.map(
(c: { format: string; credential: string }) =>
c.credential
c.credential,
)
: [data.credential];
return response;
Expand All @@ -119,22 +140,22 @@ export class VcHolder {

const credentialConfigsExist = this.checkArrayOverlap(
credentialConfigurationIds,
Object.keys(metadata.credentialConfigurationsSupported)
Object.keys(metadata.credentialConfigurationsSupported),
);

if (!credentialConfigsExist)
throw new Error("unsupported_credential_type");
throw new Error('unsupported_credential_type');

const createTokenPayload: { preAuthCode: any; userPin?: number } = {
preAuthCode:
grants["urn:ietf:params:oauth:grant-type:pre-authorized_code"][
"pre-authorized_code"
grants['urn:ietf:params:oauth:grant-type:pre-authorized_code'][
'pre-authorized_code'
],
};

if (
grants["urn:ietf:params:oauth:grant-type:pre-authorized_code"][
"user_pin_required"
grants['urn:ietf:params:oauth:grant-type:pre-authorized_code'][
'user_pin_required'
]
)
createTokenPayload.userPin = Number(pin);
Expand All @@ -143,7 +164,12 @@ export class VcHolder {

const tokenResponse = await axios.post(
metadata.tokenEndpoint,
tokenRequest
qs.stringify(tokenRequest),
{
headers: {
'Content-Type': 'application/x-www-form-urlencoded',
},
},
);

const token = await didJWT.createJWT(
Expand All @@ -152,7 +178,7 @@ export class VcHolder {
nonce: tokenResponse.data.c_nonce,
},
{ signer: this.signer, issuer: this.holderKeys.did },
{ alg: this.holderKeys.signingAlgorithm, kid: this.holderKeys.kid }
{ alg: this.holderKeys.signingAlgorithm, kid: this.holderKeys.kid },
);

const endpoint =
Expand All @@ -164,9 +190,10 @@ export class VcHolder {
endpoint,
tokenResponse.data.access_token,
credentialConfigurationIds,
token
token,
metadata.credentialConfigurationsSupported,
);
}
}

export * from "./index.types";
export * from './index.types';
Loading
Loading