-
Notifications
You must be signed in to change notification settings - Fork 18
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: Introduce EBSI attestation service to get VCs, for instance to …
…onboard
- Loading branch information
Showing
20 changed files
with
1,162 additions
and
518 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
119 changes: 119 additions & 0 deletions
119
packages/ebsi-authorization-client/__tests__/attestation.test.ts
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,119 @@ | ||
| import { CreateRequestObjectMode } from '@sphereon/oid4vci-common' | ||
| import { toJwk } from '@sphereon/ssi-sdk-ext.key-utils' | ||
| import { createObjects, getConfig } from '@sphereon/ssi-sdk.agent-config' | ||
| import { IOID4VCIHolder } from '@sphereon/ssi-sdk.oid4vci-holder' | ||
| import { IPresentationExchange } from '@sphereon/ssi-sdk.presentation-exchange' | ||
| import { IDidAuthSiopOpAuthenticator } from '@sphereon/ssi-sdk.siopv2-oid4vp-op-auth' | ||
| import { IDIDManager, IIdentifier, IKeyManager, MinimalImportableKey, TAgent } from '@veramo/core' | ||
| // @ts-ignore | ||
| import cors from 'cors' | ||
|
|
||
| // @ts-ignore | ||
| import express, { Express } from 'express' | ||
| import { Server } from 'http' | ||
|
|
||
| import { DataSource } from 'typeorm' | ||
| import { ebsiCreateAttestationRequestAuthURL } from '../src/functions' | ||
|
|
||
| let dbConnection: Promise<DataSource> | ||
| let agent: TAgent<IKeyManager & IDIDManager & IDidAuthSiopOpAuthenticator & IPresentationExchange & IOID4VCIHolder> | ||
| let app: Express | undefined | ||
| let server: Server<any, any> | undefined | ||
| const port = 3333 | ||
| const secp256k1PrivateKey: MinimalImportableKey = { | ||
| privateKeyHex: '6e491660cf923f7d9ce4a03401444b361817df9e76b926b55e21ffe7144d2ee6', | ||
| kms: 'local', | ||
| type: 'Secp256k1', | ||
| meta: { | ||
| purposes: ['capabilityInvocation'], | ||
| }, | ||
| } | ||
| const secp256k1Jwk = toJwk(secp256k1PrivateKey.privateKeyHex, 'Secp256k1', { isPrivateKey: true }) | ||
|
|
||
| const secp256r1PrivateKey: MinimalImportableKey = { | ||
| privateKeyHex: 'f0710a0bb80c28a14ae62831bfe7f90a6937d006295fad6115e5539e7e314ee4', | ||
| kms: 'local', | ||
| type: 'Secp256r1', | ||
| meta: { | ||
| purposes: ['assertionMethod', 'authentication'], | ||
| }, | ||
| } | ||
|
|
||
| const secp256r1Jwk = toJwk(secp256r1PrivateKey.privateKeyHex, 'Secp256r1', { isPrivateKey: true }) | ||
|
|
||
| const MOCK_BASE_URL = 'https://ebsi-sphereon.ngrok.dev' // `http://localhost:${port}` | ||
| jest.setTimeout(600000) | ||
|
|
||
| const setup = async (): Promise<boolean> => { | ||
| const config = await getConfig('packages/ebsi-authorization-client/agent.yml') | ||
| const { localAgent, db } = await createObjects(config, { localAgent: '/agent', db: '/dbConnection' }) | ||
| agent = localAgent as TAgent<IKeyManager & IDIDManager & IDidAuthSiopOpAuthenticator & IPresentationExchange & IOID4VCIHolder> | ||
| dbConnection = db | ||
|
|
||
| app = express() | ||
| app.use( | ||
| cors({ | ||
| origin: ['*'], | ||
| }), | ||
| ) | ||
| app.use(express.json()) | ||
|
|
||
| app.get('/', async (req: express.Request, res: express.Response) => { | ||
| res.send({ hello: 'world' }) | ||
| }) | ||
|
|
||
| app.get('/.well-known/jwks', async (req: express.Request, res: express.Response) => { | ||
| res.send({ keys: [{ ...secp256k1Jwk }, { ...secp256r1Jwk }] }) | ||
| }) | ||
|
|
||
| console.log(`########## $${MOCK_BASE_URL}`) | ||
|
|
||
| server = app.listen(port, () => { | ||
| console.log(`Mock server is listening to port ${port}`) | ||
| }) | ||
|
|
||
| return true | ||
| } | ||
|
|
||
| const tearDown = async (): Promise<boolean> => { | ||
| if (server) { | ||
| server.closeAllConnections() | ||
| } | ||
|
|
||
| ;(await dbConnection).close() | ||
| return true | ||
| } | ||
|
|
||
| describe('attestation client should', () => { | ||
| let identifier: IIdentifier | ||
| beforeAll(async (): Promise<void> => { | ||
| await setup() | ||
| identifier = await agent.didManagerCreate({ provider: 'did:ebsi', options: { secp256k1Key: secp256k1PrivateKey, secp256r1Key: secp256r1PrivateKey } }) | ||
| console.log(identifier.did) | ||
| }) | ||
|
|
||
| afterAll(async (): Promise<void> => { | ||
| await tearDown() | ||
| }) | ||
|
|
||
| it('get attestation to onboard', async () => { | ||
| const clientId = MOCK_BASE_URL | ||
| const authUrl = await ebsiCreateAttestationRequestAuthURL( | ||
| { | ||
| credentialType: 'VerifiableAuthorisationToOnboard', | ||
| redirectUri: `${MOCK_BASE_URL}`, | ||
| clientId, | ||
| idOpts: { identifier }, | ||
| credentialIssuer: 'https://conformance-test.ebsi.eu/conformance/v3/issuer-mock', | ||
| requestObjectOpts: { | ||
| iss: clientId, | ||
| requestObjectMode: CreateRequestObjectMode.REQUEST_OBJECT, | ||
| jwksUri: `${MOCK_BASE_URL}/.well-known/jwks`, | ||
| }, | ||
| }, | ||
| { agent }, | ||
| ) | ||
|
|
||
| console.log(authUrl) | ||
| }) | ||
| }) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
36 changes: 36 additions & 0 deletions
36
packages/ebsi-authorization-client/src/agent/EBSIAttestationService.ts
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| import { OID4VCICredentialFormat, RequestObjectOpts } from '@sphereon/oid4vci-common' | ||
| import { IIdentifierOpts } from '@sphereon/ssi-sdk-ext.did-utils' | ||
| import { AttestationAuthRequestUrlResult, ebsiCreateAttestationRequestAuthURL } from '../functions' | ||
| import { IRequiredContext } from '../types/IEBSIAuthorizationClient' | ||
|
|
||
| export class EBSIAttestationService { | ||
| private readonly credentialIssuer: string | ||
| private readonly idOpts: IIdentifierOpts | ||
| private readonly clientId: string | ||
|
|
||
| constructor(args: { credentialIssuer: string; idOpts: IIdentifierOpts; clientId: string }) { | ||
| this.credentialIssuer = args.credentialIssuer | ||
| this.idOpts = args.idOpts | ||
| this.clientId = args.clientId | ||
| } | ||
|
|
||
| createAttestationRequestAuthURL( | ||
| opts: { | ||
| credentialType: string | ||
| requestObjectOpts: RequestObjectOpts | ||
| redirectUri?: string | ||
| formats?: Array<Extract<OID4VCICredentialFormat, 'jwt_vc' | 'jwt_vc_json'>> | ||
| }, | ||
| context: IRequiredContext, | ||
| ): Promise<AttestationAuthRequestUrlResult> { | ||
| return ebsiCreateAttestationRequestAuthURL( | ||
| { | ||
| credentialIssuer: this.credentialIssuer, | ||
| idOpts: this.idOpts, | ||
| clientId: this.clientId, | ||
| ...opts, | ||
| }, | ||
| context, | ||
| ) | ||
| } | ||
| } |
Oops, something went wrong.