Function createItWalletEntityConfiguration

Parameters

• options: CreateEntityConfigurationOptions

  Entity configuration creation options.

  • claims: {
        authority_hints?: string[];
        constraints?: {
            allowed_entity_types?: string[];
            max_path_length?: number;
            naming_constraints?: { excluded?: string[]; permitted?: string[] };
        };
        crit?: string[];
        exp: number;
        iat: number;
        iss: string;
        jwks: {
            keys: {
                alg?: string;
                key_ops?: string[];
                kid: string;
                kty: string;
                use?: string;
                x5c?: string[];
                x5t?: string;
                "x5t#S256"?: string;
                x5u?: string;
                [key: string]: unknown;
            }[];
        };
        metadata?: | {
            federation_entity?: {
                contacts?: string[];
                federation_fetch_endpoint?: string;
                federation_historical_keys_endpoint?: string;
                federation_list_endpoint?: string;
                federation_resolve_endpoint?: string;
                federation_trust_mark_endpoint?: string;
                federation_trust_mark_list_endpoint?: string;
                federation_trust_mark_status_endpoint?: string;
                homepage_uri?: string;
                jwks?: {
                    keys: {
                        alg?: string;
                        key_ops?: (...)[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: (...)[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                jwks_uri?: string;
                logo_uri?: string;
                organization_name?: string;
                policy_uri?: string;
                signed_jwks_uri?: string;
                tos_uri?: string;
                [key: string]: unknown;
            };
            oauth_authorization_server?: {
                acr_values_supported: string[];
                authorization_endpoint: string;
                authorization_signing_alg_values_supported: string[];
                client_registration_types_supported: ("automatic" | "explicit")[];
                code_challenge_methods_supported: string[];
                grant_types_supported: string[];
                issuer: string;
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                pushed_authorization_request_endpoint: string;
                request_object_signing_alg_values_supported: string[];
                require_signed_request_object?: boolean;
                response_modes_supported: ("query" | "form_post.jwt")[];
                response_types_supported: string[];
                scopes_supported: string[];
                token_endpoint: string;
                token_endpoint_auth_methods_supported: string[];
                token_endpoint_auth_signing_alg_values_supported: string[];
                [key: string]: unknown;
            };
            openid_credential_issuer?: {
                authorization_servers?: [string, ...string[]];
                batch_credential_issuance: { batch_size: number };
                credential_configurations_supported: Record<
                    string,
                    (
                        | {
                            credential_signing_alg_values_supported: string[];
                            format: "dc+sd-jwt";
                            vct: string;
                        }
                        | {
                            credential_signing_alg_values_supported: number[];
                            doctype: string;
                            format: "mso_mdoc";
                        }
                    ) & {
                        claims: { display: (...)[]; path: (...)[] }[];
                        cryptographic_binding_methods_supported: string[];
                        display: { locale: string; name: string }[];
                        proof_types_supported: {
                            jwt: { proof_signing_alg_values_supported: (...)[] };
                        };
                        scope: string;
                    },
                >;
                credential_endpoint: string;
                credential_hash_alg_supported: string;
                credential_issuer: string;
                deferred_credential_endpoint: string;
                display: { locale: string; name: string }[];
                evidence_supported: string[];
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                nonce_endpoint: string;
                notification_endpoint: string;
                revocation_endpoint: string;
                status_assertion_endpoint: string;
                status_attestation_endpoint: string;
                trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet")[];
                [key: string]: unknown;
            };
            openid_credential_verifier?: {
                application_type: "web";
                authorization_encrypted_response_alg: string;
                authorization_encrypted_response_enc: string;
                authorization_signed_response_alg: string;
                client_id: string;
                client_name: string;
                erasure_endpoint?: string;
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                redirect_uris?: string[];
                request_uris: string[];
                response_uris: string[];
                vp_formats: Record<
                    string,
                    { alg?: string[]; "sd-jwt_alg_values"?: string[] },
                >;
                [key: string]: unknown;
            };
            wallet_provider?: {
                jwks?: {
                    keys: {
                        alg?: string;
                        key_ops?: (...)[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: (...)[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                jwks_uri?: string;
                signed_jwks_uri?: string;
                [key: string]: unknown;
            };
        }
        | {
            federation_entity?: {
                contacts?: string[];
                federation_fetch_endpoint?: string;
                federation_historical_keys_endpoint?: string;
                federation_list_endpoint?: string;
                federation_resolve_endpoint?: string;
                federation_trust_mark_endpoint?: string;
                federation_trust_mark_list_endpoint?: string;
                federation_trust_mark_status_endpoint?: string;
                homepage_uri?: string;
                jwks?: {
                    keys: {
                        alg?: string;
                        key_ops?: (...)[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: (...)[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                jwks_uri?: string;
                logo_uri?: string;
                organization_name?: string;
                policy_uri?: string;
                signed_jwks_uri?: string;
                tos_uri?: string;
                [key: string]: unknown;
            };
            oauth_authorization_server?: {
                acr_values_supported: string[];
                authorization_endpoint: string;
                authorization_signing_alg_values_supported: string[];
                client_attestation_pop_signing_alg_values_supported: string[];
                client_attestation_signing_alg_values_supported: string[];
                client_registration_types_supported: ("automatic" | "explicit")[];
                code_challenge_methods_supported: string[];
                dpop_signing_alg_values_supported: string[];
                grant_types_supported: string[];
                issuer: string;
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                pushed_authorization_request_endpoint: string;
                request_object_signing_alg_values_supported: string[];
                require_signed_request_object: true;
                response_types_supported: string[];
                scopes_supported: string[];
                token_endpoint: string;
                token_endpoint_auth_methods_supported: string[];
                token_endpoint_auth_signing_alg_values_supported: string[];
                [key: string]: unknown;
            };
            openid_credential_issuer?: {
                authorization_servers?: [string, ...string[]];
                batch_credential_issuance?: { batch_size: number };
                credential_configurations_supported: Record<
                    string,
                    (
                        | {
                            credential_signing_alg_values_supported: string[];
                            format: "dc+sd-jwt";
                            vct: string;
                        }
                        | {
                            credential_signing_alg_values_supported: number[];
                            doctype: string;
                            format: "mso_mdoc";
                        }
                    ) & {
                        authentic_sources: { dataset_id: string; entity_id: string };
                        credential_metadata: { claims?: (...)[]; display?: (...)[] };
                        cryptographic_binding_methods_supported: string[];
                        proof_types_supported: {
                            jwt: {
                                key_attestations_required?: (...) | (...);
                                proof_signing_alg_values_supported: (...)[];
                            };
                        };
                        schema_id: string;
                        scope: string;
                    },
                >;
                credential_endpoint: string;
                credential_issuer: string;
                deferred_credential_endpoint?: string;
                display?: {
                    background_color?: string;
                    background_image?: {
                        alt_text?: (...)
                        | (...);
                        uri: string;
                        "uri#integrity"?: (...) | (...);
                    };
                    description?: string;
                    locale: string;
                    logo?: {
                        alt_text?: (...)
                        | (...);
                        uri: string;
                        "uri#integrity"?: (...) | (...);
                    };
                    name: string;
                    watermark_image?: {
                        alt_text?: (...)
                        | (...);
                        uri: string;
                        "uri#integrity"?: (...) | (...);
                    };
                }[];
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                nonce_endpoint?: string;
                notification_endpoint?: string;
                status_list_aggregation_endpoint?: string;
                trust_frameworks_supported: (
                    | "it_cie"
                    | "it_wallet"
                    | "eudi_wallet"
                    | "it_l2+document_proof"
                    | "it_spid"
                )[];
                [key: string]: unknown;
            };
            openid_credential_verifier?: {
                application_type: "web";
                client_id: string;
                client_name: string;
                encrypted_response_enc_values_supported: string[];
                erasure_endpoint?: string;
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                logo_uri: string;
                redirect_uris?: string[];
                request_uris: string[];
                response_uris: string[];
                vp_formats_supported: Record<
                    string,
                    {
                        alg?: string[];
                        deviceauth_alg_values?: number[];
                        issuerauth_alg_values?: number[];
                        "kb-jwt_alg_values"?: string[];
                        "sd-jwt_alg_values"?: string[];
                    },
                >;
                [key: string]: unknown;
            };
            wallet_solution?: {
                jwks?: {
                    keys: {
                        alg?: string;
                        key_ops?: (...)[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: (...)[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                jwks_uri?: string;
                logo_uri: string;
                signed_jwks_uri?: string;
                wallet_metadata: {
                    authorization_endpoint: string;
                    client_id_prefixes_supported: ("openid_federation" | "x509_hash")[];
                    credential_offer_endpoint: string;
                    request_object_signing_alg_values_supported: string[];
                    response_modes_supported: "query"[];
                    response_types_supported: string[];
                    vp_formats_supported: Record<string, { [key: string]: unknown }>;
                    wallet_name: string;
                    [key: string]: unknown;
                };
                [key: string]: unknown;
            };
        }
        | {
            federation_entity?: {
                contacts?: string[];
                federation_fetch_endpoint?: string;
                federation_historical_keys_endpoint?: string;
                federation_list_endpoint?: string;
                federation_resolve_endpoint?: string;
                federation_trust_mark_endpoint?: string;
                federation_trust_mark_list_endpoint?: string;
                federation_trust_mark_status_endpoint?: string;
                homepage_uri?: string;
                jwks?: {
                    keys: {
                        alg?: string;
                        key_ops?: (...)[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: (...)[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                jwks_uri?: string;
                logo_uri?: string;
                organization_name?: string;
                policy_uri?: string;
                signed_jwks_uri?: string;
                tos_uri?: string;
                [key: string]: unknown;
            };
            oauth_authorization_server?: {
                acr_values_supported: string[];
                authorization_endpoint: string;
                authorization_signing_alg_values_supported: string[];
                client_attestation_pop_signing_alg_values_supported: string[];
                client_attestation_signing_alg_values_supported: string[];
                client_registration_types_supported: ("automatic" | "explicit")[];
                code_challenge_methods_supported: string[];
                dpop_signing_alg_values_supported: string[];
                grant_types_supported: string[];
                issuer: string;
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                pushed_authorization_request_endpoint: string;
                request_object_signing_alg_values_supported: string[];
                require_signed_request_object: true;
                response_types_supported: string[];
                scopes_supported: string[];
                token_endpoint: string;
                token_endpoint_auth_methods_supported: string[];
                token_endpoint_auth_signing_alg_values_supported: string[];
                [key: string]: unknown;
            };
            openid_credential_issuer?: {
                authorization_servers?: [string, ...string[]];
                batch_credential_issuance?: { batch_size: number };
                credential_configurations_supported: Record<
                    string,
                    (
                        | {
                            credential_signing_alg_values_supported: string[];
                            format: "dc+sd-jwt";
                            vct: string;
                        }
                        | {
                            credential_signing_alg_values_supported: number[];
                            doctype: string;
                            format: "mso_mdoc";
                        }
                    ) & {
                        authentic_sources: { dataset_id: string; entity_id: string };
                        credential_metadata: { claims?: (...)[]; display?: (...)[] };
                        cryptographic_binding_methods_supported: string[];
                        proof_types_supported: {
                            jwt: {
                                key_attestations_required?: (...) | (...);
                                proof_signing_alg_values_supported: (...)[];
                            };
                        };
                        schema_id: string;
                        scope: string;
                    },
                >;
                credential_endpoint: string;
                credential_issuer: string;
                deferred_credential_endpoint?: string;
                display?: {
                    background_color?: string;
                    background_image?: {
                        alt_text?: (...)
                        | (...);
                        uri: string;
                        "uri#integrity"?: (...) | (...);
                    };
                    description?: string;
                    locale: string;
                    logo?: {
                        alt_text?: (...)
                        | (...);
                        uri: string;
                        "uri#integrity"?: (...) | (...);
                    };
                    name: string;
                    watermark_image?: {
                        alt_text?: (...)
                        | (...);
                        uri: string;
                        "uri#integrity"?: (...) | (...);
                    };
                }[];
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                nonce_endpoint?: string;
                notification_endpoint?: string;
                status_list_aggregation_endpoint?: string;
                trust_frameworks_supported: (
                    | "it_cie"
                    | "it_wallet"
                    | "eudi_wallet"
                    | "it_l2+document_proof"
                    | "it_spid"
                )[];
                [key: string]: unknown;
            };
            openid_credential_verifier?: {
                application_type: "web";
                client_id: string;
                client_name: string;
                encrypted_response_enc_values_supported: string[];
                erasure_endpoint?: string;
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                logo_uri: string;
                redirect_uris?: string[];
                request_uris: string[];
                response_uris: string[];
                vp_formats_supported: Record<
                    string,
                    {
                        alg?: string[];
                        deviceauth_alg_values?: number[];
                        issuerauth_alg_values?: number[];
                        "kb-jwt_alg_values"?: string[];
                        "sd-jwt_alg_values"?: string[];
                    },
                >;
                [key: string]: unknown;
            };
            wallet_solution?: {
                jwks?: {
                    keys: {
                        alg?: string;
                        key_ops?: (...)[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: (...)[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                jwks_uri?: string;
                logo_uri: string;
                signed_jwks_uri?: string;
                wallet_metadata: {
                    authorization_endpoint: string;
                    client_id_prefixes_supported: ("openid_federation" | "x509_hash")[];
                    credential_offer_endpoint: string;
                    request_object_signing_alg_values_supported: string[];
                    response_types_supported?: string[];
                    vp_formats_supported: Record<string, { [key: string]: unknown }>;
                    wallet_name: string;
                    [key: string]: unknown;
                };
                [key: string]: unknown;
            };
        };
        metadata_policy?: Record<
            string,
            | Record<
                string,
                {
                    add?: unknown;
                    default?: unknown;
                    essential?: unknown;
                    one_of?: unknown;
                    subset_of?: unknown;
                    superset_of?: unknown;
                    value?: unknown;
                } & Record<string, any>,
            >
            | undefined,
        >;
        metadata_policy_crit?: string[];
        source_endpoint?: string;
        sub: string;
        trust_mark_issuers?: Record<string, string[]>;
        trust_mark_owners?: Record<
            string,
            {
                jwks: {
                    keys: {
                        alg?: string;
                        key_ops?: string[];
                        kid: string;
                        kty: string;
                        use?: string;
                        x5c?: string[];
                        x5t?: string;
                        "x5t#S256"?: string;
                        x5u?: string;
                        [key: string]: unknown;
                    }[];
                };
                sub: string;
            },
        >;
        trust_marks?: { trust_mark: string; trust_mark_type: string }[];
    }

  • header: {
        alg: "ES256" | "ES384" | "ES512" | "PS256" | "PS384" | "PS512";
        kid: string;
        typ: "entity-statement+jwt";
        [key: string]: unknown;
    }

  • signJwtCallback: SignCallback