feat: credo v6.1 upgrade

apps/api-gateway/src/oid4vc-issuance/dtos/oid4vc-issuer-template.dto.ts

@@ -171,8 +171,8 @@ export class MdocNamespaceDto {
 }
 export class MdocTemplateDto {
   @ApiProperty({
-    description: 'Document type (required when format is "mso_mdoc"; must NOT be provided when format is "vc+sd-jwt")',
-    example: 'org.iso.23220.photoID.1'
+    description: 'Document type (required when format is "mso_mdoc"; must NOT be provided when format is "dc+sd-jwt")',
+    example: 'org.iso.18013.5.1.mDL'
   })
   //@ValidateIf((o: CreateCredentialTemplateDto) => 'mso_mdoc' === o.format)
   @IsString()
@@ -189,7 +189,7 @@ export class MdocTemplateDto {
 export class SdJwtTemplateDto {
   @ApiProperty({
     description:
-      'Verifiable Credential Type (required when format is "vc+sd-jwt"; must NOT be provided when format is "mso_mdoc")',
+      'Verifiable Credential Type (required when format is "dc+sd-jwt"; must NOT be provided when format is "mso_mdoc")',
     example: 'BirthCertificateCredential-sdjwt'
   })
   // @ValidateIf((o: CreateCredentialTemplateDto) => 'vc+sd-jwt' === o.format)
@@ -230,7 +230,7 @@ export class CreateCredentialTemplateDto {
   format: CredentialFormat;
 
   @ValidateIf((o: CreateCredentialTemplateDto) => CredentialFormat.SdJwtVc === o.format)
-  @IsEmpty({ message: 'doctype must not be provided when format is "vc+sd-jwt"' })
+  @IsEmpty({ message: 'doctype must not be provided when format is "dc+sd-jwt"' })
   readonly _doctypeAbsentGuard?: unknown;
 
   @ValidateIf((o: CreateCredentialTemplateDto) => CredentialFormat.Mdoc === o.format)

apps/api-gateway/src/oid4vc-issuance/dtos/oid4vc-issuer.dto.ts

@@ -1,6 +1,6 @@
 /* eslint-disable camelcase */
 import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
-import { IsString, IsOptional, IsArray, ValidateNested, IsUrl, IsInt } from 'class-validator';
+import { IsString, IsOptional, IsArray, ValidateNested, IsUrl, IsInt, Min } from 'class-validator';
 import { Type } from 'class-transformer';
 
 export class LogoDto {
@@ -96,6 +96,7 @@ export class IssuerCreationDto {
   })
   @IsOptional()
   @IsInt({ message: 'batchCredentialIssuanceSize must be an integer' })
+  @Min(1, { message: 'batchCredentialIssuanceSize must be greater than 0' })
   batchCredentialIssuanceSize?: number;
 
   @ApiProperty({

apps/issuance/constant/issuance.ts

@@ -1,6 +1,3 @@
-import { AccessTokenSignerKeyType } from '../interfaces/oid4vc-issuance.interfaces';
-
 export const dpopSigningAlgValuesSupported = ['RS256', 'ES256', 'EdDSA'];
 export const credentialConfigurationsSupported = {};
-export const accessTokenSignerKeyType = 'ed25519' as AccessTokenSignerKeyType;
 export const batchCredentialIssuanceDefault = 0;

apps/oid4vc-issuance/constant/issuance.ts

@@ -2,5 +2,8 @@ import { AccessTokenSignerKeyType } from '../interfaces/oid4vc-issuance.interfac
 
 export const dpopSigningAlgValuesSupported = ['RS256', 'ES256', 'EdDSA'];
 export const credentialConfigurationsSupported = {};
-export const accessTokenSignerKeyType = 'ed25519' as AccessTokenSignerKeyType;
+export const accessTokenSignerKeyType = { kty: 'OKP', crv: 'Ed25519' } as {
+  kty: string;
+  crv: AccessTokenSignerKeyType;
+};
 export const batchCredentialIssuanceDefault = 0;

apps/oid4vc-issuance/interfaces/oid4vc-issuance.interfaces.ts

@@ -36,7 +36,7 @@ export interface CredentialConfiguration {
   doctype?: string;
   scope: string;
   claims: Claim[];
-  credential_signing_alg_values_supported: string[];
+  credential_signing_alg_values_supported: string[] | number[];
   cryptographic_binding_methods_supported: string[];
   display: Display[];
 }
@@ -54,7 +54,7 @@ export interface AuthorizationServerConfig {
 export interface IssuerCreation {
   authorizationServerUrl: string;
   issuerId: string;
-  accessTokenSignerKeyType?: AccessTokenSignerKeyType;
+  accessTokenSignerKeyType?: { kty: string; crv: string };
   display: Display[];
   dpopSigningAlgValuesSupported?: string[];
   authorizationServerConfigs: AuthorizationServerConfig;
@@ -67,7 +67,7 @@ export interface IssuerInitialConfig {
   display: Display[] | {};
   // eslint-disable-next-line @typescript-eslint/ban-types
   authorizationServerConfigs: AuthorizationServerConfig | {};
-  accessTokenSignerKeyType: AccessTokenSignerKeyType;
+  accessTokenSignerKeyType: { kty: string; crv: string };
   dpopSigningAlgValuesSupported: string[];
   batchCredentialIssuance?: object;
   credentialConfigurationsSupported: object;
@@ -87,7 +87,7 @@ export interface initialIssuerDetails {
 }
 
 export enum AccessTokenSignerKeyType {
-  ED25519 = 'ed25519'
+  ED25519 = 'Ed25519'
 }
 
 export interface IssuerUpdation {

apps/oid4vc-issuance/interfaces/oid4vc-issuer-sessions.interfaces.ts

@@ -17,6 +17,7 @@ export interface ISignerOption {
   method: SignerMethodOption;
   did?: string;
   x5c?: string[];
+  keyId?: string;
 }
 
 export enum AuthenticationType {

apps/oid4vc-issuance/libs/helpers/credential-sessions.builder.ts

@@ -135,7 +135,7 @@ export const DEFAULT_TXCODE = {
 /** Map DB format string -> API enum */
 function mapDbFormatToApiFormat(dbFormat: string): CredentialFormat {
   const normalized = (dbFormat ?? '').toLowerCase();
-  if (['sd-jwt', 'vc+sd-jwt', 'sdjwt', 'sd+jwt-vc'].includes(normalized)) {
+  if (['sd-jwt', 'dc+sd-jwt', 'vc+sd-jwt', 'sdjwt', 'sd+jwt-vc'].includes(normalized)) {
     return CredentialFormat.SdJwtVc;
   }
   if ('mso_mdoc' === normalized || 'mso-mdoc' === normalized || 'mdoc' === normalized) {
@@ -459,7 +459,7 @@ export function buildCredentialOfferPayload(
       throw new UnprocessableEntityException(`${validationError.errors.join(', ')}`);
     }
 
-    const templateFormat = (templateRecord as any).format ?? 'vc+sd-jwt';
+    const templateFormat = (templateRecord as any).format ?? 'dc+sd-jwt';
     const apiFormat = mapDbFormatToApiFormat(templateFormat);
     if (apiFormat === CredentialFormat.SdJwtVc) {
       return buildSdJwtCredential(credentialRequest, templateRecord, signerOptions, activeCertificateDetails);

apps/oid4vc-issuance/libs/helpers/issuer.metadata.ts

@@ -3,12 +3,7 @@ import { oidc_issuer, Prisma } from '@prisma/client';
 import { batchCredentialIssuanceDefault } from '../../constant/issuance';
 import { CreateOidcCredentialOffer } from '../../interfaces/oid4vc-issuer-sessions.interfaces';
 import { IssuerResponse } from 'apps/oid4vc-issuance/interfaces/oid4vc-issuance.interfaces';
-import {
-  Claim,
-  CredentialAttribute,
-  MdocTemplate,
-  SdJwtTemplate
-} from 'apps/oid4vc-issuance/interfaces/oid4vc-template.interfaces';
+import { Claim, MdocTemplate, SdJwtTemplate } from 'apps/oid4vc-issuance/interfaces/oid4vc-template.interfaces';
 import { CredentialFormat } from '@credebl/enum/enum';
 
 type AttributeDisplay = { name: string; locale: string };
@@ -44,19 +39,25 @@ type CredentialConfig = {
   vct?: string;
   scope: string;
   doctype?: string;
-  claims: Claim[];
-  credential_signing_alg_values_supported: string[];
+
+  credential_signing_alg_values_supported: string[] | number[];
   cryptographic_binding_methods_supported: string[];
-  display: { name: string; description?: string; locale?: string }[];
+
+  credential_metadata: {
+    claims: Claim[];
+    display: CredentialDisplayItem[];
+  };
 };
 
 type CredentialConfigurationsSupported = {
   credentialConfigurationsSupported: Record<string, CredentialConfig>;
 };
 
 // ---- Static Lists (as requested) ----
-const STATIC_CREDENTIAL_ALGS = ['ES256', 'EdDSA'] as const;
-const STATIC_BINDING_METHODS = ['did:key'] as const;
+const STATIC_CREDENTIAL_ALGS_FOR_SDJWT = ['ES256', 'EdDSA'] as const;
+const STATIC_CREDENTIAL_ALGS_FOR_MDOC = [-7, -9] as const;
+const STATIC_BINDING_METHODS_FOR_SDJWT = ['did:key', 'did:web', 'did:jwk', 'jwk'] as const;
+const STATIC_BINDING_METHODS_FOR_MDOC = ['cose_key'] as const; // We need to test 'did:key', 'did:web', 'did:jwk', 'jwk',
 
 // Safe coercion helpers
 function coerceJsonObject<T>(v: Prisma.JsonValue): T | null {
@@ -206,98 +207,60 @@ export function encodeIssuerPublicId(publicIssuerId: string): string {
   return encodeURIComponent(publicIssuerId.trim());
 }
 
-///---------------------------------------------------------
-
-// function buildClaimsFromAttributesWithPath(attributes: CredentialAttribute[], parentPath: string[] = []): Claim[] {
-//   const claims: Claim[] = [];
-
-//   for (const attr of attributes) {
-//     const currentPath = [...parentPath, attr.key];
-
-//     // 1️⃣ Add the parent attribute itself if it has display or mandatory metadata
-//     if ((attr.display && 0 < attr.display.length) || attr.mandatory) {
-//       const parentClaim: Claim = { path: currentPath };
-
-//       if (attr.display?.length) {
-//         parentClaim.display = attr.display.map((d) => ({
-//           name: d.name,
-//           locale: d.locale
-//         }));
-//       }
-
-//       if (attr.mandatory) {
-//         parentClaim.mandatory = true;
-//       }
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function generateClaims(attributes: any[], namespace?: string, parentPath: string[] = []): Claim[] {
+  const result: Claim[] = [];
 
-//       claims.push(parentClaim);
-//     }
+  for (const attr of attributes) {
+    const currentPath = [...parentPath, attr.key];
 
-//     // 2️⃣ If this attribute has nested children, recurse into them
-//     if (attr.children && 0 < attr.children.length) {
-//       claims.push(...buildClaimsFromAttributes(attr.children, currentPath));
-//     }
-//   }
-//   return claims;
-// }
+    const path = namespace ? [namespace, ...currentPath] : currentPath;
 
-/**
- * Recursively builds a nested claims object from a list of attributes.
- */
-function buildNestedClaims(attributes: CredentialAttribute[]): Record<string, Claim> {
-  const claims: Record<string, Claim> = {};
+    const claim: Claim = { path };
 
-  for (const attr of attributes) {
-    const node: Claim = {};
-
-    // ✅ include display info
-    if (attr.display?.length) {
-      node.display = attr.display.map((d) => ({
-        name: d.name,
-        locale: d.locale
-      }));
+    if (attr.display) {
+      claim.display = attr.display;
     }
 
-    // ✅ include mandatory flag
-    if (attr.mandatory) {
-      node.mandatory = true;
+    if (true === attr.mandatory) {
+      claim.mandatory = true;
     }
 
-    // ✅ handle nested children recursively
+    // Always push the claim (even if it only has path)
+    result.push(claim);
+
+    // Handle nested children
     if (attr.children?.length) {
-      const childClaims = buildNestedClaims(attr.children);
-      Object.assign(node, childClaims); // merge children into current node
+      result.push(...generateClaims(attr.children, namespace, currentPath));
     }
-
-    claims[attr.key] = node;
   }
 
-  return claims;
+  return result;
 }
 
 /**
  * Builds claims object for both SD-JWT and MDOC credential templates.
  */
 //TODO: Remove any type
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
-function buildClaimsFromTemplate(template: SdJwtTemplate | MdocTemplate): Record<string, any> {
+function buildClaimsFromTemplate(template: SdJwtTemplate | MdocTemplate): Claim[] {
   // ✅ MDOC case — handle namespaces
   if ((template as MdocTemplate).namespaces) {
     const mdocTemplate = template as MdocTemplate;
-
     //TODO: Remove any type
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const claims: Record<string, any> = {};
-
+    const claims: Claim[] = [];
     for (const ns of mdocTemplate.namespaces) {
-      claims[ns.namespace] = buildNestedClaims(ns.attributes);
-    }
+      const generated = generateClaims(ns.attributes, ns.namespace);
 
+      claims.push(...generated);
+    }
     return claims;
   }
-
   // ✅ SD-JWT case — flat attributes
   const sdjwtTemplate = template as SdJwtTemplate;
-  return buildNestedClaims(sdjwtTemplate.attributes);
+  const claims = generateClaims(sdjwtTemplate.attributes);
+  return claims;
 }
 
 //TODO: Fix this eslint issue
@@ -316,14 +279,17 @@ export function buildSdJwtCredentialConfig(name: string, template: SdJwtTemplate
       format: CredentialFormat.SdJwtVc,
       scope: credentialScope,
       vct: template.vct,
-      credential_signing_alg_values_supported: [...STATIC_CREDENTIAL_ALGS],
-      cryptographic_binding_methods_supported: [...STATIC_BINDING_METHODS],
-      // proof_types_supported: {
-      //   jwt: {
-      //     proof_signing_alg_values_supported: ['ES256']
-      //   }
-      // },
-      claims
+      credential_signing_alg_values_supported: [...STATIC_CREDENTIAL_ALGS_FOR_SDJWT],
+      cryptographic_binding_methods_supported: [...STATIC_BINDING_METHODS_FOR_SDJWT],
+      proof_types_supported: {
+        jwt: {
+          proof_signing_alg_values_supported: ['ES256', 'EdDSA']
+        }
+      },
+      credential_metadata: {
+        claims,
+        display: []
+      }
     }
   };
 }
@@ -339,7 +305,6 @@ export function buildMdocCredentialConfig(name: string, template: MdocTemplate)
   const credentialScope = `openid4vc:${template.doctype}-${formatSuffix}`;
 
   const claims = buildClaimsFromTemplate(template);
-
   // for (const ns of template.namespaces) {
   //   claims.push(...buildClaimsFromAttributes(ns.attributes, [ns.namespace]));
   // }
@@ -349,9 +314,17 @@ export function buildMdocCredentialConfig(name: string, template: MdocTemplate)
       format: CredentialFormat.Mdoc,
       scope: credentialScope,
       doctype: template.doctype,
-      credential_signing_alg_values_supported: [...STATIC_CREDENTIAL_ALGS],
-      cryptographic_binding_methods_supported: [...STATIC_BINDING_METHODS],
-      claims
+      credential_signing_alg_values_supported: [...STATIC_CREDENTIAL_ALGS_FOR_MDOC],
+      cryptographic_binding_methods_supported: [...STATIC_BINDING_METHODS_FOR_MDOC],
+      proof_types_supported: {
+        jwt: {
+          proof_signing_alg_values_supported: ['ES256', 'EdDSA']
+        }
+      },
+      credential_metadata: {
+        claims,
+        display: []
+      }
     }
   };
 }
@@ -387,7 +360,6 @@ export function buildCredentialConfigurationsSupported(templateRows: any): Recor
       templateToBuild,
       format === CredentialFormat.Mdoc ? CredentialFormat.Mdoc : CredentialFormat.SdJwtVc
     );
-
     const appearanceJson = coerceJsonObject<unknown>(templateRow.appearance);
 
     // Prepare the display configuration
@@ -406,12 +378,11 @@ export function buildCredentialConfigurationsSupported(templateRows: any): Recor
 
     // eslint-disable-next-line prefer-destructuring
     const dynamicKey = Object.keys(credentialConfig)[0];
-    Object.assign(credentialConfig[dynamicKey], {
+    Object.assign(credentialConfig[dynamicKey].credential_metadata, {
       display: displayConfigurations
     });
 
     Object.assign(credentialConfigMap, credentialConfig);
   }
-
   return credentialConfigMap; // ✅ Return flat map, not nested object
 }