feat: PID issuing

Reviewed by: @hevelius Refs: SIW-313 #12
pagopa · Jul 26, 2023 · 0717493 · 0717493
1 parent c85edea
commit 0717493
Show file tree

Hide file tree

Showing 11 changed files with 436 additions and 25 deletions.
diff --git a/example/src/App.tsx b/example/src/App.tsx
@@ -11,8 +11,10 @@ import {
 } from "react-native";
 
 import { PID, WalletInstanceAttestation } from "@pagopa/io-react-native-wallet";
+import { thumbprint } from "@pagopa/io-react-native-jwt";
 
 const walletProviderBaseUrl = "https://io-d-wallet-it.azurewebsites.net";
+const pidProviderBaseUrl = "https://api.wakala.it/it-pid-provider/";
 
 const pidToken =
   "eyJhbGciOiJFUzI1NiIsImtpZCI6IjV0NVlZcEJoTi1FZ0lFRUk1aVV6cjZyME1SMDJMblZRME9tZWttTktjalkiLCJ0cnVzdF9jaGFpbiI6W10sInR5cCI6InZjK3NkLWp3dCJ9.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.tpgf0oo0-RJxkL98ipw5xX3ftEmZw-fQVA2c2aM1gZ_jfcDXE2_Xs2aMpT0hy7w4IhP5V0B0HmXtTVYXwVu8kQ~WyJyYzQ0Z3ZRUy1TNDFFUDhSVU1pdFRRIiwiZXZpZGVuY2UiLFt7InR5cGUiOiJlbGVjdHJvbmljX3JlY29yZCIsInJlY29yZCI6eyJ0eXBlIjoiZWlkYXMuaXQuY2llIiwic291cmNlIjp7Im9yZ2FuaXphdGlvbl9uYW1lIjoiTWluaXN0ZXJvIGRlbGwnSW50ZXJubyIsIm9yZ2FuaXphdGlvbl9pZCI6Im1faXQiLCJjb3VudHJ5X2NvZGUiOiJJVCJ9fX1dXQ~WyI2dzFfc29SWEZnYUhLZnBZbjNjdmZRIiwiZ2l2ZW5fbmFtZSIsIk1hcmlvIl0~WyJoNlQ3MXIycVZmMjlsNXhCNnUzdWx3IiwiZmFtaWx5X25hbWUiLCJSb3NzaSJd~WyJvR29iQl9uZXRZMEduS3hUN3hsVTRBIiwidW5pcXVlX2lkIiwiaWRBTlBSIl0~WyJmdU5wOTdIZjN3VjZ5NDh5LVFaaElnIiwiYmlydGhkYXRlIiwiMTk4MC0xMC0wMSJd~WyJwLTlMenlXSFpCVkR2aFhEV2tOMnhBIiwicGxhY2Vfb2ZfYmlydGgiLHsiY291bnRyeSI6IklUIiwibG9jYWxpdHkiOiJSb21lIn1d~WyI5UnFLdWwzeHh6R2I4X1J1Zm5BSmZRIiwidGF4X2lkX251bWJlciIsIlRJTklULVJTU01SQTgwQTEwSDUwMUEiXQ";
@@ -44,34 +46,118 @@ export default function App() {
 
   const getAttestation = async () => {
     try {
-      const randomKeyTag = Math.random().toString(36).substr(2, 5);
-      const publicKey = await generate(randomKeyTag);
+      // generate Key for Wallet Instance Attestation
+      const walletInstanceKeyTag = Math.random().toString(36).substr(2, 5);
+      const walletInstancePublicKey = await generate(walletInstanceKeyTag);
       const issuingAttestation = new WalletInstanceAttestation.Issuing(
         walletProviderBaseUrl
       );
-
       const attestationRequest =
-        await issuingAttestation.getAttestationRequestToSign(publicKey);
+        await issuingAttestation.getAttestationRequestToSign(
+          walletInstancePublicKey
+        );
+      const signature = await sign(attestationRequest, walletInstanceKeyTag);
 
-      const signature = await sign(attestationRequest, randomKeyTag);
+      // generate Wallet Instance Attestation
       const instanceAttestation = await issuingAttestation.getAttestation(
         attestationRequest,
         signature
       );
 
       setResult(JSON.stringify(instanceAttestation));
-      console.error(instanceAttestation);
     } catch (e) {
       console.error(e);
       showError(e);
     }
   };
+
+  const getPid = async () => {
+    try {
+      // generate Key for Wallet Instance Attestation
+      const walletInstanceKeyTag = Math.random().toString(36).substr(2, 5);
+      const walletInstancePublicKey = await generate(walletInstanceKeyTag);
+      const issuingAttestation = new WalletInstanceAttestation.Issuing(
+        walletProviderBaseUrl
+      );
+
+      const attestationRequest =
+        await issuingAttestation.getAttestationRequestToSign(
+          walletInstancePublicKey
+        );
+      const signature = await sign(attestationRequest, walletInstanceKeyTag);
+
+      // generate a fresh Wallet Instance Attestation
+      const instanceAttestation = await issuingAttestation.getAttestation(
+        attestationRequest,
+        signature
+      );
+
+      // clientId must be the Wallet Instance public key thumbprint
+      const clientId = await thumbprint(walletInstancePublicKey);
+
+      // Start pid issuing flow
+      const issuingPID = new PID.Issuing(
+        pidProviderBaseUrl,
+        walletProviderBaseUrl,
+        instanceAttestation,
+        clientId
+      );
+
+      // Generate jwt for PAR wallet instance attestation
+      const unsignedJwtForPar = await issuingPID.getUnsignedJwtForPar(
+        walletInstancePublicKey
+      );
+      const parSignature = await sign(unsignedJwtForPar, walletInstanceKeyTag);
+
+      // PAR request
+      await issuingPID.getPar(unsignedJwtForPar, parSignature);
+
+      // Token request
+      const authToken = await issuingPID.getAuthToken();
+
+      // Generate fresh key for PID binding
+      const pidKeyTag = Math.random().toString(36).substr(2, 5);
+      const pidKey = await generate(pidKeyTag);
+
+      //Generate nonce proof
+      const unsignedNonceProof = await issuingPID.getUnsignedNonceProof(
+        authToken.c_nonce
+      );
+      const nonceProofSignature = await sign(unsignedNonceProof, pidKeyTag);
+
+      // Generate DPoP for PID key
+      const unsignedDPopForPid = await issuingPID.getUnsignedDPoP(pidKey);
+      const dPopPidSignature = await sign(unsignedDPopForPid, pidKeyTag);
+
+      // Credential reuqest
+      const pid = await issuingPID.getCredential(
+        unsignedDPopForPid,
+        dPopPidSignature,
+        unsignedNonceProof,
+        nonceProofSignature,
+        authToken.access_token,
+        {
+          birthDate: "01/01/1990",
+          fiscalCode: "AAABBB00A00A000A",
+          name: "NAME",
+          surname: "SURNAME",
+        }
+      );
+
+      setResult(JSON.stringify(pid));
+    } catch (e) {
+      console.error(e);
+      showError(e);
+    }
+  };
+
   return (
     <SafeAreaView style={styles.container}>
       <View>
         <Button title="Decode PID" onPress={decodePid} />
         <Button title="Verify PID" onPress={verifyPid} />
         <Button title="Get WIA" onPress={getAttestation} />
+        <Button title="Get PID" onPress={getPid} />
       </View>
       <View>
         <Text style={styles.title}>{result}</Text>

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pagopa/io-react-native-wallet",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Provide data structures, helpers and API for IO Wallet",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",
@@ -66,13 +66,15 @@
     "react": "18.2.0",
     "react-native": "0.71.8",
     "react-native-builder-bob": "^0.20.0",
-    "typescript": "^5.0.2"
+    "typescript": "^5.0.2",
+    "@pagopa/io-react-native-crypto": "^0.2.3"
   },
   "resolutions": {
     "@types/react": "17.0.21"
   },
   "peerDependencies": {
     "@pagopa/io-react-native-jwt": "*",
+    "@pagopa/io-react-native-crypto": "*",
     "react": "*",
     "react-native": "*"
   },

diff --git a/src/index.ts b/src/index.ts
@@ -3,13 +3,5 @@ import * as RP from "./rp";
 import * as Errors from "./utils/errors";
 import * as WalletInstanceAttestation from "./wallet-instance-attestation";
 import { getUnsignedDPop } from "./utils/dpop";
-import { getSignedJwt } from "./utils/signature";
 
-export {
-  PID,
-  RP,
-  WalletInstanceAttestation,
-  Errors,
-  getUnsignedDPop,
-  getSignedJwt,
-};
+export { PID, RP, WalletInstanceAttestation, Errors, getUnsignedDPop };
diff --git a/src/pid/index.ts b/src/pid/index.ts
@@ -1,2 +1,3 @@
 import * as SdJwt from "./sd-jwt";
-export { SdJwt };
+import { Issuing } from "./issuing";
+export { SdJwt, Issuing };