Merge pull request #106 from niscy-eudiw/feature/auth-server-dpop-nonce

Dpop nonce support during authorization

Author: dtsiflit

.github/workflows/build-package.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - uses: maxim-lobanov/setup-xcode@v1
         with:
-          xcode-version: '16.0'
+          xcode-version: '16.1'
       - uses: actions/checkout@v4
       - run:
           fastlane tests

Sources/Entities/Issuance/UnauthorizedRequest.swift

@@ -48,12 +48,14 @@ public struct AuthorizationCodeRetrieved {
   public let authorizationCode: IssuanceAuthorization
   public let pkceVerifier: PKCEVerifier
   public let configurationIds: [CredentialConfigurationIdentifier]
+  public let dpopNonce: Nonce?
 
   public init(
     credentials: [CredentialIdentifier],
     authorizationCode: IssuanceAuthorization,
     pkceVerifier: PKCEVerifier,
-    configurationIds: [CredentialConfigurationIdentifier]
+    configurationIds: [CredentialConfigurationIdentifier],
+    dpopNonce: Nonce?
   ) throws {
 
     guard case .authorizationCode = authorizationCode else {
@@ -64,6 +66,7 @@ public struct AuthorizationCodeRetrieved {
     self.authorizationCode = authorizationCode
     self.pkceVerifier = pkceVerifier
     self.configurationIds = configurationIds
+    self.dpopNonce = dpopNonce
   }
 }
 

Sources/Issuers/Issuer.swift

@@ -316,7 +316,7 @@ public actor Issuer: IssuerType {
             authorizationCode: authorizationCode,
             codeVerifier: request.pkceVerifier.codeVerifier,
             identifiers: credConfigIdsAsAuthDetails,
-            dpopNonce: nil,
+            dpopNonce: request.dpopNonce,
             retry: true
           ).get()
 
@@ -372,7 +372,8 @@ public actor Issuer: IssuerType {
               credentials: request.credentials,
               authorizationCode: try IssuanceAuthorization(authorizationCode: code),
               pkceVerifier: request.pkceVerifier,
-              configurationIds: request.configurationIds
+              configurationIds: request.configurationIds,
+              dpopNonce: request.dpopNonce
             )
           )
         )
@@ -399,7 +400,8 @@ public actor Issuer: IssuerType {
                 credentials: request.credentials,
                 authorizationCode: try IssuanceAuthorization(authorizationCode: authorizationCode),
                 pkceVerifier: request.pkceVerifier,
-                configurationIds: request.configurationIds
+                configurationIds: request.configurationIds,
+                dpopNonce: request.dpopNonce
               )
             )
           )