index.js

const { default: base64url } = require('base64url');
const jose = require('node-jose');

async function main() {

  const iaca_cert_pem = 
    "-----BEGIN CERTIFICATE-----\n" +
    "MIICGjCCAb+gAwIBAgIKfqh/NIWv9JsIdDAKBggqhkjOPQQDAjBFMQswCQYDVQQG\n" +
    "EwJVUzEpMCcGA1UEAwwgSVNPMTgwMTMtNSBUZXN0IENlcnRpZmljYXRlIElBQ0Ex\n" +
    "CzAJBgNVBAgMAk5ZMB4XDTI0MDQyODIxMDIyM1oXDTM0MDQyODIxMDIyNFowRTEL\n" +
    "MAkGA1UEBhMCVVMxKTAnBgNVBAMMIElTTzE4MDEzLTUgVGVzdCBDZXJ0aWZpY2F0\n" +
    "ZSBJQUNBMQswCQYDVQQIDAJOWTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABC8v\n" +
    "9/5utIwwLrN/qe54sga0FSNIJGO/NO9YKWGSUWylElRskOUD7WAK9UKplzQNck3k\n" +
    "FeJSKUAyliG4RSIbgnyjgZYwgZMwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8B\n" +
    "Af8EBAMCAQYwHQYDVR0OBBYEFEz/lSXgZZtQ7BxDClpyjcQbTTrPMB0GA1UdEgQW\n" +
    "MBSBEmV4YW1wbGVAaXNvbWRsLmNvbTAvBgNVHR8EKDAmMCSgIqAghh5odHRwczov\n" +
    "L2V4YW1wbGUuY29tL0lTT21ETC5jcmwwCgYIKoZIzj0EAwIDSQAwRgIhAMu3vC2e\n" +
    "eEW6r+Naqcd6NMxD1NQsA8ipV4QOe4Zl0xAzAiEA6l1vXXBXfcSULjOzw+PIrZop\n" +
    "gJGXXkNfK5h7jN9NVKY=\n" +
    "-----END CERTIFICATE-----";

  const static_wallet_metadata = {
    "issuer":"https://self-issued.me/v2",
    "authorization_endpoint":"mdoc-openid4vp://",
    "response_types_supported":[
      "vp_token"
    ],
    "vp_formats_supported":{
      "mso_mdoc":{}
    },
    "client_id_schemes_supported":[
      "x509_san_dns"
    ],
    "authorization_encryption_alg_values_supported":[ "ECDH-ES" ], 
    "authorization_encryption_enc_values_supported":[ "A256GCM" ]
  };

  const presentation_definition = {
    "id":"mDL-sample-req",
    "input_descriptors":[
      {
        "id":"org.iso.18013.5.1.mDL ",
        "format":{
          "mso_mdoc":{
            "alg":[
              "ES256",
              "ES384",
              "ES512",
              "EdDSA",
              "ESB256",
              "ESB320",
              "ESB384",
              "ESB512"
            ]
          }
        },
        "constraints":{
          "fields":[
            {
              "path":[
                "$['org.iso.18013.5.1']['birth_date']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['document_number']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['driving_privileges']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['expiry_date']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['family_name']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['given_name']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['issue_date']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['issuing_authority']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['issuing_country']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['portrait']"
              ],
              "intent_to_retain":false
            },
            {
              "path":[
                "$['org.iso.18013.5.1']['un_distinguishing_sign']"
              ],
              "intent_to_retain":false
            }
          ],
          "limit_disclosure":"required"
        }
      }
    ]
  };

  const ephemeral_private_key_reader = {
    "kty":"EC",
    "d":"_Hc7lRd1Zt8sDAb1-pCgI9qS3oobKNa-mjRDhaKjH90",
    "use":"enc",
    "crv":"P-256",
    "x":"xVLtZaPPK-xvruh1fEClNVTR6RCZBsQai2-DrnyKkxg",
    "y":"-5-QtFqJqGwOjEL3Ut89nrE0MeaUp5RozksKHpBiyw0",
    "alg":"ECDH-ES",
    "kid":"P8p0virRlh6fAkh5-YSeHt4EIv-hFGneYk14d8DF51w"
  };

  const ephemeral_public_key_reader = {
    "kty":"EC",
    "use":"enc",
    "crv":"P-256",
    "x":"xVLtZaPPK-xvruh1fEClNVTR6RCZBsQai2-DrnyKkxg",
    "y":"-5-QtFqJqGwOjEL3Ut89nrE0MeaUp5RozksKHpBiyw0",
    "alg":"ECDH-ES",
    "kid":"P8p0virRlh6fAkh5-YSeHt4EIv-hFGneYk14d8DF51w"
  };

  const nonce = "abcdefgh1234567890";
  const state = "34asfd34_34$34";
  const authz_request_parameters = {
    "aud":"https://self-issued.me/v2",
    "response_type":"vp_token",
    presentation_definition,
    "client_metadata":{
      "jwks":{
        "keys":[
          ephemeral_public_key_reader
        ]
      },
      "authorization_encrypted_response_alg":"ECDH-ES",
      "authorization_encrypted_response_enc":"A256GCM",
      "vp_formats":{
        "mso_mdoc":{
          "alg":[ "ES256", "ES384", "ES512", "EdDSA", "ESB256", "ESB320", "ESB384", "ESB512" ]
        }
      },
      "require_signed_request_object":true
    },
    state,
    nonce,
    "client_id":"example.com",
    "client_id_scheme":"x509_san_dns",
    "response_mode":"direct_post.jwt",
    "response_uri":"https://example.com/12345/response"    
  };

  const authz_request_jwt_header = {
    "x5c":[
      "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"
    ],
    "typ":"JWT",
    "alg":"ES256"
  };

  const static_private_key_reader_auth = {
    "kty":"EC",
    "kid":"Cv_aKIPqB8mkHqcJGUFq7zawf5vAyA6xv3PdJpJY1V8",
    "crv":"P-256",
    "x":"Xy4fnFl6uX1kX_QsKPFUZKfQADji2j91Aot2GNVQxxw",
    "y":"THuUCf0wJej--eKovzxUUSLU-1P04Nog1UhdkUWM6tg",
    "d":"5SOi-q3lIENTg-pyKeh3Vxhvu7IgYRm-IHPis2vfP8c"
  };

  const authz_request_object_jwt = await generate_authz_request_object_jwt(
    static_private_key_reader_auth, authz_request_jwt_header, authz_request_parameters);

  const presentation_submission = {
    "definition_id":"mDL-sample-req",
    "id":"mDL-sample-res",
    "descriptor_map":[
      {
        "id":"org.iso.18013.5.1.mDL",
        "format":"mso_mdoc",
        "path":"$"
      }
    ]
  };

  // contains the base64url-encoded DeviceResponse
  const vp_token = "o2ZzdGF0dXMAZ3ZlcnNpb25jMS4waWRvY3VtZW50c4GjZ2RvY1R5cGV1b3JnLmlzby4xODAxMy41LjEubURMbGRldmljZVNpZ25lZKJqZGV2aWNlQXV0aKFvZGV2aWNlU2lnbmF0dXJlhEOhASag9lhAZIIUI8retZS5btJ9TGyaMt7j1nQm1DUy5FyG_98yKOOWNOtizwY41CipQOMGZ5d7Plh722-YQrSCpZTNBIYjxmpuYW1lU3BhY2Vz2BhBoGxpc3N1ZXJTaWduZWSiamlzc3VlckF1dGiEQ6EBJqEYIVkCYDCCAlwwggIBoAMCAQICCkdSCck8KAChX_8wCgYIKoZIzj0EAwIwRTELMAkGA1UEBhMCVVMxKTAnBgNVBAMMIElTTzE4MDEzLTUgVGVzdCBDZXJ0aWZpY2F0ZSBJQUNBMQswCQYDVQQIDAJOWTAeFw0yNDA0MjgyMTAyMjNaFw0yNTA3MjkyMTAyMjNaMEQxCzAJBgNVBAYTAlVTMSgwJgYDVQQDDB9JU08xODAxMy01IFRlc3QgQ2VydGlmaWNhdGUgRFNDMQswCQYDVQQIDAJOWTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABDdOFaKr9WxgpFWlzF8VmfchBvTwC1oH1MaP685sHKGmreQPVsqbSlHABGTWPrcnbhlPbQLrDsZH03ggndfjw7yjgdkwgdYwHQYDVR0OBBYEFGUpDcssvlnvVrvfRW1P-KRafe5aMB8GA1UdIwQYMBaAFEz_lSXgZZtQ7BxDClpyjcQbTTrPMA4GA1UdDwEB_wQEAwIHgDAdBgNVHREEFjAUgRJleGFtcGxlQGlzb21kbC5jb20wHQYDVR0SBBYwFIESZXhhbXBsZUBpc29tZGwuY29tMC8GA1UdHwQoMCYwJKAioCCGHmh0dHBzOi8vZXhhbXBsZS5jb20vSVNPbURMLmNybDAVBgNVHSUBAf8ECzAJBgcogYxdBQECMAoGCCqGSM49BAMCA0kAMEYCIQCvw8wYtoDlQlBzqMYF6U0KXK1fFC5f0NETmKktxq-jWQIhAKOIt0zsjXCO2TJvtCa81HQDOoDOCvc4Tp5jzp4rW7VDWQK62BhZArWmZ3ZlcnNpb25jMS4wb2RpZ2VzdEFsZ29yaXRobWdTSEEtMjU2bHZhbHVlRGlnZXN0c6Fxb3JnLmlzby4xODAxMy41LjGrAFggJU2b_85ISFXlEQWLKnOZVmRs1xSzYsZwWe0Z1Nju4yUBWCC6jOuodOY0wsyiy1cVQZ1trp9MdS40ma6NoiqSCw3i_AJYINNVwMahFR_eg3WdYKd_mlT7jcpBlUo4efrVfaljh1qUA1gg18RTMj2oZ361MmmRKRskRJxLZr8U8y8BjYePiE0MDrIEWCBAXKSrlBnPKnWZ5ovf0-tH6yS-_fLq0jtlV6lo_m2xkAVYIChjHaujPFotPAVarU6OS9bOUGJM2i8Su0QHcGd8LUIqBlggEPSlRSQU3qO8WGlhdybrFvOED7ClhKoXNnaz7iEYYG0HWCBdHiKvThj-f0ujtxCpB-rDOr2j5K6Dus7A4wlVA1FesghYIOcFkpH5fl3zQDlmzrt0uOqp37_3RYcsl11ju8WBF0Q0CVggRxt5r6QHia1VtAc2pWWASpR-FtxUWwSriOJRAA3xUNwKWCBJKSm9xIOQawO8CVvCxg_B-1LOrUU_syVoouJRsC2cXm1kZXZpY2VLZXlJbmZvoWlkZXZpY2VLZXmkAQIgASFYIFfRF0B86kxJpllzlXbiSPjaamzG1FL6ZOL9VKkdPecLIlgglApkmUibrqPDNOcJi0q0zSbX440venAe0K1Xrn3X70BnZG9jVHlwZXVvcmcuaXNvLjE4MDEzLjUuMS5tRExsdmFsaWRpdHlJbmZvo2l2YWxpZEZyb23AdDIwMjQtMDQtMjhUMjE6MDI6MjVaanZhbGlkVW50aWzAdDIwMjQtMDUtMDhUMjE6MDI6MjRaZnNpZ25lZMB0MjAyNC0wNC0yOFQyMTowMjoyNFpYQNMckHB3uEeFbz7re-heKVBrD6L9MiAQBk5IRhF1U9cfIq5lanDt5cnWBOEEV77VxJXDF-pbja-murf1S_9ymnxqbmFtZVNwYWNlc6Fxb3JnLmlzby4xODAxMy41LjGL2BhZCDukaGRpZ2VzdElEBWZyYW5kb21QZWUgWBRENQw29qWDPQ9duHFlbGVtZW50SWRlbnRpZmllcmhwb3J0cmFpdGxlbGVtZW50VmFsdWVZB-3_2P_gABBKRklGAAEBAAAAAAAAAP_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-iAAA49QAAA5BYWVogAAAAAAAAYpkAALeFAAAY2lhZWiAAAAAAAAAkoAAAD4QAALbPcGFyYQAAAAAABAAAAAJmZgAA8qcAAA1ZAAAT0AAAClsAAAAAAAAAAFhZWiAAAAAAAAD21gABAAAAANMtbWx1YwAAAAAAAAABAAAADGVuVVMAAAAgAAAAHABHAG8AbwBnAGwAZQAgAEkAbgBjAC4AIAAyADAAMQA2_9sAQwAQCwwODAoQDg0OEhEQExgoGhgWFhgxIyUdKDozPTw5Mzg3QEhcTkBEV0U3OFBtUVdfYmdoZz5NcXlwZHhcZWdj_9sAQwEREhIYFRgvGhovY0I4QmNjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2Nj_8AAEQgAsAB5AwEiAAIRAQMRAf_EABoAAAMBAQEBAAAAAAAAAAAAAAADBAUGBwH_xAAuEAACAgEDAgQFAwUAAAAAAAAAAwQTIwUUM0NTJGNzgwEGFTSjFkSTJTVRVbP_xAAWAQEBAQAAAAAAAAAAAAAAAAAAAwT_xAAWEQEBAQAAAAAAAAAAAAAAAAAAAxP_2gAMAwEAAhEDEQA_AOXAAJJGgAAABbUKtAaBLulH3er_AMAUgS7oLQKgAAAAAAAAAUNFDQAU0aSygFW2tFNACqoBQVAA31WhaHqhb5QDVNG9IltBvKSF6m2gKilQSKAAAAAAAVKariCS2pRLFVa0BsWA2U06OL8uKGwFVGyoNWTGb8uK6RB-nJR2Q0K5OSV8r4srTLlaM2K2pp6CSz1WqqBk4OVpbYuXpCukb09VraldLlMuerayvKaEkHEVErVFSuIJAAAJAAACCVyl-lqIJXKakAKydHFUaiiCKXqDUaNACQLaiCps_wApRfUNqKiDYKUqpSjnNUgVWnZGXqkW1QHBtxAobP8AumiovKGU0AAJAAACWVyl8VtRBK5RoVk6iLPVUXqnq7pySmqG1WqtUFdHZKlDbcpxsBrWtUo62q2KFVVo205eU2UrFaKiz225ZQHWkrcpKprW9X2irL1QPPtUxSmqFReIq17-6SvVFKxKDLUAABIAKGgKaovVFtUKV6VpqRVVNqCsksWB5RsqqVFqqG1CpXEGplqyz1KU2o6ipqov37fdUcvoyvH2nZcqqgINqpsXzW5SD6Wq3q-kbMBVUVShoGXFgVNxcRe23lUrKNqFNbU1VQHn09Tfqjbe6NGz8rbaiUMtQAoAkUNFDQGqL4sqppANUFZN7dNxYrSWe1o2LxCpUW0NRugtVbUdGclFgSt1iOo2rWqVlygFtTWjWylK5W1eqNqxBUSCrbeLKDVctvK0qIJ89UDK1uIqOS1ltuqN_iIBsqUpspre60UGAoAABQ0UADRooAN6K3wo1Uq0y4De6X1KaGps6XVaX905eLFVbbumqNlVTf3VvuhVqDeUlUqriaNtJAacl82yvFKV2jo5UqpTWt6RwcqVupTZTeqVSqUKACrKA90BQAAAFTQa0U1tQSsWICqLxGzAymDA4i9TaiSrrYsBVQ1WlqV1SCBPVVlNRUpXdCptQNDddoFKJDL17FpbWtOIby4jsvmOUprdr2srTl21N5alFUqoAKthitU1VQpqmqKpFAABJfKitUrEogqL_dt7pK1Vv2vSCqVXKoqaprWi4vw-Pw-OP4ZWcZuxYqm2ta3iUBlwDZ2BAqA2LFU3unZRVeFUSVYMXS2tNmLoylF6lVDbQqFKUog1TVFQFeaKn6ztcSuU5eVKbPbbaBqQLVaXKn9VuIy9ZUpUVXSaXym1QIsXtK_KY2vKqlKi9pQSKUq3FaKbuoGJtqhrVVKNTVIDVcSsX_IqkxlKU1WUq2vmilNUpuVXEX7qL_q_ygKbF2EVTeW3lJWxWxek06iVFtlKge60xpTW7prcoGNlVlN5U9X0tSlN8U3lFaxGUnS4vd5SVsXaqiylcTQNlWWBteqo6iB9qo4PS57d_l_Kd4rixEmqQaZc-VixGo3iOcnyuq0kMuUEBX9XbK_ajVW9VWVrcQ1srwFSv4mlUjVVStUytxKyt9UwZTbdUa3zTUbFlaXo2XqmDFU1rcRVJfKardKy4jeVKVKVi5fNOSlKaqVUdGrS27VTQMufaqeFoawqVUprVGWSH__Z2BhYW6RoZGlnZXN0SUQIZnJhbmRvbVC0gDHM3xUFKaiFRu1DAnUXcWVsZW1lbnRJZGVudGlmaWVyamJpcnRoX2RhdGVsZWxlbWVudFZhbHVl2QPsajE5OTAtMDEtMDHYGFhTpGhkaWdlc3RJRAdmcmFuZG9tUNPRb_Jle7E5D-hepAv3TxVxZWxlbWVudElkZW50aWZpZXJqZ2l2ZW5fbmFtZWxlbGVtZW50VmFsdWVlQWxpY2XYGFhbpGhkaWdlc3RJRAFmcmFuZG9tUPKBXZijF1d3_R04NtJz7C1xZWxlbWVudElkZW50aWZpZXJqaXNzdWVfZGF0ZWxlbGVtZW50VmFsdWXZA-xqMjAyMC0wMS0wMdgYWFykaGRpZ2VzdElEAGZyYW5kb21QgHykf2kk9Y9_jhM0BAAitHFlbGVtZW50SWRlbnRpZmllcmtleHBpcnlfZGF0ZWxlbGVtZW50VmFsdWXZA-xqMjAyNS0wMS0wMdgYWFSkaGRpZ2VzdElECWZyYW5kb21QulAkqm6fqkRXlxcbNvrUc3FlbGVtZW50SWRlbnRpZmllcmtmYW1pbHlfbmFtZWxlbGVtZW50VmFsdWVlU21pdGjYGFhbpGhkaWdlc3RJRARmcmFuZG9tUOTooDeEwCnlGLbbzY-ver5xZWxlbWVudElkZW50aWZpZXJvZG9jdW1lbnRfbnVtYmVybGVsZW1lbnRWYWx1ZWhBQkNEMTIzNNgYWFWkaGRpZ2VzdElECmZyYW5kb21Q_ctRuMUlAkselcS8sFjbJHFlbGVtZW50SWRlbnRpZmllcm9pc3N1aW5nX2NvdW50cnlsZWxlbWVudFZhbHVlYlVT2BhYW6RoZGlnZXN0SUQGZnJhbmRvbVC_I_4SIn8VRu_qWxcclHpNcWVsZW1lbnRJZGVudGlmaWVycWlzc3VpbmdfYXV0aG9yaXR5bGVsZW1lbnRWYWx1ZWZOWSxVU0HYGFjvpGhkaWdlc3RJRAJmcmFuZG9tUFoPu1Ae76m2ftDBo8H1DU9xZWxlbWVudElkZW50aWZpZXJyZHJpdmluZ19wcml2aWxlZ2VzbGVsZW1lbnRWYWx1ZYKjamlzc3VlX2RhdGXZA-xqMjAyMC0wMS0wMWtleHBpcnlfZGF0ZdkD7GoyMDI1LTAxLTAxdXZlaGljbGVfY2F0ZWdvcnlfY29kZWFCo2ppc3N1ZV9kYXRl2QPsajIwMjAtMDEtMDFrZXhwaXJ5X2RhdGXZA-xqMjAyNS0wMS0wMXV2ZWhpY2xlX2NhdGVnb3J5X2NvZGViQkXYGFhdpGhkaWdlc3RJRANmcmFuZG9tUADrjtIGo37dMzctfKHT9J1xZWxlbWVudElkZW50aWZpZXJ2dW5fZGlzdGluZ3Vpc2hpbmdfc2lnbmxlbGVtZW50VmFsdWVjVVNB";

  const authz_response_parameters = {
    presentation_submission,
    vp_token
  };

  const mdoc_generated_nonce = "1234567890abcdefgh";
  const authz_response_object_jwt = await generate_authz_response_object_jwt(
    authz_response_parameters, mdoc_generated_nonce, nonce, ephemeral_public_key_reader);

  const authz_response_jwt_header = JSON.parse(base64url.decode(authz_response_object_jwt.split('.')[0]));

  const ephemeral_private_key_mdoc = {
     // In node-jose:encrypt.js: line 196: in the debug console, do console.log(JSON.stringify(epk.toJSON(true, ["kid"]), null, 2))
  };

  const ephemeral_public_key_mdoc = authz_response_jwt_header.epk;

  // -------
  // OID4VPHandover and SessionTranscriopt using the following params:
  // mdoc_generated_nonce = "1234567890abcdefgh"
  // client_id = "example.com".
  // response_uri = "https://example.com/12345/response"
  // nonce = "abcdefgh1234567890"
  const oid4vp_handover_hex = "835820DA25C527E5FB75BC2DD31267C02237C4462BA0C1BF37071F692E7DD93B10AD0B5820F6ED8E3220D3C59A5F17EB45F48AB70AEECF9EE21744B1014982350BD96AC0C572616263646566676831323334353637383930";
  const session_transcript_hex = "83F6F6835820DA25C527E5FB75BC2DD31267C02237C4462BA0C1BF37071F692E7DD93B10AD0B5820F6ED8E3220D3C59A5F17EB45F48AB70AEECF9EE21744B1014982350BD96AC0C572616263646566676831323334353637383930";
  // -------

  console.log("----------------");
  console.log("Annex B Examples");
  console.log("----------------");

  console.log("-------------------------");
  console.log("Example: IACA Certificate");
  console.log("-------------------------");
  console.log(iaca_cert_pem);

  console.log("-------------------------------");
  console.log("Example: Static Wallet Metadata");
  console.log("-------------------------------");
  console.log(JSON.stringify(static_wallet_metadata, null, 2));

  console.log("--------------------------------");
  console.log("Example: Presentation Definition");
  console.log("--------------------------------");
  console.log(JSON.stringify(presentation_definition, null, 2));

  console.log("-----------------------------------------");
  console.log("Example: Ephemeral Private Reader Key JWK");
  console.log("-----------------------------------------");
  console.log(JSON.stringify(ephemeral_private_key_reader, null, 2));

  console.log("----------------------------------------");
  console.log("Example: Ephemeral Public Reader Key JWK");
  console.log("----------------------------------------");
  console.log(JSON.stringify(ephemeral_public_key_reader, null, 2));

  console.log("------------------------------------------------");
  console.log("Example: Authorization Request Object parameters");
  console.log("------------------------------------------------");
  console.log(JSON.stringify(authz_request_parameters, null, 2));

  console.log("------------------------------------------------------");
  console.log("Example: Authorization Request Object JWT (JAR) Header");
  console.log("------------------------------------------------------");
  console.log(JSON.stringify(authz_request_jwt_header, null, 2));

  console.log("------------------------------------------------------------------------");
  console.log("Example: Static Private Reader Key JWK corresponding to 'x5c' JWT Header");
  console.log("------------------------------------------------------------------------");
  console.log(JSON.stringify(static_private_key_reader_auth, null, 2));

  console.log("----------------------------------------------------------");
  console.log("Example: Authorization Request Object encoded as JWT (JAR)");
  console.log("----------------------------------------------------------");
  console.log(authz_request_object_jwt);

  console.log("--------------------------------");
  console.log("Example: Presentation Submission");
  console.log("--------------------------------");
  console.log(JSON.stringify(presentation_submission, null, 2));

  console.log("-----------------");
  console.log("Example: VP Token");
  console.log("-----------------");
  console.log(vp_token);

  console.log("-------------------------------------------------");
  console.log("Example: Authorization Response Object parameters");
  console.log("-------------------------------------------------");
  console.log(JSON.stringify(authz_response_parameters, null, 2));

  console.log("-----------------------------------------------------------");
  console.log("Example: Authorization Response Object encoded as JWT (JARM)");
  console.log("-----------------------------------------------------------");
  console.log(authz_response_object_jwt);

  console.log("--------------------------------------------------------");
  console.log("Example: Authorization Response Object JWT (JARM) Header");
  console.log("--------------------------------------------------------");
  console.log(JSON.stringify(authz_response_jwt_header, null, 2));

  console.log("--------------------------------------");
  console.log("Example: Ephemeral Public MDOC Key JWK");
  console.log("--------------------------------------");
  console.log(JSON.stringify(ephemeral_public_key_mdoc, null, 2));

  console.log("--------------------------------------");
  console.log("Example: Ephemeral Private MDOC Key JWK");
  console.log("--------------------------------------");  
  console.log("In node-jose:encrypt.js: line 196: in the debug console, do console.log(JSON.stringify(epk.toJSON(true, [\"kid\"]), null, 2))");

  console.log("-----------------------------------------------------------");
  console.log("Example: OID4VPHandover CBOR Hex");
  console.log("-----------------------------------------------------------");
  console.log(oid4vp_handover_hex);

  console.log("-----------------------------------------------------------");
  console.log("Example: SessionTranscipt CBOR Hex");
  console.log("-----------------------------------------------------------");
  console.log(session_transcript_hex);
}

async function generate_authz_request_object_jwt(static_private_key_reader_auth, authz_request_jwt_header, authz_request_parameters) {
  const key = await jose.JWK.asKey(static_private_key_reader_auth);    
  const jwt = await jose.JWS.createSign({ format: 'compact', fields: authz_request_jwt_header }, key).
          update(JSON.stringify(authz_request_parameters)).
          final();
  return jwt;
}

async function generate_authz_response_object_jwt(
  authz_response_parameters, mdoc_generated_nonce, nonce, ephemeral_public_key_reader) {

  const encKey = await jose.JWK.asKey(ephemeral_public_key_reader);
  const apu = base64url(mdoc_generated_nonce);
  const apv = base64url(nonce);

  const jwe = await jose.JWE.createEncrypt({
      format: 'compact',
      fields: {
        alg: 'ECDH-ES',
        enc: 'A256GCM',
        apu: apu,
        apv: apv,
        kid: ephemeral_public_key_reader.kid
      },
  }, {
      key: encKey,
  }).update(JSON.stringify(authz_response_parameters)).final();

  return jwe;
}

// async function decrypt_authz_response_jwt_headers(authz_response_object_jwt, ephemeral_private_key_reader) {
//   const decKey = await jose.JWK.asKey(ephemeral_private_key_reader);
//   const decrypted = await jose.JWE.createDecrypt(decKey).decrypt(authz_response_object_jwt);
//   console.log('decrypted: ', JSON.parse(decrypted.payload.toString('utf8')));
// }

// async function extract() {
//   const args = process.argv.slice(2);

//   const key = fs.readFileSync(args[0]);
//   const keystore = jose.JWK.createKeyStore();

//   var DUMP_PRIVATE_KEY = ('true' == args[1]);

//   keystore
//     .add(key, 'pem')
//     .then(function(_) {
//       const jwks = keystore.toJSON(DUMP_PRIVATE_KEY);
//       console.log(JSON.stringify(jwks, null, 4));
//     });
// }

main()