Identity Common - TypeScript

Overview  |  Packages  |  Getting Started  |  Supported Environments  |  Contributing  |  Security  |  License

---

Overview

To avoid reinventing the wheel, many identity projects share common needs for data types and utility functions. Identity Common TypeScript provides a shared library of TypeScript types and utilities for identity-related projects, promoting consistency and reducing duplication across the ecosystem.

Goals

• Lightweight: Minimal dependencies to keep bundle sizes small
• Platform Agnostic: Works in Node.js, browsers, and React Native
• Reusable: Common utilities shared across identity solutions
• Interoperable: Ensures compatibility between different identity projects

Project Categories

The project is organized into six main categories:

Note: All packages within a category are versioned and published together, so they always share the same version. Each category is versioned independently of the other categories.

Core Identity Utilities

Generic, reusable utilities that can be used across any identity solution:

Package	Description	Status
@owf/identity-common	Base types, base64url utilities, and JWT decoding	Available
@owf/crypto	Web Crypto API wrappers + SHA hash functions (@noble/hashes)	Available
@owf/token-status-list	Status list bitstring handling, JWT and CWT/CBOR transport	Available
@owf/jose	JOSE/JWT implementation with common validation methods	Planned
@owf/cose	COSE/CWT implementation with common validation methods	Planned
@owf/x509	X.509 certificate and CRL parsing, creation, verification and revocation checking	Available

EUDI-Specific Tools

Tools specific to the European Digital Identity (EUDI) Wallet ecosystem:

Package	Description	Status
@owf/eudi-lote	ETSI TS 119 602 Lists of Trusted Entities (LoTE)	Available
@owf/eudi-tl	ETSI TS 119 612 XML Trusted Lists parsing and verification	Available
@owf/eudi-registration-certificate	ETSI TS 119 475 Wallet-Relying Party Registration Certificates	Available
@owf/eudi-attestation-schema	TS11 Catalogue of Attestations SchemaMeta	Available
@owf/eudi-access-certificate	ETSI TS 119 411-8 wallet-relying party access certificates	Available
@owf/eudi-sca	TS12 Strong Customer Authentication Payments according to the latest to-be-added ARF	In Progess

SD-JWT

Implementations of Selective Disclosure for JWTs (SD-JWT) and SD-JWT-based Verifiable Credentials (SD-JWT VC), previously developed in sd-jwt-js. The @sd-jwt/* packages are versioned separately from the @owf/* packages.

Package	Description	Status
@sd-jwt/core	SD-JWT (RFC 9901) issuance, presentation, and verification	Available
@sd-jwt/sd-jwt-vc	SD-JWT VC (draft-ietf-oauth-sd-jwt-vc) built on top of @sd-jwt/core	Available

mDOC

Implementation of ISO/IEC 18013-5 mDOC and mDL (mobile driving licence) documents, including the ISO/IEC 18013-7 and OpenID4VP presentation flows, previously developed in mdoc-ts. @owf/mdoc is versioned separately from the other @owf/* packages.

Package	Description	Status
@owf/mdoc	ISO/IEC 18013-5 mDOC and mDL issuance, presentation, and verification	Available

DCQL

Implementation of the Digital Credentials Query Language (DCQL) from OpenID4VP, previously developed in dcql-ts. dcql is versioned separately from the other packages.

Package	Description	Status
dcql	Create, validate, and execute DCQL queries, and validate presentations against them	Available

OpenID4VC

Implementations of OAuth 2.0, OpenID for Verifiable Credential Issuance (OpenID4VCI) and OpenID for Verifiable Presentations (OpenID4VP), previously developed in oid4vc-ts. The @openid4vc/* packages are versioned together, separately from the other packages.

Package	Description	Status
@openid4vc/oauth2	OAuth 2.0 client, authorization server and resource server, including PAR, PKCE, DPoP, JAR and attestation-based client authentication	Available
@openid4vc/openid4vci	OpenID4VCI issuer and client, from draft 11 up to 1.0	Available
@openid4vc/openid4vp	OpenID4VP verifier and client, from draft 18 up to 1.0	Available
@openid4vc/utils	Shared utilities for the @openid4vc/* packages	Available

Note: While the EUDI Wallet is built on open standards (OpenID4VC, SD-JWT VC), it requires specific extensions for Trust, Payments, and document signing that are better suited in dedicated packages.

---

Packages

@owf/identity-common

Base types (JwtPayload, JsonWebKey, Signer, Verifier, Hasher), base64url encode/decode, and JWT decoding.

npm install @owf/identity-common

View package documentation

@owf/crypto

Web Crypto API wrappers for signing, hashing, salt generation, and ES256/384/512 key pairs, plus SHA-256/384/512 hash functions powered by @noble/hashes.

npm install @owf/crypto

View package documentation

@owf/token-status-list

Status list implementation with bitstring handling, compression/decompression, JWT transport layer, and CWT/CBOR transport layer for Token Status Lists (draft-ietf-oauth-status-list).

npm install @owf/token-status-list

View package documentation

@owf/x509

Environment agnostic X.509 certificates and CRLs (RFC 5280): parsing, creation, signature verification and revocation checking. Signing and verification are callbacks, so private keys never enter the library.

npm install @owf/x509

View package documentation

@owf/eudi-lote

SDK for creating, signing, and validating Lists of Trusted Entities (LoTE) per ETSI TS 119 602.

npm install @owf/eudi-lote

View package documentation

@owf/eudi-tl

Parsing, validation, and XAdES signature verification for ETSI TS 119 612 XML Trusted Lists, exposing normalized trust anchors. The XML counterpart of @owf/eudi-lote.

npm install @owf/eudi-tl

View package documentation

@owf/eudi-registration-certificate

SDK for creating, signing, and validating Wallet-Relying Party Registration Certificates (WRPRC) per ETSI TS 119 475 v1.2.1.

npm install @owf/eudi-registration-certificate

View package documentation

@owf/eudi-access-certificate

The ETSI TS 119 411-8 profile for wallet-relying party access certificates on top of @owf/x509: parsing, profile validation and creation. Runs on servers, in browsers and in React Native.

npm install @owf/eudi-access-certificate

View package documentation

@owf/eudi-attestation-schema

SDK for creating, signing, and validating attestation schema metadata (SchemaMeta) per the EUDI TS11 Catalogue of Attestations specification.

npm install @owf/eudi-attestation-schema

View package documentation

@sd-jwt/core

Core library for SD-JWT (RFC 9901): encoding, decoding, selective disclosure, presentation, key binding, and verification.

npm install @sd-jwt/core

View package documentation

@sd-jwt/sd-jwt-vc

SD-JWT VC implementation built on top of @sd-jwt/core, with status list (revocation) and type metadata validation.

npm install @sd-jwt/sd-jwt-vc

View package documentation

@owf/mdoc

ISO/IEC 18013-5 mDOC and mDL: issue, hold, present, and verify CBOR encoded documents, with support for ISO/IEC 18013-7 and OpenID4VP session transcripts.

npm install @owf/mdoc

View package documentation

dcql

Digital Credentials Query Language (DCQL): create and validate queries, match them against credentials, and validate presentation results. Supports mso_mdoc, dc+sd-jwt and W3C VC formats, from OpenID4VP Draft 22 up to 1.0.

npm install dcql

View package documentation

@openid4vc/oauth2

OAuth 2.0 Authorization Framework implementation, including Pushed Authorization Requests, PKCE, DPoP, token introspection, JWT access tokens, resource indicators and attestation-based client authentication.

npm install @openid4vc/oauth2

View package documentation

@openid4vc/openid4vci

OpenID for Verifiable Credential Issuance: authorization code and pre-authorized code flows, credential offers, signed issuer metadata, key attestations and presentation during issuance. Supports 1.0 with backwards compatibility down to draft 11.

npm install @openid4vc/openid4vci

View package documentation

@openid4vc/openid4vp

OpenID for Verifiable Presentations: signed and unsigned requests (JAR), direct_post, direct_post.jwt, dc_api and dc_api.jwt response modes, JARM and transaction data. Supports 1.0 with backwards compatibility down to draft 18.

npm install @openid4vc/openid4vp

View package documentation

---

Getting Started

Installation

Install the packages you need:

# Using npm
npm install @owf/identity-common

# Using pnpm
pnpm add @owf/identity-common

# Using yarn
yarn add @owf/identity-common

Development Setup

This monorepo uses pnpm workspaces.

# Clone the repository
git clone https://github.com/openwallet-foundation-labs/identity-common-ts.git
cd identity-common-ts

# Install dependencies (requires pnpm)
pnpm install

# Run all tests, or a subset
pnpm test
pnpm test packages/mdoc

# Type-check the workspace
pnpm types:check

# Build all packages with tsdown
pnpm build

Within the workspace, packages export their TypeScript source, so tests, type checks, and examples run without a build. The built dist entrypoints are configured in publishConfig and only used for the published packages. See the Contributing Guide for all available scripts.

---

Supported Environments

This library is platform agnostic and supports:

• Node.js (>=22)
• Browsers (modern browsers with ES2020 support)
• React Native

Requirements

Your environment must provide:

• URL and URLSearchParams implementations
• A global fetch implementation (or provide it via callbacks)
• Global TextEncoder and TextDecoder implementations

React Native

When using these libraries in React Native you may need to add a polyfill for TextDecoder.

You can confirm this by checking if global.TextDecoder is available. It should be available for React Native > 0.85 or Expo SDK > 52.

If it is not available, make sure to add a polyfill like this one.

Platform-Agnostic Design

Because these libraries are platform agnostic, cryptographic operations and other platform-specific functionality must be provided via callbacks:

import { someFunction } from '@owf/identity-common'

// Provide platform-specific implementations
const result = await someFunction({
  crypto: {
    sha256: async (data) => { /* your implementation */ },
    randomBytes: (length) => { /* your implementation */ },
  },
  fetch: globalThis.fetch, // if not globally available
})

---

Related Projects

This library is designed to work with and support other OpenWallet Foundation projects:

• openid-federation-ts - OpenID Federation implementation
• credo-ts - Aries Framework JavaScript
• EUDIPLO - EUDI Wallet implementation

---

Contributing

We welcome contributions! Whether you're:

• Reporting bugs
• Suggesting features
• Improving documentation
• Submitting code changes

Please read our Contributing Guide to get started.

Adding a New Package

A script is provided to scaffold a new package with the correct structure and build config already in place:

pnpm create-package <name>           # e.g. jose
pnpm create-package <name> --eudi   # prefixes with eudi-

See the guide for adding packages for details.

---

License

This project is licensed under the Apache License Version 2.0 (Apache-2.0).