# @pagopa/io-react-native-wallet > Provide data structures, helpers and API for IO Wallet Latest version **3.7.3** (published 2026-09-14) · MIT license · 0 weekly downloads ## Install ```sh npm install @pagopa/io-react-native-wallet pnpm add @pagopa/io-react-native-wallet yarn add @pagopa/io-react-native-wallet bun add @pagopa/io-react-native-wallet ``` ## Health **Score 75/100 (B)** — status: active. Positive: has types; esm support; no vulnerabilities; has provenance; recently updated; high maintenance score; high quality score. Warnings: low downloads. ## Facts | | | |---|---| | Version | 3.7.3 | | Published | 2026-09-14 | | First published | 2023-07-20 | | Weekly downloads | 0 | | License | MIT | | TypeScript types | bundled | | Module format | ESM + CommonJS | | Node | >= 16.0.0 | | Dependencies | 17 | | Unpacked size | 2.7 MB | | Known vulnerabilities | 0 | | Install scripts | no | | Provenance | attested (GitHub Actions) | | GitHub stars | 13 | | Maintainers | pp-ps, giuseppe-nuccio-crea, diego.lagosmorales | | Keywords | react-native, ios, android | ## Links - npm: https://www.npmjs.com/package/@pagopa/io-react-native-wallet - Repository: https://github.com/pagopa/io-react-native-wallet - Homepage: https://github.com/pagopa/io-react-native-wallet#readme - Issues: https://github.com/pagopa/io-react-native-wallet/issues - npm.io page: https://npm.io/package/@pagopa/io-react-native-wallet ## Dependencies (17) - [zod](https://npm.io/package/zod.md) ^4.3.6 - [dcql](https://npm.io/package/dcql.md) ^3.0.0 - [uuid](https://npm.io/package/uuid.md) ^11.0.3 - [js-base64](https://npm.io/package/js-base64.md) ^3.7.8 - [js-sha256](https://npm.io/package/js-sha256.md) ^0.11.1 - [jsrsasign](https://npm.io/package/jsrsasign.md) ^11.1.0 - [parse-url](https://npm.io/package/parse-url.md) ^10.0.3 - [@sd-jwt/core](https://npm.io/package/@sd-jwt/core.md) ^0.19.0 - [@sd-jwt/types](https://npm.io/package/@sd-jwt/types.md) ^0.19.0 - [@sd-jwt/crypto-nodejs](https://npm.io/package/@sd-jwt/crypto-nodejs.md) ^0.19.0 - [@pagopa/io-wallet-utils](https://npm.io/package/@pagopa/io-wallet-utils.md) 1.5.6 - [@sd-jwt/jwt-status-list](https://npm.io/package/@sd-jwt/jwt-status-list.md) ^0.19.0 - [@pagopa/io-wallet-oauth2](https://npm.io/package/@pagopa/io-wallet-oauth2.md) 1.5.6 - [@pagopa/io-wallet-oid4vp](https://npm.io/package/@pagopa/io-wallet-oid4vp.md) 1.5.6 - [@pagopa/io-wallet-oid4vci](https://npm.io/package/@pagopa/io-wallet-oid4vci.md) 1.5.6 - [react-native-url-polyfill](https://npm.io/package/react-native-url-polyfill.md) ^2.0.0 - [@pagopa/io-wallet-oid-federation](https://npm.io/package/@pagopa/io-wallet-oid-federation.md) 1.5.6 ## Alternatives - [@sindresorhus/slugify](https://npm.io/package/@sindresorhus/slugify.md) — 3.7M weekly downloads - [solid-js](https://npm.io/package/solid-js.md) — 2.7M weekly downloads - [expo-glass-effect](https://npm.io/package/expo-glass-effect.md) — 2.5M weekly downloads - [nanoassert](https://npm.io/package/nanoassert.md) — 780.8K weekly downloads - [@ffmpeg/ffmpeg](https://npm.io/package/@ffmpeg/ffmpeg.md) — 529.5K weekly downloads ## Recent versions - 3.7.3 (latest) — 2026-09-14 - 2.0.0-next.9 (next) — 2025-08-06 - 3.7.2 — 2026-09-10 - 3.7.1 — 2026-09-08 - 3.7.0 — 2026-09-04 - 3.6.4 — 2026-08-26 - 3.6.3 — 2026-07-17 - 3.6.2 — 2026-07-09 - 3.6.1 — 2026-07-07 - 3.6.0 — 2026-07-03 - 3.5.1 — 2026-06-29 - 3.5.0 — 2026-06-25 - 3.4.4 — 2026-06-16 - 3.4.3 — 2026-06-16 - 3.4.2 — 2026-06-09 - … 110 more at https://npm.io/package/@pagopa/io-react-native-wallet/versions ## README # 🪪 @pagopa/io-react-native-wallet Library which provides a high level abstraction to interact with the IT-Wallet ecosystem via predefined flows, a set of utilities and helpers. It is designed to **support multiple versions of IT-Wallet specifications** via a unified API interface that keeps consumers unaware of specific versions nuances. Follows the [eudi-wallet-it-docs](https://github.com/italia/eudi-wallet-it-docs) specifications: - Version [1.0.0](https://github.com/italia/eudi-wallet-it-docs/releases/tag/1.0.0) - Version [1.4.6](https://github.com/italia/eudi-wallet-it-docs/releases/tag/1.4.6) The following table highlights the relationship between `io-react-native-wallet` and IT-Wallet specifications. | Library version | IT-Wallet version | |-----------------|-------------------| | `0.30.0` | `0.7.1` | | `2.x` | `1.0.0` | | `3.x` | `1.0.0`, `1.4.6` | ## Installation ```sh # Install the required dependencies specified in the peerDependencies of the package.json # Library yarn install @pagopa/io-react-native-wallet ``` ## Initialization To get started, create an instance of `IoWallet` specifying the desired IT-Wallet version. ```ts import { IoWallet } from "@pagopa/io-react-native-wallet" const wallet = new IoWallet({ version: "1.0.0" }) ``` After instantiation, the Wallet features are available under namespaces and are bound to the specified IT-Wallet version. ```ts // An example that retrieves Entity Configurations const { issuerConf } = await wallet.CredentialIssuance.evaluateIssuerTrust() const { rpConf } = await wallet.CredentialPresentation.evaluateRelyingPartyTrust() ``` It is possible to directly import errors and types without instantiating `IoWallet` if they are global and shared across versions. ```ts import { CredentialIssuance } from "@pagopa/io-react-native-wallet" type IssuerConf = CredentialIssuance.IssuerConfig // catch(error) { ... if (error instanceof CredentialIssuance.Errors.AuthorizationError) {} ``` ## Contexts The library makes use of contexts to delegate certain aspects of the implementation to the application. Some of these aspects might greatly vary depending on the consumer application. This allows the library to be more flexible by not forcing the application to use a specific implementation and also to focus on the core functionalities. Currently the library uses the following contexts:
CryptoContext (cryptographic assets handling) User flows implementions make use of tokens signed using asymmetric key pairs. Such cryptographic keys are managed by the device according to its specifications. It's not the intention of this package to handle such cryptographic assets and their peculiarities; instead, an handy interface is used to provide the right abstraction to allow responsibilities segregation: - The application knows who to generate/store/delete keys; - The package knows when and where to use them. The interface is `CryptoContext` inherited from the `@pagopa/io-react-native-jwt` package: The suggested library to manage cryptographic assets is [io-react-native-crypto](https://github.com/pagopa/io-react-native-crypto). ```ts export interface CryptoContext { /** * Retrieves the public key to be used in this context. * MUST be the same key at every invocation. * @returns The public key to be used * @throws If no keys are found */ getPublicKey: () => Promise; /** * Produce a cryptographic signature for a given value. * The signature MUST be produced using the private key paired with the public retrieved by getPublicKey() * @param value The value to be signed * @returns The signature * @throws If no keys are found */ getSignature: (value: string) => Promise; } ``` This package provides an helper to build a `CryptoContext` object bound to a given key tag ```ts import { createCryptoContextFor } from "@pagopa/io-react-native-wallet"; const ctx = createCryptoContextFor("my-tag"); ``` The **Be sure the key for `my-tag` already exists.**
IntegrityToken (device integrity) In order to ensure the integrity of the device, the library asks the consumer application to provide a way to generate a token that can be used to verify the device integrity. This is done by providing an IntegrityToken object formed as follows: ```ts /** * Interface for the integrity context which provides the necessary functions to interact with the integrity service. * The functions are platform specific and must be implemented in the platform specific code. * getHardwareKeyTag: returns the hardware key tag in a url safe format (e.g. base64url). * getAttestation: requests the attestation from the integrity service. * getHardwareSignatureWithAuthData: signs the clientData and returns the signature with the authenticator data. */ export interface IntegrityContext { getHardwareKeyTag: () => string; getAttestation: (nonce: string) => Promise; getHardwareSignatureWithAuthData: ( clientData: string ) => Promise; } ``` Usually this is achieved by using [Google Play Integrity API](https://developer.android.com/google/play/integrity/overview) and [Key Attestation](https://developer.android.com/privacy-and-security/security-key-attestation) on Android, [DCAppAttestService](https://developer.apple.com/documentation/devicecheck/establishing-your-app-s-integrity) on iOS. The suggested library to manage integrity is [io-react-native-integrity](https://github.com/pagopa/io-react-native-integrity).
LoggingContext (logging) In order to log useful information while implementing the flows, the library supports custom logging logic by providing a `loggingContext` to the static `Logger` class: ```ts export interface LoggingContext { logDebug: (msg: string) => void; logInfo: (msg: string) => void; logWarn: (msg: string) => void; logError: (msg: string) => void; } ``` An example of a custom logging context: ```ts import { Logging } from "@pagopa/io-react-native-wallet"; const loggingContext: Logging.LoggingContext = { logDebug(msg: string) { console.log("debug", msg); }, logInfo(msg: string) { console.log("info", msg); }, logWarn(msg: string) { console.log("warn", msg); }, logError(msg: string) { console.log("error", msg); }, }; Logging.Logger.getInstance().initLogging(loggingContext); ```
appFetch (making HTTP requests) This package is compatibile with any http client which implements [Fetch API](https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API). Functions that makes http requests allow for an optional `appFetch` parameter to provide a custom http client implementation. If not provided, the built-in implementation on the runtime is used.
### Flows Different flows are provided to perform common operations. Each flow is a set of steps that must be executed in a given order. The documentation is provided inside the related folder: - Wallet Instance - [Creation](./src/wallet-instance/README.md) - [Attestation](./src/wallet-instance-attestation/README.md) - Credentail - [Issuance](./src/credential/issuance/README.md) - [Offer](./src/credential/offer/README.md) - [Presentation](./src/credential/presentation/README.md) - [Status](./src/credential/status/README.md) - [Trustmark](./src/credential/trustmark/README.md) ### Example An example app is provided in [example](./example) folder which demostrates how to implemente these flows. To run it, follow the instructions in the [README](./example/README.md). ### Debug logging server A debug logging server can be used with the example app to receive logs from the app. To run it, follow the instructions in the [README](./debug-logging-server/README.md). ### Ecosystem `io-react-native-wallet` is designed to be used in [io-app](https://github.com/pagopa/io-app) and its ecosystem. There are a few libraries that can be used to implement the context required to implement the flows defined by this package. Below there's a list of the libraries and a schema of how they interact with each other: - [@pagopa/io-react-native-crypto](https://github.com/pagopa/io-react-native-crypto) - Used to manage cryptographic keys and signatures - [@pagopa/io-react-native-integrity](https://github.com/pagopa/io-react-native-integrity) - Used to manage and verify the integrity of the device - [@pagopa/io-react-native-secure-storage](https://github.com/pagopa/io-react-native-secure-storage) - Used to store data securely on the device ```mermaid graph TD; ioa[io-app] iornw[io-react-native-wallet] iornc[io-react-native-crypto] iorni[io-react-native-integrity] iornss[io-react-native-secure-storage] iornjwt[io-react-native-jwt] iorncie[io-react-native-cie] rnw(react-native-webview) ioa --> iornw iornw --> iornjwt iornw --> iorncie iornw --> rnw subgraph IoApp Deps direction TB iornc iorni iornlu iornss end subgraph IoRnWallet Deps iornjwt iorncie rnw end ioa --> |dependency to implement CryptoContext| iornc ioa --> |dependency to implement IntegrityContext| iorni ioa --> |dependency to implement AuthorizationContext| iornlu ioa --> |dependency to store credentials| iornss ``` --- _Source: https://npm.io/package/@pagopa/io-react-native-wallet · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._